CHANGES revision 56e30ebae6fdb0bdf94419caff3a43fb2d16c5df
4dc6fa1e92af7a62875b6f6f2931beefd58cb4faEvan Hunt4773. [doc] Fixed generating Doxygen documentation for functions
4dc6fa1e92af7a62875b6f6f2931beefd58cb4faEvan Hunt annotated using certain macros. Miscellaneous
4dc6fa1e92af7a62875b6f6f2931beefd58cb4faEvan Hunt Doxygen-related cleanups. [RT #46276]
b81b178ab919bdbd92021cfc7e6e8d971cd38e83Mark Andrews4771. [bug] When sending RFC 5011 refresh queries, disregard
b81b178ab919bdbd92021cfc7e6e8d971cd38e83Mark Andrews cached DNSKEY rrsets. [RT #46251]
bf216589c1a81e4431653a145b252b6ce367d7cdMark Andrews4770. [bug] Cache additional data from priming queries as glue.
7dbeb5e7f067585abfb12fac314a0d2a8f0dd040Evan Hunt Previously they were ignored as unsigned
7dbeb5e7f067585abfb12fac314a0d2a8f0dd040Evan Hunt non-answer data from a secure zone, and never
6e10f87913db176724e89b52e686b0992898da75Mukund Sivaraman actually got added to the cache, causing hints
6e10f87913db176724e89b52e686b0992898da75Mukund Sivaraman to be used frequently for root-server
6e10f87913db176724e89b52e686b0992898da75Mukund Sivaraman addresses, which triggered re-priming. [RT #45241]
6e10f87913db176724e89b52e686b0992898da75Mukund Sivaraman4769. [bug] Enforce the requirement that the managed keys
37f6466aa327a5b444e41c8cb57ab5caacfe6279Evan Hunt directory (specified by "managed-keys-directory",
37f6466aa327a5b444e41c8cb57ab5caacfe6279Evan Hunt and defaulting to the working directory if not
36babd3e630f507843c423207cbbbd4758d7cffaTinderbox User specified) must be writable. [RT #46077]
4162d3b36d1a3c25724c7e37ce839f67b2352bbbMark Andrews4766. [cleanup] Addresss Coverity warnings. [RT #46150]
4162d3b36d1a3c25724c7e37ce839f67b2352bbbMark Andrews4763. [contrib] Improve compatibility when building MySQL DLZ
ce6f0c122140647b5652c0d4de523c994fcfea08Michał Kępień module by using mysql_config if available.
f72f5879424ce4081893b306b8c31f29fe9205e0Evan Hunt4762. [func] "update-policy local" is now restricted to updates
f72f5879424ce4081893b306b8c31f29fe9205e0Evan Hunt from local addresses. (Previously, other addresses
f72f5879424ce4081893b306b8c31f29fe9205e0Evan Hunt were allowed so long as updates were signed by the
f72f5879424ce4081893b306b8c31f29fe9205e0Evan Hunt local session key.) [RT #45492]
1073e2001caee13cc1fa52de97feddd633d50fd8Evan Hunt4761. [protocol] Add support for DOA. [RT #45612]
1073e2001caee13cc1fa52de97feddd633d50fd8Evan Hunt4759. [func] Add logging channel "trust-anchor-telementry" to
1073e2001caee13cc1fa52de97feddd633d50fd8Evan Hunt record trust-anchor-telementry in incoming requests.
78608b0a454246d0e1e0169f1d671b8427e48199Francis Dupont Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
11c4e6d8fcc9bc148543c1ee632315e096d2bcf2Michał Kępień are logged. [RT #46124]
11c4e6d8fcc9bc148543c1ee632315e096d2bcf2Michał Kępień4758. [doc] Remove documentation of unimplemented "topology".
59122481b2aa65de4518677c6949f03711d2553aEvan Hunt4756. [bug] Interrupting dig could lead to an INSIST failure after
59122481b2aa65de4518677c6949f03711d2553aEvan Hunt certain errors were encountered while querying a host
fe6d2fd8338d6f6ac4c79bea9a8daad903460040Evan Hunt whose name resolved to more than one address. Change
fe6d2fd8338d6f6ac4c79bea9a8daad903460040Evan Hunt 4537 increased the odds of triggering this issue by
fe6d2fd8338d6f6ac4c79bea9a8daad903460040Evan Hunt causing dig to hang indefinitely when certain error
fe6d2fd8338d6f6ac4c79bea9a8daad903460040Evan Hunt paths were evaluated. dig now also retries TCP queries
05a456499af940762d6658366abafb220c5053ccMark Andrews (once) if the server gracefully closes the connection
05a456499af940762d6658366abafb220c5053ccMark Andrews before sending a response. [RT #42832, #45159]
cb4e0ef4e2c8a942f99af6ecc6aa564c903b00a0Mark Andrews4755. [cleanup] Silence unnecessary log message when NZF file doesn't
cb4e0ef4e2c8a942f99af6ecc6aa564c903b00a0Mark Andrews exist. [RT #46186]
cb4e0ef4e2c8a942f99af6ecc6aa564c903b00a0Mark Andrews4754. [bug] dns_zone_setview needs a two stage commit to properly
e3efc855f9f0acc9b14bb8e9c833e0fa209068b6Mark Andrews handle errors. [RT #45841]
e3efc855f9f0acc9b14bb8e9c833e0fa209068b6Mark Andrews4753. [contrib] Software obtainable from known upstream locations
e56c0854589d936f911e0aac2f2bf53cbc8a6af7Michał Kępień (i.e., zkt, nslint, query-loc) has been removed.
e56c0854589d936f911e0aac2f2bf53cbc8a6af7Michał Kępień Links to these and other packages can be found at
e56c0854589d936f911e0aac2f2bf53cbc8a6af7Michał Kępień https://www.isc.org/community/tools [RT #46182]
6727802528c27484e0d36d70f0b936022d3226e3Michał Kępień4752. [test] Add unit test for isc_net_pton. [RT #46171]
6727802528c27484e0d36d70f0b936022d3226e3Michał Kępień4749. [func] The ISC DLV service has been shut down, and all
4d41be5f9e86c11a6f00e2b005cfc5abae2c1ab3Mark Andrews DLV records have been removed from dlv.isc.org.
4d41be5f9e86c11a6f00e2b005cfc5abae2c1ab3Mark Andrews - Removed references to ISC DLV in documentation
bfde61d5194a534d800f3b90008d1f52261922c5Mark Andrews - Removed DLV key from bind.keys
bfde61d5194a534d800f3b90008d1f52261922c5Mark Andrews - No longer use ISC DLV by default in delv
6b56350522d18f10edbf2d3778cd0fea74e4f3d2Mark Andrews4748. [cleanup] Sprintf to snprintf coversions. [RT #46132]
42ae02626d05921ca7508ae6f9c48ea699596bc6Mark Andrews4746. [cleanup] Add configured prefixes to configure summary
41caed6e2d7e9caace30e6c59f199ab6bd438f01Mark Andrews output. [RT #46153]
72b322cde0e51c4c87df0c9e3226deac95dfb4ceMark Andrews4745. [test] Add color-coded pass/fail messages to system
28ea558bc80f75e46d77ea0533232bb9d4e644f7Mark Andrews tests when running on terminals that support them.
28ea558bc80f75e46d77ea0533232bb9d4e644f7Mark Andrews4744. [bug] Suppress trust-anchor-telementry queries if
28ea558bc80f75e46d77ea0533232bb9d4e644f7Mark Andrews validation is disabled. [RT #46131]
6045abbc9a0d7d449a13b6fbfbf32d419b6bee96Mark Andrews4741. [bug] Make isc_refcount_current() atomically read the
6045abbc9a0d7d449a13b6fbfbf32d419b6bee96Mark Andrews counter value. [RT #46074]
f7d148398ca4511551c737e655b15f7d0d59a783Mark Andrews4740. [cleanup] Avoid triggering format-truncated warnings. [RT #46107]
3a84275b10ab16965e86f6ca97e70c1bdca885a0Mark Andrews4739. [cleanup] Address clang static analysis warnings. [RT #45952]
3a84275b10ab16965e86f6ca97e70c1bdca885a0Mark Andrews4738. [port] win32: strftime mishandles %Z. [RT #46039]
398834f7559617bdfd6c10ba555609a2f306e3d4Mark Andrews4737. [cleanup] Address Coverity warnings. [RT #46012]
398834f7559617bdfd6c10ba555609a2f306e3d4Mark Andrews4736. [cleanup] (a) Added comments to NSEC3-related functions in
398834f7559617bdfd6c10ba555609a2f306e3d4Mark Andrews lib/dns/zone.c. (b) Refactored NSEC3 salt formatting
398834f7559617bdfd6c10ba555609a2f306e3d4Mark Andrews code. (c) Minor tweaks to lock and result handling.
28061f80b698171892e81c0856bc722190947998Evan Hunt4735. [bug] Add @ISC_OPENSSL_LIBS@ to isc-config. [RT #46078]
a785bf2c39c6f223a93c27bbff81591b38095577Mark Andrews4734. [contrib] Added sample configuration for DNS-over-TLS in
a03f4b1ea4f1a4a70963fbeb606841c217f9e5f3Evan Hunt4731. [bug] Fix use after free when closing an LMDB. [RT #46000]
d315545e6db6792692fe2dcb788ac6717a33b75fEvan Hunt4730. [bug] Fix out of bounds access in DHCID totext() method.
d315545e6db6792692fe2dcb788ac6717a33b75fEvan Hunt4729. [bug] Don't use memset() to wipe memory, as it may be
00f131293520b70728cd48840e09953fa45a745bMark Andrews removed by compiler optimizations when the
00f131293520b70728cd48840e09953fa45a745bMark Andrews memset() occurs on automatic stack allocation
00f131293520b70728cd48840e09953fa45a745bMark Andrews just before function return. [RT #45947]
b2e71853060a384070d422afda6d1c692ff608e3Mark Andrews4728. [func] Use C11's stdatomic.h instead of isc_atomic
b2e71853060a384070d422afda6d1c692ff608e3Mark Andrews where available. [RT #40668]
42c1acfa478aacfbda2d298cf74a137de2df4b87Michał Kępień4727. [bug] Retransferring an inline-signed slave using NSEC3
42c1acfa478aacfbda2d298cf74a137de2df4b87Michał Kępień around the time its NSEC3 salt was changed could result
42c1acfa478aacfbda2d298cf74a137de2df4b87Michał Kępień in an infinite signing loop. [RT #45080]
214b53880b6d77359f60feccb91bd2589059300aEvan Hunt4726. [port] Prevent setsockopt() errors related to TCP_FASTOPEN
214b53880b6d77359f60feccb91bd2589059300aEvan Hunt from being logged on FreeBSD if the kernel does not
dd5375de0a7a515ee4fb2fd217e9577259d38c07Mark Andrews support it. Notify the user when the kernel does
dd5375de0a7a515ee4fb2fd217e9577259d38c07Mark Andrews support TCP_FASTOPEN, but it is disabled by sysctl.
dd5375de0a7a515ee4fb2fd217e9577259d38c07Mark Andrews Add a new configure option, --disable-tcp-fastopen, to
3a58e1fefb0a9fd5dab11f271a320c6b90473f76Mukund Sivaraman disable use of TCP_FASTOPEN altogether. [RT #44754]
3a58e1fefb0a9fd5dab11f271a320c6b90473f76Mukund Sivaraman4725. [bug] Nsupdate: "recvsoa" was incorrectly reported for
7c67b8c2b076971e6a9f8b0db932201366f13d47Mark Andrews failures in sending the update message. The correct
7c67b8c2b076971e6a9f8b0db932201366f13d47Mark Andrews location to be reported is "update_completed".
5aed5dc329a2bf1340e9ff2256c1cf4e3005ea0bMark Andrews4723. [bug] Statistics counter DNSTAPdropped was misidentified
387f5e872d40426acbc739d2e9b2bb37c123dd56Mark Andrews as DNSSECdropped. [RT #46002]
c28e44f3f8bc46c6bf1c15cc06af0c42fcd7e924Evan Hunt4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of
c28e44f3f8bc46c6bf1c15cc06af0c42fcd7e924Evan Hunt strlcpy() and strlcat() for safety. [RT #45981]
3440cf9c60cd5d35634e7f274fd3eccbba2173a5Evan Hunt4719. [bug] Address PVS static analyzer warnings. [RT #45946]
3440cf9c60cd5d35634e7f274fd3eccbba2173a5Evan Hunt4717. [bug] Treat replies with QCOUNT=0 as truncated if TC=1,
387f5e872d40426acbc739d2e9b2bb37c123dd56Mark Andrews FORMERR if TC=0, and log the error correctly.
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews4715. [bug] TreeMemMax was mis-identified as a second HeapMemMax
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews in the Json cache statistics. [RT #45980]
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt4714. [port] openbsd/libressl: add support for building with
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt --enable-openssl-hash. [RT #45982]
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt4713. [cleanup] Minor revisions to RPZ code to reduce
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt differences with the development branch. [RT #46037]
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt4712. [bug] "dig +domain" and "dig +search" didn't retain the
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt search domain when retrying with TCP. [RT #45547]
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt4711. [test] Some RR types were missing from genzones.sh.
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews4709. [cleanup] Use dns_name_fullhash() to hash names for RRL.
59d940391ce90963cd3f4b22201b3fca2ffda22aMark Andrews4703. [bug] BINDInstall.exe was missing some buffer length checks.
6b432e11497f905a6b6f048df3e8a01ce8abbb1eMark Andrews4698. [port] Add --with-python-install-dir configure option to allow
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews specifying a nonstandard installation directory for
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews Python modules. [RT #45407]
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews4697. [bug] Restore workaround for Microsoft Windows TSIG hash
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews computation bug. [RT #45854]
9604a49da0130534f2f4aaa0cbfa78b5f589196fMark Andrews4696. [port] Enable filter-aaaa support by default on Windows
9604a49da0130534f2f4aaa0cbfa78b5f589196fMark Andrews builds. [RT #45883]
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews4695. [bug] cookie-secrets were not being properly checked by
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews named-checkconf. [RT #45886]
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt4692. [bug] Fix build failures with libressl introduced in 4676.
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt4690. [bug] Command line options -4/-6 were handled inconsistently
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews between tools. [RT #45632]
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews4689. [cleanup] Turn on minimal responses for CDNSKEY and CDS in
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews addition to DNSKEY and DS. Thanks to Tony Finch.
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews4688. [protocol] Check and display EDNS KEY TAG options (RFC 8145) in
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews messages. [RT #44804]
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews4686. [bug] dnssec-settime -p could print a bogus warning about
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman key deletion scheduled before its inactivation when a
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman key had an inactivation date set but no deletion date
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman set. [RT #45807]
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman4685. [bug] dnssec-settime incorrectly calculated publication and
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman activation dates for a successor key. [RT #45806]
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt4684. [bug] delv could send bogus DNS queries when an explicit
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt server address was specified on the command line along
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt with -4/-6. [RT #45804]
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews4683. [bug] Prevent nsupdate from immediately exiting on invalid
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews user input in interactive mode. [RT #28194]
9689922a0d936b04feb418fbaf4c1420f745ea58Mark Andrews4682. [bug] Don't report errors on records below a DNAME.
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt4680. [bug] Fix failing over to another master server address when
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt nsupdate is used with GSS-API. [RT #45380]
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt4679. [cleanup] Suggest using -o when dnssec-verify finds a SOA record
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt not at top of zone and -o is not used. [RT #45519]
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt4678. [bug] geoip-use-ecs has the wrong type when geoip support
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt is disabled at configure time. [RT #45763]
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt4677. [cleanup] Split up the main function in dig to better support
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman the iOS app version. [RT #45508]
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman4676. [cleanup] Allow BIND to be built using OpenSSL 1.0.X with
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman deprecated functions removed. [RT #45706]
9a8b2b3ab35fbbdf03acba32dade90ad91f75742Mukund Sivaraman4675. [cleanup] Don't use C++ keyword class. [RT #45726]
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman4673. [port] Silence GCC 7 warnings. [RT #45592]
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman4671. [bug] Fix a race condition that could cause the
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman resolver to crash with assertion failure when
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman chasing DS in specific conditions with a very
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman short RTT to the upstream nameserver. [RT #45168]
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman4670. [cleanup] Ensure that a request MAC is never sent back
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman in an XFR response unless the signature was
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman verified. [RT #45494]
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman4668. [bug] Use localtime_r and gmtime_r for thread safety.
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman4667. [cleanup] Refactor RDATA unit tests. [RT #45610]
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt4666. [bug] dnssec-keymgr: Domain names beginning with digits (0-9)
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt could cause a parser error when reading the policy
2883bbaef3b2b712acfb89358f5a9c7ebb62733bEvan Hunt file. This now works correctly so long as the domain
527163f0e5e8639bcceb7fe52387285042f5b24cEvan Hunt name is quoted. [RT #45641]
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt4665. [protocol] Added support for ED25519 and ED448 DNSSEC signing
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt algorithms (RFC 8080). (Note: these algorithms
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt depend on code currently in the development branch
4c432aae90bc9b220725ca7df5a6af40cf4c74b3Mark Andrews of OpenSSL which has not yet been released.)
3195754154292f0651c195433607696a259a98e2Evan Hunt4663. [cleanup] Clarify error message printed by dnssec-dsfromkey.
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt4662. [performance] Improve cache memory cleanup of zero TTL records
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt by putting them at the tail of LRU header lists.
fd0d60b3a0139c040fedb0bb765fd9667831412eMark Andrews4661. [bug] A race condition could occur if a zone was reloaded
fd0d60b3a0139c040fedb0bb765fd9667831412eMark Andrews while resigning, triggering a crash in
3001a1b4e6298466882a4147307b4c28a3b08f91Mark Andrews rbtdb.c:closeversion(). [RT #45276]
3001a1b4e6298466882a4147307b4c28a3b08f91Mark Andrews4660. [bug] Remove spurious "peer" from Windows socket log
1bce43adcc11d21afaf645cbe466553aabc725b2Mark Andrews messages. [RT #45617]
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews4659. [bug] Remove spurious log message about lmdb-mapsize
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews not being supported when parsing builtin
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews configuration file. [RT #45618]
52cae869e0296713b764f6065bdad80832d4c493Mark Andrews4658. [bug] Clean up build directory created by "setup.py install"
52cae869e0296713b764f6065bdad80832d4c493Mark Andrews immediately. [RT #45628]
403e7b451207fe6514a5d641562713b1af233b9cEvan Hunt4657. [bug] rrchecker system test result could be improperly
403e7b451207fe6514a5d641562713b1af233b9cEvan Hunt determined. [RT #45602]
62b5dd5b09cb575281f8193476b58a4bd9870fc9Evan Hunt4656. [bug] Apply "port" and "dscp" values specified in catalog
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews zone's "default-masters" option to the generated
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews configuration of its member zones. [RT #45545]
8c31a25f3ff5d6783c7add7c887e52f7031d173dMark Andrews4655. [bug] Lack of seccomp could be falsely reported. [RT #45599]
8bcd80824c51c802c2927236b012cd526f569b04Mark Andrews4654. [cleanup] Don't use C++ keywords delete, new and namespace.
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews4652. [bug] Nsupdate could attempt to use a zeroed address on
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews server timeout. [RT #45417]
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt4651. [test] Silence coverity warnings in tsig_test.c. [RT #45528]
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt --- 9.11.2 released ---
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt --- 9.11.2rc2 released ---
94a94fca2444bb18b4bf74d6c5dbcbb89f139237Mark Andrews4653. [bug] Reorder includes to move @DST_OPENSSL_INC@ and
b81977ae70138c9befd8fa4bb66b6145e1986561Mark Andrews @ISC_OPENSSL_INC@ after shipped include directories.
43769594c0e42e9822ef71daee8bbf35252d9300Evan Hunt --- 9.11.2rc1 released ---
9ecedaea58defeadaf54dfc1211270653e0657ceMark Andrews4649. [bug] The wrong zone was logged when a catalog zone is added.
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt4648. [bug] "rndc reconfig" on a slave no longer causes all member
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt zones of configured catalog zones to be removed from
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt configuration. [RT #45310]
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt4647. [bug] Change 4643 broke verification of TSIG signed TCP
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt message sequences where not all the messages contain
85a26f938eac3e147a48f671f6a6b5ee9cd1767dEvan Hunt TSIG records. These may be used in AXFR and IXFR
85a26f938eac3e147a48f671f6a6b5ee9cd1767dEvan Hunt responses. [RT #45509]
4901f2c10b4393fd4407c8feb022c3415ab323c7Mark Andrews4645. [bug] Fix PKCS#11 RSA parsing when MD5 is disabled.
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt --- 9.11.2b1 released ---
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt4643. [security] An error in TSIG handling could permit unauthorized
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt zone transfers or zone updates. (CVE-2017-3142)
b5ad0916242ca4ce3f053efe78c1725dce996717Mark Andrews (CVE-2017-3143) [RT #45383]
e2ec0753ce8ed53c870141541b34ebb44598cef7Tinderbox User4642. [cleanup] Add more logging of RFC 5011 events affecting the
da23e32e410eb9b106ae926858140303bfd1d96fMark Andrews status of managed keys: newly observed keys,
da23e32e410eb9b106ae926858140303bfd1d96fMark Andrews deletion of revoked keys, etc. [RT #45354]
18ab9a0a34ea025a6bbb09b711b00cfa11eec1b5Evan Hunt4641. [cleanup] Parallel builds (make -j) could fail with --with-atf /
18ab9a0a34ea025a6bbb09b711b00cfa11eec1b5Evan Hunt --enable-developer. [RT #45373]
c742ef745e1f3400b79c9df3d188896ccbb50f15Evan Hunt4640. [bug] If query_findversion failed in query_getdb due to
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews memory failure the error status was incorrectly
5688a47c152def63dd2f5fb9a93911a0df46162eTinderbox User discarded. [RT #45331]
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews4639. [bug] Fix a regression in --with-tuning reporting introduced
4441328a1d38bbb2ec20a0a219b84d472312da26Mark Andrews by change 4488. [RT #45396]
4441328a1d38bbb2ec20a0a219b84d472312da26Mark Andrews4638. [bug] Reloading or reconfiguring named could fail on
f2e8131f508ca9c92bf7601c80db3c9e1d3bc4ebMark Andrews some platforms when LMDB was in use. [RT #45203]
22e3ffcf2c52114092b2dbdf2bc1872371c96192Mark Andrews4636. [bug] Normalize rpz policy zone names when checking for
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews existence. [RT #45358]
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews4635. [bug] Fix RPZ NSDNAME logging that was logging
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews failures as NSIP. [RT #45052]
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews4634. [contrib] check5011.pl needs to handle optional space before
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews semi-colon in +multi-line output. [RT #45352]
81df1363fbd13f3a80987704c23e14413e6f1d2aMark Andrews4633. [maint] Updated AAAA (2001:500:200::b) for B.ROOT-SERVERS.NET.
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews4632. [security] The BIND installer on Windows used an unquoted
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews service path, which can enable privilege escalation.
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews (CVE-2017-3141) [RT #45229]
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt4631. [security] Some RPZ configurations could go into an infinite
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt query loop when encountering responses with TTL=0.
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt (CVE-2017-3140) [RT #45181]
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt4630. [bug] "dyndb" is dependent on dlopen existing / being
d6080de9be23024f5f7a1e40d0cb06df94cdcb72Mark Andrews enabled. [RT #45291]
2a2618356ecdf5962230fe11606d2b106a638295Tinderbox User4629. [bug] dns_client_startupdate could not be called with a
6649db1ca4f3dc2d14f41f77e03867ac013215f9Evan Hunt running client. [RT #45277]
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk4628. [bug] Fixed a potential reference leak in query_getdb().
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk4626. [test] Added more tests for handling of different record
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews ordering in CNAME and DNAME responses. [QA #430]
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews4625. [bug] Running "rndc addzone" and "rndc delzone" at close
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews to the same time could trigger a deadlock if using
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews LMDB. [RT #45209]
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews4623. [bug] Use --with-protobuf-c and --with-libfstrm to find
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews protoc-c and fstrm_capture. [RT #45187]
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews4622. [bug] Remove unnecessary escaping of semicolon in CAA and
544e2b48ece5724f2c4a0d6636048a72335cfd54Evan Hunt URI records. [RT #45216]
23ac7e663494ffdfd78b52d1a0a62d93f0d30d93Mark Andrews4621. [port] Force alignment of oid arrays to silence loader
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews warnings. [RT #45131]
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews4620. [port] Handle EPFNOSUPPORT being returned when probing
b1ab6766f7cf3d2c189b415c50cc574d9b21a9a2Mark Andrews to see if a socket type is supported. [RT #45214]
bc2510a6a5e406bdef580452e6ae3e1298a7d1d6Mark Andrews4619. [bug] Call isc_mem_put instead of isc_mem_free in
bc2510a6a5e406bdef580452e6ae3e1298a7d1d6Mark Andrews bin/named/server.c:setup_newzones. [RT #45202]
1160ea4c2847b276946cf6bd00504929ec4f6e44Mark Andrews4618. [bug] Check isc_mem_strdup results in dns_view_setnewzones.
1160ea4c2847b276946cf6bd00504929ec4f6e44Mark Andrews Add logging for lmdb call failures. [RT #45204]
348d80fb8490f4547aaa569e5f7ea2a032543bacMark Andrews4617. [test] Update rndc system test to be more delay tolerant.
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews4616. [bug] When using LMDB, zones deleted using "rndc delzone"
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews were not correctly removed from the new-zone
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews database. [RT #45185]
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews4615. [bug] AD could be set on truncated answer with no records
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews present in the answer and authority sections.
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews4614. [test] Fixed an error in the sockaddr unit test. [RT #45146]
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews4612. [bug] Silence 'may be use uninitalised' warning and simplify
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews the code in lwres/getaddinfo:process_answer.
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt4611. [bug] The default LMDB mapsize was too low and caused
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt errors after few thousand zones were added using
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt rndc addzone. A new config option "lmdb-mapsize"
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews has been introduced to configure the LMDB
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews mapsize depending on operational needs.
83a28ca274521e15086fc39febde507bcc4e145eMark Andrews4609. [cleanup] Rearrange makefiles to enable parallel execution
1585a9f239969a65b974ff741ff2a7a79b148891Evan Hunt (i.e. "make -j"). [RT #45078]
1585a9f239969a65b974ff741ff2a7a79b148891Evan Hunt4608. [func] DiG now warns about .local queries which are reserved
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt for Multicast DNS. [RT #44783]
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt4606. [port] Stop using experimental "Experimental keys on scalar"
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews feature of perl as it has been removed. [RT #45012]
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews4604. [bug] Don't use ERR_load_crypto_strings() when building
6ae22c411920be5f5fd1780ac0cd44cbb21b144aMukund Sivaraman with OpenSSL 1.1.0. [RT #45117]
6ae22c411920be5f5fd1780ac0cd44cbb21b144aMukund Sivaraman4603. [doc] Automatically generate named.conf(5) man page
74d98566ed6a2280ea84d146e7c81275f1c5649dMark Andrews from doc/misc/options. Thanks to Tony Finch.
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan Hunt4602. [func] Threads are now set to human-readable
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan Hunt names to assist debugging, when supported by
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan Hunt the OS. [RT #43234]
0c2d891abeb2b35e290ca9da29e1227110b5be23Mark Andrews4601. [bug] Reject incorrect RSA key lengths during key
0c2d891abeb2b35e290ca9da29e1227110b5be23Mark Andrews generation and and sign/verify context
fd017eea638d690b6a90c4d2a3f2ebe51c472173Mark Andrews creation. [RT #45043]
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews4600. [bug] Adjust RPZ trigger counts only when the entry
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews being deleted exists. [RT #43386]
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews4599. [bug] Fix inconsistencies in inline signing time
6ef1cdec9a52a21a3db649817184702abfe6dd95Mark Andrews comparison that were introduced with the
6ef1cdec9a52a21a3db649817184702abfe6dd95Mark Andrews introduction of rdatasetheader->resign_lsb.
1008577c673876037d60b5241a8f1de0d1b680d9Tinderbox User4597. [bug] The validator now ignores SHA-1 DS digest type
294ef74e5ad68d898207c4fb36d8b18d526a11f6Curtis Blackburn when a DS record with SHA-384 digest type is
fe6557e5901162308e716791077ace6811728242Mark Andrews present and is a supported digest type.
21e5f9c5cdb3052f282e3dbdc2dc47f29cfe1187Mark Andrews4596. [bug] Validate glue before adding it to the additional
21e5f9c5cdb3052f282e3dbdc2dc47f29cfe1187Mark Andrews section. This also fixes incorrect TTL capping
4df43743ab1ef4bad2b96840a7b2b9c77bc82bc2Mark Andrews when the RRSIG expired earlier than the TTL.
60c47284e4d752ccefa57f47b61a9c82899f3297Mark Andrews4593. [doc] Update README using markdown, remove outdated FAQ
60c47284e4d752ccefa57f47b61a9c82899f3297Mark Andrews file in favor of the knowledge base.
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews4592. [bug] A race condition on shutdown could trigger an
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews assertion failure in dispatch.c. [RT #43822]
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews4591. [port] Addressed some python 3 compatibility issues.
7a3d063847290b204dfcedaef7288033c8424bfbEvan Hunt Thanks to Ville Skytta. [RT #44955] [RT #44956]
7a3d063847290b204dfcedaef7288033c8424bfbEvan Hunt4590. [bug] Support for PTHREAD_MUTEX_ADAPTIVE_NP was not being
b243aa40f97cb2f77fbe746977d61f0a8c2e9194Mark Andrews properly detected. [RT #44871]
b243aa40f97cb2f77fbe746977d61f0a8c2e9194Mark Andrews4589. [cleanup] "configure -q" is now silent. [RT #44829]
2b8679cf0f832c5e55121eb23806da577d272dd7Francis Dupont4588. [bug] nsupdate could send queries for TKEY to the wrong
6db55b4ff9b099bc8d6621f6e13ec1f087d35e04Mark Andrews server when using GSSAPI. Thanks to Tomas Hozza.
2ac8829a8a7ce2f5fbcf006c3bf6c5a6c821abf3Mark Andrews4587. [bug] named-checkzone failed to handle occulted data below
744c1db6352c4c3f11c8538e4a2a57c8b0e0d570Mark Andrews DNAMEs correctly. [RT #44877]
744c1db6352c4c3f11c8538e4a2a57c8b0e0d570Mark Andrews4586. [func] dig, host and nslookup now use TCP for ANY queries.
8a5809527e6c85e39699901712a455d5480907c1Evan Hunt4585. [port] win32: Set CompileAS value. [RT #42474]
8a5809527e6c85e39699901712a455d5480907c1Evan Hunt4584. [bug] A number of memory usage statistics were not properly
bd19cef22382906a11fb6f1ffdef11038e432bcaMark Andrews reported when they exceeded 4G. [RT #44750]
bd19cef22382906a11fb6f1ffdef11038e432bcaMark Andrews4574. [bug] Dig leaked memory with multiple +subnet options.
31ad8218ccdffd986b9487e3bcb9df089e47d0ddTinderbox User4555. [func] dig +ednsopt: EDNS options can now be specified by
669e108d6753b27a9745cc506193a9e0b32d217cEvan Hunt name in addition to numeric value. [RT #44461]
669e108d6753b27a9745cc506193a9e0b32d217cEvan Hunt --- 9.11.1 released ---
45fd95544cd650a8e6a0fc39b656d1109b811ac0Evan Hunt --- 9.11.1rc3 released ---
76af83c9adb772f7b045c62cf8b411165bfaa5efMark Andrews4582. [security] 'rndc ""' could trigger a assertion failure in named.
76af83c9adb772f7b045c62cf8b411165bfaa5efMark Andrews (CVE-2017-3138) [RT #44924]
6552f33198438390724c5823b8dbcf477ec9638cEvan Hunt4581. [port] Linux: Add getpid and getrandom to the list of system
6552f33198438390724c5823b8dbcf477ec9638cEvan Hunt calls named uses for seccomp. [RT #44883]
9e0cd8be9aa2b24fa373fe227c5eaf5641ac62f4Mark Andrews4580. [bug] 4578 introduced a regression when handling CNAME to
9e0cd8be9aa2b24fa373fe227c5eaf5641ac62f4Mark Andrews referral below the current domain. [RT #44850]
2a1860ad83294da4abe34a72bdb6f5a28b87f2efMark Andrews --- 9.11.1rc2 released ---
de6469b663b55aacd19bdcdd925ce381f0c4b4dfMark Andrews4578. [security] Some chaining (CNAME or DNAME) responses to upstream
de6469b663b55aacd19bdcdd925ce381f0c4b4dfMark Andrews queries could trigger assertion failures.
de6469b663b55aacd19bdcdd925ce381f0c4b4dfMark Andrews (CVE-2017-3137) [RT #44734]
d389069a397c99347b5b281f90577e19e7662b03Mark Andrews4575. [security] DNS64 with "break-dnssec yes;" can result in an
d389069a397c99347b5b281f90577e19e7662b03Mark Andrews assertion failure. (CVE-2017-3136) [RT #44653]
fd2f4551d9498e1dce8e44a24e5e886ef2aa75cbMark Andrews --- 9.11.1rc1 released ---
fd2f4551d9498e1dce8e44a24e5e886ef2aa75cbMark Andrews4571. [bug] Out-of-tree builds of backtrace_test failed.
c5e8808e35310eddfd99398198660a3eb37ac51eMark Andrews4570. [cleanup] named did not correctly fall back to the built-in
7c66fc970082f2f8b4a7ae1bbfca3531ab6798b4Mark Andrews initializing keys if the bind.keys file was present
32f4f500a5dfa77631217a390f3cd616827cab18Mukund Sivaraman but empty. [RT #44531]
7c66fc970082f2f8b4a7ae1bbfca3531ab6798b4Mark Andrews4569. [func] Store both local and remote addresses in dnstap
2a80bc01530013293016172b1dcc1d12471ccf33Mark Andrews logging, and modify dnstap-read output format to
2a80bc01530013293016172b1dcc1d12471ccf33Mark Andrews print them. [RT #43595]
cc51cd2d2076e33117c60c9effcb8caccde4983bWitold Krecicki4568. [contrib] Added a --with-bind option to the dnsperf configure
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews script to specify BIND prefix path.
2bbab60f504e4cd905080d42eae5cc8fe62599cbMark Andrews4567. [port] Call getprotobyname and getservbyname prior to calling
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews chroot so that shared libraries get loaded. [RT #44537]
0b612b420df38f1b2f1ba19df727f77a492f08a7Mark Andrews4565. [cleanup] The inline macro versions of isc_buffer_put*()
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews did not implement automatic buffer reallocation.
802e0662ef6041078cb7bad4cdb197a295eab770Mark Andrews4564. [maint] Update the built in managed keys to include the
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews upcoming root KSK. [RT #44579]
af9b975ccc2f0e6d82a4dfc2daa6cedfc5f4bdc2Mark Andrews4563. [bug] Modified zones would occasionally fail to reload.
94694e720a911a38b01ff5036c01d883b3c9cbb1Evan Hunt4561. [port] Silence a warning in strict C99 compilers. [RT #44414]
538c6bd3f15c6f525972e2226708805dbab03240Mark Andrews4560. [bug] mdig: add -m option to enable memory debugging rather
ef1e2f790639e187d2286292f25593ad7c6c2391Witold Krecicki than having it on all the time. [RT #44509]
e8fab79146fe8010728513f4458cfd2f4d8bd48bWitold Krecicki4559. [bug] openssl_link.c didn't compile if ISC_MEM_TRACKLINES
c034b72ba147e86ec40816fdf0cfb19c9ed7f1d6Witold Krecicki was turned off. [RT #44509]
7d238ed0c71ca817fd1582295c6027c6b925af51Mark Andrews4558. [bug] Synthesised CNAME before matching DNAME was still
7d238ed0c71ca817fd1582295c6027c6b925af51Mark Andrews being cached when it should not have been. [RT #44318]
82a50a619afa73ae9a212399505b9f1b327128cdMark Andrews4557. [security] Combining dns64 and rpz can result in dereferencing
82a50a619afa73ae9a212399505b9f1b327128cdMark Andrews a NULL pointer (read). (CVE-2017-3135) [RT#44434]
2f1c460beaa1e372255e7a1b8aad8996f011816dMark Andrews4554. [bug] Remove double unlock in dns_dispatchmgr_setudp.
af9b975ccc2f0e6d82a4dfc2daa6cedfc5f4bdc2Mark Andrews4553. [bug] Named could deadlock there were multiple changes to
9ee66e3a5b45654235472711439f9db1766c82caMark Andrews NSEC/NSEC3 parameters for a zone being processed at
9ee66e3a5b45654235472711439f9db1766c82caMark Andrews the same time. [RT #42770]
8b2b41ba4f8cabed897f2d852a6c07abfb23231eMark Andrews4552. [bug] Named could trigger a assertion when sending notify
47f8b47b8df05aade51e35b31c3df46fb121a098Mark Andrews messages. [RT #44019]
fcadf0b3205be950da14c80fedbf088fc8fd2190Evan Hunt4551. [test] Add system tests for integrity checks of MX and
fcadf0b3205be950da14c80fedbf088fc8fd2190Evan Hunt SRV records. [RT #43953]
fcadf0b3205be950da14c80fedbf088fc8fd2190Evan Hunt4550. [cleanup] Increased the number of available master file
fcadf0b3205be950da14c80fedbf088fc8fd2190Evan Hunt output style flags from 32 to 64. [RT #44043]
47f8b47b8df05aade51e35b31c3df46fb121a098Mark Andrews4547. [port] Add support for --enable-native-pkcs11 on the AEP
47f8b47b8df05aade51e35b31c3df46fb121a098Mark Andrews Keyper HSM. [RT #42463]
8269f06a0fdaf5f4f03ffb20a3c0effd557c794cMark Andrews --- 9.11.1b1 released ---
31c7bf574e6e1b296c5cfa5699e4f2007fbd61cdMark Andrews4545. [func] Expand YAML output from dnstap-read to include
6f2752da7a1036cd59be17236ca66630d00f11cdMukund Sivaraman a detailed breakdown of the DNS message contents.
f0244761611dc4d0f80b36c0c0ccdb26fa6cf830Mark Andrews4544. [bug] Add message/payload size to dnstap-read YAML output.
48ec547968d7da5b1240222c53a90efce25157a2Mark Andrews4543. [bug] dns_client_startupdate now delays sending the update
48ec547968d7da5b1240222c53a90efce25157a2Mark Andrews request until isc_app_ctxrun has been called.
095c47be5456c17087d7b39dfc97ebee65e0dfbbMark Andrews4541. [bug] rndc addzone should properly reject non master/slave
178dc0e1d617a6ef6387e9942ba9cdb370d1bde2Mark Andrews zones. [RT #43665]
178dc0e1d617a6ef6387e9942ba9cdb370d1bde2Mark Andrews4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
6aaf3d01a1a9829802498c5772b22d649d012181Mark Andrews4539. [bug] Referencing a nonexistent zone with RPZ could lead
e51ba2650025460b26092fb2500e0b6dfbf6d548Mark Andrews to a assertion failure when configuring. [RT #43787]
e51ba2650025460b26092fb2500e0b6dfbf6d548Mark Andrews4538. [bug] Call dns_client_startresolve from client->task.
15bee593e70faca91a00331184fbbbc66080d422Mark Andrews4537. [bug] Handle timeouts better in dig/host/nslookup. [RT #43576]
15bee593e70faca91a00331184fbbbc66080d422Mark Andrews4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
af326c2e3f90d86a8966a1298d7aa157667f97cdEvan Hunt when reusing the event structure. [RT #43885]
af326c2e3f90d86a8966a1298d7aa157667f97cdEvan Hunt4535. [bug] Address race condition in setting / testing of
af326c2e3f90d86a8966a1298d7aa157667f97cdEvan Hunt DNS_REQUEST_F_SENDING. [RT #43889]
ce786900292468e465fb74df8712a625ce10e103Mukund Sivaraman4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
d102ab1b847716b045640faebf074a8092e0b023Mark Andrews4533. [bug] dns_client_update should terminate on prerequisite
d102ab1b847716b045640faebf074a8092e0b023Mark Andrews failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews and also on BADZONE. [RT #43865]
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews4532. [contrib] Make gen-data-queryperf.py python 3 compatible.
f503aa345b451f94875a5bab637223bcbbd93b6dEvan Hunt4531. [security] 'is_zone' was not being properly updated by redirect2
f503aa345b451f94875a5bab637223bcbbd93b6dEvan Hunt and subsequently preserved leading to an assertion
7df3f06c0bf0b78a88221348d6af6704d9ece7efMark Andrews failure. (CVE-2016-9778) [RT #43837]
a3253fb44c15a52bbb19bb38592b4dc02a004527Tinderbox User4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
d1cacbb37474b0cbee6c1ddd05d27f731b2b43baMark Andrews in responses resulting in SERVFAIL being returned.
2be9d18ee9bd1b4eec4720218e4f43352603291fMark Andrews4529. [cleanup] Silence noisy log warning when DSCP probe fails
2be9d18ee9bd1b4eec4720218e4f43352603291fMark Andrews due to firewall rules. [RT #43847]
4d506ae0d1671e5a1272ef1ef13986af01616ac4Mark Andrews4528. [bug] Only set the flag bits for the i/o we are waiting
65a3f6329735860093004f6b0fe69d6be886417bTinderbox User for on EPOLLERR or EPOLLHUP. [RT #43617]
c40906dfad6dd6e3a3e3c94b8c8847bc9bc064e5Mark Andrews4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
c40906dfad6dd6e3a3e3c94b8c8847bc9bc064e5Mark Andrews4526. [doc] Corrected errors and improved formatting of
f9e49fd80e2ac4fce0fef11d330b88ff3693ad99Witold Krecicki grammar definitions in the ARM. [RT #43739]
e8c70b0c35c27a28ea2e0cafb252e1774ccc1727Mark Andrews4525. [doc] Fixed outdated documentation on managed-keys.
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews4524. [bug] The net zero test was broken causing IPv4 servers
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews with addresses ending in .0 to be rejected. [RT #43776]
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews4523. [doc] Expand config doc for <querysource4> and
6ce5279d0f30c8c760e27baf92bb44b3f4962354Evan Hunt <querysource6>. [RT #43768]
6ce5279d0f30c8c760e27baf92bb44b3f4962354Evan Hunt4522. [bug] Handle big gaps in log file version numbers better.
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt4521. [cleanup] Log it as an error if an entropy source is not
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt found and there is no fallback available. [RT #43659]
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt4520. [cleanup] Alphabetize more of the grammar when printing it
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt out. Fix unbalanced indenting. [RT #43755]
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
c27c710939766a7bb315bde1f12ab18d93c77cc8Mark Andrews4517. [security] Named could mishandle authority sections that were
c27c710939766a7bb315bde1f12ab18d93c77cc8Mark Andrews missing RRSIGs triggering an assertion failure.
c27c710939766a7bb315bde1f12ab18d93c77cc8Mark Andrews (CVE-2016-9444) [RT # 43632]
4e9a1ad22618a46dab82eeb2d030190cec0afbc6Mukund Sivaraman4516. [bug] isc_socketmgr_renderjson was missing from the
4e9a1ad22618a46dab82eeb2d030190cec0afbc6Mukund Sivaraman windows build. [RT #43602]
4e9a1ad22618a46dab82eeb2d030190cec0afbc6Mukund Sivaraman4515. [port] FreeBSD: Find readline headers when they are in
555469af35c12189525921abbc3de3cefb5f9f0fMark Andrews edit/readline/ instead of readline/. [RT #43658]
c5342425ea5568af04f4b87d5d9690453b21c9f1Mark Andrews4514. [port] NetBSD: strip -WL, from ld command line. [RT #43204]
c5342425ea5568af04f4b87d5d9690453b21c9f1Mark Andrews4513. [cleanup] Minimum Python versions are now 2.7 and 3.2.
b4bbf494183e4158b417d9200297ff0764af2f9dMark Andrews4512. [bug] win32: @GEOIP_INC@ missing from delv.vcxproj.in.
f3a4a5f8db3d9fd352a3e2eb6be779a78da03f52Mark Andrews4511. [bug] win32: mdig.exe-BNFT was missing Configure. [RT #43554]
2fb6d3782b548ba678cfb8ff09e0d1e49fafb84dMark Andrews4510. [security] Named mishandled some responses where covering RRSIG
2fb6d3782b548ba678cfb8ff09e0d1e49fafb84dMark Andrews records are returned without the requested data
2fb6d3782b548ba678cfb8ff09e0d1e49fafb84dMark Andrews resulting in a assertion failure. (CVE-2016-9147)
bc09fd1365d1a48972fa99cd6ed2aa788a28ef33Mark Andrews4509. [test] Make the rrl system test more reliable on slower
bc09fd1365d1a48972fa99cd6ed2aa788a28ef33Mark Andrews machines by using mdig instead of dig. [RT #43280]
36be0aad8ec241987e1866a547372eb28ee7dc09Mark Andrews4508. [security] Named incorrectly tried to cache TKEY records which
36be0aad8ec241987e1866a547372eb28ee7dc09Mark Andrews could trigger a assertion failure when there was
36be0aad8ec241987e1866a547372eb28ee7dc09Mark Andrews a class mismatch. (CVE-2016-9131) [RT #43522]
36be0aad8ec241987e1866a547372eb28ee7dc09Mark Andrews4507. [bug] Named could incorrectly log 'allows updates by IP
33f91e248b67afa96c5b855ba3ace20b5d89dbd0Mark Andrews address, which is insecure' [RT #43432]
33f91e248b67afa96c5b855ba3ace20b5d89dbd0Mark Andrews4505. [port] Use IP_PMTUDISC_OMIT if available. [RT #35494]
51227d6f16840ae359701b5d56970a5f3860db5aEvan Hunt4504. [security] Allow the maximum number of records in a zone to
51227d6f16840ae359701b5d56970a5f3860db5aEvan Hunt be specified. This provides a control for issues
175a8414a785689cb028e6e133385dba9e1b9a95Evan Hunt raised in CVE-2016-6170. [RT #42143]
9e4811dc90cca1f6f2d1ef86182f9613add06df3Mark Andrews4503. [cleanup] "make uninstall" now removes files installed by
12b791ae2018561482f3b68dd6658c2ad1a4d934Mark Andrews BIND. (This currently excludes Python files
12b791ae2018561482f3b68dd6658c2ad1a4d934Mark Andrews due to lack of support in setup.py.) [RT #42192]
080582dc4739cabf0170b54e9a453785d577e364Mark Andrews4502. [func] Report multiple and experimental options when printing
080582dc4739cabf0170b54e9a453785d577e364Mark Andrews grammar. [RT #43134]
3a71cd8ca3c4970b71ef503553eda2666ce3d2b1Mark Andrews4500. [bug] Support modifier I64 in isc__print_printf. [RT #43526]
3a71cd8ca3c4970b71ef503553eda2666ce3d2b1Mark Andrews4499. [port] MacOSX: silence deprecated function warning
02ceed9f83f82f0de35c7bd73c27a33d4f0fe9cbMark Andrews by using arc4random_stir() when available
02ceed9f83f82f0de35c7bd73c27a33d4f0fe9cbMark Andrews instead of arc4random_addrandom(). [RT #43503]
32431c79c76257130e1b31223e59a614e19bea1bEvan Hunt4498. [test] Simplify prerequisite checks in system tests.
8db83c1e908ac92a28ad0dd6dc2bdcff1d20084cWitold Krecicki4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
ba340e446906b21925df63b0dec9b299ef093ad2Witold Krecicki4496. [func] dig: add +idnout to control whether labels are
ba340e446906b21925df63b0dec9b299ef093ad2Witold Krecicki display in punycode or not. Requires idn support
b62db16a580addacf9b2a4d0a6e272632ad5712aMark Andrews to be enabled at compile time. [RT #43398]
b62db16a580addacf9b2a4d0a6e272632ad5712aMark Andrews4495. [bug] A isc_mutex_init call was not being checked.
b7161f9898405faee05ba72a63ad10e4541f1346Mark Andrews4494. [bug] Look for <editline/readline.h>. [RT #43429]
b7161f9898405faee05ba72a63ad10e4541f1346Mark Andrews4493. [bug] bin/tests/system/dyndb/driver/Makefile.in should use
b7161f9898405faee05ba72a63ad10e4541f1346Mark Andrews SO_TARGETS. [RT# 43336]
b7161f9898405faee05ba72a63ad10e4541f1346Mark Andrews4492. [bug] irs_resconf_load failed to initialize sortlistnxt
6d609c3cbe7d91bf02ac60a4a34cc4bffa13a3e6Evan Hunt causing bad writes if resolv.conf contained a
6d609c3cbe7d91bf02ac60a4a34cc4bffa13a3e6Evan Hunt sortlist directive. [RT #43459]
b83e886b3023c9a3bb40f20e399c3d2d40604eadEvan Hunt4491. [bug] Improve message emitted when testing whether sendmsg
b83e886b3023c9a3bb40f20e399c3d2d40604eadEvan Hunt works with TOS/TCLASS fails. [RT #43483]
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt4489. [security] It was possible to trigger assertions when processing
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt a response containing a DNAME answer. (CVE-2016-8864)
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt4488. [port] Darwin: use -framework for Kerberos. [RT #43418]
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt4487. [test] Make system tests work on Windows. [RT #42931]
adb0ac475d4a58404812eee3a158447decf9e026Tinderbox User4486. [bug] Look in $prefix/lib/pythonX.Y/site-packages for
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt the python modules we install. [RT #43330]
529d8a7cf1960f96a78d1b2b004aa63aff80b16bMark Andrews4485. [bug] Failure to find readline when requested should be
529d8a7cf1960f96a78d1b2b004aa63aff80b16bMark Andrews fatal to configure. [RT #43328]
d9d7b2657e2b688b2ad601a3ea0a23a4078c1f02Witold Krecicki4484. [func] Check prefixes in acls to make sure the address and
d9d7b2657e2b688b2ad601a3ea0a23a4078c1f02Witold Krecicki prefix lengths are consistent. Warn only in
1fe29e5d65d81d1ff0b94bfa7ce80f506a62af91Witold Krecicki BIND 9.11 and earlier. [RT #43367]
d907426f0f5b6100cbe4d03e417f59ce67ff171bEvan Hunt4483. [bug] Address use before require check and remove extraneous
d907426f0f5b6100cbe4d03e417f59ce67ff171bEvan Hunt dns_message_gettsigkey call in dns_tsig_sign.
f0fe1930a2350c1110bff2203e48335c147ca52dEvan Hunt4482. [cleanup] Change #4455 was incomplete. [RT #43252]
f0fe1930a2350c1110bff2203e48335c147ca52dEvan Hunt4478. [func] Add +continue option to mdig, allow continue on socket
a78396e6522d807dceb81c09cfdbca9acee3cc00Evan Hunt errors. [RT #43281]
6ce370550225d4a9251346575bb7020145708bc2Tinderbox User4477. [test] Fix mkeys test timing issues. [RT #41028]
7bc7cdd947a9f5671e8de77ef74b28bf35d15c8eEvan Hunt4476. [test] Fix reclimit test on slower machines. [RT #43283]
55d61515ec5a64c19ecfbd8b554d02515c878f2bMark Andrews4475. [doc] Update named-checkconf documentation. [RT #43153]
55d61515ec5a64c19ecfbd8b554d02515c878f2bMark Andrews4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
1ddde9710ed9298bf8cd4dfd1921ec363e308f87Mark Andrews getprotobyname and getservbyname work. [RT #43197]
2d5581de6e5d6606a8acef041ca808f4b8e24b1bMukund Sivaraman4473. [bug] Only call fsync / _commit on regular files. [RT #43196]
2d5581de6e5d6606a8acef041ca808f4b8e24b1bMukund Sivaraman4472. [bug] Named could fail to find the correct NSEC3 records when
a217937e597bbdaa1805d13cf85c9a9d6131b884Tinderbox User a zone was updated between looking for the answer and
3525200d9fb0e70aec4f6a3c7e0ed5a7dd8398afEvan Hunt looking for the NSEC3 records proving nonexistence
3525200d9fb0e70aec4f6a3c7e0ed5a7dd8398afEvan Hunt of the answer. [RT #43247]
3525200d9fb0e70aec4f6a3c7e0ed5a7dd8398afEvan Hunt --- 9.11.0 released ---
28303a06cec9c9c71ffb8164c85e47281dfca873Mark Andrews --- 9.11.0rc3 released ---
28303a06cec9c9c71ffb8164c85e47281dfca873Mark Andrews4471. [cleanup] Render client/query logging format consistent for
8a659aae94652e1dd151705551cca1dab7cafd75Mark Andrews ease of log file parsing. (Note that this affects
8a659aae94652e1dd151705551cca1dab7cafd75Mark Andrews "querylog" format: there is now an additional field
4d8940486ca555f8308c503eef3bd479c0095eb8Mark Andrews indicating the client object address.) [RT #43238]
35c014cb1d151983c455ad1ac99093591cbda97aMark Andrews4470. [bug] Reset message with intent parse before
35c014cb1d151983c455ad1ac99093591cbda97aMark Andrews calling dns_dispatch_getnext. [RT #43229]
a16f42441a0bdfc911aafe841a975af55181f2f0Mukund Sivaraman --- 9.11.0rc2 released ---
61b1075ddbc2d32043531dd90c20043f419fcfb7Mark Andrews4468. [bug] Address ECS option handling issues. [RT #43191]
f555b59e3678ba3e67201ef158b5f355e6d3ce13Mark Andrews4467. [security] It was possible to trigger an assertion when
f555b59e3678ba3e67201ef158b5f355e6d3ce13Mark Andrews rendering a message. (CVE-2016-2776) [RT #43139]
f555b59e3678ba3e67201ef158b5f355e6d3ce13Mark Andrews4466. [bug] Interface scanning didn't work on a Windows system
8d9a134fe75c57052094b30ad43a20582ad71ebfMark Andrews without a non local IPv6 addresses. [RT #43130]
8d9a134fe75c57052094b30ad43a20582ad71ebfMark Andrews4465. [bug] Don't use "%z" as Windows doesn't support it.
c2a6e9d347ea5364041d4241e4683d076d4e091bMark Andrews4464. [bug] Fix windows python support. [RT #43173]
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews4463. [bug] The dnstap system test failed on some systems.
e8555412f186ad05a064591bcb25c2f7d7395756Mark Andrews4462. [bug] Don't describe a returned EDNS COOKIE as "good"
e8555412f186ad05a064591bcb25c2f7d7395756Mark Andrews when there isn't a valid server cookie. [RT #43167]
f5b0ad3c8d4b665037b4eeda2fc24547c698c012Witold Krecicki4461. [bug] win32: not all external data was properly marked
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews as external data for windows dll. [RT #43161]
50a3eae6cf9a401ea70f5e81579f14f829f3e457Mark Andrews --- 9.11.0rc1 released ---
50a3eae6cf9a401ea70f5e81579f14f829f3e457Mark Andrews4460. [test] Add system test for dnstap using unix domain sockets.
8d49a1a0d1658952181cc686fc4dc62006baa1a7Mark Andrews4459. [bug] TCP client objects created to handle pipeline queries
8d49a1a0d1658952181cc686fc4dc62006baa1a7Mark Andrews were not cleaned up correctly, causing uncontrolled
97e13cc244a1fc67fd42c421c92ccead5e38a2f5Mark Andrews memory growth. [RT #43106]
97e13cc244a1fc67fd42c421c92ccead5e38a2f5Mark Andrews4458. [cleanup] Update assertions to be more correct, and also remove
9f5443280fcfd625a06f63a1b457ed2335840278Mark Andrews use of a reserved word. [RT #43090]
c1a72112b2391bd8f149c5f19bdb12fa0d39fef4Mark Andrews4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
c1a72112b2391bd8f149c5f19bdb12fa0d39fef4Mark Andrews4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews4455. [cleanup] Allow dyndb modules to correctly log the filename
7d262a3647a517a86d6d83058aedd18b7a6b06dfMark Andrews and line number when processing configuration text
990494909886f2cef94d3874f4dc4add03cece81Mark Andrews from named.conf. [RT #43050]
f4c0d8db2b1a14e62660fa92f8aaf614b99d7f2fWitold Krecicki4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089]
96d49a84fff54fe19b430c56912db0a55cf3ded8Mark Andrews4453. [bug] Prefetching of DS records failed to update their
f4c0d8db2b1a14e62660fa92f8aaf614b99d7f2fWitold Krecicki RRSIGs. [RT #42865]
10966da999f8f7f364418aa446d8ead9c8a761cfMark Andrews4452. [bug] The default key manager policy file is now
f0e7471845e0c9f1509fb91cae4a8e6655132acbEvan Hunt <sysdir>/dnssec-policy.conf (usually
322efcb27d26cb5949ceabf6d3b93d0a2e25746fWitold Krecicki4451. [cleanup] Log more useful information if a PKCS#11 provider
322efcb27d26cb5949ceabf6d3b93d0a2e25746fWitold Krecicki library cannot be loaded. [RT #43076]
4681ab1fc2c40e1d70fae38e64630c72c51c300eWitold Krecicki4450. [port] Provide more nuanced HSM support which better matches
4681ab1fc2c40e1d70fae38e64630c72c51c300eWitold Krecicki the specific PKCS11 providers capabilities. [RT #42458]
4681ab1fc2c40e1d70fae38e64630c72c51c300eWitold Krecicki4449. [test] Fix catalog zones test on slower systems. [RT #42997]
b56bd9b59f590ade778ac6621fb5bede4001d8aeMark Andrews4448. [bug] win32: ::1 was not being found when iterating
b56bd9b59f590ade778ac6621fb5bede4001d8aeMark Andrews interfaces. [RT #42993]
96beefd76f597b77d4fcd51f8d766e5e59a2d216Mark Andrews4447. [tuning] Allow the fstrm_iothr_init() options to be set using
3f06b888ae80a8724b300ab39a4276537b0241cdWitold Krecicki named.conf to control how dnstap manages the data
3f06b888ae80a8724b300ab39a4276537b0241cdWitold Krecicki flow. [RT #42974]
948fe5822b9c8489856bc38b3063e30e9d34fcd3Mark Andrews4446. [bug] The cache_find() and _findrdataset() functions
948fe5822b9c8489856bc38b3063e30e9d34fcd3Mark Andrews could find rdatasets that had been marked stale.
ecff557eebd67a717ab6fd3323af27363ee3273dMark Andrews4445. [cleanup] isc_errno_toresult() can now be used to call the
ecff557eebd67a717ab6fd3323af27363ee3273dMark Andrews formerly private function isc__errno2result().
fbc50678e18eced2c1324bd968e77d4d7737d0caMark Andrews4444. [bug] Fixed some issues related to dyndb: A bug caused
fbc50678e18eced2c1324bd968e77d4d7737d0caMark Andrews braces to be omitted when passing configuration text
c2afbab9dc8de73c85b32624a8364bc7532d1fa9Witold Krecicki from named.conf to a dyndb driver, and there was a
c2afbab9dc8de73c85b32624a8364bc7532d1fa9Witold Krecicki use-after-free in the sample dyndb driver. [RT #43050]
51ec0decc11beda6b903fbfa18c35edef09ad5feWitold Krecicki4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
51ec0decc11beda6b903fbfa18c35edef09ad5feWitold Krecicki TCP sockets. [RT #42864]
3d0b7d5cc3428dedf4486e949fbd536eef494b99Evan Hunt4442. [bug] Fix RPZ CIDR tree insertion bug that corrupted
3d0b7d5cc3428dedf4486e949fbd536eef494b99Evan Hunt tree data structure with overlapping networks
3d0b7d5cc3428dedf4486e949fbd536eef494b99Evan Hunt (longest prefix match was ineffective).
4d506ae0d1671e5a1272ef1ef13986af01616ac4Mark Andrews4441. [cleanup] Alphabetize host's help output. [RT #43031]
9268297baa1429d8851c36972d918dde66544746Mark Andrews4440. [func] Enable TCP fast open support when available on the
9268297baa1429d8851c36972d918dde66544746Mark Andrews server side. [RT #42866]
d7ab0204e26098847232548f03833e185db0b99fMark Andrews4439. [bug] Address race conditions getting ownernames of nodes.
aabcb1fde0ca255ff30f0a5c10cbd39f798cc5b7Mark Andrews4438. [func] Use LIFO rather than FIFO when processing startup
aabcb1fde0ca255ff30f0a5c10cbd39f798cc5b7Mark Andrews notify and refresh queries. [RT #42825]
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki4437. [func] Minimal-responses now has two additional modes
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki no-auth and no-auth-recursive which suppress
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki adding the NS records to the authority section
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki as well as the associated address records for the
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki nameservers. [RT #42005]
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki4436. [func] Return TLSA records as additional data for MX and SRV
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki lookups. [RT #42894]
ac110848296c18b3a3bfaa89bdee2dd00755b36fMark Andrews4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
ac110848296c18b3a3bfaa89bdee2dd00755b36fMark Andrews will not fit into a single IPv4 encapsulated IPv6
ac110848296c18b3a3bfaa89bdee2dd00755b36fMark Andrews UDP packet when transmitted over a Ethernet link.
7100602261f22ed9f5955f8acfbc59f37ac608bbMark Andrews4434. [protocol] Return EDNS EXPIRE option for master zones in addition
a0f5a5e3c5c6dd29b18bc06fea0d02ae7fc24ac9Mark Andrews to slave zones. [RT #43008]
0cbe448914be61d0f92b1e9d3adaeba87d25639dEvan Hunt4433. [cleanup] Report an error when passing an invalid option or
0cbe448914be61d0f92b1e9d3adaeba87d25639dEvan Hunt view name to "rndc dumpdb". [RT #42958]
0cbe448914be61d0f92b1e9d3adaeba87d25639dEvan Hunt4432. [test] Hide rndc output on expected failures in logfileconfig
9dede25430218a1f683dfef36f04ac7cf5bbd9e8Mark Andrews system test. [RT #27996]
9dede25430218a1f683dfef36f04ac7cf5bbd9e8Mark Andrews4431. [bug] named-checkconf now checks the rate-limit clause.
d3600bb89d32a7e0d943691d3cad5c569ef6158dMark Andrews4430. [bug] Lwresd died if a search list was not defined.
d3600bb89d32a7e0d943691d3cad5c569ef6158dMark Andrews Found by 0x710DDDD At Alibaba Security. [RT #42895]
7472cd350fe9245553e9da7f2df8e7e364d136abMukund Sivaraman4429. [bug] Address potential use after free on fclose() error.
7472cd350fe9245553e9da7f2df8e7e364d136abMukund Sivaraman4428. [bug] The "test dispatch getnext" unit test could fail
7472cd350fe9245553e9da7f2df8e7e364d136abMukund Sivaraman in a threaded build. [RT #42979]
049a49c2956dd9cc9b82974e2bbe77c57fcc73dbMark Andrews4427. [bug] The "query" and "response" parameters to the
049a49c2956dd9cc9b82974e2bbe77c57fcc73dbMark Andrews "dnstap" option had their functions reversed.
e2047969decfc0c3fc1a946ccade993cab9c9315Mark Andrews --- 9.11.0b3 released ---
c3beecc1bcc6e1c15176a699b41ca77ef6533c25Mark Andrews4426. [bug] Addressed Coverity warnings. [RT #42908]
c3beecc1bcc6e1c15176a699b41ca77ef6533c25Mark Andrews4425. [bug] arpaname, dnstap-read and named-rrchecker were not
0be436fc397396ed490182f022d02b46c7a50271Mark Andrews being installed into ${prefix}/bin. Tidy up
0be436fc397396ed490182f022d02b46c7a50271Mark Andrews installation issues with CHANGE 4421. [RT #42910]
53a70bef3508acb1517b8eb57f61a81280c11509Mark Andrews4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
8090ceb932b52c70d72f655531150e0a1122052dMark Andrews to provide feedback to the trust-anchor administrators
7100602261f22ed9f5955f8acfbc59f37ac608bbMark Andrews about how key rollovers are progressing as per
f89adb2c2a52b505501c3eaa2aec9fd4df6bd60aTinderbox User draft-ietf-dnsop-edns-key-tag-02. This can be
e846f127d64ea690b789efa6e5b4ff9f64cf3235Witold Krecicki disabled using 'trust-anchor-telemetry no;'.
28053af04c5121ec234c320e4c76273305816e7aEvan Hunt4423. [maint] Added missing IPv6 address 2001:500:84::b for
5ac427050fa0e303171133ce3855b284ab4cfbb7Mark Andrews4422. [port] Silence clang warnings in dig.c and dighost.c.
594d15df254304ef6705a9fc028bcd34328bce42Mark Andrews4421. [func] When built with LMDB (Lightning Memory-mapped
594d15df254304ef6705a9fc028bcd34328bce42Mark Andrews Database), named will now use a database to store
594d15df254304ef6705a9fc028bcd34328bce42Mark Andrews the configuration for zones added by "rndc addzone"
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki instead of using a flat NZF file. This improves
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki performance of "rndc delzone" and "rndc modzone"
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki significantly. Existing NZF files will
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki automatically by converted to NZD databases.
dc2a4887c40b1ee361cef51e188b386e19497e01Witold Krecicki To view the contents of an NZD or to roll back to
dc2a4887c40b1ee361cef51e188b386e19497e01Witold Krecicki NZF format, use "named-nzd2nzf". To disable
08e36aa5a5c7697a839f83831fccf8fb3f792848Mark Andrews this feature, use "configure --without-lmdb".
08e36aa5a5c7697a839f83831fccf8fb3f792848Mark Andrews4420. [func] nslookup now looks for AAAA as well as A by default.
f1a2709aad7baa4161fdb6f63edf99b0150af252Evan Hunt4419. [bug] Don't cause undefined result if the label of an
f1a2709aad7baa4161fdb6f63edf99b0150af252Evan Hunt entry in catalog zone is changed. [RT #42708]
f1a2709aad7baa4161fdb6f63edf99b0150af252Evan Hunt4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879]
402c63495c40b2289de8daee5a396fd392cea080Mark Andrews4417. [bug] dnssec-keymgr could fail to create successor keys
402c63495c40b2289de8daee5a396fd392cea080Mark Andrews if the prepublication interval was set to a value
b0ffe328620db4ead7079e8cd26a584f5b947754Mark Andrews smaller than the default. [RT #42820]
402c63495c40b2289de8daee5a396fd392cea080Mark Andrews4416. [bug] dnssec-keymgr: Domain names in policy files could
699f790c49d03a9ef3c3234a72d272bb469203e8Evan Hunt fail to match due to trailing dots. [RT #42807]
66074f152f2a42218e6d54f50d4fa3717940c299Evan Hunt4415. [bug] dnssec-keymgr: Expired/deleted keys were not always
66074f152f2a42218e6d54f50d4fa3717940c299Evan Hunt excluded. [RT #42884]
66074f152f2a42218e6d54f50d4fa3717940c299Evan Hunt4414. [bug] Corrected a bug in the MIPS implementation of
66074f152f2a42218e6d54f50d4fa3717940c299Evan Hunt isc_atomic_xadd(). [RT #41965]
48bf87ba83396aae2251646aed9a9cac183e5780Mark Andrews4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
48bf87ba83396aae2251646aed9a9cac183e5780Mark Andrews was returned. [RT #42733]
cd6eeeb827f65df4bfb3e7ed3454655650f7dba7Mark Andrews --- 9.11.0b2 released ---
aa5506eda809dfd25b4e1ee6edb5285a77958d2cEvan Hunt4412. [cleanup] Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt removed. [RT #42721]
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt4411. [func] "rndc dnstap -roll" automatically rolls the
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt dnstap output file; the previous version is
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt saved with ".0" suffix, and earlier versions
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt with ".1" and so on. An optional numeric argument
aa5506eda809dfd25b4e1ee6edb5285a77958d2cEvan Hunt indicates how many prior files to save. [RT #42830]
16591ba9ae26e4d6e1bc0dd4776725326174abaaMark Andrews4410. [bug] Address use after free and memory leak with dnstap.
3cd204c4a46f21bf2a38f35e79af45ac595be943Evan Hunt4409. [bug] DNS64 should exclude mapped addresses by default when
3cd204c4a46f21bf2a38f35e79af45ac595be943Evan Hunt an exclude acl is not defined. [RT #42810]
8fcf2413e99597b6690b6a352aa12842f9be27e5Mark Andrews4408. [func] Continue waiting for expected response when we the
8fcf2413e99597b6690b6a352aa12842f9be27e5Mark Andrews response we get does not match the request. [RT #41026]
7660b370c363d08a43ad713a84f94798f3fc4879Mark Andrews4407. [performance] Use GCC builtin for clz in RPZ lookup code.
651be63a1111c50942533016b3a2a6403d74cd9eMark Andrews4406. [security] getrrsetbyname with a non absolute name could
651be63a1111c50942533016b3a2a6403d74cd9eMark Andrews trigger an infinite recursion bug in lwresd
b1888f0e2ed6bebe79822de83bf67f5c440a22e1Mark Andrews and named with lwres configured if when combined
6214c3c93a43dc86f080dc0219e4560b69721f53Mark Andrews with a search list entry the resulting name is
6214c3c93a43dc86f080dc0219e4560b69721f53Mark Andrews too long. (CVE-2016-2775) [RT #42694]
448884248519a8edade1b51aa7d20140b12764a9Evan Hunt4405. [bug] Change 4342 introduced a regression where you could
395e6865d5b0ec13c1e4cc3947598153aa4e4914Evan Hunt not remove a delegation in a NSEC3 signed zone using
395e6865d5b0ec13c1e4cc3947598153aa4e4914Evan Hunt OPTOUT via nsupdate. [RT #42702]
39225b4b510385f0cee915f0622574b76f5d6082Evan Hunt4404. [misc] Allow krb5-config to be used when configuring gssapi.
cf24cbd837617c5cb89f04ba97b262be21a925bfEvan Hunt4403. [bug] Rename variables and arguments that shadow: basename,
ddf3342cca1a2dbd98c5443cbb9b184c428cdda5Evan Hunt clone and gai_error.
558278974eb4a1021943e6bbbc6c7d80dc3707fdMark Andrews4402. [bug] protoc-c is now a hard requirement for --enable-dnstap.
558278974eb4a1021943e6bbbc6c7d80dc3707fdMark Andrews --- 9.11.0b1 released ---
132a57117978816eebf6f8c33b39bdcfcd62fd7aEvan Hunt4401. [misc] Change LICENSE to MPL 2.0.
132a57117978816eebf6f8c33b39bdcfcd62fd7aEvan Hunt4400. [bug] ttl policy was not being inherited in policy.py.
0993cd5f2227c1aa6a8554f4a9a847efabbcfcb8Mark Andrews4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and
b8dcc13bc5d49aa18a80179851cf0d7a81c54887Mark Andrews 'ECDSAP384SHA384' don't have settable keysize.
756c6433301f2f5dad3372af2bef56c0b28e99b7Mark Andrews4398. [bug] Correct spelling of ECDSAP256SHA256 in policy.py.
1add4a7939a550d50b156f72631ea374b6182149Mark Andrews4397. [bug] Update Windows python support. [RT #42538]
381c77fd82ea5a51ee52929ec43c1f3adb27686aMark Andrews4396. [func] dnssec-keymgr now takes a '-r randomfile' option.
7c525954642f8fb3698b555115edb09fe3bd3354Mark Andrews4395. [bug] Improve out-of-tree installation of python modules.
33a4294f442f7505c8e2453beb422b5928ec697cMark Andrews4394. [func] Add rndc command "dnstap-reopen" to close and
33a4294f442f7505c8e2453beb422b5928ec697cMark Andrews reopen dnstap output files. [RT #41803]
d6357f09aacf518df14875fffa819607daa05d17Mark Andrews4393. [bug] Address potential NULL pointer dereferences in
d6357f09aacf518df14875fffa819607daa05d17Mark Andrews dnstap code.
59328c76745ee6d2df047e3f072b118258b87cb6Mukund Sivaraman4392. [func] Collect statistics for RSSAC02v3 traffic-volume,
275265ab27815d2261ebf68b48201fb7bffdf426Mukund Sivaraman traffic-sizes and rcode-volume reporting. [RT #41475]
ade0aa3cb0fafbbe9fffb29f9abba4ce85890c3fMark Andrews4391. [contrib] Fix leaks in contrib DLZ code. [RT #42707]
8398f0015625495e228eea195e3adccfcf59ffccMark Andrews4390. [doc] Description of masters with TSIG, allow-query and
8398f0015625495e228eea195e3adccfcf59ffccMark Andrews allow-transfer options in catalog zones. [RT #42692]
023ba1e6ef28d888ad0030fd72937fb4de2129bdEvan Hunt4389. [test] Rewritten test suite for catalog zones. [RT #42676]
44c86318ed432af96848269250930297eea2bba3Evan Hunt4388. [func] Support for master entries with TSIG keys in catalog
44c86318ed432af96848269250930297eea2bba3Evan Hunt zones. [RT #42577]
44c86318ed432af96848269250930297eea2bba3Evan Hunt4387. [bug] Change 4336 was not complete leading to SERVFAIL
806e05d28a479291110a9fdb1788e675a56fc364Mark Andrews being return as NS records expired. [RT #42683]
ce7216c40ac973ed9ac5a90d75cd41b14b789725Mark Andrews4386. [bug] Remove shadowed overmem function/variable. [RT #42706]
455c0848f80a8acda27aad1466c72987cafaa029Mark Andrews4385. [func] Add support for allow-query and allow-transfer ACLs
455c0848f80a8acda27aad1466c72987cafaa029Mark Andrews to catalog zones. [RT #42578]
f9da4a8e543cf895b6171773e75d343b2914a7e7Mark Andrews4384. [bug] Change 4256 accidentally disabled logging of the
f9da4a8e543cf895b6171773e75d343b2914a7e7Mark Andrews rndc command. [RT #42654]
f9da4a8e543cf895b6171773e75d343b2914a7e7Mark Andrews4383. [bug] Correct spelling error in stats channel description of
293a9e997803ebcf4e6ade8c972465bf6330f534Mukund Sivaraman "EDNS client subnet option received". [RT #42633]
293a9e997803ebcf4e6ade8c972465bf6330f534Mukund Sivaraman4382. [bug] rndc {addzone,modzone,delzone,showzone} should all
293a9e997803ebcf4e6ade8c972465bf6330f534Mukund Sivaraman compare the zone name using a canonical format.
5995fec51cc8bb7e53804e4936e60aa1537f3673Mukund Sivaraman4381. [bug] Missing "zone-directory" option in catalog zone
5995fec51cc8bb7e53804e4936e60aa1537f3673Mukund Sivaraman definition caused BIND to crash. [RT #42579]
a2b15b3305acd52179e6f3dc7d073b07fbc40b8eMark Andrews --- 9.11.0a3 released ---
d372f426ca42ee2bc7bcb1f76a52c4f154de1f9bMark Andrews4380. [experimental] Added a "zone-directory" option to "catalog-zones"
d372f426ca42ee2bc7bcb1f76a52c4f154de1f9bMark Andrews syntax, allowing local masterfiles for slaves
79a55d4f4dcf3d6f617523228503d8584b72a3a3Mukund Sivaraman that are provisioned by catalog zones to be stored
79a55d4f4dcf3d6f617523228503d8584b72a3a3Mukund Sivaraman in a directory other than the server's working
79a55d4f4dcf3d6f617523228503d8584b72a3a3Mukund Sivaraman directory. [RT #42527]
0c29904b27c9ab3b85ecbde159b22ae1323bdbcdMukund Sivaraman4379. [bug] An INSIST could be triggered if a zone contains
0c29904b27c9ab3b85ecbde159b22ae1323bdbcdMukund Sivaraman RRSIG records with expiry fields that loop
f3ad877eb05befbc862b0233d985758c0caef29aEvan Hunt using serial number arithmetic. [RT #40571]
f3ad877eb05befbc862b0233d985758c0caef29aEvan Hunt4378. [contrib] #include <isc/string.h> for strlcat in zone2ldap.c.
d88ba937124b2a4f8a074fc2aef9caf2022308b4Mark Andrews4377. [bug] Don't reuse zero TTL responses beyond the current
40401165e4646f1624175ac80bf9b51826ab67ecMark Andrews client set (excludes ANY/SIG/RRSIG queries).
ec450fde7cee684f37b0a59d770330c700419610Evan Hunt4376. [experimental] Added support for Catalog Zones, a new method for
ec450fde7cee684f37b0a59d770330c700419610Evan Hunt provisioning secondary servers in which a list of
ec450fde7cee684f37b0a59d770330c700419610Evan Hunt zones to be served is stored in a DNS zone and can
d1dbf6b20fdcfa95acd75cdb96fcd57067a31144Mukund Sivaraman be propagated to slaves via AXFR/IXFR. [RT #41581]
d1dbf6b20fdcfa95acd75cdb96fcd57067a31144Mukund Sivaraman4375. [func] Add support for automatic reallocation of isc_buffer
3fe17d62e32017b643b852ede1b234271ee308e1Evan Hunt to isc_buffer_put* functions. [RT #42394]
3fe17d62e32017b643b852ede1b234271ee308e1Evan Hunt4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
f02c22d58ac88777655e0b407b22b07864d39184Evan Hunt probability of reference counting errors as seen
f02c22d58ac88777655e0b407b22b07864d39184Evan Hunt in 4365. [RT #42405]
5f4f7c688e0cca18edd67e9760b266ce8f67e29cTinderbox User4373. [bug] Address undefined behavior in getaddrinfo. [RT #42479]
40401165e4646f1624175ac80bf9b51826ab67ecMark Andrews4372. [bug] Address undefined behavior in libt_api. [RT #42480]
df9a49ee07f7629ec6abd2e3bd0dee600d7e2ab4Evan Hunt4371. [func] New "minimal-any" option reduces the size of UDP
e073205a884d3762fdc678d4b8a61b627a4070abEvan Hunt responses for qtype ANY by returning a single
e073205a884d3762fdc678d4b8a61b627a4070abEvan Hunt arbitrarily selected RRset instead of all RRsets.
e073205a884d3762fdc678d4b8a61b627a4070abEvan Hunt Thanks to Tony Finch. [RT #41615]
832ab79d1f8bc4edf638780b306888da30ac3a1eMark Andrews4370. [bug] Address python3 compatibility issues with RNDC module.
832ab79d1f8bc4edf638780b306888da30ac3a1eMark Andrews [RT #42499] [RT #42506]
9d85a773829484832f762a9088a7dafd6794aa39Mark Andrews --- 9.11.0a2 released ---
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt4369. [bug] Fix 'make' and 'make install' out-of-tree python
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt support. [RT #42484]
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt4368. [bug] Fix a crash when calling "rndc stats" on some
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt Windows builds because some Visual Studio compilers
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt generated crashing code for the "%z" printf()
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt format specifier. [RT #42380]
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt4367. [bug] Remove unnecessary assignment of loadtime in
f8432e3f249dbec36394539ca1f3cb25bf33abfeMark Andrews zone_touched. [RT #42440]
630b2d0c5a04cfc8b08d4585b7a0d997c00d7341Evan Hunt4366. [bug] Address race condition when updating rbtnode bit
40401165e4646f1624175ac80bf9b51826ab67ecMark Andrews fields. [RT #42379]
630b2d0c5a04cfc8b08d4585b7a0d997c00d7341Evan Hunt4365. [bug] Address zone reference counting errors involving
630b2d0c5a04cfc8b08d4585b7a0d997c00d7341Evan Hunt nxdomain-redirect. [RT #42258]
1d383fd4b23fc7031e562bf5db02e3018c5d0b9eMark Andrews4364. [port] freebsd: add -Wl,-E to loader flags [RT #41690]
1d383fd4b23fc7031e562bf5db02e3018c5d0b9eMark Andrews4363. [port] win32: Disable explicit triggering UAC when running
1d383fd4b23fc7031e562bf5db02e3018c5d0b9eMark Andrews BINDInstall.
40401165e4646f1624175ac80bf9b51826ab67ecMark Andrews4362. [func] Changed rndc reconfig behavior so that newly added
3ecc17d5519cc5b45cba3344344f296f3ff57776Mark Andrews zones are loaded asynchronously and the loading does
9b789c54f8829b867c4a888c47bd2310a790415aEvan Hunt not block the server. [RT #41934]
9b789c54f8829b867c4a888c47bd2310a790415aEvan Hunt4361. [cleanup] Where supported, file modification times returned
d40154cab71b0c774d80df2c0091e1f8edcaa7d4Evan Hunt by isc_file_getmodtime() are now accurate to the
d40154cab71b0c774d80df2c0091e1f8edcaa7d4Evan Hunt nanosecond. [RT #41968]
d40154cab71b0c774d80df2c0091e1f8edcaa7d4Evan Hunt4360. [bug] Silence spurious 'bad key type' message when there is
2879ee2c72638ea190728f931ce286760caa4521Evan Hunt a existing TSIG key. [RT #42195]
2879ee2c72638ea190728f931ce286760caa4521Evan Hunt4359. [bug] Inherited 'also-notify' lists were not being checked
2879ee2c72638ea190728f931ce286760caa4521Evan Hunt by named-checkconf. [RT #42174]
6bd794171f2ba0ee93b99ccbf80378959f4e965bEvan Hunt4358. [test] Added American Fuzzy Lop harness that allows
6bd794171f2ba0ee93b99ccbf80378959f4e965bEvan Hunt feeding fuzzed packets into BIND.
73fbd4c9d3e65621eb32a8e01659532f131de690Mark Andrews4357. [func] Add the python RNDC module. [RT #42093]
fc7bce5f350aa119d4c500fd5b35c47b14b539efMark Andrews4356. [func] Add the ability to specify whether to wait for
b4ccec331dbd81581c6226a54847385a27d9eb25Evan Hunt nameserver addresses to be looked up or not to
b4ccec331dbd81581c6226a54847385a27d9eb25Evan Hunt RPZ with a new modifying directive 'nsip-wait-recurse'.
bb5d14d7243d71e03d262ff175b355b52873e195Evan Hunt4355. [func] "pkcs11-list" now displays the extractability
bb5d14d7243d71e03d262ff175b355b52873e195Evan Hunt attribute of private or secret keys stored in
bb5d14d7243d71e03d262ff175b355b52873e195Evan Hunt an HSM, as either "true", "false", or "never"
c8b968f4144a271213756cc33e8062b9efdd7441Evan Hunt Thanks to Daniel Stirnimann. [RT #36557]
c8b968f4144a271213756cc33e8062b9efdd7441Evan Hunt4354. [bug] Check that the received HMAC length matches the
c8b968f4144a271213756cc33e8062b9efdd7441Evan Hunt expected length prior to check the contents on the
41494939b62d74fb159009f28428df23e5fc70e3Evan Hunt control channel. This prevents a OOB read error.
41494939b62d74fb159009f28428df23e5fc70e3Evan Hunt This was reported by Lian Yihan, <lianyihan@360.cn>.
3bcd09b4162ccd383b4b20e3b5306b3c317c9795Evan Hunt4353. [cleanup] Update PKCS#11 header files. [RT #42175]
3bcd09b4162ccd383b4b20e3b5306b3c317c9795Evan Hunt4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service
292eb9c4e4fc51aec911e72821735a123a8c252aMark Andrews is scheduled to be disabled in 2017. A warning is
292eb9c4e4fc51aec911e72821735a123a8c252aMark Andrews now logged when named is configured to use it,
292eb9c4e4fc51aec911e72821735a123a8c252aMark Andrews either explicitly or via "dnssec-lookaside auto;"
1b3d21180244529f0099894fe9d29beb3f11efb3Mark Andrews4351. [bug] 'dig +noignore' didn't work. [RT #42273]
fbed5f0f44515f5b3ca499a3466c875507852970Evan Hunt4350. [contrib] Declare result in dlz_filesystem_dynamic.c.
fbed5f0f44515f5b3ca499a3466c875507852970Evan Hunt4349. [contrib] kasp2policy: A python script to create a DNSSEC
fbed5f0f44515f5b3ca499a3466c875507852970Evan Hunt policy file from an OpenDNSSEC KASP XML file.
4fa9eaf0734e892431e78179bdcc5251c9b6aa7dMark Andrews4348. [func] dnssec-keymgr: A new python-based DNSSEC key
bed6e9d614d2ac9e6a84949379aba4fc04aa8e0bMark Andrews management utility, which reads a policy definition
49762dffc45b6c02abe5d131cb7c49369cf13e09Mark Andrews file and can create or update DNSSEC keys as needed
49762dffc45b6c02abe5d131cb7c49369cf13e09Mark Andrews to ensure that a zone's keys match policy, roll over
49762dffc45b6c02abe5d131cb7c49369cf13e09Mark Andrews correctly on schedule, etc. Thanks to Sebastian
49762dffc45b6c02abe5d131cb7c49369cf13e09Mark Andrews Castro for assistance in development. [RT #39211]
f647c0df9fd334b19a5bdc9c252f90d94c0abf1eMark Andrews4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
ecc06cbc32c5a2b91a17e65c1820c9c66313d35cMukund Sivaraman4346. [bug] Fixed a regression introduced in change #4337 which
ecc06cbc32c5a2b91a17e65c1820c9c66313d35cMukund Sivaraman caused signed domains with revoked KSKs to fail
94c7301f6f0ada7aa84ede5808ab8fdec5bae6b5Mark Andrews validation. [RT #42147]
505d311709be77b2bd6ebb2aead84771588f9c29Mark Andrews4345. [contrib] perftcpdns mishandled the return values from
505d311709be77b2bd6ebb2aead84771588f9c29Mark Andrews clock_nanosleep. [RT #42131]
5d79b60fc5e4dad4f04da39570517d20a2425f8bMukund Sivaraman4344. [port] Address openssl version differences. [RT #42059]
5d79b60fc5e4dad4f04da39570517d20a2425f8bMukund Sivaraman4343. [bug] dns_dnssec_syncupdate mis-declared in <dns/dnssec.h>.
5d79b60fc5e4dad4f04da39570517d20a2425f8bMukund Sivaraman4342. [bug] 'rndc flushtree' could fail to clean the tree if there
5d79b60fc5e4dad4f04da39570517d20a2425f8bMukund Sivaraman wasn't a node at the specified name. [RT #41846]
322e6b5be784d79d15fea9db9440dd821162c574Mark Andrews --- 9.11.0a1 released ---
27bc16fcdc67f9afefefb54ae98dfdae3a5bc1f8Mukund Sivaraman4341. [bug] Correct the handling of ECS options with
27bc16fcdc67f9afefefb54ae98dfdae3a5bc1f8Mukund Sivaraman address family 0. [RT #41377]
5b13a593fe7d8055992bd12aeb399bdb06e2a533Mukund Sivaraman4340. [performance] Implement adaptive read-write locks, reducing the
95bef099e9762c8078c0ba9749293b488727dc58Mark Andrews overhead of locks that are only held briefly.
95bef099e9762c8078c0ba9749293b488727dc58Mark Andrews4339. [test] Use "mdig" to test pipelined queries. [RT #41929]
464c2c673b879071da66cab5a627baf35c5e0f90Evan Hunt4338. [bug] Reimplement change 4324 as it wasn't properly doing
464c2c673b879071da66cab5a627baf35c5e0f90Evan Hunt all the required book keeping. [RT #41941]
226dd20bbd6c6bdeadffa71361d9a0ec61308d69Evan Hunt4337. [bug] The previous change exposed a latent flaw in
226dd20bbd6c6bdeadffa71361d9a0ec61308d69Evan Hunt key refresh queries for managed-keys when
10d7ab44cc72170c527dde8cc9e049e046342769Mark Andrews a cached DNSKEY had TTL 0. [RT #41986]
10d7ab44cc72170c527dde8cc9e049e046342769Mark Andrews4336. [bug] Don't emit records with zero ttl unless the records
4071efbec0e87b987aaf109f1ae8050aa8ecbcb8Evan Hunt were learnt with a zero ttl. [RT #41687]
4071efbec0e87b987aaf109f1ae8050aa8ecbcb8Evan Hunt4335. [bug] zone->view could be detached too early. [RT #41942]
4071efbec0e87b987aaf109f1ae8050aa8ecbcb8Evan Hunt4334. [func] 'named -V' now reports zlib version. [RT #41913]
b6214feb63f48e9c08f16394ae5b6902b45b9c38Evan Hunt4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
b6214feb63f48e9c08f16394ae5b6902b45b9c38Evan Hunt 2001:500:9f::42.
26177be2946c99a34096b7d8c202139dfc0e9760Mark Andrews4332. [placeholder]
26177be2946c99a34096b7d8c202139dfc0e9760Mark Andrews4331. [func] When loading managed signed zones detect if the
26177be2946c99a34096b7d8c202139dfc0e9760Mark Andrews RRSIG's inception time is in the future and regenerate
8e73941f33fad57111142a62d99717abc001912eMark Andrews the RRSIG immediately. [RT #41808]
5b1c7ef35bb495820360182b5192689f33f1cc7dMark Andrews4330. [protocol] Identify the PAD option as "PAD" when printing out
913d976eca8751851111c0b4357f650295d4aa3dMark Andrews4329. [func] Warn about a common misconfiguration when forwarding
913d976eca8751851111c0b4357f650295d4aa3dMark Andrews RFC 1918 zones. [RT #41441]
7bc21557f3583bab18fd9a002d115aaa5faa5561Mukund Sivaraman4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
7bc21557f3583bab18fd9a002d115aaa5faa5561Mukund Sivaraman4327. [func] Log query and depth counters during fetches when
7bc21557f3583bab18fd9a002d115aaa5faa5561Mukund Sivaraman querytrace (./configure --enable-querytrace) is
7bc21557f3583bab18fd9a002d115aaa5faa5561Mukund Sivaraman enabled (helps in diagnosing). [RT #41787]
7bc21557f3583bab18fd9a002d115aaa5faa5561Mukund Sivaraman4326. [protocol] Add support for AVC. [RT #41819]
268c4e79c40845fb0005c44d177497bf5fad4518Mark Andrews4325. [func] Add a line to "rndc status" indicating the
268c4e79c40845fb0005c44d177497bf5fad4518Mark Andrews hostname and operating system details. [RT #41610]
c8821d124c532e0a65752b378f924d4259499fd3Mark Andrews4324. [bug] When deleting records from a zone database, interior
c8821d124c532e0a65752b378f924d4259499fd3Mark Andrews nodes could be left empty but not deleted, damaging
63042d5b579ae3d43104133007e55c224c698904Evan Hunt search performance afterward. [RT #40997]
58f7af60e79a5aaf58f6a8861c306d4c617fb1d1Mukund Sivaraman4323. [bug] Improve HTTP header processing on statschannel.
58f7af60e79a5aaf58f6a8861c306d4c617fb1d1Mukund Sivaraman4322. [security] Duplicate EDNS COOKIE options in a response could
58f7af60e79a5aaf58f6a8861c306d4c617fb1d1Mukund Sivaraman trigger an assertion failure. (CVE-2016-2088)
9b17fd447c684a84b2f5fbfb04ad6e890ae2078cMukund Sivaraman4321. [bug] Zones using mapped files containing out-of-zone data
9b17fd447c684a84b2f5fbfb04ad6e890ae2078cMukund Sivaraman could return SERVFAIL instead of the expected NODATA
9b17fd447c684a84b2f5fbfb04ad6e890ae2078cMukund Sivaraman or NXDOMAIN results. [RT #41596]
e13d04fda918c0c14c2247475bb99e0760d9a6a4Evan Hunt4320. [bug] Insufficient memory allocation when handling
e13d04fda918c0c14c2247475bb99e0760d9a6a4Evan Hunt "none" ACL could cause an assertion failure in
b51391848127d0303bd385a555c76aef57d1b4ebEvan Hunt named when parsing ACL configuration. [RT #41745]
b51391848127d0303bd385a555c76aef57d1b4ebEvan Hunt4319. [security] Fix resolver assertion failure due to improper
35928b7e1af8ea4d01a2855ab833dfe59d2345faMukund Sivaraman DNAME handling when parsing fetch reply messages.
bfd4b9e11aa9e8c2b43022a6b7a896b26bd5d7a0Witold Krecicki (CVE-2016-1286) [RT #41753]
29868ebbe3c7bc06f833e329ea190dc442331bf1Mark Andrews4318. [security] Malformed control messages can trigger assertions
29868ebbe3c7bc06f833e329ea190dc442331bf1Mark Andrews in named and rndc. (CVE-2016-1285) [RT #41666]
92cc6acdff1ecbf157e4ab0efe3f79367233f022Mark Andrews4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
2f450fcd295795fb1771432e098af3d6e52c8a0bMark Andrews4316. [func] Add option to tools to print RRs in unknown
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews presentation format [RT #41595].
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews4315. [bug] Check that configured view class isn't a meta class.
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews [RT #41572].
6b8519147a5c24b4a5942042e83fd539d0d445ccEvan Hunt4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
6b8519147a5c24b4a5942042e83fd539d0d445ccEvan Hunt testing tools provided by Nominum, Inc.
09f82f50798e170b172e6ba358ed123536243839Evan Hunt4313. [bug] Handle ns_client_replace failures in test mode.
861aa4e9039e6f354545177c4c2323b485549602Mark Andrews4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
8475bed9de77920f884f1ae296f581efbd1e42f8Mark Andrews was not consistent. [RT #41600]
821ff5e8fa1df2e09fea157ee3e298eef6cf4ec9Evan Hunt4311. [bug] Prevent "rndc delzone" from being used on
821ff5e8fa1df2e09fea157ee3e298eef6cf4ec9Evan Hunt response-policy zones. [RT #41593]
f06b6a9b14509a3b473f52dd797bc490f6f6511dMark Andrews4310. [performance] Use __builtin_expect() where available to annotate
f06b6a9b14509a3b473f52dd797bc490f6f6511dMark Andrews conditions with known behavior. [RT #41411]
aa9b64060fb6e946a920e957805f564d149e88e0Evan Hunt4309. [cleanup] Remove the spurious "none" filename from log messages
aa9b64060fb6e946a920e957805f564d149e88e0Evan Hunt when processing built-in configuration. [RT #41594]
412f873b9fafa0f8161a1203e7731d9d67052e49Mark Andrews4308. [func] Added operating system details to "named -V"
412f873b9fafa0f8161a1203e7731d9d67052e49Mark Andrews output. [RT #41452]
72ac929f2bfe186ab4fe2d9425685d6ef419f200Mark Andrews4307. [bug] "dig +subnet" and "mdig +subnet" could send
72ac929f2bfe186ab4fe2d9425685d6ef419f200Mark Andrews incorrectly-formatted Client Subnet options
a70fc47e9dc165175e77f091076559748858a488Mark Andrews if the prefix length was not divisible by 8.
a70fc47e9dc165175e77f091076559748858a488Mark Andrews Also fixed a memory leak in "mdig". [RT #45178]
0526268c2b2806ceb67032e0bfee708b6e70e004Mark Andrews4306. [maint] Added a PKCS#11 openssl patch supporting
0526268c2b2806ceb67032e0bfee708b6e70e004Mark Andrews version 1.0.2f [RT #38312]
932715fbbe449e814612a9ae39eac885548de5bfEvan Hunt4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
932715fbbe449e814612a9ae39eac885548de5bfEvan Hunt from the zone's apex. [RT #41483]
f824c65d1fb6a2490b03228e63cc43dae6844f73Mark Andrews4304. [port] xfer system test failed as 'tail -n +value' is not
90174e64f49bb7cba6a83fb665ebcb597aad7b57Evan Hunt portable. [RT #41315]
b9d6758fc606245d79fd6e03a31c76c586694377Mark Andrews4303. [bug] "dig +subnet" was unable to send a prefix length of
90174e64f49bb7cba6a83fb665ebcb597aad7b57Evan Hunt zero, as it was incorrectly changed to 32 for v4
6588a2b404365cea59e71a3f639349272600f68dMark Andrews prefixes or 128 for v6 prefixes. In addition to
6588a2b404365cea59e71a3f639349272600f68dMark Andrews fixing this, "dig +subnet=0" has been added as a
6588a2b404365cea59e71a3f639349272600f68dMark Andrews short form for 0.0.0.0/0. The same changes have
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt also been made in "mdig". [RT #41553]
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
9260c1157d12ef716fe6227fd8af845ec7fd1eedMukund Sivaraman4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534]
9260c1157d12ef716fe6227fd8af845ec7fd1eedMukund Sivaraman4300. [bug] A flag could be set in the wrong field when setting
930719e8767e0a58ca1b57cfbbb2b07b885afd14Mukund Sivaraman up non-recursive queries; this could cause the
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt SERVFAIL cache to cache responses it shouldn't.
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt New querytrace logging has been added which
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt identified this error. [RT #41155]
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt4299. [bug] Check that exactly totallen bytes are read when
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt reading a RRset from raw files in both single read
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt and incremental modes. [RT #41402]
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt4298. [bug] dns_rpz_add errors in loadzone were not being
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt propagated up the call stack. [RT #41425]
a239044323418956d7d48c14d61d19f721cc5ba5Witold Krecicki4297. [test] Ensure delegations in RPZ zones fail robustly.
65d59a4307d00f6b4e278b730c278502e5449da8Mark Andrews4296. [bug] TCP packet sizes were calculated incorrectly in the
65d59a4307d00f6b4e278b730c278502e5449da8Mark Andrews stats channel; they could be counted in the wrong
18749940aee8ee6cf8fc6a81f659819310d5aa78Mark Andrews histogram bucket. [RT #40587]
ffdd3bc812a140fb0e3d5b6f0df0a4efbfe4b412Mark Andrews4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
09f4e41912d08b5c1685f4d23bd19d32f63db935Mark Andrews could allow incorrect text formatting of EDNS EXPIRE
09f4e41912d08b5c1685f4d23bd19d32f63db935Mark Andrews options. [RT #41437]
0dc485ffb6ca6e90979561db1705f6a89be8b8edMark Andrews4294. [bug] Fixed a regression in which "rndc stop -p" failed
c7e5ba1d17f2db135b2c1ab192c2746189394fa2Mark Andrews to print the PID. [RT #41513]
c7e5ba1d17f2db135b2c1ab192c2746189394fa2Mark Andrews4293. [bug] Address memory leak on priming query creation failure.
8a0b6b3901b34530a850d78758fe4e5b6218d193Mark Andrews4292. [placeholder]
8a0b6b3901b34530a850d78758fe4e5b6218d193Mark Andrews4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
2a12984ce69f7f49dc3aeef1b216e0c7c93373acMark Andrews4290. [func] The timers returned by the statistics channel
40c619daeeb99015afa31b1a4a76d6c20b0a3fc6Evan Hunt (indicating current time, server boot time, and
40c619daeeb99015afa31b1a4a76d6c20b0a3fc6Evan Hunt most recent reconfiguration time) are now reported
40c619daeeb99015afa31b1a4a76d6c20b0a3fc6Evan Hunt with millisecond accuracy. [RT #40082]
87e7d08a8bae58ab8edacaa990a4234063c23793Mar Andrews4289. [bug] The server could crash due to memory being used
87e7d08a8bae58ab8edacaa990a4234063c23793Mar Andrews after it was freed if a zone transfer timed out.
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt4288. [bug] Fixed a regression in resolver.c:possibly_mark()
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt which caused known-bogus servers to be queried
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt anyway. [RT #41321]
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt4287. [bug] Silence an overly noisy log message when message
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt parsing fails. [RT #41374]
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt4286. [security] render_ecs errors were mishandled when printing out
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt a OPT record resulting in a assertion failure.
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt (CVE-2015-8705) [RT #41397]
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt4285. [security] Specific APL data could trigger a INSIST.
e6d0a391f5f9b18f5bd497aefff269e474ee560cWitold Krecicki (CVE-2015-8704) [RT #41396]
e6d0a391f5f9b18f5bd497aefff269e474ee560cWitold Krecicki4284. [bug] Some GeoIP options were incorrectly documented
e6d0a391f5f9b18f5bd497aefff269e474ee560cWitold Krecicki using abbreviated forms which were not accepted by
98a7f8c7ae44bb98d5469cb3a4240c59abceba7fMark Andrews named. The code has been updated to allow both
98a7f8c7ae44bb98d5469cb3a4240c59abceba7fMark Andrews long and abbreviated forms. [RT #41381]
8d80b4939dd27dc3136ab152706160c613baa93aMark Andrews4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
8d80b4939dd27dc3136ab152706160c613baa93aMark Andrews4282. [func] 'dig +[no]mapped' determine whether the use of mapped
3836539e8747c65b789037b8ca8cd47badbb991fJeremy C. Reed IPv4 addresses over IPv6 is permitted or not. The
5c41d472275c096be8aafb239a301b9d7c0a2cd9Jeremy C. Reed default is +mapped. [RT #41307]
a21c415687a855f84fbf10db91671b1341e8b990Mark Andrews4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
a21c415687a855f84fbf10db91671b1341e8b990Mark Andrews4280. [performance] Use optimal message sizes to improve compression
a21c415687a855f84fbf10db91671b1341e8b990Mark Andrews in AXFRs. This reduces network traffic. [RT #40996]
47115d91ef32317a2c0eb9daaf9c910757568de0Mark Andrews4279. [test] Don't use fixed ports when unit testing. [RT #41194]
f6e45a5c54b7af4b1c303e8d3ff3b7d78622df9eMark Andrews4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
705d56b47a932cc277f980755e80ac4f46a18a64Mark Andrews4277. [performance] Improve performance of the RBT, the central zone
ff55c577ba8a95f763b8982b7ab5e4a980209a09Mark Andrews datastructure: The aux hashtable was improved,
ff55c577ba8a95f763b8982b7ab5e4a980209a09Mark Andrews hash function was updated to perform more
ff55c577ba8a95f763b8982b7ab5e4a980209a09Mark Andrews uniform mapping, uppernode was added to
e0a30050c8516a3d54a4f8dcdd88435704a8a3edMark Andrews dns_rbtnode, and other cleanups and performance
e0a30050c8516a3d54a4f8dcdd88435704a8a3edMark Andrews improvements were made. [RT #41165]
dd1bcab25cf91eccb77060023d94a306411f7f14Mark Andrews4276. [protocol] Add support for SMIMEA. [RT #40513]
741b63c8695bab0582e3f9f308993ab53a60b377Mark Andrews4275. [performance] Lazily initialize dns_compress->table only when
741b63c8695bab0582e3f9f308993ab53a60b377Mark Andrews compression is enabled. [RT #41189]
09177840c73c1edec0d085dd8d92f225ba371014Mark Andrews4274. [performance] Speed up typemap processing from text. [RT #41196]
09177840c73c1edec0d085dd8d92f225ba371014Mark Andrews4273. [bug] Only call dns_test_begin() and dns_test_end() once each
f43e5c8ed2e68b7064c909b1fece6d976799b8dbMark Andrews in nsec3_test as it fails with GOST if called multiple
7b1f63dcd1a20a7c66b869e323efcdbdb0612a0dMark Andrews4272. [bug] dig: the +norrcomments option didn't work with +multi.
fe51e068f0892ae9258d9fd0e14fe2a469ff8edfMark Andrews4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
0f2ecf4b5c6721629162d4fd32826189d33a9b03Mark Andrews4270. [security] Update allowed OpenSSL versions as named is
4d506ae0d1671e5a1272ef1ef13986af01616ac4Mark Andrews potentially vulnerable to CVE-2015-3193.
d261093639c90f1b13418706ea9077d690a29eb0Evan Hunt4269. [bug] Zones using "map" format master files currently
226339ed435db90da8e072ef46e2c27cf0dc687bEvan Hunt don't work as policy zones. This limitation has
226339ed435db90da8e072ef46e2c27cf0dc687bEvan Hunt now been documented; attempting to use such zones
226339ed435db90da8e072ef46e2c27cf0dc687bEvan Hunt in "response-policy" statements is now a
226339ed435db90da8e072ef46e2c27cf0dc687bEvan Hunt configuration error. [RT #38321]
757e405d3c22e263dbd4aef75f7a188f891625b9Mark Andrews4268. [func] "rndc status" now reports the path to the
295a711b72b075a77065b7a952860269b5ae5d1dMark Andrews configuration file. [RT #36470]
757e405d3c22e263dbd4aef75f7a188f891625b9Mark Andrews4267. [test] Check sdlz error handling. [RT #41142]
4523c3b371e0e8aa6451aefcf2ba593c4d16ea31Evan Hunt4266. [placeholder]
4523c3b371e0e8aa6451aefcf2ba593c4d16ea31Evan Hunt4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
a0ef8211d3bb5d4a7e56145e014c3da3466051c8Mark Andrews4264. [bug] Check const of strchr/strrchr assignments match
a0ef8211d3bb5d4a7e56145e014c3da3466051c8Mark Andrews argument's const status. [RT #41150]
3fa134363f99816b36e30822a098196810ae6f20Mark Andrews4263. [contrib] Address compiler warnings in mysqldyn module.
5a49f61ca968283d59c97e583fd6fb02ecaeb773Mark Andrews4262. [bug] Fixed a bug in epoll socket code that caused
5a49f61ca968283d59c97e583fd6fb02ecaeb773Mark Andrews sockets to not be registered for ready
8b29fc0b7a13db404f1a13fcfad42c2e7cfbe25bMark Andrews notification in some cases, causing named to not
0409e7451ce6898ba2e3fab401767df706b73fbfMark Andrews read from or write to them, resulting in what
0409e7451ce6898ba2e3fab401767df706b73fbfMark Andrews appear to the user as blocked connections.
075a3d60c23140f05db10d70126ff271ef6469c9Mark Andrews4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
4ca7391e640bd4f0abb31508019d3bd62819fa8eMark Andrews4260. [security] Insufficient testing when parsing a message allowed
4ca7391e640bd4f0abb31508019d3bd62819fa8eMark Andrews records with an incorrect class to be be accepted,
4ca7391e640bd4f0abb31508019d3bd62819fa8eMark Andrews triggering a REQUIRE failure when those records
fbd9aaa58c32abaeab1bd3ca6943b18ce19ea023Mark Andrews were subsequently cached. (CVE-2015-8000) [RT #40987]
fbd9aaa58c32abaeab1bd3ca6943b18ce19ea023Mark Andrews4259. [func] Add an option for non-destructive control channel
02093e4c3b98ec8eca1b6b3eb9a895054ff4f1c8Mark Andrews access using a "read-only" clause. In such
02093e4c3b98ec8eca1b6b3eb9a895054ff4f1c8Mark Andrews cases, a restricted set of rndc commands are
02093e4c3b98ec8eca1b6b3eb9a895054ff4f1c8Mark Andrews allowed for querying information from named.
9b956d342e93ab60d5d9367785b26546f7e49391Mark Andrews4258. [bug] Limit rndc query message sizes to 32 KiB. This should
5855fd79e375c74fc9df57ce0b4c4ef1b9fcdc3eMark Andrews not break any legitimate rndc commands, but will
5855fd79e375c74fc9df57ce0b4c4ef1b9fcdc3eMark Andrews prevent a rogue rndc query from allocating too
5855fd79e375c74fc9df57ce0b4c4ef1b9fcdc3eMark Andrews much memory. [RT #41073]
dc3912f3caac1104fef441fd18571b7a975708eaMark Andrews4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
dc3912f3caac1104fef441fd18571b7a975708eaMark Andrews4256. [bug] Allow rndc command arguments to be quoted so as
7d0dfa63cf3228b56053815bdf25da7d0e6dc501Mark Andrews to allow spaces. [RT #36665]
7d0dfa63cf3228b56053815bdf25da7d0e6dc501Mark Andrews4255. [performance] Add 'message-compression' option to disable DNS
18ba804f3ab6a7fea10404bb6675a49b59a153c5Mark Andrews compression in responses. [RT #40726]
18ba804f3ab6a7fea10404bb6675a49b59a153c5Mark Andrews4254. [bug] Address missing lock when getting zone's serial.
ec3dbae9eb0fdbda37c76c2b41e819c7982be1c4Mukund Sivaraman4253. [security] Address fetch context reference count handling error
ec3dbae9eb0fdbda37c76c2b41e819c7982be1c4Mukund Sivaraman on socket error. (CVE-2015-8461) [RT#40945]
ec3dbae9eb0fdbda37c76c2b41e819c7982be1c4Mukund Sivaraman4252. [func] Add support for automating the generation CDS and
ec3dbae9eb0fdbda37c76c2b41e819c7982be1c4Mukund Sivaraman CDNSKEY rrsets to named and dnssec-signzone.
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman4251. [bug] NTAs were deleted when the server was reconfigured
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman or reloaded. [RT #41058]
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman4250. [func] Log the TSIG key in use during inbound zone
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman transfers. [RT #41075]
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman4249. [func] Improve error reporting of TSIG / SIG(0) records in
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman the wrong location. [RT #41030]
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman4248. [performance] Add an isc_atomic_storeq() function, use it in
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman stats counters to improve performance.
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman [RT #39972] [RT #39979]
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
b750a49f3f599023cf32997f72924d4c2a5288d7Evan Hunt defined to report json library version. [RT #41045]
b750a49f3f599023cf32997f72924d4c2a5288d7Evan Hunt4246. [test] Ensure the statschannel system test runs when BIND
b750a49f3f599023cf32997f72924d4c2a5288d7Evan Hunt is not built with libjson. [RT #40944]
420a43c8d8028992a4e9c170022f97bfac689025Evan Hunt4245. [placeholder]
475099874c1cc95289aed8498d8c6cb0ef7e54b4Evan Hunt4244. [bug] The parser was not reporting that use-ixfr is obsolete.
b0ba1a6059b6d6c4b3aa77d8bc84cc443b981e01Mukund Sivaraman4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
b0ba1a6059b6d6c4b3aa77d8bc84cc443b981e01Mukund Sivaraman4242. [bug] Replace the client if not already replaced when
70862302f8f6a8398b6ca67516749486688603caMark Andrews prefetching. [RT #41001]
70862302f8f6a8398b6ca67516749486688603caMark Andrews4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
bf4a7968e8bff29ef5d85b292526206ffde3c5c6Evan Hunt the ARM. [RT #40955]
bf4a7968e8bff29ef5d85b292526206ffde3c5c6Evan Hunt4240. [port] Fix LibreSSL compatibility. [RT #40977]
d7262e5c8669d318531d47643356d554f7d0e2eeMukund Sivaraman4239. [func] Changed default servfail-ttl value to 1 second from 10.
d7262e5c8669d318531d47643356d554f7d0e2eeMukund Sivaraman Also, the maximum value is now 30 instead of 300.
984d2bb9e5aaca7c946bc78354c12b1dd75ed00aMukund Sivaraman4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
474921d733e9592ab93b3905907f2dcb393e12c9Mukund Sivaraman4237. [doc] Upgraded documentation toolchain to use DocBook 5
563878539af45d41143701a6d299e9b226937f5bMark Andrews and dblatex. [RT #40766]
9dc5ef7f24dba2be01d1cb10ba38c4a8b603d2b6Mark Andrews4236. [performance] On machines with 2 or more processors (CPU), the
9dc5ef7f24dba2be01d1cb10ba38c4a8b603d2b6Mark Andrews default value for the number of UDP listeners
9dc5ef7f24dba2be01d1cb10ba38c4a8b603d2b6Mark Andrews has been changed to the number of detected
7c0f238c505ed2fa29b5441de3ad6e5f91976379Evan Hunt processors minus one. [RT #40761]
7c0f238c505ed2fa29b5441de3ad6e5f91976379Evan Hunt4235. [func] Added support in named for "dnstap", a fast method of
efb028b6c879c67b4e5b858f0e318a57b1073f69Mark Andrews capturing and logging DNS traffic, and a new command
efb028b6c879c67b4e5b858f0e318a57b1073f69Mark Andrews "dnstap-read" to read a dnstap log file. Use
efb028b6c879c67b4e5b858f0e318a57b1073f69Mark Andrews "configure --enable-dnstap" to enable this
151f1bcd5efdc59a9727de7529c37664845203b7Mark Andrews feature (note that this requires libprotobuf-c
151f1bcd5efdc59a9727de7529c37664845203b7Mark Andrews and libfstrm). See the ARM for configuration details.
9b8f93083d7543baae86d6d078cb637cee14b4fcEvan Hunt Thanks to Robert Edmonds of Farsight Security.
c707e2b9861dfa3f86b3520b9c3630db70cb020cEvan Hunt4234. [func] Add deflate compression in statistics channel HTTP
c707e2b9861dfa3f86b3520b9c3630db70cb020cEvan Hunt server. [RT #40861]
c707e2b9861dfa3f86b3520b9c3630db70cb020cEvan Hunt4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
38122021242747404f7f3e02ff4428a7cb884b77Evan Hunt4232. [contrib] Address unchecked memory allocation calls in
38122021242747404f7f3e02ff4428a7cb884b77Evan Hunt query-loc and zone2ldap. [RT #40789]
c4567d06753c4420af492d07b720125a918fcf23Tinderbox User4231. [contrib] Address unchecked calloc call in dlz_mysqldyn_mod.c.
88278358cbfbaaf2073a04c2a74e0b56371d40feMukund Sivaraman4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
fc39b6a96109b78154ec148d20eaf29e8abc14b6Mukund Sivaraman uninitialized result. [RT #40839]
fc39b6a96109b78154ec148d20eaf29e8abc14b6Mukund Sivaraman4229. [bug] A variable could be used uninitialized in
88278358cbfbaaf2073a04c2a74e0b56371d40feMukund Sivaraman dns_update_signaturesinc. [RT #40784]
2cc21870b0dd92cde23305e0030e3e6e2bfd3cdaMukund Sivaraman4228. [bug] Address race condition in dns_client_destroyrestrans.
dbb064aa7972ef918d9a235b713108a4846cbb62Mark Andrews4227. [bug] Silence static analysis warnings. [RT #40828]
dbb064aa7972ef918d9a235b713108a4846cbb62Mark Andrews4226. [bug] Address a theoretical shutdown race in
3a49d0ff1000bb74a5f5abaef04f3e41e957c875Mark Andrews zone.c:notify_send_queue(). [RT #38958]
3a49d0ff1000bb74a5f5abaef04f3e41e957c875Mark Andrews4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
3a49d0ff1000bb74a5f5abaef04f3e41e957c875Mark Andrews shared libraries. [RT #39557]
0bc743f9bc0ad5989c9b2a65bf54d25c4f78d30dMark Andrews4224. [func] Added support for "dyndb", a new interface for loading
0bc743f9bc0ad5989c9b2a65bf54d25c4f78d30dMark Andrews zone data from an external database, developed by
b716b9cddcf2924b83c5ba2c21142cb4c626061fEvan Hunt Red Hat for the FreeIPA project.
b716b9cddcf2924b83c5ba2c21142cb4c626061fEvan Hunt DynDB drivers fully implement the BIND database
b716b9cddcf2924b83c5ba2c21142cb4c626061fEvan Hunt API, and are capable of significantly better
245c74ce39e801273ded5fd41e090cdd5563517bEvan Hunt performance and functionality than DLZ drivers,
245c74ce39e801273ded5fd41e090cdd5563517bEvan Hunt while taking advantage of advanced database
b399f4e5684a66123e2f38e0f7e254f0f3ca0cc6Mark Andrews features not available in BIND such as multi-master
b399f4e5684a66123e2f38e0f7e254f0f3ca0cc6Mark Andrews replication.
ff6dccd21c28b6746cdb635aafabdc502df72ee4Mark Andrews Thanks to Adam Tkac and Petr Spacek of Red Hat.
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt4223. [func] Add support for setting max-cache-size to percentage
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt of available physical memory, set default to 90%.
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt4222. [func] Bias IPv6 servers when selecting the next server to
33ca26968b638b4ff9c657e9574d14d1a04a52ddMukund Sivaraman query. [RT #40836]
33ca26968b638b4ff9c657e9574d14d1a04a52ddMukund Sivaraman4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
3e33f4198d1840fd0aed97d98ba0be8ac0cafd19Mark Andrews4220. [doc] Improve documentation for zone-statistics.
3e33f4198d1840fd0aed97d98ba0be8ac0cafd19Mark Andrews4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
3e33f4198d1840fd0aed97d98ba0be8ac0cafd19Mark Andrews EGAIN when these soft error are not retried for
3e33f4198d1840fd0aed97d98ba0be8ac0cafd19Mark Andrews isc_socket_send*().
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews4218. [bug] Potential null pointer dereference on out of memory
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews if mmap is not supported. [RT #40777]
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews4217. [protocol] Add support for CSYNC. [RT #40532]
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews4216. [cleanup] Silence static analysis warnings. [RT #40649]
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews4215. [bug] nsupdate: skip to next request on GSSTKEY create
307adf67922dd222bacf84ef0f074a0eb84d3a0aMark Andrews failure. [RT #40685]
753b27a7d325f8da6ef3dc8da8a2cc43e968ccb2Mark Andrews4214. [protocol] Add support for TALINK. [RT #40544]
753b27a7d325f8da6ef3dc8da8a2cc43e968ccb2Mark Andrews4213. [bug] Don't reuse a cache across multiple classes.
c44c77178e0bf420483b0dd0af43839bf636a6ccMukund Sivaraman4212. [func] Re-query if we get a bad client cookie returned over
c44c77178e0bf420483b0dd0af43839bf636a6ccMukund Sivaraman UDP. [RT #40748]
c44c77178e0bf420483b0dd0af43839bf636a6ccMukund Sivaraman4211. [bug] Ensure that lwresd gets at least one task to work
08f01297320b7ad55d0abff0aca9a577196079e2Mukund Sivaraman with if enabled. [RT #40652]
08f01297320b7ad55d0abff0aca9a577196079e2Mukund Sivaraman4210. [cleanup] Silence use after free false positive. [RT #40743]
4a61eae6514bfde56f8801ef66f27a8d462bd164Mark Andrews4209. [bug] Address resource leaks in dlz modules. [RT #40654]
4a61eae6514bfde56f8801ef66f27a8d462bd164Mark Andrews4208. [bug] Address null pointer dereferences on out of memory.
adbf81335b67be0cebdcf9f1f4fcb38ef4814f4dMark Andrews4207. [bug] Handle class mismatches with raw zone files.
2f66e2dd81c270647976eebd15a45dc4d6d2f318Mark Andrews4206. [bug] contrib: fixed a possible NULL dereference in
f10a67dad21d7dd87ee2144964faa639f96766b5Witold Krecicki DLZ wildcard module. [RT #40745]
f10a67dad21d7dd87ee2144964faa639f96766b5Witold Krecicki4205. [bug] 'named-checkconf -p' could include unwanted spaces
6e6dcfcb45a5d2477ddf55293e9e8f587b7bcfe4Mark Andrews when printing tuples with unset optional fields.
0439bfedd97fa2e004cbf572773d703b33fda10fMukund Sivaraman4204. [bug] 'dig +trace' failed to lookup the correct type if
0439bfedd97fa2e004cbf572773d703b33fda10fMukund Sivaraman the initial root NS query was retried. [RT #40296]
2a815e41d2b8f30fd4cc68ccd38064a6ee6e1103Mukund Sivaraman4203. [test] The rrchecker system test now tests conversion
b4e114e3cd99b8875fc677a1a1c7c8257ef5a7a6Mukund Sivaraman to and from unknown-type format. [RT #40584]
b4e114e3cd99b8875fc677a1a1c7c8257ef5a7a6Mukund Sivaraman4202. [bug] isccc_cc_fromwire() could return an incorrect
d14c2683625c5db500ab93fb7176a9570798ca1eMukund Sivaraman result. [RT #40614]
d14c2683625c5db500ab93fb7176a9570798ca1eMukund Sivaraman4201. [func] The default preferred-glue is now the address record
71931ab6b3815c953756a04e6029a3a113a2a9f4Mukund Sivaraman type of the transport the query was received
6a3249533aab706c30f8cd65956f2f963e857f8fWitold Krecicki over. [RT #40468]
9869bfeed4fab59c5730065cd7cce1f7c60b741fMark Andrews4200. [cleanup] win32: update BINDinstall to be BIND release
a85c6b35affa7179434c41b277109dca2cbe01ecMark Andrews independent. [RT #38915]
71931ab6b3815c953756a04e6029a3a113a2a9f4Mukund Sivaraman4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
af3770ed93e519d07a4696739d477764c8d5c4b8Witold Krecicki [RT #40545] [RT #40547] [RT #40561] [RT #40563]
59a9cb54c112fd979b772e832b819d8efc83b85dMukund Sivaraman4198. [placeholder]
59a9cb54c112fd979b772e832b819d8efc83b85dMukund Sivaraman4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
29ec74b60fcaef12c16ecb6bdb8c8ecb278d449fEvan Hunt4196. [doc] Improve how "enum + other" types are documented.
8a9bac8dec81997fec38fb880dc81b41eb026c27Mark Andrews4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
8a9bac8dec81997fec38fb880dc81b41eb026c27Mark Andrews4194. [bug] named-checkconf -p failed to properly print a port
eb447eca8847be14e93d7b2d524154433e4ee565Evan Hunt range. [RT #40634]
eb447eca8847be14e93d7b2d524154433e4ee565Evan Hunt4193. [bug] Handle broken servers that return BADVERS incorrectly.
8c9fba44a41e3ea23e7e8405029980aba672f7ceEvan Hunt4192. [bug] The default rrset-order of random was not always being
8c9fba44a41e3ea23e7e8405029980aba672f7ceEvan Hunt applied. [RT #40456]
38c19e577915221b1783791cbb4f4e3ceea20019Mark Andrews4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
38c19e577915221b1783791cbb4f4e3ceea20019Mark Andrews as per RFC 6763. [RT #37889]
8bb630c7513ecfe224622a3923f0de477c44f2a9Mark Andrews4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
e53e202ef3b51c58fb9abe0d15e3829a970b00e7Mark Andrews valid with check-names. <forest> still needs to be
e53e202ef3b51c58fb9abe0d15e3829a970b00e7Mark Andrews LDH. [RT #40399]
598b502695802c3d4e23316b85368e54f39f5cabMark Andrews4189. [cleanup] Don't exit on overly long tokens in named.conf.
a32b6291aa5f797e1336869390f99d4a655484c2Evan Hunt4188. [bug] Support HTTP/1.0 client properly on the statistics
a32b6291aa5f797e1336869390f99d4a655484c2Evan Hunt channel. [RT #40261]
39f11e83a34e8282c46afc6d189c209632cfeb6eCurtis Blackburn4187. [func] When any RR type implementation doesn't
a32b6291aa5f797e1336869390f99d4a655484c2Evan Hunt implement totext() for the RDATA's wire
c55a1da4fc1188afe88264f97c1b705e188ae1feEvan Hunt representation and returns ISC_R_NOTIMPLEMENTED,
c55a1da4fc1188afe88264f97c1b705e188ae1feEvan Hunt such RDATA is now printed in unknown
c55a1da4fc1188afe88264f97c1b705e188ae1feEvan Hunt presentation format (RFC 3597). RR types affected
c55a1da4fc1188afe88264f97c1b705e188ae1feEvan Hunt include LOC(29) and APL(42). [RT #40317].
cadf8d687b9719b87c121d5cc8b028b1ddccc642Evan Hunt4186. [bug] Fixed an RPZ bug where a QNAME would be matched
cadf8d687b9719b87c121d5cc8b028b1ddccc642Evan Hunt against a policy RR with wildcard owner name
cadf8d687b9719b87c121d5cc8b028b1ddccc642Evan Hunt (trigger) where the QNAME was the wildcard owner
705cea35a8f798340ac947713ab97791be521b52Mukund Sivaraman name's parent. For example, the bug caused a query
705cea35a8f798340ac947713ab97791be521b52Mukund Sivaraman with QNAME "example.com" to match a policy RR with
705cea35a8f798340ac947713ab97791be521b52Mukund Sivaraman "*.example.com" as trigger. [RT #40357]
705cea35a8f798340ac947713ab97791be521b52Mukund Sivaraman4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman owner name (trigger) would prevent another policy RR
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman with its parent owner name from being
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman loaded. For example, the bug caused a policy RR
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman with trigger "example.com" to not have any
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman effect when a previous policy RR with trigger
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman "*.example.com" existed in that RPZ zone.
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman4184. [bug] Fixed a possible memory leak in name compression
19365b43e922fcbaf5caff3f92b87b52cbc1b530Evan Hunt when rendering long messages. (Also, improved
7e6cf6fc6e700061a1cec3bcf67786706d956fc5Evan Hunt wire_test for testing such messages.) [RT #40375]
7e6cf6fc6e700061a1cec3bcf67786706d956fc5Evan Hunt4183. [cleanup] Use timing-safe memory comparisons in cryptographic
7e6cf6fc6e700061a1cec3bcf67786706d956fc5Evan Hunt code. Also, the timing-safe comparison functions have
7e6cf6fc6e700061a1cec3bcf67786706d956fc5Evan Hunt been renamed to avoid possible confusion with
247a9c2cf6637ca68b9b5d332131522bd157a3e9Mark Andrews memcmp(). Thanks to Loganaden Velvindron of
c7463967dbcb31c2ec0dd513986a9dec05994a0aMark Andrews AFRINIC. [RT #40148]
d9a0f1bea7c183864c72d0ad14f6b61fbe1b5b05Mark Andrews4182. [cleanup] Use mnemonics for RR class and type comparisons.
b947e1a521c6931f787d6d1b3604d5b138170c3dMukund Sivaraman4181. [bug] Queued notify messages could be dequeued from the
b947e1a521c6931f787d6d1b3604d5b138170c3dMukund Sivaraman wrong rate limiter queue. [RT #40350]
b947e1a521c6931f787d6d1b3604d5b138170c3dMukund Sivaraman4180. [bug] Error responses in pipelined queries could
b947e1a521c6931f787d6d1b3604d5b138170c3dMukund Sivaraman cause a crash in client.c. [RT #40289]
9e804040a29b9c3066c8471b43835f30707039b7Evan Hunt4179. [bug] Fix double frees in getaddrinfo() in libirs.
9e804040a29b9c3066c8471b43835f30707039b7Evan Hunt4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
8f25faf9720a0c2730c4ac80ea4c12ca1f25599fMukund Sivaraman text. [RT #40274]
8f25faf9720a0c2730c4ac80ea4c12ca1f25599fMukund Sivaraman4177. [bug] Fix assertion failure in parsing NSAP records from
8f25faf9720a0c2730c4ac80ea4c12ca1f25599fMukund Sivaraman text. [RT #40285]
dc877b38a0bdfd7caa0c129d6f5b5cbb1caa6848Evan Hunt4176. [bug] Address race issues with lwresd. [RT #40284]
dc877b38a0bdfd7caa0c129d6f5b5cbb1caa6848Evan Hunt4175. [bug] TKEY with GSS-API keys needed bigger buffers.
1c02dd9dd94c95a9a59bb6c10b669fb790853b10Evan Hunt4174. [bug] "dnssec-coverage -r" didn't handle time unit
1c02dd9dd94c95a9a59bb6c10b669fb790853b10Evan Hunt suffixes correctly. [RT #38444]
52aa2f94981aa570a37c659b451541171f7537a4Mark Andrews4173. [bug] dig +sigchase was not properly matching the trusted
b292230ab8dd33480dabad2b3615dcce5dd70c35Mark Andrews key. [RT #40188]
b292230ab8dd33480dabad2b3615dcce5dd70c35Mark Andrews4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
e77e44954909dd2e0af1ce724e01f4199ae1e9c0Mark Andrews4171. [bug] Fixed incorrect class checks in TSIG RR
ef1aaab9ed44bcc6b58d85de2673e382dc6a7c1dEvan Hunt implementation. [RT #40287]
ef1aaab9ed44bcc6b58d85de2673e382dc6a7c1dEvan Hunt4170. [security] An incorrect boundary check in the OPENPGPKEY
ef1aaab9ed44bcc6b58d85de2673e382dc6a7c1dEvan Hunt rdatatype could trigger an assertion failure.
c82b3781158672e8308b53a8b6289e432ceb48d0Mark Andrews (CVE-2015-5986) [RT #40286]
ef0e6744569fdef42fa93864443005dc0593b24cMark Andrews4169. [test] Added a 'wire_test -d' option to read input as
ef0e6744569fdef42fa93864443005dc0593b24cMark Andrews raw binary data, for use as a fuzzing harness.
ab973ec40cc7a79bbf930085b1293824caf73e7fFrancis Dupont4168. [security] A buffer accounting error could trigger an
ab973ec40cc7a79bbf930085b1293824caf73e7fFrancis Dupont assertion failure when parsing certain malformed
ab973ec40cc7a79bbf930085b1293824caf73e7fFrancis Dupont DNSSEC keys. (CVE-2015-5722) [RT #40212]
f1a261ba2d5e11a106a0a95c46b409a9daf138efMark Andrews4167. [func] Update rndc's usage output to include recently added
bcb68be0a8f3c3eca58d6a6a869267e5c1841de2Francis Dupont commands. Thanks to Tony Finch for submitting a
bcb68be0a8f3c3eca58d6a6a869267e5c1841de2Francis Dupont patch. [RT #40010]
c03fe78ef59b2373233db1a7b568cc2000d6d3b4Evan Hunt4166. [func] Print informative output from rndc showzone when
c03fe78ef59b2373233db1a7b568cc2000d6d3b4Evan Hunt allow-new-zones is not enabled for a view. Thanks to
c03fe78ef59b2373233db1a7b568cc2000d6d3b4Evan Hunt Tony Finch for submitting a patch. [RT #40009]
fc3ed1dbda48d0e832ffc8ad70394cd475986531Evan Hunt4165. [security] A failure to reset a value to NULL in tkey.c could
fc3ed1dbda48d0e832ffc8ad70394cd475986531Evan Hunt result in an assertion failure. (CVE-2015-5477)
c855e7170a7ddb5d4ebab69a771f35dc93e95e43Mark Andrews4164. [bug] Don't rename slave files and journals on out of memory.
e840f92bfba0881039f1cdfb3349ecb03382b7beMark Andrews4163. [bug] Address compiler warnings. [RT #40024]
bc8f82492dfdfa8b6d58bca850fa328e176cfd91Mark Andrews4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
bc8f82492dfdfa8b6d58bca850fa328e176cfd91Mark Andrews4161. [test] Add JSON test for traffic size stats; also test
ac31adc3b76a3acf61c711d1cd49480a288b1317Mukund Sivaraman for consistency between "rndc stats" and the XML
ac31adc3b76a3acf61c711d1cd49480a288b1317Mukund Sivaraman and JSON statistics channel contents. [RT #38700]
2c4d5faf7fa490aa537efa36b1ba26d0cd80e442Mukund Sivaraman4160. [placeholder]
2c4d5faf7fa490aa537efa36b1ba26d0cd80e442Mukund Sivaraman4159. [cleanup] Alphabetize dig's help output. [RT #39966]
54fe1d05b6d78120452c71023629b35cbe55e97fMark Andrews4158. [placeholder]
d9b37259f3abcb27e6b1b0bcb312c26cfd229fdaEvan Hunt4157. [placeholder]
d9b37259f3abcb27e6b1b0bcb312c26cfd229fdaEvan Hunt4156. [func] Added statistics counters to track the sizes
f28e5058c33bfb99f8717d94c2525a976897dc91Evan Hunt of incoming queries and outgoing responses in
f28e5058c33bfb99f8717d94c2525a976897dc91Evan Hunt histogram buckets, as specified in RSSAC002.
febb020dceab01c12b406eeae6e825aca7411dd6Mark Andrews4155. [func] Allow RPZ rewrite logging to be configured on a
febb020dceab01c12b406eeae6e825aca7411dd6Mark Andrews per-zone basis using a newly introduced log clause in
fba894c98b8f3345a61932be6830993a059a211aMukund Sivaraman the response-policy option. [RT #39754]
f9f81abff0ea36f19474f3b7a11bf0f17c4f116cMukund Sivaraman4154. [bug] A OPT record should be included with the FORMERR
f9f81abff0ea36f19474f3b7a11bf0f17c4f116cMukund Sivaraman response when there is a malformed EDNS option.
f9f81abff0ea36f19474f3b7a11bf0f17c4f116cMukund Sivaraman4153. [bug] Dig should zero non significant +subnet bits. Check
f9f81abff0ea36f19474f3b7a11bf0f17c4f116cMukund Sivaraman that non significant ECS bits are zero on receipt.
9a7532f83618b5abbfd7db59be77e451647ecbf2Mukund Sivaraman4152. [func] Implement DNS COOKIE option. This replaces the
e89972afcb893a824db11086f4f00388057170ccEvan Hunt experimental SIT option of BIND 9.10. The following
e89972afcb893a824db11086f4f00388057170ccEvan Hunt named.conf directives are available: send-cookie,
ebeb4b3e094f36121e05d7cc8226047db96ba4f6Mukund Sivaraman cookie-secret, cookie-algorithm, nocookie-udp-size
ebeb4b3e094f36121e05d7cc8226047db96ba4f6Mukund Sivaraman and require-server-cookie. The following dig options
ebeb4b3e094f36121e05d7cc8226047db96ba4f6Mukund Sivaraman are available: +[no]cookie[=value] and +[no]badcookie.
641b9fd39b1c3f895eca8dfe84d5d14d7742e045Evan Hunt4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
77b179cbbe7b820b5d838a675200a7b87eb12dacMark Andrews4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
641b9fd39b1c3f895eca8dfe84d5d14d7742e045Evan Hunt minimal fix. [RT #39667]
24f2cc7d06e4bb6625f90323e44b42e0cad63588Mukund Sivaraman4149. [bug] Fixed a race condition in the getaddrinfo()
73eacba1f107468b30e8aa7cd6e213bb2d7f3142Evan Hunt implementation in libirs, which caused the delv
73eacba1f107468b30e8aa7cd6e213bb2d7f3142Evan Hunt utility to crash with an assertion failure when using
73eacba1f107468b30e8aa7cd6e213bb2d7f3142Evan Hunt the '@server' syntax with a hostname argument.
1b05d22789fd9a17aca4f459639bc2b6848c3160Mark Andrews4148. [bug] Fix a bug when printing zone names with '/' character
1b05d22789fd9a17aca4f459639bc2b6848c3160Mark Andrews in XML and JSON statistics output. [RT #39873]
29d52c001ff976561669375cf0c866b815a90c49Mark Andrews4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
29d52c001ff976561669375cf0c866b815a90c49Mark Andrews was returning referrals rather than nodata responses
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt when the AAAA records were filtered. [RT #39843]
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt4146. [bug] Address reference leak that could prevent a clean
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt shutdown. [RT #37125]
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt4145. [bug] Not all unassociated adb entries where being printed.
a8da00ef95ba37b9d071c2b8db1a0c967e060106Mark Andrews4144. [func] Add statistics counters for nxdomain redirections.
5f590e93d2ec1372a591b943a375506817787d8aMukund Sivaraman4143. [placeholder]
be9720ae2c2e933da36c5fb209dd4798a0337febMark Andrews4142. [bug] rndc addzone with view specified saved NZF config
be9720ae2c2e933da36c5fb209dd4798a0337febMark Andrews that could not be read back by named. This has now
be9720ae2c2e933da36c5fb209dd4798a0337febMark Andrews been fixed. [RT #39845]
bb5df338d9b119bb2fe18dea9b0e3034c3925f7bMark Andrews4141. [bug] A formatting bug caused rndc zonestatus to print
bb5df338d9b119bb2fe18dea9b0e3034c3925f7bMark Andrews negative numbers for large serial values. This has
f5ea8d2838e0d9279d00afe984aa67f07ad758b1Mark Andrews now been fixed. [RT #39854]
af669cb4fd7ecfb67ed145b176e5e764b249573bMark Andrews4140. [cleanup] Remove redundant nzf_remove() call during delzone.
044008f58f66d7a1b50c1dfc09cf8049e83a8227Evan Hunt4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
044008f58f66d7a1b50c1dfc09cf8049e83a8227Evan Hunt4138. [security] An uninitialized value in validator.c could result
1783676a64b8e390b756d775ae152509f1d76719Mukund Sivaraman in an assertion failure. (CVE-2015-4620) [RT #39795]
84f95ddb2572641022619950a211aff49e331c98Mukund Sivaraman4137. [bug] Make rndc reconfig report configuration errors the
84f95ddb2572641022619950a211aff49e331c98Mukund Sivaraman same way rndc reload does. [RT #39635]
07dd40e8eeff964d7e8018817378d903ded690e3Mukund Sivaraman4136. [bug] Stale statistics counters with the leading
07dd40e8eeff964d7e8018817378d903ded690e3Mukund Sivaraman '#' prefix (such as #NXDOMAIN) were not being
07dd40e8eeff964d7e8018817378d903ded690e3Mukund Sivaraman updated correctly. This has been fixed. [RT #39141]
db93c0def5c3e1e0ea40c7596482ad3fca4ed03bMukund Sivaraman4135. [cleanup] Log expired NTA at startup. [RT #39680]
db93c0def5c3e1e0ea40c7596482ad3fca4ed03bMukund Sivaraman4134. [cleanup] Include client-ip rules when logging the number
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt of RPZ rules of each type. [RT #39670]
ca6e60cb704c4c8eea1385a9fbef3eaa476eca28Evan Hunt4133. [port] Update how various json libraries are handled.
aeff3f0541beed6c7e384737bc83b46ea5e66a84Evan Hunt4132. [cleanup] dig: added +rd as a synonym for +recurse,
8378b0c190300e1652fc0ce129a4b9af4ef56e24Evan Hunt added +class as an unabbreviated alternative
8378b0c190300e1652fc0ce129a4b9af4ef56e24Evan Hunt to +cl. [RT #39686]
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt4131. [bug] Addressed further problems with reloading RPZ
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt zones. [RT #39649]
bfc11b9c659a9c46c478cd9176220a1a29a862a1Evan Hunt4130. [bug] The compatibility shim for *printf() misprinted some
177e523c48674936078c1422403840de159db5dfEvan Hunt large numbers. [RT #39586]
177e523c48674936078c1422403840de159db5dfEvan Hunt4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
177e523c48674936078c1422403840de159db5dfEvan Hunt4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
7acc2f21563b79229d592f09dde17e60d64afc8fEvan Hunt4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
7acc2f21563b79229d592f09dde17e60d64afc8fEvan Hunt key as per RFC 7344, Section 4.1. [RT #37215]
7acc2f21563b79229d592f09dde17e60d64afc8fEvan Hunt4126. [bug] Addressed a regression introduced in change #4121.
e58eb371a047c3a8aee4ce9aaca0f7f3673432a4Mukund Sivaraman4125. [test] Added tests for dig, renamed delv test to digdelv.
2ff2145ff53ec10df0e3c9c51906d63187fd54faMark Andrews4124. [func] Log errors or warnings encountered when parsing the
2ff2145ff53ec10df0e3c9c51906d63187fd54faMark Andrews internal default configuration. Clarify the logging
c213a58e803c0bba12e3df0f33405eaee907acc6Evan Hunt of errors and warnings encountered in rndc
bc8f82492dfdfa8b6d58bca850fa328e176cfd91Mark Andrews addzone or modzone parameters. [RT #39440]
f4102ab13ea049d73f5523c1a94fe2b83c408c9eMark Andrews4123. [port] Added %z (size_t) format options to the portable
a98f70acc8d36bf73c000808ffed455ad8f15b02Evan Hunt internal printf/sprintf implementation. [RT #39586]
8b61aef4dcc53267a500449058c0af705e3a64d1Evan Hunt4122. [bug] The server could match a shorter prefix than what was
2616cb69443f6ccd1900901c91e04d86886a7197Evan Hunt available in CLIENT-IP policy triggers, and so, an
2616cb69443f6ccd1900901c91e04d86886a7197Evan Hunt unexpected action could be taken. This has been
e785f9c1c7d838b9a773a757210388130eba5c4aMark Andrews corrected. [RT #39481]
e785f9c1c7d838b9a773a757210388130eba5c4aMark Andrews4121. [bug] On servers with one or more policy zones
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt configured as slaves, if a policy zone updated
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt during regular operation (rather than at
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt startup) using a full zone reload, such as via
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt AXFR, a bug could allow the RPZ summary data to
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt fall out of sync, potentially leading to an
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt assertion failure in rpz.c when further
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt incremental updates were made to the zone, such
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt as via IXFR. [RT #39567]
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt4120. [bug] A bug in RPZ could cause the server to crash if
1a849dab19287148f12da50d890f455f02aa3622Evan Hunt policy zones were updated while recursion was
1059bc2e42e8214f8b73d3b4cd181d8394a94a6aFrancis Dupont pending for RPZ processing of an active query.
801fb8b894c75fc1e3fa0284e096ade6dcdc1110Evan Hunt4119. [test] Allow dig to set the message opcode. [RT #39550]
801fb8b894c75fc1e3fa0284e096ade6dcdc1110Evan Hunt4118. [bug] Teach isc-config.sh about irs. [RT #39213]
801fb8b894c75fc1e3fa0284e096ade6dcdc1110Evan Hunt4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
4eefa351cc5549a2cebb45d274f10249e31f6945Mukund Sivaraman4116. [bug] Fix a bug in RPZ that could cause some policy
fe12a8f1077c1556922f1a3be2f592c761917838Mukund Sivaraman zones that did not specifically require
fe12a8f1077c1556922f1a3be2f592c761917838Mukund Sivaraman recursion to be treated as if they did;
b82963f96b452e2acbdf2ebd3d96de0ff0859a68Evan Hunt consequently, setting qname-wait-recurse no; was
b82963f96b452e2acbdf2ebd3d96de0ff0859a68Evan Hunt sometimes ineffective. [RT #39229]
e77ef50a57091eeb70d0a6d021638c92442c8f0aMark Andrews4115. [func] "rndc -r" now prints the result code (e.g.,
e77ef50a57091eeb70d0a6d021638c92442c8f0aMark Andrews ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
4b36b9c1fff56d836feeaa1dc7eb1d4676d9c8bbMark Andrews running the requested command. [RT #38913]
9175a4ed6325e611d4c95d74f6e447a3f4b50fa0Evan Hunt4114. [bug] Fix a regression in radix tree implementation
9175a4ed6325e611d4c95d74f6e447a3f4b50fa0Evan Hunt introduced by ECS code. This bug was never
9175a4ed6325e611d4c95d74f6e447a3f4b50fa0Evan Hunt released, but it was reported by a user testing
9175a4ed6325e611d4c95d74f6e447a3f4b50fa0Evan Hunt master. [RT #38983]
84ee90b52d4fb443c796f4e1481f98d5a95b5614Evan Hunt4113. [test] Check for Net::DNS is some system test
84ee90b52d4fb443c796f4e1481f98d5a95b5614Evan Hunt prerequisites. [RT #39369]
875574f1e4e87d8412b682084991954c10c20e35Mark Andrews4112. [bug] Named failed to load when "root-delegation-only"
875574f1e4e87d8412b682084991954c10c20e35Mark Andrews was used without a list of domains to exclude.
17dc146c7c2399e7bd64e776775535b9484ad1d5Mark Andrews4111. [doc] Alphabetize rndc man page. [RT #39360]
2817aa56ca12139849ba1017ff978833174f6294Evan Hunt4110. [bug] Address memory leaks / null pointer dereferences
2817aa56ca12139849ba1017ff978833174f6294Evan Hunt on out of memory. [RT #39310]
22e3e00ac95ec1ba89200c5d0e05670ed5ad8fefMark Andrews4109. [port] linux: support reading the local port range from
ff62d4458acda2110a3763ec576a4f728450662cEvan Hunt4108. [func] An additional NXDOMAIN redirect method (option
ff62d4458acda2110a3763ec576a4f728450662cEvan Hunt "nxdomain-redirect") has been added, allowing
ff62d4458acda2110a3763ec576a4f728450662cEvan Hunt redirection to a specified DNS namespace instead
ff62d4458acda2110a3763ec576a4f728450662cEvan Hunt of a single redirect zone. [RT #37989]
b88b75c2b88618f9c885c61e1ab0bd1cddd4474eEvan Hunt4107. [bug] Address potential deadlock when updating zone content.
b88b75c2b88618f9c885c61e1ab0bd1cddd4474eEvan Hunt4106. [port] Improve readline support. [RT #38938]
761d135ed686601f36fe3d0d4aaa6bf41287bb0fEvan Hunt4105. [port] Misc fixes for Microsoft Visual Studio
11463c0ac24692e229ec87f307f5e7df3c0a7e10Evan Hunt 2015 CTP6 in 64 bit mode. [RT #39308]
cc0a48a38173637f7a833e2da52bcfbcecb960b4Mark Andrews4104. [bug] Address uninitialized elements. [RT #39252]
cc0a48a38173637f7a833e2da52bcfbcecb960b4Mark Andrews4103. [port] Misc fixes for Microsoft Visual Studio
cc0a48a38173637f7a833e2da52bcfbcecb960b4Mark Andrews 2015 CTP6. [RT #39267]
f8eb4e5bfd1129d7639af5c2c768f53f0895952aMark Andrews4102. [bug] Fix a use after free bug introduced in change
f8eb4e5bfd1129d7639af5c2c768f53f0895952aMark Andrews #4094. [RT #39281]
b05a50c852608a40d1a06d6124bafb9b500c10c1Mukund Sivaraman4101. [bug] dig: the +split and +rrcomments options didn't
b05a50c852608a40d1a06d6124bafb9b500c10c1Mukund Sivaraman work with +short. [RT #39291]
f91c369b4ac84fad07e3106c5c00a15d87250d1eMukund Sivaraman4100. [bug] Inherited owernames on the line immediately following
f91c369b4ac84fad07e3106c5c00a15d87250d1eMukund Sivaraman a $INCLUDE were not working. [RT #39268]
f91c369b4ac84fad07e3106c5c00a15d87250d1eMukund Sivaraman4099. [port] clang: make unknown commandline options hard errors
a6f0e9c985220f0e4509777e6528afb64e0ad576Mukund Sivaraman when determining what options are supported.
a6f0e9c985220f0e4509777e6528afb64e0ad576Mukund Sivaraman4098. [bug] Address use-after-free issue when using a
a6f0e9c985220f0e4509777e6528afb64e0ad576Mukund Sivaraman predecessor key with dnssec-settime. [RT #39272]
f4dda9cf28f8be880097ee931b3237e09731a28aMark Andrews4097. [func] Add additional logging about xfrin transfer status.
79521569952d5e2475f05e4397dc976f4685056eMark Andrews4096. [bug] Fix a use after free of query->sendevent.
d1f1f13c7fc1f1515930053508f1645cfafaa478Mark Andrews4095. [bug] zone->options2 was not being properly initialized.
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt4094. [bug] A race during shutdown or reconfiguration could
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt cause an assertion in mem.c. [RT #38979]
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt4093. [func] Dig now learns the SIT value from truncated
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt responses when it retries over TCP. [RT #39047]
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
b0c18fffd3c81d3cb617dbba4d222d49ae266f28Mark Andrews4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
b0c18fffd3c81d3cb617dbba4d222d49ae266f28Mark Andrews4090. [bug] Fix a crash while parsing malformed CAA RRs in
b0c18fffd3c81d3cb617dbba4d222d49ae266f28Mark Andrews presentation format, i.e., from text such as
511ec77fca2e2df66b36f4756fd2459cfe7998d9Mark Andrews from master files. Thanks to John Van de
511ec77fca2e2df66b36f4756fd2459cfe7998d9Mark Andrews Meulebrouck Brendgard for discovering and
44032d3918d4aeb2f0cff3bb90e4a44569016559Mark Andrews reporting this problem. [RT #39003]
d8f2dd46cba3a16c2433e85657a5b15543013ca6Mark Andrews4089. [bug] Send notifies immediately for slave zones during
d8f2dd46cba3a16c2433e85657a5b15543013ca6Mark Andrews startup. [RT #38843]
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews4088. [port] Fixed errors when building with libressl. [RT #38899]
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews4087. [bug] Fix a crash due to use-after-free due to sequencing
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews of tasks actions. [RT #38495]
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
2ce24e13faacaf73286298f0068a7e7f0d03fdacMark Andrews4084. [bug] Fix a possible race in updating stats counters.
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews4083. [cleanup] Print the number of CPUs and UDP listeners
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman consistently in the log and in "rndc status"
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman output; indicate whether threads are supported
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman in "named -V" output. [RT #38811]
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman4082. [bug] Incrementally sign large inline zone deltas.
be7fba80190c33b0e50f086509b42bb319bb95b4Evan Hunt4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
03fd9cb81c2a92cf54baab5103db10e8ef9d524aMark Andrews4080. [func] Completed change #4022, adding a "lock-file" option
03fd9cb81c2a92cf54baab5103db10e8ef9d524aMark Andrews to named.conf to override the default lock file,
03fd9cb81c2a92cf54baab5103db10e8ef9d524aMark Andrews in addition to the "named -X <filename>" command
03fd9cb81c2a92cf54baab5103db10e8ef9d524aMark Andrews line option. Setting the lock file to "none"
017aa9aef63aaef6a370c180f6290b8388deda01Mark Andrews using either method disables the check completely.
017aa9aef63aaef6a370c180f6290b8388deda01Mark Andrews4079. [func] Preserve the case of the owner name of records to
017aa9aef63aaef6a370c180f6290b8388deda01Mark Andrews the RRset level. [RT #37442]
09290020bc9b3cd787f1a19e400413a6ca6827e3Evan Hunt4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
2ce24e13faacaf73286298f0068a7e7f0d03fdacMark Andrews CMSG_SPACE(sizeof(char)). [RT #38621]
c5e9423340dff77b2d3b79fcd4908708770a49c3Mukund Sivaraman4077. [test] Add static-stub regression test for DS NXDOMAIN
c5e9423340dff77b2d3b79fcd4908708770a49c3Mukund Sivaraman return making the static stub disappear. [RT #38564]
ea3aa401bc74d34560af190a4009d436054d1bfaMark Andrews4076. [bug] Named could crash on shutdown with outstanding
ea3aa401bc74d34560af190a4009d436054d1bfaMark Andrews reload / reconfig events. [RT #38622]
ea3aa401bc74d34560af190a4009d436054d1bfaMark Andrews4075. [placeholder]
6444de08d1aacf7396663b7a82d62eedf534c3d7Mark Andrews4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
6444de08d1aacf7396663b7a82d62eedf534c3d7Mark Andrews4073. [cleanup] Add libjson-c version number reporting to
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont "named -V"; normalize version number formatting.
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont4072. [func] Add a --enable-querytrace configure switch for
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont very verbose query trace logging. (This option
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont has a negative performance impact and should be
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont used only for debugging.) [RT #37520]
fc63119c8b7aa8827fad9e3e45e50c69bc2630e8Francis Dupont4071. [cleanup] Initialize pthread mutex attrs just once, instead of
fc63119c8b7aa8827fad9e3e45e50c69bc2630e8Francis Dupont doing it per mutex creation. [RT #38547]
d040fa2f1c9c3045420ee25933b699290ab19250Mark Andrews4070. [bug] Fix a segfault in nslookup in a query such as
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont4069. [doc] Reorganize options in the nsupdate man page.
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt4068. [bug] Omit unknown serial number from JSON zone statistics.
64d715c22acbed195703bb9b96aac2b938a83de2Mark Andrews4067. [cleanup] Reduce noise from RRL when query logging is
64d715c22acbed195703bb9b96aac2b938a83de2Mark Andrews disabled. [RT #38648]
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt4066. [doc] Reorganize options in the dig man page. [RT #38516]
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt4065. [test] Additional RFC 5011 tests. [RT #38569]
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt4064. [contrib] dnssec-keyset.sh: Generates a specified number
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt of DNSSEC keys with timing set to implement a
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt pre-publication key rollover strategy. Thanks
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt to Jeffry A. Spain. [RT #38459]
4ccffa13aa1f87d8d3dbdf7a74cf29b1c323ad52Tinderbox User4063. [bug] Asynchronous zone loads were not handled
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt correctly when the zone load was already in
e32d354f754a5d7847a0862bcd6302827ea225bfEvan Hunt progress; this could trigger a crash in zt.c.
e32d354f754a5d7847a0862bcd6302827ea225bfEvan Hunt4062. [bug] Fix an out-of-bounds read in RPZ code. If the
aee6c351d3b517f3e6a4ddf770606617fd42015bTinderbox User read succeeded, it doesn't result in a bug
e32d354f754a5d7847a0862bcd6302827ea225bfEvan Hunt during operation. If the read failed, named
e32d354f754a5d7847a0862bcd6302827ea225bfEvan Hunt could segfault. [RT #38559]
c4abb197160a74f7cd4ad23ebc63fbe0194010abEvan Hunt4061. [bug] Handle timeout in legacy system test. [RT #38573]
c4abb197160a74f7cd4ad23ebc63fbe0194010abEvan Hunt4060. [bug] dns_rdata_freestruct could be called on a
a0b4f6d952cc6adde281948cf995868b44f366e8Evan Hunt uninitialized structure when handling a error.
a0b4f6d952cc6adde281948cf995868b44f366e8Evan Hunt4059. [bug] Addressed valgrind warnings. [RT #38549]
0c3f2ff9738efe01c4e9cf62592516f27774b9d4Evan Hunt4058. [bug] UDP dispatches could use the wrong pseudorandom
a0b4f6d952cc6adde281948cf995868b44f366e8Evan Hunt number generator context. [RT #38578]
90fc237a1fdf1680ef254f16b497f90ac759f71bEvan Hunt4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
a0b4f6d952cc6adde281948cf995868b44f366e8Evan Hunt4056. [bug] Expanded automatic testing of trust anchor
90fc237a1fdf1680ef254f16b497f90ac759f71bEvan Hunt management and fixed several small bugs including
90fc237a1fdf1680ef254f16b497f90ac759f71bEvan Hunt a memory leak and a possible loss of key state
0c3f2ff9738efe01c4e9cf62592516f27774b9d4Evan Hunt information. [RT #38458]
3cc8c7d63040a3eafde2b00e1f60465e7053208aEvan Hunt4055. [func] "rndc managed-keys" can be used to check status
3cc8c7d63040a3eafde2b00e1f60465e7053208aEvan Hunt of trust anchors or to force keys to be refreshed,
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt Also, the managed keys data file has easier-to-read
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt comments. [RT #38458]
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt4054. [func] Added a new tool 'mdig', a lightweight clone of
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt dig able to send multiple pipelined queries.
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt4053. [security] Revoking a managed trust anchor and supplying
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt an untrusted replacement could cause named
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt to crash with an assertion failure.
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt (CVE-2015-1349) [RT #38344]
c3f6fd0e1983fc19e5fa735f52d2af8df74a69c3Evan Hunt4052. [bug] Fix a leak of query fetchlock. [RT #38454]
1feee79e1f8b946af9ebcc9dc31514aafb872438Mark Andrews4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
c2f8108123c40f9be5c7d8255300e578ca8a47a6Mark Andrews4050. [bug] RPZ could send spurious SERVFAILs in response
c2f8108123c40f9be5c7d8255300e578ca8a47a6Mark Andrews to duplicate queries. [RT #38510]
4e59131f1838d31eac9b355da467516ecd291752Mark Andrews4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
4e59131f1838d31eac9b355da467516ecd291752Mark Andrews4048. [bug] adb hash table was not being grown. [RT #38470]
f0a54842b1a50dac0b020958eb6025ed676f9a34Mark Andrews4047. [cleanup] "named -V" now reports the current running versions
f0a54842b1a50dac0b020958eb6025ed676f9a34Mark Andrews of OpenSSL and the libxml2 libraries, in addition to
0f5144163c44a67d9be986383769852a0dae502aMark Andrews the versions that were in use at build time.
9208b81867e8d11a641065d55ee40d24512a8452Mark Andrews4046. [bug] Accounting of "total use" in memory context
9208b81867e8d11a641065d55ee40d24512a8452Mark Andrews statistics was not correct. [RT #38370]
0f5144163c44a67d9be986383769852a0dae502aMark Andrews4045. [bug] Skip to next master on dns_request_createvia4 failure.
f274cbeaed0e4c5fdbde9f5c30833d7f1da37cd3Mark Andrews4044. [bug] Change 3955 was not complete, resulting in an assertion
00fb0253c9df8a4686115745ae91d501f62c7451Mark Andrews failure if the timing was just right. [RT #38352]
00fb0253c9df8a4686115745ae91d501f62c7451Mark Andrews4043. [func] "rndc modzone" can be used to modify the
175a8414a785689cb028e6e133385dba9e1b9a95Evan Hunt configuration of an existing zone, using similar
a5c7cfbac4e401c41741c123347739ab87c80a52Mark Andrews syntax to "rndc addzone". [RT #37895]
2ce24e13faacaf73286298f0068a7e7f0d03fdacMark Andrews4042. [bug] zone.c:iszonesecure was being called too late.
c6e22bbaefce98c37c1def3f971d214a9a147ad5Evan Hunt4041. [func] TCP sockets can now be shared while connecting.
c6e22bbaefce98c37c1def3f971d214a9a147ad5Evan Hunt (This will be used to enable client-side support
e82c572164eeaaa045a26196fe6096cbef3c10c8Mark Andrews of pipelined queries.) [RT #38231]
d84a4d216d513bec15e83ec6c6e7863a24ff548bMark Andrews4040. [func] Added server-side support for pipelined TCP
d84a4d216d513bec15e83ec6c6e7863a24ff548bMark Andrews queries. Clients may continue sending queries via
6932de75eff5f92475027d294264c80478c3c070Tinderbox User TCP while previous queries are being processed
dd66b77417aff9a7805f52b1e37ac48e647e0102Evan Hunt in parallel. (The new "keep-response-order"
dd66b77417aff9a7805f52b1e37ac48e647e0102Evan Hunt option allows clients to be specified for which
40b28f54029a5399fc17d895dd9e8bbcd97d6b70Mark Andrews the old behavior will still be used.) [RT #37821]
40b28f54029a5399fc17d895dd9e8bbcd97d6b70Mark Andrews4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
7fbfa379e25b675ec46ae30925b4b2923a07c893Francis Dupont4038. [bug] Add 'rpz' flag to node and use it to determine whether
7fbfa379e25b675ec46ae30925b4b2923a07c893Francis Dupont to call dns_rpz_delete. This should prevent unbalanced
498b0610312364afc5698b2e4caaa4dcc836133aEvan Hunt add / delete calls. [RT #36888]
498b0610312364afc5698b2e4caaa4dcc836133aEvan Hunt4037. [bug] also-notify was ignoring the tsig key when checking
7caeff39c28e82ec720c75d86528bb903dae77d4Jeremy C. Reed for duplicates resulting in some expected notify
498b0610312364afc5698b2e4caaa4dcc836133aEvan Hunt messages not being sent. [RT #38369]
90e0af6bc6c1bcafad126e1779fc478c0aeaeb8fEvan Hunt4036. [bug] Make call to open a temporary file name safe during
90e0af6bc6c1bcafad126e1779fc478c0aeaeb8fEvan Hunt NZF creation. [RT #38331]
72775a79fedd13e19a567432ace70d7ead28e433Mark Andrews4035. [bug] Close temporary and NZF FILE pointers before moving
72775a79fedd13e19a567432ace70d7ead28e433Mark Andrews the former into the latter's place, as required on
871f3c8beeb2134b17414ec167b90a57adb8e122Mark Andrews Windows. [RT #38332]
871f3c8beeb2134b17414ec167b90a57adb8e122Mark Andrews4034. [func] When added, negative trust anchors (NTA) are now
6a6821668d0ff38c34303d63f727fcd11cc36863Evan Hunt saved to files (viewname.nta), in order to
48f97c23b7d59c925fc3f4280972e50b8ef67c35Mark Andrews persist across restarts of the named server.
188690149b54145e1936898e565eb9eec139bbfeEvan Hunt4033. [bug] Missing out of memory check in request.c:req_send.
27174d90ccf7d15539b9384744dbbe7beae1723cEvan Hunt4032. [bug] Built-in "empty" zones did not correctly inherit the
27174d90ccf7d15539b9384744dbbe7beae1723cEvan Hunt "allow-transfer" ACL from the options or view.
eb6d61d5e02946e1a7a959bac37eae9dbbc2051bEvan Hunt4031. [bug] named-checkconf -z failed to report a missing file
eb6d61d5e02946e1a7a959bac37eae9dbbc2051bEvan Hunt with a hint zone. [RT #38294]
79921aeec24a15883cf3c22a15c77837e69a46beMark Andrews4030. [func] "rndc delzone" is now applicable to zones that were
79921aeec24a15883cf3c22a15c77837e69a46beMark Andrews configured in named.conf, as well as zones that
79921aeec24a15883cf3c22a15c77837e69a46beMark Andrews were added via "rndc addzone". (Note, however, that
188690149b54145e1936898e565eb9eec139bbfeEvan Hunt if named.conf is not also modified, the deleted zone
58a1051e92d46638306e2c17806307c04065c2b3Mark Andrews will return when named is reloaded.) [RT #37887]
8197ef7cb5619160600bf1c6e5e8374a6c10838fEvan Hunt4029. [func] "rndc showzone" displays the current configuration
8197ef7cb5619160600bf1c6e5e8374a6c10838fEvan Hunt of a specified zone. [RT #37887]
8197ef7cb5619160600bf1c6e5e8374a6c10838fEvan Hunt4028. [bug] $GENERATE with a zero step was not being caught as a
1831311ac6179951c8fcca75aa29dc2f5c0218b9Francis Dupont error. A $GENERATE with a / but no step was not being
c12c746e3abad9e4100c6694118adc1df398f0bcMark Andrews caught as a error. [RT #38262]
7caeff39c28e82ec720c75d86528bb903dae77d4Jeremy C. Reed4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
c81d56c03effca6303a4ba07c74163a2031b36e9Mark Andrews4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
5d722dead43a8c087afde46f958b1d3351a2125bTinderbox User4025. [port] bsdi: failed to build. [RT #38047]
12002ea49e5a5a6f7b9c22280dd2cb1f3f44abcfEvan Hunt4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
12002ea49e5a5a6f7b9c22280dd2cb1f3f44abcfEvan Hunt dns_rdata_opt_current, dns_rdata_txt_first,
6979ebf549b9c0ccd115bbf8c0d905600086f292Mark Andrews dns_rdata_txt_next and dns_rdata_txt_current were
6979ebf549b9c0ccd115bbf8c0d905600086f292Mark Andrews documented but not implemented. These have now been
6979ebf549b9c0ccd115bbf8c0d905600086f292Mark Andrews implemented.
b24061719ced97ecdbc7cfcf925c217d0dd80834Mark Andrews dns_rdata_spf_first, dns_rdata_spf_next and
b24061719ced97ecdbc7cfcf925c217d0dd80834Mark Andrews dns_rdata_spf_current were documented but not
9c0589bc8b1401e02c9b557737cb756e86b094ffMark Andrews implemented. The prototypes for these
9c0589bc8b1401e02c9b557737cb756e86b094ffMark Andrews functions have been removed. [RT #38068]
dda69168ead4bb44f5a23949a04ee2069b7d4ef0Mark Andrews4023. [bug] win32: socket handling with explicit ports and
dda69168ead4bb44f5a23949a04ee2069b7d4ef0Mark Andrews invoking named with -4 was broken for some
dda69168ead4bb44f5a23949a04ee2069b7d4ef0Mark Andrews configurations. [RT #38068]
ed1c845c1d3a6b9c2c38e9f7ab177d4ce0309639Mark Andrews4022. [func] Stop multiple spawns of named by limiting number of
ed1c845c1d3a6b9c2c38e9f7ab177d4ce0309639Mark Andrews processes to 1. This is done by using a lockfile and
7b04216015f6984fa43fc96f1c741ec287f84917Evan Hunt checking whether we can listen on any configured
7b04216015f6984fa43fc96f1c741ec287f84917Evan Hunt TCP interfaces. [RT #37908]
7d891eaf911e5cab1f704615f8f1ef87c8716f46Mark Andrews4021. [bug] Adjust max-recursion-queries to accommodate
7d891eaf911e5cab1f704615f8f1ef87c8716f46Mark Andrews the need for more queries when the cache is
7d891eaf911e5cab1f704615f8f1ef87c8716f46Mark Andrews empty. [RT #38104]
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews resulting in updates being sent to the wrong server.
fa827173df3418bc56774aa528f7ca30fd0ee17cMark Andrews4019. [func] If named is not configured to validate the answer
fa827173df3418bc56774aa528f7ca30fd0ee17cMark Andrews then allow fallback to plain DNS on timeout even
fa827173df3418bc56774aa528f7ca30fd0ee17cMark Andrews when we know the server supports EDNS. [RT #37978]
1c5990c2f98abf0c2adf7f54a531d8a4a3965414Mark Andrews4018. [placeholder]
80169c379dd4e0a6e164b7cac4bf5fa013c91138Mark Andrews4017. [test] Add system test to check lookups to legacy servers
80169c379dd4e0a6e164b7cac4bf5fa013c91138Mark Andrews with broken DNS behavior. [RT #37965]
10c12aa5493f34920585164c5fb54a7ac9109fbdMark Andrews4016. [bug] Fix a dig segfault due to bad linked list usage.
10c12aa5493f34920585164c5fb54a7ac9109fbdMark Andrews4015. [bug] Nameservers that are skipped due to them being
10c12aa5493f34920585164c5fb54a7ac9109fbdMark Andrews CNAMEs were not being logged. They are now logged
10c12aa5493f34920585164c5fb54a7ac9109fbdMark Andrews to category 'cname' as per BIND 8. [RT #37935]
6b6d6509f6d80afae74eeb9f2e5baba696e29f32Mark Andrews4014. [bug] When including a master file origin_changed was
6b6d6509f6d80afae74eeb9f2e5baba696e29f32Mark Andrews not being properly set leading to a potentially
9a36fb86f5019f25705d25ea729d03fcf8ecaa95Mark Andrews spurious 'inherited owner' warning. [RT #37919]
a266ab205bfd1c510022e2cd2a8cb62988242593Mark Andrews4013. [func] Add a new tcp-only option to server (config) /
a266ab205bfd1c510022e2cd2a8cb62988242593Mark Andrews peer (struct) to use TCP transport to send
a266ab205bfd1c510022e2cd2a8cb62988242593Mark Andrews queries (in place of UDP transport with a
3867312e4cc5c53d20f4020cc5b2459154406135Mark Andrews TCP fallback on truncated (TC set) response).
8dba0e7d87d192deef8b2aac197e4f508043a30cEvan Hunt4012. [cleanup] Check returned status of OpenSSL digest and HMAC
8dba0e7d87d192deef8b2aac197e4f508043a30cEvan Hunt functions when they return one. Note this applies
8dba0e7d87d192deef8b2aac197e4f508043a30cEvan Hunt only to FIPS capable OpenSSL libraries put in
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews FIPS mode and MD5. [RT #37944]
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews4011. [bug] master's list port and dscp inheritance was not
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews properly implemented. [RT #37792]
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews4010. [cleanup] Clear the prefetchable state when initiating a
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews prefetch. [RT #37399]
52131a835133a76cb62d4a7d8bcf5fe7bf858858Mark Andrews4009. [func] delv: added a +tcp option. [RT #37855]
f687e639f00a31e0884fb2c95a627b10b50c364bEvan Hunt4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
f687e639f00a31e0884fb2c95a627b10b50c364bEvan Hunt4007. [doc] Remove acl forward reference restriction. [RT #37772]
523f3d630243211ddfda852f5224f7eff681d3a5Evan Hunt4006. [security] A flaw in delegation handling could be exploited
523f3d630243211ddfda852f5224f7eff681d3a5Evan Hunt to put named into an infinite loop. This has
2fa1fc53324c0fca978c902e883c7cc011210536Mark Andrews been addressed by placing limits on the number
2fa1fc53324c0fca978c902e883c7cc011210536Mark Andrews of levels of recursion named will allow (default 7),
2fa1fc53324c0fca978c902e883c7cc011210536Mark Andrews and the number of iterative queries that it will
c9e976dc43070e2ed87988eeabed71195fab88baEvan Hunt send (default 50) before terminating a recursive
c9e976dc43070e2ed87988eeabed71195fab88baEvan Hunt query (CVE-2014-8500).
a8783019814daa36dd57afe3f527462822834c3bEvan Hunt The recursion depth limit is configured via the
a8783019814daa36dd57afe3f527462822834c3bEvan Hunt "max-recursion-depth" option, and the query limit
a8783019814daa36dd57afe3f527462822834c3bEvan Hunt via the "max-recursion-queries" option. [RT #37580]
948c80ffa8f4efbade049f49d9751675f6937cf4Tinderbox User4005. [func] The buffer used for returning text from rndc
a8783019814daa36dd57afe3f527462822834c3bEvan Hunt commands is now dynamically resizable, allowing
fec7998314cbdaf1dc89513ffff5b45fc8ed73fdMark Andrews arbitrarily large amounts of text to be sent back
fec7998314cbdaf1dc89513ffff5b45fc8ed73fdMark Andrews to the client. (Prior to this change, it was
fec7998314cbdaf1dc89513ffff5b45fc8ed73fdMark Andrews possible for the output of "rndc tsig-list" to be
7ae9399897c55d35cb6764277bce4b91d052e0dcEvan Hunt truncated.) [RT #37731]
3d066288ad6c6fe2ec2a54475f541a305a085068Evan Hunt4004. [bug] When delegations had AAAA glue but not A, a
3d066288ad6c6fe2ec2a54475f541a305a085068Evan Hunt reference could be leaked causing an assertion
3d066288ad6c6fe2ec2a54475f541a305a085068Evan Hunt failure on shutdown. [RT #37796]
74717eef53ba5d6aefc80eb262bbb090ff4bb3b5Mark Andrews4003. [security] When geoip-directory was reconfigured during
74717eef53ba5d6aefc80eb262bbb090ff4bb3b5Mark Andrews named run-time, the previously loaded GeoIP
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt data could remain, potentially causing wrong
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt ACLs to be used or wrong results to be served
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt based on geolocation (CVE-2014-8680). [RT #37720]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt4002. [security] Lookups in GeoIP databases that were not
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt loaded could cause an assertion failure
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt (CVE-2014-8680). [RT #37679]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt4001. [security] The caching of GeoIP lookups did not always
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt handle address families correctly, potentially
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt resulting in an assertion failure (CVE-2014-8680).
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt from the redirect zone. [RT #37722]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt3999. [func] "mkeys" and "nzf" files are now named after
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt their corresponding views, unless the view name
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt contains characters that would be incompatible
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt with use in a filename (i.e., slash, backslash,
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt or capital letters). If a view name does contain
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt these characters, the files will still be named
c5379f197647b6e20d5bf48276c8c3b9f676c447Evan Hunt using a cryptographic hash of the view name.
f5c24a7f48cd68337c21dea47a448ae2ff2ccb8cEvan Hunt Regardless of this, if a file using the old name
f5c24a7f48cd68337c21dea47a448ae2ff2ccb8cEvan Hunt format is found to exist, it will continue to be
f5c24a7f48cd68337c21dea47a448ae2ff2ccb8cEvan Hunt used. [RT #37704]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt3998. [bug] isc_radix_search was returning matches that were
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt too precise. [RT #37680]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt3996. [bug] Address use after free on out of memory error in
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt keyring_add. [RT #37639]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt3995. [bug] receive_secure_serial holds the zone lock for too
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt long. [RT #37626]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt3994. [func] Dig now supports setting the last unassigned DNS
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt header flag bit (dig +zflag). [RT #37421]
2548678376b5171567c902ef2d1768d2fc57f233Evan Hunt3993. [func] Dig now supports EDNS negotiation by default.
2548678376b5171567c902ef2d1768d2fc57f233Evan Hunt (dig +[no]ednsnegotiation).
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt Note: This is disabled by default in BIND 9.10
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt and enabled by default in BIND 9.11. [RT #37604]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt3992. [func] DiG can now send queries without questions
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt (dig +header-only). [RT #37599]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt3991. [func] Add the ability to buffer logging output by specifying
180319f572fb6c1ca7000d22ea79a8dd77ae3f91Evan Hunt "buffered yes;" when defining a channel. [RT #26561]
180319f572fb6c1ca7000d22ea79a8dd77ae3f91Evan Hunt3990. [test] Add tests for unknown DNSSEC algorithm handling.
7c73ac5e130db18837724ab53d46b23ddb98ce6eMark Andrews3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
7c73ac5e130db18837724ab53d46b23ddb98ce6eMark Andrews3988. [func] Allow the zone serial of a dynamically updatable
0c2313eb367de3b58801d643d52c0fd9bc0e5df7Evan Hunt zone to be updated via "rndc signing -serial".
0c2313eb367de3b58801d643d52c0fd9bc0e5df7Evan Hunt3987. [port] Handle future Visual Studio 14 incompatible changes.
11649973111d83027faf08ed4fb36a2b3c29c875Mark Andrews3986. [doc] Add the BIND version number to page footers
74745c760c8ac4462aceb2fa6e55bc545621c66dEvan Hunt in the ARM. [RT #37398]
74745c760c8ac4462aceb2fa6e55bc545621c66dEvan Hunt3985. [doc] Describe how +ndots and +search interact in dig.
087b3e8d90c482600c20f1bd6958697419c4e77dEvan Hunt3984. [func] Accept 256 byte long PINs in native PKCS#11
087b3e8d90c482600c20f1bd6958697419c4e77dEvan Hunt crypto. [RT #37410]
24aaa0440116357eef3ab3796ebe53318b03b1ecEvan Hunt3983. [bug] Change #3940 was incomplete: negative trust anchors
24aaa0440116357eef3ab3796ebe53318b03b1ecEvan Hunt could be set to last up to a week, but the
a0707b6acf359b78e06fd06228ebeec5758e7e1dJeremy C. Reed "nta-lifetime" and "nta-recheck" options were
a0707b6acf359b78e06fd06228ebeec5758e7e1dJeremy C. Reed still limited to one day. [RT #37522]
840d6a4614f6a561fc076d0797d144e9f28e06bcMark Andrews3982. [doc] Include release notes in product documentation.
53f91cbd80dc353ecb7e8914dae84a6cd85c67c6Mark Andrews3981. [bug] Cache DS/NXDOMAIN independently of other query types.
eeb13c7cd2ddde29b8605b9444451ea6e235e06aEvan Hunt3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
48f97c23b7d59c925fc3f4280972e50b8ef67c35Mark Andrews size. [RT #37187]
eeb13c7cd2ddde29b8605b9444451ea6e235e06aEvan Hunt3979. [bug] Negative trust anchor fetches were not properly
c3bb8bb228bc8a914abc77a411faace9861632eaMark Andrews managed. [RT #37488]
3d66a979b531b8549b412d9b592a6906fbb40143Mark Andrews3978. [test] Added a unit test for Diffie-Hellman key
e0421bf2c57e3bb8cee8fa33470bfcf450305867Evan Hunt computation, completing change #3974. [RT #37477]
3d66a979b531b8549b412d9b592a6906fbb40143Mark Andrews3977. [cleanup] "rndc secroots" reported a "not found" error when
fea81a5e0e9485b24262b6a7271a4643a4d2bad4Tinderbox User there were no negative trust anchors set. [RT #37506]
d90344224afc80459778e4c3412fd1f9463e24d4Mark Andrews3976. [bug] When refreshing managed-key trust anchors, clear
f5695ad0e1a6cc8e19bfec7b71476e138de6cb6cMark Andrews any cached trust so that they will always be
f5695ad0e1a6cc8e19bfec7b71476e138de6cb6cMark Andrews revalidated with the current set of secure
f5695ad0e1a6cc8e19bfec7b71476e138de6cb6cMark Andrews roots. [RT #37506]
58f1ac8dadf2c1f215343a0b2d1df2df954c4b19Mark Andrews3975. [bug] Don't populate or use the bad cache for queries that
58f1ac8dadf2c1f215343a0b2d1df2df954c4b19Mark Andrews don't request or use recursion. [RT #37466]
58f1ac8dadf2c1f215343a0b2d1df2df954c4b19Mark Andrews3974. [bug] Handle DH_compute_key() failure correctly in
cfe32752a66fe1f050d5ed7ddce75f6d58fe1637Evan Hunt3973. [test] Added hooks for Google Performance Tools CPU profiler,
cfe32752a66fe1f050d5ed7ddce75f6d58fe1637Evan Hunt including real-time/wall-clock profiling. Use
cfe32752a66fe1f050d5ed7ddce75f6d58fe1637Evan Hunt "configure --with-gperftools-profiler" to enable.
c5734964e6400f9e6d8c3f057fcccab596929deaMark Andrews3972. [bug] Fix host's usage statement. [RT #37397]
d0ffef73fdee75f30e33c628a31d031616ad9433Evan Hunt3971. [bug] Reduce the cascading failures due to a bad $TTL line
eaa2277753c6e7e642e83b2ccd27671a15336310Evan Hunt in named-checkconf / named-checkzone. [RT #37138]
eaa2277753c6e7e642e83b2ccd27671a15336310Evan Hunt3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
a338c2d94781f676283f1b110f7802c71e2015bdMukund Sivaraman3969. [test] Added 'delv' system test. [RT #36901]
3e90f6c373d2e6c9c9909b112468975c4c86544eMark Andrews3968. [bug] Silence spurious log messages when using 'named -[46]'.
3e90f6c373d2e6c9c9909b112468975c4c86544eMark Andrews3967. [test] Add test for inlined signed zone in multiple views
c38341ec435fb78de6d12c1001201f9ac7487b68Mark Andrews with different DNSKEY sets. [RT #35759]
c38341ec435fb78de6d12c1001201f9ac7487b68Mark Andrews3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
7712d1660a308ec3de17f1ddbbf801eb0d663f3eEvan Hunt3965. [func] Log outgoing packets and improve packet logging to
7712d1660a308ec3de17f1ddbbf801eb0d663f3eEvan Hunt support logging the remote address. [RT #36624]
b04839cfe21f131a8e7c7cae2a89e6ca8b678b5aMark Andrews3964. [func] nsupdate now performs check-names processing.
3a55d4352767acb4e0572aabfa917610001f5c9cMark Andrews3963. [test] Added NXRRSET test cases to the "dlzexternal"
bc5db10d721aa9bf570578e52e17371e67bfcf5cMark Andrews system test. [RT #37344]
bc5db10d721aa9bf570578e52e17371e67bfcf5cMark Andrews3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
e539e4370b95711606a269e69ccfc18fae8f9ce7Evan Hunt conditions. [RT #34663]
70be3889746884692aa49939833d624ddd432bf0Mark Andrews3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
d586792059601b37b17a9b3e317f4595cb30d854Evan Hunt BADSIG. [RT #37216]
2383eb527269d333df4222da20e4b422c3662daaEvan Hunt3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
586db4a3e4664109fe8ce31fdd6a1b9c5bb67cbfMukund Sivaraman3959. [bug] Updates could be lost if they arrived immediately
275a8affe74d29d5fa51c9ba7172b90e9968199aMark Andrews after a rndc thaw. [RT #37233]
275a8affe74d29d5fa51c9ba7172b90e9968199aMark Andrews3958. [bug] Detect when writeable files have multiple references
c6d2e19b964b304f1b0fd32d6faf43deca568979Evan Hunt in named.conf. [RT #37172]
6a6838f97363c7f3abe47e1fb116be2593bc53a5Mark Andrews3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
ac5ed748602c890d596bed07b0b23b8b5f42b2f6Mark Andrews and ECDSAP384SHA384. [RT #37183]
ac5ed748602c890d596bed07b0b23b8b5f42b2f6Mark Andrews3956. [func] Notify messages are now rate limited by notify-rate and
ac5ed748602c890d596bed07b0b23b8b5f42b2f6Mark Andrews startup-notify-rate instead of serial-query-rate.
89cf81b4625c574f60c21e0dce12b150f3c5583cMark Andrews3955. [bug] Notify messages due to changes are no longer queued
2064e46209f35d2afad526622d975647f9c2098bMark Andrews behind startup notify messages. [RT #24454]
2064e46209f35d2afad526622d975647f9c2098bMark Andrews3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
71ec6d09406771c0ad546d2d475a7f16c0198844Mark Andrews3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
71ec6d09406771c0ad546d2d475a7f16c0198844Mark Andrews3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
a920fb9dc2ff16f32dd73e53469d0febcdcc6c11Mark Andrews two name pointers were the same. [RT #37176]
a920fb9dc2ff16f32dd73e53469d0febcdcc6c11Mark Andrews3951. [func] Add the ability to set yet-to-be-defined EDNS flags
3c13af375900ffe79af4926953799e6123c9d698Mark Andrews to dig (+ednsflags=#). [RT #37142]
3c13af375900ffe79af4926953799e6123c9d698Mark Andrews3950. [port] Changed the bin/python Makefile to work around a
d734818278966c45af997c7242e8cccd7a91a0b3Mark Andrews bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
d734818278966c45af997c7242e8cccd7a91a0b3Mark Andrews3949. [experimental] Experimental support for draft-andrews-edns1 by sending
63e1ac1e0915dd1089493d6d092d39a3da817e59Mark Andrews EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
63e1ac1e0915dd1089493d6d092d39a3da817e59Mark Andrews building). Add support for limiting the EDNS version
63e1ac1e0915dd1089493d6d092d39a3da817e59Mark Andrews advertised to servers: server { edns-version 0; };
63e1ac1e0915dd1089493d6d092d39a3da817e59Mark Andrews Log the EDNS version received in the query log.
89119e3cafff373426858f6cec7c09539f53e209Mark Andrews3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
33399d6a143403bc4a9ccb9307af43ef04ab7633Mark Andrews --with-tuning=large. [RT #37059]
33399d6a143403bc4a9ccb9307af43ef04ab7633Mark Andrews3947. [cleanup] Set the executable bit on libraries when using
ef117da20559f2a65f46ed9eb40deab5026cbd66Mark Andrews libtool. [RT #36786]
ef117da20559f2a65f46ed9eb40deab5026cbd66Mark Andrews3946. [cleanup] Improved "configure" search for a python interpreter.
ba5c73b383b08326ab6b5ad2d7ca43e117e212f1Mark Andrews3945. [bug] Invalid wildcard expansions could be incorrectly
bf59efcf0ed41186a5f9c1ca61da15a3c99b46f3Mark Andrews accepted by the validator. [RT #37093]
bf59efcf0ed41186a5f9c1ca61da15a3c99b46f3Mark Andrews3944. [test] Added a regression test for "server-id". [RT #37057]
cac2181160bdb3ccc89e3560addae5e38d4c05e3Evan Hunt3943. [func] SERVFAIL responses can now be cached for a
faefeaddb39e693ea6cbcb81f2e5dbded21ced93Evan Hunt limited time (configured by "servfail-ttl",
faefeaddb39e693ea6cbcb81f2e5dbded21ced93Evan Hunt default 10 seconds, limit 30). This can reduce
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt the frequency of retries when an authoritative
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt server is known to be failing, e.g., due to
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt ongoing DNSSEC validation problems. [RT #21347]
c3bb8bb228bc8a914abc77a411faace9861632eaMark Andrews3942. [bug] Wildcard responses from a optout range should be
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt marked as insecure. [RT #37072]
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt3941. [doc] Include the BIND version number in the ARM. [RT #37067]
f5bb5eb7f6640af4a94e666bf1d7f84a6a7f1f23Mark Andrews3940. [func] "rndc nta" now allows negative trust anchors to be
f5bb5eb7f6640af4a94e666bf1d7f84a6a7f1f23Mark Andrews set for up to one week. [RT #37069]
a0d411c05f12c36b298d811af3b4f2c9f08e86d4Mark Andrews3939. [func] Improve UPDATE forwarding performance by allowing TCP
a0d411c05f12c36b298d811af3b4f2c9f08e86d4Mark Andrews connections to be shared. [RT #37039]
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman3938. [func] Added quotas to be used in recursive resolvers
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman that are under high query load for names in zones
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman whose authoritative servers are nonresponsive or
c1d33c159bf81d6faf9948ac9a6f307ca52284afEvan Hunt are experiencing a denial of service attack.
c1d33c159bf81d6faf9948ac9a6f307ca52284afEvan Hunt - "fetches-per-server" limits the number of
06e0d6bb126e9986f29036e671b59f48b1d2efbcEvan Hunt simultaneous queries that can be sent to any
06e0d6bb126e9986f29036e671b59f48b1d2efbcEvan Hunt single authoritative server. The configured
06e0d6bb126e9986f29036e671b59f48b1d2efbcEvan Hunt value is a starting point; it is automatically
06e0d6bb126e9986f29036e671b59f48b1d2efbcEvan Hunt adjusted downward if the server is partially or
8d8f9f7f86a33a155dd74b9b2c1317afca555d54Evan Hunt completely non-responsive. The algorithm used to
8d8f9f7f86a33a155dd74b9b2c1317afca555d54Evan Hunt adjust the quota can be configured via the
8d8f9f7f86a33a155dd74b9b2c1317afca555d54Evan Hunt "fetch-quota-params" option.
7c9d11b654028f9901183c076b37a5494635f447Evan Hunt - "fetches-per-zone" limits the number of
7c9d11b654028f9901183c076b37a5494635f447Evan Hunt simultaneous queries that can be sent for names
7c9d11b654028f9901183c076b37a5494635f447Evan Hunt within a single domain. (Note: Unlike
20dec973da306d5b0776c9d3b598fdbd3a59a28eMark Andrews "fetches-per-server", this value is not
20dec973da306d5b0776c9d3b598fdbd3a59a28eMark Andrews self-tuning.)
20dec973da306d5b0776c9d3b598fdbd3a59a28eMark Andrews - New stats counters have been added to count
3b187cad7a1754e098ab9dabfcb44c8b437fb589Mark Andrews queries spilled due to these quotas.
b16d99bac1d100735224ab3eaa84632537ff21b5Mark Andrews See the ARM for details of these options. [RT #37125]
79d27f505a67ee1fb5cf104cbe7b1ead67d252b4Mukund Sivaraman3937. [func] Added some debug logging to better indicate the
79d27f505a67ee1fb5cf104cbe7b1ead67d252b4Mukund Sivaraman conditions causing SERVFAILs when resolving.
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman3936. [func] Added authoritative support for the EDNS Client
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman Subnet (ECS) option.
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman ACLs can now include "ecs" elements which specify
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman an address or network prefix; if an ECS option is
93d4128dcd54c152cf97b2c36caba8f3c8de3280Mark Andrews included in a DNS query, then the address encoded
93d4128dcd54c152cf97b2c36caba8f3c8de3280Mark Andrews in the option will be matched against "ecs" ACL
50a745417461a4c007248202bb3a8bf7be426813Mark Andrews Also, if an ECS address is included in a query,
50a745417461a4c007248202bb3a8bf7be426813Mark Andrews then it will be used instead of the client source
50a745417461a4c007248202bb3a8bf7be426813Mark Andrews address when matching "geoip" ACL elements. This
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt behavior can be overridden with "geoip-use-ecs no;".
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt (Note: to enable "geoip" ACLs, use "configure
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt --with-geoip". This requires libGeoIP version
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt 1.5.0 or higher.)
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt When "ecs" or "geoip" ACL elements are used to
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt select a view for a query, the response will include
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt an ECS option to indicate which client network the
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt answer is valid for.
fa6308bd57f716732ba70bbafc1d09e861e4acc1Mark Andrews (Thanks to Vincent Bernat.) [RT #36781]
a4d76e3f0ba6f1fc2ba4b324f318e909b83bc860Evan Hunt3935. [bug] "geoip asnum" ACL elements would not match unless
a4d76e3f0ba6f1fc2ba4b324f318e909b83bc860Evan Hunt the full organization name was specified. They
a4d76e3f0ba6f1fc2ba4b324f318e909b83bc860Evan Hunt can now match against the AS number alone (e.g.,
3d751891410f9892ca1c1deba2f7d8556ae91b0cMark Andrews AS1234). [RT #36945]
3d751891410f9892ca1c1deba2f7d8556ae91b0cMark Andrews3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
800d25b8482c52487b4dab53cb10fa74061f1e94Mark Andrews sit-secret documentation. [RT #36980]
800d25b8482c52487b4dab53cb10fa74061f1e94Mark Andrews3933. [bug] Corrected the implementation of dns_rdata_casecompare()
800d25b8482c52487b4dab53cb10fa74061f1e94Mark Andrews for the HIP rdata type. [RT #36911]
9b819daddf8f4a5bd42276ee91bf9686d42f3ceeMark Andrews3932. [test] Improved named-checkconf tests. [RT #36911]
586d94eb740587975d5348b22a5fb8440d95925dMark Andrews3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
f7ae6c8fdd2cd5e276251647e6852cccfc92847bMark Andrews3930. [bug] "rndc nta -r" could cause a server hang if the
586d94eb740587975d5348b22a5fb8440d95925dMark Andrews NTA was not found. [RT #36909]
a569e1b3213668bc704194367ea12c23456ad1d2Mark Andrews3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
a569e1b3213668bc704194367ea12c23456ad1d2Mark Andrews3928. [test] Improve rndc system test. [RT #36898]
c6f7d2b5f1378e3d61770766ee9fdd922471eb2fMark Andrews3927. [bug] dig: report PKCS#11 error codes correctly when
603a78708343f063b44affb882ef93bb19a5142aMark Andrews compiled with --enable-native-pkcs11. [RT #36956]
603a78708343f063b44affb882ef93bb19a5142aMark Andrews3926. [doc] Added doc for geoip-directory. [RT #36877]
ba586e9568364eb2da871f5fb2b71716f7c31865Mark Andrews3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
a0f91e910bd9af006a65e555ec4082864ca1eb8dMark Andrews3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
a0f91e910bd9af006a65e555ec4082864ca1eb8dMark Andrews3923. [bug] Sanity check the xml2-config output. [RT #22246]
0fe07891819138ad6e1de45f279cff940d170542Mark Andrews3922. [bug] When resigning, dnssec-signzone was removing
0fe07891819138ad6e1de45f279cff940d170542Mark Andrews all signatures from delegation nodes. It now
0fe07891819138ad6e1de45f279cff940d170542Mark Andrews retains DS and (if applicable) NSEC signatures.
ea58c563bccc2a8dc20886c99c7c3334a971b6d3Evan Hunt3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
27b09ceb12ec95de461bd2780615d4064ccb1419Mark Andrews3920. [doc] Added doc for masterfile-style. [RT #36823]
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt3919. [bug] dig: continue to next line if a address lookup fails
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt in batch mode. [RT #36755]
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt3918. [doc] Update check-spf documentation. [RT #36910]
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt3917. [bug] dig, nslookup and host now continue on names that are
6fa84a3e255ef9e6233f0a8d134fc6d273f04599Evan Hunt too long after applying a search list elements.
104f0e51ac7f472e69d53e4900fe121b7dc78537Tinderbox User3916. [contrib] zone2sqlite checked wrong result code. Address
6fa84a3e255ef9e6233f0a8d134fc6d273f04599Evan Hunt compiler warnings. [RT #36931]
01f881c1c5683054ee3366929eae6f811777ce46Mark Andrews3915. [bug] Address a assertion if a route event arrived while
01f881c1c5683054ee3366929eae6f811777ce46Mark Andrews shutting down. [RT #36887]
ca84a056bdb492e8894c70fd7bf6a885df03039fMark Andrews3914. [bug] Allow the URI target and CAA value fields to
a14fe8522977d391096942aae5250f00ca32d2d4Mark Andrews be zero length. [RT #36737]
a14fe8522977d391096942aae5250f00ca32d2d4Mark Andrews3913. [bug] Address race issue in dispatch. [RT #36731]
5a8edcafd13fc63a066e8e42e0f95cdbf9606414Mark Andrews3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
05816676bb82a5657a741ef4d378c7fb83912cfcMark Andrews3911. [func] Implement EDNS EXPIRE option client side, allowing
05816676bb82a5657a741ef4d378c7fb83912cfcMark Andrews a slave server to set the expiration timer correctly
05816676bb82a5657a741ef4d378c7fb83912cfcMark Andrews when transferring zone data from another slave
29225772176ec580b2c903928a5c18e2e24889d0Mark Andrews server. [RT #35925]
1b513b6120e6f445960149b8f057aea19e1f5fe6Francis Dupont3910. [bug] Fix races to free event during shutdown. [RT #36720]
8114b0be01e98526f91da33f9685ac7014fcc598Mark Andrews3909. [bug] When computing the number of elements required for a
761f60fc356c9987258cd10b4aa216c6296d922bFrancis Dupont acl count_acl_elements could have a short count leading
0e338b60cdb2cf7cedb4fc17f6a14b518d1245c8Mark Andrews to a assertion failure. Also zero out new acl elements
0e338b60cdb2cf7cedb4fc17f6a14b518d1245c8Mark Andrews in dns_acl_merge. [RT #36675]
2c172a42b39da5913fc6b2c0d3ce987c206991faMark Andrews3908. [bug] rndc now differentiates between a zone in multiple
2c172a42b39da5913fc6b2c0d3ce987c206991faMark Andrews views and a zone that doesn't exist at all. [RT #36691]
faa01edd13613c077c3cb663c36f36bd527d1a4bMark Andrews3907. [cleanup] Alphabetize rndc help. [RT #36683]
1ea6e09c376b1351c614474a88675b1a9bda6571Evan Hunt3906. [protocol] Update URI record format to comply with
1ea6e09c376b1351c614474a88675b1a9bda6571Evan Hunt draft-faltstrom-uri-08. [RT #36642]
60988462e5d6db53205851d056e3482a29239be9Evan Hunt3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
60988462e5d6db53205851d056e3482a29239be9Evan Hunt3904. [func] Add the RPZ SOA to the additional section. [RT36507]
cd07e4d038fda6f9bacecb3067cc6fa43a67fc0aMark Andrews3903. [bug] Improve the accuracy of DiG's reported round trip
b36fc8294e1328912b940899d436c60986c92435Mark Andrews time. [RT 36611]
fe148bca7ea6612bb7e931fdcd2e66c32d2d2a9aMark Andrews3902. [bug] liblwres wasn't handling link-local addresses in
b36fc8294e1328912b940899d436c60986c92435Mark Andrews nameserver clauses in resolv.conf. [RT #36039]
dd820d8fd2714ee1ae53ff0c7f6973250048f2d2Mark Andrews3901. [protocol] Added support for CAA record type (RFC 6844).
c0c4512020c0a4a9e5b087cb8cad1cd68fb3f52eEvan Hunt3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
5d739300d12363f36ffa72836d2c10ff8c791b12Mark Andrews3899. [bug] "request-ixfr" is only applicable to slave and redirect
5d739300d12363f36ffa72836d2c10ff8c791b12Mark Andrews zones. [RT #36608]
6f78147f569c9f505ef048c2f9e4e1b5ef2a27e7Mark Andrews3898. [bug] Too small a buffer in tohexstr() calls in test code.
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt3897. [bug] RPZ summary information was not properly being updated
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt after a AXFR resulting in changes sometimes being
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt ignored. [RT #35885]
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt3896. [bug] Address performance issues with DSCP code on some
2b78610512f208a6a35eb0976d039c2001cba7e6Evan Hunt platforms. [RT #36534]
2b78610512f208a6a35eb0976d039c2001cba7e6Evan Hunt3895. [func] Add the ability to set the DSCP code point to dig.
0dc0b029e9aecc6e2139109091ea68cc6aff7081Evan Hunt3894. [bug] Buffers in isc_print_vsnprintf were not properly
0dc0b029e9aecc6e2139109091ea68cc6aff7081Evan Hunt initialized leading to potential overflows when
cd750f6e7449678173e8cfe080ae0bf3dcb424cfEvan Hunt printing out quad values. [RT #36505]
cd750f6e7449678173e8cfe080ae0bf3dcb424cfEvan Hunt3893. [bug] Peer DSCP values could be returned without being set.
5cef2421bde74ef8f789c9c83c1219553060ce16Mark Andrews3892. [bug] Setting '-t aaaa' in .digrc had unintended side
b4ba66ba1e36a6d8236d20be55273ce663819d69Evan Hunt effects. [RT #36452]
b4ba66ba1e36a6d8236d20be55273ce663819d69Evan Hunt3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
5cef2421bde74ef8f789c9c83c1219553060ce16Mark Andrews to install python programs.
6bc767b003ed72f831dff7bb1b8f1855de281eb6Mark Andrews3890. [bug] RRSIG sets that were not loaded in a single transaction
3e5743068c95036324c24efa47b36ab0f7916d47Evan Hunt at start up where not being correctly added to
3e5743068c95036324c24efa47b36ab0f7916d47Evan Hunt re-signing heaps. [RT #36302]
c11e46110b2b6236c68d89d4ea557c1d35e5d271Mark Andrews3889. [port] hurd: configure fixes as per:
c11e46110b2b6236c68d89d4ea557c1d35e5d271Mark Andrews https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
e01fbe2a45f9641968264a3bdf76d290e20521d7Evan Hunt3888. [func] 'rndc status' now reports the number of automatic
e01fbe2a45f9641968264a3bdf76d290e20521d7Evan Hunt zones. [RT #36015]
76884179fd3ba491db80a285c752671025f74730Mark Andrews3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
76884179fd3ba491db80a285c752671025f74730Mark Andrews they are easier to use in a debugger. [RT #36373]
eb1a7730f013e9a16d709c9ee8f41d73cde3680eEvan Hunt3886. [bug] rbtdb_write_header should use a once to initialize
eb1a7730f013e9a16d709c9ee8f41d73cde3680eEvan Hunt FILE_VERSION. [RT #36374]
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt3885. [port] Use 'open()' rather than 'file()' to open files in
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt3883. [placeholder]
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt3882. [func] By default, negative trust anchors will be tested
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt periodically to see whether data below them can be
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt validated, and if so, they will be allowed to
36e5ac00333d89001f0c518a7d381d16c38d0402Mark Andrews expire early. The "rndc nta -force" option
36e5ac00333d89001f0c518a7d381d16c38d0402Mark Andrews overrides this behavior. The default NTA lifetime
36e5ac00333d89001f0c518a7d381d16c38d0402Mark Andrews and the recheck frequency can be configured by the
36e5ac00333d89001f0c518a7d381d16c38d0402Mark Andrews "nta-lifetime" and "nta-recheck" options. [RT #36146]
e916c4f840e6f05c1137a2653b4ef70a1056bf74Mark Andrews3881. [bug] Address memory leak with UPDATE error handling.
471f2b71d89897204af3f2ab00a010e4327e44f9Mark Andrews3880. [test] Update ans.pl to work with new TSIG support in
471f2b71d89897204af3f2ab00a010e4327e44f9Mark Andrews Net::DNS; add additional Net::DNS version prerequisite
471f2b71d89897204af3f2ab00a010e4327e44f9Mark Andrews checks. [RT #36327]
1a9932dde111e05b4b9177c1146695817c3a20d2Evan Hunt3879. [func] Add version printing option to various BIND utilities.
471f2b71d89897204af3f2ab00a010e4327e44f9Mark Andrews3878. [bug] Using the incorrect filename for a DLZ module
471f2b71d89897204af3f2ab00a010e4327e44f9Mark Andrews caused a segmentation fault on startup. [RT #36286]
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt3877. [bug] Inserting and deleting parent and child nodes
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt in response policy zones could trigger an assertion
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt failure. [RT #36272]
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt3876. [bug] Improve efficiency of DLZ redirect zones by
4e7973990c2aaec391cf307a7e60583331568e01Evan Hunt suppressing unnecessary database lookups. [RT #35835]
4e7973990c2aaec391cf307a7e60583331568e01Evan Hunt3875. [cleanup] Clarify log message when unable to read private
4e7973990c2aaec391cf307a7e60583331568e01Evan Hunt key files. [RT #24702]
e560fbdf77b08ff23ab71b107f022829bcd552dbMark Andrews3874. [test] Check that only "check-names master" is needed for
e560fbdf77b08ff23ab71b107f022829bcd552dbMark Andrews updates to be accepted.
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt3872. [bug] Address issues found by static analysis. [RT #36209]
469bbe0f973bf33e20d6011748cb68fab8a9a12dMark Andrews3871. [bug] Don't publish an activated key automatically before
469bbe0f973bf33e20d6011748cb68fab8a9a12dMark Andrews its publish time. [RT #35063]
993cde8f0fe3e08283990cc9ff4a555b5e48ab91Mark Andrews3870. [func] Updated the random number generator used in
2dc978b8a1563f6dd413a8a9456659ade00f9e9eEvan Hunt the resolver to use the updated ChaCha based one
2dc978b8a1563f6dd413a8a9456659ade00f9e9eEvan Hunt (similar to OpenBSD's changes). Also moved the
a6d48ae49345c1995c7ac7c0628bf5f9eac0719aJeremy C. Reed RNG to libisc and added unit tests for it.
92fe6db3e46016f4ce0d6e372c745469bba10b5eEvan Hunt3869. [doc] Document that in-view zones cannot be used for
92fe6db3e46016f4ce0d6e372c745469bba10b5eEvan Hunt response policy zones. [RT #35941]
7cd8e7915afba7064c18c4bf74ecce0627c61027Evan Hunt3868. [bug] isc_mem_setwater incorrectly cleared hi_called
7cd8e7915afba7064c18c4bf74ecce0627c61027Evan Hunt potentially leaving over memory cleaner running.
102c454e783d3dd9dbb9ceb30ed28c983cafd546Mark Andrews3867. [func] "rndc nta" can now be used to set a temporary
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews negative trust anchor, which disables DNSSEC
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews validation below a specified name for a specified
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews period of time (not exceeding 24 hours). This
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews can be used when validation for a domain is known
38c3ed154a2e014dad359e852b08722defa118ebEvan Hunt to be failing due to a configuration error on
baad8d9fd8dd054ce1edf350ff0c0f2038a1519eEvan Hunt the part of the domain owner rather than a
baad8d9fd8dd054ce1edf350ff0c0f2038a1519eEvan Hunt spoofing attack. [RT #29358]
baad8d9fd8dd054ce1edf350ff0c0f2038a1519eEvan Hunt3866. [bug] Named could die on disk full in generate_session_key.
f0e9d6e905235482ff9b4be770ee35018fcd8234Evan Hunt3865. [test] Improved testability of the red-black tree
f0e9d6e905235482ff9b4be770ee35018fcd8234Evan Hunt implementation and added unit tests. [RT #35904]
7ef5dc87b64d639cadfcce868428f9fb2a84fb92Evan Hunt3864. [bug] RPZ didn't work well when being used as forwarder.
44fbdddcadd85a6e40ebc7b7834e08e156c681a1Evan Hunt3863. [bug] The "E" flag was missing from the query log as a
44fbdddcadd85a6e40ebc7b7834e08e156c681a1Evan Hunt unintended side effect of code rearrangement to
0dfd942409fbd3ad1e9a06c887742f0c8760ffd7Mark Andrews support EDNS EXPIRE. [RT #36117]
0dfd942409fbd3ad1e9a06c887742f0c8760ffd7Mark Andrews3862. [cleanup] Return immediately if we are not going to log the
568de8123acb1a94e2d7bfe9cc5eb5d099f6c1f5Mark Andrews message in ns_client_dumpmessage.
51e6164fd6b47121040f79b6330edf6258418a0bMark Andrews3861. [security] Missing isc_buffer_availablelength check results
51e6164fd6b47121040f79b6330edf6258418a0bMark Andrews in a REQUIRE assertion when printing out a packet
ef9334d745a759b02821950230260c1941d066d3Mukund Sivaraman (CVE-2014-3859). [RT #36078]
ef9334d745a759b02821950230260c1941d066d3Mukund Sivaraman3860. [bug] ioctl(DP_POLL) array size needs to be determined
6ffa8fcf764121bbe3b9eb116ddade5778608375Mark Andrews at run time as it is limited to {OPEN_MAX}.
bbd5c0ab33b7c76058a4b17bd1f9ce443aa90c7fEvan Hunt3859. [placeholder]
c73a7e127fd3d2b2d3257f67d7a0b94441797f3aMark Andrews3858. [bug] Disable GCC 4.9 "delete null pointer check".
bad82a46c420eaa5ca62a319923472fba7e391f1Mark Andrews3857. [bug] Make it harder for a incorrect NOEDNS classification
bad82a46c420eaa5ca62a319923472fba7e391f1Mark Andrews to be made. [RT #36020]
09ab38c151751b76b8043275422239463eb70cbdMark Andrews3856. [bug] Configuring libjson without also configuring libxml
09ab38c151751b76b8043275422239463eb70cbdMark Andrews resulted in a REQUIRE assertion when retrieving
09ab38c151751b76b8043275422239463eb70cbdMark Andrews statistics using json. [RT #36009]
adbb48b4a0c6216f96d8b40712f23da893444f1cMark Andrews3855. [bug] Limit smoothed round trip time aging to no more than
61cfadb50e2ddce1073760e77880de73eb6e65daMark Andrews once a second. [RT #32909]
61cfadb50e2ddce1073760e77880de73eb6e65daMark Andrews3854. [cleanup] Report unrecognized options, if any, in the final
9896a01aebb4201459079f8926dcd8045514b73aEvan Hunt configure summary. [RT #36014]
22e29471c784acd09619841926c4f765e36ac74aEvan Hunt3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
22e29471c784acd09619841926c4f765e36ac74aEvan Hunt the handling of a rdataset with no records. [RT #35968]
22e29471c784acd09619841926c4f765e36ac74aEvan Hunt3852. [func] Increase the default number of clients available
acbb301e648b82fcc38b876a44403cf0fe539cc9Evan Hunt for servicing lightweight resolver queries, and
acbb301e648b82fcc38b876a44403cf0fe539cc9Evan Hunt make them configurable via the "lwres-tasks" and
acbb301e648b82fcc38b876a44403cf0fe539cc9Evan Hunt "lwres-clients" options. (Thanks to Tomas Hozza.)
9823d3d0fa2995a90f577a5801b1e5f7288a1facJeremy C. Reed3851. [func] Allow libseccomp based system-call filtering
3911e7610f29dc664cbe8336f35c0652cd74652eMark Andrews on Linux; use "configure --enable-seccomp" to
3911e7610f29dc664cbe8336f35c0652cd74652eMark Andrews turn it on. Thanks to Loganaden Velvindron
89740699cd2191d9b84e67716c281b2dfeba5e56Evan Hunt of AFRINIC for the contribution. [RT #35347]
89740699cd2191d9b84e67716c281b2dfeba5e56Evan Hunt3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
46bc64f4b1a0e84ab0397943453fe83a17baf2c4Evan Hunt3849. [doc] Alphabetized dig's +options. [RT #35992]
46bc64f4b1a0e84ab0397943453fe83a17baf2c4Evan Hunt3848. [bug] Adjust 'statistics-channels specified but not effective'
46bc64f4b1a0e84ab0397943453fe83a17baf2c4Evan Hunt error message to account for JSON support. [RT #36008]
1cf8e9c0b7e75fcd2bfd10367ff362c674972a0dMark Andrews3847. [bug] 'configure --with-dlz-postgres' failed to fail when
62258ada486dfe76afc3f0f3835d3a45d2d8105cEvan Hunt there is not support available.
62258ada486dfe76afc3f0f3835d3a45d2d8105cEvan Hunt3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
8cbf3b6fc35091abde426930f2eadb8f53476c98Evan Hunt ixfr query. [RT #35980]
8cbf3b6fc35091abde426930f2eadb8f53476c98Evan Hunt3845. [placeholder]
8cbf3b6fc35091abde426930f2eadb8f53476c98Evan Hunt3844. [bug] Use the x64 version of the Microsoft Visual C++
7bd455641455950eff7d21be652c8142b134d32fTinderbox User Redistributable when built for 64 bit Windows.
9ba2cef72dacb1dc1105415956e1c311ac25d02cEvan Hunt3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
78f79084fcfc40f1237c99e2d4325b24b750d012Evan Hunt3842. [bug] Adjust RRL log-only logging category. [RT #35945]
78f79084fcfc40f1237c99e2d4325b24b750d012Evan Hunt3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
a2fd1de97d9ff685697aadba7f67a450557b0a06Evan Hunt3840. [port] Check for arc4random_addrandom() before using it;
def8172275039dd667d2c54afa51af80fef9c2abEvan Hunt it's been removed from OpenBSD 5.5. [RT #35907]
cc2a5156841ec6dfe1e90eed40c65fa8cdec246dTinderbox User3839. [test] Use only posix-compatible shell in system tests.
d51456e4537729c2263303350abeff45379b1105Evan Hunt3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
d51456e4537729c2263303350abeff45379b1105Evan Hunt3837. [security] A NULL pointer is passed to query_prefetch resulting
e69790ac0067c0034f57e070d513833550786a93Evan Hunt a REQUIRE assertion failure when a fetch is actually
e69790ac0067c0034f57e070d513833550786a93Evan Hunt initiated (CVE-2014-3214). [RT #35899]
67d01dcacb2051a03377c8ec5c0e36604c17aea5Evan Hunt3836. [bug] Address C++ keyword usage in header file.
67d01dcacb2051a03377c8ec5c0e36604c17aea5Evan Hunt3835. [bug] Geoip ACL elements didn't work correctly when
67d01dcacb2051a03377c8ec5c0e36604c17aea5Evan Hunt referenced via named or nested ACLs. [RT #35879]
6be12fa63b38fe7648811e042c9aad58cee2ead7Evan Hunt3834. [bug] The re-signing heaps were not being updated soon enough
6be12fa63b38fe7648811e042c9aad58cee2ead7Evan Hunt leading to multiple re-generations of the same RRSIG
6be12fa63b38fe7648811e042c9aad58cee2ead7Evan Hunt when a zone transfer was in progress. [RT #35273]
262fea66373a062cac1a0e99b5a4675987bb61ffEvan Hunt3833. [bug] Cross compiling was broken due to calling genrandom at
262fea66373a062cac1a0e99b5a4675987bb61ffEvan Hunt build time. [RT #35869]
084ba95b083dc55fd10631ad43fa8fff48707648Evan Hunt3832. [func] "named -L <filename>" causes named to send log
084ba95b083dc55fd10631ad43fa8fff48707648Evan Hunt messages to the specified file by default instead
084ba95b083dc55fd10631ad43fa8fff48707648Evan Hunt of to the system log. (Thanks to Tony Finch.)
3ef4b7383ab4310df48ee5143e361ab1cfa3c8e8Evan Hunt3831. [cleanup] Reduce logging noise when EDNS state changes occur.
72aa3b2a4e33a1b9b3521fddce383002b7201ab7Evan Hunt3830. [func] When query logging is enabled, log query errors at
368aedf188d7c7782cae8a5ce2a978be47b5a764Evan Hunt the same level ('info') as the queries themselves.
e71905610c72f474a2943934a48f43121c79c939Evan Hunt3829. [func] "dig +ttlunits" causes dig to print TTL values
e71905610c72f474a2943934a48f43121c79c939Evan Hunt with time-unit suffixes: w, d, h, m, s for
e71905610c72f474a2943934a48f43121c79c939Evan Hunt weeks, days, hours, minutes, and seconds. (Thanks
1aced7b8702288f656ded594cd5bd7678bb4fe70Evan Hunt to Tony Finch.) [RT #35823]
1aced7b8702288f656ded594cd5bd7678bb4fe70Evan Hunt3828. [func] "dnssec-signzone -N date" updates serial number
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt to the current date in YYYYMMDDNN format.
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt3827. [placeholder]
f79ee00c69259b9a27f9f0d12afa6c7b64005dedEvan Hunt3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
7fbbc9bfd34f47aab843de668d5f5ffbc53d6e45Mark Andrews3825. [bug] Address sign extension bug in isc_regex_validate.
96c17c5ecb012028ad9d66f93a252994c6ed035cMark Andrews3824. [bug] A collision between two flag values could cause
96c17c5ecb012028ad9d66f93a252994c6ed035cMark Andrews problems with cache cleaning when SIT was enabled.
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt3823. [func] Log the rpz cname target when rewriting. [RT #35667]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt3822. [bug] Log the correct type of static-stub zones when
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt removing them. [RT #35842]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
3a01ded15da064de23124e5d1a89143eceec5523Evan Hunt update and transaction support. Thanks to Marty
3a01ded15da064de23124e5d1a89143eceec5523Evan Hunt Lee for the contribution. [RT #35656]
0072ae822d966550f7c0956ed22184ec20e98f34Mark Andrews3820. [func] The DLZ API doesn't pass the database version to
0072ae822d966550f7c0956ed22184ec20e98f34Mark Andrews the lookup() function; this can cause DLZ modules
0072ae822d966550f7c0956ed22184ec20e98f34Mark Andrews that allow dynamic updates to mishandle prerequisite
0072ae822d966550f7c0956ed22184ec20e98f34Mark Andrews checks. This has been corrected by adding a
9e39bafd2ef3e52719b5f16aec077c7885e7e1f1Mark Andrews 'dbversion' field to the dns_clientinfo_t
9e39bafd2ef3e52719b5f16aec077c7885e7e1f1Mark Andrews structure. [RT #35656]
02a5e3ed85cbfc099874bb34e5901537399b5e24Mark Andrews3819. [bug] NSEC3 hashes need to be able to be entered and
02a5e3ed85cbfc099874bb34e5901537399b5e24Mark Andrews displayed without padding. This is not a issue for
bce9696c7ac65792469b29ce0ad13564953b62caEvan Hunt currently defined algorithms but may be for future
bce9696c7ac65792469b29ce0ad13564953b62caEvan Hunt hash algorithms. [RT #27925]
bce9696c7ac65792469b29ce0ad13564953b62caEvan Hunt3818. [bug] Stop lying to the optimizer that 'void *arg' is a
edd82b2ce275d513fb2799b90ec464f434880e87Mark Andrews constant in isc_event_allocate.
86856f4f3069bb2d75851b56401ffde18f41198fMark Andrews3817. [func] The "delve" command is now spelled "delv" to avoid
86856f4f3069bb2d75851b56401ffde18f41198fMark Andrews a namespace collision with the Xapian project.
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt3816. [func] "dig +qr" now reports query size. (Thanks to
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt Tony Finch.) [RT #35822]
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
7da74ea46df30a7431441a3b8adf5134dab5067eJeremy C. Reed3814. [func] The "masterfile-style" zone option controls the
64584aa0980625f834fa148dc3c95ab714efe703Evan Hunt formatting of dumped zone files. Options are
64584aa0980625f834fa148dc3c95ab714efe703Evan Hunt "relative" (multiline format) and "full" (one
16134801ce8fffbb6c42bb54d544c3397a45ad06Mark Andrews record per line). The default is "relative".
16134801ce8fffbb6c42bb54d544c3397a45ad06Mark Andrews3813. [func] "host" now recognizes the "timeout", "attempts" and
d7b9756a214030b0022ce791b67b12fb7bceeea0Evan Hunt "debug" options when set in /etc/resolv.conf.
d7b9756a214030b0022ce791b67b12fb7bceeea0Evan Hunt (Thanks to Adam Tkac at RedHat.) [RT #21885]
4357e13a4bc2e175d73b20f9ef3e809b3e269ee4Evan Hunt3812. [func] Dig now supports sending arbitrary EDNS options from
d7b9756a214030b0022ce791b67b12fb7bceeea0Evan Hunt the command line (+ednsopt=code[:value]). [RT #35584]
7e2e41df676e1e19186242afd88a6794e37a9becMark Andrews3811. [func] "serial-update-method date;" sets serial number
7f5bdf7f4063c2fefb18900468d2c851f8de7816Evan Hunt on dynamic update to today's date in YYYYMMDDNN
7f5bdf7f4063c2fefb18900468d2c851f8de7816Evan Hunt format. (Thanks to Bradley Forschinger.) [RT #24903]
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt3810. [bug] Work around broken nameservers that fail to ignore
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt unknown EDNS options. [RT #35766]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User3809. [doc] Fix SIT and NSID documentation.
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt3808. [doc] Clean up "prefetch" documentation. [RT #35751]
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt3807. [bug] Fix sign extension bug in dns_name_fromtext when
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt lowercase is set. [RT #35743]
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt3806. [test] Improved system test portability. [RT #35625]
b5f6271f4daf1e54501af2cb7dd278d7e8003d65Mark Andrews3805. [contrib] Added contrib/perftcpdns, a performance testing tool
0a5927a14f055f5550c76c818119f4811984272cMark Andrews for DNS over TCP. [RT #35710]
96a35905057eb2ba7d977460776b06ae0911c8a7Evan Hunt --- 9.10.0rc1 released ---
b5f6271f4daf1e54501af2cb7dd278d7e8003d65Mark Andrews3804. [bug] Corrected a race condition in dispatch.c in which
64584aa0980625f834fa148dc3c95ab714efe703Evan Hunt portentry could be reset leading to an assertion
7da74ea46df30a7431441a3b8adf5134dab5067eJeremy C. Reed failure in socket_search(). (Change #3708
64584aa0980625f834fa148dc3c95ab714efe703Evan Hunt addressed the same issue but was incomplete.)
96a35905057eb2ba7d977460776b06ae0911c8a7Evan Hunt3803. [bug] "named-checkconf -z" incorrectly rejected zones
1361e038900701e126213261c0a1178025ae5a72Tinderbox User using alternate data sources for not having a "file"
1361e038900701e126213261c0a1178025ae5a72Tinderbox User option. [RT #35685]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User3802. [bug] Various header files were not being installed.
1361e038900701e126213261c0a1178025ae5a72Tinderbox User3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User3800. [bug] A pending event on the route socket could cause an
38eabfcee7a9f206c268834ab9cb6d3408a31380Mark Andrews assertion failure when shutting down named. [RT #35674]
38eabfcee7a9f206c268834ab9cb6d3408a31380Mark Andrews3799. [bug] Improve named's command line error reporting.
7b9cb698dd07644762c675b5f57446467b4d5663Mark Andrews3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
7b9cb698dd07644762c675b5f57446467b4d5663Mark Andrews time. [RT #35659]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3797. [port] netbsd: geoip support probing was broken. [RT #35642]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3795. [bug] Make named-checkconf detect raw masterfiles for
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt hint zones and reject them. [RT #35268]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
14bf4702f37cc707ede64a097f7d4aa671265492Evan Hunt3793. [bug] zone.c:save_nsec3param() could assert when out of
14bf4702f37cc707ede64a097f7d4aa671265492Evan Hunt memory. [RT #35621]
31f6244cc25ab0f8937edc26dbb26ba4f6a01f19Evan Hunt3792. [func] Provide links to the alternate statistics views when
31f6244cc25ab0f8937edc26dbb26ba4f6a01f19Evan Hunt displaying in a browser. [RT #35605]
2729aea3c1a720269aaae92ce3a84af1ba0a75ebMark Andrews3791. [placeholder]
a1271e2404dd42fcc477974bd0a190224f34f5f7Mark Andrews3790. [bug] Handle broken nameservers that send BADVERS in
a1271e2404dd42fcc477974bd0a190224f34f5f7Mark Andrews response to unknown EDNS options. Maintain
842a3e6d0eb745e34a3cc3e19c8c39b9492ac739Evan Hunt statistics on BADVERS responses.
842a3e6d0eb745e34a3cc3e19c8c39b9492ac739Evan Hunt3789. [bug] Null pointer dereference on rbt creation failure.
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt3788. [bug] dns_peer_getrequestsit was returning request_nsid by
d7729155dff87d3c7a2b9103bf6e5164ea4d7dd7Mark Andrews --- 9.10.0b2 released ---
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews3787. [bug] The code that checks whether "auto-dnssec" is
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews allowed was ignoring "allow-update" ACLs set at
850b5e80930907e4747347201dc41e4d04e036f8Mark Andrews the options or view level. [RT #29536]
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews3786. [func] Provide more detailed error codes when using
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews native PKCS#11. "pkcs11-tokens" now fails robustly
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews rather than asserting when run against an HSM with
41e55d04032c0eefd39d74ffb73657b04fb821ecEvan Hunt an incomplete PKCS#11 API implementation. [RT #35479]
41e55d04032c0eefd39d74ffb73657b04fb821ecEvan Hunt3785. [bug] Debugging code dumphex didn't accept arbitrarily long
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt input (only compiled with -DDEBUG). [RT #35544]
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt3784. [bug] Using "rrset-order fixed" when it had not been
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt enabled at compile time caused inconsistent
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt results. It now works as documented, defaulting
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt to cyclic mode. [RT #28104]
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt3783. [func] "tsig-keygen" is now available as an alternate
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt command name for "ddns-confgen". It generates
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt a TSIG key in named.conf format without comments.
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt3782. [func] Specifying "auto" as the salt when using
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt "rndc signing -nsec3param" causes named to
c41d8a22ab5f4a487f4c16b78f23792f78a3a851Francis Dupont generate a 64-bit salt at random. [RT #35322]
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt3781. [tuning] Use adaptive mutex locks when available; this
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt has been found to improve performance under load
08c67b5b7a54047fbfed423a59b48c86177b9859Evan Hunt on many systems. "configure --with-locktype=standard"
08c67b5b7a54047fbfed423a59b48c86177b9859Evan Hunt restores conventional mutex locks. [RT #32576]
e5f9fa7e18d50569a7d723acbb6f641e13ed3787Evan Hunt3780. [bug] $GENERATE handled negative numbers incorrectly.
62cce60a15990bf8ec05b4234a5c965a5a8e86c0Evan Hunt3779. [cleanup] Clarify the error message when using an option
62cce60a15990bf8ec05b4234a5c965a5a8e86c0Evan Hunt that was not enabled at compile time. [RT #35504]
62cce60a15990bf8ec05b4234a5c965a5a8e86c0Evan Hunt3778. [bug] Log a warning when the wrong address family is
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt used in "listen-on" or "listen-on-v6". [RT #17848]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt3777. [bug] EDNS EXPIRE code could dump core when processing
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt DLZ queries. [RT #35493]
0a35160f4eb349188a988d2857e0b3052ad4b778Evan Hunt3776. [func] "rndc -q" suppresses output from successful
a8cdf2a2e7e9a716a94db550138f1a65000fc19fEvan Hunt rndc commands. Errors are printed on stderr.
a8cdf2a2e7e9a716a94db550138f1a65000fc19fEvan Hunt3775. [bug] dlz_dlopen driver could return the wrong error
3249da26fc28297265d444a1f3647f1e6700a2a0Evan Hunt code on API version mismatch, leading to a segfault.
0666e6db543cda2de2b8472ba49ed9b53c836326Tinderbox User3774. [func] When using "request-nsid", log the NSID value in
d0803df3310ad09447c34b972e7594d576f5cbb5Evan Hunt printable form as well as hex. [RT #20864]
9d58bbdf12e77d2b62e669bc2965b0788b97731aJeremy C. Reed3773. [func] "host", "nslookup" and "nsupdate" now have
47c847e286ac1d9dcc1b6dec5430ad9d2abad7b2Evan Hunt options to print the version number and exit.
63add83a2699aac4e01be6d1f2d093cfed4f744aMark Andrews3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
75d747e1c5a30d6ef6c6238c6e27baa11d6f3bf6Mark Andrews (Based in part on a contribution from Tim Tessier.)
fbc0e37e0c3732b20b0629056e98d712a118637fMark Andrews3771. [cleanup] Adjusted log level for "using built-in key"
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews messages. [RT #24383]
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews3770. [bug] "dig +trace" could fail with an assertion when it
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews needed to fall back to TCP due to a truncated
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews response. [RT #24660]
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews3769. [doc] Improved documentation of "rndc signing -list".
83f69fcd6ef72c9e2ebcb025b66a2ee74176becdEvan Hunt3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
83f69fcd6ef72c9e2ebcb025b66a2ee74176becdEvan Hunt algorithm. [RT #34000]
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt3767. [func] Log explicitly when using rndc.key to configure
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt command channel. [RT #35316]
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt3766. [cleanup] Fixed problems with building outside the source
e45d0508c3460db87afb1f743bc5210522721bb3Evan Hunt tree when using native PKCS#11. [RT #35459]
e45d0508c3460db87afb1f743bc5210522721bb3Evan Hunt3765. [bug] Fixed a bug in "rndc secroots" that could crash
e45d0508c3460db87afb1f743bc5210522721bb3Evan Hunt named when dumping an empty keynode. [RT #35469]
f8c990f6c2d3f75120bd67a55e87f21e88e9e5a6Evan Hunt3764. [bug] The dnssec-keygen/settime -S and -i options
f8c990f6c2d3f75120bd67a55e87f21e88e9e5a6Evan Hunt (to set up a successor key and set the prepublication
f8c990f6c2d3f75120bd67a55e87f21e88e9e5a6Evan Hunt interval) were missing from dnssec-keyfromlabel.
db8938c993d3eaeae1d86feb1b5da511831a9014Mark Andrews3763. [bug] delve: Cache DNSSEC records to avoid the need to
db8938c993d3eaeae1d86feb1b5da511831a9014Mark Andrews re-fetch them when restarting validation. [RT #35476]
a147de10fe5e19e593d42152ffd6879eca69860dEvan Hunt3762. [bug] Address build problems with --pkcs11-native +
a147de10fe5e19e593d42152ffd6879eca69860dEvan Hunt --with-openssl with ECDSA support. [RT #35467]
702958d20247bb9e34019cf02d8ec18d4f3b1005Mark Andrews3761. [bug] Address dangling reference bug in dns_keytable_add.
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3760. [bug] Improve SIT with native PKCS#11 and on Windows.
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3759. [port] Enable delve on Windows. [RT #35441]
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3758. [port] Enable export library APIs on Windows. [RT #35382]
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3757. [port] Enable Python tools (dnssec-coverage,
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews dnssec-checkds) to run on Windows. [RT #34355]
4882e183cac5772ea522811c758c402cd7e8ad5bEvan Hunt3756. [bug] GSSAPI Kerberos realm checking was broken in
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews check_config leading to spurious messages being
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews logged. [RT #35443]
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews --- 9.10.0b1 released ---
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3755. [func] Add stats counters for known EDNS options + others.
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3754. [cleanup] win32: Installer now places files in the
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews Program Files area rather than system services.
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3753. [bug] allow-notify was ignoring keys. [RT #35425]
a18fc12ba3d48b66bea298c80f3e3f09f3c91527Evan Hunt3752. [bug] Address potential REQUIRE failure if
a18fc12ba3d48b66bea298c80f3e3f09f3c91527Evan Hunt DNS_STYLEFLAG_COMMENTDATA is set when printing out
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt3751. [tuning] The default setting for the -U option (setting
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt the number of UDP listeners per interface) has
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt been adjusted to improve performance. [RT #35417]
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt3750. [experimental] Partially implement EDNS EXPIRE option as described
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt in draft-andrews-dnsext-expire-00. Retrieval of
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt the remaining time until expiry for slave zones
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt is supported.
07fb9b83308daea64e50a1f07052addc25c15ec3Mark Andrews EXPIRE uses an experimental option code (65002),
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt which is subject to change. [RT #35416]
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt3749. [func] "dig +subnet" sends an EDNS client subnet option
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt containing the specified address/prefix when
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt querying. (Thanks to Wilmer van der Gaast.)
fb756ba3047770957173ba546257ca43af7ba3e4Mark Andrews3748. [test] Use delve to test dns_client interfaces. [RT #35383]
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt3747. [bug] A race condition could lead to a core dump when
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt destroying a resolver fetch object. [RT #35385]
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt3746. [func] New "max-zone-ttl" option enforces maximum
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt TTLs for zones. If loading a zone containing a
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt higher TTL, the load fails. DDNS updates with
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews higher TTLs are accepted but the TTL is truncated.
39c30670e869062914b6f7245b64b9ebe8747d86Mark Andrews (Note: Currently supported for master zones only;
ff6de396a93b9b73a37173059a595f3d295b57cbMark Andrews inline-signing slaves will be added.) [RT #38405]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3745. [func] "configure --with-tuning=large" adjusts various
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt compiled-in constants and default settings to
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt values suited to large servers with abundant
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt memory. [RT #29538]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3744. [experimental] SIT: send and process Source Identity Tokens
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt (similar to DNS Cookies by Donald Eastlake 3rd),
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt which are designed to help clients detect off-path
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt spoofed responses and for servers to identify
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt legitimate clients.
e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt SIT uses an experimental EDNS option code (65001),
e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt which will be changed to an IANA-assigned value
d0e3216c217bf790c4a582191658c2a1900ff79fMark Andrews if the experiment is deemed a success.
d0e3216c217bf790c4a582191658c2a1900ff79fMark Andrews SIT can be enabled via "configure --enable-sit" (or
e9649ece3bf32ff43faea13c76bbba7813d7e139Mark Andrews --enable-developer). It is enabled by default in
2b258a1f5b02488c6a36ac1b0a7535b42ea6fd34Evan Hunt Servers can be configured to send smaller responses
2b258a1f5b02488c6a36ac1b0a7535b42ea6fd34Evan Hunt to clients that have not identified themselves via
c14ba7107063650e7f4329e8c54adca57913381bEvan Hunt SIT. RRL processing has also been updated;
3f4a0e80fabe0233086e127aaabc6e68d6975c3aEvan Hunt legitimate clients are not subject to rate
c14ba7107063650e7f4329e8c54adca57913381bEvan Hunt limiting. [RT #35389]
fa467e60c590072fd6848522456eb2cc41582c59Mark Andrews3743. [bug] delegation-only flag wasn't working in forward zone
fa467e60c590072fd6848522456eb2cc41582c59Mark Andrews declarations despite being documented. This is
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt needed to support turning off forwarding and turning
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt on delegation only at the same name. [RT #35392]
161e803a5608956271d8120be37a1b383d14b647Mark Andrews3742. [port] linux: libcap support: declare curval at start of
161e803a5608956271d8120be37a1b383d14b647Mark Andrews block. [RT #35387]
5f8d6cec48cef9055359c628942d633693f732b2Evan Hunt3741. [func] "delve" (domain entity lookup and validation engine):
5f8d6cec48cef9055359c628942d633693f732b2Evan Hunt A new tool with dig-like semantics for performing DNS
5f8d6cec48cef9055359c628942d633693f732b2Evan Hunt lookups, with internal DNSSEC validation, using the
0606c47750ad362909f010db2ef1ff8dcc96f9cbEvan Hunt same resolver and validator logic as named. This
0606c47750ad362909f010db2ef1ff8dcc96f9cbEvan Hunt allows easy validation of DNSSEC data in environments
0606c47750ad362909f010db2ef1ff8dcc96f9cbEvan Hunt with untrustworthy resolvers, and assists with
0606c47750ad362909f010db2ef1ff8dcc96f9cbEvan Hunt troubleshooting of DNSSEC problems. [RT #32406]
9b895f30f1734fd463a02b27cfd0cf36ec9893d5Evan Hunt3740. [contrib] Minor fixes to configure --with-dlz-bdb,
9b895f30f1734fd463a02b27cfd0cf36ec9893d5Evan Hunt --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
e4d0018d4c9c05fb2a2dbac05a67cc9ddbe2c3d9Mark Andrews3739. [func] Added per-zone stats counters to track TCP and
e4d0018d4c9c05fb2a2dbac05a67cc9ddbe2c3d9Mark Andrews UDP queries. [RT #35375]
00112618bc042f734de7b5ac86506cacb9acf36dMark Andrews3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
00112618bc042f734de7b5ac86506cacb9acf36dMark Andrews3737. [bug] 'rndc retransfer' could trigger a assertion failure
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt with inline zones. [RT #35353]
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt3736. [bug] nsupdate: When specifying a server by name,
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt fall back to alternate addresses if the first
445a354e63f84ac884d923f697b598b83288dc64Evan Hunt address for that name is not reachable. [RT #25784]
445a354e63f84ac884d923f697b598b83288dc64Evan Hunt3735. [cleanup] Merged the libiscpk11 library into libisc
7d65cbaca0839ae23358dce26de426be1301657aMark Andrews to simplify dependencies. [RT #35205]
7d65cbaca0839ae23358dce26de426be1301657aMark Andrews3734. [bug] Improve building with libtool. [RT #35314]
bee9a28af0f923c205f76819618ed7ffcf3f6997Evan Hunt3733. [func] Improve interface scanning support. Interface
bee9a28af0f923c205f76819618ed7ffcf3f6997Evan Hunt information will be automatically updated if the
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn OS supports routing sockets (MacOS, *BSD, Linux).
5465b124f1517b27c363872bd7648a950424eccaTinderbox User Use "automatic-interface-scan no;" to disable.
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn Add "rndc scan" to trigger a scan. [RT #23027]
c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews driver to dump core on 64-bit systems. [RT #35324]
2c2be89824d3899591d34c26adb155da6a993ce3Evan Hunt3731. [func] Added a "no-case-compress" ACL, which causes
2c2be89824d3899591d34c26adb155da6a993ce3Evan Hunt named to use case-insensitive compression
2c2be89824d3899591d34c26adb155da6a993ce3Evan Hunt (disabling change #3645) for specified
fb507315d4a921ffa9e2fd617cb3439ec8c15ca8Evan Hunt clients. (This is useful when dealing
fb507315d4a921ffa9e2fd617cb3439ec8c15ca8Evan Hunt with broken client implementations that
fb507315d4a921ffa9e2fd617cb3439ec8c15ca8Evan Hunt use case-sensitive name comparisons,
ae871ebb28959bed920cc96cd9e91063b6625b78Mark Andrews rejecting responses that fail to match the
ae871ebb28959bed920cc96cd9e91063b6625b78Mark Andrews capitalization of the query that was sent.)
49ae04f6ee2f2e2578e6cd8cd3d4c74e9098ccb0Mark Andrews3730. [cleanup] Added "never" as a synonym for "none" when
d999ca28d40337907b55eebc28a255b638702379Evan Hunt configuring key event dates in the dnssec tools.
fd63f3110fe9a20d6188bc30ebf4b44595bac8eeMark Andrews3729. [bug] dnssec-keygen could set the publication date
fd63f3110fe9a20d6188bc30ebf4b44595bac8eeMark Andrews incorrectly when only the activation date was
fd63f3110fe9a20d6188bc30ebf4b44595bac8eeMark Andrews specified on the command line. [RT #35278]
15eb0cb8e15fc0f4f02713fd8d993476f0394763Evan Hunt3728. [doc] Expanded native-PKCS#11 documentation,
15eb0cb8e15fc0f4f02713fd8d993476f0394763Evan Hunt specifically pkcs11: URI labels. [RT #35287]
225146b2c8c7de8dcff979841b56b15aef8aded2Mark Andrews3727. [func] The isc_bitstring API is no longer used and
434bfc3dfa2003ba0dd4b2392286806131fd6724Evan Hunt has been removed from libisc. [RT #35284]
434bfc3dfa2003ba0dd4b2392286806131fd6724Evan Hunt3726. [cleanup] Clarified the error message when attempting
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt to configure more than 32 response-policy zones.
6b0434299b05b6ca05c6836b9e8fbb7e67f05fb8Mark Andrews3725. [contrib] Updated zkt and nslint to newest versions,
6b0434299b05b6ca05c6836b9e8fbb7e67f05fb8Mark Andrews cleaned up and rearranged the contrib
6b0434299b05b6ca05c6836b9e8fbb7e67f05fb8Mark Andrews directory, and added a README.
eb5e0b8dec22de22dd824959e39b26c4f5b1c52dMark Andrews --- 9.10.0a2 released ---
77cf489a5fad28089cd9c2635a9b2494627545e1Mark Andrews3724. [bug] win32: Fixed a bug that prevented dig and
77cf489a5fad28089cd9c2635a9b2494627545e1Mark Andrews host from exiting properly after completing
0a47bc90af557138a2aaff614ad73d95155ddd9eMark Andrews a UDP query. [RT #35288]
0a47bc90af557138a2aaff614ad73d95155ddd9eMark Andrews3723. [cleanup] Imported keys are now handled the same way
c41afaf716091f1e04a1c55179c2c3ebdd0b9775Mark Andrews regardless of DNSSEC algorithm. [RT #35215]
20489550151432d8d99c3f49629c7c718fdca6abMark Andrews3722. [bug] Using geoip ACLs in a blackhole statement
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews could cause a segfault. [RT #35272]
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews3721. [doc] Improved documentation of the EDNS processing
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews enhancements introduced in change #3593. [RT #35275]
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews3720. [bug] Address compiler warnings. [RT #35261]
37bd255fd499c26aaf474f4294212951b84d9068Mark Andrews3719. [bug] Address memory leak in in peer.c. [RT #35255]
7aa21a491d9468bfc29d8cc331a4e963874426dfFrancis Dupont3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
7aa21a491d9468bfc29d8cc331a4e963874426dfFrancis Dupont3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
34416a7954da96c5a5f5803fe02f059cb94bf6fdMark Andrews probing to see if it is possible to set dscp values
34416a7954da96c5a5f5803fe02f059cb94bf6fdMark Andrews on a per packet basis. [RT #35252]
11e9195ad15d1a3f2b4dcd79b64a6e19d89bbac3Mark Andrews3716. [bug] The dns_request code was setting dcsp values when not
6100b1769956200b2815803ab7b35556396ce0d1Mark Andrews requested. [RT #35252]
03152360db6fcb0fcc95fa63c20c5c829c95f1f6Mark Andrews3715. [bug] The region and city databases could fail to
03152360db6fcb0fcc95fa63c20c5c829c95f1f6Mark Andrews initialize when using some versions of libGeoIP,
aacd7daaf7859de742ab35eac00e70676b1b9f4fEvan Hunt causing assertion failures when named was
aacd7daaf7859de742ab35eac00e70676b1b9f4fEvan Hunt configured to use them. [RT #35427]
a6d48ae49345c1995c7ac7c0628bf5f9eac0719aJeremy C. Reed3714. [test] System tests that need to test for cryptography
a379c8c108de279cc4e09139c12457c1531bd122Mark Andrews support before running can now use a common
a379c8c108de279cc4e09139c12457c1531bd122Mark Andrews "testcrypto.sh" script to do so. [RT #35213]
7433a204d32673e9f6747172f202272cc5bfe27cMark Andrews3713. [bug] Save memory by not storing "also-notify" addresses
7433a204d32673e9f6747172f202272cc5bfe27cMark Andrews in zone objects that are configured not to send
7433a204d32673e9f6747172f202272cc5bfe27cMark Andrews notify requests. [RT #35195]
1a4725bef25e60de161f77318f362c327b690d72Mark Andrews3712. [placeholder]
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt3711. [placeholder]
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt3710. [bug] Address double dns_zone_detach when switching to
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt using automatic empty zones from regular zones.
fb623f9a07857d95cf6c47db0aa81a28c3bbc5c0Mark Andrews3709. [port] Use built-in versions of strptime() and timegm()
fb623f9a07857d95cf6c47db0aa81a28c3bbc5c0Mark Andrews on all platforms to avoid portability issues.
5116f25421090dffe637eb8f6cf7b44acd83678bMark Andrews3708. [bug] Address a portentry locking issue in dispatch.c.
00043fc284892099b309be37340ae80893146c69Mark Andrews3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
9fa2a0deed3b880f3bf04d4f615c13a0d67cc0ceMark Andrews on a missing resolv.conf file and initializes the
9fa2a0deed3b880f3bf04d4f615c13a0d67cc0ceMark Andrews structure as if it had been configured with:
97a2a26cd93e153dcf8fb1ea6bf2311426496251Mark Andrews nameserver ::1
97a2a26cd93e153dcf8fb1ea6bf2311426496251Mark Andrews nameserver 127.0.0.1
c1b8fa61604e153d6f2c6d91acc9481446e631f2Mark Andrews Note: Callers will need to be updated to treat
c1b8fa61604e153d6f2c6d91acc9481446e631f2Mark Andrews ISC_R_FILENOTFOUND as a qualified success or else
c7965f84c23ea9e9b8d6508e4f77d596c227ab75Evan Hunt they will leak memory. The following code fragment
c7965f84c23ea9e9b8d6508e4f77d596c227ab75Evan Hunt will work with both old and new versions without
c7965f84c23ea9e9b8d6508e4f77d596c227ab75Evan Hunt changing the behaviour of the existing code.
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt resconf = NULL;
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt result = irs_resconf_load(mctx, "/etc/resolv.conf",
76df835d59b4715dbd3346fd65114714a42495c9Mark Andrews if (result != ISC_SUCCESS) {
76df835d59b4715dbd3346fd65114714a42495c9Mark Andrews if (resconf != NULL)
18df9e628ea10c7d607f43fcfd935e7924731f24Evan Hunt irs_resconf_destroy(&resconf);
3ad8f24ddd043148525b68a676ebdc71f6900ca9Mark Andrews3706. [contrib] queryperf: Fixed a possible integer overflow when
3ad8f24ddd043148525b68a676ebdc71f6900ca9Mark Andrews printing results. [RT #35182]
2bae76022cbdf8a207d4c3982b589156e1a09e09Evan Hunt3705. [func] "configure --enable-native-pkcs11" enables BIND
2bae76022cbdf8a207d4c3982b589156e1a09e09Evan Hunt to use the PKCS#11 API for all cryptographic
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews functions, so that it can drive a hardware service
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews module directly without the need to use a modified
2634686b14ccdf0aa18a6d346628d03ce3e3d0b4Mark Andrews OpenSSL as intermediary (so long as the HSM's vendor
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews provides a complete-enough implementation of the
b5f4cc132e91afb1217f4aa79424793c0e11c09aMark Andrews PKCS#11 interface). This has been tested successfully
b5f4cc132e91afb1217f4aa79424793c0e11c09aMark Andrews with the Thales nShield HSM and with SoftHSMv2 from
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews the OpenDNSSEC project. [RT #29031]
8afea636ab0c07399aa3e2410b2cfbd41099df98Mark Andrews3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
8afea636ab0c07399aa3e2410b2cfbd41099df98Mark Andrews3703. [func] To improve recursive resolver performance, cache
d6f99498d624d5c5c8ee45067df02e6a6b35a1a3Mark Andrews records which are still being requested by clients
d6f99498d624d5c5c8ee45067df02e6a6b35a1a3Mark Andrews can now be automatically refreshed from the
d6f99498d624d5c5c8ee45067df02e6a6b35a1a3Mark Andrews authoritative server before they expire, reducing
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews or eliminating the time window in which no answer
c4348cb50f039f0785bd1d6f6a37c0a85d15c1f4Curtis Blackburn is available in the cache. See the "prefetch" option
c4348cb50f039f0785bd1d6f6a37c0a85d15c1f4Curtis Blackburn for more details. [RT #35041]
997c2c5116927bab77284c24c3bd0d7f646da5eeMark Andrews3702. [func] 'dnssec-coverage -l' option specifies a length
997c2c5116927bab77284c24c3bd0d7f646da5eeMark Andrews of time to check for coverage; events further into
e548e07a9a2f1ec64774d7ae872d530eaf270eb7Mark Andrews the future are ignored. 'dnssec-coverage -z'
e548e07a9a2f1ec64774d7ae872d530eaf270eb7Mark Andrews checks only ZSK events, and 'dnssec-coverage -k'
e548e07a9a2f1ec64774d7ae872d530eaf270eb7Mark Andrews checks only KSK events. (Thanks to Peter Palfrader.)
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews3701. [func] named-checkconf can now obscure shared secrets
0e1dfb8ff5ac2cf1215691ffc32d7a0b76709721Mark Andrews when printing by specifying '-x'. [RT #34465]
0e1dfb8ff5ac2cf1215691ffc32d7a0b76709721Mark Andrews3700. [func] Allow access to subgroups of XML statistics via
8e091f3d3ee0079f35dfccdc4479105e8f087ab2Mark Andrews special URLs http://<server>:<port>/xml/v3/server,
8e091f3d3ee0079f35dfccdc4479105e8f087ab2Mark Andrews /zones, /net, /tasks, /mem, and /status. [RT #35115]
7ace3277956c49f7554b7130ef761bde3b35db30Mark Andrews3699. [bug] Improvements to statistics channel XSL stylesheet:
7ace3277956c49f7554b7130ef761bde3b35db30Mark Andrews the stylesheet can now be cached by the browser;
7ace3277956c49f7554b7130ef761bde3b35db30Mark Andrews section headers are omitted from the stats display
06ace051e7522b153b487581c9439fc8c162fb18Mark Andrews when there is no data in those sections to be
06ace051e7522b153b487581c9439fc8c162fb18Mark Andrews displayed; counters are now right-justified for
06ace051e7522b153b487581c9439fc8c162fb18Mark Andrews easier readability. [RT #35117]
5d4343a9988cd5bd057aa385bb8c5e72d41202d1Evan Hunt3698. [cleanup] Replaced all uses of memcpy() with memmove().
75ae74f8fd0847817bce2db7c868b179db67f019Mark Andrews3697. [bug] Handle "." as a search list element when IDN support
75ae74f8fd0847817bce2db7c868b179db67f019Mark Andrews is enabled. [RT #35133]
16bd30ae6987cd4ba4fe3b873e72abf5b7178c26Mark Andrews3696. [bug] dig failed to handle AXFR style IXFR responses which
16bd30ae6987cd4ba4fe3b873e72abf5b7178c26Mark Andrews span multiple messages. [RT #35137]
df0892aea6bfd20a01c3abf2b756625d23830390Mark Andrews3695. [bug] Address a possible race in dispatch.c. [RT #35107]
a499dddb4b4d4db2bb6ced82b5ee7a459e23603eEvan Hunt3694. [bug] Warn when a key-directory is configured for a zone,
f45f6541857a5dbb93ac24f321b9cf350ce242baMark Andrews but does not exist or is not a directory. [RT #35108]
f45f6541857a5dbb93ac24f321b9cf350ce242baMark Andrews3693. [security] memcpy was incorrectly called with overlapping
673a2bb07b9e54a32699a9d7ca916dc5114d8d45Mark Andrews ranges resulting in malformed names being generated
673a2bb07b9e54a32699a9d7ca916dc5114d8d45Mark Andrews on some platforms. This could cause INSIST failures
673a2bb07b9e54a32699a9d7ca916dc5114d8d45Mark Andrews when serving NSEC3 signed zones (CVE-2014-0591).
d640b4a0ab9dec252749793f78a1ed1e8551ea19Evan Hunt3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
d640b4a0ab9dec252749793f78a1ed1e8551ea19Evan Hunt was no data at the node. [RT #35080]
fdb4ae8f6c00d8ea03bde929bd4e47056972017dMark Andrews3691. [contrib] Address null pointer dereference in LDAP and
fdb4ae8f6c00d8ea03bde929bd4e47056972017dMark Andrews MySQL DLZ modules.
fdb4ae8f6c00d8ea03bde929bd4e47056972017dMark Andrews3690. [bug] Iterative responses could be missed when the source
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt port for an upstream query was the same as the
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt listener port (53). [RT #34925]
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt3689. [bug] Fixed a bug causing an insecure delegation from one
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt static-stub zone to another to fail with a broken
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt trust chain. [RT #35081]
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt3688. [bug] loadnode could return a freed node on out of memory.
0949306cb96f9ccbb7d0205584ed2db293a5aad2Evan Hunt3687. [bug] Address null pointer dereference in zone_xfrdone.
964bdcd7add44e5bc87e1d44f2f4ece351b28eedEvan Hunt3686. [func] "dnssec-signzone -Q" drops signatures from keys
964bdcd7add44e5bc87e1d44f2f4ece351b28eedEvan Hunt that are still published but no longer active.
cf0a69e999430722e3c3942929eeb304b658dfb0Evan Hunt3685. [bug] "rndc refresh" didn't work correctly with slave
71697fd082b1c76562dc80fa91787af3860146bfEvan Hunt zones using inline-signing. [RT #35105]
71697fd082b1c76562dc80fa91787af3860146bfEvan Hunt3684. [bug] The list of included files would grow on reload.
c174d5c13c03dd59283243e3fd5461d41140a798Evan Hunt3683. [cleanup] Add a more detailed "not found" message to rndc
c174d5c13c03dd59283243e3fd5461d41140a798Evan Hunt commands which specify a zone name. [RT #35059]
927e4c9fecf448bf3894c68fcaf9dc2f89557f3aEvan Hunt3682. [bug] Correct the behavior of rndc retransfer to allow
927e4c9fecf448bf3894c68fcaf9dc2f89557f3aEvan Hunt inline-signing slave zones to retain NSEC3 parameters
69f72d1c8f08d69a1c4c0459ba15baaa358d55f4Evan Hunt instead of reverting to NSEC. [RT #34745]
5b7abbef511cea0b568be0bc8d5b3120a0b9034dEvan Hunt3681. [port] Update the Windows build system to support feature
5b7abbef511cea0b568be0bc8d5b3120a0b9034dEvan Hunt selection and WIN64 builds. This is a work in
5b7abbef511cea0b568be0bc8d5b3120a0b9034dEvan Hunt progress. [RT #34160]
26bda028ad3854d2e695feb9333ef3dbe6b2fa1aEvan Hunt3680. [bug] Ensure buffer space is available in "rndc zonestatus".
eb4458b4784a2206d939f9c4cfed4b37b076b5bcEvan Hunt3679. [bug] dig could fail to clean up TCP sockets still
eb4458b4784a2206d939f9c4cfed4b37b076b5bcEvan Hunt waiting on connect(). [RT #35074]
1da46be57223340c07ea8505d485ec4397a4e484Evan Hunt3678. [port] Update config.guess and config.sub. [RT #35060]
1da46be57223340c07ea8505d485ec4397a4e484Evan Hunt3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
9d69017bc635f7be5c8df2b18ae6d4491fc5bb63Mark Andrews times. [RT #35073]
9d69017bc635f7be5c8df2b18ae6d4491fc5bb63Mark Andrews3676. [bug] "named-checkconf -z" now checks zones of type
9d4ec6d2c59bd5845ac8bca5a5d790be9a772862Evan Hunt hint and redirect as well as master. [RT #35046]
caa0a135d49dfbe3de9711eacf94d6e112a77688Mark Andrews3675. [misc] Provide a place for third parties to add version
caa0a135d49dfbe3de9711eacf94d6e112a77688Mark Andrews information for their extensions in the version
9fa5a723e188ddb5e6165af4957ba789e17cfdf5Evan Hunt file by setting the EXTENSIONS variable.
f42c0dcca86f2009c089e27ba513cb6fc9ee88baEvan Hunt --- 9.10.0a1 released ---
7aba1a9660630ab7d16792b7388d9b8f56d7bf0fEvan Hunt3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
7aba1a9660630ab7d16792b7388d9b8f56d7bf0fEvan Hunt3673. [func] New "in-view" zone option allows direct sharing
682a574e6716cea30386c38e68f4fc6c3d4b20e7Mark Andrews of zones between views. [RT #32968]
3b9ba6bd74e2cbbc0f821e5483ebf46fa8c4d8deEvan Hunt3672. [func] Local address can now be specified when using
3b9ba6bd74e2cbbc0f821e5483ebf46fa8c4d8deEvan Hunt dns_client API. [RT #34811]
3b9ba6bd74e2cbbc0f821e5483ebf46fa8c4d8deEvan Hunt3671. [bug] Don't allow dnssec-importkey overwrite a existing
1761ecb90ff770b87d0f021e13ad94d3e8c6f2afFrancis Dupont non-imported private key.
1761ecb90ff770b87d0f021e13ad94d3e8c6f2afFrancis Dupont3670. [bug] Address read after free in server side of
f48358cffb35bb4b24731c136b07816bdcdce651Evan Hunt lwres_getrrsetbyname. [RT #29075]
f48358cffb35bb4b24731c136b07816bdcdce651Evan Hunt3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
c3b554214416b434c6db7881907c962110aecba9Evan Hunt3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
31707708c585c53b61ca1edb2e224e6bb1b985a5Evan Hunt3667. [test] dig: add support to keep the TCP socket open between
b7e40659efd6cf6f5e6b3b1f904f16f74efb0d16Evan Hunt successive queries (+[no]keepopen). [RT #34918]
b7e40659efd6cf6f5e6b3b1f904f16f74efb0d16Evan Hunt3666. [func] Add a tool, named-rrchecker, for checking the syntax
8f1e278931689460a49f0e9be610f2b2cc32c42dEvan Hunt of individual resource records. This tool is intended
caa0a135d49dfbe3de9711eacf94d6e112a77688Mark Andrews to be called by provisioning systems so that the front
8f1e278931689460a49f0e9be610f2b2cc32c42dEvan Hunt end does not need to be upgraded to support new DNS
166c4c6c5bafd25283b797979f77d780856fef30Evan Hunt record types. [RT #34778]
166c4c6c5bafd25283b797979f77d780856fef30Evan Hunt3665. [bug] Failure to release lock on error in receive_secure_db.
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews locking and other bugs. [RT #34855]
1b2a4ce2b112ec91b0f13c411144e721c7952914Evan Hunt3663. [bug] Address bugs in dns_rdata_fromstruct and
1b2a4ce2b112ec91b0f13c411144e721c7952914Evan Hunt dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
e59937c7283216ca22ce6e7937b06eab6d97f4acEvan Hunt3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
e59937c7283216ca22ce6e7937b06eab6d97f4acEvan Hunt3661. [bug] Address lock order reversal deadlock with inline zones.
89be55dc9040b119fd85bb33e7dc97d2ad454c6fEvan Hunt3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
c6eb92beb1951b0634c349b24891522c273e9f69Mark Andrews3659. [port] solaris: don't add explicit dependencies/rules for
c6eb92beb1951b0634c349b24891522c273e9f69Mark Andrews python programs as make won't use the implicit rules.
bf0441a339755618efcbe0b427afa5cb8e62dc68Evan Hunt3658. [port] linux: Address platform specific compilation issue
bf0441a339755618efcbe0b427afa5cb8e62dc68Evan Hunt when libcap-devel is installed. [RT #34838]
8144dc702beec803d7b847e6f28ce845c57ae468Mark Andrews3657. [port] Some readline clones don't accept NULL pointers when
8144dc702beec803d7b847e6f28ce845c57ae468Mark Andrews calling add_history. [RT #34842]
1ac1cc12fc993b060e868a94ec1c292c9ffbccc4Jeremy C. Reed3656. [security] Treat an all zero netmask as invalid when generating
7ee225cf90fd06de61682b442600af88b68b99dbMark Andrews the localnets acl. (The prior behavior could
5f1dc0d505d7f53f1e89a1a41e4c2415af4934feEvan Hunt allow unexpected matches when using some versions
5f1dc0d505d7f53f1e89a1a41e4c2415af4934feEvan Hunt of Winsock: CVE-2013-6320.) [RT #34687]
276457f7a38f56a5f762238ab89bb45e27948af6Evan Hunt3655. [cleanup] Simplify TCP message processing when requesting a
b0bd5a3f730410e0bc7ac4e05f061616daf818b2Mark Andrews zone transfer. [RT #34825]
276457f7a38f56a5f762238ab89bb45e27948af6Evan Hunt3654. [bug] Address race condition with manual notify requests.
1e34fe9044874422104e84373988d07876f716b6Mark Andrews3653. [func] Create delegations for all "children" of empty zones
1e34fe9044874422104e84373988d07876f716b6Mark Andrews except "forward first". [RT #34826]
30d6dc14e918f9f72ff090c34d6e328ae8e7d68bCurtis Blackburn3652. [bug] Address bug with rpz-drop policy. [RT #34816]
5183f9d9daa139cbf000c12709877f62e79dfb14Evan Hunt3651. [tuning] Adjust when a master server is deemed unreachable.
0193e63da91a4da27809b9a528eb043fa6b4da26Mark Andrews3650. [tuning] Use separate rate limiting queues for refresh and
0193e63da91a4da27809b9a528eb043fa6b4da26Mark Andrews notify requests. [RT #30589]
17a00ff54c51f6bdfddd7d9ceaef6f2dcf387cc1Mark Andrews3649. [cleanup] Include a comment in .nzf files, giving the name of
17a00ff54c51f6bdfddd7d9ceaef6f2dcf387cc1Mark Andrews the associated view. [RT #34765]
5f238c3c64dd68100dc1b60f9c1e178522d1b333Mark Andrews3648. [test] Updated the ATF test framework to version 0.17.
f3c8e48b95996c3020d138b87ee8941da29cc124Evan Hunt3647. [bug] Address a race condition when shutting down a zone.
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews3646. [bug] Journal filename string could be set incorrectly,
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews causing garbage in log messages. [RT #34738]
dc775799d9a5a61f485bff5b883a60cc748afaf3Evan Hunt3645. [protocol] Use case sensitive compression when responding to
dc775799d9a5a61f485bff5b883a60cc748afaf3Evan Hunt queries. [RT #34737]
428dd5c588cfe0dc1519af728e6e75c10aeb4439Curtis Blackburn3644. [protocol] Check that EDNS subnet client options are well formed.
0d18225b5e2d17e4bef0077212fd6927ca58dda6Evan Hunt3643. [doc] Clarify RRL "slip" documentation.
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews3642. [func] Allow externally generated DNSKEY to be imported
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews into the DNSKEY management framework. A new tool
d9f0c713fe1d50f1848ca827c5f31db79d904f04Evan Hunt dnssec-importkey is used to do this. [RT #34698]
d9f0c713fe1d50f1848ca827c5f31db79d904f04Evan Hunt3641. [bug] Handle changes to sig-validity-interval settings
5ba1d3dcc5739a1f77ec2875b276b163a42ef1e8Evan Hunt better. [RT #34625]
5ba1d3dcc5739a1f77ec2875b276b163a42ef1e8Evan Hunt3640. [bug] ndots was not being checked when searching. Only
af9f195c9e128fc9cc5912498b8f7f26f07887c3Evan Hunt continue searching on NXDOMAIN responses. Add the
af9f195c9e128fc9cc5912498b8f7f26f07887c3Evan Hunt ability to specify ndots to nslookup. [RT #34711]
e47208b6fb724cba7053baee4246b308e35403a2Evan Hunt3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
e47208b6fb724cba7053baee4246b308e35403a2Evan Hunt in a key zone. [RT #34238]
34f3693b93f3ba16634f0c08368ef7f81182ef93Evan Hunt3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
7ee225cf90fd06de61682b442600af88b68b99dbMark Andrews encountered. [RT #34668]
1a076410c260ff1d3124ce8b7e22ac111e9cf92aEvan Hunt3637. [bug] 'allow-query-on' was checking the source address
1a076410c260ff1d3124ce8b7e22ac111e9cf92aEvan Hunt rather than the destination address. [RT #34590]
96a116178567d4eb22e57aba533073de9a2f9d84Evan Hunt3636. [bug] Automatic empty zones now behave better with
03b5d2689df73fa9a50ff684511fa9d81f317e6cEvan Hunt forward only "zones" beneath them. [RT #34583]
03b5d2689df73fa9a50ff684511fa9d81f317e6cEvan Hunt3635. [bug] Signatures were not being removed from a zone with
03b5d2689df73fa9a50ff684511fa9d81f317e6cEvan Hunt only KSK keys for a algorithm. [RT #34439]
93aba6dcec9855cd9c69c10717f62c350ff766eaMark Andrews3634. [func] Report build-id in rndc status. Report build-id
7ee225cf90fd06de61682b442600af88b68b99dbMark Andrews when building from a git repository. [RT #20422]
afc047fdb535cdd44e20ffbb62d12b2408f0a07eMark Andrews3633. [cleanup] Refactor OPT processing in named to make it easier
afc047fdb535cdd44e20ffbb62d12b2408f0a07eMark Andrews to support new EDNS options. [RT #34414]
26bb3b7a67b833f0a18072567de036226890ca1aMark Andrews3632. [bug] Signature from newly inactive keys were not being
26bb3b7a67b833f0a18072567de036226890ca1aMark Andrews removed. [RT #32178]
9a785712f1eaccba2b43d29a76f4c02ef2c391d0Mark Andrews3631. [bug] Remove spurious warning about missing signatures when
ec8a802114d3cb12805fecf1dd209fe46706b35bMark Andrews qtype is SIG. [RT #34600]
73ad83bcf0664c2774bec67d688a590e992d4629Evan Hunt3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
ff5ac6d4213e3e2f3f6a93db8c5e65cc170a7e2bEvan Hunt3629. [func] Allow the printing of cryptographic fields in DNSSEC
ff5ac6d4213e3e2f3f6a93db8c5e65cc170a7e2bEvan Hunt records by dig to be suppressed (dig +nocrypto).
a6d43d18b1f6164fd144b2fa25ea57f5566b3bf9Evan Hunt3628. [func] Report DNSKEY key id's when dumping the cache.
330f98fe3b12535072708c273eaf59f7bf887065Evan Hunt3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
d3c8ba219f7c0fd31aabd06ee6b8ef0e92ef9e14Mark Andrews3626. [func] dig: NSID output now easier to read. [RT #21160]
d3c8ba219f7c0fd31aabd06ee6b8ef0e92ef9e14Mark Andrews3625. [bug] Don't send notify messages to machines outside of the
b99bfa184bc9375421b5df915eea7dfac6a68a99Evan Hunt3624. [bug] Look for 'json_object_new_int64' when looking for a
b99bfa184bc9375421b5df915eea7dfac6a68a99Evan Hunt the json library. [RT #34449]
b99bfa184bc9375421b5df915eea7dfac6a68a99Evan Hunt3623. [placeholder]
c4a453fa5c3d8b21d8982137b03e052c0d446c57Evan Hunt3622. [tuning] Eliminate an unnecessary lock when incrementing
c4a453fa5c3d8b21d8982137b03e052c0d446c57Evan Hunt cache statistics. [RT #34339]
4adf97c32fcca7d00e5756607fd045f2aab9c3d4Mark Andrews3621. [security] Incorrect bounds checking on private type 'keydata'
4adf97c32fcca7d00e5756607fd045f2aab9c3d4Mark Andrews can lead to a remotely triggerable REQUIRE failure
4adf97c32fcca7d00e5756607fd045f2aab9c3d4Mark Andrews (CVE-2013-4854). [RT #34238]
1cc4695f0da63f0190e3514adccf6a96f3dc1519Mark Andrews3620. [func] Added "rpz-client-ip" policy triggers, enabling
1cc4695f0da63f0190e3514adccf6a96f3dc1519Mark Andrews RPZ responses to be configured on the basis of
3a6d62c59f73d024d1b2ba2ac94d7600530166ffMark Andrews the client IP address; this can be used, for
3a6d62c59f73d024d1b2ba2ac94d7600530166ffMark Andrews example, to blacklist misbehaving recursive
ad668472f1a924e0355faf313e7cdba1970161c8Evan Hunt or stub resolvers. [RT #33605]
ad668472f1a924e0355faf313e7cdba1970161c8Evan Hunt3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
dc1ed2622fa78dc21dda49488c496437083e17c9Evan Hunt3618. [func] "rndc reload" now checks modification times of
dc1ed2622fa78dc21dda49488c496437083e17c9Evan Hunt include files as well as master files to determine
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews whether to skip reloading a zone. [RT #33936]
c15b536ddbea458a7a3975079276bf4a9b1617aaMark Andrews3617. [bug] Named was failing to answer queries during
99425bedc4dcd586f751148bbdcba19578c6f39eMark Andrews "rndc reload" [RT #34098]
92754e2e4954e497eb2983c76198889b5a3218aaEvan Hunt3616. [bug] Change #3613 was incomplete. [RT #34177]
8013077aa7ed5d6e1daddc973ddb3c7cc7d28df1Mark Andrews3615. [cleanup] "configure" now finishes by printing a summary
92754e2e4954e497eb2983c76198889b5a3218aaEvan Hunt of optional BIND features and whether they are
8c460e01594e83f21ff5e60cd7a417a1ed618703Mark Andrews active or inactive. ("configure --enable-full-report"
99bf6a57d9f6b55da6de9c22fb6883a4bf7d569eEvan Hunt increases the verbosity of the summary.) [RT #31777]
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt3614. [port] Check for <linux/types.h>. [RT #34162]
5805fc20a3f65ee3a78b66aa17801f1d3103cbe1Curtis Blackburn3613. [bug] named could crash when deleting inline-signing
e57a83b57659ae1d4f755a7841b519c047ec7f75Evan Hunt zones with "rndc delzone". [RT #34066]
e57a83b57659ae1d4f755a7841b519c047ec7f75Evan Hunt3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt3611. [bug] Improved resistance to a theoretical authentication
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt attack based on differential timing. [RT #33939]
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt3610. [cleanup] win32: Some executables had been omitted from the
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt installer. [RT #34116]
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt3609. [bug] Corrected a possible deadlock in applications using
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt the export version of the isc_app API. [RT #33967]
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews3608. [port] win32: added todos.pl script to ensure all text files
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews the win32 build depends on are converted to DOS
4bf686cf5d6b83981abdf2d8157c829922acc6d4Evan Hunt newline format. [RT #22067]
4bf686cf5d6b83981abdf2d8157c829922acc6d4Evan Hunt3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
da4436812c7108dd39e09069d4af770eaa738c7fMark Andrews message. [RT #34045]
da4436812c7108dd39e09069d4af770eaa738c7fMark Andrews3606. [func] "rndc flushtree" now flushes matching
da4436812c7108dd39e09069d4af770eaa738c7fMark Andrews records in the address database and bad cache
c82da2167dcbd8300f0eaa81fb900c0b17e8f94cMark Andrews as well as the DNS cache. (Previously only the
c82da2167dcbd8300f0eaa81fb900c0b17e8f94cMark Andrews DNS cache was flushed.) [RT #33970]
384fef003441df4067b773688237700513390f9eEvan Hunt3605. [port] win32: Addressed several compatibility issues
384fef003441df4067b773688237700513390f9eEvan Hunt with newer versions of Visual Studio. [RT #33916]
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews3604. [bug] Fixed a compile-time error when building with
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews JSON but not XML. [RT #33959]
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews3603. [bug] Install <isc/stat.h>. [RT #33956]
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt integrate with named and serve DNS data.
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt (Contributed by John Eaglesham of Yahoo.)
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt3601. [bug] Added to PKCS#11 openssl patches a value len
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt attribute in DH derive key. [RT #33928]
a13aa526be16869d1284256fbb2136f4d50ed1d7Evan Hunt3600. [cleanup] dig: Fixed a typo in the warning output when receiving
a13aa526be16869d1284256fbb2136f4d50ed1d7Evan Hunt an oversized response. [RT #33910]
741ebf10047c3e32e1a0691316ec45666f003583Evan Hunt3599. [tuning] Check for pointer equivalence in name comparisons.
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt3598. [cleanup] Improved portability of map file code. [RT #33820]
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt3597. [bug] Ensure automatic-resigning heaps are reconstructed
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt when loading zones in map format. [RT #33381]
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt3596. [port] Updated win32 build documentation, added
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt dnssec-verify. [RT #22067]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3595. [port] win32: Fix build problems introduced by change #3550.
72c86c105a7cf315036d7131a4ef408bc6227639Evan Hunt3594. [maint] Update config.guess and config.sub. [RT #33816]
72c86c105a7cf315036d7131a4ef408bc6227639Evan Hunt3593. [func] Update EDNS processing to better track remote server
72c86c105a7cf315036d7131a4ef408bc6227639Evan Hunt capabilities. [RT #30655]
21a7fde6ba34c62f4859a4c19de4f49ec1bab474Evan Hunt3592. [doc] Moved documentation of rndc command options to the
21a7fde6ba34c62f4859a4c19de4f49ec1bab474Evan Hunt rndc man page. [RT #33506]
aababae79572d8c80fcec9b809671987007451c9Mark Andrews3591. [func] Use CRC-64 to detect map file corruption at load
aababae79572d8c80fcec9b809671987007451c9Mark Andrews time. [RT #33746]
3a0da183bb40bd120698102b20b61ef12665c09bMark Andrews3590. [bug] When using RRL on recursive servers, defer
3a0da183bb40bd120698102b20b61ef12665c09bMark Andrews rate-limiting until after recursion is complete;
c1e88f8d8679501def1896fb4c4af927a70813ebEvan Hunt also, use correct rcode for slipped NXDOMAIN
c1e88f8d8679501def1896fb4c4af927a70813ebEvan Hunt responses. [RT #33604]
c1e88f8d8679501def1896fb4c4af927a70813ebEvan Hunt3589. [func] Report serial numbers in when starting zone transfers.
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews Report accepted NOTIFY requests including serial.
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews3588. [bug] dig: addressed a memory leak in the sigchase code
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews that could cause a shutdown crash. [RT #33733]
e7b9603ead84761813fd4598303b8e969ab4d7acMark Andrews3587. [func] 'named -g' now checks the logging configuration but
cff340c9e7ac9dc926f5f1f176d973d277c1b68bEvan Hunt does not use it. [RT #33473]
550c92405fc1df47e725f2ecbaa5154c9239fcfdMark Andrews3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt3585. [func] "rndc delzone -clean" option removes zone files
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt when deleting a zone. [RT #33570]
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt3584. [security] Caching data from an incompletely signed zone could
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt trigger an assertion failure in resolver.c
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt (CVE-2013-3919). [RT #33690]
19b037bcb900e75528bf6f2582d77c3f1a6d6714Evan Hunt3583. [bug] Address memory leak in GSS-API processing [RT #33574]
9ffd0f0270ef06bd60b1b2754bbeefbe1da33ce7Evan Hunt3582. [bug] Silence false positive warning regarding missing file
9ffd0f0270ef06bd60b1b2754bbeefbe1da33ce7Evan Hunt directive for inline slave zones. [RT #33662]
77845708f756cfe921b845423be6410e26c167b7Evan Hunt3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
4f9f8fa0528ce843a3bdf7993e94463508d8320eEvan Hunt3580. [bug] Addressed a possible race in acache.c [RT #33602]
4f9f8fa0528ce843a3bdf7993e94463508d8320eEvan Hunt3579. [maint] Updates to PKCS#11 openssl patches, supporting
53a4e18582ae0c50f3742d2f6b684231a50be038Curtis Blackburn versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
53a4e18582ae0c50f3742d2f6b684231a50be038Curtis Blackburn3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
5eab7b89825dd2ed4c0a7fc0ed45ad028170303eEvan Hunt3577. [bug] Handle zero TTL values better. [RT #33411]
2b8dac99166f74532264f756f5c0b43a6b04d995Evan Hunt3576. [bug] Address a shutdown race when validating. [RT #33573]
2b8dac99166f74532264f756f5c0b43a6b04d995Evan Hunt3575. [func] Changed the logging category for RRL events from
2b8dac99166f74532264f756f5c0b43a6b04d995Evan Hunt 'queries' to 'query-errors'. [RT #33540]
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt3574. [doc] The 'hostname' keyword was missing from server-id
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt description in the named.conf man page. [RT #33476]
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt zone names containing punctuation marks and other
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt nonstandard characters. [RT #33419]
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt3572. [func] Threads are now enabled by default on most
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt operating systems. [RT #25483]
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt3571. [bug] Address race condition in dns_client_startresolve().
501941f0b6cce74c2ff75b10aff3f230d5d37e4cEvan Hunt3570. [bug] Check internal pointers are valid when loading map
501941f0b6cce74c2ff75b10aff3f230d5d37e4cEvan Hunt files. [RT #33403]
de1223830f23c2fcd343e40d0940aa591fc363b6Evan Hunt3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
de1223830f23c2fcd343e40d0940aa591fc363b6Evan Hunt module, and added multithread support. [RT #33394]
85f89d58a50a86859c04069ea87b2b23b3325d11Evan Hunt3568. [cleanup] Add a product description line to the version file,
85f89d58a50a86859c04069ea87b2b23b3325d11Evan Hunt to be reported by named -v/-V. [RT #33366]
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt3567. [bug] Silence clang static analyzer warnings. [RT #33365]
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt3566. [func] Log when forwarding updates to master. [RT #33240]
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt3565. [placeholder]
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt3564. [bug] Improved handling of corrupted map files. [RT #33380]
298ca122505a151384a3bf3f0bb0819ed60c66e2Evan Hunt3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
298ca122505a151384a3bf3f0bb0819ed60c66e2Evan Hunt3562. [func] Update map file header format to include a SHA-1 hash
bdc7cf66ff626163801cc59b2fd25523da07d238Mark Andrews of the database content, so that corrupted map files
bdc7cf66ff626163801cc59b2fd25523da07d238Mark Andrews can be rejected at load time. [RT #32459]
bdc7cf66ff626163801cc59b2fd25523da07d238Mark Andrews3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
118bdfd8c4b4dbdd47c17afe61e506fefee9c2daMark Andrews or NOTIMP. Adjust usage message. [RT #33363]
118bdfd8c4b4dbdd47c17afe61e506fefee9c2daMark Andrews3560. [bug] isc-config.sh did not honor includedir and libdir
118bdfd8c4b4dbdd47c17afe61e506fefee9c2daMark Andrews when set via configure. [RT #33345]
58154043cca0caf03d6fc1a47ed7f24681f24762Evan Hunt3559. [func] Check that both forms of Sender Policy Framework
cfec3165b151ed9a0b5b7d5f1609dac9ff12efe3Evan Hunt records exist or do not exist. [RT #33355]
cfec3165b151ed9a0b5b7d5f1609dac9ff12efe3Evan Hunt3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
cfec3165b151ed9a0b5b7d5f1609dac9ff12efe3Evan Hunt3557. [bug] Reloading redirect zones was broken. [RT #33292]
94315060c2b0d9deafabe72d6a0482405fd9d377Evan Hunt3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt3555. [bug] Address theoretical race conditions in acache.c
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt (change #3553 was incomplete). [RT #33252]
70b1afa5938c9bf2aed67f9d594161b905366426Jeremy C. Reed3554. [bug] RRL failed to correctly rate-limit upward
62d63e5f02a5e7fcda59cf361149e3d7c78477beEvan Hunt referrals and failed to count dropped error
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews responses in the statistics. [RT #33225]
df925e6c66d45d960fbac0383169763967d2111cEvan Hunt3553. [bug] Address suspected double free in acache. [RT #33252]
a81ae06ed3081753a73e7638919673be57eaf47fEvan Hunt3552. [bug] Wrong getopt option string for 'nsupdate -r'.
2425d8bb7ccf5dc956ad12d64d97b5a42e022930Evan Hunt3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
2425d8bb7ccf5dc956ad12d64d97b5a42e022930Evan Hunt3550. [func] Unified the internal and export versions of the
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews BIND libraries, allowing external clients to use
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews the same libraries as BIND. [RT #33131]
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews3549. [doc] Documentation for "request-nsid" was missing.
3c7df84b2019e454f6333ca354ef709f6451a2abMark Andrews3548. [bug] The NSID request code in resolver.c was broken
c9297d37593b36de9978c122dbeaf1bb7ae8d19dMark Andrews resulting in invalid EDNS options being sent.
c9297d37593b36de9978c122dbeaf1bb7ae8d19dMark Andrews3547. [bug] Some malformed unknown rdata records were not properly
0b8bd3a4ae3efd91f88e8901323faf99b5b06136Evan Hunt detected and rejected. [RT #33129]
0b8bd3a4ae3efd91f88e8901323faf99b5b06136Evan Hunt3546. [func] Add EUI48 and EUI64 types. [RT #33082]
7e9ccec63889f2aabee59b94307be492a77fa93bMark Andrews3545. [bug] RRL slip behavior was incorrect when set to 1.
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt3544. [contrib] check5011.pl: Script to report the status of
8d21efc150998f9643f98ce5a4f0b17460e12043Evan Hunt managed keys as recorded in managed-keys.bind.
8d21efc150998f9643f98ce5a4f0b17460e12043Evan Hunt Contributed by Tony Finch <dot@dotat.at>
ab7a67829ffe2a7b3220a1cd366bc6255235923aJINMEI Tatuya3543. [bug] Update socket structure before attaching to socket
ab7a67829ffe2a7b3220a1cd366bc6255235923aJINMEI Tatuya manager after accept. [RT #33084]
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews3542. [placeholder]
9dac1de625301aeb520cb1e83723d98cd65999eeEvan Hunt3541. [bug] Parts of libdns were not properly initialized when
9dac1de625301aeb520cb1e83723d98cd65999eeEvan Hunt built in libexport mode. [RT #33028]
9c9b75c43566058727cb89204d36977559cb99afMark Andrews3540. [test] libt_api: t_info and t_assert were not thread safe.
9c9b75c43566058727cb89204d36977559cb99afMark Andrews3539. [port] win32: timestamp format didn't match other platforms.
cd63e943104ab4f7f8b37da8d49738e91a8db1ddEvan Hunt3538. [test] Running "make test" now requires loopback interfaces
cd63e943104ab4f7f8b37da8d49738e91a8db1ddEvan Hunt to be set up. [RT #32452]
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews3537. [tuning] Slave zones, when updated, now send NOTIFY messages
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews to peers before being dumped to disk rather than
6225380ca6dd045302fd5cb22d1dbbe6a88a7509Evan Hunt after. [RT #27242]
6225380ca6dd045302fd5cb22d1dbbe6a88a7509Evan Hunt3536. [func] Add support for setting Differentiated Services Code
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt Point (DSCP) values in named. Most configuration
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt options which take a "port" option (e.g.,
c91c439f80c555f016cce8e9fd910630f81bb5c9Curtis Blackburn listen-on, forwarders, also-notify, masters,
ffff5d67926821d3db8df63bdd84a9cb1ce56739Evan Hunt notify-source, etc) can now also take a "dscp"
ffff5d67926821d3db8df63bdd84a9cb1ce56739Evan Hunt option specifying a code point for use with
ffff5d67926821d3db8df63bdd84a9cb1ce56739Evan Hunt outgoing traffic, if supported by the underlying
9a0dd99a757c469d9530acd5cb11789b3b0af5ceEvan Hunt OS. [RT #27596]
9a0dd99a757c469d9530acd5cb11789b3b0af5ceEvan Hunt3535. [bug] Minor win32 cleanups. [RT #32962]
641e87a1a0ee716f46b4d0f529e73b58f19aee4eEvan Hunt3534. [bug] Extra text after an embedded NULL was ignored when
641e87a1a0ee716f46b4d0f529e73b58f19aee4eEvan Hunt parsing zone files. [RT #32699]
2154c019124246199c7fe494b86860461c8a5f40Evan Hunt3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
2154c019124246199c7fe494b86860461c8a5f40Evan Hunt3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
214836c18496e0d2630df1cda5eeee13c38b9068Evan Hunt3531. [bug] win32: A uninitialized value could be returned on out
214836c18496e0d2630df1cda5eeee13c38b9068Evan Hunt of memory. [RT #32960]
43d84798fac5cfeeecf9431ef848a9ffdcf0d86fEvan Hunt3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
43d84798fac5cfeeecf9431ef848a9ffdcf0d86fEvan Hunt3529. [func] Named now listens on both IPv4 and IPv6 interfaces
43d84798fac5cfeeecf9431ef848a9ffdcf0d86fEvan Hunt by default. Named previously only listened on IPv4
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt interfaces by default unless named was running in
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt IPv6 only mode. [RT #32945]
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt3528. [func] New "dnssec-coverage" command scans the timing
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt metadata for a set of DNSSEC keys and reports if a
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt lapse in signing coverage has been scheduled
c8803902d6e740d1ed85e099835813466fa51391Curtis Blackburn inadvertently. (Note: This tool depends on python;
b3d116c299722ed7b27550744fff789a61ad3d2bEvan Hunt it will not be built or installed on systems that
b3d116c299722ed7b27550744fff789a61ad3d2bEvan Hunt do not have a python interpreter.) [RT #28098]
99394e9807411cbbeb9814b603c7dfa3b569388eMark Andrews3527. [compat] Add a URI to allow applications to explicitly
99394e9807411cbbeb9814b603c7dfa3b569388eMark Andrews request a particular XML schema from the statistics
dc6cea0448ea7b10eb1ae7d38bfc18544a4dfb97Evan Hunt channel, returning 404 if not supported. [RT #32481]
dc6cea0448ea7b10eb1ae7d38bfc18544a4dfb97Evan Hunt3526. [cleanup] Set up dependencies for unit tests correctly during
2425d8bb7ccf5dc956ad12d64d97b5a42e022930Evan Hunt build. [RT #32803]
54ca2413348024c6d03904c01486c952c3d4a3bcEvan Hunt3525. [func] Support for additional signing algorithms in rndc:
54ca2413348024c6d03904c01486c952c3d4a3bcEvan Hunt hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
54ca2413348024c6d03904c01486c952c3d4a3bcEvan Hunt The -A option to rndc-confgen can be used to
48019314431389cca5f8eba7ee9aa5bc08a67f4eMark Andrews select the algorithm for the generated key.
48019314431389cca5f8eba7ee9aa5bc08a67f4eMark Andrews (The default is still hmac-md5; this may
48019314431389cca5f8eba7ee9aa5bc08a67f4eMark Andrews change in a future release.) [RT #20363]
dab4aac006fadcaf3c5a9ccd983188b37ead08eeMark Andrews3524. [func] Added an alternate statistics channel in JSON format,
578e3196076b409c509c6c0a0873e7bfe54f4d61Evan Hunt when the server is built with the json-c library:
578e3196076b409c509c6c0a0873e7bfe54f4d61Evan Hunt http://[address]:[port]/json. [RT #32630]
c07c2a862e0f9d671e2961cd179c7b28d7b04f10Mark Andrews3523. [contrib] Ported filesystem and ldap DLZ drivers to
c07c2a862e0f9d671e2961cd179c7b28d7b04f10Mark Andrews dynamically-loadable modules, and added the
c07c2a862e0f9d671e2961cd179c7b28d7b04f10Mark Andrews "wildcard" module based on a contribution from
f1c1aab2c9e720399d66d8db5f40515d47c45ecfMark Andrews Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
a6b0db81c82ab3528d19137b08d1cb3f8ed06a52Evan Hunt3522. [bug] DLZ lookups could fail to return SERVFAIL when
ef2aea274a14bd33e722336ed8a15bab0289b1f3Mark Andrews they ought to. [RT #32685]
24798afb6e0fa969cf9f6d3b91d1545410853bb8Mark Andrews3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
aa24128022b85c49f59ad45a3c81ad124d645530Mark Andrews3520. [bug] 'mctx' was not being referenced counted in some places
fc0bfa07c7b7aff70cf75e9414167e1f2d532845Mark Andrews where it should have been. [RT #32794]
fc0bfa07c7b7aff70cf75e9414167e1f2d532845Mark Andrews3519. [func] Full replay protection via four-way handshake is
cdf252d6b84dd160dbf37b22845d54d6e4b1732dMark Andrews now mandatory for rndc clients. Very old versions
c9cecf7bb509b1c860d0b6deba7fccd85b9feb68Mark Andrews of rndc will no longer work. [RT #32798]
c359f7b10f2ea19f08668a3c89c91d0834035ec8Mark Andrews3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
c359f7b10f2ea19f08668a3c89c91d0834035ec8Mark Andrews so that all dns_rrl_rtype_t enum values fit regardless
25b95d31ce658326510bef979cf2909c6eddc428Mark Andrews of whether it is teated as signed or unsigned by
25b95d31ce658326510bef979cf2909c6eddc428Mark Andrews the compiler. [RT #32792]
e285c6ea84312a7be807b3af30151444b0002ba6Mark Andrews3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
e285c6ea84312a7be807b3af30151444b0002ba6Mark Andrews3516. [placeholder]
222d38735f97f771054e223b03f84c5858252332Evan Hunt3515. [port] '%T' is not portable in strftime(). [RT #32763]
222d38735f97f771054e223b03f84c5858252332Evan Hunt3514. [bug] The ranges for valid key sizes in ddns-confgen and
0277a7d6c19ab116b6832076ab9d850e1bf112d3Mark Andrews rndc-confgen were too constrained. Keys up to 512
0277a7d6c19ab116b6832076ab9d850e1bf112d3Mark Andrews bits are now allowed for most algorithms, and up
2dd959aa18d0f661efb0d9646963993a4773d036Evan Hunt to 1024 bits for hmac-sha384 and hmac-sha512.
8bd5bcd2a786dfd501a39008be79187e77735e45Mark Andrews3513. [func] "dig -u" prints times in microseconds rather than
8bd5bcd2a786dfd501a39008be79187e77735e45Mark Andrews milliseconds. [RT #32704]
32d24fef856a5938278abe502f02a66f4f608a05Mark Andrews3512. [func] "rndc validation check" reports the current status
8462dfb880040cde3a60f047ec18808737fd7e85Mark Andrews of DNSSEC validation. [RT #21397]
53402b52b67aa6cbbd1d437d6cf8984e7175319eEvan Hunt3511. [doc] Improve documentation of redirect zones. [RT #32756]
53402b52b67aa6cbbd1d437d6cf8984e7175319eEvan Hunt3510. [func] "rndc status" and XML statistics channel now report
03958ad4b9fd6b2d6f1fbf20e85d8ff2a1f9d069Mark Andrews server start and reconfiguration times. [RT #21048]
03958ad4b9fd6b2d6f1fbf20e85d8ff2a1f9d069Mark Andrews3509. [cleanup] Added a product line to version file to allow for
9f6b57798da8c71effe19296fa86560dad638a31Mark Andrews easy naming of different products (BIND
9f6b57798da8c71effe19296fa86560dad638a31Mark Andrews vs BIND ESV, for example). [RT #32755]
fcc04c160feef526cc209ca03e8bbdfe34afd83bMark Andrews3508. [contrib] queryperf was incorrectly rejecting the -T option.
f0058a25b0de3246c63e4ca95788c611b3896a97Mark Andrews3507. [bug] Statistics channel XSL had a glitch when attempting
e85702ce5be33d7c07eff6487c6bb4730165f331Mark Andrews to chart query data before any queries had been
e85702ce5be33d7c07eff6487c6bb4730165f331Mark Andrews received. [RT #32620]
6f7abb89ec22aef5eda40ed60fcf605a42b78d4dMark Andrews3506. [func] When setting "max-cache-size" and "max-acache-size",
6f7abb89ec22aef5eda40ed60fcf605a42b78d4dMark Andrews the keyword "unlimited" is no longer defined as equal
45f36932943c02159a8907380fc79dd70e2184f1Evan Hunt to 4 gigabytes (except on 32-bit platforms); it
45f36932943c02159a8907380fc79dd70e2184f1Evan Hunt means literally unlimited. [RT #32358]
b123b265e3a3d9b72a14230b6517e0f6fdb5c5b5Mark Andrews3505. [bug] When setting "max-cache-size" and "max-acache-size",
b123b265e3a3d9b72a14230b6517e0f6fdb5c5b5Mark Andrews larger values than 4 gigabytes could not be set
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt explicitly, though larger sizes were available
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt when setting cache size to 0. This has been
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt corrected; the full range is now available.
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt3504. [func] Add support for ACLs based on geographic location,
177be355d4ccf0ce6308e3e6c0f5404eaf13e9a0Evan Hunt using MaxMind GeoIP databases. Based on code
177be355d4ccf0ce6308e3e6c0f5404eaf13e9a0Evan Hunt contributed by Ken Brownfield <kb@slide.com>.
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt3503. [doc] Clarify size_spec syntax. [RT #32449]
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt3502. [func] zone-statistics: "no" is now a synonym for "none",
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt instead of "terse". [RT #29165]
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt3501. [func] zone-statistics now takes three options: full,
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt terse, and none. "yes" and "no" are retained as
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt synonyms for full and terse, respectively. [RT #29165]
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Hunt3500. [security] Support NAPTR regular expression validation on
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Hunt all platforms without using libregex, which
8a6f41d86ac80fd1397ffee65bed5131129a84e2Mark Andrews can be vulnerable to memory exhaustion attack
8a6f41d86ac80fd1397ffee65bed5131129a84e2Mark Andrews (CVE-2013-2266). [RT #32688]
538f4a22b1cbde59a9e53fef51583904a7f7393fMark Andrews3499. [doc] Corrected ARM documentation of built-in zones.
706219e547c90fb7d9435b20e70fb4003dc6dfd5Evan Hunt3498. [bug] zone statistics for zones which matched a potential
706219e547c90fb7d9435b20e70fb4003dc6dfd5Evan Hunt empty zone could have their zone-statistics setting
2f21adbc6a0962117015a51a44b33a99f3f94ac7Evan Hunt3497. [func] When deleting a slave/stub zone using 'rndc delzone'
4d077be1351ea10db3bc7843865a5d1ba1e81d5bEvan Hunt report the files that were being used so they can
4d077be1351ea10db3bc7843865a5d1ba1e81d5bEvan Hunt be cleaned up if desired. [RT #27899]
2e22f903da490cefb98e0c8b14ac66b466cfe1d9Mark Andrews3496. [placeholder]
2e22f903da490cefb98e0c8b14ac66b466cfe1d9Mark Andrews3495. [func] Support multiple response-policy zones (up to 32),
b13b4520207e401d81d7e759162ede870896d82dMark Andrews while improving RPZ performance. "response-policy"
b13b4520207e401d81d7e759162ede870896d82dMark Andrews syntax now includes a "min-ns-dots" clause, with
b13b4520207e401d81d7e759162ede870896d82dMark Andrews default 1, to exclude top-level domains from
8c9d5521e760ead39f75adc3c87dc1dd0f9c101dMark Andrews NSIP and NSDNAME checking. --enable-rpz-nsip and
8c9d5521e760ead39f75adc3c87dc1dd0f9c101dMark Andrews --enable-rpz-nsdname are now the default. [RT #32251]
8c9d5521e760ead39f75adc3c87dc1dd0f9c101dMark Andrews3494. [func] DNS RRL: Blunt the impact of DNS reflection and
03ccae042b4acd22805d667f823066d3690965cfMark Andrews amplification attacks by rate-limiting substantially-
2786b6c53fb198d742e9738294fa0a51a52e4dceckb identical responses. [RT #28130]
20b95f5ff63cdae6bb5d4b96c1cc6e6e5373df8eMark Andrews3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
20b95f5ff63cdae6bb5d4b96c1cc6e6e5373df8eMark Andrews contributed by Mark Goldfinch. [RT #32549]
c3b9fad5e3be639c9b36ff0ac921c30133da395cMar Andrews3492. [bug] Fixed a regression in zone loading performance
c3b9fad5e3be639c9b36ff0ac921c30133da395cMar Andrews due to lock contention. [RT #30399]
39bfdc2ff9da3c2ecdbc70d46cabfd56d66f24f6Mark Andrews3491. [bug] Slave zones using inline-signing must specify a
03ccae042b4acd22805d667f823066d3690965cfMark Andrews file name. [RT #31946]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews3490. [bug] When logging RDATA during update, truncate if it's
03ccae042b4acd22805d667f823066d3690965cfMark Andrews too long. [RT #32365]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb dns_dlzcreate() failed to properly initialize
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb dlzdb.link. When cloning a rdataset do not copy
03ccae042b4acd22805d667f823066d3690965cfMark Andrews the link contents. [RT #32651]
55670a1e5517e9587171e9f41dc8f3e40b6fcfefMark Andrews3488. [bug] Use after free error with DH generated keys. [RT #32649]
55670a1e5517e9587171e9f41dc8f3e40b6fcfefMark Andrews3487. [bug] Change 3444 was not complete. There was a additional
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews place where the NOQNAME proof needed to be saved.
8f4572372c4b496a43b50a6c14d82f2aba26a054Mark Andrews3486. [bug] named could crash when using TKEY-negotiated keys
8f4572372c4b496a43b50a6c14d82f2aba26a054Mark Andrews that had been deleted and then recreated. [RT #32506]
4786e693a7c4b41ba4554f06a2f6d16c74017f15Mark Andrews3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
4d30dd89f5dba10b3ffc0531c35ec635033d310bMark Andrews3484. [bug] Some statistics were incorrectly rendered in XML.
c2e80cf47ebb1ceecb4ad2ee01191ba2677f6feeMark Andrews3483. [placeholder]
c2e80cf47ebb1ceecb4ad2ee01191ba2677f6feeMark Andrews3482. [func] dig +nssearch now prints name servers that don't
f83542787f882444d2abf9fcaf47a34c29e4fec2Mark Andrews have address records (missing AAAA or A, or the name
f83542787f882444d2abf9fcaf47a34c29e4fec2Mark Andrews doesn't exist). [RT #29348]
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt3481. [cleanup] Removed use of const const in atf.
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt3480. [bug] Silence logging noise when setting up zone
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt statistics. [RT #32525]
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt3479. [bug] Address potential memory leaks in gssapi support
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt code. [RT #32405]
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt3478. [port] Fix a build failure in strict C99 environments
2f57f353e8d0b761884303f49e0c2a937b7d6243Evan Hunt3477. [func] Expand logging when adding records via DDNS update
2f57f353e8d0b761884303f49e0c2a937b7d6243Evan Hunt3476. [bug] "rndc zonestatus" could report a spurious "not
f3e10cca1b9a95fab5ac7a162c0705e2d9da7370Mark Andrews found" error on inline-signing zones. [RT #29226]
4b3d727d96fc3ee3a0c12c716f14163adfcf1fedEvan Hunt3475. [cleanup] Changed name of 'map' zone file format (previously
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews 'fast'). [RT #32458]
4b3d727d96fc3ee3a0c12c716f14163adfcf1fedEvan Hunt3474. [bug] nsupdate could assert when the local and remote
d65a29175a23d43511ae7554e347d4519c9594fcEvan Hunt address families didn't match. [RT #22897]
a8ef22d88e89f551bceb04cc7dbefdab74146960Evan Hunt3473. [bug] dnssec-signzone/verify could incorrectly report
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews an error condition due to an empty node above an
24d821190491abc34342f6d126c1228c7c24fca3ckb opt-out delegation lacking an NSEC3. [RT #32072]
47c5b8af920a93763c97d9a93ea1fd766961a5b3Evan Hunt3472. [bug] The active-connections counter in the socket
3b9b4c75f9121de7824b1e621921bb407e82d3c6Evan Hunt statistics could underflow. [RT #31747]
3b9b4c75f9121de7824b1e621921bb407e82d3c6Evan Hunt3471. [bug] The number of UDP dispatches now defaults to
3b9b4c75f9121de7824b1e621921bb407e82d3c6Evan Hunt the number of CPUs even if -n has been set to
965371b8cffbd02d667594c8e17e413c723f9112Mark Andrews a higher value. [RT #30964]
965371b8cffbd02d667594c8e17e413c723f9112Mark Andrews3470. [bug] Slave zones could fail to dump when successfully
de0fd6809754ad9dc47b7c60fda8f4c8b22ea1f8Mark Andrews refreshing after an initial failure. [RT #31276]
de0fd6809754ad9dc47b7c60fda8f4c8b22ea1f8Mark Andrews3469. [bug] Handle DLZ lookup failures more gracefully. Improve
de0fd6809754ad9dc47b7c60fda8f4c8b22ea1f8Mark Andrews backward compatibility between versions of DLZ dlopen
f3f76f009b282953652770408be38e6f9e47cbb3ckb API. [RT #32275]
0fbd29837a5911e0f0a83fca93aa4453200a8ccfMark Andrews3468. [security] RPZ rules to generate A records (but not AAAA records)
0fbd29837a5911e0f0a83fca93aa4453200a8ccfMark Andrews could trigger an assertion failure when used in
0fbd29837a5911e0f0a83fca93aa4453200a8ccfMark Andrews conjunction with DNS64 (CVE-2012-5689). [RT #32141]
1c8f2b6dcd0b3952e4f5f2d6a2f0225675379739Mark Andrews3467. [bug] Added checks in dnssec-keygen and dnssec-settime
1c8f2b6dcd0b3952e4f5f2d6a2f0225675379739Mark Andrews to check for delete date < inactive date. [RT #31719]
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
47c6d89485d2ec62e94eda745267e7387f995e96Mark Andrews in DLZ example driver. [RT #32275]
7786d6542bb800be7d8c56793985d510626806b2Mark Andrews3465. [bug] Handle isolated reserved ports. [RT #31778]
7786d6542bb800be7d8c56793985d510626806b2Mark Andrews3464. [maint] Updates to PKCS#11 openssl patches, supporting
71dfdcbfae32f150179f93476f9ff71b30336cb9Mark Andrews versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
91dd13bacf452437b6f0284bacd4c7f6f763cb45Mark Andrews3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
dbf693fdfd2bb495cf6d176ecebd173331c3d94aMark Andrews3462. [doc] Clarify server selection behavior of dig when using
611dc8876869036ab5e981e53ae7a446145d9354Mark Andrews -4 or -6 options. [RT #32181]
2ec7373254331f183ae62a13acbac24c80a6a3aaMark Andrews3461. [bug] Negative responses could incorrectly have AD=1
2ec7373254331f183ae62a13acbac24c80a6a3aaMark Andrews set. [RT #32237]
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt3460. [bug] Only link against readline where needed. [RT #29810]
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt3459. [func] Added -J option to named-checkzone/named-compilezone
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt to specify the path to the journal file. [RT #30958]
41bbb34bc20f189af62e7047ce42822615417f15Evan Hunt3458. [bug] Return FORMERR when presented with a overly long
1e8259d911ed8e368ae4c6361f5aa99a9496b2a6Mark Andrews domain named in a request. [RT #29682]
058e44186b74531402c1f99088eb9dbe4926f8daMark Andrews3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
9e70b51d3b19b0592116e722a7452383a0e8e366Mark Andrews3456. [port] g++47: ATF failed to compile. [RT #32012]
aa49af836ce7a7a2888f5cedf4cbb14ff4dc1d11Mark Andrews3455. [contrib] queryperf: fix getopt option list. [RT #32338]
aa49af836ce7a7a2888f5cedf4cbb14ff4dc1d11Mark Andrews3454. [port] sparc64: improve atomic support. [RT #25182]
d1ac7adb3e2620b7a22d6141e814800aefc7e844Evan Hunt3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
c22f896f3ae1d7258e99a090ded1f7fe3e232322Evan Hunt failed. [RT #31960]
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews3452. [bug] Accept duplicate singleton records. [RT #32329]
da35568c7169d7218b0be7203ed03e2e626566c0Evan Hunt3451. [port] Increase per thread stack size from 64K to 1M.
da35568c7169d7218b0be7203ed03e2e626566c0Evan Hunt3450. [bug] Stop logfileconfig system test spam system logs.
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt3449. [bug] gen.c: use the pre-processor to construct format
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews strings so that compiler can perform sanity checks;
fec1c619189b1fec1f63528363bf600cd0b1a87eMark Andrews check the snprintf results. [RT #17576]
27809a2ee5db141b684e53bf1d94da26e9f92d3aMark Andrews3448. [bug] The allow-query-on ACL was not processed correctly.
05284949f73d496092c6f21f1ef9d788075fa2dbEvan Hunt3447. [port] Add support for libxml2-2.9.x [RT #32231]
05284949f73d496092c6f21f1ef9d788075fa2dbEvan Hunt3446. [port] win32: Add source ID (see change #3400) to build.
664320a88f4782d0bccf012da01a39dd54632d24Evan Hunt3445. [bug] Warn about zone files with blank owner names
eed495737be4846ab054654a48f3387f77cadaaaMark Andrews immediately after $ORIGIN directives. [RT #31848]
eed495737be4846ab054654a48f3387f77cadaaaMark Andrews3444. [bug] The NOQNAME proof was not being returned from cached
5f26ffc2b4afc462acef8766ce5418cb4d75bfffMark Andrews insecure responses. [RT #21409]
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews rejected when generating keys. [RT #31927]
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews3442. [port] Net::DNS 0.69 introduced a non backwards compatible
7e9d637131516486630290d36c4c0db544cb700eMark Andrews change. [RT #32216]
4c2168728cbfc210e35cd438fe57b95fb55d738aMark Andrews3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
4118cd4276c3f53f9f6f0133688e05e52d70336bMark Andrews3440. [bug] Reorder get_key_struct to not trigger a assertion when
4118cd4276c3f53f9f6f0133688e05e52d70336bMark Andrews cleaning up due to out of memory error. [RT #32131]
4118cd4276c3f53f9f6f0133688e05e52d70336bMark Andrews3439. [placeholder]
8e0a15f42f06d1616b6f5d43658e2f90ff91cbfaMark Andrews3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
d1f43359e4349bb9d934b96b7aa22b54ae7cef7cMark Andrews3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
d1f43359e4349bb9d934b96b7aa22b54ae7cef7cMark Andrews buffers with constant data. [RT #32064]
767f7ebc1a7932b56868f61facae314df8a2871dEvan Hunt3436. [bug] Check malloc/calloc return values. [RT #32088]
b29e8482207fe64ea15960f2048a60e6a37e00ebMark Andrews3435. [bug] Cross compilation support in configure was broken.
34fba65d39b884775c30da2ae4eee15973b1b30dMark Andrews3434. [bug] Pass client info to the DLZ findzone() entry
339f08ee1eea16401bb9fbd9232a336cf6f52a8dckb point in addition to lookup(). This makes it
339f08ee1eea16401bb9fbd9232a336cf6f52a8dckb possible for a database to answer differently
78ba74e63db0c30b30107106dfd4f7e6f671dc35Evan Hunt whether it's authoritative for a name depending
78ba74e63db0c30b30107106dfd4f7e6f671dc35Evan Hunt on the address of the client. [RT #31775]
1bbd36c4db2c86762b582db4b0504e6e68a183f6Mark Andrews3433. [bug] dlz_findzone() did not correctly handle
1bbd36c4db2c86762b582db4b0504e6e68a183f6Mark Andrews ISC_R_NOMORE. [RT #31172]
85705b4b5a4b666981997ffe222738d281b9bf58Evan Hunt3432. [func] Multiple DLZ databases can now be configured.
85705b4b5a4b666981997ffe222738d281b9bf58Evan Hunt DLZ databases are searched in the order configured,
85705b4b5a4b666981997ffe222738d281b9bf58Evan Hunt unless set to "search no", in which case a
85705b4b5a4b666981997ffe222738d281b9bf58Evan Hunt zone can be configured to be retrieved from a
820fdd61dd35e359a8e616031209d074a7140d97Evan Hunt particular DLZ database by using a "dlz <name>"
820fdd61dd35e359a8e616031209d074a7140d97Evan Hunt option in the zone statement. DLZ databases can
820fdd61dd35e359a8e616031209d074a7140d97Evan Hunt support type "master" and "redirect" zones.
8f6d6d72e80314bd36c50f1805e424b6f6332caeEvan Hunt3431. [bug] ddns-confgen: Some valid key algorithms were
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews not accepted. [RT #31927]
f06dad6860f209da422790ab7b9df36857e8c0f3Mark Andrews3430. [bug] win32: isc_time_formatISO8601 was missing the
3f755529ee7ecdc9227eed572e007cf71d4d5107Evan Hunt 'T' between the date and time. [RT #32044]
3f755529ee7ecdc9227eed572e007cf71d4d5107Evan Hunt3429. [bug] dns_zone_getserial2 could a return success without
5f250186409cff46d0409c6d3cc34d4bf08f1d17Mark Andrews returning a valid serial. [RT #32007]
1eb871bb42d2728377ea1ebcb3c1ebb2d9535f3cMar Andrews3428. [cleanup] dig: Add timezone to date output. [RT #2269]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews3427. [bug] dig +trace incorrectly displayed name server
e7857b5ee05414961bb11f9e57f654163fae6acbckb addresses instead of names. [RT #31641]
e7857b5ee05414961bb11f9e57f654163fae6acbckb3426. [bug] dnssec-checkds: Clearer output when records are not
3ce2018dfa0912a29666e7e477a9daddf23fc224Mark Andrews found. [RT #31968]
6eb6af6732194157224e2b8d81a02a9e80c4530aMark Andrews3425. [bug] "acacheentry" reference counting was broken resulting
6eb6af6732194157224e2b8d81a02a9e80c4530aMark Andrews in use after free. [RT #31908]
c965b1869024ab38518fade703cc1dae2d71a59eMark Andrews3424. [func] dnssec-dsfromkey now emits the hash without spaces.
ee2f98d5cf12c86e7590efcdf6725ab133a430f3Mark Andrews3423. [bug] "rndc signing -nsec3param" didn't accept the full
ee2f98d5cf12c86e7590efcdf6725ab133a430f3Mark Andrews range of possible values. Address portability issues.
c963ca7542743c4b1293b245b8750bfdcdde7580Mark Andrews3422. [bug] Added a clear error message for when the SOA does not
c963ca7542743c4b1293b245b8750bfdcdde7580Mark Andrews match the referral. [RT #31281]
d0d892f44941986629021fcdad388d54de829ea0Mark Andrews3421. [bug] Named loops when re-signing if all keys are offline.
1a594d204a1d63538e76f8453be1f4ce9f87b88eMark Andrews3420. [bug] Address VPATH compilation issues. [RT #31879]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews3419. [bug] Memory leak on validation cancel. [RT #31869]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews3418. [func] New XML schema (version 3.0) for the statistics channel
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews adds query type statistics at the zone level, and
34fba65d39b884775c30da2ae4eee15973b1b30dMark Andrews flattens the XML tree and uses compressed format to
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews optimize parsing. Includes new XSL that permits
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews charting via the Google Charts API on browsers that
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews support javascript in XSL. The old XML schema has been
8d678e40f6d5a172a6e5694ae819330ff667c55cEvan Hunt deprecated. [RT #30023]
cdd271b14aebc6a3f076eb82a016e0a4d0d4247aEvan Hunt3417. [placeholder]
cdd271b14aebc6a3f076eb82a016e0a4d0d4247aEvan Hunt3416. [bug] Named could die on shutdown if running with 128 UDP
d64138e5778e99a994039b3861471929a49a2042Evan Hunt dispatches per interface. [RT #31743]
d64138e5778e99a994039b3861471929a49a2042Evan Hunt3415. [bug] named could die with a REQUIRE failure if a validation
d64138e5778e99a994039b3861471929a49a2042Evan Hunt was canceled. [RT #31804]
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews3414. [bug] Address locking issues found by Coverity. [RT #31626]
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews3413. [func] Record the number of DNS64 AAAA RRsets that have been
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews synthesized. [RT #27636]
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews3412. [bug] Copy timeval structure from control message data.
00c605a6438c16d4159aa7951e31ec5ed00812eeMark Andrews3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
00c605a6438c16d4159aa7951e31ec5ed00812eeMark Andrews to UDP. [RT #31690]
c41c261fc7b2ae573fab3675a03a5f1ef099a2eaMark Andrews3410. [bug] Addressed Coverity warnings. [RT #31626]
c41c261fc7b2ae573fab3675a03a5f1ef099a2eaMark Andrews3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
ad127d839d2e7aa542939a8a336691407e23397eMark Andrews from X.509 certificates, for use with DANE
ad127d839d2e7aa542939a8a336691407e23397eMark Andrews (DNS-based Authentication of Named Entities).
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt3408. [bug] Some DNSSEC-related options (update-check-ksk,
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews are now legal in slave zones as long as
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews inline-signing is in use. [RT #31078]
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt3407. [placeholder]
3d1eaf18c7603dfc134000488447dcb40d9d2bc5ckb3406. [bug] mem.c: Fix compilation errors when building with
7865ea9545f28f12f046b32d24c989e8441b9812Mark Andrews ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
7865ea9545f28f12f046b32d24c989e8441b9812Mark Andrews Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
57f1d800f8866d8b45cc130d31a92742a7c37e23Mark Andrews3405. [bug] Handle time going backwards in acache. [RT #31253]
57f1d800f8866d8b45cc130d31a92742a7c37e23Mark Andrews3404. [bug] dnssec-signzone: When re-signing a zone, remove
c298583db573a329f37d43301d8c3c812500ac85Mark Andrews RRSIG and NSEC records from nodes that used to be
c298583db573a329f37d43301d8c3c812500ac85Mark Andrews in-zone but are now below a zone cut. [RT #31556]
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews3402. [test] The IPv6 interface numbers used for system
04e5f9812cb02d5d86b542dfa9a394f074ff5621Evan Hunt tests were incorrect on some platforms. [RT #25085]
04e5f9812cb02d5d86b542dfa9a394f074ff5621Evan Hunt3401. [bug] Addressed Coverity warnings. [RT #31484]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews3400. [cleanup] "named -V" can now report a source ID string, defined
109ebcc98023591b66f7e12010da9bde0dd07d6fMark Andrews in the "srcid" file in the build tree and normally set
7310c0b1ee680a4bcb0bcaa55798e64b97c9da18Mark Andrews to the most recent git hash. [RT #31494]
7310c0b1ee680a4bcb0bcaa55798e64b97c9da18Mark Andrews3399. [port] netbsd: rename 'bool' parameter to avoid namespace
7310c0b1ee680a4bcb0bcaa55798e64b97c9da18Mark Andrews clash. [RT #31515]
a0c1fa2a8f6710d8c490643c3d04014f907e1a23Mark Andrews3398. [bug] SOA parameters were not being updated with inline
432defb06aff07e35c762cbb9952eeb4d1957224Mark Andrews signed zones if the zone was modified while the
e928207c3866f562d2800abb2afde59738c9294eMark Andrews server was offline. [RT #29272]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver3396. [bug] OPT records were incorrectly removed from signed,
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver truncated responses. [RT #31439]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver3394. [bug] Adjust 'successfully validated after lower casing
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver signer' log level and category. [RT #31414]
368aedf188d7c7782cae8a5ce2a978be47b5a764Evan Hunt3393. [bug] 'host -C' could core dump if REFUSED was received.
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3392. [func] Keep statistics on REFUSED responses. [RT #31412]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3390. [bug] Silence clang compiler warnings. [RT #30417]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
d878b8d87c3f46a25ccae9f5cfe6e39af67562e0Evan Hunt3388. [bug] Fixed several Coverity warnings.
d878b8d87c3f46a25ccae9f5cfe6e39af67562e0Evan Hunt Note: This change includes a fix for a bug that
d878b8d87c3f46a25ccae9f5cfe6e39af67562e0Evan Hunt was subsequently determined to be an exploitable
d878b8d87c3f46a25ccae9f5cfe6e39af67562e0Evan Hunt security vulnerability, CVE-2012-5688: named could
d878b8d87c3f46a25ccae9f5cfe6e39af67562e0Evan Hunt die on specific queries with dns64 enabled.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3387. [func] DS digest can be disabled at runtime with
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt disable-ds-digests. [RT #21581]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3386. [bug] Address locking violation when generating new NSEC /
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt NSEC3 chains. [RT #31224]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3385. [bug] named-checkconf didn't detect missing master lists
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt in also-notify clauses. [RT #30810]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3384. [bug] Improved logging of crypto errors. [RT #30963]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3383. [security] A certain combination of records in the RBT could
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt cause named to hang while populating the additional
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt section of a response. [RT #31090]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3382. [bug] SOA query from slave used use-v6-udp-ports range,
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt if set, regardless of the address family in use.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3381. [contrib] Update queryperf to support more RR types.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3380. [bug] named could die if a nonexistent master list was
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt referenced in a also-notify. [RT #31004]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews3379. [bug] isc_interval_zero and isc_time_epoch should be
c438f1beb920b01adde08b32bfcfa085d7ce3efeMark Andrews "const (type)* const". [RT #31069]
34fba65d39b884775c30da2ae4eee15973b1b30dMark Andrews3378. [bug] Handle missing 'managed-keys-directory' better.
54489ba1672458382e8dfb5490fcfc7230f8ea85Evan Hunt3377. [bug] Removed spurious newline from NSEC3 multiline
54489ba1672458382e8dfb5490fcfc7230f8ea85Evan Hunt output. [RT #31044]
4e8fe357a619ae2b789b15df7e3d6abf782b4a71Evan Hunt3376. [bug] Lack of EDNS support was being recorded without a
4e8fe357a619ae2b789b15df7e3d6abf782b4a71Evan Hunt successful response. [RT #30811]
4e8fe357a619ae2b789b15df7e3d6abf782b4a71Evan Hunt3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews3374. [bug] isc_parse_uint32 failed to return a range error on
1a04af5311b46955fd8c0207cc7bad1b1d632f7fMark Andrews systems with 64 bit longs. [RT #30232]
393fd55d91306e6def3a3d06748eee031f57bd17Mark Andrews3373. [bug] win32: open raw files in binary mode. [RT #30944]
7e9d6c707501c75c4caa1922af5c7d97b4895064Mark Andrews3372. [bug] Silence spurious "deleted from unreachable cache"
7e9d6c707501c75c4caa1922af5c7d97b4895064Mark Andrews messages. [RT #30501]
4c9c2a6a72616ac8a614204dc0721afcb2095f67Mark Andrews3371. [bug] AD=1 should behave like DO=1 when deciding whether to
4c9c2a6a72616ac8a614204dc0721afcb2095f67Mark Andrews add NS RRsets to the additional section or not.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews3370. [bug] Address use after free while shutting down. [RT #30241]
20d441892d670cab7a58bbd36f4e92ae73b10a20Evan Hunt3369. [bug] nsupdate terminated unexpectedly in interactive mode
e71acb8fbb0201a1b240dfd2e87a2524655884deMark Andrews if built with readline support. [RT #29550]
4f3a3fc43c6e2de62997d2378e87b4248cf771aeMark Andrews3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
4f3a3fc43c6e2de62997d2378e87b4248cf771aeMark Andrews were not C++ safe.
75582adac73202213d936dc0850f1c9cf47d6cbeMark Andrews3367. [bug] dns_dnsseckey_create() result was not being checked.
75582adac73202213d936dc0850f1c9cf47d6cbeMark Andrews3366. [bug] Fixed Read-After-Write dependency violation for IA64
20d441892d670cab7a58bbd36f4e92ae73b10a20Evan Hunt atomic operations. [RT #25181]
b4b1e8f18bdf504ca3b6b5911d79c6d1570d59e7Mark Andrews3365. [bug] Removed spurious newlines from log messages in
840659f1d7e09b9cd4af283aeadfbfe173b57a06Mark Andrews3364. [security] Named could die on specially crafted record.
840659f1d7e09b9cd4af283aeadfbfe173b57a06Mark Andrews3363. [bug] Need to allow "forward" and "fowarders" options
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews in static-stub zones; this had been overlooked.
56fdf1d4014b0901e723d22c0bf7503c086af2d5Mark Andrews3362. [bug] Setting some option values to 0 in named.conf
56fdf1d4014b0901e723d22c0bf7503c086af2d5Mark Andrews could trigger an assertion failure on startup.
85fcd0b9b2d80be4646187d7094e5644a52e3263Mark Andrews3361. [bug] "rndc signing -nsec3param" didn't work correctly
85fcd0b9b2d80be4646187d7094e5644a52e3263Mark Andrews when salt was set to '-' (no salt). [RT #30099]
2c642143d45517bfc0990d9194a7cc536f3fce89Mark Andrews3360. [bug] 'host -w' could die. [RT #18723]
2c642143d45517bfc0990d9194a7cc536f3fce89Mark Andrews3359. [bug] An improperly-formed TSIG secret could cause a
c51f2c9a529b2130a8058cb7a32bd284fa6cfdb9Mark Andrews memory leak. [RT #30607]
d8e73b1c76f2c7dcc641bfa7759c15df58c82c7eMark Andrews3358. [placeholder]
d8e73b1c76f2c7dcc641bfa7759c15df58c82c7eMark Andrews3357. [port] Add support for libxml2-2.8.x [RT #30440]
269c07173e24d7811e2fd09304023e3104fcbe0bMark Andrews3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
269c07173e24d7811e2fd09304023e3104fcbe0bMark Andrews approaching their expiry, so they don't remain
962bf88eec1ea34a451769ba82c9389db7f0bef0Mark Andrews in caches after expiry. [RT #26429]
962bf88eec1ea34a451769ba82c9389db7f0bef0Mark Andrews3355. [port] Use more portable awk in verify system test.
4bb9db2aed9860f7ca63f925a4b9d48e07917988Mark Andrews3354. [func] Improve OpenSSL error logging. [RT #29932]
c6581f1ae41f8cfdaf983a0cc4936365040060a2Mark Andrews3353. [bug] Use a single task for task exclusive operations.
e5bf06eedc08179fb93a09799915139370d08055Evan Hunt3352. [bug] Ensure that learned server attributes timeout of the
e5bf06eedc08179fb93a09799915139370d08055Evan Hunt adb cache. [RT #29856]
a7ab4ad2d45930cf42d92b26e92c5a4e39a197f8Mark Andrews3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews memory debugging flags are set. [RT #30243]
261543671b70b078a2d55bbf16ef78ae2074bbdcEvan Hunt3350. [bug] Memory read overrun in isc___mem_reallocate if
261543671b70b078a2d55bbf16ef78ae2074bbdcEvan Hunt ISC_MEM_DEBUGCTX memory debugging flag is set.
89069e6b3abc5ab00c77227f31b771cc2fa4768fEvan Hunt3349. [bug] Change #3345 was incomplete. [RT #30233]
89069e6b3abc5ab00c77227f31b771cc2fa4768fEvan Hunt3348. [bug] Prevent RRSIG data from being cached if a negative
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews record matching the covering type exists at a higher
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews trust level. Such data already can't be retrieved from
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews the cache since change 3218 -- this prevents it
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews being inserted into the cache as well. [RT #26809]
5b57f580ce54201c6105300ea6636677531163f9Mark Andrews3347. [bug] dnssec-settime: Issue a warning when writing a new
5b57f580ce54201c6105300ea6636677531163f9Mark Andrews private key file would cause a change in the
4c34112a69735364713758c8a22f753389fd1753Mark Andrews permissions of the existing file. [RT #27724]
4c34112a69735364713758c8a22f753389fd1753Mark Andrews3346. [security] Bad-cache data could be used before it was
fb604d1cee223986d090763292015309adfcf9c7Mark Andrews initialized, causing an assert. [RT #30025]
c478bb4c4658dddabe79118e2f84107640aa06c4Mark Andrews3345. [bug] Addressed race condition when removing the last item
fb604d1cee223986d090763292015309adfcf9c7Mark Andrews or inserting the first item in an ISC_QUEUE.
936036e82337c5aba40e735e5b46f9112869772fMark Andrews3344. [func] New "dnssec-checkds" command checks a zone to
936036e82337c5aba40e735e5b46f9112869772fMark Andrews determine which DS records should be published
81274f4b08b04eade0936cd32a4ba56281d7c2d2Mark Andrews in the parent zone, or which DLV records should be
81274f4b08b04eade0936cd32a4ba56281d7c2d2Mark Andrews published in a DLV zone, and queries the DNS to
81274f4b08b04eade0936cd32a4ba56281d7c2d2Mark Andrews ensure that it exists. (Note: This tool depends
3fd0334e59fe72294bedafc9cb0f74d66b1cfe3aMark Andrews on python; it will not be built or installed on
fc3b3e1f7e4ec1cf3bcc08f7ecc3ed8ebd29b034Mark Andrews systems that do not have a python interpreter.)
3fd0334e59fe72294bedafc9cb0f74d66b1cfe3aMark Andrews3343. [placeholder]
99f6179191e583d23f3c5567d3c00b57b64eb52dEvan Hunt3342. [bug] Change #3314 broke saving of stub zones to disk
99f6179191e583d23f3c5567d3c00b57b64eb52dEvan Hunt resulting in excessive cpu usage in some cases.
77cb7130e721c1352009c86fb2b38eedd06c4f97Mark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
77cb7130e721c1352009c86fb2b38eedd06c4f97Mark Andrews to ensure correctness of signatures and of NSEC/NSEC3
77cb7130e721c1352009c86fb2b38eedd06c4f97Mark Andrews chains. [RT #23673]
fc3b3e1f7e4ec1cf3bcc08f7ecc3ed8ebd29b034Mark Andrews3340. [func] Added new 'map' zone file format, which is an image
adfc3ad3ce5db585fdb29d3d6000aa05ba077f13Evan Hunt of a zone database that can be loaded directly into
adfc3ad3ce5db585fdb29d3d6000aa05ba077f13Evan Hunt memory via mmap(), allowing much faster zone loading.
73d187eab95980e7af7b31a22e522ed5ea1561d7Mark Andrews (Note: Because of pointer sizes and other
db1b550863d0fb4d65594f26a6d67f3c6a764a56Mark Andrews considerations, this file format is platform-dependent;
73d187eab95980e7af7b31a22e522ed5ea1561d7Mark Andrews 'map' zone files cannot always be transferred from one
73d187eab95980e7af7b31a22e522ed5ea1561d7Mark Andrews server to another.) [RT #25419]
93143fd81acd86e594bac20c6c58b930dfe63a80Evan Hunt3339. [func] Allow the maximum supported rsa exponent size to be
93143fd81acd86e594bac20c6c58b930dfe63a80Evan Hunt specified: "max-rsa-exponent-size <value>;" [RT #29228]
93143fd81acd86e594bac20c6c58b930dfe63a80Evan Hunt3338. [bug] Address race condition in units tests: asyncload_zone
c2e614115b19a4c28e0067e57a48f4ed5d5e12f8Mark Andrews and asyncload_zt. [RT #26100]
c2e614115b19a4c28e0067e57a48f4ed5d5e12f8Mark Andrews3337. [bug] Change #3294 broke support for the multiple keys
c2e614115b19a4c28e0067e57a48f4ed5d5e12f8Mark Andrews in controls. [RT #29694]
12c3204c463e2bf3a910a288f628ea1f26f77d1eEvan Hunt3336. [func] Maintain statistics for RRsets tagged as "stale".
c54dadd85337e9a8417103317a899dfba2a847d1Evan Hunt3335. [func] nslookup: return a nonzero exit code when unable
38b260f32d2be0e916e50e8bf77957ba2627a95aMark Andrews to get an answer. [RT #29492]
bc298cd0f77dce2d452efd3e3d3153e2a9a17dbfMark Andrews3334. [bug] Hold a zone table reference while performing a
bc298cd0f77dce2d452efd3e3d3153e2a9a17dbfMark Andrews asynchronous load of a zone. [RT #28326]
1bb3831e13a65afd87078c88e0285d23b1e0bcdfMark Andrews3333. [bug] Setting resolver-query-timeout too low can cause
1bb3831e13a65afd87078c88e0285d23b1e0bcdfMark Andrews named to not recover if it loses connectivity.
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews3331. [security] dns_rdataslab_fromrdataset could produce bad
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews rdataslabs. [RT #29644]
313e570601cbe84c46b8d0427e7f1b20e71cc0c1Evan Hunt3330. [func] Fix missing signatures on NOERROR results despite
18d208a4a277eb460f5b47c6b167f60b04db3110Mark Andrews RPZ rewriting. Also
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt - add optional "recursive-only yes|no" to the
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt response-policy statement
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt - add optional "max-policy-ttl" to the response-policy
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt statement to limit the false data that
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt "recursive-only no" can introduce into
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt resolvers' caches
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt - add a RPZ performance test to bin/tests/system/rpz
c19cfefe7e345c37ef3bb98b0db2d14fe7b1d583Evan Hunt when queryperf is available.
c19cfefe7e345c37ef3bb98b0db2d14fe7b1d583Evan Hunt - the encoding of PASSTHRU action to "rpz-passthru".
c19cfefe7e345c37ef3bb98b0db2d14fe7b1d583Evan Hunt (The old encoding is still accepted.)
56c9fcf07580457442b80ac32bdb7c07aa0df870Evan Hunt3329. [bug] Handle RRSIG signer-name case consistently: We
41ca314cc2fafaaa9089438bdfd24880bafa9079Mark Andrews generate RRSIG records with the signer-name in
949eefdda49701c14579d1fd251bd09df0751c2fEvan Hunt lower case. We accept them with any case, but if
949eefdda49701c14579d1fd251bd09df0751c2fEvan Hunt they fail to validate, we try again in lower case.
15218d6ed062ec24c4a7ec10d22d1113b4c79556Evan Hunt3328. [bug] Fixed inconsistent data checking in dst_parse.c.
238e0e843834f24a40692a5ea28ace14ef5807ceMark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
9ddf371552b3554a22632996acc41ef9917a30f4Mark Andrews to 'filter-aaaa-on-v4' but applies to IPv6
9ddf371552b3554a22632996acc41ef9917a30f4Mark Andrews connections. (Use "configure --enable-filter-aaaa"
9ddf371552b3554a22632996acc41ef9917a30f4Mark Andrews to enable this option.) [RT #27308]
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews3326. [func] Added task list statistics: task model, worker
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews threads, quantum, tasks running, tasks ready.
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews3325. [func] Report cache statistics: memory use, number of
328e0fee6b6c91c258e5ce36eb70f5e017a85af2Mark Andrews nodes, number of hash buckets, hit and miss counts.
a5a30ae7c0636a57d8575acb98fdf906c0ea818fMark Andrews3324. [test] Add better tests for ADB stats [RT #27057]
a5a30ae7c0636a57d8575acb98fdf906c0ea818fMark Andrews3323. [func] Report the number of buckets the resolver is using.
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt3322. [func] Monitor the number of active TCP and UDP dispatches.
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews3321. [func] Monitor the number of recursive fetches and the
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews number of open sockets, and report these values in
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews the statistics channel. [RT #27054]
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews3320. [func] Added support for monitoring of recursing client
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews count. [RT #27009]
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews3319. [func] Added support for monitoring of ADB entry count and
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews hash size. [RT #27057]
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews3318. [tuning] Reduce the amount of work performed while holding a
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews bucket lock when finished with a fetch context.
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews3316. [tuning] Improved locking performance when recursing.
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews queries; this can improve performance on busy
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews multiprocessor systems by reducing lock contention.
b290d10fc42ae909f7319eeac68f876155dbf824Mark Andrews3314. [bug] The masters list could be updated while stub_callback
b290d10fc42ae909f7319eeac68f876155dbf824Mark Andrews or refresh_callback were using it. [RT #26732]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
1d32b1df372d6be6bac6450739b9e5ea23819995Evan Hunt3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
9ca4e2411ca45c09494716f725b8b9a25ae887d7Mark Andrews3311. [bug] Abort the zone dump if zone->db is NULL in
108788443c2d4e4c5cc16c103bdfc7da665ed0c3Mark Andrews zone.c:zone_gotwritehandle. [RT #29028]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt3310. [test] Increase table size for mutex profiling. [RT #28809]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt3309. [bug] resolver.c:fctx_finddone() was not thread safe.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3308. [placeholder]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt3305. [func] Add wire format lookup method to sdb. [RT #28563]
e4aac0596c89955ced3398d7e2896d05bcc70fd5Mark Andrews3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
71e4c3ee745b9fbf0c627246a9896589344f613cMark Andrews3303. [bug] named could die when reloading. [RT #28606]
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews keys if the zone name contained character that
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews required special mappings. [RT #28600]
9c832595d40482529ac6d369664bb59fbc05b925Mark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
28c2bc20269f3127b8bcb68e4458392f86cc0116Evan Hunt for non-recursive queries. [RT #28565]
4122abdc3cfa16c8b3ecbd20830ca9a43f9fecb9Evan Hunt3300. [bug] Named could die if gssapi was enabled in named.conf
4122abdc3cfa16c8b3ecbd20830ca9a43f9fecb9Evan Hunt but was not compiled in. [RT #28338]
de52784e45e3a7a92c0d8ad843eb4db313bbfd97Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
de52784e45e3a7a92c0d8ad843eb4db313bbfd97Mark Andrews3298. [bug] Named could dereference a NULL pointer in
b68dc65959cc38f997c365abed9f4e6c0415ecc7Mark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
56dc4c6730222cd3915a6ca39bc6578ad36a160aMark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
d881a5ad06db99a42e47176028c14d09041f8807Scott Mann3296. [bug] Named could die with a INSIST failure in
d881a5ad06db99a42e47176028c14d09041f8807Scott Mann client.c:exit_check. [RT #28346]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
553197e28833ed2d8bf26f8112eaa137dbaa040aMark Andrews portable. [RT # 26542]
087f83a3b928ac090fef80e5ed09712935f38e5aMark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
553197e28833ed2d8bf26f8112eaa137dbaa040aMark Andrews error. [RT #28265]
5927944728a530e9f43597b64a555029e2d010bdScott Mann3293. [func] nsupdate: list supported type. [RT #28261]
5927944728a530e9f43597b64a555029e2d010bdScott Mann3292. [func] Log messages in the axfr stream at debug 10.
0da3b4a9a76d24ce05e6330d9bb128f18f1ca0d4Evan Hunt3291. [port] Fixed a build error on systems without ENOTSUP.
cae06bceda6c5d415f740574a64f42bf5f561d61Mark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
411d2914ade28174f3789d4a8e43636fc68eb310Mark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
23daf8948b2e5462ccea082a441e9759dffa50cdMark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
23daf8948b2e5462ccea082a441e9759dffa50cdMark Andrews by the DLZ dlopen driver. [RT #28056]
9bd876a683709be588f6fac6781a76fdd57b2f08Mark Andrews3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
03e2b1d18d6231d02a09e03d9300667fd6ef51d9Mark Andrews3286. [bug] Managed key maintenance timer could fail to start
03e2b1d18d6231d02a09e03d9300667fd6ef51d9Mark Andrews after 'rndc reconfig'. [RT #26786]
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews proveunsecure after calling startfinddlvsep.
69feafa0af18ce7b1fd4f9d330948272e6c926a1Evan Hunt3284. [bug] Address race conditions with the handling of
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
08b512b6a0c6e3c3e411275651930aeec605cf0cEvan Hunt failed to load. [RT #27863]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
08b512b6a0c6e3c3e411275651930aeec605cf0cEvan Hunt of the old NS RRset when replacing it.
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews [RT #27792] [RT #27884]
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt3281. [bug] SOA refresh queries could be treated as cancelled
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt despite succeeding over the loopback interface.
6fb6f8a2263f9cbc6bf979a4d79cc7a71e86f41eEvan Hunt3280. [bug] Potential double free of a rdataset on out of memory
6fb6f8a2263f9cbc6bf979a4d79cc7a71e86f41eEvan Hunt with DNS64. [RT #27762]
3ab9d6435a7b40812e9d8d9d1ecf537e28082e3aEvan Hunt3279. [bug] Hold a internal reference to the zone while performing
77d048b03eec3222e283426beab46ec23ecf8371Evan Hunt a asynchronous load. Address potential memory leak
77d048b03eec3222e283426beab46ec23ecf8371Evan Hunt if the asynchronous is cancelled. [RT #27750]
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt3278. [bug] Make sure automatic key maintenance is started
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews when "auto-dnssec maintain" is turned on during
13790b548c6660cba736756e5184e923d15d2659Evan Hunt "rndc reconfig". [RT #26805]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
2a05d28eb174b082b604d1de1969ee371d8af568Mark Andrews safe_open failure. [RT #27696]
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt option had been misspelled as '-clear'. (To avoid
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt future confusion, both options now work.) [RT #27173]
83c0ef88159fcae73fdbf8fe04d220c1878cce3eEvan Hunt3274. [placeholder]
36a13a94c5636cbed464380e56f23fb9df363731Evan Hunt3273. [bug] AAAA responses could be returned in the additional
ac436908582fe08c85c886b200664816b11fded6Mark Andrews section even when filter-aaaa-on-v4 was in use.
19ae9cbb28abf57c2605cbedaa6a7201a0cb6572Mark Andrews3272. [func] New "rndc zonestatus" command prints information
5584cbf427d85488e3fbed682ea3f2406bdb8b4fEvan Hunt about the specified zone. [RT #21671]
ca45c0bc34042b3821be46a6a95e71edd4c32c8dEvan Hunt3271. [port] darwin: mksymtbl is not always stable, loop several
ca45c0bc34042b3821be46a6a95e71edd4c32c8dEvan Hunt times before giving up. mksymtbl was using non
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews portable perl to covert 64 bit hex strings. [RT #27653]
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews --- 9.9.0rc2 released ---
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
90a354ab367f420147a498e026305f59bf58a72bEvan Hunt when inline-signing was in use. [RT #27650]
90a354ab367f420147a498e026305f59bf58a72bEvan Hunt3269. [port] darwin 11 and later now built threaded by default.
25845da41a621f35e76dc8560ca40de6859e0a11Evan Hunt3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
25845da41a621f35e76dc8560ca40de6859e0a11Evan Hunt out the earliest expiry time. [RT #23311]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews3267. [bug] Memory allocation failures could be mis-reported as
a5166d5fce30e5924f279d3e92d1f20b9fb7b4dcMark Andrews unexpected error. New ISC_R_UNSET result code.
f550b4b104d2859539b2ec287600f1dd2215d9fbEvan Hunt3266. [bug] The maximum number of NSEC3 iterations for a
f550b4b104d2859539b2ec287600f1dd2215d9fbEvan Hunt DNSKEY RRset was not being properly computed.
6150d3cb666a58d5e3a15275562c9fc5c5b6b2d8Evan Hunt3265. [bug] Corrected a problem with lock ordering in the
fd0cb187615695ddc84ec25c88710c6c4e7cf096Evan Hunt inline-signing code. [RT #27557]
fd0cb187615695ddc84ec25c88710c6c4e7cf096Evan Hunt3264. [bug] Automatic regeneration of signatures in an
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt inline-signing zone could stall when the server
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt was restarted. [RT #27344]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
1c1879b7efe32e6fe95de0ba923249925e3a320cEvan Hunt inline-signing zone. [RT #27337]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
77b8f02d19efea79c34f0d4afcefc7ad65de8000Evan Hunt3261. [func] RRset ordering now defaults to random. [RT #27174]
77b8f02d19efea79c34f0d4afcefc7ad65de8000Evan Hunt3260. [bug] "rrset-order cyclic" could appear not to rotate
0c25a44aac24a452a41240c45d35320ce054427dEvan Hunt for some query patterns. [RT #27170/27185]
0c25a44aac24a452a41240c45d35320ce054427dEvan Hunt --- 9.9.0rc1 released ---
8281fd83da005cdb114a4c784c847a7eec4bdc38Evan Hunt3259. [bug] named-compilezone: Suppress "dump zone to <file>"
8281fd83da005cdb114a4c784c847a7eec4bdc38Evan Hunt message when writing to stdout. [RT #27109]
146057d7e755d646283adfe5d813f756b0538095Mark Andrews3258. [test] Add "forcing full sign with unreadable keys" test.
fe3472c80b76b6fed0ae674fd63471d02477a03aMark Andrews3257. [bug] Do not generate a error message when calling fsync()
3975f627fe9c0d3aa02ed135070e3253357daad9Mark Andrews in a pipe or socket. [RT #27109]
3975f627fe9c0d3aa02ed135070e3253357daad9Mark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3255. [func] No longer require that a empty zones be explicitly
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt enabled or that a empty zone is disabled for
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt RFC 1918 empty zones to be configured. [RT #27139]
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
62a348b15dd552e12bfbe94111e14072f1c8f02eMark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
62a348b15dd552e12bfbe94111e14072f1c8f02eMark Andrews too long. [RT #26956]
7b4b6f361b2fb2291c2019b377a9c0c8e80cfd6bMark Andrews3252. [bug] When master zones using inline-signing were
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt updated while the server was offline, the source
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt zone could fall out of sync with the signed
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt copy. They can now resynchronize. [RT #26676]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt memory dns_sdlz_putrr() can allocate per record to
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt prevent run away memory consumption on ISC_R_NOSPACE.
c4352fb17ebb1cf29ccabdf1c4273a86f035f38bMark Andrews3250. [func] 'configure --enable-developer'; turn on various
cd22c3e4e4ff8ad6eb399155bd8df9330aa39547Mark Andrews configure options, normally off by default, that
cd22c3e4e4ff8ad6eb399155bd8df9330aa39547Mark Andrews we want developers to build and test with. [RT #27103]
0148654d85b2818f9317b428a67701f4585c8243Scott Mann3249. [bug] Update log message when saving slave zones files for
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews analysis after load failures. [RT #27087]
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann3248. [bug] Configure options --enable-fixed-rrset and
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann --enable-exportlib were incompatible with each
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann other. [RT #27087]
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews3247. [bug] 'raw' format zones failed to preserve load order
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews breaking 'fixed' sort order. [RT #27087]
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt3246. [bug] Named failed to start with a empty also-notify list.
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt3245. [bug] Don't report a error unchanged serials unless there
9a8ffb1ac76dfa5ca913474f0b23a15934356b47Mark Andrews were other changes when thawing a zone with
9a8ffb1ac76dfa5ca913474f0b23a15934356b47Mark Andrews ixfr-fromdifferences. [RT #26845]
f704fa0ca628e5661d842ae9947024c9fd4fefcbEvan Hunt3244. [func] Added readline support to nslookup and nsupdate.
f704fa0ca628e5661d842ae9947024c9fd4fefcbEvan Hunt Also simplified nsupdate syntax to make "update"
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews and "prereq" optional. [RT #24659]
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews being properly set.
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt3242. [func] Extended the header of raw-format master files to
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt include the serial number of the zone from which
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt they were generated, if different (as in the case
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews of inline-signing zones). This is to be used in
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews inline-signing zones, to track changes between the
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews unsigned and signed versions of the zone, which may
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews have different serial numbers.
1946c596b47b0495ce745fe2fff7da799919b0d2Mark Andrews (Note: raw zonefiles generated by this version of
4cac7d0949f2e76561b9450b2af4ebe3eece5aa2Evan Hunt BIND are no longer compatible with prior versions.
1946c596b47b0495ce745fe2fff7da799919b0d2Mark Andrews To generate a backward-compatible raw zonefile
020c4484fe510434c1b3aaac040ab6cfb3340115Mark Andrews using dnssec-signzone or named-compilezone, specify
020c4484fe510434c1b3aaac040ab6cfb3340115Mark Andrews output format "raw=0" instead of simply "raw".)
30d9cf665d32984fe1dc62ae355ab5b2a0fe3a35Mark Andrews3241. [bug] Address race conditions in the resolver code.
0a1009ae64036ad2473bc48be8c98a54392b6cb5Mark Andrews3240. [bug] DNSKEY state change events could be missed. [RT #26874]
2801318d3cf49e23ee2bfda45f66cbaa7409f0aaMark Andrews3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews timestamp. [RT #26883]
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews3238. [bug] keyrdata was not being reinitialized in
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews lib/dns/rbtdb.c:iszonesecure. [RT #26913]
48a3b282636db2c67c6e2dc10833689f58b05422Vernon Schryver3237. [bug] dig -6 didn't work with +trace. [RT #26906]
bddc7537c220d2be1f496f7271382ef825826818Evan Hunt3236. [bug] Backed out changes #3182 and #3202, related to
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews EDNS(0) fallback behavior. [RT #26416]
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
8b04568c804d6c50abb7c99adb03c689fbb00cf9Evan Hunt the generated diff and optionally writes it to a
ebe4f01a8fd93b6b8aeec936ae0703a97784f7b4Mark Andrews journal. [RT #26386]
2801318d3cf49e23ee2bfda45f66cbaa7409f0aaMark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
af850c4120c5bee9462de4def85d0b4c1b583963Mark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews3232. [bug] Zero zone->curmaster before return in
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
02286522fbc6db783b5f0b4318289db0cefbfbcbMark Andrews3231. [bug] named could fail to send a incompressible zone.
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt3230. [bug] 'dig axfr' failed to properly handle a multi-message
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt axfr with a serial of 0. [RT #26796]
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt3229. [bug] Fix local variable to struct var assignment
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt found by CLANG warning.
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt3228. [tuning] Dynamically grow symbol table to improve zone
b2086d798b442a428d50ddc247925f114aa4112fEvan Hunt loading performance. [RT #26523]
b2086d798b442a428d50ddc247925f114aa4112fEvan Hunt3227. [bug] Interim fix to make WKS's use of getprotobyname()
b2086d798b442a428d50ddc247925f114aa4112fEvan Hunt and getservbyname() self thread safe. [RT #26232]
1dacfa0ea8ee078030411d55d2021f7619568ea3Scott Mann3226. [bug] Address minor resource leakages. [RT #26624]
1dacfa0ea8ee078030411d55d2021f7619568ea3Scott Mann3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
2cc56f582c1b13e5f8537610b71c1c283261a7dcMark Andrews messages. [RT #26507]
2cc56f582c1b13e5f8537610b71c1c283261a7dcMark Andrews3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
8c0f354bdf003852894a9a5ad6b829eafef0d405Mark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt3222. [cleanup] Replace dns_journal_{get,set}_bitws with
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt dns_journal_{get,set}_sourceserial. [RT #26634]
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt3221. [bug] Fixed a potential core dump on shutdown due to
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt referencing fetch context after it's been freed.
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt --- 9.9.0b2 released ---
1219f8d1948a3e39bfeee1980ef4931fb19c4485Evan Hunt3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
1219f8d1948a3e39bfeee1980ef4931fb19c4485Evan Hunt could fail to set the database version correctly,
3d5423a48472936f3b1ad423995c5baffe9ff3b1Evan Hunt causing an assertion failure. [RT #26180]
41ce9f5c27cfb50874b3274cea4f93d1fac14a91Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
67e3b3b9fcaa9150cd79b6db0d757bd131fce913Evan Hunt3218. [security] Cache lookup could return RRSIG data associated with
67e3b3b9fcaa9150cd79b6db0d757bd131fce913Evan Hunt nonexistent records, leading to an assertion
67e3b3b9fcaa9150cd79b6db0d757bd131fce913Evan Hunt failure. [RT #26590]
84f0bd3bc7ac72289cc0dfedd3d17872ad1169feEvan Hunt3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
fad5116b3d68e825d29f87a1d3cb41409f42e8f5Scott Mann3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
fad5116b3d68e825d29f87a1d3cb41409f42e8f5Scott Mann3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
76a7d4e152dc80885312e4c2b6b8d94df9153f57Evan Hunt3214. [func] Add 'named -U' option to set the number of UDP
76a7d4e152dc80885312e4c2b6b8d94df9153f57Evan Hunt listener threads per interface. [RT #26485]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt list prior to adding a reference to it leading a
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt possible assertion failure. [RT #23219]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
2c35c682362049f823248542e07e7dca4008b986Mark Andrews option prints in single-line-per-record format.
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews3210. [bug] Canceling the oldest query due to recursive-client
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews overload could trigger an assertion failure. [RT #26463]
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
5e2704d0ae827dbb9296d7352219a11daa1170bcEvan Hunt3208. [bug] 'dig -y' handle unknown tsig algorithm better.
99cbc3d3a4dcbd203146f62e37478aee1c8ee673Evan Hunt3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
5a75f61dd413720c16d229b24ebba6bd6ecdb738Evan Hunt3206. [cleanup] Add ISC information to log at start time. [RT #25484]
3a63259484bf32c0c8b9646a8bfcbe3d25a17584Mark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
3a63259484bf32c0c8b9646a8bfcbe3d25a17584Mark Andrews nameserver behavior. Enable "dig +adflag" and
0f972644190291c832677fafd0826532770d11d8Mark Andrews "dig +edns=0" by default. Enable "+dnssec" when
0f972644190291c832677fafd0826532770d11d8Mark Andrews running "dig +trace". [RT #23497]
772dfb90be732103ef2793bca17ca57c5bb12fa7Mark Andrews3204. [bug] When a master server that has been marked as
772dfb90be732103ef2793bca17ca57c5bb12fa7Mark Andrews unreachable sends a NOTIFY, mark it reachable
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews again. [RT #25960]
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt3203. [bug] Increase log level to 'info' for validation failures
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt from expired or not-yet-valid RRSIGs. [RT #21796]
c1e655fe4c2192d1c4198153d32b2506a8b3d02dEvan Hunt3202. [bug] NOEDNS caching on timeout was too aggressive.
31f46f1869f4b6b8ecfe0d89177000fb867b8df1Mark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
31f46f1869f4b6b8ecfe0d89177000fb867b8df1Mark Andrews instead of only being used as a toggle. [RT #18351]
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt3200. [doc] Some rndc functions were undocumented or were
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt missing from 'rndc -h' output. [RT #25555]
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt3199. [func] When logging client information, include the name
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt being queried. [RT #25944]
cf63d32d55ffed0e7e1b9eacfecb3e751dc68674Evan Hunt3198. [doc] Clarified that dnssec-settime can alter keyfile
cf63d32d55ffed0e7e1b9eacfecb3e751dc68674Evan Hunt permissions. [RT #24866]
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews3197. [bug] Don't try to log the filename and line number when
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews the config parser can't open a file. [RT #22263]
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
96ade2bc52912bed2656a42c751edfabbcd650e6Mark Andrews doesn't exist. [RT #25783]
96ade2bc52912bed2656a42c751edfabbcd650e6Mark Andrews3195. [cleanup] Silence "file not found" warnings when loading
b47c020d5c635b662ac57e5485d266fd62c796c0Evan Hunt managed-keys zone. [RT #26340]
4b08de94999f7cbd990685f7ba1ed91ede81708eEvan Hunt3194. [doc] Updated RFC references in the 'empty-zones-enable'
4b08de94999f7cbd990685f7ba1ed91ede81708eEvan Hunt documentation. [RT #25203]
42cf2ff7bad81c5a1f5d3be29d06e12504c3af24Evan Hunt3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews3192. [bug] A query structure could be used after being freed.
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews3191. [bug] Print NULL records using "unknown" format. [RT #26392]
e7220c9b841bbd3d16736726f786a86fec3c0e18Evan Hunt3190. [bug] Underflow in error handling in isc_mutexblock_init.
e7220c9b841bbd3d16736726f786a86fec3c0e18Evan Hunt3189. [test] Added a summary report after system tests. [RT #25517]
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt3188. [bug] zone.c:zone_refreshkeys() could fail to detach
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt references correctly when errors occurred, causing
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt a hang on shutdown. [RT #26372]
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt3187. [port] win32: support for Visual Studio 2008. [RT #26356]
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt --- 9.9.0b1 released ---
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt3186. [bug] Version/db mis-match in rpz code. [RT #26180]
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt3185. [func] New 'rndc signing' option for auto-dnssec zones:
475b1ed9cced1f92ce34bc2e59b3065dae48f366Mark Andrews - 'rndc signing -list' displays the current
4939b6c7df2cb10171726a3f5ee23eda43aa042aPaul Ebersman state of signing operations
475b1ed9cced1f92ce34bc2e59b3065dae48f366Mark Andrews - 'rndc signing -clear' clears the signing state
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews records for keys that have fully signed the zone
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews - 'rndc signing -nsec3param' sets the NSEC3
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews parameters for the zone
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews The 'rndc keydone' syntax is removed. [RT #23729]
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt3184. [bug] named had excessive cpu usage when a redirect zone was
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt configured. [RT #26013]
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt3182. [bug] Auth servers behind firewalls which block packets
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt greater than 512 bytes may cause other servers to
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt perform poorly. Now, adb retains edns information
6b95b91c617a3e56aff611772744af32b5410e1fEvan Hunt and caches noedns servers. [RT #23392/24964]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3181. [func] Inline-signing is now supported for master zones.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3180. [func] Local copies of slave zones are now saved in raw
fbe2cff19f5cddc67b967764ad95038dfcafc85aEvan Hunt format by default, to improve startup performance.
e482a4a3408cabf6cab8b479001ce69ec4842cbaMark Andrews 'masterfile-format text;' can be used to override
ea8278253210df030a24f0c89342b43fe279a127Mark Andrews the default, if desired. [RT #25867]
ea8278253210df030a24f0c89342b43fe279a127Mark Andrews3179. [port] kfreebsd: build issues. [RT #26273]
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt3178. [bug] A race condition introduced by change #3163 could
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt cause an assertion failure on shutdown. [RT #26271]
47e70d820ed07895a25e5b3520adf953114ac01eEvan Hunt3177. [func] 'rndc keydone', remove the indicator record that
47e70d820ed07895a25e5b3520adf953114ac01eEvan Hunt named has finished signing the zone with the
47e70d820ed07895a25e5b3520adf953114ac01eEvan Hunt corresponding key. [RT #26206]
eee7f742eab409723902e229b840dcdbc9a512f5Evan Hunt3176. [doc] Corrected example code and added a README to the
eee7f742eab409723902e229b840dcdbc9a512f5Evan Hunt sample external DLZ module in contrib/dlz/example.
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt3175. [bug] Fix how DNSSEC positive wildcard responses from a
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt NSEC3 signed zone are validated. Stop sending a
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt unnecessary NSEC3 record when generating such
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt responses. [RT #26200]
c0984ac8bdb9ab8812374651bbabcfeb5873eb38Mark Andrews3174. [bug] Always compute to revoked key tag from scratch.
c0984ac8bdb9ab8812374651bbabcfeb5873eb38Mark Andrews3173. [port] Correctly validate root DS responses. [RT #25726]
2a4f4945657f4dd321d30a01aa5d74159c74dbcbEvan Hunt3172. [port] darwin 10.* and freebsd [89] are now built threaded by
7609e973f517387352a5e98b1b9c368bfb769b09Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
7609e973f517387352a5e98b1b9c368bfb769b09Mark Andrews 'rndc addzone'. [RT #25600]
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews --- 9.9.0a3 released ---
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews3170. [func] RPZ update:
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews - fix precedence among competing rules
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews - improve ARM text including documenting rule precedence
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews - try to rewrite CNAME chains until first hit
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews - new "rpz" logging channel
de7df3e56fe99c33a415674b018aae93eee94750Evan Hunt - RDATA for CNAME rules can include wildcards
be847331456855e4e2e8e71fde1efd68a04557caEvan Hunt - replace "NO-OP" named.conf policy override with
be847331456855e4e2e8e71fde1efd68a04557caEvan Hunt "PASSTHRU" and add "DISABLED" override ("NO-OP"
be847331456855e4e2e8e71fde1efd68a04557caEvan Hunt is still recognized)
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt3169. [func] Catch db/version mis-matches when calling dns_db_*().
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt3168. [bug] Nxdomain redirection could trigger an assert with
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt a ANY query. [RT #26017]
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt3167. [bug] Negative answers from forwarders were not being
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt correctly tagged making them appear to not be cached.
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt3166. [bug] Upgrading a zone to support inline-signing failed.
9eea4c5cbd864e0bc400dc665b35c3dbd00f9222Evan Hunt3165. [bug] dnssec-signzone could generate new signatures when
9eea4c5cbd864e0bc400dc665b35c3dbd00f9222Evan Hunt resigning, even when valid signatures were already
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews present. [RT #26025]
85a79fa7eb17767d9ae9030e0289ed3e95aab7c8Evan Hunt3164. [func] Enable DLZ modules to retrieve client information,
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews so that responses can be changed depending on the
85a79fa7eb17767d9ae9030e0289ed3e95aab7c8Evan Hunt source address of the query. [RT #25768]
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt3163. [bug] Use finer-grained locking in client.c to address
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt concurrency problems with large numbers of threads.
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt3162. [test] start.pl: modified to allow for "named.args" in
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt ns*/ subdirectory to override stock arguments to
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt named. Largely from RT #26044, but no separate ticket.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt assertion failures. [RT #25880]
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt3160. [bug] When printing out a NSEC3 record in multiline form
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt the newline was not being printed causing type codes
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt to be run together. [RT #25873]
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt3159. [bug] On some platforms, named could assert on startup
7a2173839c5ca103090431f36709fde99b599097Evan Hunt when running in a chrooted environment without
7a2173839c5ca103090431f36709fde99b599097Evan Hunt /proc. [RT #25863]
7a2173839c5ca103090431f36709fde99b599097Evan Hunt3158. [bug] Recursive servers would prefer a particular UDP
7a2173839c5ca103090431f36709fde99b599097Evan Hunt socket instead of using all available sockets.
c92122485d6868a88e6cc1469e06a9c8f306b575Evan Hunt3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
c92122485d6868a88e6cc1469e06a9c8f306b575Evan Hunt the config file before pausing the server. [RT #21373]
2b3bcbce23a5539a16c1d209f83a604c775859d5Mark Andrews3156. [placeholder]
9cf04a12ec5ea0ee64338feef76e885980a524dfMark Andrews --- 9.9.0a2 released ---
9cf04a12ec5ea0ee64338feef76e885980a524dfMark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
9f36aef24cac3890e24e57d1821f7ede5e34ff8eMark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
30f888cbd416f3bcc60b508c3957ef724af592d6Scott Mann3154. [bug] Attempting to print an empty rdataset could trigger
30f888cbd416f3bcc60b508c3957ef724af592d6Scott Mann an assert. [RT #25452]
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt3153. [func] Extend request-ixfr to zone level and remove the
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt side effect of forcing an AXFR. [RT #25156]
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt3152. [cleanup] Some versions of gcc and clang failed due to
e1234be3ad794d8580365e76b65ee657d094b254Paul Ebersman incorrect use of __builtin_expect. [RT #25183]
4fc55db699529ce60f7f1e12aae40e315831c67fScott Mann3151. [bug] Queries for type RRSIG or SIG could be handled
4fc55db699529ce60f7f1e12aae40e315831c67fScott Mann incorrectly. [RT #21050]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt3150. [func] Improved startup and reconfiguration time by
0a82492610e2424bb999946bd6e5a13c83f453b4Mark Andrews enabling zones to load in multiple threads. [RT #25333]
95759de490339a71e301ab6aa53b7a2c664f6d0fScott Mann3149. [placeholder]
95759de490339a71e301ab6aa53b7a2c664f6d0fScott Mann3148. [bug] Processing of normal queries could be stalled when
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Hunt forwarding a UPDATE message. [RT #24711]
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Hunt3147. [func] Initial inline signing support. [RT #23657]
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt --- 9.9.0a1 released ---
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt3145. [test] Capture output of ATF unit tests in "./atf.out" if
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt there were any errors while running them. [RT #25527]
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt3144. [bug] dns_dbiterator_seek() could trigger an assert when
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt used with a nonexistent database node. [RT #25358]
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt3143. [bug] Silence clang compiler warnings. [RT #25174]
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt3142. [bug] NAPTR is class agnostic. [RT #25429]
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt3141. [bug] Silence spurious "zone serial (0) unchanged" messages
5095e72ac3c0f1e16c246b56e8277614571bf132Mark Andrews associated with empty zones. [RT #25079]
5095e72ac3c0f1e16c246b56e8277614571bf132Mark Andrews3140. [func] New command "rndc flushtree <name>" clears the
653cad790b4dc6c1330f634150a8941b75ed761eMark Andrews specified name from the server cache along with
653cad790b4dc6c1330f634150a8941b75ed761eMark Andrews all names under it. [RT #19970]
cb240b0676186ba4668946c98730879f14a195faFrancis Dupont3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
cb240b0676186ba4668946c98730879f14a195faFrancis Dupont for the hashing algorithms (md5, sha1 - sha512, and
e41de66a124e6e564428360c2f76e5f1ae6c6f06Francis Dupont their hmac counterparts). [RT #25067]
e41de66a124e6e564428360c2f76e5f1ae6c6f06Francis Dupont3138. [bug] Address memory leaks and out-of-order operations when
cbf59e5887d69fca6fe86a1ee5fcc82dded14babMark Andrews shutting named down. [RT #25210]
cbf59e5887d69fca6fe86a1ee5fcc82dded14babMark Andrews3137. [func] Improve hardware scalability by allowing multiple
9e102ef9697f0b0d0607fe24bc3ac00286936dd4Francis Dupont worker threads to process incoming UDP packets.
9e102ef9697f0b0d0607fe24bc3ac00286936dd4Francis Dupont This can significantly increase query throughput
9e102ef9697f0b0d0607fe24bc3ac00286936dd4Francis Dupont on some systems. [RT #22992]
ed53ec0b06825bcc6ba54e10e0174e2de93e595dMark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
ed53ec0b06825bcc6ba54e10e0174e2de93e595dMark Andrews empty zones switched on by the 'empty-zones-enable'
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt option. [RT #24990]
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews3134. [bug] Improve the accuracy of dnssec-signzone's signing
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews statistics. [RT #16030]
26b49e84597ab3ebaa9ae1eb0fe01befa46a8107Mark Andrews3133. [bug] Change #3114 was incomplete. [RT #24577]
26b49e84597ab3ebaa9ae1eb0fe01befa46a8107Mark Andrews3132. [placeholder]
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews3131. [tuning] Improve scalability by allocating one zone task
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews per 100 zones at startup time, rather than using a
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews fixed-size task table. [RT #24406]
cf4ceeee5fee2ebdca74f82514c14fd50939f85bMark Andrews3130. [func] Support alternate methods for managing a dynamic
cf4ceeee5fee2ebdca74f82514c14fd50939f85bMark Andrews zone's serial number. Two methods are currently
03ccae042b4acd22805d667f823066d3690965cfMark Andrews defined using serial-update-method, "increment"
4f587beb8eb70f198346333bce5b89df3ac5c88eMark Andrews (default) and "unixtime". [RT #23849]
649452635065426fcc08b99b351db904939a6580Mark Andrews3129. [bug] Named could crash on 'rndc reconfig' when
649452635065426fcc08b99b351db904939a6580Mark Andrews allow-new-zones was set to yes and named ACLs
649452635065426fcc08b99b351db904939a6580Mark Andrews were used. [RT #22739]
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews3128. [func] Inserting an NSEC3PARAM via dynamic update in an
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews auto-dnssec zone that has not been signed yet
19f4b069dcade77da4ce9b6de2fa6d22062bef4fMark Andrews will cause it to be signed with the specified NSEC3
19f4b069dcade77da4ce9b6de2fa6d22062bef4fMark Andrews parameters when keys are activated. The
19f4b069dcade77da4ce9b6de2fa6d22062bef4fMark Andrews NSEC3PARAM record will not appear in the zone until
2d96b63d311a5252c8583eb30a56b1fc58172419Mark Andrews it is signed, but the parameters will be stored.
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt3127. [bug] 'rndc thaw' will now remove a zone's journal file
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt if the zone serial number has been changed and
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt ixfr-from-differences is not in use. [RT #24687]
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt3126. [security] Using DNAME record to generate replacements caused
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews RPZ to exit with a assertion failure. [RT #24766]
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews3125. [security] Using wildcard CNAME records as a replacement with
fea04b0ffeaa83716937f1728ff6742722cec91aMark Andrews RPZ caused named to exit with a assertion failure.
f02b5d87a561ba669bd368a8a6422f364f7702ecEvan Hunt3124. [bug] Use an rdataset attribute flag to indicate
f02b5d87a561ba669bd368a8a6422f364f7702ecEvan Hunt negative-cache records rather than using rrtype 0;
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt this will prevent problems when that rrtype is
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt used in actual DNS packets. [RT #24777]
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt3123. [security] Change #2912 exposed a latent flaw in
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt dns_rdataset_totext() that could cause named to
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt crash with an assertion failure. [RT #24777]
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt3121. [security] An authoritative name server sending a negative
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt response containing a very large RRset could
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt trigger an off-by-one error in the ncache code
eff7f78bc65f30efd87a398e66084ddab72799d3Mark Andrews and crash named. [RT #24650]
eff7f78bc65f30efd87a398e66084ddab72799d3Mark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt that validated insecure without using DLV and had
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt DS records in the parent zone. [RT #24631]
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt3119. [bug] When rolling to a new DNSSEC key, a private-type
c2f051aaaab60dbac4bc754f09d594846d99fb89Evan Hunt record could be created and never marked complete.
32babe43eb479d2ae8736f9985a84d1b9d95a33aScott Mann3118. [bug] nsupdate could dump core on shutdown when using
d57f1ade2da01c70d1043b1f912dbef5ee6817edMark Andrews SIG(0) keys. [RT #24604]
f385bac3b918aac3e33d2a8219e1b78f1c7f276eEvan Hunt3117. [cleanup] Remove doc and parser references to the
f385bac3b918aac3e33d2a8219e1b78f1c7f276eEvan Hunt never-implemented 'auto-dnssec create' option.
11c282d8a4c87618538cfc89c9004666dc841036Francis Dupont3116. [func] New 'dnssec-update-mode' option controls updates
020a733707d308258768c9d677b5839edb647ec8Evan Hunt of DNSSEC records in signed dynamic zones. Set to
020a733707d308258768c9d677b5839edb647ec8Evan Hunt 'no-resign' to disable automatic RRSIG regeneration
d54394cbefb7b0ed7bdf9aafaec4ece06578c26bFrancis Dupont while retaining the ability to sign new or changed
d54394cbefb7b0ed7bdf9aafaec4ece06578c26bFrancis Dupont data. [RT #24533]
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt3115. [bug] Named could fail to return requested data when
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt following a CNAME that points into the same zone.
624664e50406f63108ddc7bad47dbac87ac74261Francis Dupont3114. [bug] Retain expired RRSIGs in dynamic zones if key is
624664e50406f63108ddc7bad47dbac87ac74261Francis Dupont inactive and there is no replacement key. [RT #23136]
c1ced49662181d2fb2343ed7bde71d170f0d1119Mark Andrews3113. [doc] Document the relationship between serial-query-rate
c1ced49662181d2fb2343ed7bde71d170f0d1119Mark Andrews and NOTIFY messages.
ba88bcf08b965f65c07735efa2f675b8cbeb735aMark Andrews3112. [doc] Add missing descriptions of the update policy name
ba88bcf08b965f65c07735efa2f675b8cbeb735aMark Andrews types "ms-self", "ms-subdomain", "krb5-self" and
ba88bcf08b965f65c07735efa2f675b8cbeb735aMark Andrews "krb5-subdomain", which allow machines to update
21d349b612e253bea438f3340b2f293b032ed848Mark Andrews their own records, to the BIND 9 ARM.
88c63fe9c78e60e5e521d095d6e983c211902904Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
03ccae042b4acd22805d667f823066d3690965cfMark Andrews dnssec-validation, added test cases to the
4c05f9a6a3d0fe27d5fad1599b10500e21c705feMark Andrews checkconf system test. [RT #24398]
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann3110. [bug] dnssec-signzone: Wrong error message could appear
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann when attempting to sign with no KSK. [RT #24369]
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont3109. [func] The also-notify option now uses the same syntax
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont as a zone's masters clause. This means it is
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont now possible to specify a TSIG key to use when
be789bc7eb6f683979cd1405a06284ee00cda366Mark Andrews sending notifies to a given server, or to include
17bc56e321574b43c5837d1741e9157c8f2fcd91Francis Dupont an explicit named masters list in an also-notify
d3e3d7846dd5895960dcdcb1012b4be23388f81cMark Andrews statement. [RT #23508]
d3e3d7846dd5895960dcdcb1012b4be23388f81cMark Andrews3108. [cleanup] dnssec-signzone: Clarified some error and
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt code (use -P instead). [RT #20852]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews3107. [bug] dnssec-signzone: Report the correct number of ZSKs
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews when using -x. [RT #20852]
7cc5632595476c20f1c0683eff35baa370dd65bbEvan Hunt3106. [func] When logging client requests, include the name of
7cc5632595476c20f1c0683eff35baa370dd65bbEvan Hunt the TSIG key if any. [RT #23619]
7cc5632595476c20f1c0683eff35baa370dd65bbEvan Hunt3105. [bug] GOST support can be suppressed by "configure
2f09e7c3fc25c0e5028593a24531d636845c3e42Mark Andrews --without-gost" [RT #24367]
2f09e7c3fc25c0e5028593a24531d636845c3e42Mark Andrews3104. [bug] Better support for cross-compiling. [RT #24367]
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews3103. [bug] Configuring 'dnssec-validation auto' in a view
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews instead of in the options statement could trigger
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews an assertion failure in named-checkconf. [RT #24382]
0e507dbb816575e6220fe309e8ada68897ffcdbeMark Andrews3102. [func] New 'dnssec-loadkeys-interval' option configures
ddd40390be246189f10dc18782914b295befb139Mark Andrews how often, in minutes, to check the key repository
fd5d7b4b1cf3b11ff248a361e5b2c56ca7372225Mark Andrews for updates when using automatic key maintenance.
ddd40390be246189f10dc18782914b295befb139Mark Andrews Default is every 60 minutes (formerly hard-coded
5715e1c6f6b549e95b312f1529efd849f7c9503fMark Andrews to 12 hours). [RT #23744]
ddd40390be246189f10dc18782914b295befb139Mark Andrews3101. [bug] Zones using automatic key maintenance could fail
b795de862ba8e75f3b9c56abb9553c28255c8567Mark Andrews to check the key repository for updates. [RT #23744]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews3100. [security] Certain response policy zone configurations could
c12904ec531fb210066bafc33bde74d43889caacMark Andrews trigger an INSIST when receiving a query of type
0a92db42c6be6a158cd41ff863831a8d2d257935Mark Andrews RRSIG. [RT #24280]
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews3099. [test] "dlz" system test now runs but gives R:SKIPPED if
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews not compiled with --with-dlz-filesystem. [RT #24146]
699e00089fb1a6eb31d7bd1c96bf973608953159Mark Andrews3098. [bug] DLZ zones were answering without setting the AA bit.
6883a918f790147fd98e21b2c3d3d479320f3ed5Mark Andrews3097. [test] Add a tool to test handling of malformed packets.
e01f55daa4b611190a11a40299007e5e55018854Mark Andrews3096. [bug] Set KRB5_KTNAME before calling log_cred() in
e01f55daa4b611190a11a40299007e5e55018854Mark Andrews dst_gssapi_acceptctx(). [RT #24004]
4c577cbd1efc14156751e5b2ced7a866871a2f1aMark Andrews3095. [bug] Handle isolated reserved ports in the port range.
2ba2a6e4be2eae3a1db1a657ceee15aa62799c7fMark Andrews3094. [doc] Expand dns64 documentation.
30aaec21221ca5d8715d1ff1ce92fbdf98bb6652Mark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
30aaec21221ca5d8715d1ff1ce92fbdf98bb6652Mark Andrews3092. [bug] Signatures for records at the zone apex could go
30aaec21221ca5d8715d1ff1ce92fbdf98bb6652Mark Andrews stale due to an incorrect timer setting. [RT #23769]
17a0bbda335ffc9af34be1000f500c622008458cMark Andrews3091. [bug] Fixed a bug in which zone keys that were published
17a0bbda335ffc9af34be1000f500c622008458cMark Andrews and then subsequently activated could fail to trigger
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews automatic signing. [RT #22911]
b32e391602b3655c90c2ded10376dbfa4ec8a074Evan Hunt3090. [func] Make --with-gssapi default [RT #23738]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
e3fbbde8fc2e7d6e50583926d34e25a7b638e5adMichael Graff standard input "dnssec-dsfromkey -f -". [RT #20662]
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt and add setup.sh in order to resolve changing
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt named.conf issue. [RT #23687]
aae88005f26209d969328703a09170e8af3faff3Mark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews type "external" could cause a crash. [RT #23735]
29bd52e4ee3fa047474d5d5b405d1e09c800a6f4Evan Hunt3086. [bug] Running dnssec-settime -f on an old-style key will
29bd52e4ee3fa047474d5d5b405d1e09c800a6f4Evan Hunt now force an update to the new key format even if no
b1b42b03b774d77ddfd38e5e0a5c0a3ed1944b89Mark Andrews other change has been specified, using "-P now -A now"
b1b42b03b774d77ddfd38e5e0a5c0a3ed1944b89Mark Andrews as default values. [RT #22474]
2870e5fb54c4a7e3980307b191c7e6ae649119bcEvan Hunt3085. [func] New '-R' option in dnssec-signzone forces removal
c5fa3706950224af3f5ae6d22944b1b8298d4eddMark Andrews of signatures which have not yet expired but
c5fa3706950224af3f5ae6d22944b1b8298d4eddMark Andrews were generated by a key that no longer exists.
4d205bf79b4abacfef41c9f01ee63938deba2f31Mark Andrews3084. [func] A new command "rndc sync" dumps pending changes in
5cfe4bcb0afd71f6bc1cc2dab37a9ad6181c13f9Mark Andrews a dynamic zone to disk; "rndc sync -clean" also
5cfe4bcb0afd71f6bc1cc2dab37a9ad6181c13f9Mark Andrews removes the journal file after syncing. Also,
5cfe4bcb0afd71f6bc1cc2dab37a9ad6181c13f9Mark Andrews "rndc freeze" no longer removes journal files.
a8e5a5918355d883f24e4f137c13cd53841679a9Mark Andrews3083. [bug] NOTIFY messages were not being sent when generating
a8e5a5918355d883f24e4f137c13cd53841679a9Mark Andrews a NSEC3 chain incrementally. [RT #23702]
69496e55a787f8d800c826d2405d8f38e4c52b86Mark Andrews3082. [port] strtok_r is threads only. [RT #23747]
c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews3081. [bug] Failure of DNAME substitution did not return
c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews YXDOMAIN. [RT #23591]
16cc4a1f56d0f9a300419da7e75e3b72169e608aMark Andrews3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
16cc4a1f56d0f9a300419da7e75e3b72169e608aMark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
000a8970f840a0c27c5cc404826853c4674362acMark Andrews3078. [func] Added a new include file with function typedefs
000a8970f840a0c27c5cc404826853c4674362acMark Andrews for the DLZ "dlopen" driver. [RT #23629]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews3077. [bug] zone.c:zone_refreshkeys() incorrectly called
903b3c84e2428160b2921364335363bb33452dabEvan Hunt dns_zone_attach(), use zone->irefs instead. [RT #23303]
903b3c84e2428160b2921364335363bb33452dabEvan Hunt3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
1fba20bd0b3501f4c7e751e239e0992bf92443bfMark Andrews dnssec-keyfromlabel sets the default TTL of the
1fba20bd0b3501f4c7e751e239e0992bf92443bfMark Andrews key. When possible, automatic signing will use that
e02c1d738bd326beceabbe4a04692ea0282225edMark Andrews TTL when the key is published. [RT #23304]
e02c1d738bd326beceabbe4a04692ea0282225edMark Andrews3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
87708bde16713bc02ff2598f4a82f98c699a2f2dMark Andrews timestamp when determining which keys are active.
a04b5f679428cefefedebe93718c0401e36f947dMark Andrews3074. [bug] Make the adb cache read through for zone data and
38b84a1fcfdbda4d1d0fdca409004ae83be2ace8Mark Andrews glue learn for zone named is authoritative for.
433e06a25cdd92d665abda3e64c2c65f4a3f9b21Mark Andrews3073. [bug] managed-keys changes were not properly being recorded.
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt3071. [bug] has_nsec could be used uninitialized in
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt update.c:next_active. [RT #20256]
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
a04b5f679428cefefedebe93718c0401e36f947dMark Andrews3069. [cleanup] Silence warnings messages from clang static analysis.
3916872f379457fe344afb02398a009701c5016aEvan Hunt3068. [bug] Named failed to build with a OpenSSL without engine
161429fc059b0eeb84fb506bca4f9f5857a9c091Mark Andrews support. [RT #23473]
161429fc059b0eeb84fb506bca4f9f5857a9c091Mark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt select the master/slave zones. [RT #23580]
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt3066. [func] The DLZ "dlopen" driver is now built by default,
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt no longer requiring a configure option. To
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt disable it, use "configure --without-dlopen".
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt Driver also supported on win32. [RT #23467]
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt3065. [bug] RRSIG could have time stamps too far in the future.
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt3064. [bug] powerpc: add sync instructions to the end of atomic
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt operations. [RT #23469]
37dee1ff94960a61243f611c0f87f8c316815c53Mark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews3062. [func] Made several changes to enhance human readability
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews of DNSSEC data in dig output and in generated
643935ac110cdd977759ac9b85a5795646ccc6cfMark Andrews - DNSKEY record comments are more verbose, no
643935ac110cdd977759ac9b85a5795646ccc6cfMark Andrews longer used in multiline mode only
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews - multiline RRSIG records reformatted
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews - multiline output mode for NSEC3PARAM records
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews - "dig +norrcomments" suppresses DNSKEY comments
179e028b35ff89a9d493398285c40dc89b08963bMark Andrews - "dig +split=X" breaks hex/base64 records into
179e028b35ff89a9d493398285c40dc89b08963bMark Andrews fields of width X; "dig +nosplit" disables this.
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews3061. [func] New option "dnssec-signzone -D", only write out
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews generated DNSSEC records. [RT #22896]
82f77687abd21349fa7c7f51e71fdc0c7367d2e2Mark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
82f77687abd21349fa7c7f51e71fdc0c7367d2e2Mark Andrews specification of a separate expiration date
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews3059. [test] Added a regression test for change #3023.
1f512cd06b4aefb86e767197751879840ba3f56bMark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
1f512cd06b4aefb86e767197751879840ba3f56bMark Andrews reload to fail, if a log file specified in the conf
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt file isn't a plain file. [RT #22771]
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt3057. [bug] "rndc secroots" would abort after the first error
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt and so could miss some views. [RT #23488]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt3056. [func] Added support for URI resource record. [RT #23386]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt3055. [placeholder]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt3054. [bug] Added elliptic curve support check in
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt GOST OpenSSL engine detection. [RT #23485]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt3053. [bug] Under a sustained high query load with a finite
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt max-cache-size, it was possible for cache memory
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt to be exhausted and not recovered. [RT #23371]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt3052. [test] Fixed last autosign test report. [RT #23256]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt3051. [bug] NS records obscure DNAME records at the bottom of the
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt zone if both are present. [RT #23035]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt3050. [bug] The autosign system test was timing dependent.
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt Wait for the initial autosigning to complete
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt before running the rest of the test. [RT #23035]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt3049. [bug] Save and restore the gid when creating creating
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews named.pid at startup. [RT #23290]
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews3048. [bug] Fully separate view key management. [RT #23419]
bbedadf76ab670b01887fb9b41097120ea4fdf14Evan Hunt3047. [bug] DNSKEY NODATA responses not cached fixed in
bbedadf76ab670b01887fb9b41097120ea4fdf14Evan Hunt validator.c. Tests added to dnssec system test.
8d8f0b465959b799cb0d29ed694dc50ea7a73202Mark Andrews3046. [bug] Use RRSIG original TTL to compute validated RRset
7659fdb3aab0a96e10aac67669b6c8d79faef44fjohnd and RRSIG TTL. [RT #23332]
858c4a86c12fdaf90d8d24a6535c7e0f89d0a962johnd3045. [removed] Replaced by change #3050.
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews version 0.12) for development of future unit tests.
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews Use configure --with-atf to build ATF internally
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews or configure --with-atf=prefix to use an external
e334405421979688f2d838805ac67ee47bd62976Mark Andrews copy. [RT #23209]
8aee18709f238406719768b8a6b843a15c5075f8Mark Andrews3042. [bug] dig +trace could fail attempting to use IPv6
8aee18709f238406719768b8a6b843a15c5075f8Mark Andrews addresses on systems with only IPv4 connectivity.
e78c2b856b9bfbf713fe805224f345f8e8f84e4aEvan Hunt3041. [bug] dnssec-signzone failed to generate new signatures on
e78c2b856b9bfbf713fe805224f345f8e8f84e4aEvan Hunt ttl changes. [RT #23330]
c0a76b3c0b42a110e14eb56103973944900400c4Mark Andrews3040. [bug] Named failed to validate insecure zones where a node
c0a76b3c0b42a110e14eb56103973944900400c4Mark Andrews with a CNAME existed between the trust anchor and the
82f0630bae09598209cc37c1db00ff4356efee27Mark Andrews top of the zone. [RT #23338]
82f0630bae09598209cc37c1db00ff4356efee27Mark Andrews3039. [func] Redirect on NXDOMAIN support. [RT #23146]
b44b120c66d9c36f1648f18d169bb4daf4b921afMark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
020120e3c72d67a86ce3fd2542b43b269a1e9233Mark Andrews3037. [doc] Update COPYRIGHT to contain all the individual
97664670d0e45ec865da407112fceb892133eaf3Mark Andrews copyright notices that cover various parts.
97664670d0e45ec865da407112fceb892133eaf3Mark Andrews3036. [bug] Check built-in zone arguments to see if the zone
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews is re-usable or not. [RT #21914]
b5b934a0bb46aded1552a17473652b5a7f4a3274Evan Hunt3035. [cleanup] Simplify by using strlcpy. [RT #22521]
b5b934a0bb46aded1552a17473652b5a7f4a3274Evan Hunt3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
5af195d1dbe4c266a47264111a9293069041209dMark Andrews3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
5af195d1dbe4c266a47264111a9293069041209dMark Andrews3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
5a636f9951e0a6968498d588a57cb01161d2a109Mark Andrews3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
8eb30f8dd3c1170406f4f2307964e4c0994494beEvan Hunt3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews3029. [bug] isc_netaddr_format() handle a zero sized buffer.
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier catch NULL pointer dereferences before they happen.
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews after calling grow_headerspace() and if not
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier re-call grow_headerspace() until we do. [RT #22521]
a27b3757fdd8976ce05e37f391ad9e7ac4638e5dMark Andrews3025. [bug] Fixed a possible deadlock due to zone resigning.
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews3024. [func] RTT Banding removed due to minor security increase
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews but major impact on resolver latency. [RT #23310]
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews3023. [bug] Named could be left in an inconsistent state when
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews receiving multiple AXFR response messages that were
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews not all TSIG-signed. [RT #23254]
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews3021. [bug] Change #3010 was incomplete. [RT #22296]
2015023399657c36e9dcc8b5dc35ce20dfc876f0Mark Andrews3020. [bug] auto-dnssec failed to correctly update the zone when
2015023399657c36e9dcc8b5dc35ce20dfc876f0Mark Andrews changing the DNSKEY RRset. [RT #23232]
b2c8cc4f2d61f0593300a5851e26e7ddb30b7e10Mark Andrews3019. [test] Test: check apex NSEC3 records after adding DNSKEY
ed83fa75f5657ab2394a701f7ccc169dd9ef48fcMark Andrews record via UPDATE. [RT #23229]
ed83fa75f5657ab2394a701f7ccc169dd9ef48fcMark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews if a zone may need to be re-signed. [RT #23120]
c470afc7ac0040f1bf7553ce8183b7a1d1726211Mark Andrews3017. [doc] dnssec-keyfromlabel -I was not properly documented.
506a2177bfafa4321cf1ba27ff4a1d09bac69e14Mark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
082f42dcf2f38509a8c842013548f680a6ad06f3Mark Andrews3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
082f42dcf2f38509a8c842013548f680a6ad06f3Mark Andrews IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews3014. [placeholder]
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews3013. [bug] The DNS64 ttl was not always being set as expected.
70ba55161bbecab6b58ad4d2203741e9b57951bcMark Andrews3012. [bug] Remove DNSKEY TTL change pairs before generating
70ba55161bbecab6b58ad4d2203741e9b57951bcMark Andrews signing records for any remaining DNSKEY changes.
ad9107efaaae2407cf11bf0c55407d8daed2e2d4Mark Andrews3011. [func] Change the default query timeout from 30 seconds
ad9107efaaae2407cf11bf0c55407d8daed2e2d4Mark Andrews to 10. Allow setting this in named.conf using the new
3f9f14055b85c2dda341b341de0e65d4639542c5Mark Andrews 'resolver-query-timeout' option, which specifies a max
3f9f14055b85c2dda341b341de0e65d4639542c5Mark Andrews time in seconds. 0 means 'default' and anything longer
75f48cecb3289c6d23a45127da65f18937160341Mark Andrews than 30 will be silently set to 30. [RT #22852]
75f48cecb3289c6d23a45127da65f18937160341Mark Andrews3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews for refreshing managed-keys. [RT #22296]
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews3009. [bug] clients-per-query code didn't work as expected with
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews particular query patterns. [RT #22972]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews --- 9.8.0b1 released ---
240a7dc59d6bc135ed298436b59dc86c84928ca2Mark Andrews3008. [func] Response policy zones (RPZ) support. [RT #21726]
240a7dc59d6bc135ed298436b59dc86c84928ca2Mark Andrews3007. [bug] Named failed to preserve the case of domain names in
240a7dc59d6bc135ed298436b59dc86c84928ca2Mark Andrews rdata which is not compressible when writing master
e588bfe68951d3a88f56640fdc7e43d8623642f4Mark Andrews files. [RT #22863]
e588bfe68951d3a88f56640fdc7e43d8623642f4Mark Andrews3006. [func] Allow dynamically generated TSIG keys to be preserved
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews across restarts of named. Initially this is for
02a211f4c4d86f283f9c94bc7e5ab07b547e49f4Mark Andrews TSIG keys generated using GSSAPI. [RT #22639]
02a211f4c4d86f283f9c94bc7e5ab07b547e49f4Mark Andrews3005. [port] Solaris: Work around the lack of
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews gsskrb5_register_acceptor_identity() by setting
17be07ab818846dffb79e898da888a29c919bb02Mark Andrews the KRB5_KTNAME environment variable to the
17be07ab818846dffb79e898da888a29c919bb02Mark Andrews contents of tkey-gssapi-keytab. Also fixed
17be07ab818846dffb79e898da888a29c919bb02Mark Andrews test errors on MacOSX. [RT #22853]
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews3004. [func] DNS64 reverse support. [RT #22769]
20599f3d0e20fe6e253f59f043f3bef5d6635de6Mark Andrews3003. [experimental] Added update-policy match type "external",
20599f3d0e20fe6e253f59f043f3bef5d6635de6Mark Andrews enabling named to defer the decision of whether to
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews allow a dynamic update to an external daemon.
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews (Contributed by Andrew Tridgell.) [RT #22758]
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews3001. [func] Added a default trust anchor for the root zone, which
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews can be switched on by setting "dnssec-validation auto;"
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews in the named.conf options. [RT #21727]
f94ec08c17d60ee519a4f46b6dbb3519989e5b9cMark Andrews3000. [bug] More TKEY/GSS fixes:
f94ec08c17d60ee519a4f46b6dbb3519989e5b9cMark Andrews - nsupdate can now get the default realm from
f94ec08c17d60ee519a4f46b6dbb3519989e5b9cMark Andrews the user's Kerberos principal
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews - corrected gsstest compilation flags
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews - improved documentation
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews - fixed some NULL dereferences
03952196946fc638af7f20a9b59cfd2f15de01acFrancis Dupont2999. [func] Add GOST support (RFC 5933). [RT #20639]
7c681d075027f3389c31d261e1a71473c42ac73bMark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt to the task api. [RT #22776]
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews2997. [func] named -V now reports the OpenSSL and libxml2 verions
03ccae042b4acd22805d667f823066d3690965cfMark Andrews it was compiled against. [RT #22687]
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews2996. [security] Temporarily disable SO_ACCEPTFILTER support.
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2995. [bug] The Kerberos realm was not being correctly extracted
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 from the signer's identity. [RT #22770]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 do not use threads on earlier versions. Also kill
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 the unproven-pthreads, mit-pthreads, and ptl2 support.
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2993. [func] Dynamically grow adb hash tables. [RT #21186]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 for looking at a secure delegation. [RT #22059]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 dynamic zones. [RT #22365]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2990. [bug] 'dnssec-settime -S' no longer tests prepublication
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 interval validity when the interval is set to 0.
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt2989. [func] Added support for writable DLZ zones. (Contributed
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt by Andrew Tridgell of the Samba project.) [RT #22629]
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt of external DLZ drivers that can be loaded as
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt shared objects at runtime rather than linked with
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt named. Currently this is switched on via a
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt compile-time option, "configure --with-dlz-dlopen".
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt Note: the syntax for configuring DLZ zones
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt is likely to be refined in future releases.
4b6cb8d09e75ce9f04b2e40bd9d2e449c09b0c1fMark Andrews (Contributed by Andrew Tridgell of the Samba
4b6cb8d09e75ce9f04b2e40bd9d2e449c09b0c1fMark Andrews project.) [RT #22629]
712b976a0633806b7140b17354a9398300f616b9Mark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
712b976a0633806b7140b17354a9398300f616b9Mark Andrews adding a "tkey-gssapi-keytab" option. If set,
712b976a0633806b7140b17354a9398300f616b9Mark Andrews updates will be allowed with any key matching
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews a principal in the specified keytab file.
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews "tkey-gssapi-credential" is no longer required
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews and is expected to be deprecated. (Contributed
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews by Andrew Tridgell of the Samba project.)
cb933b69ff357100768d0b33b88e4ee986b128f2Evan Hunt2986. [func] Add new zone type "static-stub". It's like a stub
cb933b69ff357100768d0b33b88e4ee986b128f2Evan Hunt zone, but the nameserver names and/or their IP
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉 addresses are statically configured. [RT #21474]
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉2985. [bug] Add a regression test for change #2896. [RT #21324]
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉2984. [bug] Don't run MX checks when the target of the MX record
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉 is ".". [RT #22645]
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt --- 9.8.0a1 released ---
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt2982. [bug] Reference count dst keys. dst_key_attach() can be used
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt increment the reference count.
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt Note: dns_tsigkey_createfromkey() callers should now
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt always call dst_key_free() rather than setting it
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt to NULL on success. [RT #22672]
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2980. [bug] named didn't properly handle UPDATES that changed the
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt TTL of the NSEC3PARAM RRset. [RT #22363]
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt2979. [bug] named could deadlock during shutdown if two
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt "rndc stop" commands were issued at the same
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt time. [RT #22108]
ff5864ef42c3bc55e9be20434d1f7de2f6794894Mark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
f3792d4bda1273fe82f9d0a13f141923e41d4537Tatuya JINMEI 神明達哉2977. [bug] 'nsupdate -l' report if the session key is missing.
ddd40390be246189f10dc18782914b295befb139Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
810656a187f2c358323bbf679f792f19a46a7973Mark Andrews key. [RT #22573]
810656a187f2c358323bbf679f792f19a46a7973Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
bf13e709db49bb19e0c2e73f0a964fe9d7bea4dfMark Andrews wrong lock which could lead to server deadlock.
bf13e709db49bb19e0c2e73f0a964fe9d7bea4dfMark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
bdc1d1b1bfad04bbae3fdf974e49e392951fb911Mark Andrews consistency check examining the existing version
43888c231579e5b021beeadd7265cda302ea1efeMark Andrews of the zone rather than the new version resulting
43888c231579e5b021beeadd7265cda302ea1efeMark Andrews from the UPDATE. [RT #22413]
c52235e52ee12e4d15f808ac06608584257f6479Mark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
4a8dc5f8efcc8bc3033a9383f958d1de22c844f4Mark Andrews at the end of configure resulting in build failures
0627874ff86b2d5c9d6d90ea9fde8111dc97654bMark Andrews where there is very old version of perl installed.
4a8dc5f8efcc8bc3033a9383f958d1de22c844f4Mark Andrews Move it to "make maintainer-clean". [RT #22230]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
718c4becc5711be71e23202a87f3aaea1aedde79Mark Andrews2971. [bug] Fixed a bug that caused journal files not to be
718c4becc5711be71e23202a87f3aaea1aedde79Mark Andrews compacted on Windows systems as a result of
718c4becc5711be71e23202a87f3aaea1aedde79Mark Andrews non-POSIX-compliant rename() semantics. [RT #22434]
081b36ff9588e4d67a1a3095f5333a2b223482f7Mark Andrews2970. [security] Adding a NO DATA negative cache entry failed to clear
43c770b9987375e9e0efa19617b22e8e6a748a63Mark Andrews any matching RRSIG records. A subsequent lookup of
43c770b9987375e9e0efa19617b22e8e6a748a63Mark Andrews of NO DATA cache entry could trigger a INSIST when the
9a56f03c4c63c3729ebfcff9f99b9394c6004a20Mark Andrews unexpected RRSIG was also returned with the NO DATA
9a56f03c4c63c3729ebfcff9f99b9394c6004a20Mark Andrews cache entry.
02181a6c7420e8f3c083d0d20e0e65a78ea25d0fMark Andrews CVE-2010-3613, VU#706148. [RT #22288]
02181a6c7420e8f3c083d0d20e0e65a78ea25d0fMark Andrews2969. [security] Fix acl type processing so that allow-query works
e24ccb512c110d181e01f977196e518b0e72e451Mark Andrews in options and view statements. Also add a new
e24ccb512c110d181e01f977196e518b0e72e451Mark Andrews set of tests to verify proper functioning.
63af1a646a006867dbd99dc0aa74559d832a420fMark Andrews CVE-2010-3615, VU#510208. [RT #22418]
b7bc86a4d3d78fae33577682cea7d1449abb7b33Mark Andrews2968. [security] Named could fail to prove a data set was insecure
b7bc86a4d3d78fae33577682cea7d1449abb7b33Mark Andrews before marking it as insecure. One set of conditions
b7bc86a4d3d78fae33577682cea7d1449abb7b33Mark Andrews that can trigger this occurs naturally when rolling
675cc80975eb7d15e0d9f1d5f424baafaf189fdeMark Andrews DNSKEY algorithms.
675cc80975eb7d15e0d9f1d5f424baafaf189fdeMark Andrews CVE-2010-3614, VU#837744. [RT #22309]
a20996ab6ff2be473b85470fddd2380a3e180e7bMark Andrews2967. [bug] 'host -D' now turns on debugging messages earlier.
a27bbd21cf07371fc71e7ade75c3d78a5b98b7f9Mark Andrews2966. [bug] isc_print_vsnprintf() failed to check if there was
29f0da7fb84ea8010175769baecd12ab20903bb4Mark Andrews space available in the buffer when adding a left
29f0da7fb84ea8010175769baecd12ab20903bb4Mark Andrews justified character with a non zero width,
29f0da7fb84ea8010175769baecd12ab20903bb4Mark Andrews (e.g. "%-1c"). [RT #22270]
b00de53de2e37154d9046d481734cfb9a8573204Mark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
b00de53de2e37154d9046d481734cfb9a8573204Mark Andrews RFC 4634. [RT #21702]
ead77b9ad4821433ad45ef1de2c072b7c8f94f48Mark Andrews2964. [placeholder]
8e22c73f3ea64337926151b53245f61342fa52faMark Andrews2963. [security] The allow-query acl was being applied instead of the
8e22c73f3ea64337926151b53245f61342fa52faMark Andrews allow-query-cache acl to cache lookups. [RT #22114]
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews2961. [bug] Be still more selective about the non-authoritative
7d9be933d7f4504cd0355ced1fb7fbd137e455b7Mark Andrews answers we apply change 2748 to. [RT #22074]
7d9be933d7f4504cd0355ced1fb7fbd137e455b7Mark Andrews2960. [func] Check that named accepts non-authoritative answers.
5b02fc32d693bb811199308a40143df0adf818c1Mark Andrews2959. [func] Check that named starts with a missing masterfile.
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews2958. [bug] named failed to start with a missing master file.
d8624c1f19777853aa96cb797759743c82480f70Mark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
d8624c1f19777853aa96cb797759743c82480f70Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews respectively. [RT #21962]
98744b51112090a3fb7abcf858cb0657c13609ccMark Andrews2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
8d31dd9ab62d91b5f23ac687657c966d44074a3fMark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
6d5840017831db1eee3be47236ff5044449a0256Mark Andrews2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
6d5840017831db1eee3be47236ff5044449a0256Mark Andrews build_sqldbinstance failure. [RT #21623]
3ec79bbc03fc5378a6cb37b276807cd40b5332aaMark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
3ec79bbc03fc5378a6cb37b276807cd40b5332aaMark Andrews exact match" message when returning a wildcard
3ec79bbc03fc5378a6cb37b276807cd40b5332aaMark Andrews no data response. [RT #21744]
dc64df4479df5e7cb3ed1dead21888b5af98f67eMark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
778a01b1aa76273d4a28c7559a509edc7a00ec95Mark Andrews to initialize winsock. [RT #21932]
778a01b1aa76273d4a28c7559a509edc7a00ec95Mark Andrews2951. [bug] named failed to generate a correct signed response
44f175a90a855326725439b2f1178f0dcca8f67dMark Andrews in a optout, delegation only zone with no secure
44f175a90a855326725439b2f1178f0dcca8f67dMark Andrews delegations. [RT #22007]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt2950. [bug] named failed to perform a SOA up to date check when
21991bd14e8b59000dfc2acf2ce614596cf28cbaMark Andrews falling back to TCP on UDP timeouts when
b335299322e50f045f10e4636262cd2f8d407a8bMark Andrews ixfr-from-differences was set. [RT #21595]
b335299322e50f045f10e4636262cd2f8d407a8bMark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
ff5c52617eecd06161344c99987a866691592e4aMark Andrews it was called multiple times. [RT #21942]
e12030c433a08b9e9678717ec5e8092c9e4da72cMark Andrews2948. [port] MacOS: provide a mechanism to configure the test
e18c62b1dab6bf82530a94c00e2320e542f40c3fMark Andrews interfaces at reboot. See bin/tests/system/README
e18c62b1dab6bf82530a94c00e2320e542f40c3fMark Andrews for details.
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews2947. [placeholder]
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews2946. [doc] Document the default values for the minimum and maximum
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews zone refresh and retry values in the ARM. [RT #21886]
8b7d3aeda264513ca83961fb752703cc3c85451dMark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
8b7d3aeda264513ca83961fb752703cc3c85451dMark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
f083a44415365f6464f8bd35f439dc13ee0b684fMark Andrews2943. [func] Add support to load new keys into managed zones
108300f7f14315b7fa72a04f009dcb4d0839f207Mark Andrews without signing immediately with "rndc loadkeys".
108300f7f14315b7fa72a04f009dcb4d0839f207Mark Andrews Add support to link keys with "dnssec-keygen -S"
108300f7f14315b7fa72a04f009dcb4d0839f207Mark Andrews and "dnssec-settime -S". [RT #21351]
2fca4a3321c0137a0bcaa4692564b249ae26322eMark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
121f783b6660f2cb49829bdc51eb522fd327437eMark Andrews2941. [bug] sdb and sdlz (dlz's zone database) failed to support
121f783b6660f2cb49829bdc51eb522fd327437eMark Andrews DNAME at the zone apex. [RT #21610]
707d9fbd86a15a7112936473a31191dc09ca642cMark Andrews2940. [port] Remove connection aborted error message on
707d9fbd86a15a7112936473a31191dc09ca642cMark Andrews Windows. [RT #21549]
bb9298e0088e8a636ea59f5b435f7c5b536c8017Mark Andrews2939. [func] Check that named successfully skips NSEC3 records
bb9298e0088e8a636ea59f5b435f7c5b536c8017Mark Andrews that fail to match the NSEC3PARAM record currently
1df2b7edfecd7cb7edc08ae9ec43d008cfbe7d34Mark Andrews in use. [RT #21868]
1df2b7edfecd7cb7edc08ae9ec43d008cfbe7d34Mark Andrews2938. [bug] When generating signed responses, from a signed zone
fd95cc0da9563aa85ac67462433b6a2b6ac0db9fMark Andrews that uses NSEC3, named would use a uninitialized
fd95cc0da9563aa85ac67462433b6a2b6ac0db9fMark Andrews pointer if it needed to skip a NSEC3 record because
fd95cc0da9563aa85ac67462433b6a2b6ac0db9fMark Andrews it didn't match the selected NSEC3PARAM record for
bb6d33103e672d21429ae1837ce10d91f2419800Mark Andrews zone. [RT #21868]
bb6d33103e672d21429ae1837ce10d91f2419800Mark Andrews2937. [bug] Worked around an apparent race condition in over
cc6d67469cf390842adf1bd35dd2b21fc3b7df18Mark Andrews memory conditions. Without this fix a DNS cache DB or
cc6d67469cf390842adf1bd35dd2b21fc3b7df18Mark Andrews ADB could incorrectly stay in an over memory state,
cc6d67469cf390842adf1bd35dd2b21fc3b7df18Mark Andrews effectively refusing further caching, which
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews subsequently made a BIND 9 caching server unworkable.
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews This fix prevents this problem from happening by
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews polling the state of the memory context, rather than
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews making a copy of the state, which appeared to cause
03ccae042b4acd22805d667f823066d3690965cfMark Andrews a race. This is a "workaround" in that it doesn't
c45d848e2a5898975a14a6311a406f45028a45b0Tatuya JINMEI 神明達哉 solve the possible race per se, but several experiments
c45d848e2a5898975a14a6311a406f45028a45b0Tatuya JINMEI 神明達哉 proved this change solves the symptom. Also, the
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier polling overhead hasn't been reported to be an issue.
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier This bug should only affect a caching server that
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier specifies a finite max-cache-size. It's also quite
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier likely that the bug happens only when enabling threads,
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉 but it's not confirmed yet. [RT #21818]
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉2936. [func] Improved configuration syntax and multiple-view
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉 support for addzone/delzone feature (see change
c6217b2899ea2bca7f5870ea5dbb3e46fbb72391Mark Andrews #2930). Removed "new-zone-file" option, replaced
86077a2e87bcf2b13cbe2ecfeb17502cc2c12b04Mark Andrews with "allow-new-zones (yes|no)". The new-zone-file
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews for each view is now created automatically, with
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews a filename generated from a hash of the view name.
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews It is no longer necessary to "include" the
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews new-zone-file in named.conf; this happens
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews automatically. Zones that were not added via
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews "rndc addzone" can no longer be removed with
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews "rndc delzone". [RT #19447]
a80d26914afece7324158918e8d74c7c8384a0dfMark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
c19f322914f380404b613fbb31f5ac2582098f9dMark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
ff9301990d83dedca3806a16b4c9693f16d6e8b1Mark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
fa2cb8d61d8699709b9fc14ed4f47bb63507b2a5Mark Andrews scope. This could potentially result in a unknown,
fa2cb8d61d8699709b9fc14ed4f47bb63507b2a5Mark Andrews potentially malformed, EDNS option being sent instead
fa2cb8d61d8699709b9fc14ed4f47bb63507b2a5Mark Andrews of the desired NSID option. [RT #21781]
08fb52ec8c3923e501c7f8d74c524cced52551f9Mark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
64c43af4f464b4ead99c3d2a561f0013fd26308cMark Andrews2931. [bug] Temporarily and partially disable change 2864
64c43af4f464b4ead99c3d2a561f0013fd26308cMark Andrews because it would cause infinite attempts of RRSIG
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews queries. This is an urgent care fix; we'll
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews revisit the issue and complete the fix later.
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews2930. [experimental] New "rndc addzone" and "rndc delzone" commands
03ccae042b4acd22805d667f823066d3690965cfMark Andrews allow dynamic addition and deletion of zones.
22c4126ba51175af1453cd2254c303c6f65a766cMark Andrews To enable this feature, specify a "new-zone-file"
22c4126ba51175af1453cd2254c303c6f65a766cMark Andrews option at the view or options level in named.conf.
637a4234fab5dacacfa0d4fb8b41290b634b252fMark Andrews Zone configuration information for the new zones
b1003ace6f6e15ffa212c7982c80845f549e6cefMark Andrews will be written into that file. To make the new
b1003ace6f6e15ffa212c7982c80845f549e6cefMark Andrews zones persist after a restart, "include" the file
637a4234fab5dacacfa0d4fb8b41290b634b252fMark Andrews into named.conf in the appropriate view. (Note:
92348098ebe7ef4c26bfe2204a7364fa18735afcMark Andrews This feature is not yet documented, and its syntax
92348098ebe7ef4c26bfe2204a7364fa18735afcMark Andrews is expected to change.) [RT #19447]
d1a5fdc34a3d7caabead7bbf0cbf6fa7d89f0910Mark Andrews2929. [bug] Improved handling of GSS security contexts:
d1a5fdc34a3d7caabead7bbf0cbf6fa7d89f0910Mark Andrews - added LRU expiration for generated TSIGs
5e95cf76e46d93d6b6c2e3cd1aca4c1ab33f827eMark Andrews - added the ability to use a non-default realm
2e20dea9fc0a84217c7debdef8b4b6c6f04d3998Mark Andrews - added new "realm" keyword in nsupdate
2e20dea9fc0a84217c7debdef8b4b6c6f04d3998Mark Andrews - limited lifetime of generated keys to 1 hour
13396661f46572d7b94703a25721aad040fbd91aMark Andrews or the lifetime of the context (whichever is
64f8608ed6b7f42a4a7d358fade2c82dfd1e9c01Mark Andrews2928. [bug] Be more selective about the non-authoritative
0cae66577c69c89086cd065bb297690072b471b4Mark Andrews answer we apply change 2748 to. [RT #21594]
d3cbd6b05c16c6e0e86c1651bda3b3ee06574d62Mark Andrews2927. [placeholder]
d3cbd6b05c16c6e0e86c1651bda3b3ee06574d62Mark Andrews2926. [placeholder]
3a28f0dc73549d8c59ad18898540892c7eed957bTatuya JINMEI 神明達哉2925. [bug] Named failed to accept uncachable negative responses
139cedabf9242add24d8326e216e451dd2d5a935Tatuya JINMEI 神明達哉 from insecure zones. [RT #21555]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews2924. [func] 'rndc secroots' dump a combined summary of the
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews current managed keys combined with trusted keys.
0b24b2d3c423560a0a4cd9a4476b9a2dcafb7ea3Evan Hunt2923. [bug] 'dig +trace' could drop core after "connection
dcfca6f18d5069155ae50025aaeead0cc8c04730Evan Hunt timeout". [RT #21514]
ebaf977ecfe6b26ba4482e00d1fd78914a1e17ebMark Andrews2922. [contrib] Update zkt to version 1.0.
ebaf977ecfe6b26ba4482e00d1fd78914a1e17ebMark Andrews2921. [bug] The resolver could attempt to destroy a fetch context
140cf92b3bbff9da00a782c8afe27f5fa63bd7f7Evan Hunt too soon. [RT #19878]
fd3a3783538312dc8f61a85ce4d3720f43b912c0Mark Andrews2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
fd3a3783538312dc8f61a85ce4d3720f43b912c0Mark Andrews to IPv4 clients. New acl 'filter-aaaa' (default any).
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt2917. [func] Virtual time test framework. [RT #20801]
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt2916. [func] Add framework to use IPv6 in tests.
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
e11a0c114cdaf8f7e7832e9f1a011138248093a6Evan Hunt2915. [cleanup] Be smarter about which objects we attempt to compile
e11a0c114cdaf8f7e7832e9f1a011138248093a6Evan Hunt based on configure options. [RT #21444]
b47d410f8409294863f214542a05c92cbe86cf04Evan Hunt2914. [bug] Make the "autosign" system test more portable.
6ff7cd9fa57e8f8092c08df8f9ceccbffb6b19c9Francis Dupont2913. [func] Add pkcs#11 system tests. [RT #20784]
f77148e02902a96bddd5948e594bd4be2efe67ffFrancis Dupont2912. [func] Windows clients don't like UPDATE responses that clear
f77148e02902a96bddd5948e594bd4be2efe67ffFrancis Dupont the zone section. [RT #20986]
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont2911. [bug] dnssec-signzone didn't handle out of zone records well.
a91029a00e83e3933046cc9354357bccaa66c272Francis Dupont2910. [func] Sanity check Kerberos credentials. [RT #20986]
05b1ab91a62c09b052cdd9641355671997430d15Evan Hunt2909. [bug] named-checkconf -p could die if "update-policy local;"
05b1ab91a62c09b052cdd9641355671997430d15Evan Hunt was specified in named.conf. [RT #21416]
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt2908. [bug] It was possible for re-signing to stop after removing
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt a DNSKEY. [RT #21384]
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt2907. [bug] The export version of libdns had undefined references.
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt2905. [port] aix: set use_atomic=yes with native compiler.
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt2904. [bug] When using DLV, sub-zones of the zones in the DLV,
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt could be incorrectly marked as insecure instead of
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt secure leading to negative proofs failing. This was
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt a unintended outcome from change 2890. [RT #21392]
8ebf67b7f0aeea7ef8c6e034c57a1dc57a7b216aEvan Hunt2903. [bug] managed-keys-directory missing from namedconf.c.
7c25b5f311a5a97ba3e9323956507f551c9b3b53Shawn Routhier2902. [func] Add regression test for change 2897. [RT #21040]
7c25b5f311a5a97ba3e9323956507f551c9b3b53Shawn Routhier2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt2900. [bug] The placeholder negative caching element was not
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt properly constructed triggering a INSIST in
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt dns_ncache_towire(). [RT #21346]
d3a6cd7c7e13707d0c26e1af0e026dd6c22c5e99Evan Hunt2899. [port] win32: Support linking against OpenSSL 1.0.0.
d3a6cd7c7e13707d0c26e1af0e026dd6c22c5e99Evan Hunt2898. [bug] nslookup leaked memory when -domain=value was
845bb3195a4f50d438ec0fcd5d79593010314319Evan Hunt specified. [RT #21301]
845bb3195a4f50d438ec0fcd5d79593010314319Evan Hunt2897. [bug] NSEC3 chains could be left behind when transitioning
d8680445d6212d5552ea8a22fd2f9951b11c4b10Tatuya JINMEI 神明達哉 to insecure. [RT #21040]
d8680445d6212d5552ea8a22fd2f9951b11c4b10Tatuya JINMEI 神明達哉2896. [bug] "rndc sign" failed to properly update the zone
9ead684875ab0ab5fdb8b5dd837a88f7dbd0e01dEvan Hunt when adding a DNSKEY for publication only. [RT #21045]
687b6322fb189c41c3672226a59461cc5c24c087Evan Hunt2895. [func] genrandom: add support for the generation of multiple
687b6322fb189c41c3672226a59461cc5c24c087Evan Hunt files. [RT #20917]
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews2893. [bug] Improve managed keys support. New named.conf option
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews managed-keys-directory. [RT #20924]
5b77627c09dea9a65a70d2a0b95a22ff75b3ac04Mark Andrews2892. [bug] Handle REVOKED keys better. [RT #20961]
288486df9df0c5a39b3c3d625c7f133d9a8e69fbMark Andrews2891. [maint] Update empty-zones list to match
288486df9df0c5a39b3c3d625c7f133d9a8e69fbMark Andrews draft-ietf-dnsop-default-local-zones-13. [RT #21099]
5773d3c007c0c065f83480aa17e61bea728221f9Mark Andrews2890. [bug] Handle the introduction of new trusted-keys and
5773d3c007c0c065f83480aa17e61bea728221f9Mark Andrews DS, DLV RRsets better. [RT #21097]
85c5ed3577655f4f710f0af5ee93edd71c336055Evan Hunt2889. [bug] Elements of the grammar where not properly reported.
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont2888. [bug] Only the first EDNS option was displayed. [RT #21273]
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont2887. [bug] Report the keytag times in UTC in the .key file,
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont local time is presented as a comment within the
bd31f734eec1884bd14024a232eb3ad3b0b86489Evan Hunt comment. [RT #21223]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews2886. [bug] ctime() is not thread safe. [RT #21223]
1361014b02f11cf8de8725d1770a3dccbc1c8975Evan Hunt2885. [bug] Improve -fno-strict-aliasing support probing in
ce0a4906ad27a8743e4f59e8ea06433640d78e54Mark Andrews configure. [RT #21080]
40ad4ed01be1cace49a62214d11ef1309b3029a0Evan Hunt2884. [bug] Insufficient validation in dns_name_getlabelsequence().
b09559fd36c5081ffaf58ab64bdef170c1a720f1Evan Hunt2883. [bug] 'dig +short' failed to handle really large datasets.
aa3415ba49c7f322845ee3dd59c2d0159f37bb34Evan Hunt2882. [bug] Remove memory context from list of active contexts
c9630524c7560b27784fca6e456e652ff41ae7f1Mark Andrews before clearing 'magic'. [RT #21274]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt is held when closing a version. [RT #21198]
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt consistent. [RT #21078]
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
0da859c5a7f17298577616577197cc6c857e4579Evan Hunt2878. [func] Incrementally write the master file after performing
19a6c40c37cd22a07b29542a5cc5c8986c1fbf57Evan Hunt a AXFR. [RT #21010]
19a6c40c37cd22a07b29542a5cc5c8986c1fbf57Evan Hunt2877. [bug] The validator failed to skip obviously mismatching
9de98fbbbee124bbb8d609669cfaff17ec7a36e0Evan Hunt RRSIGs. [RT #21138]
9de98fbbbee124bbb8d609669cfaff17ec7a36e0Evan Hunt2876. [bug] Named could return SERVFAIL for negative responses
28f4cd0a4503b91d7a48ed4d157347b251ae5686Mark Andrews from unsigned zones. [RT #21131]
28f4cd0a4503b91d7a48ed4d157347b251ae5686Mark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
bc04d6ec155564b7f0c0171ac88e9e5918366c9dEvan Hunt2874. [bug] Cache lack of EDNS support only after the server
bc04d6ec155564b7f0c0171ac88e9e5918366c9dEvan Hunt successfully responds to the query using plain DNS.
b8b602f89be848d44472df92320e9d88213a1411Evan Hunt2873. [bug] Canceling a dynamic update via the dns/client module
b8b602f89be848d44472df92320e9d88213a1411Evan Hunt could trigger an assertion failure. [RT #21133]
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt2872. [bug] Modify dns/client.c:dns_client_createx() to only
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt require one of IPv4 or IPv6 rather than both.
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt2871. [bug] Type mismatch in mem_api.c between the definition and
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt the header file, causing build failure with
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt --enable-exportlib. [RT #21138]
71ba75c604df3604673232828a68bb28c420e698Mark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
71ba75c604df3604673232828a68bb28c420e698Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews any changes made by configure are integrated.
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews Use --with-make-clean=no to disable. [RT #20994]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews don't like it. [RT #20986]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews2866. [bug] Windows does not like the TSIG name being compressed.
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews2865. [bug] memset to zero event.data. [RT #20986]
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt2862. [bug] nsupdate didn't default to the parent zone when
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt updating DS records. [RT #20896]
e6dda86e8b18ca24db86bd6cd986fdcbfda3f06aEvan Hunt2861. [doc] dnssec-settime man pages didn't correctly document the
e6dda86e8b18ca24db86bd6cd986fdcbfda3f06aEvan Hunt inactivation time. [RT #21039]
2a0d4c4d6ba5addb33cd1bccecc55ca4a095f191Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
d524a81532c87c7fa8d0ce0261645fb18276b1eeMark Andrews2859. [bug] When canceling validation it was possible to leak
d524a81532c87c7fa8d0ce0261645fb18276b1eeMark Andrews memory. [RT #20800]
feeca57f18fe7ae1825bef81a210068d4ddaf4eeEvan Hunt2858. [bug] RTT estimates were not being adjusted on ICMP errors.
8b37c0dd6e1cf3f8849f4f28b77b43ab3fb20ea4Mark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
c073c65719eb5a7a525176d9a62e1b58a11ecab7Evan Hunt2856. [bug] The size of a memory allocation was not always properly
c073c65719eb5a7a525176d9a62e1b58a11ecab7Evan Hunt recorded. [RT #20927]
c073c65719eb5a7a525176d9a62e1b58a11ecab7Evan Hunt2855. [func] nsupdate will now preserve the entered case of domain
5d9922e86f3d7f58f4c6b1234962ee4567108830Vernon Schryver names in update requests it sends. [RT #20928]
c4e3976707829c3225983b80afb09215e49ea10dMark Andrews2854. [func] dig: allow the final soa record in a axfr response to
49f788cbd39eb9218c19e077c7b2519c617e044dMark Andrews be suppressed, dig +onesoa. [RT #20929]
66ecb6789b7effa68f75dc70f0843a26825b44f6Mark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
cfc22e53a89ccac4eb04b4f41a93f73e629e80edEvan Hunt2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
ce3b2c5189e874f1c45d699cfb4f30fc7a8cd604Evan Hunt2851. [doc] nslookup.1, removed <informalexample> from the docbook
ce3b2c5189e874f1c45d699cfb4f30fc7a8cd604Evan Hunt source as it produced bad nroff. [RT #21007]
fc1fb1a469dc44fb12bbe51ead6caf568239d5abEvan Hunt2850. [bug] If isc_heap_insert() failed due to memory shortage
fc1fb1a469dc44fb12bbe51ead6caf568239d5abEvan Hunt the heap would have corrupted entries. [RT #20951]
d0ca4e90e2dd584db70e403ef92ab08d78d9cd6dMark Andrews2849. [bug] Don't treat errors from the xml2 library as fatal.
d312bc5d81cff8fc156b62c970334b52227ee854Evan Hunt2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
d312bc5d81cff8fc156b62c970334b52227ee854Evan Hunt README.rfc5011 into the ARM. [RT #20899]
db6cd7ee05471eddeaac642b2f45dde87e770da5Mark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
dc9270706619976c47236892c655ba76671c37f1Mark Andrews2846. [bug] EOF on unix domain sockets was not being handled
dc9270706619976c47236892c655ba76671c37f1Mark Andrews correctly. [RT #20731]
503e5aa8d2400e47c9617db10b57f2d4f3495fd2Mark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
503e5aa8d2400e47c9617db10b57f2d4f3495fd2Mark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
5985af3f5ca3bd3aecd177c7eab497e7414c3945Evan Hunt been five (5) seconds.
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt creating key files if there is a chance that the new
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt key ID will collide with an existing one after
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews either of the keys has been revoked. (To override
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt this in the case of dnssec-keyfromlabel, use the -y
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt option. dnssec-keygen will simply create a
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt different, non-colliding key, so an override is
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt not necessary.) [RT #20838]
289dbe005c271d344296cad043157fee6604bdb0Mark Andrews2842. [func] Added "smartsign" and improved "autosign" and
c16d37d06e103b259073a61e610e688e2849289aMark Andrews "dnssec" regression tests. [RT #20865]
1cd538c05181b7236e4a2d159a99997dcfa1cb5cFrancis Dupont2841. [bug] Change 2836 was not complete. [RT #20883]
1cd538c05181b7236e4a2d159a99997dcfa1cb5cFrancis Dupont2840. [bug] Temporary fixed pkcs11-destroy usage check.
0088b45de515b891622e7e81dee9602291231c10Evan Hunt2839. [bug] A KSK revoked by named could not be deleted.
b08325a7f3092cca1131e1a04a43a4ecef713e29Evan Hunt2838. [placeholder]
a39a5f4d816ca7d3f43106712ca668dd1ab31d69Mark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
7ee4b13ded769df52e8c66b3dfa1de968df7bd28Evan Hunt2836. [bug] Keys that were scheduled to become active could
7ee4b13ded769df52e8c66b3dfa1de968df7bd28Evan Hunt be delayed. [RT #20874]
44a3999cf4f71bd81a7942ff5e60c6b1828e5f9dEvan Hunt2835. [bug] Key inactivity dates were inadvertently stored in
44a3999cf4f71bd81a7942ff5e60c6b1828e5f9dEvan Hunt the private key file with the outdated tag
44a3999cf4f71bd81a7942ff5e60c6b1828e5f9dEvan Hunt "Unpublish" rather than "Inactive". This has been
7048af0a551f13d2916a06cce21357714939a89bEvan Hunt fixed; however, any existing keys that had Inactive
7048af0a551f13d2916a06cce21357714939a89bEvan Hunt dates set will now need to have them reset, using
00295e065080e0b9856d00b15976d1ed5d280cbfEvan Hunt 'dnssec-settime -I'. [RT #20868]
e856482b1fe1c554a8e47a519b59902b21792564Evan Hunt2834. [bug] HMAC-SHA* keys that were longer than the algorithm
e856482b1fe1c554a8e47a519b59902b21792564Evan Hunt digest length were used incorrectly, leading to
e856482b1fe1c554a8e47a519b59902b21792564Evan Hunt interoperability problems with other DNS
e856482b1fe1c554a8e47a519b59902b21792564Evan Hunt implementations. This has been corrected.
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt (Note: If an oversize key is in use, and
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt compatibility is needed with an older release of
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt BIND, the new tool "isc-hmac-fixup" can convert
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt the key secret to a form that will work with all
1d0ebb4cf21324b28215c5df84cce0f84dd6948bMark Andrews versions.) [RT #20751]
1d0ebb4cf21324b28215c5df84cce0f84dd6948bMark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
e9dff04d3bd9b7b247cad0f914ed80914a49bcccEvan Hunt2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
e9dff04d3bd9b7b247cad0f914ed80914a49bcccEvan Hunt to avoid redefinition in some OSs [RT 20831]
0c3948e6066e8910edb3f6a7820bd42ffaefedf6Evan Hunt2831. [security] Do not attempt to validate or cache
0c3948e6066e8910edb3f6a7820bd42ffaefedf6Evan Hunt out-of-bailiwick data returned with a secure
2c016c64f533171e1342c1914754b017026c8ad5Tatuya JINMEI 神明達哉 answer; it must be re-fetched from its original
2c016c64f533171e1342c1914754b017026c8ad5Tatuya JINMEI 神明達哉 source and validated in that context. [RT #20819]
2c016c64f533171e1342c1914754b017026c8ad5Tatuya JINMEI 神明達哉2830. [bug] Changing the OPTOUT setting could take multiple
38397492000c996d50f9bf96a4da318a742bd07cEvan Hunt passes. [RT #20813]
9d5e42bb875bc287387241dd7563f5698afd31f6Mark Andrews2829. [bug] Fixed potential node inconsistency in rbtdb.c.
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt2828. [security] Cached CNAME or DNAME RR could be returned to clients
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt without DNSSEC validation. [RT #20737]
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
7fe4b0447fb3ef0c8ff9851624a7bca072732973Evan Hunt2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
7fe4b0447fb3ef0c8ff9851624a7bca072732973Evan Hunt being released. [RT #20740]
e2facd7af296d90d0d1fef7994b6b8e795490a92Evan Hunt2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
3594635af7c6fedb2893ad1a9df4935bd0234a47Evan Hunt was in the process of being created was not properly
3594635af7c6fedb2893ad1a9df4935bd0234a47Evan Hunt recorded in the zone. [RT #20786]
cc3ed192b030ccf9a903a4a7c8667cda8ad23eebEvan Hunt2824. [bug] "rndc sign" was not being run by the correct task.
b99efc39de7711d483f62f42bf6c365843637238Mark Andrews2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
302ed789bd97f34500ee4ba3a8329590d6453fc6Mark Andrews2822. [bug] rbtdb.c:loadnode() could return the wrong result.
6f6f08b7a4ea50806099b23ca97010195c1365cdEvan Hunt2821. [doc] Add note that named-checkconf doesn't automatically
9a050780dce1bf3cbe81bd18404df3e79c146583Evan Hunt2820. [func] Handle read access failure of OpenSSL configuration
e94fe42a2007a4ffdd27ba99d3756622f8da1008Mark Andrews file more user friendly (PKCS#11 engine patch).
0a30185f80f3962aba0e1f30ad7743fb8c8aa65dMark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
0181a0a92f0d3a9ec7f04754253bb6bd47307e6fMark Andrews2818. [cleanup] rndc could return an incorrect error code
0181a0a92f0d3a9ec7f04754253bb6bd47307e6fMark Andrews when a zone was not found. [RT #20767]
a3285e811de7204f1d4d296c7f16082fc58e1b7aMark Andrews2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
4ffd660d41080dc4c5641c9ce4f80b04af611849Tatuya JINMEI 神明達哉2816. [bug] previous_closest_nsec() could fail to return
4ffd660d41080dc4c5641c9ce4f80b04af611849Tatuya JINMEI 神明達哉 data for NSEC3 nodes [RT #29730]
9d856845d63784690e347c8e8dc013f1c830c86dMark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
554d22d2deb8889bb16434176b5716ab79d15c50Mark Andrews2814. [func] Provide a definitive error message when a master
554d22d2deb8889bb16434176b5716ab79d15c50Mark Andrews zone is not loaded. [RT #20757]
da1f044e5d5e15846a9464647ebdd0e9cee3f63aEvan Hunt2813. [bug] Better handling of unreadable DNSSEC key files.
be69d484434e10d920c4d8a8bb735356eb0c2cc8Evan Hunt2812. [bug] Make sure updates can't result in a zone with
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews NSEC-only keys and NSEC3 records. [RT #20748]
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews output. [RT #20733]
5cb44a38d9b6fbd1144cf396a199db54e9e56f5bEvan Hunt2810. [doc] Clarified the process of transitioning an NSEC3 zone
e9d45c0a0456d6267d9ea220751b6e495c55a8cfMark Andrews to insecure. [RT #20746]
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt2809. [cleanup] Restored accidentally-deleted text in usage output
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt in dnssec-settime and dnssec-revoke [RT #20739]
e09cdbac087b88524ac40e943d040e2a032c48f2Mark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
e09cdbac087b88524ac40e943d040e2a032c48f2Mark Andrews atomic.h is correctly installed by the architecture
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews specific subdirectories. [RT #20722]
9e9e7112f9d712fe9e1740162f88a82ef1aa4711Mark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews keys. [RT #20720]
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews --- 9.7.0rc1 released ---
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt when it had changed. [RT #20703]
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt2805. [bug] Fixed namespace problems encountered when building
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt external programs using non-exported BIND9 libraries
af30180834ac4b3b206338be5c42e89bab07ca27Mark Andrews (i.e., built without --enable-exportlib). [RT #20679]
6f9c93a8858a28b131dbd36b75b81e9250c6d11aEvan Hunt2804. [bug] Send notifies when a zone is signed with "rndc sign"
6f9c93a8858a28b131dbd36b75b81e9250c6d11aEvan Hunt or as a result of a scheduled key change. [RT #20700]
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt and genrandom under windows. [RT #20670]
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt2801. [func] Detect and report records that are different according
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt to DNSSEC but are semantically equal according to plain
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt DNS. Apply plain DNS comparisons rather than DNSSEC
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt comparisons when processing UPDATE requests.
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt dnssec-signzone now removes such semantically duplicate
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt records prior to signing the RRset.
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont named-checkzone -r {ignore|warn|fail} (default warn)
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont named-compilezone -r {ignore|warn|fail} (default warn)
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont named.conf: check-dup-records {ignore|warn|fail};
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont2800. [func] Reject zones which have NS records which refer to
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews CNAMEs, DNAMEs or don't have address record (class IN
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews only). Reject UPDATEs which would cause the zone
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews to fail the above checks if committed. [RT #20678]
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt2799. [cleanup] Changed the "secure-to-insecure" option to
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt "dnssec-secure-to-insecure", and "dnskey-ksk-only"
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt2798. [bug] Addressed bugs in managed-keys initialization
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt and rollover. [RT #20683]
cc6cddfd94e8f0c58c290317b0853dac30b1b895Evan Hunt2797. [bug] Don't decrement the dispatch manager's maxbuffers.
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt2796. [bug] Missing dns_rdataset_disassociate() call in
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt dns_nsec3_delnsec3sx(). [RT #20681]
d2a8d00228973e59eb3efcc377126d856bf7df18Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
d2a8d00228973e59eb3efcc377126d856bf7df18Mark Andrews log messages. [RT #18889]
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt2794. [bug] Install <isc/namespace.h>. [RT #20677]
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt2793. [func] Add "autosign" and "metadata" tests to the
7704a47aec081144bdb7a0218d5e2dd5296b6b08Mark Andrews automatic tests. [RT #19946]
7704a47aec081144bdb7a0218d5e2dd5296b6b08Mark Andrews2792. [func] "filter-aaaa-on-v4" can now be set in view
7704a47aec081144bdb7a0218d5e2dd5296b6b08Mark Andrews options (if compiled in). [RT #20635]
a01095a487a2c858c4f86e0f32c93b482d179a78Mark Andrews2791. [bug] The installation of isc-config.sh was broken.
bfbd69c43f2b63ac122e4a47a510d46ffffb613cEvan Hunt2790. [bug] Handle DS queries to stub zones. [RT #20440]
06e7340198bbd89b6765998a04abde217e7b0e7bMark Andrews2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
06e7340198bbd89b6765998a04abde217e7b0e7bMark Andrews2788. [bug] dnssec-signzone could sign with keys that were
3c5e54941fe8ed891d1588e84e210d8829b9903aMark Andrews not requested [RT #20625]
3c5e54941fe8ed891d1588e84e210d8829b9903aMark Andrews2787. [bug] Spurious log message when zone keys were
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews dynamically reconfigured. [RT #20659]
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews2786. [bug] Additional could be promoted to answer. [RT #20663]
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews --- 9.7.0b3 released ---
4b30598fb908755c4fd04f51cf3ce1f550434bf3Mark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
abe20c2cca12abe0523fc314af31183626c87325Evan Hunt2784. [bug] TC was not always being set when required glue was
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews dropped. [RT #20655]
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews buffer size of 512 or less. [RT #20654]
616560e3db487f548b383c7eecc6e855e8afe7d6Mark Andrews2782. [port] win32: use getaddrinfo() for hostname lookups.
cbee6197d1fb31453ff51f9f1c705feed67c9c73Mark Andrews2781. [bug] Inactive keys could be used for signing. [RT #20649]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt2780. [bug] dnssec-keygen -A none didn't properly unset the
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt activation date in all cases. [RT #20648]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt2779. [bug] Dynamic key revocation could fail. [RT #20644]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt2778. [bug] dnssec-signzone could fail when a key was revoked
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt without deleting the unrevoked version. [RT #20638]
6a90baa0d5ac5ad6bf5a5e29b6e8b26a931e844eEvan Hunt2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
6a90baa0d5ac5ad6bf5a5e29b6e8b26a931e844eEvan Hunt2776. [bug] Change #2762 was not correct. [RT #20647]
3727725bb7d63605b68a644060857013d563b67fEvan Hunt2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
3727725bb7d63605b68a644060857013d563b67fEvan Hunt in dnssec-keyfromlabel. [RT #20643]
3727725bb7d63605b68a644060857013d563b67fEvan Hunt2774. [bug] Existing cache DB wasn't being reused after
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt reconfiguration. [RT #20629]
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt2773. [bug] In autosigned zones, the SOA could be signed
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt with the KSK. [RT #20628]
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt2772. [security] When validating, track whether pending data was from
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews the additional section or not and only return it if
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews validates as secure. [RT #20438]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews corrupted when importing from key files [RT #20624]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2770. [cleanup] Add log messages to resolver.c to indicate events
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews causing FORMERR responses. [RT #20526]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2769. [cleanup] Change #2742 was incomplete. [RT #19589]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt2767. [bug] named could crash on startup if a zone was
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt configured with auto-dnssec and there was no
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt key-directory. [RT #20615]
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt2766. [bug] isc_socket_fdwatchpoke() should only update the
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt socketmgr state if the socket is not pending on a
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt read or write. [RT #20603]
246c504f90f42e5633dfd5e85bd57b01064961feEvan Hunt2765. [bug] Skip masters for which the TSIG key cannot be found.
ff71474ede45c496b303af7be7cd0e2f3403bda6Evan Hunt2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
3ff75c89eb7b8c4f8c7dd375beec2981d147c791Evan Hunt2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont2762. [bug] DLV validation failed with a local slave DLV zone.
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont2761. [cleanup] Enable internal symbol table for backtrace only for
b56f3f5c6663a40852866cbca469f680f7118e79Francis Dupont systems that are known to work. Currently, BSD
b56f3f5c6663a40852866cbca469f680f7118e79Francis Dupont variants, Linux and Solaris are supported. [RT #20202]
48b6d2f585d753ac89a11cb5bafb14f239e08430Evan Hunt2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
1a0eecfe694275dfadccc6074aaa4340845cc85dEvan Hunt2759. [doc] Add information about .jbk/.jnw files to
1a0eecfe694275dfadccc6074aaa4340845cc85dEvan Hunt the ARM. [RT #20303]
c36ba263d6318740da965f5351fe09e74f1d8aa2Evan Hunt2758. [bug] win32: Added a workaround for a windows 2008 bug
c36ba263d6318740da965f5351fe09e74f1d8aa2Evan Hunt that could cause the UDP client handler to shut
4256ffffb9da267edf7925597714afaacabebf5aEvan Hunt down. [RT #19176]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2757. [bug] dig: assertion failure could occur in connect
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews timeout. [RT #20599]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
eb95d2e917b3f71c33a8be53eac75eb191ee5a9dMark Andrews2755. [placeholder]
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier2754. [bug] Secure-to-insecure transitions failed when zone
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier was signed with NSEC3. [RT #20587]
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier2753. [bug] Removed an unnecessary warning that could appear when
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier building an NSEC chain. [RT #20589]
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier2752. [bug] Locking violation. [RT #20587]
a93a66f61872a92ef4a272ca998aaff954ab4fedEvan Hunt2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
4977518a4c906da7c7cf2c5bba2cef2ccd1a409aMark Andrews2750. [bug] dig: assertion failure could occur when a server
debd489a44363870f96f75818e89ec27d3cab736Francis Dupont didn't have an address. [RT #20579]
1e733ffc1103667dd6cf0eae01f5dfd0c84c5108Mark Andrews2749. [bug] ixfr-from-differences generated a non-minimal ixfr
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt for NSEC3 signed zones. [RT #20452]
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt2748. [func] Identify bad answers from GTLD servers and treat them
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt as referrals. [RT #18884]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2747. [bug] Journal roll forwards failed to set the re-signing
ff850b81c814787c72e96b162f47a208665814c4Mark Andrews time of RRSIGs correctly. [RT #20541]
0f869e8d52fec87684c7551dcc0f315a7ed19da1Mark Andrews2746. [port] hpux: address signed/unsigned expansion mismatch of
69338455d91b46bef10a2d73beafa05df49ed2d9Mark Andrews2745. [bug] configure script didn't probe the return type of
69338455d91b46bef10a2d73beafa05df49ed2d9Mark Andrews gai_strerror(3) correctly. [RT #20573]
53c22b8e0da67ca756ca309d5f84db9c189cd0a2Evan Hunt2744. [func] Log if a query was over TCP. [RT #19961]
53c22b8e0da67ca756ca309d5f84db9c189cd0a2Evan Hunt2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
b3c8f1e9e864c30d1bb68fdf1ba7eb242c24be6eMark Andrews for a insecure delegation.
4d0e2cf9b9ffcf5941b347e6bea084a12455e388Mark Andrews --- 9.7.0b2 released ---
484076c3255e0cc5b179ad736cd930900e4bb06bFrancis Dupont2742. [cleanup] Clarify some DNSSEC-related log messages in
8436cc14ba43418d60da21eee1ed045570edbd58Evan Hunt2741. [func] Allow the dnssec-keygen progress messages to be
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews suppressed (dnssec-keygen -q). Automatically
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews suppress the progress messages when stdin is not
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews a tty. [RT #20474]
2f4d747a267026e6298ba9ece22c9dfa0ac254daFrancis Dupont2740. [placeholder]
2f4d747a267026e6298ba9ece22c9dfa0ac254daFrancis Dupont2739. [cleanup] Clean up API for initializing and clearing trust
790e471f6e97fd4da5dc03dd34824d814a50b9a1Tatuya JINMEI 神明達哉 anchors for a view. [RT #20211]
790e471f6e97fd4da5dc03dd34824d814a50b9a1Tatuya JINMEI 神明達哉2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
265daffadb5b69702ca355fb500d1f0d8077a983Francis Dupont test. [RT #20453]
d514c0dc9b7f369a94d79c709b77a8f3a08afd84Evan Hunt2737. [func] UPDATE requests can leak existence information.
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews2736. [func] Improve the performance of NSEC signed zones with
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews more than a normal amount of glue below a delegation.
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt2735. [bug] dnssec-signzone could fail to read keys
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt that were specified on the command line with
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt full paths, but weren't in the current
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt directory. [RT #20421]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt2734. [port] cygwin: arpaname did not compile. [RT #20473]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews2732. [func] Add optional filter-aaaa-on-v4 option, available
d514c0dc9b7f369a94d79c709b77a8f3a08afd84Evan Hunt if built with './configure --enable-filter-aaaa'.
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt Filters out AAAA answers to clients connecting
2fa5af7b736eac0092845c5ccbddf6cc00d0321eTatuya JINMEI 神明達哉 via IPv4. (This is NOT recommended for general
2fa5af7b736eac0092845c5ccbddf6cc00d0321eTatuya JINMEI 神明達哉 use.) [RT #20339]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2731. [func] Additional work on change 2709. The key parser
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews will now ignore unrecognized fields when the
f267b27f0e1cdc55c7f1ca2a56632ce36907ff63Evan Hunt minor version number of the private key format
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt has been increased. It will reject any key with
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt the major version number increased. [RT #20310]
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt2730. [func] Have dnssec-keygen display a progress indication
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt a la 'openssl genrsa' on standard error. Note
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt when the first '.' is followed by a long stop
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt one has the choice between slow generation vs.
14cd8ac04c999fd1d2e620856330e808cae57950Mark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
14cd8ac04c999fd1d2e620856330e808cae57950Mark Andrews TTL. [RT #20451]
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont dnssec-signzone now warn immediately if asked to
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont write into a nonexistent directory. [RT #20278]
0b8385f5c51def183dbccd1bc569ea8fe092dfb2Mark Andrews2727. [func] The 'key-directory' option can now specify a relative
0b8385f5c51def183dbccd1bc569ea8fe092dfb2Mark Andrews path. [RT #20154]
bbc204a23719180dce68142ea2440c484e3ccb75Mark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
bbc204a23719180dce68142ea2440c484e3ccb75Mark Andrews RSASHA256 and RSASHA512. [RT #20023]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt2725. [doc] Added information about the file "managed-keys.bind"
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt to the ARM. [RT #20235]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt2724. [bug] Updates to a existing node in secure zone using NSEC
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt were failing. [RT #20448]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt isc_base64_totext(), didn't always mark regions of
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt memory as fully consumed after conversion. [RT #20445]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt2722. [bug] Ensure that the memory associated with the name of
a27fe4c990f96bd792f2a07ca4d38c78d5b9df2cTatuya JINMEI 神明達哉 a node in a rbt tree is not altered during the life
a27fe4c990f96bd792f2a07ca4d38c78d5b9df2cTatuya JINMEI 神明達哉 of the node. [RT #20431]
44de0b1f7d9997aaf6092589c4c7da4a1df908dbTatuya JINMEI 神明達哉2721. [port] Have dst__entropy_status() prime the random number
44de0b1f7d9997aaf6092589c4c7da4a1df908dbTatuya JINMEI 神明達哉 generator. [RT #20369]
85be60e3c8e47b9fdfeaa0770f445b206c39bca8Evan Hunt2720. [bug] RFC 5011 trust anchor updates could trigger an
85be60e3c8e47b9fdfeaa0770f445b206c39bca8Evan Hunt assert if the DNSKEY record was unsigned. [RT #20406]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
b1f3364f52261c3198b3717530aabc612c5a431aEvan Hunt2718. [bug] The space calculations in opensslrsa_todns() were
479b80d4d706be399fd8974e941d9a0edb4259efMark Andrews incorrect. [RT #20394]
479b80d4d706be399fd8974e941d9a0edb4259efMark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews the last private type record was removed as a result
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt of completing the signing the zone with a key.
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt --- 9.7.0b1 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2715. [bug] Require OpenSSL support to be explicitly disabled.
41eeb37b516d1bac073781b6ec50a39a669987dfEvan Hunt2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
747abb4993e03b8812514e4476bff67f5248c717Evan Hunt2713. [bug] powerpc: atomic operations missing asm("ics") /
747abb4993e03b8812514e4476bff67f5248c717Evan Hunt __isync() calls.
11b4f17027f4cf67d494eb89a8d2ea919dd16615Mark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
11b4f17027f4cf67d494eb89a8d2ea919dd16615Mark Andrews to be fully automated in zones configured for
7179c3476f676bc8c520583b3ed7a738aa8eeee2Mark Andrews dynamic DNS. 'auto-dnssec allow;' permits a zone
7179c3476f676bc8c520583b3ed7a738aa8eeee2Mark Andrews to be signed by creating keys for it in the
d699672160ba01589227ac046a28e20d55336facEvan Hunt key-directory and using 'rndc sign <zone>'.
7179c3476f676bc8c520583b3ed7a738aa8eeee2Mark Andrews 'auto-dnssec maintain;' allows that too, plus it
a0ba5a502e0ca8049bff7ef4305948566703ea26Mark Andrews also keeps the zone's DNSSEC keys up to date
a0ba5a502e0ca8049bff7ef4305948566703ea26Mark Andrews according to their timing metadata. [RT #19943]
18114698b4fad77aa0f32741cf815cff0def7696Mark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
18114698b4fad77aa0f32741cf815cff0def7696Mark Andrews build. [RT #20372]
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews zone option cause a zone to be signed with only KSKs
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
88471538d69a7c21b8b9fd13b489399ad6c26597Mark Andrews the size of a DNSKEY answer. [RT #20340]
88471538d69a7c21b8b9fd13b489399ad6c26597Mark Andrews2709. [func] Added some data fields, currently unused, to the
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt private key file format, to allow implementation
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt of explicit key rollover in a future release
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt without impairing backward or forward compatibility.
813b34ebecba1293ccfb91e52e3c69d5c819073dEvan Hunt2708. [func] Insecure to secure and NSEC3 parameter changes via
bcd0cbfdae6729c48894501b6bcddc972feda67fMark Andrews update are now fully supported and no longer require
bcd0cbfdae6729c48894501b6bcddc972feda67fMark Andrews defines to enable. We now no longer overload the
1d9958c6cc291916010779792f0fbdf6cd5ba368Mark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
1d9958c6cc291916010779792f0fbdf6cd5ba368Mark Andrews apex. Secure to insecure changes are controlled by
8cff1a894f09360814f88437c0c6bce90db11944Mark Andrews by the named.conf option 'secure-to-insecure'.
8cff1a894f09360814f88437c0c6bce90db11944Mark Andrews Warning: If you had previously enabled support by
048690a34d0fa89bd128ac21d1a4c84b4703a3deMark Andrews adding defines at compile time to BIND 9.6 you should
048690a34d0fa89bd128ac21d1a4c84b4703a3deMark Andrews ensure that all changes that are in progress have
90c1e763d577da656b5eeb02462b5236dca5f266Mark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
90c1e763d577da656b5eeb02462b5236dca5f266Mark Andrews is not backwards compatible.
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt2707. [func] dnssec-keyfromlabel no longer require engine name
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt to be specified in the label if there is a default
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt engine or the -E option has been used. Also, it
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt now uses default algorithms as dnssec-keygen does
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
6beee732e49fb77e92afd613f8634f828b885560Mark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
6beee732e49fb77e92afd613f8634f828b885560Mark Andrews trigger an assert. [RT #20368]
a3288b425ae88f415d2d8209769d140b5d952fb3Evan Hunt2705. [placeholder]
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt2704. [bug] Serial of dynamic and stub zones could be inconsistent
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt with their SOA serial. [RT #19387]
bd190a40a85e5ed780c9c428c6261bc397059b4bMark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
bd190a40a85e5ed780c9c428c6261bc397059b4bMark Andrews for all binaries which can take benefit of
610f3aa54c026e0506d22a80945bbadfcf0f6c7fMark Andrews crypto hardware. [RT #20230]
d173d06cae4995f61970445d8e4216c48fb925cdMark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
97725b410a7a65cd300028996b01960393532822Mark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
ca8576a564a0ff6aa200936f0b5392f62b2ffe02Mark Andrews supported TSIG key algorithm. [RT #18046]
520cea04a257e6009d855ddeb20f8d3a46cee22cMark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt2699. [bug] Missing lock in rbtdb.c. [RT #20037]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt2698. [placeholder]
15fcbe39173856ae3bd0198099a693e594536869Tatuya JINMEI 神明達哉2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt S_IFREG are defined after including <isc/stat.h>.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt2696. [bug] named failed to successfully process some valid
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt acl constructs. [RT #20308]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt2695. [func] DHCP/DDNS - update fdwatch code for use by
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt DHCP. Modify the api to isc_sockfdwatch_t (the
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt callback function for isc_socket_fdwatchcreate)
3967528c773745ac32a83c2c77a910fd15db743dEvan Hunt to include information about the direction (read
3967528c773745ac32a83c2c77a910fd15db743dEvan Hunt or write) and add isc_socket_fdwatchpoke.
aeff7de836558fa8002ab5db35292d2bb6450da8Evan Hunt2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
2792e226c786e739b2924efdf8246af389384a2fMark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
ab280fdfc5e4251758aa9929457fba6dce3f1847Mark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
fb8db7fc3f3ea597a959e4c8ac42247fd78ca887Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
fb8db7fc3f3ea597a959e4c8ac42247fd78ca887Mark Andrews chain when re-signing a previously-signed zone.
fb8db7fc3f3ea597a959e4c8ac42247fd78ca887Mark Andrews Use -u to modify NSEC3 parameters or switch
08f860f800d32007a0c9bf456f6c35fbb2ecbc81Evan Hunt between NSEC and NSEC3. [RT #20304]
63b17e175fc75adebf16563b08c89d54e6dfa253Evan Hunt2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
38cd4d14cc341c2663e574035074788bb6f0fce2Evan Hunt2689. [bug] Correctly handle snprintf result. [RT #20306]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews to decide to fetch the destination address. [RT #20305]
a4463732ad7935992a101b3d19f0a41120b85458Mark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
a4463732ad7935992a101b3d19f0a41120b85458Mark Andrews Also, added warnings when revoking a ZSK, as this is
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt not defined by protocol (but is legal). [RT #19943]
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt2686. [bug] dnssec-signzone should clean the old NSEC chain when
ef370118d5d850912a4612122f5678e3db99ee87Evan Hunt signing with NSEC3 and vice versa. [RT #20301]
ef370118d5d850912a4612122f5678e3db99ee87Evan Hunt2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
5b7525f51fbcb074bf031d92f5cd95267c628137Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews +adflag and +cdflag. [RT #19305]
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
020120e3c72d67a86ce3fd2542b43b269a1e9233Mark Andrews the NSEC3 parameters used to sign the zone change.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2682. [bug] "configure --enable-symtable=all" failed to
020120e3c72d67a86ce3fd2542b43b269a1e9233Mark Andrews build. [RT #20282]
8d80232e77cb7f2ec38bdbec424e9399d04165f3Mark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
109580e7e5c92b98c641836ccb5949b4802ffcedMark Andrews decoded. [RT #20269]
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt2679. [func] dig -k can now accept TSIG keys in named.conf
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt format. [RT #20031]
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt2678. [func] Treat DS queries as if "minimal-response yes;"
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews was set. [RT #20258]
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews2677. [func] Changes to key metadata behavior:
870332fb6d15e9fde8753399b00cb9e721c4d64fMark Andrews - Keys without "publish" or "active" dates set will
870332fb6d15e9fde8753399b00cb9e721c4d64fMark Andrews no longer be used for smart signing. However,
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews those dates will be set to "now" by default when
371642de8b1863b2fc6ec9a89416de4dca71bc47Mark Andrews a key is created; to generate a key but not use
371642de8b1863b2fc6ec9a89416de4dca71bc47Mark Andrews it yet, use dnssec-keygen -G.
d8f118f4a06cae6ec6b4ae133882f0eee1478599Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews sets the time when a key is no longer used for
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews signing but is still published.
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews - The "unpublished" date (-U) is deprecated in
877769641186144911152622b4345b27ca393df8Mark Andrews favor of "deleted" (-D).
95f999508b908a95d7ef7b0f891ac8b1a4f21abfTatuya JINMEI 神明達哉2676. [bug] --with-export-installdir should have been
95f999508b908a95d7ef7b0f891ac8b1a4f21abfTatuya JINMEI 神明達哉 --with-export-includedir. [RT #20252]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt2675. [bug] dnssec-signzone could crash if the key directory
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt did not exist. [RT #20232]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt --- 9.7.0a3 released ---
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt2674. [bug] "dnssec-lookaside auto;" crashed if named was built
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt without openssl. [RT #20231]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt2673. [bug] The managed-keys.bind zone file could fail to
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt load due to a spurious result from sync_keyzone()
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt2672. [bug] Don't enable searching in 'host' when doing reverse
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt lookups. [RT #20218]
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt2671. [bug] Add support for PKCS#11 providers not returning
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt the public exponent in RSA private keys
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt (OpenCryptoki for instance) in
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt dnssec-keyfromlabel. [RT #19294]
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt2670. [bug] Unexpected connect failures failed to log enough
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt information to be useful. [RT #20205]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews Update PKCS#11 patch to be against openssl-0.9.8i.
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews2668. [func] Several improvements to dnssec-* tools, including:
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews - dnssec-keygen and dnssec-settime can now set key
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews metadata fields 0 (to unset a value, use "none")
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews - dnssec-revoke sets the revocation date in
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews addition to the revoke bit
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews - dnssec-settime can now print individual metadata
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews fields instead of always printing all of them,
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews and can print them in unix epoch time format for
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews use by scripts
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews2667. [func] Add support for logging stack backtrace on assertion
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews failure (not available for all platforms). [RT #19780]
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews (API change from 9.7.0a2). [RT #20196]
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉2665. [func] Clarify syntax for managed-keys {} statement, add
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 ARM documentation about RFC 5011 support. [RT #19874]
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉2664. [bug] create_keydata() and minimal_update() in zone.c
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 didn't properly check return values for some
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews functions. [RT #19956]
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews2663. [func] win32: allow named to run as a service using
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews returned a misleading error code when lwresd was
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed down. [RT #20028]
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed creating lwres context. [RT #20029]
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed2660. [func] Add a new set of DNS libraries for non-BIND9
4c2ed3d14168cfe34d1c036eb4885019a8153e7cMark Andrews applications. See README.libdns. [RT #19369]
4c2ed3d14168cfe34d1c036eb4885019a8153e7cMark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
ddac1a2b9822b00aa936ef24c6d971f4a1407532Francis Dupont name for DNSSEC keys. [RT #19938]
e7eede965dbc67842cb32591a8c2ace2620e5359Mark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
e7eede965dbc67842cb32591a8c2ace2620e5359Mark Andrews key file paths correctly. [RT #20078]
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉2657. [cleanup] Lower "journal file <path> does not exist, creating it"
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉 log level to debug 1. [RT #20058]
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉2656. [func] win32: add a "tools only" check box to the installer
d302a620e0d49811874b9555ac2e4c6e05861a6bFrancis Dupont which causes it to only install dig, host, nslookup,
d302a620e0d49811874b9555ac2e4c6e05861a6bFrancis Dupont nsupdate and relevant DLLs. [RT #19998]
708ebf710e1c2c8f5bee6d5ba5376ec44d97aa71Jeremy Reed2655. [doc] Document that key-directory does not affect
cc620f9fdb69c13f1ea12bb1c90bc442f6dc0117Francis Dupont2654. [bug] Improve error reporting on duplicated names for
3836f447eeb437ae058dfecb8c321b48c50b7076Mark Andrews deny-answer-xxx. [RT #20164]
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews not found rather than out of memory. [RT #18033]
b770eae51e5d53730d3836b1548829f69ab15e66Mark Andrews2652. [func] Provide more detail about what record is being
b770eae51e5d53730d3836b1548829f69ab15e66Mark Andrews deleted. [RT #20061]
f030c715007053e4ceb557c78ad5c8cfdedb4240Mark Andrews2651. [bug] Dates could print incorrectly in K*.key files on
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 64-bit systems. [RT #20076]
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉2650. [bug] Assertion failure in dnssec-signzone when trying
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉 to read keyset-* files. [RT #20075]
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉2649. [bug] Set the domain for forward only zones. [RT #19944]
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed2647. [bug] Remove unnecessary SOA updates when a new KSK is
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed added. [RT #19913]
b1b0dca1464a11b8a63623e8567e744dccfbcb41Tatuya JINMEI 神明達哉2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉 which default to 64 bits. [RT #19927]
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉 --- 9.7.0a2 released ---
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉2644. [bug] Change #2628 caused a regression on some systems;
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉 named was unable to write the PID file and would
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews fail on startup. [RT #20001]
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
64e161a7f7f7f1692ccdf2400a81b471cf6ac508Mark Andrews2642. [bug] nsupdate could dump core on solaris when reading
9384dc16a1f2c3022f50f2e1ce18a28204baaef7Mark Andrews improperly formatted key files. [RT #20015]
9384dc16a1f2c3022f50f2e1ce18a28204baaef7Mark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉 added a regression test to check it. [RT #20007]
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉2640. [security] A specially crafted update packet will cause named
72dbc7216aae3626a66e6154443be219f5edcaf0Mark Andrews to exit. [RT #20000]
72dbc7216aae3626a66e6154443be219f5edcaf0Mark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
ca23cf7e28b9799436c9950ea269953e29dfde16Evan Hunt2638. [bug] Install arpaname. [RT #19957]
a142972ea9697b4ecaa5587fb6d9057e821d5339Tatuya JINMEI 神明達哉2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews2636. [func] Simplify zone signing and key maintenance with the
d0e7c8712f25fff65f10d70dba519e9cacc4cc8fMark Andrews dnssec-* tools. Major changes:
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews - all dnssec-* tools now take a -K option to
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt specify a directory in which key files will be
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt - DNSSEC can now store metadata indicating when
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt they are scheduled to be published, activated,
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt revoked or removed; these values can be set by
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews dnssec-keygen or overwritten by the new
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews dnssec-settime command
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews - dnssec-signzone -S (for "smart") option reads key
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews metadata and uses it to determine automatically
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews which keys to publish to the zone, use for
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt signing, revoke, or remove from the zone
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt2634. [port] win32: Add support for libxml2, enable
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt statschannel. [RT #19773]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt2633. [bug] Handle 15 bit rand() functions. [RT #19783]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt2632. [func] util/kit.sh: warn if documentation appears to be out of
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews date. [RT #19922]
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews [RT #19926 ]
d36ba0f0caa64111a9a3236944f730dfb3fe5245Mark Andrews2630. [func] Improved syntax for DDNS autoconfiguration: use
d36ba0f0caa64111a9a3236944f730dfb3fe5245Mark Andrews "update-policy local;" to switch on local DDNS in a
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt zone. (The "ddns-autoconf" option has been removed.)
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt2629. [port] Check for seteuid()/setegid(), use setresuid()/
b3ea72e4d1c78791b807f03ea5c26e1b762d701fMark Andrews setresgid() if not present. [RT #19932]
dfa3ca995c99e66ab56e98da79e386bcdb23c43aMark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews at startup with reduced capabilities in operation.
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews2627. [bug] Named aborted if the same key was included in
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews trusted-keys more than once. [RT #19918]
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt2626. [bug] Multiple trusted-keys could trigger an assertion
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt failure. [RT #19914]
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews2624. [func] 'named-checkconf -p' will print out the parsed
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews configuration. [RT #18871]
549e34bbf4f3c5df10a8ff5b648ac6b6dbe98a0fMark Andrews2623. [bug] Named started searches for DS non-optimally. [RT #19915]
499fa72075c050391b4d051f593d295670d27983Mark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
967a70944d6b1902d30919baa1c4f6faf77bbfaeMark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
00c8156b24a3a80edf855190eabb8ac14ce9cc9cJeremy Reed2620. [bug] Delay thawing the zone until the reload of it has
3464fafb9ff13e3212c568b645194bf138504fe6Jeremy Reed completed successfully. [RT #19750]
4bf9fe787e9cb3085391a0560c36726eda9ac2d1Mark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
6db1357c34f26079dc2516b02d712df228e3db99Jeremy Reed maintenance. The new "managed-keys" statement can
4bf9fe787e9cb3085391a0560c36726eda9ac2d1Mark Andrews be used in place of "trusted-keys" for zones which
0f39e477c54929f3da65b083b4e3c8500ac8152eMark Andrews support this protocol. (Note: this syntax is
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews loop infinitely. [RT #19847]
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews2617. [bug] ifconfig.sh failed to emit an error message when
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews run from the wrong location. [RT #19375]
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews when a explicit nameserver was specified. [RT #19852]
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews2615. [bug] "__attribute__((unused))" was in the wrong place
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews for ia64 gcc builds. [RT #19854]
56907aff69cabc391e672d360c88cb1856a839efMark Andrews2614. [port] win32: 'named -v' should automatically be executed
598da901aba066208ab57ef5a44661f00f6c7dc6Mark Andrews in the foreground. [RT #19844]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2613. [placeholder]
cac4576405a48a84f3c4d5de0ffa28a865a13309Mark Andrews --- 9.7.0a1 released ---
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews2612. [func] Add default values for the arguments to
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews dnssec-keygen. Without arguments, it will now
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews generate a 1024-bit RSASHA1 zone-signing key,
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews or with the -f KSK option, a 2048-bit RSASHA1
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews key-signing key. [RT #19300]
45c3c12ed3415e5cce50d73a735034e32aed1f73Mark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
45c3c12ed3415e5cce50d73a735034e32aed1f73Mark Andrews DLV records instead of DS records. [RT #19300]
692ce6c31351481644ce6167cb66edaff68cd493Mark Andrews2610. [port] sunos: Change #2363 was not complete. [RT #19796]
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews2609. [func] Simplify the configuration of dynamic zones:
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews - add ddns-confgen command to generate
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews configuration text for named.conf
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews - add zone option "ddns-autoconf yes;", which
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews causes named to generate a TSIG session key
b663e99af61e032273bdffa2f8d26de539ae6930Mark Andrews and allow updates to the zone using that key
b663e99af61e032273bdffa2f8d26de539ae6930Mark Andrews - add '-l' (localhost) option to nsupdate, which
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉 causes nsupdate to connect to a locally-running
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉 named process using the session key generated
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont2608. [func] Perform post signing verification checks in
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont dnssec-signzone. These can be disabled with -P.
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont The post sign verification test ensures that for each
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed algorithm in use there is at least one non revoked
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed self signed KSK key. That all revoked KSK keys are
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed self signed. That all records in the zone are signed
5d0984f4fd3133c869b0736adb5291e6fca34a0cTatuya JINMEI 神明達哉 by the algorithm. [RT #19653]
c349441d7e47a30e81726967b2398289225ebd45Mark Andrews2607. [bug] named could incorrectly delete NSEC3 records for
c349441d7e47a30e81726967b2398289225ebd45Mark Andrews empty nodes when processing a update request.
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews2606. [bug] "delegation-only" was not being accepted in
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews delegation-only type zones. [RT #19717]
53cd44e7168acb379b1c5c74b3ffc4336694779dMark Andrews2605. [bug] Accept DS responses from delegation only zones.
53cd44e7168acb379b1c5c74b3ffc4336694779dMark Andrews [RT # 19296]
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews2604. [func] Add support for DNS rebinding attack prevention through
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews new options, deny-answer-addresses and
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 deny-answer-aliases. Based on contributed code from
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 JD Nurmi, Google. [RT #18192]
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉2603. [port] win32: handle .exe extension of named-checkzone and
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 named-comilezone argv[0] names under windows.
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews2602. [port] win32: fix debugging command line build of libisccfg.
e8a534049cea42ecf07113e88645cea2bd12d850Mark Andrews2601. [doc] Mention file creation mode mask in the
00f83773169d9020a3ddcdaf88b198a27f571ff8Mark Andrews named manual page.
10e8f96abe072fcf4e0c938548f0970cd26f624cMark Andrews2600. [doc] ARM: miscellaneous reformatting for different
03ccae042b4acd22805d667f823066d3690965cfMark Andrews page widths. [RT #19574]
5567f54834089be35d0df6afe2ccfaa039ab2233Jeremy Reed2599. [bug] Address rapid memory growth when validation fails.
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews2598. [func] Reserve the -F flag. [RT #19657]
13f4bdc9b4f7b438cf5c2a071f108211534fae3fMark Andrews2597. [bug] Handle a validation failure with a insecure delegation
13f4bdc9b4f7b438cf5c2a071f108211534fae3fMark Andrews from a NSEC3 signed master/slave zone. [RT #19464]
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews long, leading to inefficient memory usage or rejecting
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews newer cache entries in the worst case. [RT #19563]
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2594. [func] Have rndc warn if using its default configuration
a8673c536b5827d87ef6c50a04afd34af2253fd9Evan Hunt file when the key file also exists. [RT #19424]
616b4544d0228604b1c5169b0c9d742f67567232Tatuya JINMEI 神明達哉2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
bc4bc3579b92f2e4c6a6a2c5284d1c792c70e264Tatuya JINMEI 神明達哉2591. [bug] named could die when processing a update in
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 removed_orphaned_ds(). [RT #19507]
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉2590. [func] Report zone/class of "update with no effect".
1879dbe0d962f6f929417b02bf07f64ed41b1aabFrancis Dupont2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont2588. [bug] SO_REUSEADDR could be set unconditionally after failure
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont of bind(2) call. This should be rare and mostly
fa7ef31685393f7c7ba1cec485d8e395bfa28867Francis Dupont harmless, but may cause interference with other
52cee51063613b9be335d3078f13863fd0cad2cfMark Andrews processes that happen to use the same port. [RT #19642]
ddb35cf2f301ae1c3fa601792034f6d349efc8c5Mark Andrews2587. [func] Improve logging by reporting serial numbers for
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉 when zone serial has gone backwards or unchanged.
09d7358c48bb032566e5bb70703c2c3ea35a0cb2Mark Andrews2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 or SDB. [RT #19577]
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉2585. [bug] Uninitialized socket name could be referenced via a
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 statistics channel, triggering an assertion failure in
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews XML rendering. [RT #19427]
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉2583. [port] netbsd: provide a control to not add the compile
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉 date to the version string, -DNO_VERSION_DATE.
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉2582. [bug] Don't emit warning log message when we attempt to
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉 remove non-existent journal. [RT #19516]
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews Requires MySQL 5.0.19 or later. [RT #19084]
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉2580. [bug] UpdateRej statistics counter could be incremented twice
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉 for one rejection. [RT #19476]
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉2579. [bug] DNSSEC lookaside validation failed to handle unknown
24450ad58d545e165c051fff24b320118fc00350Mark Andrews algorithms. [RT #19479]
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews 65535 turns out to be reserved. [RT #19477]
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews2577. [doc] Clarified some statistics counters. [RT #19454]
b06e03490604f5d9b590dad143e65d533918481bMark Andrews2576. [bug] NSEC record were not being correctly signed when
b06e03490604f5d9b590dad143e65d533918481bMark Andrews a zone transitions from insecure to secure.
8684cd3a6f1437a3c1ff6ca852e1db6d40ce6303Mark Andrews Handle such incorrectly signed zones. [RT #19114]
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews2575. [func] New functions dns_name_fromstring() and
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews dns_name_tostring(), to simplify conversion
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 of a string to a dns_name structure and vice
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 versa. [RT #19451]
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews2574. [doc] Document nsupdate -g and -o. [RT #19351]
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews2573. [bug] Replacing a non-CNAME record with a CNAME record in a
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews single transaction in a signed zone failed. [RT #19397]
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews2572. [func] Simplify DLV configuration, with a new option
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews "dnssec-lookaside auto;" This is the equivalent
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews of "dnssec-lookaside . trust-anchor dlv.isc.org;"
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews plus setting a trusted-key for dlv.isc.org.
d8fc8514b117e636b791bef429d64a7c7a75a4cfMark Andrews Note: The trusted key is hard-coded into named,
9935447b51456f598b45246d0114b8006049244dMark Andrews but is also stored in (and can be overridden
9935447b51456f598b45246d0114b8006049244dMark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
9935447b51456f598b45246d0114b8006049244dMark Andrews rolls over it can be kept up to date by replacing
175a8bd2b798bbc568cd912b72c8a026cfca8527Mark Andrews the bind.keys file with a key downloaded from
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews2571. [func] Add a new tool "arpaname" which translates IP addresses
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
4e59e2e59b17c4e30eef801929bca91800be833eFrancis Dupont2570. [func] Log the destination address the query was sent to.
9019569316e39087410336bb76c02bf185974fe3Mark Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews "make install" will put them in $sbindir. [RT #19301]
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews2568. [bug] Report when the write to indicate a otherwise
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 successful start fails. [RT #19360]
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉2567. [bug] dst__privstruct_writefile() could miss write errors.
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 write_public_key() could miss write errors.
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 dnssec-dsfromkey could miss write errors.
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews response arrives from a zone thought to be secure:
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews "insecurity proof failed" instead of "not
50df1ec60af410fca6b7a85d5c85e8f31bb13bc3Mark Andrews insecure". [RT #19400]
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews2565. [func] Add support for HIP record. Includes new functions
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews and dns_rdata_hip_current(). [RT #19384]
ef4eed2a2a8897bd4e5b19dd94f638e0861ebda5Mark Andrews2564. [bug] Only take EDNS fallback steps when processing timeouts.
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews to exit. [RT #19359]
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews and some new content.
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉2559. [bug] dnssec-dsfromkey could compute bad DS records when
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 reading from a K* files. [RT #19357]
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉2558. [func] Set the ownership of missing directories created
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 for pid-file if -u has been specified on the command
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews line. [RT #19328]
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews2557. [cleanup] PCI compliance:
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews * new libisc log module file
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews * isc_dir_chroot() now also changes the working
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews directory to "/".
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews * additional INSISTs
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews * additional logging when files can't be removed.
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews error checks in the correct order resulting in the
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews wrong error code sometimes being returned. [RT #19249]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews2555. [func] dig: when emitting a hex dump also display the
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews corresponding characters. [RT #19258]
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews fail. [RT #19297]
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honored.
bc3b1dbd69840bd7f2f0b6af2610603f334b369bFrancis Dupont2551. [bug] Potential Reference leak on return. [RT #19341]
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews2548. [bug] Install iterated_hash.h. [RT #19335]
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews2547. [bug] openssl_link.c:mem_realloc() could reference an
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed out-of-range area of the source buffer. New public
e597f9f376d79c8962f2373d4eb98a441e6c70caMark Andrews function isc_mem_reallocate() was introduced to address
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed this bug. [RT #19313]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2546. [func] Add --enable-openssl-hash configure flag to use
9d02618ca6b4d2e1737ba441449f61c1f04be685Mark Andrews OpenSSL (in place of internal routine) for hash
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews functions (MD5, SHA[12] and HMAC). [RT #18815]
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed for SRV RDATA too. [RT #19304]
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
275b170cc47c897d25204fe23169dac810283f79Mark Andrews2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt2542. [doc] Update the description of dig +adflag. [RT #19290]
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt2541. [bug] Conditionally update dispatch manager statistics.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews2539. [security] Update the interaction between recursion, allow-query,
7ca0cdd7ecff4c0396970ed957df7d5d8c639abfMark Andrews allow-query-cache and allow-recursion. [RT #19198]
7ca0cdd7ecff4c0396970ed957df7d5d8c639abfMark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
275b170cc47c897d25204fe23169dac810283f79Mark Andrews especially with threads and smaller max-cache-size
455ada05af05e39cdeb63297d60d36a0eca062e1Mark Andrews values. [RT #19240]
0d444dc136a1a8df89a329d7ad43c74e1db8dfbeMark Andrews2537. [func] Added more statistics counters including those on socket
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt I/O events and query RTT histograms. [RT #18802]
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews2536. [cleanup] Silence some warnings when -Werror=format-security is
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews specified. [RT #19083]
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉2534. [func] Check NAPTR records regular expressions and
b05585dcfe270c40e309ff7304cf6b69d7390bdaTatuya JINMEI 神明達哉 replacement strings to ensure they are syntactically
b05585dcfe270c40e309ff7304cf6b69d7390bdaTatuya JINMEI 神明達哉 valid and consistent. [RT #18168]
1f030ca8a3df943d8016cac39bc3018f5952126aJeremy Reed2533. [doc] ARM: document @ (at-sign). [RT #17144]
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews2532. [bug] dig: check the question section of the response to
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews see if it matches the asked question. [RT #18495]
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews2531. [bug] Change #2207 was incomplete. [RT #19098]
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews2530. [bug] named failed to reject insecure to secure transitions
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews via UPDATE. [RT #19101]
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews2529. [cleanup] Upgrade libtool to silence complaints from recent
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews version of autoconf. [RT #18657]
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews2528. [cleanup] Silence spurious configure warning about
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews --datarootdir [RT #19096]
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed2527. [placeholder]
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed2526. [func] New named option "attach-cache" that allows multiple
99a522dad7623549cd5e32a4968e6de8eca46ff1Mark Andrews views to share a single cache to save memory and
99a522dad7623549cd5e32a4968e6de8eca46ff1Mark Andrews improve lookup efficiency. Based on contributed code
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews from Barclay Osborn, Google. [RT #18905]
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews2525. [func] New logging category "query-errors" to provide detailed
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews internal information about query failures, especially
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews about server failures. [RT #19027]
cd6555930b6829ebce8bbf2adc7ba05111edf595Mark Andrews2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉2523. [bug] Random type rdata freed by dns_nsec_typepresent().
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉2521. [bug] Improve epoll cross compilation support. [RT #19047]
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt2520. [bug] Update xml statistics version number to 2.0 as change
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt #2388 made the schema incompatible to the previous
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews version. [RT #19080]
eab4a5c29ddda688d975ad59a55a965b16534432Mark Andrews2519. [bug] dig/host with -4 or -6 didn't work if more than two
eab4a5c29ddda688d975ad59a55a965b16534432Mark Andrews nameserver addresses of the excluded address family
21d493fc392d472086ad3c7c4563b7cadcb06788Mark Andrews preceded in resolv.conf. [RT #19081]
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews2518. [func] Add support for the new CERT types from RFC 4398.
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews2517. [bug] dig +trace with -4 or -6 failed when it chose a
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews nameserver address of the excluded address type.
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed2516. [bug] glue sort for responses was performed even when not
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed needed. [RT #19039]
143852efc066b3e3cd16eeec679016adbd450474Mark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
275b170cc47c897d25204fe23169dac810283f79Mark Andrews a nameserver of the excluded address family.
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉2513. [bug] Fix windows cli build. [RT #19062]
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉2512. [func] Print a summary of the cached records which make up
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews the negative response. [RT #18885]
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
c6c09f77f85860b6e084b0daad066ded08729b3eMark Andrews2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff2509. [bug] Specifying a fixed query source port was broken.
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff2508. [placeholder]
896f88361ec8a15a20688eb533a65977ee698974Mark Andrews2507. [func] Log the recursion quota values when killing the
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews oldest query or refusing to recurse due to quota.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2506. [port] solaris: Check at configure time if
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt hack_shutup_pthreadonceinit is needed. [RT #19037]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt atomic operation support. [RT #19031]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2504. [bug] Address race condition in the socket code. [RT #18899]
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt2503. [port] linux: improve compatibility with Linux Standard
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt Base. [RT #18793]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews2502. [cleanup] isc_radix: Improve compliance with coding style,
b247f77228f00e16dd43b4d570ad0fb15e88f3edMark Andrews document function in <isc/radix.h>. [RT #18534]
aeadcd63196f164b219629a53c0e0925519288f3Evan Hunt2501. [func] $GENERATE now supports all rdata types. Multi-field
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews rdata types need to be quoted. See the ARM for
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews details. [RT #18368]
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews function. [RT #18582]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
275b170cc47c897d25204fe23169dac810283f79Mark Andrews --- 9.6.0rc1 released ---
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews2498. [bug] Removed a bogus function argument used with
36440d1ec6cf1ff0cbb0b5b2fb39423e4e0bd450Evan Hunt ISC_SOCKET_USE_POLLWATCH: it could cause compiler
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews warning or crash named with the debug 1 level
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews of logging. [RT #18917]
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews2496. [bug] Add sanity length checks to NSID option. [RT #18813]
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews installed. [RT #18826]
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews2493. [bug] The linux capabilities code was not correctly cleaning
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews up after itself. [RT #18767]
275b170cc47c897d25204fe23169dac810283f79Mark Andrews2492. [func] Rndc status now reports the number of cpus discovered
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews and the number of worker threads when running
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews multi-threaded. [RT #18273]
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉2491. [func] Attempt to re-use a local port if we are already using
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉 the port. [RT #18548]
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews is cleared when IPV6_V6ONLY is set. [RT #18785]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2489. [port] solaris: Workaround Solaris's kernel bug about
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews Define ISC_SOCKET_USE_POLLWATCH at build time to enable
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews this workaround. [RT #18870]
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt from keyset and .key files. [RT #18694]
1bfe8851c0a2eb1d7e15556bfa21291cd62ee2bcMark Andrews2487. [bug] Give TCP connections longer to complete. [RT #18675]
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉2486. [func] The default locations for named.pid and lwresd.pid
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews This allows the owner of the containing directory
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed to be set, for "named -u" support, and allows there
275b170cc47c897d25204fe23169dac810283f79Mark Andrews to be a permanent symbolic link in the path, for
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews "named -t" support. [RT #18306]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews2485. [bug] Change update's the handling of obscured RRSIG
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt records. Not all orphaned DS records were being
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews removed. [RT #18828]
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews2484. [bug] It was possible to trigger a REQUIRE failure when
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews adding NSEC3 proofs to the response in
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉 query_addwildcardproof(). [RT #18828]
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉2483. [port] win32: chroot() is not supported. [RT #18805]
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉2482. [port] libxml2: support versions 2.7.* in addition
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 to 2.6.*. [RT #18806]
cf225ed6cd51f9acc901a60520a9368e14224a4dTatuya JINMEI 神明達哉 --- 9.6.0b1 released ---
cf225ed6cd51f9acc901a60520a9368e14224a4dTatuya JINMEI 神明達哉2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉 collisions. [RT #18812]
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉2480. [bug] named could fail to emit all the required NSEC3
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉 records. [RT #18812]
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
387bca7a55c0581dc36edb4a5071cb5e1d1c34f6Tatuya JINMEI 神明達哉2478. [bug] 'addresses' could be used uninitialized in
387bca7a55c0581dc36edb4a5071cb5e1d1c34f6Tatuya JINMEI 神明達哉 configure_forward(). [RT #18800]
dc842cdcb946b3f89448f07a9f024497a50c216aMark Andrews2477. [bug] dig: the global option to print the command line is
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉 +cmd not print_cmd. Update the output to reflect
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉 this. [RT #17008]
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉2476. [doc] ARM: improve documentation for max-journal-size and
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉 ixfr-from-differences. [RT #15909] [RT #18541]
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉2475. [bug] LRU cache cleanup under overmem condition could purge
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉 particular entries more aggressively. [RT #17628]
04115a59c176759177545c72376e844e10dc557cMark Andrews2474. [bug] ACL structures could be allocated with insufficient
b1f7d25ee1792838aa5e5d81f4433b474d4565a2Mark Andrews space, causing an array overrun. [RT #18765]
4db36a15c5716050d40aa8e709e8c8e9475ea25bMark Andrews2473. [port] linux: raise the limit on open files to the possible
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 maximum value before spawning threads; 'files'
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 specified in named.conf doesn't seem to work with
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 threads as expected. [RT #18784]
146484aced3e6c1b9cc88db5e75b8cbfd166f701Mark Andrews2472. [port] linux: check the number of available cpu's before
146484aced3e6c1b9cc88db5e75b8cbfd166f701Mark Andrews calling chroot as it depends on "/proc". [RT #16923]
dbe9f900ecbefb34e960b69b41b9ecde36e0a256Tatuya JINMEI 神明達哉2471. [bug] named-checkzone was not reporting missing mandatory
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews glue when sibling checks were disabled. [RT #18768]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2470. [bug] Elements of the isc_radix_node_t could be incorrectly
e43b095921450c34288cadc3406f49c84a0e4d46Evan Hunt overwritten. [RT #18719]
7999db4215b9398d4598ac0156ff097cda40402bMark Andrews2469. [port] solaris: Work around Solaris's select() limitations.
cbb8a1b7cbab933795ddee4f05f4eb5074a68e6cFrancis Dupont2468. [bug] Resolver could try unreachable servers multiple times.
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
09477e188f874c8c43a90f050733b114385992dcTatuya JINMEI 神明達哉2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
05b8187cb3cf03fbd75af1afdacc4aefb373e37bTatuya JINMEI 神明達哉2465. [bug] Adb's handling of lame addresses was different
05b8187cb3cf03fbd75af1afdacc4aefb373e37bTatuya JINMEI 神明達哉 for IPv4 and IPv6. [RT #18738]
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews2464. [port] linux: check that a capability is present before
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews trying to set it. [RT #18135]
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews API and glibc hides parts of the IPv6 Advanced Socket
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews API as a result. This is stupid as it breaks how the
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews two halves (Basic and Advanced) of the IPv6 Socket API
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews were designed to be used but we have to live with it.
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews API. [RT #18388]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont2462. [doc] Document -m (enable memory usage debugging)
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont option for dig. [RT #18757]
2ca30c1774245f3aa7e8a1f3781cb965152373d8Evan Hunt2461. [port] sunos: Change #2363 was not complete. [RT #17513]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont --- 9.6.0a1 released ---
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
3d8b9b9956b64aba0d105f955ac0354fbcf5baa9Tatuya JINMEI 神明達哉2458. [doc] ARM: update and correction for max-cache-size.
2f76108082f11d4979048f1c22602391c5733c88Tatuya JINMEI 神明達哉2457. [tuning] max-cache-size is reverted to 0, the previous
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt default. It should be safe because expired cache
c6678b68efae57ecaec97f489f6d9104f85ed0a8Mark Andrews entries are also purged. [RT #18684]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 address, regardless of family. They now correctly
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 distinguish IPv4 from IPv6. [RT #18559]
d923262186a3111a6ac7aae5dcd9996e01115a44Mark Andrews2455. [bug] Stop metadata being transferred via axfr/ixfr.
f92c897cb69fbb8b7400a5df93271b0743fe9adeTatuya JINMEI 神明達哉2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉2453. [bug] Remove NULL pointer dereference in dns_journal_print().
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉2452. [func] Improve bin/test/journalprint. [RT #18316]
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉2451. [port] solaris: handle runtime linking better. [RT #18356]
0f39ff74a85e16cbfd30354e24403b1ee50e1104Tatuya JINMEI 神明達哉2450. [doc] Fix lwresd docbook problem for manual page.
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews2449. [placeholder]
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews2448. [func] Add NSEC3 support. [RT #15452]
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews2447. [cleanup] libbind has been split out as a separate product.
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews2446. [func] Add a new log message about build options on startup.
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews A new command-line option '-V' for named is also
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews provided to show this information. [RT #18645]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2445. [doc] ARM out-of-date on empty reverse zones (list includes
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews RFC1918 address, but these are not yet compiled in).
250dcb4cf5c356bb492c849edff5fe3c81f61f77Tatuya JINMEI 神明達哉2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 (clear DF) for UDP responses and requests.
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉2443. [bug] win32: UDP connect() would not generate an event,
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews and so connected UDP sockets would never clean up.
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews Fix this by doing an immediate WSAConnect() rather
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews than an io completion port type for UDP.
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉2442. [bug] A lock could be destroyed twice. [RT #18626]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews2441. [bug] isc_radix_insert() could copy radix tree nodes
080a964a3f0622f2e343f114aa1cc066372c06caEvan Hunt incompletely. [RT #18573]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews2440. [bug] named-checkconf used an incorrect test to determine
5a17fe2916ce37793c12b243ab08c16095a59cf7Evan Hunt if an ACL was set to none.
d230b29aba3ce1d0362194801c34321ed22f5aa5Evan Hunt2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews2438. [bug] Timeouts could be logged incorrectly under win32.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews2437. [bug] Sockets could be closed too early, leading to
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews inconsistent states in the socket module. [RT #18298]
e1aeb1569a0ae08c97dd76acb00376e4246e59b8Mark Andrews2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
e1aeb1569a0ae08c97dd76acb00376e4246e59b8Mark Andrews2435. [bug] Fixed an ACL memory leak affecting win32.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt2434. [bug] Fixed a minor error-reporting bug in
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews2433. [tuning] Set initial timeout to 800ms.
816496b22114ee7c2c15321c2c6cc4be77fdf822Mark Andrews2432. [bug] More Windows socket handling improvements. Stop
816496b22114ee7c2c15321c2c6cc4be77fdf822Mark Andrews using I/O events and use IO Completion Ports
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews throughout. Rewrite the receive path logic to make
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews it easier to support multiple simultaneous
28ad0be64ee756013c0f6a474fc447ee613ee0d1Evan Hunt requesters in the future. Add stricter consistency
229442301442890aee044a0df54d3787acd68e65Mark Andrews checking as a compile-time option (define
229442301442890aee044a0df54d3787acd68e65Mark Andrews ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
8b56b8956fc1e6c70efacb4f71db28d0d1f0c577Mark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
8b56b8956fc1e6c70efacb4f71db28d0d1f0c577Mark Andrews2430. [bug] win32: isc_interval_set() could round down to
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews zero if the input was less than NS_INTERVAL
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews nanoseconds. Round up instead. [RT #18549]
2284b84d74cdfd62ecb962feb850de981bbc2196Evan Hunt2429. [doc] nsupdate should be in section 1 of the man pages.
bf64a0d5d9469c42622401bc5d55cf9888eeef44Tatuya JINMEI 神明達哉2428. [bug] dns_iptable_merge() mishandled merges of negative
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff tables. [RT #18409]
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
375e2c913a21cb852310418785f359a6b21b851dMark Andrews was set. [RT #18528]
52cb865cf00db3437c33b57de0a17c807f9ba67eMark Andrews2426. [bug] libbind: inet_net_pton() can sometimes return the
52cb865cf00db3437c33b57de0a17c807f9ba67eMark Andrews wrong value if excessively large net masks are
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews supplied. [RT #18512]
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews2425. [bug] named didn't detect unavailable query source addresses
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews at load time. [RT #18536]
c4fadc88619959582ac89b841c489be0519ae79dTatuya JINMEI 神明達哉2424. [port] configure now probes for a working epoll
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews implementation. Allow the use of kqueue,
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews epoll and /dev/poll to be selected at compile
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews time. [RT #18277]
d904beeb3bf62d60e25f76e1ac9c4b78278c14edMark Andrews2423. [security] Randomize server selection on queries, so as to
d904beeb3bf62d60e25f76e1ac9c4b78278c14edMark Andrews make forgery a little more difficult. Instead of
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews always preferring the server with the lowest RTT,
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews pick a server with RTT within the same 128
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews millisecond band. [RT #18441]
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews2422. [bug] Handle the special return value of a empty node as
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews if it was a NXRRSET in the validator. [RT #18447]
887ef2682c6f66f9dcd6604c4ccf8f87894ef2a9Mark Andrews2421. [func] Add new command line option '-S' for named to specify
887ef2682c6f66f9dcd6604c4ccf8f87894ef2a9Mark Andrews the max number of sockets. [RT #18493]
420ed91d3ed516bc9d5edf2e942ae792d17d11b4Mark Andrews Use caution: this option may not work for some
420ed91d3ed516bc9d5edf2e942ae792d17d11b4Mark Andrews operating systems without rebuilding named.
07555e64d9102eae058efd58f872b4a3b9ddff61Mark Andrews2420. [bug] Windows socket handling cleanup. Let the io
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews completion event send out canceled read/write
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews done events, which keeps us from writing to memory
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews we no longer have ownership of. Add debugging
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont socket_log() function. Rework TCP socket handling
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont to not leak sockets.
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews should not be used for isc_sockettype_fdwatch sockets.
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
cffe96e26744abcf33494837b234219046a631d8Mark Andrews2417. [bug] Connecting UDP sockets for outgoing queries could
cffe96e26744abcf33494837b234219046a631d8Mark Andrews unexpectedly fail with an 'address already in use'
cffe96e26744abcf33494837b234219046a631d8Mark Andrews error. [RT #18411]
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews2416. [func] Log file descriptors that cause exceeding the
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews internal maximum. [RT #18460]
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews2415. [bug] 'rndc dumpdb' could trigger various assertion failures
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews in rbtdb.c. [RT #18455]
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉2414. [bug] A masterdump context held the database lock too long,
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉 causing various troubles such as dead lock and
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉 recursive lock acquisition. [RT #18311, #18456]
ea8564f68adbacd904e55e47668fe1bbf65ddd1dMark Andrews2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews2412. [bug] win32: address a resource leak. [RT #18374]
d9936b218d9d0fd7c6a1a418e5b91b356190ea12Mark Andrews2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
d9936b218d9d0fd7c6a1a418e5b91b356190ea12Mark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
4074b8e7342618ff38ffe3773a2699ee1734f1adMark Andrews at compilation time. [RT #18433]
0283e511317cae3785a9d48e236289a234a25368Mark Andrews Note: with changes #2469 and #2421 above, there is no
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
016c4317500eb565b82b27d00ba6b621c6e29110Mark Andrews2410. [bug] Correctly delete m_versionInfo. [RT #18432]
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews2409. [bug] Only log that we disabled EDNS processing if we were
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews subsequently successful. [RT #18029]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2408. [bug] A duplicate TCP dispatch event could be sent, which
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews could then trigger an assertion failure in
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews resquery_response(). [RT #18275]
0e30609d7b3e31e3ff249d185041b9140b5410baMark Andrews2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews2406. [placeholder]
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews2405. [cleanup] The default value for dnssec-validation was changed to
3cff31d890bf0815b6b2c7603d1e5c37dc3f26b7Mark Andrews "yes" in 9.5.0-P1 and all subsequent releases; this
3cff31d890bf0815b6b2c7603d1e5c37dc3f26b7Mark Andrews was inadvertently omitted from CHANGES at the time.
aef875b27e94586a1f3644d53705e6f5ea4b5dafMark Andrews2404. [port] hpux: files unlimited support.
c09c2bf800ba0f5e6efe6b47ba72f43e4a61ca7dMark Andrews2403. [bug] TSIG context leak. [RT #18341]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews2402. [port] Support Solaris 2.11 and over. [RT #18362]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews2401. [bug] Expect to get E[MN]FILE errno internal_accept()
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews (from accept() or fcntl() system calls). [RT #18358]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
c368f28dad471c70213b41f7a0ad1b4ef4d8c543Mark Andrews2399. [placeholder]
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews2398. [bug] Improve file descriptor management. New,
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews temporary, named.conf option reserved-sockets,
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews default 512. [RT #18344]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2397. [bug] gssapi_functions had too many elements. [RT #18355]
9dcc44d7b309b61e89083807d47af471ec6bae1fMark Andrews2396. [bug] Don't set SO_REUSEADDR for randomized ports.
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews2395. [port] Avoid warning and no effect from "files unlimited"
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews on Linux when running as root. [RT #18335]
2005c3b37bb39a37dc0b034bb2149006df7e3759Mark Andrews2394. [bug] Default configuration options set the limit for
1fa2ce7eaef0c17d554495220565b681639b2ce5Mark Andrews open files to 'unlimited' as described in the
7539c231d47677250008737b0691f9518111f3f5Mark Andrews documentation. [RT #18331]
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉2393. [bug] nested acls containing keys could trigger an
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉 assertion in acl.c. [RT #18166]
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews2392. [bug] remove 'grep -q' from acl test script, some platforms
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews don't support it. [RT #18253]
1c3ed2a83d176d9023b51b60dfc96c133f678362Tatuya JINMEI 神明達哉2391. [port] hpux: cover additional recvmsg() error codes.
fc53f564caa9d40f4b73a2808260b1dc07e86fddEvan Hunt2390. [bug] dispatch.c could make a false warning on 'odd socket'.
e951a79d901cc9b72a4882c38f02b568eed6bf24Mark Andrews [RT #18301].
a59640bf27db16e02e01484297e36b7456e163bbMark Andrews2389. [bug] Move the "working directory writable" check to after
4462e590791925b6a5efceacbff054a6b5fe35edMark Andrews the ns_os_changeuser() call. [RT #18326]
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews2388. [bug] Avoid using tables for layout purposes in
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews statistics XSL [RT #18159].
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews [RT #18147] [RT #18258]
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews2386. [func] Add warning about too small 'open files' limit.
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews2385. [bug] A condition variable in socket.c could leak in
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews rare error handling [RT #17968].
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews2384. [security] Fully randomize UDP query ports to improve
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews forgery resilience. [RT #17949, #18098]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2383. [bug] named could double queries when they resulted in
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews SERVFAIL due to overkilling EDNS0 failure detection.
b1e32169ac5cf21fca540fa122a546db71090491Mark Andrews2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2381. [port] dlz/mysql: support multiple install layouts for
1aba9fe67899522364a9dbc3ee5a14da081f0314Evan Hunt mysql. <prefix>/include/{,mysql/}mysql.h and
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews <prefix>/lib/{,mysql/}. [RT #18152]
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
6c7f722d31d12cf83964c8132f0a59ef70e34cb5Mark Andrews proofs which, in turn, caused validation failures
6c7f722d31d12cf83964c8132f0a59ef70e34cb5Mark Andrews for insecure zones immediately below a secure zone
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews the server was authoritative for. [RT #18112]
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
fcdafc1e30dd4d10184b56201ea2fc3bab711e5eMark Andrews TLDs and supported RRs with TTLs [RT #17972]
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews2376. [bug] Change #2144 was not complete.
efb3fa669f00ccfd9aada997b426616b6b0ce044Mark Andrews2375. [placeholder]
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews2374. [bug] "blackhole" ACLs could cause named to segfault due
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews to some uninitialized memory. [RT #18095]
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews2373. [bug] Default values of zone ACLs were re-parsed each time a
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews new zone was configured, causing an overconsumption
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews of memory. [RT #18092]
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews2370. [bug] "rndc freeze" could trigger an assertion in named
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews when called on a nonexistent zone. [RT #18050]
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews2369. [bug] libbind: Array bounds overrun on read in bitncmp().
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews2368. [port] Linux: use libcap for capability management if
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews possible. [RT #18026]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉2367. [bug] Improve counting of dns_resstatscounter_retry
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉2366. [bug] Adb shutdown race. [RT #18021]
20837e74f5e68a8108c25bb341a3ef1c1ca22711Tatuya JINMEI 神明達哉2365. [bug] Fix a bug that caused dns_acl_isany() to return
1c9f629c181dfd14bb429a6699d22c3c023aa218Mark Andrews spurious results. [RT #18000]
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews2364. [bug] named could trigger a assertion when serving a
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews malformed signed zone. [RT #17828]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews2362. [cleanup] Make "rrset-order fixed" a compile-time option.
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews settable by "./configure --enable-fixed-rrset".
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews Disabled by default. [RT #17977]
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews2361. [bug] "recursion" statistics counter could be counted
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews multiple times for a single query. [RT #17990]
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews2360. [bug] Fix a condition where we release a database version
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews (which may acquire a lock) while holding the lock.
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews2359. [bug] Fix NSID bug. [RT #17942]
92f60809e854ccf5f115883c6347e370da048848Mark Andrews2358. [doc] Update host's default query description. [RT #17934]
92f60809e854ccf5f115883c6347e370da048848Mark Andrews2357. [port] Don't use OpenSSL's engine support in versions before
92f60809e854ccf5f115883c6347e370da048848Mark Andrews OpenSSL 0.9.7f. [RT #17922]
f5d0f495847eb4eb9f0058e73051f855800bee0bMark Andrews2356. [bug] Built in mutex profiler was not scalable enough.
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews2355. [func] Extend the number statistics counters available.
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews2353. [func] Add support for Name Server ID (RFC 5001).
114c14f8adfc249cf2e5cdcb9007af46fed257e3Mark Andrews 'dig +nsid' requests NSID from server.
604419a812b491cd35fb6fad129c3c39da7200a1Mark Andrews 'request-nsid yes;' causes recursive server to send
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews NSID requests to upstream servers. Server responds
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews to NSID requests with the string configured by
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews 'server-id' option. [RT #17091]
8c850a29eda020642c84038e449d60f124c6123bMark Andrews2352. [bug] Various GSS_API fixups. [RT #17729]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews2350. [port] win32: IPv6 support. [RT #17797]
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews2349. [func] Provide incremental re-signing support for secure
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews dynamic zones. [RT #1091]
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews Documentation is in the new README.pkcs11 file.
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews New tool, dnssec-keyfromlabel, which takes the
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt label of a key pair in a HSM and constructs a DNS
301f6ffbbeabcbf765f8163f4ffb7f6f0146b926Mark Andrews key pair for use by named and dnssec-signzone.
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews2347. [bug] Delete now traverses the RB tree in the canonical
28c49640dcb25102e5040b8d957edd905ddf82f8Mark Andrews order. [RT #17451]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2346. [func] Memory statistics now cover all active memory contexts
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt in increased detail. [RT #17580]
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews2345. [bug] named-checkconf failed to detect when forwarders
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews were set at both the options/view level and in
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews a root zone. [RT #17671]
a6f7fdcc039de75e9a20da90044caa814f0357a3Michael Graff2344. [bug] Improve "logging{ file ...; };" documentation.
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews2343. [bug] (Seemingly) duplicate IPv6 entries could be
7e8214191899dc8043babdfbe9235ba14c825005Mark Andrews created in ADB. [RT #17837]
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews2341. [bug] libbind: add missing -I../include for off source
9429f5a8318bd2142280c949d4af05998ca348a2Evan Hunt tree builds. [RT #17606]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2340. [port] openbsd: interface configuration. [RT #17700]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2339. [port] tru64: support for libbind. [RT #17589]
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews2338. [bug] check_ds() could be called with a non DS rdataset.
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews2336. [func] If "named -6" is specified then listen on all IPv6
544d0efa38490d67e458aa9c23a7dac2a9d546bfMark Andrews interfaces if there are not listen-on-v6 clauses in
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews2335. [port] sunos: libbind and *printf() support for long long.
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews bug in fromstruct_txt(). [RT #17609]
b6d496d53851e5ab5ba82e800062a431b05310cbEvan Hunt2333. [bug] Fix off by one error in isc_time_nowplusinterval().
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr2331. [bug] Failure to regenerate any signatures was not being
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews reported nor being past back to the UPDATE client.
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews2330. [bug] Remove potential race condition when handling
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews over memory events. [RT #17572]
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews WARNING: API CHANGE: over memory callback
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews function now needs to call isc_mem_waterack().
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews See <isc/mem.h> for details.
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews2329. [bug] Clearer help text for dig's '-x' and '-i' options.
03745451370778a867e46fdbe315eb958745a391Mark Andrews2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews2327. [bug] It was possible to dereference a NULL pointer in
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews rbtdb.c. Implement dead node processing in zones as
71f4918fd8a5ec4f0a05aac657b614fdf2467bebMark Andrews we do for caches. [RT #17312]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2326. [bug] It was possible to trigger a INSIST in the acache
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews2325. [port] Linux: use capset() function if available. [RT #17557]
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews2323. [port] tru64: namespace clash. [RT #17547]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2322. [port] MacOS: work around the limitation of setrlimit()
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews for RLIMIT_NOFILE. [RT #17526]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2321. [placeholder]
f2d8c4a4c3dfa212ddcf5b86d4c5fced4965e52eMark Andrews2320. [func] Make statistics counters thread-safe for platforms
f2d8c4a4c3dfa212ddcf5b86d4c5fced4965e52eMark Andrews that support certain atomic operations. [RT #17466]
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews2319. [bug] Silence Coverity warnings in
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews2318. [port] sunos fixes for libbind. [RT #17514]
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr2315. [bug] Used incorrect address family for mapped IPv4
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr addresses in acl.c. [RT #17519]
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews2314. [bug] Uninitialized memory use on error path in
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2313. [cleanup] Silence Coverity warnings. Handle private stacks.
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews [RT #17447] [RT #17478]
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews2311. [bug] IPv6 addresses could match IPv4 ACL entries and
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews vice versa. [RT #17462]
65391557db5d7dc725ed3f2b759248fea31a2445Mark Andrews2310. [bug] dig, host, nslookup: flush stdout before emitting
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews debug/fatal messages. [RT #17501]
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
1ca168b58e02fda534cad741a248e549e0f98d4dMark Andrews2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
de05f7d061abfe0ce555e0d0f2089f1261b031b6Mark Andrews2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2306. [bug] Remove potential race from lib/dns/resolver.c.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2305. [security] inet_network() buffer overflow. CVE-2008-0122.
c7e266b7e5675e12d1ca3cc929f24b3e86d41f8eEvan Hunt2304. [bug] Check returns from all dns_rdata_tostruct() calls.
85db2b5fb360ccd2aeec1e6e22336b3d654bb39aMark Andrews2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
709220567fb820cf7e7625925449dadf86317629Mark Andrews2301. [bug] Remove resource leak and fix error messages in
adc3f2c0fdcc0a2bee469ffb0e7ae41b83cbf403Mark Andrews2300. [bug] Fixed failure to close open file in
45deeddf4cf1ea57b8b493dcd2410f2332a36128Mark Andrews2299. [bug] Remove unnecessary NULL check in
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews2298. [bug] isc_mutex_lock() failure not caught in
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2297. [bug] isc_entropy_createfilesource() failure not caught in
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews2296. [port] Allow docbook stylesheet location to be specified to
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews configure. [RT #17457]
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews2294. [func] Allow the experimental statistics channels to have
f568dad6c7ddaa732e6562a4b89fd2ac922d263bMark Andrews multiple connections and ACL.
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews Note: the stats-server and stats-server-v6 options
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews available in the previous beta releases are replaced
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews with the generic statistics-channels statement.
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews2293. [func] Add ACL regression test. [RT #17375]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2292. [bug] Log if the working directory is not writable.
d91df50b670d92d0ab784b741e2ee9af7f2dc4a1Mark Andrews2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews failure to set PR_SET_DUMPABLE. [RT #17312]
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews2290. [bug] Let AD in the query signal that the client wants AD
c5adbd722da0908f91be4fb710c082b4b68ec782Mark Andrews set in the response. [RT #17301]
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews2289. [func] named-checkzone now reports the out-of-zone CNAME
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews found. [RT #17309]
c60eaaf9b3c6bb4d693cdb5f68acdfacf076e1fdMark Andrews2288. [port] win32: mark service as running when we have finished
c60eaaf9b3c6bb4d693cdb5f68acdfacf076e1fdMark Andrews loading. [RT #17441]
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews2286. [func] Allow a TCP connection to be used as a weak
c0720b90ed6e673264b17eb752d873a89cbd6db5Mark Andrews authentication method for reverse zones.
c0720b90ed6e673264b17eb752d873a89cbd6db5Mark Andrews New update-policy methods tcp-self and 6to4-self.
c06cb907737eb7ce128c92dd729c73798733f37aMark Andrews2285. [func] Test framework for client memory context management.
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews2284. [bug] Memory leak in UPDATE prerequisite processing.
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews2283. [bug] TSIG keys were not attaching to the memory
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews context. TSIG keys should use the rings
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews memory context rather than the clients memory
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews context. [RT #17377]
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews2281. [bug] Attempts to use undefined acls were not being logged.
f408773d47b25594d1302525a4db6efb84b1843cMark Andrews2280. [func] Allow the experimental http server to be reached
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews over IPv6 as well as IPv4. [RT #17332]
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews to protect applications from receiving spurious
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews SIGPIPE signals when using the resolver.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews2278. [bug] win32: handle the case where Windows returns no
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews search list or DNS suffix. [RT #17354]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews2277. [bug] Empty zone names were not correctly being caught at
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews in the post parse checks. [RT #17357]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews2276. [bug] Install <dst/gssapi.h>. [RT #17359]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews2275. [func] Add support to dig to perform IXFR queries over UDP.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2274. [func] Log zone transfer statistics. [RT #17336]
5888f62c204a99da60d7854fe01eda4960fb3b36Mark Andrews2273. [bug] Adjust log level to WARNING when saving inconsistent
70b1afa5938c9bf2aed67f9d594161b905366426Jeremy C. Reed stub/slave master and journal files. [RT #17279]
7c200913aa7e55bbe28de456bb593c1e05bf6f79Mark Andrews2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews2271. [bug] Fix a memory leak in http server code [RT #17100]
afd002e89aadf30181155566544480349e70339dMark Andrews2270. [bug] dns_db_closeversion() version->writer could be reset
afd002e89aadf30181155566544480349e70339dMark Andrews before it is tested. [RT #17290]
ba5d2a97ee0cd2cc9d4b9e7e344ae8f607cc2994Mark Andrews2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews --- 9.5.0b1 released ---
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews2267. [bug] Radix tree node_num value could be set incorrectly,
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews causing positive ACL matches to look like negative
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews ones. [RT #17311]
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews2266. [bug] client.c:get_clientmctx() returned the same mctx
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews once the pool of mctx's was filled. [RT #17218]
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews2265. [bug] Test that the memory context's basic_table is non NULL
f05a4bf2bfac3aaff0462560b2793cd99a85a297Mark Andrews before freeing. [RT #17265]
f05a4bf2bfac3aaff0462560b2793cd99a85a297Mark Andrews2264. [bug] Server prefix length was being ignored. [RT #17308]
bf45f72ed319628eebce60c368177320943d001fMark Andrews2263. [bug] "named-checkconf -z" failed to set default value
bf45f72ed319628eebce60c368177320943d001fMark Andrews for "check-integrity". [RT #17306]
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews2262. [bug] Error status from all but the last view could be
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews lost. [RT #17292]
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews2260. [bug] Reported wrong clients-per-query when increasing the
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews value. [RT #17236]
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews2259. [placeholder]
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews --- 9.5.0a7 released ---
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews2257. [bug] win32: Use the full path to vcredist_x86.exe when
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews calling it. [RT #17222]
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews2256. [bug] win32: Correctly register the installation location of
4bb0f1046f3f3c26539ff91e28b3c8872519df17Mark Andrews2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
68df4d65c624a9ca06e94fc67ef915adf2ec97beMark Andrews2254. [bug] timer.c:dispatch() failed to lock timer->lock
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews when reading timer->idle allowing it to see
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews intermediate values as timer->idle was reset by
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews isc_timer_touch(). [RT #17243]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2253. [func] "max-cache-size" defaults to 32M.
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews "max-acache-size" defaults to 16M.
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews2252. [bug] Fixed errors in sortlist code [RT #17216]
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews2251. [placeholder]
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews2250. [func] New flag 'memstatistics' to state whether the
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews memory statistics file should be written or not.
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews Additionally named's -m option will cause the
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews statistics file to be written. [RT #17113]
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews2249. [bug] Only set Authentic Data bit if client requested
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews DNSSEC, per RFC 3655 [RT #17175]
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews2247. [doc] Sort doc/misc/options. [RT #17067]
63aaac8137bd1d86aab8c950fb066bb522a26e5bMark Andrews2246. [bug] Make the startup of test servers (ans.pl) more
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews robust. [RT #17147]
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews2245. [bug] Validating lack of DS records at trust anchors wasn't
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews working. [RT #17151]
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews2244. [func] Allow the check of nameserver names against the
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews SOA MNAME field to be disabled by specifying
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews 'notify-to-soa yes;'. [RT #17073]
c58821f7100821e1d4e4bbace727b988bb3e0623Mark Andrews2243. [func] Configuration files without a newline at the end now
c58821f7100821e1d4e4bbace727b988bb3e0623Mark Andrews parse without error. [RT #17120]
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews library could require a source of random data.
a5d7c242b564cbd3cebc0dd27c19d9093d38b3abMark Andrews2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews a number of INSIST()s into plain fatal() errors
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews which report the triggering result code.
7a253b705ccbc30821253e7a124658623f10c499Mark Andrews The 'key' command wasn't disabling GSS-TSIG.
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews2238. [bug] It was possible to trigger a REQUIRE when a
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews validation was canceled. [RT #17106]
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews2236. [bug] dnssec-signzone failed to preserve the case of
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews of wildcard owner names. [RT #17085]
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
aaa42824d2d1f5cc4add01f0191e3784ee0f7396Mark Andrews2233. [func] Add support for O(1) ACL processing, based on
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews radix tree code originally written by Kevin
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews Brintnall. [RT #16288]
c1297b6025bf8ccdc832b7bca705da1d4cf2944eMark Andrews2232. [bug] dns_adb_findaddrinfo() could fail and return
c1297b6025bf8ccdc832b7bca705da1d4cf2944eMark Andrews ISC_R_SUCCESS. [RT #17137]
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt2230. [bug] We could INSIST reading a corrupted journal.
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews2229. [bug] Null pointer dereference on query pool creation
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews failure. [RT #17133]
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews2228. [contrib] contrib: Change 2188 was incomplete.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2227. [cleanup] Tidied up the FAQ. [RT #17121]
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews2226. [placeholder]
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews2225. [bug] More support for systems with no IPv4 addresses.
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews2224. [bug] Defer journal compaction if a xfrin is in progress.
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews2223. [bug] Make a new journal when compacting. [RT #17119]
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews2222. [func] named-checkconf now checks server key references.
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews2221. [bug] Set the event result code to reflect the actual
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews record turned to caller when a cache update is
b130bf8b4ebdabd5c94eb5c6522a9971997b6ac9Mark Andrews rejected due to a more credible answer existing.
072eaf055b7fa0d8abe96146fbb9152b14946c84Mark Andrews2220. [bug] win32: Address a race condition in final shutdown of
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews the Windows socket code. [RT #17028]
7a3c2d189e811933c48aace1900a868dffd42f5fMark Andrews2219. [bug] Apply zone consistency checks to additions, not
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews removals, when updating. [RT #17049]
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews2217. [func] Adjust update log levels. [RT #17092]
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews2216. [cleanup] Fix a number of errors reported by Coverity.
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews2214. [bug] Deregister OpenSSL lock callback when cleaning
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews up. Reorder OpenSSL cleanup so that RAND_cleanup()
8c731c1219f1698f15bf5b1fcf6bc301cfd9bc42Mark Andrews is called before the locks are destroyed. [RT #17098]
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews2213. [bug] SIG0 diagnostic failure messages were looking at the
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews wrong status code. [RT #17101]
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews2212. [func] 'host -m' now causes memory statistics and active
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews memory to be printed at exit. [RT 17028]
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews2211. [func] Update "dynamic update temporarily disabled" message.
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews2210. [bug] Deleting class specific records via UPDATE could
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews fail. [RT #17074]
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews2209. [port] osx: linking against user supplied static OpenSSL
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews libraries failed as the system ones were still being
bde20a0436dff13e2299cfd4230ddec54d396d02Mark Andrews found. [RT #17078]
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews2208. [port] win32: make sure both build methods produce the
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews same output. [RT #17058]
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews ai_canonname correctly. [RT #17061]
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews --- 9.5.0a6 released ---
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews2206. [security] "allow-query-cache" and "allow-recursion" now
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews cross inherit from each other.
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews If allow-query-cache is not set in named.conf then
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews allow-recursion is used if set, otherwise allow-query
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews is used if set, otherwise the default (localnets;
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews localhost;) is used.
57eb7efe13b67455e8c6a08cf080afb3de2ac622Mark Andrews If allow-recursion is not set in named.conf then
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt allow-query-cache is used if set, otherwise allow-query
7228a4d9ca1f1b868e257a28de86c6a1f21e9ffeMark Andrews is used if set, otherwise the default (localnets;
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews localhost;) is used.
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews2204. [bug] "rndc flushname name unknown-view" caused named
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews to crash. [RT #16984]
10fc76d48aa7ecb8a7242970585ba154b368f97eMark Andrews2203. [security] Query id generation was cryptographically weak.
10fc76d48aa7ecb8a7242970585ba154b368f97eMark Andrews [RT # 16915]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt2202. [security] The default acls for allow-query-cache and
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews allow-recursion were not being applied. [RT #16960]
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews2201. [bug] The build failed in a separate object directory.
9baec3ca233efe8ffca6fbafea5c75021adff03cMark Andrews2200. [bug] The search for cached NSEC records was stopping to
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews early leading to excessive DLV queries. [RT #16930]
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews2199. [bug] win32: don't call WSAStartup() while loading dlls.
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews2198. [bug] win32: RegCloseKey() could be called when
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews RegOpenKeyEx() failed. [RT #16911]
3d697a7eddf375586435f8fb6e1440fb3ce9058dMark Andrews2197. [bug] Add INSIST to catch negative responses which are
3d697a7eddf375586435f8fb6e1440fb3ce9058dMark Andrews not setting the event result code appropriately.
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews2196. [port] win32: yield processor while waiting for once to
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews to complete. [RT #16958]
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews2195. [func] dnssec-keygen now defaults to nametype "ZONE"
5cd4555ad444fd391002ae32450572054369fd42Rob Austein when generating DNSKEYs. [RT #16954]
8eb4eca37538183edb36db88580b5232f15931b0Mark Andrews2194. [bug] Close journal before calling 'done' in xfrin.c.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews --- 9.5.0a5 released ---
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews2193. [port] win32: BINDInstall.exe is now linked statically.
fa3d0b9991ea0d8344881c5dd4609d9c33314b9bMark Andrews2192. [port] win32: use vcredist_x86.exe to install Visual
e3f66e1617f9fca7313e4005b8c3c611551906d1Mark Andrews Studio's redistributable dlls if building with
ed954ce73b1c712b24eab945190028871433f803Mark Andrews Visual Stdio 2005 or later.
ed954ce73b1c712b24eab945190028871433f803Mark Andrews2191. [func] named-checkzone now allows dumping to stdout (-).
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews named-checkconf now has -h for help.
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews named-checkzone now has -h for help.
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews rndc now has -h for help.
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews Better handling of '-?' for usage summaries.
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews2190. [func] Make fallback to plain DNS from EDNS due to timeouts
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews more visible. New logging category "edns-disabled".
8d709e3ee443222cd35e44eadc9a4c0a8d92fec2Rob Austein2189. [bug] Handle socket() returning EINTR. [RT #15949]
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews2188. [contrib] queryperf: autoconf changes to make the search for
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews libresolv or libbind more robust. [RT #16299]
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews2187. [bug] query_addds(), query_addwildcardproof() and
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews query_addnxrrsetnsec() should take a version
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews argument. [RT #16368]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews2186. [port] cygwin: libbind: check for struct sockaddr_storage
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews independently of IPv6. [RT #16482]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews2185. [port] sunos: libbind: check for ssize_t, memmove() and
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews memchr(). [RT #16463]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews2184. [bug] bind9.xsl.h didn't build out of the source tree.
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews2183. [bug] dnssec-signzone didn't handle offline private keys
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews well. [RT #16832]
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
824cb6567555af556d0963d961798483d252eb5fMark Andrews could return ISC_R_SUCCESS when they ran out of
895ae38da194143331d667289affd3b43c5bfc14Mark Andrews memory. [RT #16365]
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews2180. [cleanup] Remove bit test from 'compress_test' as they
58ea8fb1dfc8c055a7d4ad74d65e345436ede790Mark Andrews are no longer needed. [RT #16497]
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews2179. [func] 'rndc command zone' will now find 'zone' if it is
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews unique to all the views. [RT #16821]
6769ce7c7b38ae31887203aa1770692b3be92705Tatuya JINMEI 神明達哉2178. [bug] 'rndc reload' of a slave or stub zone resulted in
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews a reference leak. [RT #16867]
f041bef2c60a092ab4dcae475451729a5345830fMark Andrews2177. [bug] Array bounds overrun on read (rcodetext) at
f041bef2c60a092ab4dcae475451729a5345830fMark Andrews debug level 10+. [RT #16798]
a7dd5f21e996b01262a3d564dae9561cb3f8e717Mark Andrews2176. [contrib] dbus update to handle race condition during
92d23165938a5e595f80b2e3fb5d8cb918ac7dacMark Andrews initialization (Bugzilla 235809). [RT #16842]
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews2175. [bug] win32: windows broadcast condition variable support
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews was broken. [RT #16592]
289ae548d52bc8f982d9823af64cafda7bd92232Mark Andrews2174. [bug] I/O errors should always be fatal when reading
4ccea866e64a8ec8525ad4bf7d57606bcd2fc15dMark Andrews master files. [RT #16825]
4cf228853d658a742a826393f341e2486c629f7bMark Andrews2173. [port] win32: When compiling with MSVS 2005 SP1 we also
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews --- 9.5.0a4 released ---
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews2172. [bug] query_addsoa() was being called with a non zone db.
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews2171. [bug] Handle breaks in DNSSEC trust chains where the parent
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews servers are not DS aware (DS queries to the parent
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews return a referral to the child).
5de1ad63735deb0ea86b2d0a9366eddf5fbeddc1Mark Andrews2170. [func] Add acache processing to test suite. [RT #16711]
a1210da03636eca13c70502a2b132ead22481b70Mark Andrews2169. [bug] host, nslookup: when reporting NXDOMAIN report the
a1210da03636eca13c70502a2b132ead22481b70Mark Andrews given name and not the last name searched for.
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews2168. [bug] nsupdate: in non-interactive mode treat syntax errors
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews as fatal errors. [RT #16785]
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews2167. [bug] When re-using a automatic zone named failed to
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews attach it to the new view. [RT #16786]
7c0946e74be897d02aaaf980ac146bcb500c2c8cMark Andrews --- 9.5.0a3 released ---
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt2166. [bug] When running in batch mode, dig could misinterpret
09cbf84907de2bd088b4ce8bd1307938bf0e81baMark Andrews a server address as a name to be looked up, causing
9e2789fd70b954df426b80301b62388497692481Mark Andrews unexpected output. [RT #16743]
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews2165. [func] Allow the destination address of a query to determine
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews if we will answer the query or recurse.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews allow-query-on, allow-recursion-on and
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews allow-query-cache-on. [RT #16291]
8af4bf165e9a6aa111e0b6bfcbcc7f4a741a8ae5Mark Andrews2164. [bug] The code to determine how named-checkzone /
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews named-compilezone was called failed under windows.
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews2163. [bug] If only one of query-source and query-source-v6
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews specified a port the query pools code broke (change
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews 2129). [RT #16768]
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews2162. [func] Allow "rrset-order fixed" to be disabled at compile
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews time. [RT #16665]
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews2161. [bug] Fix which log messages are emitted for 'rndc flush'.
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews from getifaddrs(). [RT #16708]
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews --- 9.5.0a2 released ---
e3582ce43119a95448ccc06ea2586f6547c92967Mark Andrews2159. [bug] Array bounds overrun in acache processing. [RT #16710]
2952abf7cbbba6c6f821ee18579ca29d87549574Mark Andrews2158. [bug] ns_client_isself() failed to initialize key
efb82ed87e916c82b481bee4aa6651f2dbd4cedaMark Andrews leading to a REQUIRE failure. [RT #16688]
7c693bfdbe488ca8fa4f0831c71f5809972f6cc7Mark Andrews2157. [func] dns_db_transfernode() created. [RT #16685]
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews resolver.c:validated() and resolver.c:cache_name().
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews Fix a memory leak in rbtdb.c:free_noqname().
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews Make lookup.c:lookup_find() robust against
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews event leaks. [RT #16685]
2113dfd6e20a9ca16000ed226517b4660087c1f2Mark Andrews2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews matched in acls by omitting the scope. [RT #16599]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2153. [bug] nsupdate could leak memory. [RT #16691]
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews2152. [cleanup] Use sizeof(buf) instead of fixed number in
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews dighost.c:get_trusted_key(). [RT #16678]
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews2151. [bug] Missing newline in usage message for journalprint.
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews2150. [bug] 'rrset-order cyclic' uniformly distribute the
6d453e1bb296e88732655f3d736e571eeaaca254Mark Andrews starting point for the first response for a given
240e57ab983296e6d52031a594d3345728191b48Mark Andrews RRset. [RT #16655]
240e57ab983296e6d52031a594d3345728191b48Mark Andrews2149. [bug] isc_mem_checkdestroyed() failed to abort on
cdb674387ca19dc8550553d90d8f9731befb6f1fMark Andrews if there were still active memory contexts.
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews2148. [func] Add positive logging for rndc commands. [RT #14623]
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews2147. [bug] libbind: remove potential buffer overflow from
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
d4f5efb4d63e2e17081a49a3457f05fe06fbb5abMark Andrews SO_BSDCOMPAT" message. [RT #16641]
d4f5efb4d63e2e17081a49a3457f05fe06fbb5abMark Andrews2145. [bug] Check DS/DLV digest lengths for known digests.
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews2143. [bug] We failed to restart the IPv6 client when the
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews kernel failed to return the destination the
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews packet was sent to. [RT #16613]
dbfc2232ef5b6e5572480070ab87a4d67c18aa39Mark Andrews2142. [bug] Handle master files with a modification time that
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews matches the epoch. [RT #16612]
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
393e4679cf4dd8bafb031d8a61ece95af61fbedcMark Andrews equivalent of LDH checks). [RT #16609]
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews2140. [bug] libbind: missing unlock on pthread_key_create()
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews failures. [RT #16654]
67b1eee9dfde5ad86b54b2b768ff4d6b1354b651Mark Andrews2139. [bug] dns_view_find() was being called with wrong type
431fd1b0b5c3c049f9397ed4be8915715ead9cdbMark Andrews in adb.c. [RT #16670]
cc7d91bd5c6b9be5a3c67a99112b885602c24873Mark Andrews2138. [bug] Lock order reversal in resolver.c. [RT #16653]
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews2137. [port] Mips little endian and/or mips 64 bit are now
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews supported for atomic operations. [RT #16648]
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews2136. [bug] nslookup/host looped if there was no search list
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews and the host didn't exist. [RT #16657]
3b572928731d3595990fe360c80977a2d043eb02Tatuya JINMEI 神明達哉2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
50d3f097d4c2779c8fb2397882d91e0cbca2c260Mark Andrews2134. [func] Additional statistics support. [RT #16666]
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews2133. [port] powerpc: Support both IBM and MacOS Power PC
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews assembler syntaxes. [RT #16647]
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews2132. [bug] Missing unlock on out of memory in
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews dns_dispatchmgr_setudp().
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews2130. [func] Log if CD or DO were set. [RT #16640]
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews2129. [func] Provide a pool of UDP sockets for queries to be
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews made over. See use-queryport-pool, queryport-pool-ports
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews and queryport-pool-updateinterval. [RT #16415]
0b5d8941bb41edbe1296619485c16df536ecc05fMark Andrews2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews2126. [security] Serialize validation of type ANY responses. [RT #16555]
a34d19803a206febe10866394393ec1c09b28984Mark Andrews2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews was defined. [RT #16574]
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews2124. [security] It was possible to dereference a freed fetch
2db8db63992d081c75d664340866e2a21913705dMark Andrews context. [RT #16584]
2db8db63992d081c75d664340866e2a21913705dMark Andrews --- 9.5.0a1 released ---
2db8db63992d081c75d664340866e2a21913705dMark Andrews2123. [func] Use Doxygen to generate internal documentation.
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews2122. [func] Experimental http server and statistics support
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews for named via xml.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
8626c376a038da969de1ee6c158957dfe638daacMark Andrews second timeout. [RT #16553]
c6ee5082db1e40ab64e08a540620da79996efa9cTatuya JINMEI 神明達哉2120. [doc] Fix markup on nsupdate man page. [RT #16556]
c6ee5082db1e40ab64e08a540620da79996efa9cTatuya JINMEI 神明達哉2119. [compat] libbind: allow res_init() to succeed enough to
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews return the default domain even if it was unable
9a6522317c97e5487cea816173f63a0e5b4e428aTatuya JINMEI 神明達哉 to allocate memory.
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews2118. [bug] Handle response with long chains of domain name
78ff0e94eae96f2cf8bf94454d8ff01ba280d30dMark Andrews compression pointers which point to other compression
5a9efbf6bf951267e0844990f5b2cb69f5d5f01fTatuya JINMEI 神明達哉 pointers. [RT #16427]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews which could lead to validation failures. named didn't
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews handle negative DS responses that were in the process
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews of being validated. Check CNAME bit before accepting
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews NODATA proof. To be able to ignore a child NSEC there
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews must be SOA (and NS) set in the bitmap. [RT #16399]
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews2116. [bug] 'rndc reload' could cause the cache to continually
d79296d147cd4c35784dd3efd7ed7f09d976ee61Mark Andrews be cleaned. [RT #16401]
4f5a43c5f084290054ddf212add7b4c2abe6edc5Tatuya JINMEI 神明達哉2115. [bug] 'rndc reconfig' could trigger a INSIST if the
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews number of masters for a zone was reduced. [RT #16444]
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews2114. [bug] dig/host/nslookup: searches for names with multiple
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews labels were failing. [RT #16447]
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews2113. [bug] nsupdate: if a zone is specified it should be used
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews for server discover. [RT #16455]
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews2112. [security] Warn if weak RSA exponent is used. [RT #16460]
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews2111. [bug] Fix a number of errors reported by Coverity.
5d51f534831bd648436d22e4faf203fb9abdf3d4Mark Andrews2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews priming queries. [RT #16491]
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
15bda409010cbf2d3e43baf10f28bae5f7b1abefMark Andrews2108. [func] DHCID support. [RT #16456]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
b5205d860b1672c405c57004e6823af873799b42Mark Andrews2106. [func] 'rndc status' now reports named's version. [RT #16426]
9a1e8f1baf3e5c53d6b6bfa97d7f60cb3358e404Mark Andrews2105. [func] GSS-TSIG support (RFC 3645).
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews2104. [port] Fix Solaris SMF error message.
12b1bf8b14ac3b6ec4de9cae6fea10f389b5e5dbMark Andrews2103. [port] Add /usr/sfw to list of locations for OpenSSL
12b1bf8b14ac3b6ec4de9cae6fea10f389b5e5dbMark Andrews under Solaris.
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews2102. [port] Silence Solaris 10 warnings.
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews2101. [bug] OpenSSL version checks were not quite right.
529035492ea0a427cc8d007cd743934d4494d9d3Mark Andrews2100. [port] win32: copy libeay32.dll to Build\Debug.
ff6bd86d5778de50cb1b4e93591e22354062ee17Mark Andrews Copy Debug\named-checkzone to Debug\named-compilezone.
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews2099. [port] win32: more manifest issues.
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews2098. [bug] Race in rbtdb.c:no_references(), which occasionally
cd6d8d61b076eea02826596334a105b918393627Mark Andrews triggered an INSIST failure about the node lock
cd6d8d61b076eea02826596334a105b918393627Mark Andrews reference. [RT #16411]
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews2097. [bug] named could reference a destroyed memory context
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews after being reloaded / reconfigured. [RT #16428]
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews2096. [bug] libbind: handle applications that fail to detect
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews res_init() failures better.
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews net_cidr_ntop_ipv6(). [RT #16388]
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews2094. [contrib] Update named-bootconf. [RT #16404]
5c45d30402af6860e1f66f5aa7d78dff58373b27Mark Andrews2093. [bug] named-checkzone -s was broken.
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews2092. [bug] win32: dig, host, nslookup. Use registry config
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews if resolv.conf does not exist or no nameservers
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews listed. [RT #15877]
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews2091. [port] dighost.c: race condition on cleanup. [RT #16417]
7b68fa6229f1edadac44c7ec459c9ed77a8368c8Mark Andrews2090. [port] win32: Visual C++ 2005 command line manifest support.
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews2089. [security] Raise the minimum safe OpenSSL versions to
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews prior to these have known security flaws which
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews are (potentially) exploitable in named. [RT #16391]
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews2088. [security] Change the default RSA exponent from 3 to 65537.
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews2086. [port] libbind: FreeBSD now has get*by*_r() functions.
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews2085. [doc] win32: added index.html and README to zip. [RT #16201]
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews2084. [contrib] dbus update for 9.3.3rc2.
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins2083. [port] win32: Visual C++ 2005 support.
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins2082. [doc] Document 'cache-file' as a test only option.
f19353d73186913a6e0f0f766c1f72e5f4c5e9e1Tatuya JINMEI 神明達哉2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2080. [port] libbind: res_init.c did not compile on older versions
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews of Solaris. [RT #16363]
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews2079. [bug] The lame cache was not handling multiple types
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews correctly. [RT #16361]
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews2078. [bug] dnssec-checkzone output style "default" was badly
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews named. It is now called "relative". [RT #16326]
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews complete signed zone. [RT #16326]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2076. [bug] Several files were missing #include <config.h>
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews causing build failures on OSF. [RT #16341]
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews2075. [bug] The spillat timer event hander could leak memory.
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews dns_request_createraw2() and dns_request_createraw3()
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews failed to send multiple UDP requests. [RT #16349]
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews2073. [bug] Incorrect semantics check for update policy "wildcard".
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews2072. [bug] We were not generating valid HMAC SHA digests.
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews2071. [port] Test whether gcc accepts -fno-strict-aliasing.
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews2070. [bug] The remote address was not always displayed when
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews reporting dispatch failures. [RT #16315]
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews2069. [bug] Cross compiling was not working. [RT #16330]
daba3af103617ce4dd49bfdd0d9e07df7f22d08dMark Andrews2068. [cleanup] Lower incremental tuning message to debug 1.
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews2067. [bug] 'rndc' could close the socket too early triggering
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews a INSIST under Windows. [RT #16317]
d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews2066. [security] Handle SIG queries gracefully. [RT #16300]
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews2065. [bug] libbind: probe for HPUX prototypes for
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews endprotoent_r() and endservent_r(). [RT 16313]
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews2063. [bug] Change #1955 introduced a bug which caused the first
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews 'rndc flush' call to not free memory. [RT #16244]
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews2062. [bug] 'dig +nssearch' was reusing a buffer before it had
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews been returned by the socket code. [RT #16307]
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews2061. [bug] Accept expired wildcard message reversed. [RT #16296]
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews2060. [bug] Enabling DLZ support could leave views partially
25c18fded02c5df8391a333e90ea776b52bff079Mark Andrews configured. [RT #16295]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2059. [bug] Search into cache rbtdb could trigger an INSIST
7042126e8a10315255144989f7723f0510558928Mark Andrews failure while cleaning up a stale rdataset.
5581e28ed8c05350ce6119230c223da60dafdbafMark Andrews2058. [bug] Adjust how we calculate rtt estimates in the presence
2c4ae1d331c98beba03a337a58e9b44aec98d663Mark Andrews of authoritative servers that drop EDNS and/or CD
2c4ae1d331c98beba03a337a58e9b44aec98d663Mark Andrews requests. Also fallback to EDNS/512 and plain DNS
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews faster for zones with less than 3 servers. [RT #16187]
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews2057. [bug] Make setting "ra" dependent on both allow-query-cache
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews and allow-recursion. [RT #16290]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2056. [bug] dig: ixfr= was not being treated case insensitively
c4008fdd56a8045802ed125e40a06bf1df9b7fbeMark Andrews at all times. [RT #15955]
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews2055. [bug] Missing goto after dropping multicast query.
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews2054. [port] freebsd: do not explicitly link against -lpthread.
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
d00e58d4814b45c13434721b5771782e485dcb73Mark Andrews2052. [bug] 'rndc' improve connect failed message to report
d00e58d4814b45c13434721b5771782e485dcb73Mark Andrews the failing address. [RT #15978]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews2051. [port] More strtol() fixes. [RT #16249]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews2050. [bug] Parsing of NSAP records was not case insensitive.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews2049. [bug] Restore SOA before AXFR when falling back from
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews a attempted IXFR when transferring in a zone.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews Allow a initial SOA query before attempting
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews a AXFR to be requested. [RT #16156]
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews2048. [bug] It was possible to loop forever when using
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews avoid-v4-udp-ports / avoid-v6-udp-ports when
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews the OS always returned the same local port.
6e373c502584f9292e964378411d296c8259026bMark Andrews2047. [bug] Failed to initialize the interface flags to zero.
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews cleanup [RT #16247].
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews2045. [func] Use lock buckets for acache entries to limit memory
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews consumption. [RT #16183]
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews2044. [port] Add support for atomic operations for Itanium.
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews2043. [port] nsupdate/nslookup: Force the flushing of the prompt
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews for interactive sessions. [RT #16148]
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews2042. [bug] named-checkconf was incorrectly rejecting the
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews logging category "config". [RT #16117]
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
d140ae28347065500e7efb1ebe884f1606f9ac7bMark Andrews set of libraries to be linked. [RT #16129]
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews2040. [bug] rbtdb no_references() could trigger an INSIST
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews failure with --enable-atomic. [RT #16022]
cf029c9369548e598379490a039cfbc2b83527eeMark Andrews2039. [func] Check that all buffers passed to the socket code
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews have been retrieved when the socket event is freed.
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews2038. [bug] dig/nslookup/host was unlinking from wrong list
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews when handling errors. [RT #16122]
c9eaf357a31ea5eaeeed24f2f4e800a6ef9512e0Mark Andrews2037. [func] When unlinking the first or last element in a list
c9eaf357a31ea5eaeeed24f2f4e800a6ef9512e0Mark Andrews check that the list head points to the element to
3fc7753efdc33559978ce61785961b1305944077Mark Andrews be unlinked. [RT #15959]
3fc7753efdc33559978ce61785961b1305944077Mark Andrews2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews2035. [func] Make falling back to TCP on UDP refresh failure
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews optional. Default "try-tcp-refresh yes;" for BIND 8
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews compatibility. [RT #16123]
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews2033. [bug] We weren't creating multiple client memory contexts
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews on demand as expected. [RT #16095]
4ff0e3c8afbbbc30473701c47d75e1d7829bae3eMark Andrews2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed2031. [bug] Emit a error message when "rndc refresh" is called on
9a33e2d135b0de7d2e2d768f2b9c45b2627fe4e6Mark Andrews a non slave/stub zone. [RT # 16073]
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews2030. [bug] We were being overly conservative when disabling
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews openssl engine support. [RT #16030]
94b58e01ae98764a045e18581d7aaf05d2889e60Mark Andrews2029. [bug] host printed out the server multiple times when
94b58e01ae98764a045e18581d7aaf05d2889e60Mark Andrews specified on the command line. [RT #15992]
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews2028. [port] linux: socket.c compatibility for old systems.
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews2027. [port] libbind: Solaris x86 support. [RT #16020]
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews2026. [bug] Rate limit the two recursive client exceeded messages.
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews2025. [func] Update "zone serial unchanged" message. [RT #16026]
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews2024. [bug] named emitted spurious "zone serial unchanged"
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews messages on reload. [RT #16027]
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews2023. [bug] "make install" should create ${localstatedir}/run and
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews ${sysconfdir} if they do not exist. [RT #16033]
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews2022. [bug] If dnssec validation is disabled only assert CD if
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews CD was requested. [RT #16037]
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
6178552326050b16f5706ee63c931e9388d74318Mark Andrews2019. [tuning] Reduce the amount of work performed per quantum
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews when cleaning the cache. [RT #15986]
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews2018. [bug] Checking if the HMAC MD5 private file was broken.
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews2017. [bug] allow-query default was not correct. [RT #15946]
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews2016. [bug] Return a partial answer if recursion is not
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews allowed but requested and we had the answer
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews to the original qname. [RT #15945]
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews2015. [cleanup] use-additional-cache is now acache-enable for
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews consistency. Default acache-enable off in BIND 9.4
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews as it requires memory usage to be configured.
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews It may be enabled by default in BIND 9.5 once we
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews have more experience with it.
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews2014. [func] Statistics about acache now recorded and sent
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews to log. [RT #15976]
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews responses more gracefully. [RT #15941]
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews2012. [func] Don't insert new acache entries if acache is full.
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews2011. [func] dnssec-signzone can now update the SOA record of
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews the signed zone, either as an increment or as the
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews system time(). [RT #15633]
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews2010. [placeholder] rt15958
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews2009. [bug] libbind: Coverity fixes. [RT #15808]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2008. [func] It is now possible to enable/disable DNSSEC
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews validation from rndc. This is useful for the
2a90390deeff6ba07125bfb2c81ab4b582eb2777Mark Andrews mobile hosts where the current connection point
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews breaks DNSSEC (firewall/proxy). [RT #15592]
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews rndc validation newstate [view]
01db0feafa67200a07ff8f81dde9029f675bbb5cMark Andrews2007. [func] It is now possible to explicitly enable DNSSEC
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews validation. default dnssec-validation no; to
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews be changed to yes in 9.5.0. [RT #15674]
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews2006. [security] Allow-query-cache and allow-recursion now default
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews to the built in acls "localnets" and "localhost".
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews This is being done to make caching servers less
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews attractive as reflective amplifying targets for
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews spoofed traffic. This still leave authoritative
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews servers exposed.
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews The best fix is for full BCP 38 deployment to
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews remove spoofed traffic.
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews2005. [bug] libbind: Retransmission timeouts should be
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews based on which attempt it is to the nameserver
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews and not the nameserver itself. [RT #13548]
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews2004. [bug] dns_tsig_sign() could pass a NULL pointer to
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews dst_context_destroy() when cleaning up after a
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews error. [RT #15835]
7d116211ec7b063891130f191e3ed437b45dba70Mark Andrews2003. [bug] libbind: The DNS name/address lookup functions could
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews occasionally follow a random pointer due to
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews structures not being completely zeroed. [RT #15806]
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews2002. [bug] libbind: tighten the constraints on when
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews struct addrinfo._ai_pad exists. [RT #15783]
eba8a27e55258ee4470d7c3caa6bb3a335b9731eMark Andrews2001. [func] Check the KSK flag when updating a secure dynamic zone.
203629e729b756601646c639c0dbfb267030a617Mark Andrews New zone option "update-check-ksk yes;". [RT #15817]
8af4e7aa4e2a6fe84bf4ebe09ca1d4ef1d8ab593Mark Andrews2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
d08c5dfcd4d1f69004c1382ffc00cc1848dcd1a3Mark Andrews1999. [func] Implement "rrset-order fixed". [RT #13662]
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews1998. [bug] Restrict handling of fifos as sockets to just SunOS.
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews This allows named to connect to entropy gathering
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews daemons that use fifos instead of sockets. [RT #15840]
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews1997. [bug] Named was failing to replace negative cache entries
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews when a positive one for the type was learnt.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1996. [bug] nsupdate: if a zone has been specified it should
e24089c5c33f31a39cea0123765165fa31308343Tatuya JINMEI 神明達哉 appear in the output of 'show'. [RT #15797]
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews1995. [bug] 'host' was reporting multiple "is an alias" messages.
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews1994. [port] OpenSSL 0.9.8 support. [RT #15694]
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews1993. [bug] Log messages, via syslog, were missing the space
7c61d798f54f7c19f87d46a0df775e0e58fe7d30Mark Andrews after the timestamp if "print-time yes" was specified.
e23932d3c8c154cff3fea0ecff64e26c6ac6f5d8Mark Andrews1992. [bug] Not all incoming zone transfer messages included the
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews view. [RT #15825]
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews1991. [cleanup] The configuration data, once read, should be treated
885e60828681cecd17bccbe5ceff8f4e75ef4c5cMark Andrews as read only. Expand the use of const to enforce this
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt at compile time. [RT #15813]
037b732f88edc943f3141e0342dc993156e3abf3Mark Andrews1990. [bug] libbind: isc's override of broken gettimeofday()
80a609bf44ee09766aeb9ae02cfbf7f9fe86dd83Mark Andrews implementations was not always effective.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉1989. [bug] win32: don't check the service password when
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 re-installing. [RT #15882]
bd5c8a564b21781fe6b608fe6a75c2e7152200acTatuya JINMEI 神明達哉1988. [bug] Remove a bus error from the SHA256/SHA512 support.
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews1986. [func] Report when a zone is removed. [RT #15849]
cae2cb086244dfb883739edbe79e34756079f70eMark Andrews1985. [protocol] DLV has now been assigned a official type code of
cf0bcc2c80ca99f1e6e53dcdd0eba03fe70723dfMark Andrews 32769. [RT #15807]
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews Note: care should be taken to ensure you upgrade
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews both named and dnssec-signzone at the same time for
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews zones with DLV records where named is the master
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews server for the zone. Also any zones that contain
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews DLV records should be removed when upgrading a slave
03e200df5dc283f24a6a349f0b31d3eab26da893Mark Andrews zone. You do not however have to upgrade all
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews servers for a zone with DLV records simultaneously.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1984. [func] dig, nslookup and host now advertise a 4096 byte
74f261bd2b7846d8e730ca3a1b28d6503de5c74aMark Andrews EDNS UDP buffer size by default. [RT #15855]
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews1983. [func] Two new update policies. "selfsub" and "selfwild".
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews1982. [bug] DNSKEY was being accepted on the parent side of
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews a delegation. KEY is still accepted there for
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews RFC 3007 validated updates. [RT #15620]
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews1981. [bug] win32: condition.c:wait() could fail to reattain
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews the mutex lock.
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews1980. [func] dnssec-signzone: output the SOA record as the
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews first record in the signed zone. [RT #15758]
a268fec7f54a89a0772a91da0511c8eae09e6157Mark Andrews1979. [port] linux: allow named to drop core after changing
a268fec7f54a89a0772a91da0511c8eae09e6157Mark Andrews user ids. [RT #15753]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1978. [port] Handle systems which have a broken recvmsg().
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews1977. [bug] Silence noisy log message. [RT #15704]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews1975. [bug] libbind: isc_gethexstring() could misparse multi-line
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews hex strings with comments. [RT #15814]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews1974. [doc] List each of the zone types and associated zone
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews options separately in the ARM.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews HMACSHA512 support. [RT #13606]
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews1972. [contrib] DBUS dynamic forwarders integration from
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews Jason Vas Dias <jvdias@redhat.com>.
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews1971. [port] linux: make detection of missing IF_NAMESIZE more
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews robust. [RT #15443]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1970. [bug] nsupdate: adjust UDP timeout when falling back to
a20e888bde4b307050d76e09266b2fb49f03bc30Mark Andrews unsigned SOA query. [RT #15775]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1969. [bug] win32: the socket code was freeing the socket
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews structure too early. [RT #15776]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
611ec5dd43d31fd6385f1a94c2f0865375f452b4Mark Andrews1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
01b8bc018d83e757b0578723977b0a71e1e626f8Mark Andrews1966. [bug] Don't set CD when we have fallen back to plain DNS.
8abe06b25d245ab2955d81525bfe6bd29b80908eMark Andrews1965. [func] Suppress spurious "recursion requested but not
8abe06b25d245ab2955d81525bfe6bd29b80908eMark Andrews available" warning with 'dig +qr'. [RT #15780].
7755f5932a3e59d0c6a2506cc94519de92b91ca6Mark Andrews1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1963. [port] Tru64 4.0E doesn't support send() and recv().
6e9efadbea9febb0494e713e54dfea6f7ef70383Mark Andrews1962. [bug] Named failed to clear old update-policy when it
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews was removed. [RT #15491]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1961. [bug] Check the port and address of responses forwarded
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews to dispatch. [RT #15474]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1959. [func] Control the zeroing of the negative response TTL to
b2f160f266005ceaed77a3f575109f74cd13d548Mark Andrews a soa query. Defaults "zero-no-soa-ttl yes;" and
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews "zero-no-soa-ttl-cache no;". [RT #15460]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1958. [bug] Named failed to update the zone's secure state
2b3e34f03675d6c71a654fe2094f3b9c063a70eaMark Andrews until the zone was reloaded. [RT #15412]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1957. [bug] Dig mishandled responses to class ANY queries.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1956. [bug] Improve cross compile support, 'gen' is now built
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews by native compiler. See README for additional
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews cross compile support information. [RT #15148]
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews1954. [func] Named now falls back to advertising EDNS with a
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews 512 byte receive buffer if the initial EDNS queries
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews fail. [RT #14852]
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews1953. [func] The maximum EDNS UDP response named will send can
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews now be set in named.conf (max-udp-size). This is
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews independent of the advertised receive buffer
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews (edns-udp-size). [RT #14852]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1952. [port] hpux: tell the linker to build a runtime link
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews path "-Wl,+b:". [RT #14816].
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews1951. [security] Drop queries from particular well known ports.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews Don't return FORMERR to queries from particular
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews well known ports. [RT #15636]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
ad226e3da3207fcb1dbb1054dd339dbbd19f507aMark Andrews a TCP socket. This prevents the source address being
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews set for TCP connections. [RT #15628]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1949. [func] Addition memory leakage checks. [RT #15544]
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews1948. [bug] If was possible to trigger a REQUIRE failure in
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews xfrin.c:maybe_free() if named ran out of memory.
d4d68515d23668cfe804ab2a174a7e427decedd8Mark Andrews1947. [func] It is now possible to configure named to accept
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews expired RRSIGs. Default "dnssec-accept-expired no;".
e8e62bb7829e88fc56360f7edc021dc8493a8704Mark Andrews Setting "dnssec-accept-expired yes;" leaves named
e8e62bb7829e88fc56360f7edc021dc8493a8704Mark Andrews vulnerable to replay attacks. [RT #14685]
e7fb847ed570dd8c1bcdacabb3d69bd81feb79aeMark Andrews1946. [bug] resume_dslookup() could trigger a REQUIRE failure
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews when using forwarders. [RT #15549]
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews To generate a RSAMD5 key you must explicitly request
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews RSAMD5. [RT #13780]
2c6f9101f99cc663074376a5cc1d954d33bdbe36Mark Andrews1944. [cleanup] isc_hash_create() does not need a read/write lock.
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews1943. [bug] Set the loadtime after rolling forward the journal.
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews1942. [bug] If the name of a DNSKEY match that of one in
1c153afce556ff3c687986fb7c4a0b0a7f5e7cd8Mark Andrews trusted-keys do not attempt to validate the DNSKEY
1c153afce556ff3c687986fb7c4a0b0a7f5e7cd8Mark Andrews using the parents DS RRset. [RT #15649]
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews1941. [bug] ncache_adderesult() should set eresult even if no
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews rdataset is passed to it. [RT #15642]
3d247992c4a500caa7703edaee68612e545af602Mark Andrews1940. [bug] Fixed a number of error conditions reported by
3d247992c4a500caa7703edaee68612e545af602Mark Andrews1939. [bug] The resolver could dereference a null pointer after
3d247992c4a500caa7703edaee68612e545af602Mark Andrews validation if all the queries have timed out.
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews1938. [bug] The validator was not correctly handling unsecure
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews negative responses at or below a SEP. [RT #15528]
05331ce161276d879711342fadbc6144af7f5ba6Mark Andrews1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews1936. [bug] The validator could leak memory. [RT #15544]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews1935. [bug] 'acache' was DO sensitive. [RT #15430]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1934. [func] Validate pending NS RRsets, in the authority section,
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews prior to returning them if it can be done without
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews requiring DNSKEYs to be fetched. [RT #15430]
2fa0485e9e969dd42dd10339354d7949db46111aMark Andrews1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
437404e8313481329baa5897eeda8c45bf748553Mark Andrews1931. [bug] Per-client mctx could require a huge amount of memory,
ef67e6d8fa86d98a2c0defc43b624434324d9ce7Mark Andrews particularly for a busy caching server. [RT #15519]
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews1930. [port] HPUX: ia64 support. [RT #15473]
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1927. [bug] Access to soanode or nsnode in rbtdb violated the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lock order rule and could cause a dead lock.
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews1926. [bug] The Windows installer did not check for empty
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews passwords. BINDinstall was being installed in
2941824604f9c5aa70f216d1f2941b3c59aa37dcMark Andrews the wrong place. [RT #15483]
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews1925. [port] All outer level AC_TRY_RUNs need cross compiling
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews defaults. [RT #15469]
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews1924. [port] libbind: hpux ia64 support. [RT #15473]
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein1923. [bug] ns_client_detach() called too early. [RT #15499]
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein1922. [bug] check-tool.c:setup_logging() missing call to
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein dns_log_setcontext().
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews1921. [bug] Client memory contexts were not using internal
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews malloc. [RT #15434]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1920. [bug] The cache rbtdb lock array was too small to
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews have the desired performance characteristics.
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews1919. [contrib] queryperf: a set of new features: collecting/printing
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews response delays, printing intermediate results, and
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews adjusting query rate for the "target" qps.
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews1918. [bug] Memory leak when checking acls. [RT #15391]
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews when generating man pages. [RT #15385]
d73541ea2eebe01cafc5ff1b2ba4b9a8f75237b1Mark Andrews1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews1915. [bug] dig +ndots was broken. [RT #15215]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1914. [protocol] DS is required to accept mnemonic algorithms
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews (RFC 4034). Still emit numeric algorithms for
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews compatibility with RFC 3658. [RT #15354]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews1913. [func] Integrate contributed DLZ code into named. [RT #11382]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews1912. [port] aix: atomic locking for powerpc. [RT #15020]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews1911. [bug] Update windows socket code. [RT #14965]
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews1910. [bug] dig's +sigchase code overhauled. [RT #14933]
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews1909. [bug] The DLV code has been re-worked to make no longer
30884083d4149a8ff838b84dac1ad55c86948da8Mark Andrews query order sensitive. [RT #14933]
6e8a8077faf96d8da0b6cf738913f5f1f86e4008Mark Andrews1908. [func] dig now warns if 'RA' is not set in the answer when
6e8a8077faf96d8da0b6cf738913f5f1f86e4008Mark Andrews 'RD' was set in the query. host/nslookup skip servers
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews that fail to set 'RA' when 'RD' is set unless a server
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews is explicitly set. [RT #15005]
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews1906. [func] dig now has a '-q queryname' and '+showsearch' options.
c553b3308e34edfaddbec57b3308bbbe362ef715Mark Andrews1905. [bug] Strings returned from cfg_obj_asstring() should be
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews treated as read-only. The prototype for
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews cfg_obj_asstring() has been updated to reflect this.
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews friends. Note: RFC 1918 zones are not yet covered by
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews this but are likely to be in a future release.
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews New options: empty-server, empty-contact,
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt empty-zones-enable and disable-empty-zone.
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews1903. [func] ISC string copy API.
1439214380abcc123e27a42d43a23ba441209ebeMark Andrews1902. [func] Attempt to make the amount of work performed in a
1439214380abcc123e27a42d43a23ba441209ebeMark Andrews iteration self tuning. The covers nodes clean from
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews the cache per iteration, nodes written to disk when
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews rewriting a master file and nodes destroyed per
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews iteration when destroying a zone or a cache.
52188225731669cd571984c45a1407a55c74ee78Mark Andrews1901. [cleanup] Don't add DNSKEY records to the additional section.
52188225731669cd571984c45a1407a55c74ee78Mark Andrews1900. [bug] ixfr-from-differences failed to ensure that the
52188225731669cd571984c45a1407a55c74ee78Mark Andrews serial number increased. [RT #15036]
3cbc87c31f76262980d54ddbcdda7875be37b684Mark Andrews1899. [func] named-checkconf now validates update-policy entries.
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews ISC_NETADDR_FORMATSIZE to allow for scope details.
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews1897. [func] x86 and x86_64 now have separate atomic locking
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews implementations.
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews1896. [bug] Recursive clients soft quota support wasn't working
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews as expected. [RT #15103]
6d7007e807241ae0a32de8db8d3bf434626026eaMark Andrews1895. [bug] A escaped character is, potentially, converted to
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews the output character set too early. [RT #14666]
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews1894. [doc] Review ARM for BIND 9.4.
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews1893. [port] Use uintptr_t if available. [RT #14606]
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews1892. [func] Support for SPF rdata type. [RT #15033]
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews1891. [port] freebsd: pthread_mutex_init can fail if it runs out
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews of memory. [RT #14995]
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews1890. [func] Raise the UDP receive buffer size to 32k if it is
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews less than 32k. [RT #14953]
25899e7f1ff0db5322362ada01f7aec3006ff0beTatuya JINMEI 神明達哉1889. [port] sunos: non blocking i/o support. [RT #14951]
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews1888. [func] Support for IPSECKEY rdata type. [RT #14967]
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews1887. [bug] The cache could delete expired records too fast for
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews clients with a virtual time in the past. [RT #14991]
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews1886. [bug] fctx_create() could return success even though it
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews failed. [RT #14993]
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉1885. [func] dig: report the number of extra bytes still left in
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 the packet after processing all the records.
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
5cf023372424c1a59fda4a994e3c85c08c26e2f1Tatuya JINMEI 神明達哉 levels. [RT #14962]
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews1882. [func] Limit the number of recursive clients that can be
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews waiting for a single query (<qname,qtype,qclass>) to
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews resolve. New options clients-per-query and
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews max-clients-per-query.
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews1881. [func] Add a system test for named-checkconf. [RT #14931]
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews1880. [func] The lame cache is now done on a <qname,qclass,qtype>
65d64acb51b0655f04b165c8045d1aed556489abMark Andrews basis as some servers only appear to be lame for
e9aca33f362d017fe0d5f7b729bce646038cf1eeMark Andrews certain query types. [RT #14916]
28e36fcc1eea8b5283aa33d3a6d21d42df8fdaf2Mark Andrews1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
2a2e9c7a1a8cded637be17f32dc1bbdef519ca81Mark Andrews1878. [func] Detect duplicates of UDP queries we are recursing on
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews and drop them. New stats category "duplicate".
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews1877. [bug] Fix unreasonably low quantum on call to
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews dns_rbt_destroy2(). Remove unnecessary unhash_node()
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews call. [RT #14919]
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews1876. [func] Additional memory debugging support to track size
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews and mctx arguments. [RT #14814]
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews1875. [bug] process_dhtkey() was using the wrong memory context
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews to free some memory. [RT #14890]
70ba825728dc64439801981a1abe7f1e28182698Mark Andrews1874. [port] sunos: portability fixes. [RT #14814]
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews1873. [port] win32: isc__errno2result() now reports its caller.
11b399514e4af7f370fe3948c3e3779a182ac5acMark Andrews1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews1871. [placeholder]
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews1870. [func] Added framework for handling multiple EDNS versions.
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews1869. [func] dig can now specify the EDNS version when making
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews a query. [RT #14873]
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews1868. [func] edns-udp-size can now be overridden on a per
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews server basis. [RT #14851]
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews1867. [bug] It was possible to trigger a INSIST in
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews dlv_validatezonekey(). [RT #14846]
7502c6600645f120434d84d0ce3df7c3585cfe43Mark Andrews1866. [bug] resolv.conf parse errors were being ignored by
b326d7e3a3a50eb65dd06db007d2fddc62606bbfMark Andrews1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
c0a1ebb1adecc5da1f1ad6f9b06a2b4356d2b135Mark Andrews bad addresses. [RT #14841]
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews1864. [bug] Don't try the alternative transfer source if you
4834c6a7f0054b8f4a8a267d60ef78204521e39eMark Andrews got a answer / transfer with the main source
f450814ab8989820a7bc9a2c484eb9f2c1c7b915Mark Andrews address. [RT #14802]
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews1863. [bug] rrset-order "fixed" error messages not complete.
0e93730a02a4cafbc5cdfaa04b2d813a0c11b205Mark Andrews1862. [func] Add additional zone data constancy checks.
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews named-checkzone has extended checking of NS, MX and
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews SRV record and the hosts they reference.
c04f4437ff8b2aba326e5099eae0cacb7de6f74bMark Andrews named has extended post zone load checks.
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews New zone options: check-mx and integrity-check.
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews1861. [bug] dig could trigger a INSIST on certain malformed
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews responses. [RT #14801]
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews incorrectly set. [RT #14775]
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews1859. [func] Add support for CH A record. [RT #14695]
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews1858. [bug] The flush-zones-on-shutdown option wasn't being
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews parsed. [RT #14686]
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews1857. [bug] named could trigger a INSIST() if reconfigured /
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews reloaded too fast. [RT #14673]
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews1855. [bug] ixfr-from-differences was failing to detect changes
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews of ttl due to dns_diff_subtract() was ignoring the ttl
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews of records. [RT #14616]
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews1854. [bug] lwres also needs to know the print format for
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews (long long). [RT #13754]
b68fe6c0fbfee1dc0659661993de5c6727b66c76Mark Andrews1853. [bug] Rework how DLV interacts with proveunsecure().
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews1852. [cleanup] Remove last vestiges of dnssec-signkey and
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews dnssec-makekeyset (removed from Makefile years ago).
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews1851. [doc] Doxygen comment markup. [RT #11398]
85bba08193debe026883d2d6bebbb0f7a01d7ba7Mark Andrews1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews1849. [doc] All forms of the man pages (docbook, man, html) should
5173d52b3eb9715259a2890614f869c6baeb18e1Mark Andrews have consistent copyright dates.
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews1848. [bug] Improve SMF integration. [RT #13238]
74ff5f080abdffa7823ff93da74969cd9fa25308Mark Andrews1847. [bug] isc_ondestroy_init() is called too late in
a10ae596379471b0dc76ebd8025d91bf2b90bafcMark Andrews dns_rbtdb_create()/dns_rbtdb64_create().
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
d5f13fecca944fc7229dac3215581cebec3ac314Mark Andrews <bortzmeyer@nic.fr>.
d844741f5516bce45f8897435342731edb2307cbMark Andrews1845. [bug] Improve error reporting to distinguish between
53e8e0e27a3db745548a7989639b91d16f841c1fMark Andrews accept()/fcntl() and socket()/fcntl() errors.
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews for each 16 bit piece of the IPv6 address. The text
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt representation of a IPv6 address has been tightened
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews when CFLAGS contains "-I /usr/local/include"
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews resulting in old header files being used.
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews1842. [port] cmsg_len() could produce incorrect results on
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews some platform. [RT #13744]
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews1841. [bug] "dig +nssearch" now makes a recursive query to
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt find the list of nameservers to query. [RT #13694]
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews1840. [func] dnssec-signzone can now randomize signature end times
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews (dnssec-signzone -j jitter). [RT #13609]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1839. [bug] <isc/hash.h> was not being installed.
4c8df3b2e8858e97debfe3fb771fe03f22b04d1eMark Andrews1838. [cleanup] Don't allow Linux capabilities to be inherited.
72379d863a3bb135e7da36e344b731a59b8c3e33Mark Andrews1837. [bug] Compile time option ISC_FACILITY was not effective
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews for 'named -u <user>'. [RT #13714]
e021f388dfc2ac024a103def34818af73e7e869fMark Andrews1836. [cleanup] Silence compiler warnings in hash_test.c.
dd95acdbce0e2a2775391709cdfca0a9eda7e8f7Mark Andrews1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
71e7ac828e9f4f2b124455b00c3d11560aa5d4c1Mark Andrews1834. [bug] Bad memset in rdata_test.c. [RT #13658]
1e6d80a391137b26e7250e72f6b28eb92c2b9952Mark Andrews1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
f34970d390482ceea61bd4d5bcd6ead7828157daMark Andrews1831. [doc] Update named-checkzone documentation. [RT #13604]
cbfce73e8e020c1d08c7be7b48a849d8333eb9bfMark Andrews1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
84a5b69f0029952e33c96695f0a7d26c2bb8f7ccMark Andrews1829. [bug] win32: "pid-file none;" broken. [RT #13563]
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews1828. [bug] isc_rwlock_init() failed to properly cleanup if it
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews encountered a error. [RT #13549]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1827. [bug] host: update usage message for '-a'. [RT #37116]
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
783707ee556191b974e951f04accf09f443f5fdfMark Andrews of memory error. [RT #13537]
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews1825. [bug] Missing UNLOCK() on out of memory error from in
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews rbtdb.c:subtractrdataset(). [RT #13519]
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews1824. [bug] Memory leak on dns_zone_setdbtype() failure.
fed3d5c2fc3fa8e1547e8b5c28c01f1095e17e5fMark Andrews1823. [bug] Wrong macro used to check for point to point interface.
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews1822. [bug] check-names test for RT was reversed. [RT #13382]
21094b43a2dc4e1f569a9ed894f5369470cd1a7fMark Andrews1821. [placeholder]
b03a31d98f1cf42414d321c742c9fc04be75b32bMark Andrews1820. [bug] Gracefully handle acl loops. [RT #13659]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1819. [bug] The validator needed to check both the algorithm and
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews digest types of the DS to determine if it could be
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews used to introduce a secure zone. [RT #13593]
cd0a7c71c0edd9540a7e917a2389a3ad0accc835Mark Andrews1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
ad98a8699371c9c449982fbbd8ceda91ad745f2aMark Andrews1817. [func] Add support for additional zone file formats for
c1807114ce574896694e3f449c73b098fe91730fMark Andrews improving loading performance. The masterfile-format
c1807114ce574896694e3f449c73b098fe91730fMark Andrews option in named.conf can be used to specify a
c1807114ce574896694e3f449c73b098fe91730fMark Andrews non-default format. A separate command
0066165079c7d85033f4b623153e404df31b9c75Mark Andrews named-compilezone was provided to generate zone files
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews in the new format. Additionally, the -I and -O options
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews for dnssec-signzone specify the input and output
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1815. [bug] nsupdate triggered a REQUIRE if the server was set
055597532db52233e80f617b8b015e8caadcb577Mark Andrews without also setting the zone and it encountered
055597532db52233e80f617b8b015e8caadcb577Mark Andrews a CNAME and was using TSIG. [RT #13086]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews1814. [func] UNIX domain controls are now supported.
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews1813. [func] Restructured the data locking framework using
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews architecture dependent atomic operations (when
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews available), improving response performance on
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews multi-processor machines significantly.
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews x86, x86_64, alpha, powerpc, and mips are currently
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews1811. [func] Preserve the case of domain names in rdata during
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews zone transfers. [RT #13547]
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews1810. [bug] configure, lib/bind/configure make different default
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews decisions about whether to do a threaded build.
3c20ae76389dd7bd2fbbb5145f51fe7f72f97f14Mark Andrews1809. [bug] "make distclean" failed for libbind if the platform
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews is not supported.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1808. [bug] zone.c:notify_zone() contained a race condition,
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews zone->db could change underneath it. [RT #13511]
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews1807. [bug] When forwarding (forward only) set the active domain
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews from the forward zone name. [RT #13526]
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews1806. [bug] The resolver returned the wrong result when a CNAME /
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews DNAME was encountered when fetching glue from a
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews secure namespace. [RT #13501]
31affb2ca39c483670ba71042ce4c984ac257232Mark Andrews1805. [bug] Pending status was not being cleared when DLV was
31affb2ca39c483670ba71042ce4c984ac257232Mark Andrews active. [RT #13501]
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews1804. [bug] Ensure that if we are queried for glue that it fits
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews in the additional section or TC is set to tell the
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews client to retry using TCP. [RT #10114]
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews1803. [bug] dnssec-signzone sometimes failed to remove old
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews RRSIGs. [RT #13483]
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews1802. [bug] Handle connection resets better. [RT #11280]
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews1801. [func] Report differences between hints and real NS rrset
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews and associated address records.
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews1800. [bug] Changes #1719 allowed a INSIST to be triggered.
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews1799. [bug] 'rndc flushname' failed to flush negative cache
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews entries. [RT #13438]
110fbe3a1315b38f1491546d82937a01c40f5fdbMark Andrews1798. [func] The server syntax has been extended to support a
110fbe3a1315b38f1491546d82937a01c40f5fdbMark Andrews range of servers. [RT #11132]
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews1797. [func] named-checkconf now check acls to verify that they
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews only refer to existing acls. [RT #13101]
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews1795. [bug] "rndc dumpdb" was not fully documented. Minor
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews formating issues with "rndc dumpdb -all". [RT #13396]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews1794. [func] Named and named-checkzone can now both check for
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews non-terminal wildcard records.
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews1793. [func] Extend adjusting TTL warning messages. [RT #13378]
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews1792. [func] New zone option "notify-delay". Specify a minimum
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews delay between sets of NOTIFY messages.
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews1791. [bug] 'host -t a' still printed out AAAA and MX records.
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews allow parallel make to succeed.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1789. [bug] Prerequisite test for tkey and dnssec could fail
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews with "configure --with-libtool".
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews1788. [bug] libbind9.la/libbind9.so needs to link against
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews1786. [port] AIX: libt_api needs to be taught to look for
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews T_testlist in the main executable (--with-libtool).
4f32995bf6af48ab410b6d14b160348f5ffe0556Mark Andrews1785. [bug] libbind9.la/libbind9.so needs to link against
817a7fb62d05222fb287bbcde910ab3669f6d237Mark Andrews1784. [cleanup] "libtool -allow-undefined" is the default.
ac86cff0d7ff2108cd7ace66697e2de104735496Mark Andrews Leave hooks in configure to allow it to be set
2a71a21346ce6a098b7daf98358d5bdced8e6eb6Mark Andrews if needed in the future.
8147940ae7a7280ba12dd35614b9c987b38363faMark Andrews1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
23ac30603a7639bea1d331537634b079b046b122Mark Andrews source tree.
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews1782. [port] OSX: --with-libtool + --enable-libbind broke on
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews __evOptMonoTime. [RT #13219]
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
9cc53f2a0819301c2de7ab93197eee11e8a365e7Mark Andrews1780. [bug] Update libtool to 1.5.10.
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
326449ec24b069f5ef59c8e282ae22a50aa27049Mark Andrews1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
207f0a15bb486d8dc27cf5ff963fac6068ee2972Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
a1ed9109a60911df561628e49c5c29e3b0506801Mark Andrews1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews IN6ADDR_LOOPBACK_INIT macros.
825fccf631aa71cfbb8bfcf4e2009ca21de28f36Mark Andrews1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
5639d60b40db2051eb7e737d86635c621ffbfa12Mark Andrews1774. [port] Aix: Silence compiler warnings / build failures.
689023771c563d8660e45d439a207e06e96de28fMark Andrews1773. [bug] Fast retry on host / net unreachable. [RT #13153]
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews1772. [placeholder]
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews1771. [placeholder]
3a1d86e8f51c953c2407e112e15b47328b6ee4feMark Andrews1770. [bug] named-checkconf failed to report missing a missing
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews file clause for rbt{64} master/hint zones. [RT #13009]
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉1769. [port] win32: change compiler flags /MTd ==> /MDd,
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews rdataset. [RT #12907]
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews support for (struct in6_pktinfo) failed. [RT #13077]
7f2a6b0ef762b4cef9b0b2b59e7f44e4d2d4d32dMark Andrews1766. [bug] Update the master file timestamp on successful refresh
e37dff26c6bb6e2ffbba7b089ca3599d5e3e04fbMark Andrews as well as the journal's timestamp. [RT #13062]
b712879fcb6d584bb16b3f39ec1fb6ee176e4a03Mark Andrews1765. [bug] configure --with-openssl=auto failed. [RT #12937]
f697150aefb5d64e5bed4111aa2596a268ee8848Mark Andrews1764. [bug] dns_zone_replacedb failed to emit a error message
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt if there was no SOA record in the replacement db.
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews1763. [func] Perform sanity checks on NS records which refer to
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews 'in zone' names. [RT #13002]
c0d2891f6e08fcf5379dfb9a1bf8fbbb63f1952aMark Andrews1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews even when it failed. [RT #12995]
cb75f7ce19e11e3dfedee5a50a331bf53cd2c36bMark Andrews1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews1760. [bug] Host / net unreachable was not penalising rtt
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews estimates. [RT #12970]
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews1759. [bug] Named failed to startup if the OS supported IPv6
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews but had no IPv6 interfaces configured. [RT #12942]
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews1758. [func] Don't send notify messages to self. [RT #12933]
351696ef9e44e31e200afc0b019f24af6b597471Rob Austein1757. [func] host now can turn on memory debugging flags with '-m'.
1672cff96d0b02badab6f94524e10285dde851fcMark Andrews1756. [func] named-checkconf now checks the logging configuration.
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews1755. [func] allow-update is now settable at the options / view
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews level. [RT #6636]
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews1754. [bug] We weren't always attempting to query the parent
c5a84548b24ffac37d0154d8f2f4fea36a3aeb23Mark Andrews server for the DS records at the zone cut.
7b78f6665635ed85118352c97ff5a25f5bb242f7Mark Andrews1753. [bug] Don't serve a slave zone which has no NS records.
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews1752. [port] Move isc_app_start() to after ns_os_daemonise()
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews as some fork() implementations unblock the signals
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews that are blocked by isc_app_start(). [RT #12810]
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
7de69feda2f66658ce66a8700d64ffb88d47bb6aMark Andrews1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews1749. [bug] 'check-names response ignore;' failed to ignore.
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews1748. [func] dig now returns the byte count for axfr/ixfr.
bb3e43000807197e776407fd8d524a87dcc17a10Mark Andrews1747. [bug] BIND 8 compatibility: named/named-checkconf failed
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews to parse "host-statistics-max" in named.conf.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1746. [func] Make public the function to read a key file,
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews dst_key_read_public(). [RT #12450]
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews1745. [bug] Dig/host/nslookup accept replies from link locals
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews regardless of scope if no scope was specified when
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews query was sent. [RT #12745]
d562cb04df022606af43c7bee3111e4d17cbe4b2Mark Andrews1744. [bug] If tuple2msgname() failed to convert a tuple to
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews a name a REQUIRE could be triggered. [RT #12796]
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews1743. [bug] If isc_taskmgr_create() was not able to create the
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews requested number of worker threads then destruction
1bf8f4b77df1e1f8c1ce8326679ab02bac235c09Mark Andrews of the manager would trigger an INSIST() failure.
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews1742. [bug] Deleting all records at a node then adding a
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews previously existing record, in a single UPDATE
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews transaction, failed to leave / regenerate the
32c7aa3dd18d57979990574ddb008437b59c2428Rob Austein associated RRSIG records. [RT #12788]
358043e40fd0c1fe312e25c28a771aafc3bd7b79Mark Andrews1741. [bug] Deleting all records at a node in a secure zone
358043e40fd0c1fe312e25c28a771aafc3bd7b79Mark Andrews using a update-policy grant failed. [RT #12787]
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews1740. [bug] Replace rbt's hash algorithm as it performed badly
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews with certain zones. [RT #12729]
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews NOTE: a hash context now needs to be established
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews via isc_hash_create() if the application was not
a5e055b9d8bc42b0e29d88960ed2a5c531fa5acbRob Austein already doing this.
3d8dfd44a3be708f00380064411c16b2fa28303aMark Andrews1739. [bug] dns_rbt_deletetree() could incorrectly return
a46445468bb39318ad2a4291ace371a8c4ff9ac6Mark Andrews ISC_R_QUOTA. [RT #12695]
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews1738. [bug] Enable overrun checking by default. [RT #12695]
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews1737. [bug] named failed if more than 16 masters were specified.
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews1736. [bug] dst_key_fromnamedfile() could fail to read a
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews public key. [RT #12687]
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews1733. [bug] Return non-zero exit status on initial load failure.
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews1731. [port] darwin: relax version test in ifconfig.sh.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews1730. [port] Determine the length type used by the socket API.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews1729. [func] Improve check-names error messages.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews1728. [doc] Update check-names documentation.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews1727. [bug] named-checkzone: check-names support didn't match
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews documentation.
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews1726. [port] aix5: add support for aix5.
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews1725. [port] linux: update error message on interaction of threads,
1c52f228e9e2d8784273b7af76794031e480e5e8Mark Andrews capabilities and setuid support (named -u). [RT #12541]
ea0b0c283be744d8b5810927b9981a9afe2f900dMark Andrews1724. [bug] Look for DNSKEY records with "dig +sigtrace".
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews1722. [bug] Don't commit the journal on malformed ixfr streams.
c52d94fa4b7eaf8b7be9dfda15f9fc2c01041d51Mark Andrews1721. [bug] Error message from the journal processing were not
f66cd386cf4d0cc65b28cbaeaf540353406393a8Mark Andrews always identifying the relevant journal. [RT #12519]
e94cf7074d8ac30820a715211ae914387996cca9Mark Andrews1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews negative response. [RT #12506]
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews1719. [bug] named was not correctly caching a RFC 2308 Type 1
6ecbd11029fa201b5f273f4ef016617dc35206aeMark Andrews negative response. [RT #12506]
738bffe2ee7dd6f3efeae8e2cca9017acc9c5f94Mark Andrews1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews responses when looking for the zone / master server.
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews1717. [port] solaris: ifconfig.sh did not support Solaris 10.
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews "ifconfig.sh down" didn't work for Solaris 9.
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews1716. [doc] named.conf(5) was being installed in the wrong
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews location. [RT #12441]
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews1715. [func] 'dig +trace' now randomly selects the next servers
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews to try. Report if there is a bad delegation.
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews1714. [bug] dig/host/nslookup were only trying the first
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews address when a nameserver was specified by name.
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews1713. [port] linux: extend capset failure message to say:
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews please ensure that the capset kernel module is
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews loaded. see insmod(8)
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews messages for the specified zone. [RT #9479]
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews1709. [port] solaris: add SMF support from Sun.
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
74def1c9c1880480bb62eb881e8a7ce28f9f7a20Mark Andrews for conformance to the name space convention. Binary
5efa612be0471cc4e133b795db3dd3addf18ba6cMark Andrews backward compatibility to the old function name is
5efa612be0471cc4e133b795db3dd3addf18ba6cMark Andrews provided. [RT #12376]
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews1707. [contrib] sdb/ldap updated to version 1.0-beta.
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews1706. [bug] 'rndc stop' failed to cause zones to be flushed
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 sometimes. [RT #12328]
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉1705. [func] Allow the journal's name to be changed via named.conf.
75654de87118c587629b5dc6882b6c1925d34983Tatuya JINMEI 神明達哉1704. [port] lwres needed a snprintf() implementation for
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt platforms without snprintf(). Add missing
71839e2a424a904a60429a380ee7685464022e4bMark Andrews "#include <isc/print.h>". [RT #12321]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1703. [bug] named would loop sending NOTIFY messages when it
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews failed to receive a response. [RT #12322]
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews1702. [bug] also-notify should not be applied to built in zones.
445acbbea8bd5143749e97a8ff247a808321aa6cMark Andrews1701. [doc] A minimal named.conf man page.
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews1700. [func] nslookup is no longer to be treated as deprecated.
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews Remove "deprecated" warning message. Add man page.
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews1699. [bug] dnssec-signzone can generate "not exact" errors
b9625d9be5d89015b75cc7c25088a8d1a3bb7655Mark Andrews when resigning. [RT #12281]
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews1698. [doc] Use reserved IPv6 documentation prefix.
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews1697. [bug] xxx-source{,-v6} was not effective when it
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt specified one of listening addresses and a
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉 different port than the listening port. [RT #12257]
c5076a76f6562b5aa48e6a1c680c343b53846157Mark Andrews1696. [bug] dnssec-signzone failed to clean out nodes that
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews consisted of only NSEC and RRSIG records.
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews1695. [bug] DS records when forwarding require special handling.
5ed76fa7ea83d3ce7a33d365aa3b84410c3b8773Mark Andrews1694. [bug] Report if the builtin views of "_default" / "_bind"
5ed76fa7ea83d3ce7a33d365aa3b84410c3b8773Mark Andrews are defined in named.conf. [RT #12023]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews1693. [bug] max-journal-size was not effective for master zones
ad3b537a241f40bbb3fdc4de252881c42645021bMark Andrews with ixfr-from-differences set. [RT #12024]
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
de6ceebf98bedee0b1e1e81d078befbd728b801cMark Andrews1691. [bug] sdb's attachversion was not complete. [RT #11990]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews1690. [bug] Delay detaching view from the client until UPDATE
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews processing completes when shutting down. [RT #11714]
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt contained gratuitous semicolons. [RT #11707]
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews1688. [bug] LDFLAGS was not supported.
a0a19510c03e6004fd11ec278745d499751cd081Mark Andrews1687. [bug] Race condition in dispatch. [RT #10272]
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews1686. [bug] Named sent a extraneous NOTIFY when it received a
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews redundant UPDATE request. [RT #11943]
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews1685. [bug] Change #1679 loop tests weren't quite right.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews1684. [func] ixfr-from-differences now takes master and slave in
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews addition to yes and no at the options and view levels.
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews1683. [bug] dig +sigchase could leak memory. [RT #11445]
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews1682. [port] Update configure test for (long long) printf format.
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews1681. [bug] Only set SO_REUSEADDR when a port is specified in
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt isc_socket_bind(). [RT #11742]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1680. [func] rndc: the source address can now be specified.
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews1679. [bug] When there was a single nameserver with multiple
e1f638a7141a4c1364e4ca45025241c9e2fecf74Mark Andrews addresses for a zone not all addresses were tried.
fb827ed6df9a473770fb69a75a455b4ad0d14f52Mark Andrews1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
154bd87b5c9d603329dd691b822525c6885f21d4Mark Andrews1676. [func] New option "allow-query-cache". This lets
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews allow-query be used to specify the default zone
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt access level rather than having to have every
6ec0f98cf6e88aeba1615763fdec253bf391f22eMark Andrews zone override the global value. allow-query-cache
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews can be set at both the options and view levels.
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews If allow-query-cache is not set allow-query applies.
d4e1933abc4bfa3d42dcc2f093c81816a317dde6Mark Andrews1675. [bug] named would sometimes add extra NSEC records to
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews the authority section.
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews1674. [port] linux: increase buffer size used to scan
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews1673. [port] linux: issue a error messages if IPv6 interface
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews scans fails.
7d4a465de03b26bf9f5ef131d03253b8f6afc169Mark Andrews1672. [cleanup] Tests which only function in a threaded build
7d4a465de03b26bf9f5ef131d03253b8f6afc169Mark Andrews now return R:THREADONLY (rather than R:UNTESTED)
6e3bc2e0f715e2f3ddbfc10811303f39cce37fc6Mark Andrews in a non-threaded build.
0b9af9eb37f624033652f6cc463262474ee13344Mark Andrews1671. [contrib] queryperf: add NAPTR to the list of known types.
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews1670. [func] Log UPDATE requests to slave zones without an acl as
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews "disabled" at debug level 3. [RT #11657]
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews1669. [placeholder]
bdb609f5874056f6f1cd212ebf8700132e683fe5Mark Andrews1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1667. [port] linux: not all versions have IF_NAMESIZE.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1666. [bug] The optional port on hostnames in dual-stack-servers
a3a09ca2497e925a9f0ba76f1525c6c60e5d5094Mark Andrews was being ignored.
7f5a3cea4e93ad683b13ebef8a6589afd97fb762Mark Andrews1665. [func] rndc now allows addresses to be set in the
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews server clauses.
50105afc551903541608b11851d73278b23579a3Mark Andrews1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews1663. [func] Look for OpenSSL by default.
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews1662. [bug] Change #1658 failed to change one use of 'type'
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews to 'keytype'.
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews1661. [bug] Restore dns_name_concatenate() call in
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews adb.c:set_target(). [RT #11582]
9c8fb5f756d99a4ecba95df9a00757384f3b71b7Mark Andrews1660. [bug] win32: connection_reset_fix() was being called
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews unconditionally. [RT #11595]
d81018ac98b287438248cd0e3a1c230eb40b0b55Mark Andrews1659. [cleanup] Cleanup some messages that were referring to KEY vs
1d7cbe71b99ea0e883a4cf8af8a91bba04a3597eMark Andrews DNSKEY, NXT vs NSEC and SIG vs RRSIG.
7436bb66c610c039ca3dec12aac5024037898910Mark Andrews1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews and DH. Tighten which options apply to KEY and
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews DNSKEY records.
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews1657. [doc] ARM: document query log output.
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews DNSKEY and RRSIG. [RT #11542]
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews1655. [bug] Logging multiple versions w/o a size was broken.
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews1654. [bug] isc_result_totext() contained array bounds read
3f08fb69eb3b5f6eaa3c57160dff0998e1569283Mark Andrews1653. [func] Add key type checking to dst_key_fromfilename(),
3f08fb69eb3b5f6eaa3c57160dff0998e1569283Mark Andrews DST_TYPE_KEY should be used to read TSIG, TKEY and
9ce4318edbab0b50f21df9ce28beb6fde71943ecMark Andrews SIG(0) keys.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1652. [bug] TKEY still uses KEY.
80c5a37ddcb42239f6b7d16b66ca0426ca6ffe2cMark Andrews1651. [bug] dig: process multiple dash options.
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews1650. [bug] dig, nslookup: flush standard out after each command.
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews1649. [bug] Silence "unexpected non-minimal diff" message.
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews1648. [func] Update dnssec-lookaside named.conf syntax to support
902aebfb5ad7c735f74f700da288dc4519b83123Mark Andrews multiple dnssec-lookaside namespaces (not yet
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews implemented).
0e4f7c9d4e1a4bb66f0702e9f9975c392a15918bMark Andrews1647. [bug] It was possible trigger a INSIST when chasing a DS
7554feaef6057f5ea2926076900ac7634b911456Mark Andrews record that required walking back over a empty node.
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews1646. [bug] win32: logging file versions didn't work with
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews non-UNC filenames. [RT #11486]
54a8b1e6ede781e9f4059512530046db8c4de1ddMark Andrews1645. [bug] named could trigger a REQUIRE failure if multiple
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews masters with keys are specified.
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews1644. [bug] Update the journal modification time after a
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews successful refresh query. [RT #11436]
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews1643. [bug] dns_db_closeversion() could leak memory / node
c368f28dad471c70213b41f7a0ad1b4ef4d8c543Mark Andrews references. [RT #11163]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews1642. [port] Support OpenSSL implementations which don't have
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews DSA support. [RT #11360]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews1641. [bug] Update the check-names description in ARM. [RT #11389]
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews incorrectly closing the socket. [RT #11291]
6bd3b1fdb3915931ac158b2126fae35711bd0b26Mark Andrews1639. [func] Initial dlv system test.
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews1638. [bug] "ixfr-from-differences" could generate a REQUIRE
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews failure if the journal open failed. [RT #11347]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews1637. [bug] Node reference leak on error in addnoqname().
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
ea40cebe2b51bd2b3c228ac6d08a3cfeca17960aMark Andrews a error had occurred. The database version no longer
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews matched the version of the database that was dumped.
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews1635. [bug] Memory leak on error in query_addds().
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews1634. [bug] named didn't supply a useful error message when it
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews detected duplicate views. [RT #11208]
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews1633. [bug] named should return NOTIMP to update requests to a
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews slaves without a allow-update-forwarding acl specified.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews1632. [bug] nsupdate failed to send prerequisite only UPDATE
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews messages. [RT #11288]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews1631. [bug] dns_journal_compact() could sometimes corrupt the
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews journal. [RT #11124]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews1630. [contrib] queryperf: add support for IPv6 transport.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews1629. [func] dig now supports IPv6 scoped addresses with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews extended format in the local-server part. [RT #8753]
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews1628. [bug] Typo in Compaq Trucluster support. [RT #11264]
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews1627. [bug] win32: sockets were not being closed when the
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews last external reference was removed. [RT #11179]
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews1626. [bug] --enable-getifaddrs was broken. [RT #11259]
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews1625. [bug] named failed to load/transfer RFC2535 signed zones
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt which contained CNAMES. [RT #11237]
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews1624. [bug] zonemgr_putio() call should be locked. [RT #11163]
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews1623. [bug] A serial number of zero was being displayed in the
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews "sending notifies" log message when also-notify was
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews used. [RT #11177]
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews available, and suppress wildcard binding if not.
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews1621. [bug] match-destinations did not work for IPv6 TCP queries.
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews1620. [func] When loading a zone report if it is signed. [RT #11149]
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews1618. [bug] Fencepost errors in dns_name_ishostname() and
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews dns_name_ismailbox() could trigger a INSIST().
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews1617. [port] win32: VC++ 6.0 support.
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews1616. [compat] Ensure that named's version is visible in the core
7052e191ce63fdf063a977695718ff426a27628eMark Andrews dump. [RT #11127]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
7052e191ce63fdf063a977695718ff426a27628eMark Andrews it is defined.
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews1614. [port] win32: silence resource limit messages. [RT #11101]
185fd227381269568e193147a98f292210a16f2cMark Andrews1613. [bug] Builds would fail on machines w/o a if_nametoindex().
fb31e2890814be0ac3c343d91144f89ce5e05784Mark Andrews Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews1612. [bug] check-names at the option/view level could trigger
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews an INSIST. [RT #11116]
f853c77478af94109291ea93f800444b949be558Mark Andrews1611. [bug] solaris: IPv6 interface scanning failed to cope with
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews no active IPv6 interfaces.
7ad4d54f29c315cbcb241ca5fc12ba1e0744358bMark Andrews1610. [bug] On dual stack machines "dig -b" failed to set the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address type to be looked up with "@server".
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews1609. [func] dig now has support to chase DNSSEC signature chains.
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews DNSSEC validation code in dig coded by Olivier Courtay
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt (olivier.courtay@irisa.fr) for the IDsA project
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1608. [func] dig and host now accept -4/-6 to select IP transport
8f2b99738760449de3431b191c0c9c0ea08fdc2eMark Andrews to use when making queries.
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews1607. [bug] dig, host and nslookup were still using random()
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews to generate query ids. [RT #11013]
881702c9c0079cd48a45054fd90d043f3a8b7e11Mark Andrews1606. [bug] DLV insecurity proof was failing.
012dedf87438043ff00d4deec8b488eec2be2a1cMark Andrews1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews1604. [bug] A xfrout_ctx_create() failure would result in
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews xfrout_ctx_destroy() being called with a
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt partially initialized structure.
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉1603. [bug] nsupdate: set interactive based on isatty().
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉1602. [bug] Logging to a file failed unless a size was specified.
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉1601. [bug] Silence spurious warning 'both "recursion no;" and
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 "allow-recursion" active' warning from view "_bind".
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉1600. [bug] Duplicate zone pre-load checks were not case
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews1599. [bug] Fix memory leak on error path when checking named.conf.
e724512f2be8d3de5f2982ebba0b2cdaf8325702Mark Andrews1598. [func] Specify that certain parts of the namespace must
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews be secure (dnssec-must-be-secure).
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews1597. [func] Allow notify-source and query-source to be specified
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt on a per server basis similar to transfer-source.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1596. [func] Accept 'notify-source' style syntax for query-source.
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews1595. [func] New notify type 'master-only'. Enable notify for
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt master zones only.
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews1594. [bug] 'rndc dumpdb' could prevent named from answering
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews queries while the dump was in progress. [RT #10565]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews1593. [bug] rndc should return "unknown command" to unknown
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews commands. [RT #10642]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews1592. [bug] configure_view() could leak a dispatch. [RT #10675]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews1591. [bug] libbind: updated to BIND 8.4.5.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1590. [port] netbsd: update thread support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1589. [func] DNSSEC lookaside validation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
1160ecfd146301ff0d053ed054e5276f33f28b4eMark Andrews1587. [bug] dns_message_settsigkey() failed to clear existing key.
d3fc633c344e15179480d887aeecf4a6263baeabMark Andrews1586. [func] "check-names" is now implemented.
73d74334741756eab4a9afd8d3c4e7c08da9a844Mark Andrews1585. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1584. [bug] "make test" failed with a read only source tree.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1583. [bug] Records add via UPDATE failed to get the correct trust
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews level. [RT #10452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1582. [bug] rrset-order failed to work on RRsets with more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than 32 elements. [RT #10381]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1581. [func] Disable DNSSEC support by default. To enable
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews DNSSEC specify "dnssec-enable yes;" in named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1580. [bug] Zone destruction on final detach takes a long time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1579. [bug] Multiple task managers could not be created.
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews workaround code. [RT #10331]
20d90a37532b92b0471c56fb583d6b2ddc32caa6Mark Andrews1576. [bug] Race condition in dns_dispatch_addresponse().
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1574. [bug] Don't attempt to open the controls socket(s) when
2f025ec6fe68421d942330afaf1980b7a4976e30Mark Andrews running tests. [RT #9091]
c528ef03d9cdfd7eed4fe6b93563dd599bbb25b0Mark Andrews1573. [port] linux: update to libtool 1.5.2 so that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "make install DESTDIR=/xx" works with
f58233ec6c8b5866083bbaf5083ac9ade6bebe3aMark Andrews "configure --with-libtool". [RT #9941]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1572. [bug] nsupdate: sign the soa query to find the enclosing
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews zone if the server is specified. [RT #10148]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1571. [bug] rbt:hash_node() could fail leaving the hash table
1b5a72829324a0d2fa327a270caea8fd02ae8779Mark Andrews in an inconsistent state. [RT #10208]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1570. [bug] nsupdate failed to handle classes other than IN.
5e9f6125246cec57771bcdeefed03153d41c23fdMark Andrews New keyword 'class' which sets the default class.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1569. [func] nsupdate new command 'answer' which displays the
3184ff5e45c8f821e5165ea60d674bfb87faf5b8Mark Andrews complete answer message to the last update.
1e107b3d7b54de5022c3328423164e533afcc15eMark Andrews1568. [bug] nsupdate now reports that the update failed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interactive mode. [RT #10236]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1566. [port] Support for the cmsg framework on Solaris and HP/UX.
17a14e451df80b3d82278e5c925682ade3263dbcMark Andrews This also solved the problem that match-destinations
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for IPv6 addresses did not work on these systems.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1565. [bug] CD flag should be copied to outgoing queries unless
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the query is under a secure entry point in which case
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews CD should be set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1564. [func] Attempt to provide a fallback entropy source to be
f488b1c311f2fc09ae8e45f7893185e608b17edeMark Andrews used if named is running chrooted and named is unable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to open entropy source within the chroot area.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1563. [bug] Gracefully fail when unable to obtain neither an IPv4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nor an IPv6 dispatch. [RT #10230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1562. [bug] isc_socket_create() and isc_socket_accept() could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews leak memory under error conditions. [RT #10230]
ffdfae8e4188c143297393f80f22134503372452Mark Andrews1561. [bug] It was possible to release the same name twice if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named ran out of memory. [RT #10197]
471e0563c7965c556c759775882cd3448dae78eaMark Andrews1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and EAI_NONAME to the same value.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1559. [port] named should ignore SIGFSZ.
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews child zones for which we don't have a supported
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithm. Such child zones are treated as unsigned.
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews1557. [func] Implement missing DNSSEC tests for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * NOQNAME proof with wildcard answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * NOWILDARD proof with NXDOMAIN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Cache and return NOQNAME with wildcard answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1556. [bug] nsupdate now treats all names as fully qualified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1555. [func] 'rrset-order cyclic' no longer has a random starting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews point per query. [RT #7572]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1554. [bug] dig, host, nslookup failed when no nameservers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were specified in /etc/resolv.conf. [RT #8232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1553. [bug] The windows socket code could stop accepting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connections. [RT #10115]
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews1552. [bug] Accept NOTIFY requests from mapped masters if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched-mapped is set. [RT #10049]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1551. [port] Open "/dev/null" before calling chroot().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1550. [port] Call tzset(), if available, before calling chroot().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1549. [func] named-checkzone can now write out the zone contents
f95231835fdcd8d5f58486c9f9993602f27fe157Mark Andrews in a easily parsable format (-D and -o).
21f1794606dce19928cf455029e173321f166380Mark Andrews1548. [bug] When parsing APL records it was possible to silently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews accept out of range ADDRESSFAMILY values. [RT #9979]
0cb25226fba18befbe40156c93845f2fc9bf3524Mark Andrews1547. [bug] Named wasted memory recording duplicate lame zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews entries. [RT #9341]
2610933abd985bdea28801c35d740d2cab2f137aMark Andrews1546. [bug] We were rejecting valid secure CNAME to negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1545. [bug] It was possible to leak memory if named was unable to
fc87397df60d3c5e5d9900ff5ac82da29fe1dbb7Mark Andrews bind to the specified transfer source and TSIG was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being used. [RT #10120]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1544. [bug] Named would logged a single entry to a file despite it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being over the specified size limit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1543. [bug] Logging using "versions unlimited" did not work.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews1542. [placeholder]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews1541. [func] NSEC now uses new bitmap format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1539. [bug] Open UDP sockets for notify-source and transfer-source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that use reserved ports at startup. [RT #9475]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1538. [placeholder] rt9997
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews1537. [func] New option "querylog". If set specify whether query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews logging is to be enabled or disabled at startup.
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews1536. [bug] Windows socket code failed to log a error description
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when returning ISC_R_UNEXPECTED. [RT #9998]
163547c0c064251e97c74538c5ede3232b3f0ffaMark Andrews1535. [placeholder]
8ff31bab2f51b171a8eab3a0b8415c64529e116eMark Andrews1534. [bug] Race condition when priming cache. [RT #9940]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1533. [func] Warn if both "recursion no;" and "allow-recursion"
07a849ba02aba7e8e869bc82c360fcc4b27eb009Mark Andrews are active. [RT #4389]
806c235ecf533b98d068b3f8df9d7abbe1e30cf9Mark Andrews1532. [port] netbsd: the configure test for <sys/sysctl.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1531. [port] AIX more libtool fixes.
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews1530. [bug] It was possible to trigger a INSIST() failure if a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews slave master file was removed at just the correct
2fd63cf561135572339d4e2ff0c06695e3dcf1baMark Andrews moment. [RT #9462]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1529. [bug] "notify explicit;" failed to log that NOTIFY messages
8ca42f6318be756354b70260050132545aa680d3Mark Andrews were being sent for the zone. [RT #9442]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1528. [cleanup] Simplify some dns_name_ functions based on the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deprecation of bitstring labels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1527. [cleanup] Reduce the number of gettimeofday() calls without
7ec0f55f1542d8bb9475bbe93e911d7520f043caMark Andrews losing necessary timer granularity.
4cb69e7c919cc43b16852016588af714bc421da3Mark Andrews1526. [func] Implemented "additional section caching (or acache)",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an internal cache framework for additional section
ea6fe0d54f36754c195b3b8dac47c81f7993677eMark Andrews content to improve response performance. Several
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration options were provided to control the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1525. [bug] dns_cache_create() could trigger a REQUIRE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure in isc_mem_put() during error cleanup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1524. [port] AIX needs to be able to resolve all symbols when
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews creating shared libraries (--with-libtool).
80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews1523. [bug] Fix race condition in rbtdb. [RT #9189]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1522. [bug] dns_db_findnode() relax the requirements on 'name'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1521. [bug] dns_view_createresolver() failed to check the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result from isc_mem_create(). [RT #9294]
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews1520. [protocol] Add SSHFP (SSH Finger Print) type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews length of the new bitmap.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contained a off-by-one error when working out the
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews number of octets in the bitmap.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1517. [port] Support for IPv6 interface scanning on HP/UX and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TrueUNIX 5.1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews1515. [func] Allow transfer source to be set in a server statement.
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews1514. [bug] named: isc_hash_destroy() was being called too early.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1513. [doc] Add "US" to root-delegation-only exclude list.
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews1512. [bug] Extend the delegation-only logging to return query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews type, class and responding nameserver.
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews1511. [bug] delegation-only was generating false positives
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on negative answers from sub-zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1510. [func] New view option "root-delegation-only". Apply
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews delegation-only check to all TLDs and root.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note there are some TLDs that are NOT delegation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only (e.g. DE, LV, US and MUSEUM) these can be excluded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the checks by using exclude.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews root-delegation-only exclude {
463fc8f9d61e07613486e64b4b7b3f924ea2b25cMark Andrews "DE"; "LV"; "US"; "MUSEUM";
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1509. [bug] Hint zones should accept delegation-only. Forward
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone should not accept delegation-only.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1508. [bug] Don't apply delegation-only checks to answers from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1507. [bug] Handle BIND 8 style returns to NS queries to parents
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews when making delegation-only checks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1506. [bug] Wrong return type for dns_view_isdelegationonly().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1504. [func] New zone type "delegation-only".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1503. [port] win32: install libeay32.dll outside of system32.
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1501. [func] Allow TCP queue length to be specified via
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews named.conf, tcp-listen-queue.
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews1500. [bug] host failed to lookup MX records. Also look up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews AAAA records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1499. [bug] isc_random need to be seeded better if arc4random()
5da49e379c79fbd597cf0d47e7697b65991f761fMark Andrews is not used.
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews1498. [port] bsdos: 5.x support.
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews1497. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1496. [port] test for pthread_attr_setstacksize().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1495. [cleanup] Replace hash functions with universal hash.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1494. [security] Turn on RSA BLINDING as a precaution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1493. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1492. [cleanup] Preserve rwlock quota context when upgrading /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews downgrading. [RT #5599]
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews lines. [RT #6206]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1490. [bug] Accept reading state as well as working state in
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews ns_client_next(). [RT #6813]
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews1489. [compat] Treat 'allow-update' on slave zones as a warning.
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews1488. [bug] Don't override trust levels for glue addresses.
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews1487. [bug] A REQUIRE() failure could be triggered if a zone was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queued for transfer and the zone was then removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1486. [bug] isc_print_snprintf() '%%' consumed one too many format
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews characters. [RT #8230]
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews1485. [bug] gen failed to handle high type values. [RT #6225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1484. [bug] The number of records reported after a AXFR was wrong.
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews1483. [bug] dig axfr failed if the message id in the answer failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to match that in the request. Only the id in the first
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews message is required to match. [RT #8138]
12ff7274fe2ea531ecca6a71fb9f7e1ae92da389Mark Andrews1482. [bug] named could fail to start if the kernel supports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 but no interfaces are configured. Similarly
9d3ad53203f1ac49f9e876dbbcaca18656eb3e19Mark Andrews for IPv4. [RT #6229]
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews1481. [bug] Refresh and stub queries failed to use masters keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if specified. [RT #7391]
8da0b50e8a8c74602eca97e261ce4ad457df5048Mark Andrews1480. [bug] Provide replay protection for rndc commands. Full
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews replay protection requires both rndc and named to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be updated. Partial replay protection (limited
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews exposure after restart) is provided if just named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1479. [bug] cfg_create_tuple() failed to handle out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory cleanup. parse_list() would leak memory
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews on syntax errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1478. [port] ifconfig.sh didn't account for other virtual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces. It now takes a optional argument
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews to specify the first interface number. [RT #3907]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1477. [bug] memory leak using stub zones and TSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1476. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1475. [port] Probe for old sprintf().
90295f915c883d1aeeda856f518584d4219a704aMark Andrews1474. [port] Provide strtoul() and memmove() for platforms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without them.
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews1473. [bug] create_map() and create_string() failed to handle out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory cleanup. [RT #6813]
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
99776003811a413457a2c35a808ad860df877d24Mark Andrews1471. [bug] libbind: updated to BIND 8.4.0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1470. [bug] Incorrect length passed to snprintf. [RT #5966]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1469. [func] Log end of outgoing zone transfer at same level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as the start of transfer is logged. [RT #4441]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1468. [func] Internal zones are no longer counted for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'rndc status'. [RT #4706]
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews1467. [func] $GENERATES now supports optional class and ttl.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1466. [bug] lwresd configuration errors resulted in memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and lock leaks. [RT #5228]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews failed to check that trailing bits were zero allowing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews some invalid base64 strings to be accepted. [RT #5397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1464. [bug] Preserve "out of zone" data for outgoing zone
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉 transfers. [RT #5192]
be0e075ac2c10ade3e80edef7fa14ac0fda92690Mark Andrews1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NXT bit maps. [RT #5577]
2a908588fbeacebc5f13b153b73c96e12dacaadcTatuya JINMEI 神明達哉1462. [bug] parse_sizeval() failed to check the token type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1460. [bug] inet_pton() failed to reject certain malformed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 literals.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1459. [placeholder]
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉1458. [cleanup] sprintf() -> snprintf().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1457. [port] Provide strlcat() and strlcpy() for platforms without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
8b0ee8448bec37bf1e771363dccce7c0e73eb1a7Mark Andrews1455. [bug] <netaddr> missing from server grammar in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1454. [port] Use getifaddrs() if available for interface scanning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --disable-getifaddrs to override. Glibc currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has a getifaddrs() that does not support IPv6.
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews Use --enable-getifaddrs=glibc to force the use of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this version under linux machines.
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1452. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1451. [bug] rndc-confgen didn't exit with a error code for all
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews failures. [RT #5209]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1450. [bug] Fetching expired glue failed under certain
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews circumstances. [RT #5124]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1449. [bug] query_addbestns() didn't handle running out of memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1448. [bug] Handle empty wildcards labels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1447. [bug] We were casting (unsigned int) to and from (void *).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataset->private4 is now rdataset->privateuint4
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews to reflect a type change.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1446. [func] Implemented undocumented alternate transfer sources
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉 from BIND 8. See use-alt-transfer-source,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews alt-transfer-source and alt-transfer-source-v6.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt SECURITY: use-alt-transfer-source is ENABLED unless
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews you are using views. This may cause a security risk
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in accidental disclosure of wrong zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews content if the master supplying different source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews content based on IP address. If you are not certain
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews ISC recommends setting use-alt-transfer-source no;
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been replaced with DNS_ADBFIND_STARTATZONE which
6b25d2f7f7a1125508f8d225a8fef94e1db83555Mark Andrews causes the search to start using the closest zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1444. [func] dns_view_findzonecut2() allows you to specify if the
b6309ed962c4988a314d61742c4fbc4935467d68Mark Andrews cache should be searched for zone cuts.
39fe146f2ab82cb8e49caa319a3345174fa2d69aMark Andrews1443. [func] Masters lists can now be specified and referenced
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in zone masters clauses and other masters lists.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1442. [func] New functions for manipulating port lists:
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews dns_portlist_create(), dns_portlist_add(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_portlist_remove(), dns_portlist_match(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_portlist_attach() and dns_portlist_detach().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1441. [func] It is now possible to tell dig to bind to a specific
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt source port.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1440. [func] It is now possible to tell named to avoid using
d8ec783e6dc0bd16a80b30d9888306b1faae6037Mark Andrews certain source ports (avoid-v4-udp-ports,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews avoid-v6-udp-ports).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1439. [bug] Named could return NOERROR with certain NOTIFY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failures. Return NOTAUTH if the NOTIFY zone is
8bcb0f297b50e80e3c7aab1a41b94d937acf4dc0Mark Andrews not being served.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1438. [func] Log TSIG (if any) when logging NOTIFY requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1437. [bug] Leave space for stdio to work in. [RT #5033]
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews1436. [func] dns_zonemgr_resumexfrs() can be used to restart
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stalled transfers.
a6211a2f234767a015a6a30b85d5da087fa907f1Mark Andrews1435. [bug] zmgr_resume_xfrs() was being called read locked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than write locked. zmgr_resume_xfrs()
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews was not being called if the zone was being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1434. [bug] "rndc reconfig" failed to initiate the initial
e72d4d8929fec51153e4fd0d1cf632cd59335495Mark Andrews zone transfer of new slave zones.
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews1433. [bug] named could trigger a REQUIRE failure if it could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not get a file descriptor when attempting to write
6c6673405c7e29c1d91d07b326d0fe1d7b52e478Mark Andrews a master file. [RT #4347]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1432. [func] The advertised EDNS UDP buffer size can now be set
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews via named.conf (edns-udp-size).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1431. [bug] isc_print_snprintf() "%s" with precision could walk off
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews end of argument. [RT #5191]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1430. [port] linux: IPv6 interface scanning support.
7c5d5a7932b8ac27281eeff64506dff8220bb3eaMark Andrews1429. [bug] Prevent the cache getting locked to old servers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1428. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1427. [bug] Race condition in adb with threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1426. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1425. [port] linux/libbind: define __USE_MISC when testing *_r()
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer function prototypes in netdb.h. [RT #4921]
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews1424. [bug] EDNS version not being correctly printed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1423. [contrib] queryperf: added A6 and SRV.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1422. [func] Log name/type/class when denying a query. [RT #4663]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1421. [func] Differentiate updates that don't succeed due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prerequisites (unsuccessful) vs other reasons
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1420. [port] solaris: work around gcc optimizer bug.
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews1419. [port] openbsd: use /dev/arandom. [RT #4950]
012a2b979e011b13ba0d291c279dc65a167c039eMark Andrews1418. [bug] 'rndc reconfig' did not cause new slaves to load.
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews1417. [func] ID.SERVER/CHAOS is now a built in zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews See "server-id" for how to configure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews from SOA MINIMUM.
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews1414. [func] Support for KSK flag.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1413. [func] Explicitly request the (re-)generation of DS records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from keysets (dnssec-signzone -g).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1412. [func] You can now specify servers to be tried if a nameserver
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has IPv6 address and you only support IPv4 or the
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews reverse. See dual-stack-servers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1410. [func] Handle records that live in the parent zone, e.g. DS.
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1408. [bug] "make distclean" was not complete. [RT #4700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1407. [bug] lfsr incorrectly implements the shift register.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1406. [bug] dispatch initializes one of the LFSR's with a incorrect
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews polynomial. [RT #4617]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1405. [func] Use arc4random() if available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews dnssec-signkey now report their version in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews usage message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1402. [cleanup] A6 has been moved to experimental and is no longer
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews fully supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1401. [bug] adb wasn't clearing state when the timer expired.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1400. [bug] Block the addition of wildcard NS records by IXFR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or UPDATE. [RT #3502]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1399. [bug] Use serial number arithmetic when testing SIG
0f8f42a09eb102fa88e4d2caacdafbeda931f94cMark Andrews timestamps. [RT #4268]
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews1398. [doc] ARM: notify-also should have been also-notify.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews1396. [func] dnssec-signzone: adjust the default signing time by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 1 hour to allow for clock skew.
54532c54130de8f374465bb23d5576fc3257ea96Mark Andrews1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have a working implementation. [RT #4079]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1394. [func] It is now possible to check if a particular element is
1c0927d8a091effcf9b2dc5baa533927c113bd5cMark Andrews in a acl. Remove duplicate entries from the localnets
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is not available in the kernel to prevent accidently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listening on IPv4 interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1392. [bug] named-checkzone: update usage.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1391. [func] Add support for IPv6 scoped addresses in named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1390. [func] host now supports ixfr.
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews1389. [bug] named could fail to rotate long log files. [RT #3666]
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defining HAVE_IFLIST_SYSCTL. [RT #3770]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1387. [bug] named could crash due to an access to invalid memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews space (which caused an assertion failure) in
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews incremental cleaning. [RT #3588]
0b09763c354ec91fb352b6b4cea383bd0195b2d8Mark Andrews1386. [bug] named-checkzone -z stopped on errors in a zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1385. [bug] Setting serial-query-rate to 10 would trigger a
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews REQUIRE failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1384. [bug] host was incompatible with BIND 8 in its exit code and
93da96c1cfd5f3c47169855867dd18db00c8a386Mark Andrews in the output with the -l option. [RT #3536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1383. [func] Track the serial number in a IXFR response and log if
7d389c324cc032475f9d219a12ab84bacbd7fbaaMark Andrews a mismatch occurs. This is a more specific error than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "not exact". [RT #3445]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1382. [bug] make install failed with --enable-libbind. [RT #3656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1381. [bug] named failed to correctly process answers that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contained DNAME records where the resulting CNAME
cc4928ec7116a064223f60639ca1a80f25ba350fMark Andrews resulted in a negative answer.
e2cf63c5df79eb7c8b86b6278289883fa760cda5Mark Andrews1380. [func] 'rndc recursing' dump recursing queries to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'recursing-file = "named.recursing";'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1379. [func] 'rndc status' now reports tcp and recursion quota
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1377. [func] dns_zone_load{new}() now reports if the zone was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loaded, queued for loading to up to date.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1376. [func] New function dns_zone_logc() to log to specified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1374. [func] dns_adb_dump() now logs the lame zones associated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with each server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1373. [bug] Recovery from expired glue failed under certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews circumstances.
945cb085b859dbfc6a883813dda03c83e06995d3Mark Andrews1372. [bug] named crashes with an assertion failure on exit when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sharing the same port for listening and querying, and
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews changing listening addresses several times. [RT #3509]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1371. [bug] notify-source-v6, transfer-source-v6 and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query-source-v6 with explicit addresses and using the
c549b3a4d5fedba2ae960df667864e824acb1ef9Mark Andrews same ports as named was listening on could interfere
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with named's ability to answer queries sent to those
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1370. [bug] dig '+[no]recurse' was incorrectly documented.
d73de275987d29627dc11d5bd4a22874a29f7874Mark Andrews1369. [bug] Adding an NS record as the lexicographically last
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record in a secure zone didn't work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1368. [func] remove support for bitstring labels.
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews1367. [func] Use response times to select forwarders.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews1365. [func] "localhost" and "localnets" acls now include IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses / prefixes.
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews1364. [func] Log file name when unable to open memory statistics
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dump database files. [RT #3437]
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews1363. [func] Listen-on-v6 now supports specific addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1362. [bug] remove IFF_RUNNING test when scanning interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1361. [func] log the reason for rejecting a server when resolving
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews1360. [bug] --enable-libbind would fail when not built in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source tree for certain OS's.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1359. [security] Support patches OpenSSL libraries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1358. [bug] It was possible to trigger a INSIST when debugging
acc8b7ac3d16538bf223545bbf71899b9accaebbMark Andrews large dynamic updates. [RT #3390]
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews1357. [bug] nsupdate was extremely wasteful of memory.
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews1356. [tuning] Reduce the number of events / quantum for zone tasks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
8e5893c36cdccc706f9632f51e0c8d390d2a8d06Mark Andrews1354. [doc] lwres man pages had illegal nroff.
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews1353. [contrib] sdb/ldap to version 0.9.
9549a96654ead15b264c9159d48eb485e4f9db55Mark Andrews1352. [bug] dig, host, nslookup when falling back to TCP use the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews current search entry (if any). [RT #3374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1351. [bug] lwres_getipnodebyname() returned the wrong name
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
4c83dd7f22b19c75afdd311684f6ba0faa24e8d8Mark Andrews1350. [bug] dns_name_fromtext() failed to handle too many labels
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
57e0f58b3fd4cb49a57200c8af9cb58d984d871aMark Andrews1348. [port] win32: Rewrote code to use I/O Completion Ports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in socket.c and eliminating a host of socket
26cf4737b3e84c3a686a5eacebf22ac39e57d4caMark Andrews errors. Performance is enhanced.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1347. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1346. [placeholder]
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews1345. [port] Use a explicit -Wformat with gcc. Not all versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews include it in -Wall.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1344. [func] Log if the serial number on the master has gone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If you have multiple machines specified in the masters
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clause you may want to set 'multi-master yes;' to
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews suppress this warning.
ddc592d128cdde85ada64efbda95981c10c4c03cMark Andrews1343. [func] Log successful notifies received (info). Adjust log
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews level for failed notifies to notice.
88c2b83cc548a217cc92a2bf75ca1ef1d4237d4fMark Andrews1342. [func] Log remote address with TCP dispatch failures.
bd6ad47c3dbc52a54f240432878b6832bd6dd6e2Mark Andrews1341. [func] Allow a rate limiter to be stalled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1340. [bug] Delay and spread out the startup refresh load.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lookups. Bit string lookups are no longer attempted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1338. [placeholder]
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews1337. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1336. [func] Nibble lookups under IP6.ARPA are now supported by
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews dns_byaddr_create(). dns_byaddr_createptrname() is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deprecated, use dns_byaddr_createptrname2() instead.
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews1335. [bug] When performing a nonexistence proof, the validator
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should discard parent NXTs from higher in the DNS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1334. [bug] When signing/verifying rdatasets, duplicate rdatas
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews need to be suppressed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1333. [contrib] queryperf now reports a summary of returned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rcodes (-c), rcodes are printed in mnemonic form (-v).
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews1332. [func] Report the current serial with periodic commits when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rolling forward the journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1331. [func] Generate DNSSEC wildcard proofs.
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews1330. [bug] When processing events (non-threaded) only allow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the task one chance to use to use its quantum.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1329. [func] named-checkzone will now check if nameservers that
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews appear to be IP addresses. Available modes "fail",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "warn" (default) and "ignore" the results of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1328. [bug] The validator could incorrectly verify an invalid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative proof.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1327. [bug] The validator would incorrectly mark data as insecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when seeing a bogus signature before a correct
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews1326. [bug] DNAME/CNAME signatures were not being cached when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation was not being performed. [RT #3284]
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews1325. [bug] If the tcpquota was exhausted it was possible to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to trigger a INSIST() failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1324. [port] darwin: ifconfig.sh now supports darwin.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews1322. [bug] dnssec-signzone usage message was misleading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would incorrectly duplicate its output and sign it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1320. [doc] query-source-v6 was missing from options section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1319. [func] libbind: log attempts to exploit #1318.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1318. [bug] libbind: Remote buffer overrun.
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews element name.
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews1316. [bug] libbind: gethostans() could get out of sync parsing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the response if there was a very long CNAME chain.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1315. [bug] Options should apply to the internal _bind view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1314. [port] Handle ECONNRESET from sendmsg() [unix].
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews1313. [func] Query log now says if the query was signed (S) or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if EDNS was used (E).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1312. [func] Log TSIG key used w/ outgoing zone transfers.
f76c4ebaf586a693521f018fbc617c292c1555d7Mark Andrews1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews1310. [bug] 'rndc stop' failed to cause zones to be flushed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sometimes. [RT #3157]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1309. [func] Log that a zone transfer was covered by a TSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1308. [func] DS (delegation signer) support.
c00a1eb423623442aff428336bb55590f79013bbMark Andrews1307. [bug] nsupdate: allow white space base64 key data.
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews1306. [bug] Badly encoded LOC record when the size, horizontal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews precision or vertical precision was 0.1m.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1305. [bug] Document that internal zones are included in the
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington rndc status results.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1304. [func] New function: dns_zone_name().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1302. [func] Extended rndc dumpdb to support dumping of zones and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews view selection: 'dumpdb [-all|-zones|-cache] [view]'.
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews1301. [func] New category 'update-security'.
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews1300. [port] Compaq Trucluster support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1299. [bug] Set AI_ADDRCONFIG when looking up addresses
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews via getaddrinfo() (affects dig, host, nslookup, rndc
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and nsupdate).
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could be left with a trailing "\" after configure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been run.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1297. [port] linux: make handling EINVAL from socket() no longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conditional on #ifdef LINUX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1296. [bug] isc_log_closefilelogs() needed to lock the log
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1295. [bug] isc_log_setdebuglevel() needed to lock the log
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1294. [func] libbind: no longer attempts bit string labels for
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews IPv6 reverse resolution. Try IP6.ARPA then IP6.INT
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for nibble style resolution.
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1292. [func] Enable IPv6 support when using ioctl style interface
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews scanning and OS supports SIOCGLIFADDR using struct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if_laddrreq.
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews1291. [func] Enable IPv6 support when using sysctl style interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1290. [func] "dig axfr" now reports the number of messages
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as well as the number of records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reflect written requirements.
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a rdataset to a zone db in the rbtdb implementation of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addrdataset.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1286. [bug] dns_name_downcase() enforce requirement that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews target != NULL or name->buffer != NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1285. [func] lwres: probe the system to see what address families
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are currently in use.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1284. [bug] The RTT estimate on unused servers was not aged.
986be654feec852eb9da0d15599f18d0035e569bMark Andrews1283. [func] Use "dataready" accept filter if available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1282. [port] libbind: hpux 11.11 interface scanning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1281. [func] Log zone when unable to get private keys to update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone. Log zone when NXT records are missing from
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews secure zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1280. [bug] libbind: escape '(' and ')' when converting to
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews presentation form.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1278. [func] dig: now supports +[no]cl +[no]ttlid.
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews1277. [func] You can now create your own customized printing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews styles: dns_master_stylecreate() and
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews dns_master_styledestroy().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1276. [bug] libbind: const pointer conflicts in res_debug.c.
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1274. [bug] Memory leak in lwres_gnbarequest_parse().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1273. [port] libbind: solaris: 64 bit binary compatibility.
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews1272. [contrib] Berkeley DB 4.0 sdb implementation from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1271. [bug] "recursion available: {denied,approved}" was too
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1270. [bug] Check that system inet_pton() and inet_ntop() support
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews1269. [port] Openserver: ifconfig.sh support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1268. [port] Openserver: the value FD_SETSIZE depends on whether
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews <sys/param.h> is included or not. Be consistent.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1267. [func] isc_file_openunique() now creates file using mode
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews 0666 rather than 0600.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington are not C++ compatible, use *_TYPE versions instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1264. [placeholder]
cde7dfea4c1267a2b526114f4ea80fe9db1fc557Brian Wellington1263. [bug] Reference after free error if dns_dispatchmgr_create()
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support for compressed TSIG owner names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1260. [func] libbind: res_update can now update IPv6 servers,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new function res_findzonecut2().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1258. [bug] libbind: res_nametotype() and res_nametoclass() were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1257. [bug] Failure to write pid-file should not be fatal on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reload. [RT #2861]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews1255. [bug] When verifying that an NXT proves nonexistence, check
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the rcode of the message and only do the matching NXT
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews check. That is, for NXDOMAIN responses, check that
8569ab045a4cf6ecd1b5a3354ddb1c93ef34ea57Brian Wellington the name is in the range between the NXT owner and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews next name, and for NOERROR NODATA responses, check
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that the type is not present in the NXT bitmap.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1254. [func] preferred-glue option from BIND 8.3.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1253. [bug] The dnssec system test failed to remove the correct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1252. [bug] Dig, host and nslookup were not checking the address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the answer was coming from against the address it was
97527fc03cdb061759e2c9529c670ac1c190ef84Brian Wellington sent to. [RT #2692]
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews1251. [port] win32: a make file contained absolute version specific
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews1250. [func] Nsupdate will report the address the update was
49f62849e5f80add0ee36b0f9b42cdce8de9748aMark Andrews1249. [bug] Missing masters clause was not handled gracefully.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1248. [bug] DESTDIR was not being propagated between makes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1247. [bug] Don't reset the interface index for link/site local
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses. [RT #2576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1246. [func] New functions isc_sockaddr_issitelocal(),
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and isc_netaddr_islinklocal().
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews1244. [bug] Receiving a TCP message from a blackhole address would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prevent further messages being received over that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1243. [bug] It was possible to trigger a REQUIRE() in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_message_findtype(). [RT #2659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews1241. [bug] Drop received UDP messages with a zero source port
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as these are invariably forged. [RT #2621]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1240. [bug] It was possible to leak zone references by
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews specifying an incorrect zone to rndc.
da5d1cf1b1aa29ae53a0427be49291b04bd60549Mark Andrews1239. [bug] Under certain circumstances named could continue to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use a name after it had been freed triggering
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews INSIST() failures. [RT #2614]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1238. [bug] It is possible to lockup the server when shutting down
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews if notifies were being processed. [RT #2591]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1237. [bug] nslookup: "set q=type" failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson NULL terminated text regions. [RT #2588]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1235. [func] Report 'out of memory' errors from openssl.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1234. [bug] contrib/sdb: 'zonetodb' failed to call
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_result_register(). DNS_R_SEENINCLUDE should not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1233. [bug] The flags field of a KEY record can be expressed in
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews hex as well as decimal.
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson1229. [bug] named would crash if it received a TSIG signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query as part of an AXFR response. [RT #2570]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if a number was expected and some other token was
111e3433d289e8b4ea1260add39baa78c2a46891Mark Andrews found. [RT #2532]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1226. [func] Use EDNS for zone refresh queries. [RT #2551]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1225. [func] dns_message_setopt() no longer requires that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_message_renderbegin() to have been called.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1224. [bug] 'rrset-order' and 'sortlist' should be additive
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson not exclusive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1222. [bug] Specifying 'port *' did not always result in a system
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews selected (non-reserved) port being used. [RT #2537]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compared case insensitively. [RT #2542]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1220. [func] Support for APL rdata type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1219. [func] Named now reports the TSIG extended error code when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signature verification fails. [RT #1651]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1218. [bug] Named incorrectly returned SERVFAIL rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1217. [func] Report locations of previous key definition when a
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews duplicate is detected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1216. [bug] Multiple server clauses for the same server were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reported. [RT #2514]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington1214. [bug] Win32: isc_file_renameunique() could leave zero length
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files behind.
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington1213. [func] Report view associated with client if it is not a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews standard view (_default or _bind).
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington1212. [port] libbind: 64k answer buffers were causing stack space
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be exceeded for certain OS. Use heap space instead.
b541c10d0442d9804d94567a97956cec3bd2912dBrian Wellington1211. [bug] dns_name_fromtext() incorrectly handled certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews valid octal bitlabels. [RT #2483]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compatible addresses. [RT #2461]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1209. [bug] Dig, host, nslookup were not checking the message ids
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on the responses. [RT #2454]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1208. [bug] dns_master_load*() failed to log a error message if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an error was detected when parsing the owner name of
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews a record. [RT #2448]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an invalid pointer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger a non-EDNS retry.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the message. [RT #2449]
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews1204. [bug] libbind: res_nupdate() failed to update the name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server addresses before sending the update.
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson1203. [func] Report locations of previous acl and zone definitions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a duplicate is detected.
eb2c518a3871932e86268e7c6ddae2b2a00d72fdMark Andrews1202. [func] New functions: cfg_obj_line() and cfg_obj_file().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1201. [bug] Require that if 'callbacks' is passed to
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews dns_rdata_fromtext(), callbacks->error and
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews callbacks->warn are initialized.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1200. [bug] Log 'errno' that we are unable to convert to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_result_t. [RT #2404]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson1198. [bug] OPT printing style was not consistent with the way the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews header fields are printed. The DO bit was not reported
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if set. Report if any of the MBZ bits are set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1197. [bug] Attempts to define the same acl multiple times were not
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington1196. [contrib] update mdnkit to 2.2.3.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1195. [bug] Attempts to redefine builtin acls should be caught.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1194. [bug] Not all duplicate zone definitions were being detected
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at the named.conf checking stage. [RT #2431]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1193. [bug] dig +besteffort parsing didn't handle packet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews truncation. dns_message_parse() has new flag
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews DNS_MESSAGE_IGNORETRUNCATION.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1192. [bug] The seconds fields in LOC records were restricted
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews to three decimal places. More decimal places should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be allowed but warned about.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1191. [bug] A dynamic update removing the last non-apex name in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a secure zone would fail. [RT #2399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews1189. [bug] On some systems, malloc(0) returns NULL, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause the caller to report an out of memory
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer error. [RT #2398]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1188. [bug] Dynamic updates of a signed zone would fail if
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson some of the zone private keys were unavailable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1187. [bug] named was incorrectly returning DNSSEC records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in negative responses when the DO bit was not set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EOL token when reading to end of line.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews unless RES_INIT is set when calling res_*init().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when res_*init() is called.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1183. [bug] Handle ENOSR error when writing to the internal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews control pipe. [RT #2395]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1182. [bug] The server could throw an assertion failure when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews constructing a negative response packet.
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson1181. [func] Add the "key-directory" configuration statement,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which allows the server to look for online signing
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews keys in alternate directories.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1180. [func] dnssec-keygen should always generate keys with
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer protocol 3 (DNSSEC), since it's less confusing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1179. [func] Add SIG(0) support to nsupdate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1178. [bug] Follow and cache (if appropriate) A6 and other
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews data chains to completion in the additional section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1177. [func] Report view when loading zones if it is not a
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews standard view (_default or _bind). [RT #2270]
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer1176. [doc] Document that allow-v6-synthesis is only performed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for clients that are supplied recursive service.
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson1175. [bug] named-checkzone and named-checkconf failed to call
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_result_register() at startup which could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result in runtime exceptions when printing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "out of memory" errors. [RT #2335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1174. [bug] Win32: add WSAECONNRESET to the expected errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from connect(). [RT #2308]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1173. [bug] Potential memory leaks in isc_log_create() and
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson isc_log_settag(). [RT #2336]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews table of RR types in ARM.
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews1171. [func] Added function isc_region_compare(), updated files in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lib/dns to use this function instead of local one.
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews1170. [bug] Don't attempt to print the token when a I/O error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews occurs when parsing named.conf. [RT #2275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1169. [func] Identify recursive queries in the query log.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews1167. [contrib] nslint-2.1a3 (from author).
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews1166. [bug] "Not Implemented" should be reported as NOTIMP,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not NOTIMPL. [RT #2281]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1164. [bug] Empty masters clauses in slave / stub zones were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews handled gracefully. [RT #2262]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews1163. [func] isc_time_formattimestamp() now includes the year.
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews1162. [bug] The allow-notify option was not accepted in slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone statements.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1161. [bug] named-checkzone looped on unbalanced brackets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1160. [bug] Generating Diffie-Hellman keys longer than 1024
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews bits could fail. [RT #2241]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1159. [bug] MD and MF are not permitted to be loaded by RFC1123.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1158. [func] Report the client's address when logging notify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1157. [func] match-clients and match-destinations now accept
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews keys. [RT #2045]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1156. [port] The configure test for strsep() incorrectly
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews succeeded on certain patched versions of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews AIX 4.3.3. [RT #2190]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1155. [func] Recover from master files being removed from under
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1154. [bug] Don't attempt to obtain the netmask of a interface
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews if there is no address configured. [RT #2176]
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson1153. [func] 'rndc {stop|halt} -p' now reports the process id
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the instance of named being shutdown.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1152. [bug] libbind: read buffer overflows.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1151. [bug] nslookup failed to check that the arguments to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the port, timeout, and retry options were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews valid integers and in range. [RT #2099]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1150. [bug] named incorrectly accepted TTL values
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews containing plus or minus signs, such as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1149. [func] New function isc_parse_uint32().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1148. [func] 'rndc-confgen -a' now provides positive feedback.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the OS. listen-on-v6 { any; }; should no longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result in IPv4 queries be accepted. Similarly
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews control { inet :: ... }; should no longer result
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in IPv4 connections being accepted. This can be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overridden at compile time by defining
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson ISC_ALLOW_MAPPED=1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported by the OS by a new function
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_socket_ipv6only().
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews1145. [func] "host" no longer reports a NOERROR/NODATA response
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by printing nothing. [RT #2065]
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson1144. [bug] rndc-confgen would crash if both the -a and -t
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options were specified. [RT #2159]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson1143. [bug] When a trusted-keys statement was present and named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was built without crypto support, it would leak memory.
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews1142. [bug] dnssec-signzone would fail to delete temporary files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in some failure cases. [RT #2144]
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson1141. [bug] When named rejected a control message, it would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews leak a file descriptor and memory. It would also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail to respond, causing rndc to hang.
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson [RT #2139, #2164]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews to the -s option. [RT #2138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1139. [func] It is now possible to flush a given name from the
b19619260fbd447b0fe3e709b2cc8ae38f27ec3fMark Andrews cache(s) via 'rndc flushname name [view]'. [RT #2051]
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson1138. [func] It is now possible to flush a given name from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache by calling the new function
1255d388f034dc556d235a002527101781dbeb29Mark Andrews dns_cache_flushname().
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews1137. [func] It is now possible to flush a given name from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ADB by calling the new function dns_adb_flushname().
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews1136. [bug] CNAME records synthesized from DNAMEs did not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have a TTL of zero as required by RFC2672.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1135. [func] You can now override the default syslog() facility for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named/lwresd at compile time. [RT #1982]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1134. [bug] Multi-threaded servers could deadlock in ferror()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when reloading zone files. [RT #1951, #1998]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson1132. [func] Improve UPDATE prerequisite failure diagnostic messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1131. [bug] The match-destinations view option did not work with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 destinations. [RT #2073, #2074]
07eaf0b8d0c3c93d8139c413bf9cc8bba7db9432Mark Andrews1130. [bug] Log messages reporting an out-of-range serial number
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not include the out-of-range number but the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews following token. [RT #2076]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1129. [bug] Multi-threaded servers could crash under heavy
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolution load due to a race condition. [RT #2018]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1128. [func] sdb drivers can now provide RR data in either text
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or wire format, the latter using the new functions
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson dns_sdb_putrdata() and dns_sdb_putnamedrdata().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1127. [func] rndc: If the server to contact has multiple addresses,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews try all of them.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1126. [bug] The server could access a freed event if shut
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down while a client start event was pending
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson delivery. [RT #2061]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1125. [bug] rndc: -k option was missing from usage message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are now documented. [RT #2052]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1123. [bug] dig +[no]fail did not match description. [RT #2052]
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews1122. [tuning] Resolution timeout reduced from 90 to 30 seconds.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1121. [bug] The server could attempt to access a NULL zone
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson table if shut down while resolving.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1587, #2054]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1120. [bug] Errors in options were not fatal. [RT #2002]
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson1119. [func] Added support in Win32 for NTFS file/directory ACL's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for access control.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1118. [bug] On multi-threaded servers, a race condition
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause an assertion failure in resolver.c
9bdb01e6c382e897572791b12190472955994d87Mark Andrews during resolver shutdown. [RT #2029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1117. [port] The configure check for in6addr_loopback incorrectly
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson succeeded on AIX 4.3 when compiling with -O2
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews because the test code was optimized away.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1116. [bug] Setting transfers in a server clause, transfers-in,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or transfers-per-ns to a value greater than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 2147483647 disabled transfers. [RT #2002]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1115. [func] Set maximum values for cleaning-interval,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews heartbeat-interval, interface-interval,
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews max-transfer-idle-in, max-transfer-idle-out,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-transfer-time-in, max-transfer-time-out,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics-interval of 28 days and
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson sig-validity-interval of 3660 days. [RT #2002]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1114. [port] Ignore more accept() errors. [RT #2021]
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson1113. [bug] The allow-update-forwarding option was ignored
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when specified in a view. [RT #2014]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1112. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1111. [bug] Multi-threaded servers could deadlock processing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recursive queries due to a locking hierarchy
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson violation in adb.c. [RT #2017]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1110. [bug] dig should only accept valid abbreviations of +options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1109. [bug] nsupdate accepted illegal ttl values.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1108. [bug] On Win32, rndc was hanging when named was not running
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to failure to select for exceptional conditions
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson in select(). [RT #1870]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1107. [bug] nsupdate could catch an assertion failure if an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews invalid domain name was given as the argument to
3fc4c1434d7ac377c720640e2e925a3af567cccbMark Andrews the "zone" command.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1106. [bug] After seeing an out of range TTL, nsupdate would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews treat all TTLs as out of range. [RT #2001]
0aba41458d345ea901cf945d47162e5f23647de9Mark Andrews1105. [port] OpenUNIX 8 enable threads by default. [RT #1970]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1104. [bug] Invalid arguments to the transfer-format option
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews could cause an assertion failure. [RT #1995]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews1102. [doc] Note that query logging is enabled by directing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries category to a channel.
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews1101. [bug] Array bounds read error in lwres_gai_strerror.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1100. [bug] libbind: DNSSEC key ids were computed incorrectly.
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compile time errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1097. [func] libbind: RES_PRF_TRUNC for dig.
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson1096. [func] libbind: "DNSSEC OK" (DO) support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1095. [func] libbind: resolver option: no-tld-query. disables
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trying unqualified as a tld. no_tld_query is also
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson supported for FreeBSD compatibility.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1094. [func] libbind: add support gcc's format string checking.
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson1093. [doc] libbind: miscellaneous nroff fixes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1092. [bug] libbind: get*by*() failed to check if res_init() had
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1091. [bug] libbind: misplaced va_end().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews the amount of memory consumed resulting in garbage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address being returned. Alignment calculations were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wasting space. We weren't suppressing duplicate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1089. [func] libbind: inet_{cidr,net}_{pton,ntop}() now have IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1088. [port] libbind: MPE/iX C.70 (incomplete)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1087. [bug] libbind: struct __res_state too large on 64 bit arch.
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson1086. [port] libbind: sunos: old sprintf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1085. [port] libbind: solaris: sys_nerr and sys_errlist do not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exist when compiling in 64 bit mode.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1084. [cleanup] libbind: gai_strerror() rewritten.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1083. [bug] The default control channel listened on the
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson wildcard address, not the loopback as documented.
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson1082. [bug] The -g option to named incorrectly caused logging
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be sent to syslog in addition to stderr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1081. [bug] Multicast queries were incorrectly identified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews based on the source address, not the destination
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1080. [bug] BIND 8 compatibility: accept bare IP prefixes
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson as the second element of a two-element top level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sort list statement. [RT #1964]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1079. [bug] BIND 8 compatibility: accept bare elements at top
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson level of sort list treating them as if they were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a single element list. [RT #1963]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson1078. [bug] We failed to correct bad tv_usec values in one case.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1077. [func] Do not accept further recursive clients when
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson the total number of recursive lookups being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews processed exceeds max-recursive-clients, even
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson if some of the lookups are internally generated.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1915, #1938]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1076. [bug] A badly defined global key could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on load/reload if views were used. [RT #1947]
0bd1b2fbfed4aa489e9d5fcbc7f48acb96ba7248Mark Andrews1075. [bug] Out-of-range network prefix lengths were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reported. [RT #1954]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1074. [bug] Running out of memory in dump_rdataset() could
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson cause an assertion failure. [RT #1946]
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson1073. [bug] The ADB cache cleaning should also be space driven.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1915, #1938]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1072. [bug] The TCP client quota could be exceeded when
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson recursion occurred. [RT #1937]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1071. [bug] Sockets listening for TCP DNS connections
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson specified an excessive listen backlog. [RT #1937]
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington1070. [bug] Copy DNSSEC OK (DO) to response as specified by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1069. [placeholder]
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer1068. [bug] errno could be overwritten by catgets(). [RT #1921]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1067. [func] Allow quotas to be soft, isc_quota_soft().
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews1066. [bug] Provide a thread safe wrapper for strerror().
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews1065. [func] Runtime support to select new / old style interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews scanning using ioctls.
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews1064. [bug] Do not shut down active network interfaces if we
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are unable to scan the interface list. [RT #1921]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1063. [bug] libbind: "make install" was failing on IRIX.
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews1062. [bug] If the control channel listener socket was shut
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down before server exit, the listener object could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be freed twice. [RT #1916]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1061. [bug] If periodic cache cleaning happened to start
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while cleaning due to reaching the configured
56d69016f4fae2eda4d39c92fe13595251aaadd3Mark Andrews maximum cache size was in progress, the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could catch an assertion failure. [RT #1912]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1060. [func] Move refresh, stub and notify UDP retry processing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews into dns_request.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1059. [func] dns_request now support will now retry UDP queries,
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews dns_request_createvia2() and dns_request_createraw2().
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson1058. [func] Limited lifetime ticker timers are now available,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_timertype_limited.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1057. [bug] Reloading the server after adding a "file" clause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to a zone statement could cause the server to
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson crash due to a typo in change 1016.
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson1056. [bug] Rndc could catch an assertion failure on SIGINT due
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to an uninitialized variable. [RT #1908]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson1055. [func] Version and hostname queries can now be disabled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using "version none;" and "hostname none;",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews respectively.
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews1054. [bug] On Win32, cfg_categories and cfg_modules need to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exported from the libisccfg DLL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1053. [bug] Dig did not increase its timeout when receiving
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews AXFRs unless the +time option was used. [RT #1904]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1052. [bug] Journals were not being created in binary mode
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in "journal format not recognized" error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews under Win32. [RT #1889]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1051. [bug] Do not ignore a network interface completely just
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews because it has a noncontiguous netmask. Instead,
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson omit it from the localnets ACL and issue a warning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1050. [bug] Log messages reporting malformed IP addresses in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address lists such as that of the forwarders option
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson failed to include the correct error code, file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name, and line number. [RT #1890]
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington1049. [func] "pid-file none;" will disable writing a pid file.
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson1048. [bug] Servers built with -DISC_MEM_USE_INTERNAL_MALLOC=1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews didn't work.
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews1047. [bug] named was incorrectly refusing all requests signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with a TSIG key derived from an unsigned TKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negotiation with a NOERROR response. [RT #1886]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1046. [bug] The help message for the --with-openssl configure
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews option was inaccurate. [RT #1880]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1045. [bug] It was possible to skip saving glue for a nameserver
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews for a stub zone.
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson1044. [bug] Specifying allow-transfer, notify-source, or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify-source-v6 in a stub zone was not treated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as an error.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1043. [bug] Specifying a transfer-source or transfer-source-v6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option in the zone statement for a master zone was
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson not treated as an error. [RT #1876]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1042. [bug] The "config" logging category did not work properly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1041. [bug] Dig/host/nslookup could catch an assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on SIGINT due to an uninitialized variable. [RT #1867]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1040. [bug] Multiple listen-on-v6 options with different ports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were not accepted. [RT #1875]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1039. [bug] Negative responses with CNAMEs in the answer section
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson were cached incorrectly. [RT #1862]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1038. [bug] In servers configured with a tkey-domain option,
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson TKEY queries with an owner name other than the root
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause an assertion failure. [RT #1866, #1869]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1037. [bug] Negative responses whose authority section contain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SOA or NS records whose owner names are not equal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews equal to or parents of the query name should be
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer rejected. [RT #1862]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1036. [func] Silently drop requests received via multicast as
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer long as there is no final multicast DNS standard.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1035. [bug] If we respond to multicast queries (which we
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews currently do not), respond from a unicast address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as specified in RFC 1123. [RT #137]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1034. [bug] Ignore the RD bit on multicast queries as specified
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson in RFC 1123. [RT #137]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1033. [bug] Always respond to requests with an unsupported opcode
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with NOTIMP, even if we don't have a matching view
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews or cannot determine the class.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1032. [func] hostname.bind/txt/chaos now returns the name of
330b421487d7c3a5e699472fe889aa633772057fMark Andrews the machine hosting the nameserver. This is useful
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in diagnosing problems with anycast servers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1030. [bug] On systems with no resolv.conf file, nsupdate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exited with an error rather than defaulting
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews to using the loopback address. [RT #1836]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1029. [bug] Some named.conf errors did not cause the loading
6f7660093e70d3a7c80738b681ac0f5c1b661c00Mark Andrews of the configuration file to return a failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews status even though they were logged. [RT #1847]
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews1028. [bug] On Win32, dig/host/nslookup looked for resolv.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the wrong directory. [RT #1833]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1027. [bug] RRs having the reserved type 0 should be rejected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1026. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1025. [bug] Don't use multicast addresses to resolve iterative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries. [RT #101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1024. [port] Compilation failed on HP-UX 11.11 due to
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews incompatible use of the SIOCGLIFCONF macro
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name. [RT #1831]
4e400cb7a2edd25af98ebc25fcbb5b36ca08f9a0Mark Andrews1023. [func] Accept hints without TTLs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1022. [bug] Don't report empty root hints as "extra data".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1021. [bug] On Win32, log message timestamps were one month
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews later than they should have been, and the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would exhibit unspecified behavior in December.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1020. [bug] IXFR log messages did not distinguish between
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews true IXFRs, AXFR-style IXFRs, and mere version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews polls. [RT #1811]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1019. [bug] The value of the lame-ttl option was limited to 18000
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson seconds, not 1800 seconds as documented. [RT #1803]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1018. [bug] The default log channel was not always initialized
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly. [RT #1813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1017. [bug] When specifying TSIG keys to dig and nsupdate using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the -k option, they must be HMAC-MD5 keys. [RT #1810]
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson1016. [bug] Slave zones with no backup file were re-transferred
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on every server reload.
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson1015. [bug] Log channels that had a "versions" option but no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "size" option failed to create numbered log
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files. [RT #1783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1014. [bug] Some queries would cause statistics counters to
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson increment more than once or not at all. [RT #1321]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1013. [bug] It was possible to cancel a query twice when marking
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington a server as bogus or by having a blackhole acl.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1012. [bug] The -p option to named did not behave as documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1011. [cleanup] Removed isc_dir_current().
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson1010. [bug] The server could attempt to execute a command channel
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews command after initiating server shutdown, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure. [RT #1766]
ee3ab6063dd13b5947d3fbe88b9ce8f38d65df9dBrian Wellington1009. [port] OpenUNIX 8 support. [RT #1728]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1008. [port] libtool.m4, ltmain.sh from libtool-1.4.2.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1007. [port] config.guess, config.sub from autoconf-2.52.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1006. [bug] If a KEY RR was found missing during DNSSEC validation,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure could subsequently be triggered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the resolver. [RT #1763]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1005. [bug] Don't copy nonzero RCODEs from request to response.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1004. [port] Deal with recvfrom() returning EHOSTDOWN. [RT #1770]
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson1003. [func] Add the +retry option to dig.
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson1002. [bug] When reporting an unknown class name in named.conf,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews including the file name and line number. [RT #1759]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1001. [bug] win32 socket code doio_recv was not catching a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews WSACONNRESET error when a client was timing out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the request and closing its socket. [RT #1745]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1000. [bug] BIND 8 compatibility: accept "HESIOD" as an alias
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson for class "HS". [RT #1759]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 999. [func] "rndc retransfer zone [class [view]]" added.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 998. [func] named-checkzone now has arguments to specify the
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson chroot directory (-t) and working directory (-w).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 997. [func] Add support for RSA-SHA1 keys (RFC3110).
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson 996. [func] Issue warning if the configuration filename contains
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the chroot path.
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson 995. [bug] dig, host, nslookup: using a raw IPv6 address as a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews target address should be fatal on a IPv4 only system.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 994. [func] Treat non-authoritative responses to queries for type
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NS as referrals even if the NS records are in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews answer section, because BIND 8 servers incorrectly
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington send them that way. This is necessary for DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation of the NS records of a secure zone to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews succeed when the parent is a BIND 8 server. [RT #1706]
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson 993. [func] dig: -v now reports the version.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 992. [doc] dig: ~/.digrc is now documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 991. [func] Lower UDP refresh timeout messages to level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 990. [bug] The rndc-confgen man page was not installed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 989. [bug] Report filename if $INCLUDE fails for file related
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews errors. [RT #1736]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 988. [bug] 'additional-from-auth no;' did not work reliably
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the case of queries answered from the cache.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 987. [bug] "dig -help" didn't show "+[no]stats".
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington 986. [bug] "dig +noall" failed to clear stats and command
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington 985. [func] Consider network interfaces to be up iff they have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a nonzero IP address rather than based on the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IFF_UP flag. [RT #1160]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 984. [bug] Multi-threading should be enabled by default on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Solaris 2.7 and newer, but it wasn't.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 983. [func] The server now supports generating IXFR difference
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sequences for non-dynamic zones by comparing zone
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington versions, when enabled using the new config
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option "ixfr-from-differences". [RT #1727]
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington 982. [func] If "memstatistics-file" is set in options the memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics will be written to it.
debff476ad3512687a354499c25d2793e2009acdBrian Wellington 981. [func] The dnssec tools can now take multiple '-r randomfile'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 980. [bug] Incoming zone transfers restarting after an error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could trigger an assertion failure. [RT #1692]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 979. [func] Incremental master file dumping. dns_master_dumpinc(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_master_dumptostreaminc(), dns_dumpctx_attach(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_dumpctx_detach(), dns_dumpctx_cancel(),
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington dns_dumpctx_db() and dns_dumpctx_version().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 978. [bug] dns_db_attachversion() had an invalid REQUIRE()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 977. [bug] Improve "not at top of zone" error message.
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson 976. [func] named-checkconf can now test load master zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (named-checkconf -z). [RT #1468]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 975. [bug] "max-cache-size default;" as a view option
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson caused an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 974. [bug] "max-cache-size unlimited;" as a global option
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson was not accepted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 973. [bug] Failed to log the question name when logging:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "bad zone transfer request: non-authoritative zone
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews 972. [bug] The file modification time code in zone.c was using the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong epoch. [RT #1667]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 971. [placeholder]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 970. [func] 'max-journal-size' can now be used to set a target
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews size for a journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 969. [func] dig now supports the undocumented dig 8 feature
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence of allowing arbitrary labels, not just dotted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews decimal quads, with the -x option. This can be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used to conveniently look up RFC2317 names as in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence 968. [bug] On win32, the isc_time_now() function was unnecessarily
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling strtime(). [RT #1671]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 967. [bug] On win32, the link for bindevt was not including the
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson required resource file to enable the event viewer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to interpret the error messages in the event log,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 966. [placeholder]
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington 965. [bug] Including data other than root server NS and A
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records in the root hint file could cause a rbtdb
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews node reference leak. [RT #1581, #1618]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 964. [func] Warn if data other than root server NS and A records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are found in the root hint file. [RT #1581, #1618]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 963. [bug] Bad ISC_LANG_ENDDECLS. [RT #1645]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 962. [bug] libbind: bad "#undef", don't attempt to install
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-existent nlist.h. [RT #1640]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 961. [bug] Tried to use a IPV6 feature when ISC_PLATFORM_HAVEIPV6
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson was not defined. [RT #1482]
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson 960. [port] liblwres failed to build on systems with support for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews getrrsetbyname() in the OS. [RT #1592]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 959. [port] On FreeBSD, determine the number of CPUs by calling
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson sysctlbyname(). [RT #1584]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 958. [port] ssize_t is not available on all platforms. [RT #1607]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 957. [bug] sys/select.h inclusion was broken on older platforms.
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence 956. [bug] ns_g_autorndcfile changed to ns_g_keyfile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in named/win32/os.c due to code changes in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews change #953. win32 .make file for rndc-confgen
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updated to add include path for os.h header.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.2.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 955. [bug] When using views, the zone's class was not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inherited from the view's class. [RT #1583]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 954. [bug] When requesting AXFRs or IXFRs using dig, host, or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nslookup, the RD bit should not be set as zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfers are inherently non-recursive. [RT #1575]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 953. [func] The /var/run/named.key file from change #843
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been replaced by /etc/rndc.key. Both
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named and rndc will look for this file and use
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson it to configure a default control channel key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if not already configured using a different
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson method (rndc.conf / controls). Unlike
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named.key, rndc.key is not created automatically;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it must be created by manually running
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc-confgen -a".
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson 952. [bug] The server required manual intervention to serve the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews affected zones if it died between creating a journal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and committing the first change to it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 951. [bug] CFLAGS was not passed to the linker when
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson linking some of the test programs under
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 950. [bug] Explicit TTLs did not properly override $TTL
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington due to a bug in change 834. [RT #1558]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 949. [bug] host was unable to print records larger than 512
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews bytes. [RT #1557]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.2.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 948. [port] Integrated support for building on Windows NT /
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews Windows 2000.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 947. [bug] dns_rdata_soa_t had a badly named element "mname" which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was really the RNAME field from RFC1035. To avoid
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews confusion and silent errors that would occur it the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "origin" and "mname" elements were given their correct
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews names "mname" and "rname" respectively, the "mname"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews element is renamed to "contact".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 946. [cleanup] doc/misc/options is now machine-generated from the
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews configuration parser syntax tables, and therefore
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more likely to be correct.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 945. [func] Add the new view-specific options
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews "match-destinations" and "match-recursive-only".
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 944. [func] Check for expired signatures on load.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 943. [bug] The server could crash when receiving a command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via rndc if the configuration file listed only
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews nonexistent keys in the controls statement. [RT #1530]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defined on some platforms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 941. [bug] The configuration checker crashed if a slave
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews zone didn't contain a masters statement. [RT #1514]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 940. [bug] Double zone locking failure on error path. [RT #1510]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews --- 9.2.0b1 released ---
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 939. [port] Add the --disable-linux-caps option to configure for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews systems that manage capabilities outside of named.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 938. [placeholder]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson 937. [bug] A race when shutting down a zone could trigger a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews INSIST() failure. [RT #1034]
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson 936. [func] Warn about IPv4 addresses that are not complete
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dotted quads. [RT #1084]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 935. [bug] inet_pton failed to reject leading zeros.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 934. [port] Deal with systems where accept() spuriously returns
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson 933. [bug] configure failed doing libbind on platforms not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported by BIND 8. [RT #1496]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson --- 9.2.0a3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when installing isc-config.sh.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #198, #1466]
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews 931. [bug] The controls statement only attempted to verify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages using the first key in the key list.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (9.2.0a1/a2 only).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 930. [func] Query performance testing tool added as
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence 929. [placeholder]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence 928. [bug] nsupdate would send empty update packets if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews send (or empty line) command was run after
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews another send but before any new updates or
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence prerequisites were specified. It should simply
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ignore this command.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 927. [bug] Don't hold the zone lock for the entire dump to disk.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 926. [bug] The resolver could deadlock with the ADB when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews shutting down (multi-threaded builds only).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 925. [cleanup] Remove openssl from the distribution; require that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-openssl be specified if DNSSEC is needed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 924. [port] Extend support for pre-RFC2133 IPv6 implementation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 923. [bug] Multiline TSIG secrets (and other multiline strings)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were not accepted in named.conf. [RT #1469]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 922. [func] Added two new lwres_getrrsetbyname() result codes,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ERR_NONAME and ERR_NODATA.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 921. [bug] lwres returned an incorrect error code if it received
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a truncated message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 920. [func] Increase the lwres receive buffer size to 16K.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 919. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 918. [func] In nsupdate, TSIG errors are no longer treated as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fatal errors.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence 917. [func] New nsupdate command 'key', allowing TSIG keys to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be specified in the nsupdate command stream rather
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence than the command line.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 916. [bug] Specifying type ixfr to dig without specifying
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence a serial number failed in unexpected ways.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 915. [func] The named-checkconf and named-checkzone programs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now have a '-v' option for printing their version.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 914. [bug] Global 'server' statements were rejected when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using views, even though they were accepted
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence in 9.1. [RT #1368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 913. [bug] Cache cleaning was not sufficiently aggressive.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence [RT #1441, #1444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 912. [bug] Attempts to set the 'additional-from-cache' or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'additional-from-auth' option to 'no' in a
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence server with recursion enabled will now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be ignored and cause a warning message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 911. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 910. [port] Some pre-RFC2133 IPv6 implementations do not define
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_ANY_INIT. [RT #1416]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 909. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 908. [func] New program, rndc-confgen, to simplify setting up rndc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 907. [func] The ability to get entropy from either the
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington random device, a user-provided file or from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the keyboard was migrated from the DNSSEC tools
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to libisc as isc_entropy_usebestsource().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 906. [port] Separated the system independent portion of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 905. [bug] Configuring a forward "zone" for the root domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not work. [RT #1418]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 904. [bug] The server would leak memory if attempting to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an expired TSIG key. [RT #1406]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 903. [bug] dig should not crash when receiving a TCP packet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of length 0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 902. [bug] The -d option was ignored if both -t and -g were also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 901. [placeholder]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson 900. [bug] A config.guess update changed the system identification
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews string of FreeBSD systems; configure and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bin/tests/system/ifconfig.sh now recognize the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.2.0a2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 899. [bug] lib/dns/soa.c failed to compile on many platforms
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson due to inappropriate use of a void value.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1372, #1373, #1386, #1387, #1395]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 898. [bug] "dig" failed to set a nonzero exit status
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson on UDP query timeout. [RT #1323]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 897. [bug] A config.guess update changed the system identification
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews string of UnixWare systems; configure now recognizes
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson the new string.
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington 896. [bug] If a configuration file is set on named's command line
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and it has a relative pathname, the current directory
751aa24c98fea02215cad95a08411af547d70e41Bob Halley (after any possible jailing resulting from named -t)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will be prepended to it so that reloading works
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews properly even when a directory option is present.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 895. [func] New function, isc_dir_current(), akin to POSIX's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 894. [bug] When using the DNSSEC tools, a message intended to warn
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson when the keyboard was being used because of the lack
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of a suitable random device was not being printed.
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson 893. [func] Removed isc_file_test() and added isc_file_exists()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for the basic functionality that was being added
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews with isc_file_test().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 892. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 891. [bug] Return an error when a SIG(0) signed response to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an unsigned query is seen. This should actually
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson do the verification, but it's not currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews possible. [RT #1391]
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington 890. [cleanup] The man pages no longer require the mandoc macros
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and should now format cleanly using most versions of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nroff, and HTML versions of the man pages have been
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington added. Both are generated from DocBook source.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 889. [port] Eliminated blank lines before .TH in nroff man
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pages since they cause problems with some versions
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson of nroff. [RT #1390]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 888. [bug] Don't die when using TKEY to delete a nonexistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TSIG key. [RT #1392]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 887. [port] Detect broken compilers that can't call static
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions from inline functions. [RT #1212]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 886. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 885. [placeholder]
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson 884. [placeholder]
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence 883. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 882. [placeholder]
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence 881. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 880. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 879. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 878. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 877. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 876. [placeholder]
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson 875. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 874. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 873. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 872. [placeholder]
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington 871. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 870. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 869. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 868. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 867. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 866. [func] Close debug only file channels when debug is set to
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews zero. [RT #1246]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 865. [bug] The new configuration parser did not allow
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson the optional debug level in a "severity debug"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clause of a logging channel to be omitted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This is now allowed and treated as "severity
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington debug 1;" like it does in BIND 8.2.4, not as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "severity debug 0;" like it did in BIND 9.1.
55ddb88e53838693370c213930beda1652b8a583Brian Wellington 864. [cleanup] Multi-threading is now enabled by default on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington 863. [bug] If an error occurred while an outgoing zone transfer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was starting up, the server could access a domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name that had already been freed when logging a
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington message saying that the transfer was starting.
70d08aea0a693c6ca62c2f7bb33bfddf9e427601Brian Wellington 862. [bug] Use after realloc(), non portable pointer arithmetic in
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley 861. [port] Add support for Mac OS X, by making it equivalent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to Darwin. This was derived from the config.guess
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file shipped with Mac OS X. [RT #1355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 860. [func] Drop cross class glue in zone transfers.
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence 859. [bug] Cache cleaning now won't swamp the CPU if there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is a persistent over limit condition.
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence 858. [func] isc_mem_setwater() no longer requires that when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews callback function is non-NULL then its hi_water
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews argument must be greater than its lo_water argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (they can now be equal) or that they be non-zero.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 857. [cleanup] Use ISC_MAGIC() to define all magic numbers for
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington structs, for our friends in EBCDIC-land.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 856. [func] Allow partial rdatasets to be returned in answer and
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington authority sections to help non-TCP capable clients
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recover from truncation. [RT #1301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington 854. [bug] The config parser didn't properly handle config
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options that were specified in units of time other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than seconds. [RT #1372]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 853. [bug] configure_view_acl() failed to detach existing acls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 852. [bug] Handle responses from servers which do not know
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 851. [cleanup] The obsolete support-ixfr option was not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.2.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 850. [bug] dns_rbt_findnode() would not find nodes that were
3bd8e7cf1c082cd1021e5a6cae1cf21911217858Brian Wellington split on a bitstring label somewhere other than in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the last label of the node. [RT #1351]
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington 849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 848. [func] A minimum max-cache-size of two megabytes is enforced
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson by the cache cleaner.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 847. [func] Added isc_file_test(), which currently only has
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson some very basic functionality to test for the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews existence of a file, whether a pathname is absolute,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or whether a pathname is the fundamental representation
b0390aab30438a13f533cccae9389945214b1421Brian Wellington of the current directory. It is intended that this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function can be expanded to test other things a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews programmer might want to know about a file.
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington 846. [func] A non-zero 'param' to dst_key_generate() when making an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hmac-md5 key means that good entropy is not required.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 845. [bug] The access rights on the public file of a symmetric
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key are now restricted as soon as the file is opened,
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington rather than after it has been written and closed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews just as <lwres/net.h> does.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 843. [func] If no controls statement is present in named.conf,
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson or if any inet phrase of a controls statement is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lacking a keys clause, then a key will be automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generated by named and an rndc.conf-style file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named named.key will be written that uses it. rndc
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington will use this file only if its normal configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file, or one provided on the command line, does not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 842. [func] 'rndc flush' now takes an optional view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 841. [bug] When sdb modules were not declared threadsafe, their
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence create and destroy functions were not serialized.
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence 840. [bug] The config file parser could print the wrong file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name if an error was detected after an included file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was parsed. [RT #1353]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 839. [func] Dump packets for which there was no view or that the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews class could not be determined to category "unmatched".
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington 838. [port] UnixWare 7.x.x is now suported by
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington 837. [cleanup] Multi-threading is now enabled by default only on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OSF1, Solaris 2.7 and newer, and AIX.
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews 836. [func] Upgraded libtool to 1.4.
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley 835. [bug] The dispatcher could enter a busy loop if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it got an I/O error receiving on a UDP socket.
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley 834. [func] Accept (but warn about) master files beginning with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an SOA record without an explicit TTL field and
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley lacking a $TTL directive, by using the SOA MINTTL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as a default TTL. This is for backwards compatibility
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with old versions of BIND 8, which accepted such
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files without warning although they are illegal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews according to RFC1035.
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson 833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <dns/soa.h>, and extended them to support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all the integer-valued fields of the SOA RR.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 832. [bug] The default location for named.conf in named-checkconf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should depend on --sysconfdir like it does in named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 831. [placeholder]
90c099e88e9f16bfee9edee3ac1a51fc98843772Brian Wellington 830. [func] Implement 'rndc status'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 829. [bug] The DNS_R_ZONECUT result code should only be returned
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley when an ANY query is made with DNS_DBFIND_GLUEOK set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews In all other ANY query cases, returning the delegation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 828. [bug] The errno value from recvfrom() could be overwritten
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson by logging code. [RT #1293]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 827. [bug] When an IXFR protocol error occurs, the slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should retry with AXFR.
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson 826. [bug] Some IXFR protocol errors were not detected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 825. [bug] zone.c:ns_query() detached from the wrong zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reference. [RT #1264]
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews 824. [bug] Correct line numbers reported by dns_master_load().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 823. [func] The output of "dig -h" now goes to stdout so that it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can easily be piped through "more". [RT #1254]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 822. [bug] Sending nxrrset prerequisites would crash nsupdate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 821. [bug] The program name used when logging to syslog should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be stripped of leading path components.
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington [RT #1178, #1232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 820. [bug] Name server address lookups failed to follow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A6 chains into the glue of local authoritative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 819. [bug] In certain cases, the resolver's attempts to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews restart an address lookup at the root could cause
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews the fetch to deadlock (with itself) instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews restarting. [RT #1225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 818. [bug] Certain pathological responses to ANY queries could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause an assertion failure. [RT #1218]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 817. [func] Adjust timeouts for dialup zone queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 816. [bug] Report potential problems with log file accessibility
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson at configuration time, since such problems can't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reliably be reported at the time they actually occur.
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington 815. [bug] If a log file was specified with a path separator
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews character (i.e. "/") in its name and the directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not exist, the log file's name was treated as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews though it were the directory name. [RT #1189]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 814. [bug] Socket objects left over from accept() failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were incorrectly destroyed, causing corruption
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson of socket manager data structures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 813. [bug] File descriptors exceeding FD_SETSIZE were handled
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley badly. [RT #1192]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 812. [bug] dig sometimes printed incomplete IXFR responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to an uninitialized variable. [RT #1188]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson 811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 810. [bug] The signer name in SIG records was not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down-cased when signing/verifying records. [RT #1186]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 809. [bug] Configuring a non-local address as a transfer-source
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington could cause an assertion failure during load.
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington 808. [func] Add 'rndc flush' to flush the server's cache.
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington 807. [bug] When setting up TCP connections for incoming zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfers, the transfer-source port was not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ignored like it should be.
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington 806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the calling stack to the zone maintenance level,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing zones to not reload when an included file was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews touched but the top-level zone file was not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 805. [bug] When using "forward only", missing root hints should
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson not cause queries to fail. [RT #1143]
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews 804. [bug] Attempting to obtain entropy could fail in some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews situations. This would be most common on systems
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson with user-space threads. [RT #1131]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 803. [bug] Treat all SIG queries as if they have the CD bit set,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews otherwise no data will be returned [RT #749]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 802. [bug] DNSSEC key tags were computed incorrectly in almost
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all cases. [RT #1146]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 801. [bug] nsupdate should treat lines beginning with ';' as
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington comments. [RT #1139]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 800. [bug] dnssec-signzone produced incorrect statistics for
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington large zones. [RT #1133]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 799. [bug] The ADB didn't find AAAA glue in a zone unless A6
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington glue was also present.
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson 798. [bug] nsupdate should be able to reject bad input lines
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and continue. [RT #1130]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson 797. [func] Issue a warning if the 'directory' option contains
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a relative path. [RT #269]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 796. [func] When a size limit is associated with a log file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only roll it when the size is reached, not every
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington time the log file is opened. [RT #1096]
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington 795. [func] Add the +multiline option to dig. [RT #1095]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson 794. [func] Implement the "port" and "default-port" statements
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley 793. [cleanup] The DNSSEC tools could create filenames that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews illegal or contained shell meta-characters. They
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now use a different text encoding of names that
8e68489885e744ab48907414b4199c36858c27ddMark Andrews doesn't have these problems. [RT #1101]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson 792. [cleanup] Replace the OMAPI command channel protocol with a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews simpler one.
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson 791. [bug] The command channel now works over IPv6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 790. [bug] Wildcards created using dynamic update or IXFR
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson could fail to match. [RT #1111]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 789. [bug] The "localhost" and "localnets" ACLs did not match
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson when used as the second element of a two-element
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sortlist item.
7427490a67b9547242b57c255254f7e146127c48Bob Halley 788. [func] Add the "match-mapped-addresses" option, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causes IPv6 v4mapped addresses to be treated as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv4 addresses for the purpose of acl matching.
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson 787. [bug] The DNSSEC tools failed to downcase domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews names when mapping them into file names.
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson 786. [bug] When DNSSEC signing/verifying data, owner names were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not properly down-cased.
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews 785. [bug] A race condition in the resolver could cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure. [RT #673, #872, #1048]
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson 784. [bug] nsupdate and other programs would not quit properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if some signals were blocked by the caller. [RT #1081]
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington 783. [bug] Following CNAMEs could cause an assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when either using an sdb database or under very
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rare conditions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 782. [func] Implement the "serial-query-rate" option.
a12d9cfa59b5981c52e1aaafedf652d5128f3448Brian Wellington 781. [func] Avoid error packet loops by dropping duplicate FORMERR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses. [RT #1006]
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington 780. [bug] Error handling code dealing with out of memory or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews other rare errors could lead to assertion failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by calling functions on uninitialized names. [RT #1065]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 779. [func] Added the "minimal-responses" option.
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson 778. [bug] When starting cache cleaning, cleaning_timer_action()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews returned without first pausing the iterator, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause deadlock. [RT #998]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 777. [bug] An empty forwarders list in a zone failed to override
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews global forwarders. [RT #995]
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews 776. [func] Improved error reporting in denied messages. [RT #252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 775. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 774. [func] max-cache-size is implemented.
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson 773. [func] Added isc_rwlock_trylock() to attempt to lock without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 772. [bug] Owner names could be incorrectly omitted from cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dumps in the presence of negative caching entries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 771. [cleanup] TSIG errors related to unsynchronized clocks
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are logged better. [RT #919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 770. [func] Add the "edns yes_or_no" statement to the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clause. [RT #524]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 769. [func] Improved error reporting when parsing rdata. [RT #740]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 768. [bug] The server did not emit an SOA when a CNAME
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington or DNAME chain ended in NXDOMAIN in an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews authoritative zone.
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington 767. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 766. [bug] A few cases in query_find() could leak fname.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This would trigger the mpctx->allocated == 0
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington assertion when the server exited.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #739, #776, #798, #812, #818, #821, #845,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews #892, #935, #966]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 765. [func] ACL names are once again case insensitive, like
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in BIND 8. [RT #252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 764. [func] Configuration files now allow "include" directives
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in more places, such as inside the "view" statement.
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington [RT #377, #728, #860]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 763. [func] Configuration files no longer have reserved words.
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington [RT #731, #753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 762. [cleanup] The named.conf and rndc.conf file parsers have
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson been completely rewritten.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 761. [bug] _REENTRANT was still defined when building with
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews --disable-threads.
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington 760. [contrib] Significant enhancements to the pgsql sdb driver.
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson 759. [bug] The resolver didn't turn off "avoid fetches" mode
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when restarting, possibly causing resolution
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to fail when it should not. This bug only affected
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson platforms which support both IPv4 and IPv6. [RT #927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 758. [bug] The "avoid fetches" code did not treat negative
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington cache entries correctly, causing fetches that would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be useful to be avoided. This bug only affected
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews platforms which support both IPv4 and IPv6. [RT #927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 757. [func] Log zone transfers.
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews 756. [bug] dns_zone_load() could "return" success when no master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file was configured.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 755. [bug] Fix incorrectly formatted log messages in zone.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 754. [bug] Certain failure conditions sending UDP packets
d72269740049af28b091ba81d68a067c88f53547Mark Andrews could cause the server to retry the transmission
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews indefinitely. [RT #902]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 753. [bug] dig, host, and nslookup would fail to contact a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews remote server if getaddrinfo() returned an IPv6
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews address on a system that doesn't support IPv6.
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson 752. [func] Correct bad tv_usec elements returned by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gettimeofday().
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington 751. [func] Log successful zone loads / transfers. [RT #898]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 750. [bug] A query should not match a DNAME whose trust level
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson is pending. [RT #916]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 749. [bug] When a query matched a DNAME in a secure zone, the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server did not return the signature of the DNAME.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 748. [doc] List supported RFCs in doc/misc/rfc-compliance.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 747. [bug] The code to determine whether an IXFR was possible
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson did not properly check for a database that could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not have a journal. [RT #865, #908]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 746. [bug] The sdb didn't clone rdatasets properly, causing
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews a crash when the server followed delegations. [RT #905]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 745. [func] Report the owner name of records that fail
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington semantic checks while loading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington result of an ANY or SIG query, the resolver failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to setup the return event's rdatasets, causing an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure in the query code. [RT #881]
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington 743. [bug] Receiving a large number of certain malformed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews answers could cause named to stop responding.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 742. [placeholder]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington 741. [port] Support openssl-engine. [RT #709]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 740. [port] Handle openssl library mismatches slightly better.
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington 739. [port] Look for /dev/random in configure, rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assuming it will be there for only a predefined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set of OSes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 738. [bug] If a non-threadsafe sdb driver supported AXFR and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews received an AXFR request, it would deadlock or die
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with an assertion failure. [RT #852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 737. [port] stdtime.c failed to compile on certain platforms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 736. [func] New functions isc_task_{begin,end}exclusive().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 735. [doc] Add BIND 4 migration notes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 734. [bug] An attempt to re-lock the zone lock could occur if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the server was shutdown during a zone transfer.
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson 733. [bug] Reference counts of dns_acl_t objects need to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews locked but were not. [RT #801, #821]
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington 732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington 731. [bug] Certain zone errors could cause named-checkzone to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail ungracefully. [RT #819]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 730. [bug] lwres_getaddrinfo() returns the correct result when
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington it fails to contact a server. [RT #768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 729. [port] pthread_setconcurrency() needs to be called on Solaris.
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington 728. [bug] Fix comment processing on master file directives.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 727. [port] Work around OS bug where accept() succeeds but
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews fails to fill in the peer address of the accepted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connection, by treating it as an error rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure. [RT #809]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 726. [func] Implement the "trace" and "notrace" commands in rndc.
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer 725. [bug] Installing man pages could fail.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 724. [func] New libisc functions isc_netaddr_any(),
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews isc_netaddr_any6().
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to return DNS_R_SERVFAIL. [RT #783]
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington 722. [func] Allow incremental loads to be canceled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 721. [cleanup] Load manager and dns_master_loadfilequota() are no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 720. [bug] Server could enter infinite loop in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dispatch.c:do_cancel(). [RT #733]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 719. [bug] Rapid reloads could trigger an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #743, #763]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 718. [cleanup] "internal" is no longer a reserved word in named.conf.
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence [RT #753, #731]
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson 717. [bug] Certain TKEY processing failure modes could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reference an uninitialized variable, causing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server to crash. [RT #750]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 716. [bug] The first line of a $INCLUDE master file was lost if
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence an origin was specified. [RT #744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 715. [bug] Resolving some A6 chains could cause an assertion
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence failure in adb.c. [RT #738]
046a9aca49bdc25bd57d75fd0dd34c021722f095Mark Andrews 714. [bug] Preserve interval timers across reloads unless changed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 713. [func] named-checkconf takes '-t directory' similar to named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 712. [bug] Sending a large signed update message caused an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure. [RT #718]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 711. [bug] The libisc and liblwres implementations of
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson inet_ntop contained an off by one error.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 710. [func] The forwarders statement now takes an optional
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson port. [RT #418]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 709. [bug] ANY or SIG queries for data with a TTL of 0
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington would return SERVFAIL. [RT #620]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 708. [bug] When building with --with-openssl, the openssl headers
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence included with BIND 9 should not be used. [RT #702]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 707. [func] The "filename" argument to named-checkzone is no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews longer optional, to reduce confusion. [RT #612]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 706. [bug] Zones with an explicit "allow-update { none; };"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were considered dynamic and therefore not reloaded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on SIGHUP or "rndc reload".
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence 705. [port] Work out resource limit type for use where rlim_t is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not available. [RT #695]
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington 704. [port] RLIMIT_NOFILE is not available on all platforms.
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence 703. [port] sys/select.h is needed on older platforms. [RT #695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 702. [func] If the address 0.0.0.0 is seen in resolv.conf,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use 127.0.0.1 instead. [RT #693]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 701. [func] Root hints are now fully optional. Class IN
8dc3d2006f679d0a291f7a20612c37e2a7146096Brian Wellington views use compiled-in hints by default, as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before. Non-IN views with no root hints now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews provide authoritative service but not recursion.
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson A warning is logged if a view has neither root
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hints nor authoritative data for the root. [RT #696]
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews 700. [bug] $GENERATE range check was wrong. [RT #688]
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson 699. [bug] The lexer mishandled empty quoted strings. [RT #694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 698. [bug] Aborting nsupdate with ^C would lead to several
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington race conditions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 697. [bug] nsupdate was not compatible with the undocumented
7d33e8996948523e0180bc7e28a93d534d878dccAndreas Gustafsson BIND 8 behavior of ignoring TTLs in "update delete"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews commands. [RT #693]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 696. [bug] lwresd would die with an assertion failure when passed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a zero-length name. [RT #692]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 695. [bug] If the resolver attempted to query a blackholed or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bogus server, the resolution would fail immediately.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 694. [bug] $GENERATE did not produce the last entry.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #682, #683]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 693. [bug] An empty lwres statement in named.conf caused
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson the server to crash while loading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 692. [bug] Deal with systems that have getaddrinfo() but not
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson gai_strerror(). [RT #679]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 691. [bug] Configuring per-view forwarders caused an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #675, #734]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 690. [func] $GENERATE now supports DNAME. [RT #654]
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington 689. [doc] man pages are now installed. [RT #210]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 688. [func] "make tags" now works on systems with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "Exuberant Ctags" etags.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 687. [bug] Only say we have IPv6, with sufficient functionality,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if it has actually been tested. [RT #586]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews 686. [bug] dig and nslookup can now be properly aborted during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews blocking operations. [RT #568]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 685. [bug] nslookup should use the search list/domain options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from resolv.conf by default. [RT #405, #630]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 684. [bug] Memory leak with view forwarders. [RT #656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 683. [bug] File descriptor leak in isc_lex_openfile().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 682. [bug] nslookup displayed SOA records incorrectly. [RT #665]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 681. [bug] $GENERATE specifying output format was broken. [RT #653]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson 680. [bug] dns_rdata_fromstruct() mishandled options bigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than 255 octets.
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson 679. [bug] $INCLUDE could leak memory and file descriptors on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reload. [RT #639]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 678. [bug] "transfer-format one-answer;" could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #646]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 677. [bug] dnssec-signzone would occasionally use the wrong ttl
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for database operations and fail. [RT #643]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence 676. [bug] Log messages about lame servers to category
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'lame-servers' rather than 'resolver', so as not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be gratuitously incompatible with BIND 8.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 675. [bug] TKEY queries could cause the server to leak
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 674. [func] Allow messages to be TSIG signed / verified using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a offset from the current time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 673. [func] The server can now convert RFC1886-style recursive
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington lookup requests into RFC2874-style lookups, when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabled using the new option "allow-v6-synthesis".
253f774e358dba38742a484426a4cadf4f248817Brian Wellington 672. [bug] The wrong time was in the "time signed" field when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replying with BADTIME error.
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington 671. [bug] The message code was failing to parse a message with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no question section and a TSIG record. [RT #628]
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson 670. [bug] The lwres replacements for getaddrinfo and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews getipnodebyname didn't properly check for the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews existence of the sockaddr sa_len field.
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson 669. [bug] dnssec-keygen now makes the public key file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-world-readable for symmetric keys. [RT #403]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 668. [func] named-checkzone now reports multiple errors in master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 667. [bug] On Linux, running named with the -u option and a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-world-readable configuration file didn't work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 666. [bug] If a request sent by dig is longer than 512 bytes,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 665. [bug] Signed responses were not sent when the size of the
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer TSIG + question exceeded the maximum message size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 664. [bug] The t_tasks and t_timers module tests are now skipped
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when building without threads, since they require
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington 663. [func] Accept a size_spec, not just an integer, in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (unimplemented and ignored) max-ixfr-log-size option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for compatibility with recent versions of BIND 8.
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington 662. [bug] dns_rdata_fromtext() failed to log certain errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 661. [bug] Certain UDP IXFR requests caused an assertion failure
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington (mpctx->allocated == 0). [RT #355, #394, #623]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 660. [port] Detect multiple CPUs on HP-UX and IRIX.
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington 659. [performance] Rewrite the name compression code to be much faster.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 658. [cleanup] Remove all vestiges of 16 bit global compression.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 657. [bug] When a listen-on statement in an lwres block does not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specify a port, use 921, not 53. Also update the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listen-on documentation. [RT #616]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 656. [func] Treat an unescaped newline in a quoted string as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an error. This means that TXT records with missing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews close quotes should have meaningful errors printed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 655. [bug] Improve error reporting on unexpected eof when loading
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington zones. [RT #611]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 654. [bug] Origin was being forgotten in TCP retries in dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 653. [bug] +defname option in dig was reversed in sense.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 652. [bug] zone_saveunique() did not report the new name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 651. [func] The AD bit in responses now has the meaning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified in <draft-ietf-dnsext-ad-is-secure>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 650. [bug] SIG(0) records were being generated and verified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrectly. [RT #606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 649. [bug] It was possible to join to an already running fctx
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after it had "cloned" its events, but before it sent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews them. In this case, the event of the newly joined
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews fetch would not contain the answer, and would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger the INSIST() in fctx_sendevents(). In
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson BIND 9.0, this bug did not trigger an INSIST(), but
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt caused the fetch to fail with a SERVFAIL result.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #588, #597, #605, #607]
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson 648. [port] Add support for pre-RFC2133 IPv6 implementations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 647. [bug] Resolver queries sent after following multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referrals had excessively long retransmission
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeouts due to incorrectly counting the referrals
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson as "restarts".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews didn't _cleanly_ fix the problem it was trying to fix.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 644. [bug] #622 needed more work. [RT #562]
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson 643. [bug] xfrin error messages made more verbose, added class
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the zone. [RT #599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 642. [bug] Break the exit_check() race in the zone module.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.1.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 641. [bug] $GENERATE caused a uninitialized link to be used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 640. [bug] Memory leak in error path could cause
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews "mpctx->allocated == 0" failure. [RT #584]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 639. [bug] Reading entropy from the keyboard would sometimes fail.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 638. [port] lib/isc/random.c needed to explicitly include time.h
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington to get a prototype for time() when pthreads was not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being used. [RT #592]
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson 637. [port] Use isc_u?int64_t instead of (unsigned) long long in
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews be compiled even if the platform does not need it.
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson 636. [port] Shut up MSVC++ about a possible loss of precision
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the ISC__BUFFER_PUTUINT*() macros. [RT #592]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley 635. [bug] Reloading a server with a configured blackhole list
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would cause an assertion. [RT #590]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 634. [bug] A log file will completely stop being written when
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley it reaches the maximum size in all cases, not just
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when versioning is also enabled. [RT #570]
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley 633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 632. [bug] The index array of the journal file was
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson corrupted as it was written to disk.
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson 631. [port] Build without thread support on systems without
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson 630. [bug] Locking failure in zone code. [RT #582]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson 629. [bug] 9.1.0b1 dereferenced a null pointer and crashed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when responding to a UDP IXFR request.
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington 628. [bug] If the root hints contained only AAAA addresses,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named would be unable to perform resolution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 627. [bug] The EDNS0 blackhole detection code of change 324
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews waited for three retransmissions to each server,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which takes much too long when a domain has many
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson name servers and all of them drop EDNS0 queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Now we retry without EDNS0 after three consecutive
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence timeouts, even if they are all from different
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers. [RT #143]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence 626. [bug] The lightweight resolver daemon no longer crashes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when asked for a SIG rrset. [RT #558]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 625. [func] Zones now inherit their class from the enclosing view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 624. [bug] The zone object could get timer events after it had
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been destroyed, causing a server crash. [RT #571]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 623. [func] Added "named-checkconf" and "named-checkzone" program
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for syntax checking named.conf files and zone files,
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington 622. [bug] A canceled request could be destroyed before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_request_destroy() was called. [RT #562]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 621. [port] Disable IPv6 at runtime if IPv6 sockets are unusable.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson This mostly affects Red Hat Linux 7.0, which has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conflicts between libc and the kernel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 620. [bug] dns_master_load*inc() now require 'task' and 'load'
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington to be non-null. Also 'done' will not be called if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_master_load*inc() fails immediately. [RT #565]
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson 619. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 618. [bug] Queries to a signed zone could sometimes cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 617. [bug] When using dynamic update to add a new RR to an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews existing RRset with a different TTL, the journal
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson entries generated from the update did not include
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews explicit deletions and re-additions of the existing
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington RRs to update their TTL to the new value.
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson 616. [func] dnssec-signzone -t output now includes performance
dffdc24ffd76ef3d8c8141671e89fb39428fef06Brian Wellington 615. [bug] dnssec-signzone did not like child keysets signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by multiple keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 614. [bug] Checks for uninitialized link fields were prone
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews to false positives, causing assertion failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The checks are now disabled by default and may
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer be re-enabled by defining ISC_LIST_CHECKINIT.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 613. [bug] "rndc reload zone" now reloads primary zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews It previously only updated slave and stub zones,
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer if an SOA query indicated an out of date serial.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 612. [cleanup] Shutup a ridiculously noisy HP-UX compiler that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews complains relentlessly about how its treatment
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson of 'const' has changed as well as how casting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sometimes tightens alignment constraints.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 611. [func] allow-notify can be used to permit processing of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify messages from hosts other than a slave's
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington 610. [func] rndc dumpdb is now supported.
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews 609. [bug] getrrsetbyname() would crash lwresd if the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found more SIGs than answers. [RT #554]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 608. [func] dnssec-signzone now adds a comment to the zone
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews with the time the file was signed.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 607. [bug] nsupdate would fail if it encountered a CNAME or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNAME in a response to an SOA query. [RT #515]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 606. [bug] Compiling with --disable-threads failed due
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to isc_thread_self() being incorrectly defined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as an integer rather than a function.
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews 605. [func] New function isc_lex_getlasttokentext().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 604. [bug] The named.conf parser could print incorrect line
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence numbers when long comments were present.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 603. [bug] Make dig handle multiple types or classes on the same
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence query more correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 602. [func] Cope automatically with UnixWare's broken
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews IN6_IS_ADDR_* macros. [RT #539]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 601. [func] Return a non-zero exit code if an update fails
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews in nsupdate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 600. [bug] Reverse lookups sometimes failed in dig, etc...
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 599. [func] Added four new functions to the libisc log API to
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews support i18n messages. isc_log_iwrite(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_log_ivwrite(), isc_log_iwrite1() and
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews isc_log_ivwrite1() were added.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 598. [bug] An update-policy statement would cause the server
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews to assert while loading. [RT #536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 597. [func] dnssec-signzone is now multi-threaded.
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews 596. [bug] DNS_RDATASLAB_FORCE and DNS_RDATASLAB_EXACT are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not mutually exclusive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 595. [port] On Linux 2.2, socket() returns EINVAL when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should return EAFNOSUPPORT. Work around this.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 594. [func] sdb drivers are now assumed to not be thread-safe
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unless the DNS_SDBFLAG_THREADSAFE flag is supplied.
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington 593. [bug] If a secure zone was missing all its NXTs and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a dynamic update was attempted, the server entered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an infinite loop.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 592. [bug] The sig-validity-interval option now specifies a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews number of days, not seconds. This matches the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documentation. [RT #529]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.1.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 591. [bug] Work around non-reentrancy in openssl by disabling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pre-computation in keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 590. [doc] There are now man pages for the lwres library in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 589. [bug] The server could deadlock if a zone was updated
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington while being transferred out.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 588. [bug] ctx->in_use was not being correctly initialized when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when pushing a file for $INCLUDE. [RT #523]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 587. [func] A warning is now printed if the "allow-update"
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews option allows updates based on the source IP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address, to alert users to the fact that this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is insecure and becoming increasingly so as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers capable of update forwarding are being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 586. [bug] multiple views with the same name were fatal. [RT #516]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 585. [func] dns_db_addrdataset() and dns_rdataslab_merge()
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley now support 'exact' additions in a similar manner to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_db_subtractrdataset() and dns_rdataslab_subtract().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 584. [func] You can now say 'notify explicit'; to suppress
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley notification of the servers listed in NS records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and notify only those servers listed in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'also-notify' option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 583. [func] "rndc querylog" will now toggle logging of
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews queries, like "ndc querylog" in BIND 8.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 582. [bug] dns_zone_idetach() failed to lock the zone.
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews [RT #199, #463]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 581. [bug] log severity was not being correctly processed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 580. [func] Ignore trailing garbage on incoming DNS packets,
588b63e1a86fb707172830e14897da624ed380edMark Andrews for interoperability with broken server
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews implementations. [RT #491]
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington 579. [bug] nsupdate did not take a filename to read update from.
452d75b18f9d050086964fa39c326cf388517396Mark Andrews 578. [func] New config option "notify-source", to specify the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source address for notify messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 577. [func] Log illegal RDATA combinations. e.g. multiple
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington singleton types, cname and other data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 576. [doc] isc_log_create() description did not match reality.
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews 575. [bug] isc_log_create() was not setting internal state
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly to reflect the default channels created.
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews 574. [bug] TSIG signed queries sent by the resolver would fail to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have their responses validated and would leak memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 573. [bug] The journal files of IXFRed slave zones were
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews inadvertently discarded on server reload, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "journal out of sync with zone" errors on subsequent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reloads. [RT #482]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 572. [bug] Quoted strings were not accepted as key names in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address match lists.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 571. [bug] It was possible to create an rdataset of singleton
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews type which had more than one rdata. [RT #154]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 570. [bug] rbtdb.c allowed zones containing nodes which had
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer both a CNAME and "other data". [RT #154]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer 569. [func] The DNSSEC AD bit will not be set on queries which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have not requested a DNSSEC response.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 568. [func] Add sample simple database drivers in contrib/sdb.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 567. [bug] Setting the zone transfer timeout to zero caused an
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson assertion failure. [RT #302]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 566. [func] New public function dns_timer_setidle().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 565. [func] Log queries more like BIND 8: query logging is now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews done to category "queries", level "info". [RT #169]
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington 564. [func] Add sortlist support to lwresd.
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington 563. [func] New public functions dns_rdatatype_format() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdataclass_format(), for convenient formatting
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews of rdata type/class mnemonics in log messages.
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews 562. [cleanup] Moved lib/dns/*conf.c to bin/named where they belong.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 561. [func] The 'datasize', 'stacksize', 'coresize' and 'files'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clauses of the options{} statement are now implemented.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson 560. [bug] dns_name_split did not properly the resulting prefix
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a maximal length bitstring label was split which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was preceded by another bitstring label. [RT #429]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 559. [bug] dns_name_split did not properly create the suffix
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when splitting within a maximal length bitstring label.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 558. [func] New functions, isc_resource_getlimit and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_resource_setlimit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 557. [func] Symbolic constants for libisc integral types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 556. [func] The DNSSEC OK bit in the EDNS extended flags
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington is now implemented. Responses to queries without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this bit set will not contain any DNSSEC records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 555. [bug] A slave server attempting a zone transfer could
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer crash with an assertion failure on certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews malformed responses from the master. [RT #457]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 554. [bug] In some cases, not all of the dnssec tools were
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer properly installed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 553. [bug] Incoming zone transfers deferred due to quota
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were not started when quota was increased but
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson only when a transfer in progress finished. [RT #456]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 552. [bug] We were not correctly detecting the end of all c-style
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comments. [RT #455]
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews 551. [func] Implemented the 'sortlist' option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 550. [func] Support unknown rdata types and classes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 549. [bug] "make" did not immediately abort the build when a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews subdirectory make failed [RT #450].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 548. [func] The lexer now ungets tokens more correctly.
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews 547. [placeholder]
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson 546. [func] Option 'lame-ttl' is now implemented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 545. [func] Name limit and counting options removed from dig;
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson they didn't work properly, and cannot be correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implemented without significant changes.
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson 544. [func] Add statistics option, enable statistics-file option,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews add RNDC option "dump-statistics" to write out a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query statistics file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 543. [doc] The 'port' option is now documented.
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson 542. [func] Add support for update forwarding as required for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews full compliance with RFC2136. It is turned off
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by default and can be enabled using the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'allow-update-forwarding' option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 541. [func] Add bogus server support.
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson 540. [func] Add dialup support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 539. [func] Support the blackhole option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 537. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 536. [func] Use transfer-source{-v6} when sending refresh queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Transfer-source{-v6} now take a optional port
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson parameter for setting the UDP source port. The port
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parameter is ignored for TCP.
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington 535. [func] Use transfer-source{-v6} when forwarding update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 534. [func] Ancestors have been removed from RBT chains. Ancestor
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews information can be discerned via node parent pointers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 533. [func] Incorporated name hashing into the RBT database to
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews improve search speed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 532. [func] Implement DNS UPDATE pseudo records using
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews DNS_RDATA_UPDATE flag.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 531. [func] Rdata really should be initialized before being assigned
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews to (dns_rdata_fromwire(), dns_rdata_fromtext(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_clone(), dns_rdata_fromregion()),
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson check that it is.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 530. [func] New function dns_rdata_invalidate().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 529. [bug] 521 contained a bug which caused zones to always
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer reload. [RT #410]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 528. [func] The ISC_LIST_XXXX macros now perform sanity checks
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on their arguments. ISC_LIST_XXXXUNSAFE can be use
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington to skip the checks however use with caution.
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence 527. [func] New function dns_rdata_clone().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 526. [bug] nsupdate incorrectly refused to add RRs with a TTL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 525. [func] New arguments 'options' for dns_db_subtractrdataset(),
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer and 'flags' for dns_rdataslab_subtract() allowing you
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to request that the RR's must exist prior to deletion.
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer DNS_R_NOTEXACT is returned if the condition is not met.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 524. [func] The 'forward' and 'forwarders' statement in
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer non-forward zones should work now.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 523. [doc] The source to the Administrator Reference Manual is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now an XML file using the DocBook DTD, and is included
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews in the distribution. The plain text version of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ARM is temporarily unavailable while we figure out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews how to generate readable plain text from the XML.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 522. [func] The lightweight resolver daemon can now use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a real configuration file, and its functionality
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews can be provided by a name server. Also, the -p and -P
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options to lwresd have been reversed.
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews 521. [bug] Detect master files which contain $INCLUDE and always
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reload. [RT #196]
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson 520. [bug] Upgraded libtool to 1.3.5, which makes shared
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews library builds almost work on AIX (and possibly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 519. [bug] dns_name_split() would improperly split some bitstring
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews labels, zeroing a few of the least significant bits in
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews the prefix part. When such an improperly created
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews prefix was returned to the RBT database, the bogus
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews label was dutifully stored, corrupting the tree.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 518. [bug] The resolver did not realize that a DNAME which was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "the answer" to the client's query was "the answer",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and such queries would fail. [RT #399]
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer 517. [bug] The resolver's DNAME code would trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if there was more than one DNAME in the chain.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 516. [bug] Cache lookups which had a NULL node pointer, e.g.
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews those by dns_view_find(), and which would match a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNAME, would trigger an INSIST(!search.need_cleanup)
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley assertion. [RT #399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 515. [bug] The ssu table was not being attached / detached
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by dns_zone_[sg]etssutable. [RT #397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 514. [func] Retry refresh and notify queries if they timeout.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 513. [func] New functionality added to rdnc and server to allow
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson individual zones to be refreshed or reloaded.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 512. [bug] The zone transfer code could throw an exception with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an invalid IXFR stream.
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson 511. [bug] The message code could throw an assertion on an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews out of memory failure. [RT #392]
ba43c53451d5c38765f376eeede457178b36951aBob Halley 510. [bug] Remove spurious view notify warning. [RT #376]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 509. [func] Add support for write of zone files on shutdown.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 508. [func] dns_message_parse() can now do a best-effort
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews attempt, which should allow dig to print more invalid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff and dns_view_flushanddetach().
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson 506. [func] Do not fail to start on errors in zone files.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 505. [bug] nsupdate was printing "unknown result code". [RT #373]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 504. [bug] The zone was not being marked as dirty when updated via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 503. [bug] dumptime was not being set along with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNS_ZONEFLG_NEEDDUMP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 502. [func] On a SERVFAIL reply, DiG will now try the next server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the list, unless the +fail option is specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 501. [bug] Incorrect port numbers were being displayed by
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson nslookup. [RT #352]
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson 500. [func] Nearly useless +details option removed from DiG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 499. [func] In DiG, specifying a class with -c or type with -t
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews changes command-line parsing so that classes and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews types are only recognized if following -c or -t.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff This allows hosts with the same name as a class or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews type to be looked up.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 498. [doc] There is now a man page for "dig"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 497. [bug] The error messages printed when an IP match list
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff contained a network address with a nonzero host
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews part where not sufficiently detailed. [RT #365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 496. [bug] named didn't sanity check numeric parameters. [RT #361]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 495. [bug] nsupdate was unable to handle large records. [RT #368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 494. [func] Do not cache NXDOMAIN responses for SOA queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for SOA queries. This makes it easier to locate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the containing zone without polluting intermediate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 492. [bug] attempting to reload a zone caused the server fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to shutdown cleanly. [RT #360]
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson 491. [bug] nsupdate would segfault when sending certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prerequisites with empty RDATA. [RT #356]
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson 490. [func] When a slave/stub zone has not yet successfully
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews obtained an SOA containing the zone's configured
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews retry time, perform the SOA query retries using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exponential backoff. [RT #337]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 489. [func] The zone manager now has a "i/o" queue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 488. [bug] Locks weren't properly destroyed in some cases.
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson 487. [port] flockfile() is not defined on all systems.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 486. [bug] nslookup: "set all" and "server" commands showed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the incorrect port number if a port other than 53
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff was specified. [RT #352]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 485. [func] When dig had more than one server to query, it would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews send all of the messages at the same time. Add
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rate limiting of the transmitted messages.
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson 484. [bug] When the server was reloaded after removing addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the named.conf "listen-on" statement, sockets
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson were still listening on the removed addresses due
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to reference count loops. [RT #325]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 483. [bug] nslookup: "set all" showed a "search" option but it
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson was not settable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 482. [bug] nslookup: a plain "server" or "lserver" should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews treated as a lookup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 481. [bug] nslookup:get_next_command() stack size could exceed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews per thread limit.
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson 480. [bug] strtok() is not thread safe. [RT #349]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 479. [func] The test suite can now be run by typing "make check"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or "make test" at the top level.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 478. [bug] "make install" failed if the directory specified with
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson --prefix did not already exist.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 477. [bug] The the isc-config.sh script could be installed before
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson its directory was created. [RT #324]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 476. [bug] A zone could expire while a zone transfer was in
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington progress triggering a INSIST failure. [RT #329]
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington 475. [bug] query_getzonedb() sometimes returned a non-null version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on failure. This caused assertion failures when
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson generating query responses where names subject to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews additional section processing pointed to a zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to which access had been denied by means of the
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson allow-query option. [RT #336]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 474. [bug] The mnemonic of the CHAOS class is CH according to
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews RFC1035, but it was printed and read only as CHAOS.
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson We now accept both forms as input, and print it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as CH. [RT #305]
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson 473. [bug] nsupdate overran the end of the list of name servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when no servers could be reached, typically causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it to print the error message "dns_request_create:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not implemented".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 472. [bug] Off-by-one error caused isc_time_add() to sometimes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews produce invalid time values.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 471. [bug] nsupdate didn't compile on HP/UX 10.20
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 470. [func] $GENERATE is now supported. See also
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson 469. [bug] "query-source address * port 53;" now works.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 468. [bug] dns_master_load*() failed to report file and line
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews number in certain error conditions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 467. [bug] dns_master_load*() failed to log an error if
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington pushfile() failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 466. [bug] dns_master_load*() could return success when it failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 465. [cleanup] Allow 0 to be set as an omapi_value_t value by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews omapi_value_storeint().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 464. [cleanup] Build with openssl's RSA code instead of dnssafe.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 463. [bug] nsupdate sent malformed SOA queries to the second
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and subsequent name servers in resolv.conf if the
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson query sent to the first one failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 462. [bug] --disable-ipv6 should work now.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 461. [bug] Specifying an unknown key in the "keys" clause of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "controls" statement caused a NULL pointer dereference.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 460. [bug] Much of the DNSSEC code only worked with class IN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 459. [bug] Nslookup processed the "set" command incorrectly.
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews 458. [bug] Nslookup didn't properly check class and type values.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 457. [bug] Dig/host/hslookup didn't properly handle connect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeouts in certain situations, causing an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unnecessary warning message to be printed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 456. [bug] Stub zones were not resetting the refresh and expire
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews counters, loadtime or clearing the DNS_ZONE_REFRESH
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews (refresh in progress) flag upon successful update.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This disabled further refreshing of the stub zone,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing it to eventually expire. [RT #300]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 455. [doc] Document IPv4 prefix notation does not require a
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson dotted decimal quad but may be just dotted decimal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 454. [bug] Enforce dotted decimal and dotted decimal quad where
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documented as such in named.conf. [RT #304, RT #311]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 453. [bug] Warn if the obsolete option "maintain-ixfr-base"
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson is specified in named.conf. [RT #306]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 452. [bug] Warn if the unimplemented option "statistics-file"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is specified in named.conf. [RT #301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 451. [func] Update forwarding implemented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 450. [func] New function ns_client_sendraw().
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson 449. [bug] isc_bitstring_copy() only works correctly if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews two bitstrings have the same lsb0 value, but this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requirement was not documented, nor was there a
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson REQUIRE for it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 448. [bug] Host output formatting change, to match v8. [RT #255]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 447. [bug] Dig didn't properly retry in TCP mode after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a truncated reply. [RT #277]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 446. [bug] Confusing notify log message. [RT #298]
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington 445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bitstring triggered a REQUIRE statement. The REQUIRE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement was incorrect. [RT #297]
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington 444. [func] "recursion denied" messages are always logged at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews debug level 1, now, rather than sometimes at ERROR.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This silences these warnings in the usual case, where
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington some clients set the RD bit in all queries.
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson 443. [bug] When loading a master file failed because of an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unrecognized RR type name, the error message
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews did not include the file name and line number.
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson 442. [bug] TSIG signed messages that did not match any view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews crashed the server. [RT #290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 441. [bug] Nodes obscured by a DNAME were inaccessible even
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington when DNS_DBFIND_GLUEOK was set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 440. [func] New function dns_zone_forwardupdate().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 439. [func] New function dns_request_createraw().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 438. [func] New function dns_message_getrawmessage().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 437. [func] Log NOTIFY activity to the notify channel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson which sometimes happens on Linux, named would enter
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a busy loop. Also, unexpected socket errors were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not logged at a high enough logging level to be
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson useful in diagnosing this situation. [RT #275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 435. [bug] dns_zone_dump() overwrote existing zone files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than writing to a temporary file and
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews renaming. This could lead to empty or partial
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews zone files being left around in certain error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conditions involving the initial transfer of a
385a9cb48a70b329e507c39d043fa9a44c659913James Brister slave zone, interfering with subsequent server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews startup. [RT #282]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister 434. [func] New function isc_file_isabsolute().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 433. [func] isc_base64_decodestring() now accepts newlines
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington within the base64 data. This makes it possible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to break up the key data in a "trusted-keys"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement into multiple lines. [RT #284]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 432. [func] Added refresh/retry jitter. The actual refresh/
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews retry time is now a random value between 75% and
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer 100% of the configured value.
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington 431. [func] Log at ISC_LOG_INFO when a zone is successfully
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 430. [bug] Rewrote the lightweight resolver client management
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews code to handle shutdown correctly and general
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 429. [bug] The space reserved for a TSIG record in a response
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was 2 bytes too short, leading to message
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence generation failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNS_R_BADDB for nodes which had neither NXT nor SIG NXT
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (e.g. glue). This could cause SERVFAILs when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generating negative responses in a secure zone.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence 427. [bug] Avoid going into an infinite loop when the validator
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gets a negative response to a key query where the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records are signed by the missing key.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 426. [bug] Attempting to generate an oversized RSA key could
529a6b5224d751504027293a766a4c8b81241869Brian Wellington cause dnssec-keygen to dump core.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 425. [bug] Warn about the auth-nxdomain default value change
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington if there is no auth-nxdomain statement in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews config file. [RT #287]
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington 424. [bug] notify_createmessage() could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure when creating the notify message failed,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews e.g. due to corrupt zones with multiple SOA records.
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson 423. [bug] When responding to a recursive query, errors that occur
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after following a CNAME should cause the query to fail.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 422. [func] get rid of isc_random_t, and make isc_random_get()
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt and isc_random_jitter() use rand() internally
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson instead of local state. Note that isc_random_*()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions are only for weak, non-critical "randomness"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews such as timing jitter and such.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 421. [bug] nslookup would exit when given a blank line as input.
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson 420. [bug] nslookup failed to implement the "exit" command.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 419. [bug] The certificate type PKIX was misspelled as SKIX.
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington 418. [bug] At debug levels >= 10, getting an unexpected
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews socket receive error would crash the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while trying to log the error message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 417. [func] Add isc_app_block() and isc_app_unblock(), which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow an application to handle signals while
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 416. [bug] Slave zones with no master file tried to use a
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer NULL pointer for a journal file name when they
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews received an IXFR. [RT #273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 415. [bug] The logging code leaked file descriptors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 414. [bug] Server did not shut down until all incoming zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfers were finished.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 413. [bug] Notify could attempt to use the zone database after
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson it had been unloaded. [RT #267]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 412. [bug] named -v didn't print the version.
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson 411. [bug] A typo in the HS A code caused an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 410. [bug] lwres_gethostbyname() and company set lwres_h_errno
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to a random value on success.
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson 409. [bug] If named was shut down early in the startup
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews process, ns_omapi_shutdown() would attempt to lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an uninitialized mutex. [RT #262]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence 408. [bug] stub zones could leak memory and reference counts if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all the masters were unreachable.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence 407. [bug] isc_rwlock_lock() would needlessly block
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews readers when it reached the read quota even
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if no writers were waiting.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 406. [bug] Log messages were occasionally lost or corrupted
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson due to a race condition in isc_log_doit().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 405. [func] Add support for selective forwarding (forward zones)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 404. [bug] The request library didn't completely work with IPv6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 403. [bug] "host" did not use the search list.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 402. [bug] Treat undefined acls as errors, rather than
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson warning and then later throwing an assertion.
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson 401. [func] Added simple database API.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 400. [bug] SIG(0) signing and verifying was done incorrectly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 399. [bug] When reloading the server with a config file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews containing a syntax error, it could catch an
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington assertion failure trying to perform zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews maintenance on, or sending notifies from,
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson tentatively created zones whose views were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews never fully configured and lacked an address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews database and request manager.
da527e4ff6a013364826637963e7ac372e024f33David Lawrence 398. [bug] "dig" sometimes caught an assertion failure when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using TSIG, depending on the key length.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 397. [func] Added utility functions dns_view_gettsig() and
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson dns_view_getpeertsig().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 396. [doc] There is now a man page for "nsupdate"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 395. [bug] nslookup printed incorrect RR type mnemonics
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for RRs of type >= 21 [RT #237].
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence 394. [bug] Current name was not propagated via $INCLUDE.
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister 393. [func] Initial answer while loading (awl) support.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews Entry points: dns_master_loadfileinc(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_master_loadstreaminc(), dns_master_loadbufferinc().
adade77942b069127a7094df419b3ad39dafb385James Brister Note: calls to dns_master_load*inc() should be rate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be rate limited so as to not use up all file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews descriptors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson not support the given address family requested.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 390. [func] The function dns_zone_setdbtype() now takes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an argc/argv style vector of words and sets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews both the zone database type and its arguments,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews making the functions dns_zone_adddbarg()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dns_zone_cleardbargs() unnecessary.
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson 389. [bug] Attempting to send a request over IPv6 using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_request_create() on a system without IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support caused an assertion failure [RT #235].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 388. [func] dig and host can now do reverse ipv6 lookups.
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson 387. [func] Add dns_byaddr_createptrname(), which converts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an address into the name used by a PTR query.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 386. [bug] Missing strdup() of ACL name caused random
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ACL matching failures [RT #228].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews and dns_zt_print().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead
5096958739769958dd7a6b69356bf41260033873David Lawrence of 2147483647.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 383. [func] When writing a master file, print the SOA and NS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records (and their SIGs) before other records.
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence 382. [bug] named -u failed on many Linux systems where the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews libc provided kernel headers do not match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the current kernel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 381. [bug] Check for IPV6_RECVPKTINFO and use it instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPV6_PKTINFO if found. [RT #229]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 380. [bug] nsupdate didn't work with IPv6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 379. [func] New library function isc_sockaddr_anyofpf().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 378. [func] named and lwresd will log the command line arguments
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they were started with in the "starting ..." message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 377. [bug] When additional data lookups were refused due to
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister "allow-query", the databases were still being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attached causing reference leaks.
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington 376. [bug] The server should always use good entropy when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews performing cryptographic functions needing entropy.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 375. [bug] Per-zone "allow-query" did not properly override the
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington view/global one for CNAME targets and additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews data [RT #220].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 374. [bug] SOA in authoritative negative responses had wrong TTL.
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington 373. [func] nslookup is now installed by "make install".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 372. [bug] Deal with Microsoft DNS servers appending two bytes of
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister garbage to zone transfer requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 371. [bug] At high debug levels, doing an outgoing zone transfer
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister of a very large RRset could cause an assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews during logging.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 370. [bug] The error messages for roll-forward failures were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overly terse.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 369. [func] Support new named.conf options, view and zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-retry-time, min-retry-time,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-refresh-time, min-refresh-time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 368. [func] Restructure the internal ".bind" view so that more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones can be added to it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 367. [bug] Allow proper selection of server on nslookup command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 366. [func] Allow use of '-' batch file in dig for stdin.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 365. [bug] nsupdate -k leaked memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 364. [func] Added additional-from-{cache,auth}
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 363. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 362. [bug] rndc no longer aborts if the configuration file is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews missing an options statement. [RT #209]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 361. [func] When the RBT find or chain functions set the name and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews origin for a node that stores the root label
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the name is now set to an empty name, instead of ".",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to simplify later use of the name and origin by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_concatenate(), dns_name_totext() or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_format().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 360. [func] dns_name_totext() and dns_name_format() now allow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an empty name to be passed, which is formatted as "@".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 359. [bug] dnssec-signzone occasionally signed glue records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 358. [cleanup] Rename the intermediate files used by the dnssec
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 357. [bug] The zone file parser crashed if the argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to $INCLUDE was a quoted string.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 356. [cleanup] isc_task_send no longer requires event->sender to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be non-null.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 355. [func] Added isc_dir_createunique(), similar to mkdtemp().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 354. [doc] Man pages for the dnssec tools are now included in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the distribution, in doc/man/dnssec.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 353. [bug] double increment in lwres/gethost.c:copytobuf().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 352. [bug] Race condition in dns_client_t startup could cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure.
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson 351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signed query could crash the server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 350. [bug] Also-notify lists specified in the global options
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson block were not correctly reference counted, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a memory leak.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 349. [bug] Processing a query with the CD bit set now works
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 348. [func] New boolean named.conf options 'additional-from-auth'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and 'additional-from-cache' now supported in view and
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson global options statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 347. [bug] Don't crash if an argument is left off options in dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 346. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 345. [bug] Large-scale changes/cleanups to dig:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * Significantly improve structure handling
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews * Don't pre-load entire batch files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * Fix SIGINT handling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * Shorten timeouts to match v8's behavior
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 344. [bug] When shutting down, lwresd sometimes tried
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to shut down its client tasks twice,
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson triggering an assertion.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 343. [bug] Although zone maintenance SOA queries and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify requests were signed with TSIG keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when configured for the server in case,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the TSIG was not verified on the response.
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson 342. [bug] The wrong name was being passed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_dup() when generating a TSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key using TKEY.
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer 341. [func] Support 'key' clause in named.conf zone masters
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement to allow authentication via TSIG keys:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 10.0.0.1 port 5353 key "foo";
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence 340. [bug] The top-level COPYRIGHT file was missing from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the distribution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 339. [bug] DNSSEC validation of the response to an ANY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query at a name with a CNAME RR in a secure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone triggered an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 338. [bug] lwresd logged to syslog as named, not lwresd.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 337. [bug] "dig" did not recognize "nsap-ptr" as an RR type
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on the command line.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 336. [bug] "dig -f" used 64 k of memory for each line in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the file. It now uses much less, though still
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews proportionally to the file size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 335. [bug] named would occasionally attempt recursion when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it was disallowed or undesired.
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson 334. [func] Added hmac-md5 to libisc.
8775909be9fc67180fc480115716f88174e74471James Brister 333. [bug] The resolver incorrectly accepted referrals to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews domains that were not parents of the query name,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing assertion failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 332. [func] New function dns_name_reset().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 331. [bug] Only log "recursion denied" if RD is set. [RT #178]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 330. [bug] Many debugging messages were partially formatted
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence even when debugging was turned off, causing a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews significant decrease in query performance.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 329. [func] omapi_auth_register() now takes a size_t argument for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the length of a key's secret data. Previously
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence OMAPI only stored secrets up to the first NUL byte.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 328. [func] Added isc_base64_decodestring().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 327. [bug] rndc.conf parser wasn't correctly recognizing an IP
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence address where a host specification was required.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 326. [func] 'keys' in an 'inet' control statement is now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews required and must have at least one item in it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A "not supported" warning is now issued if a 'unix'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews control channel is defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 325. [bug] isc_lex_gettoken was processing octal strings when
57b3597444bc8716459f0fb3022b2c12f4eee2aeAndreas Gustafsson ISC_LEXOPT_CNUMBER was not set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 324. [func] In the resolver, turn EDNS0 off if there is no
99524919752c9b9abe1814007732b86592011cc1Brian Wellington response after a number of retransmissions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This is to allow queries some chance of succeeding
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews even if all the authoritative servers of a zone
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson silently discard EDNS0 requests instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sending an error response like they ought to.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Because of this, servers authoritative for a parent
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson and grandchild zone but not authoritative for the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews intervening child zone did not correctly issue
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referrals to the servers of the child zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 322. [bug] Queries for KEY RRs are now sent to the parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server before the authoritative one, making
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington DNSSEC insecurity proofs work in many cases
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews where they previously didn't.
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews 321. [bug] When synthesizing a CNAME RR for a DNAME
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response, query_addcname() failed to initialize
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson the type and class of the CNAME dns_rdata_t,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing random failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 320. [func] Multiple rndc changes: parses an rndc.conf file,
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson uses authentication to talk to named, command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews line syntax changed. This will all be described
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer 319. [func] The named.conf "controls" statement is now used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to configure the OMAPI command channel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 318. [func] dns_c_ndcctx_destroy() could never return anything
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews except ISC_R_SUCCESS; made it have void return instead.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews 317. [func] Use callbacks from libomapi to determine if a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new connection is valid, and if a key requested
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be used with that connection is valid.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 316. [bug] Generate a warning if we detect an unexpected <eof>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but treat as <eol><eof>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 315. [bug] Handle non-empty blanks lines. [RT #163]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 314. [func] The named.conf controls statement can now have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more than one key specified for the inet clause.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 313. [bug] When parsing resolv.conf, don't terminate on an
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews error. Instead, parse as much as possible, but
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews still return an error if one was found.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 312. [bug] Increase the number of allowed elements in the
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington resolv.conf search path from 6 to 8. If there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are more than this, ignore the remainder rather
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than returning a failure in lwres_conf_parse.
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister 311. [bug] lwres_conf_parse failed when the first line of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolv.conf was empty or a comment.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 310. [func] Changes to named.conf "controls" statement (inet
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister subtype only)
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson - support "keys" clause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inet * port 1024
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow { any; } keys { "foo"; }
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - allow "port xxx" to be left out of statement,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in which case it defaults to omapi's default port
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews 309. [bug] When sending a referral, the server did not look
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for name server addresses as glue in the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews holding the NS RRset in the case where this zone
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson was not the same as the one where it looked for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name server addresses as authoritative data.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 308. [bug] Treat a SOA record not at top of zone as an error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when loading a zone. [RT #154]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 307. [bug] When canceling a query, the resolver didn't check for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_socket_sendto() calls that did not yet have their
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completion events posted, so it could (rarely) end up
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson destroying the query context and then want to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it again when the send event posted, triggering an
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister assertion as it tried to cancel an already-canceled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query. [RT #77]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister 306. [bug] Reading HMAC-MD5 private key files didn't work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 305. [bug] When reloading the server with a config file
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister containing a syntax error, it could catch an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure trying to perform zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews maintenance on tentatively created zones whose
47c196192afa37b2dea728e52579779f190bf07fJames Brister views were never fully configured and lacked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an address database.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are listed in resolv.conf, silently ignore them
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington instead of returning failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 303. [bug] Add additional sanity checks to differentiate a AXFR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response vs a IXFR response. [RT #157]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 302. [bug] In dig, host, and nslookup, MXNAME should be large
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enough to hold any legal domain name in presentation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format + terminating NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 301. [bug] Uninitialized pointer in host:printmessage(). [RT #159]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister 300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on platforms lacking IPv6 because each included their
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister own ipv6 header file for the missing definitions. Now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews each library's ipv6.h defines the wrapper symbol of
0380c44d0238a88e167526954d630d071739ed28Mark Andrews the other (ISC_IPV6_H and LWRES_IPV6_H).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 299. [cleanup] Get the user and group information before changing the
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews root directory, so the administrator does not need to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews keep a copy of the user and group databases in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews chroot'ed environment. Suggested by Hakan Olsson.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 298. [bug] A mutex deadlock occurred during shutdown of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interface manager under certain conditions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Digital Unix systems were the most affected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 297. [bug] Specifying a key name that wasn't fully qualified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in certain parts of the config file could cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 296. [bug] "make install" from a separate build directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed unless configure had been run in the source
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson directory, too.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 295. [bug] When invoked with type==CNAME and a message
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not constructed by dns_message_parse(),
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister dns_message_findname() failed to find anything
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to checking for attribute bits that are set
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence only in dns_message_parse(). This caused an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews infinite loop when constructing the response to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an ANY query at a CNAME in a secure zone.
d5399cc351a549db957185993b320a3bffa40e41James Brister 294. [bug] If we run out of space in while processing glue
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when reading a master file and commit "current name"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reverts to "name_current" instead of staying as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "name_glue".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 293. [port] Add support for FreeBSD 4.0 system tests.
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews 292. [bug] Due to problems with the way some operating systems
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews handle simultaneous listening on IPv4 and IPv6
69b691c9624f31e59b8d128ada902a82127c15a3James Brister addresses, the server no longer listens on IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses by default. To revert to the previous
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews behavior, specify "listen-on-v6 { any; };" in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the config file.
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington 291. [func] Caching servers no longer send outgoing queries
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews over TCP just because the incoming recursive query
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister was a TCP one.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 290. [cleanup] +twiddle option to dig (for testing only) removed.
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister 289. [cleanup] dig is now installed in $bindir instead of $sbindir.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews host is now installed in $bindir. (Be sure to remove
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews any $sbindir/dig from a previous release.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 288. [func] rndc is now installed by "make install" into $sbindir.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 287. [bug] rndc now works again as "rndc 127.1 reload" (for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only that task). Parsing its configuration file and
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson using digital signatures for authentication has been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews disabled until named supports the "controls" statement,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 286. [bug] On Solaris 2, when named inherited a signal state
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews where SIGHUP had the SIG_IGN action, SIGHUP would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be ignored rather than causing the server to reload
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews its configuration.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 285. [bug] A change made to the dst API for beta4 inadvertently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews broke OMAPI's creation of a dst key from an incoming
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews message, causing an assertion to be triggered. Fixed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 284. [func] The DNSSEC key generation and signing tools now
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence generate randomness from keyboard input on systems
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 283. [cleanup] The 'lwresd' program is now a link to 'named'.
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson 282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too big for an unsigned long.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 281. [bug] Fixed list of recognized config file category names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 280. [func] Add isc-config.sh, which can be used to more
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff easily build applications that link with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews our libraries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 279. [bug] Private omapi function symbols shared between
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington two or more files in libomapi.a were not namespace
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews protected using the ISC convention of starting with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the library name and two underscores ("omapi__"...)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 278. [bug] bin/named/logconf.c:category_fromconf() didn't take
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews note of when isc_log_categorybyname() wasn't able
f34984369fbc87f6cc5c5d1059303377a1724d79James Brister to find the category name and would then apply the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews channel list of the unknown category to all categories.
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson 277. [bug] isc_log_categorybyname() and isc_log_modulebyname()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would fail to find the first member of any category
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or module array apart from the internal defaults.
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson Thus, for example, the "notify" category was improperly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured by named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 276. [bug] dig now supports maximum sized TCP messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 275. [bug] The definition of lwres_gai_strerror() was missing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the lwres_ prefix.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 274. [bug] TSIG AXFR verify failed when talking to a BIND 8
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 273. [func] The default for the 'transfer-format' option is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now 'many-answers'. This will break zone transfers
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson to BIND 4.9.5 and older unless there is an explicit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'one-answer' configuration.
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson 272. [bug] The sending of large TCP responses was canceled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in mid-transmission due to a race condition
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews caused by the failure to set the client object's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "newstate" variable correctly when transitioning
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson to the "working" state.
6deb631b20b7e212d9a350759e472fa60f9e92e4David Lawrence 271. [func] Attempt to probe the number of cpus in named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if unspecified rather than defaulting to 1.
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington 270. [func] Allow maximum sized TCP answers.
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington 269. [bug] Failed DNSSEC validations could cause an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure by causing clone_results() to be called with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with hevent->node == NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 268. [doc] A plain text version of the Administrator
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Reference Manual is now included in the distribution,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 267. [func] Nsupdate is now provided in the distribution.
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence 266. [bug] zone.c:save_nsrrset() node was not initialized.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 265. [bug] dns_request_create() now works for TCP.
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington 264. [func] Dispatch can not take TCP sockets in connecting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews state. Set DNS_DISPATCHATTR_CONNECTED when calling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_dispatch_createtcp() for connected TCP sockets
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence or call dns_dispatch_starttcp() when the socket is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 263. [func] New logging channel type 'stderr'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews channel some-name {
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson severity error;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 262. [bug] 'master' was not initialized in zone.c:stub_callback().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 261. [func] Add dns_zone_markdirty().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 260. [bug] Running named as a non-root user failed on Linux
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews kernels new enough to support retaining capabilities
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after setuid().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 259. [func] New random-device and random-seed-file statements
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for global options block of named.conf. Both accept
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a single string argument.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff 258. [bug] Fixed printing of lwres_addr_t.address field.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 257. [bug] The server detached the last zone manager reference
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too early, while it could still be in use by queries.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff This manifested itself as assertion failures during the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews shutdown process for busy name servers. [RT #133]
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson 256. [func] isc_ratelimiter_t now has attach/detach semantics, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_ratelimiter_shutdown guarantees that the rate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews limiter is detached from its task.
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson 255. [func] New function dns_zonemgr_attach().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 254. [bug] Suppress "query denied" messages on additional data
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.0.0b4 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 253. [func] resolv.conf parser now recognizes ';' and '#' as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comments (anywhere in line, not just as the beginning).
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence 252. [bug] resolv.conf parser mishandled masks on sortlists.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews It also aborted when an unrecognized keyword was seen,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now it silently ignores the entire line.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 251. [bug] lwresd caught an assertion failure on startup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 250. [bug] fixed handling of size+unit when value would be too
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson large for internal representation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 249. [cleanup] max-cache-size config option now takes a size-spec
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews like 'datasize', except 'default' is not allowed.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson 248. [bug] global lame-ttl option was not being printed when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews config structures were written out.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 247. [cleanup] Rename cache-size config option to max-cache-size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 246. [func] Rename global option cachesize to cache-size and
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence add corresponding option to view statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 245. [bug] If an uncompressed name will take more than 255
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bytes and the buffer is sufficiently long,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_fromwire should return DNS_R_FORMERR,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not ISC_R_NOSPACE. This bug caused cause the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server to catch an assertion failure when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews received a query for a name longer than 255
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 244. [bug] empty named.conf file and empty options statement are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now parsed properly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 243. [func] new cachesize option for named.conf
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews 242. [cleanup] fixed incorrect warning about auth-nxdomain usage.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 241. [cleanup] nscount and soacount have been removed from the
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews dns_master_*() argument lists.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 240. [func] databases now come in three flavours: zone, cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 239. [func] If ISC_MEM_DEBUG is enabled, the variable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_mem_debugging controls whether messages
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are printed or not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 238. [cleanup] A few more compilation warnings have been quieted:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews + missing sigwait prototype on BSD/OS 4.0/4.0.1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews + PTHREAD_ONCE_INIT unbraced initializer warnings on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews + IN6ADDR_ANY_INIT unbraced initializer warnings on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BSD/OS 4.*, Linux and Solaris 2.8.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 237. [bug] If connect() returned ENOBUFS when the resolver was
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington initiating a TCP query, the socket didn't get
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews destroyed, and the server did not shut down cleanly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 236. [func] Added new listen-on-v6 config file statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 235. [func] Consider it a config file error if a listen-on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement has an IPv6 address in it, or a
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister listen-on-v6 statement has an IPv4 address in it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 234. [bug] Allow a trusted-key's first field (domain-name) be
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister either a quoted or an unquoted string, instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requiring a quoted string.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 233. [cleanup] Convert all config structure integer values to unsigned
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister integer (isc_uint32_t) to match grammar.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 232. [bug] Allow slave zones to not have a file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 231. [func] Support new 'port' clause in config file options
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister section. Causes 'listen-on', 'masters' and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'also-notify' statements to use its value instead of
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister default (53).
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister 230. [func] Replace the dst sign/verify API with a cleaner one.
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson 229. [func] Support config file sig-validity-interval statement
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in options, views and zone statements (master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones only).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 228. [cleanup] Logging messages in config module stripped of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trailing period.
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson 227. [cleanup] The enumerated identifiers dns_rdataclass_*,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rcode_*, dns_opcode_*, and dns_trust_* are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews also now cast to their appropriate types, as with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdatatype_* in item number 225 below.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 226. [func] dns_name_totext() now always prints the root name as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews '.', even when omit_final_dot is true.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 225. [cleanup] The enumerated dns_rdatatype_* identifiers are now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cast to dns_rdatatype_t via macros of their same name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews so that they are of the proper integral type wherever
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews a dns_rdatatype_t is needed.
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews 224. [cleanup] The entire project builds cleanly with gcc's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews -Wcast-qual and -Wwrite-strings warnings enabled,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which is now the default when using gcc. (Warnings
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews from confparser.c, because of yacc's code, are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unfortunately to be expected.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 223. [func] Several functions were re-prototyped to qualify one
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews or more of their arguments with "const". Similarly,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews several functions that return pointers now have
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson those pointers qualified with const.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 222. [bug] The global 'also-notify' option was ignored.
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews 221. [bug] An uninitialized variable was sometimes passed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_freestruct() when loading a zone, causing
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 220. [cleanup] Set the default outgoing port in the view, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set it in sockaddrs returned from the ADB.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [31-May-2000 explorer]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson 219. [bug] Signed truncated messages more correctly follow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the respective specs.
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson 218. [func] When an rdataset is signed, its ttl is normalized
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews based on the signature validity period.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 217. [func] Also-notify and trusted-keys can now be used in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the 'view' statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 216. [func] The 'max-cache-ttl' and 'max-ncache-ttl' options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 215. [bug] Failures at certain points in request processing
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister could cause the assertion INSIST(client->lockview
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews == NULL) to be triggered.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 214. [func] New public function isc_netaddr_format(), for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews formatting network addresses in log messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 213. [bug] Don't leak memory when reloading the zone if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an update-policy clause was present in the old zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 212. [func] Added dns_message_get/settsigkey, to make TSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key management reasonable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 211. [func] The 'key' and 'server' statements can now occur
e411a986b94276c28e6a971f9c3b61d45c635456James Brister inside 'view' statements.
e411a986b94276c28e6a971f9c3b61d45c635456James Brister 210. [bug] The 'allow-transfer' option was ignored for slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones, and the 'transfers-per-ns' option was
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews was ignored for all zones.
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson 209. [cleanup] Upgraded openssl files to new version 0.9.5a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 208. [func] Added ISC_OFFSET_MAXIMUM for the maximum value
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews of an isc_offset_t.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 207. [func] The dnssec tools properly use the logging subsystem.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 206. [cleanup] dst now stores the key name as a dns_name_t, not
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson 205. [cleanup] On IRIX, turn off the mostly harmless warnings 1692
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ("prototyped function redeclared without prototype")
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and 1552 ("variable ... set but not used") when
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson compiling in the lib/dns/sec/{dnssafe,openssl}
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directories, which contain code imported from outside
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to quiet the warnings that "The linked output may not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews run on a PA 1.x system."
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 203. [func] notify and zone soa queries are now tsig signed when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews appropriate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 202. [func] isc_lex_getsourceline() changed from returning int
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister to returning unsigned long, the type of its underlying
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister 201. [cleanup] Removed the test/sdig program, it has been
36357e4304862fb47e9fae03c704cb6720310c45James Brister --- 9.0.0b3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 200. [bug] Failures in sending query responses to clients
9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence (e.g., running out of network buffers) were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 199. [bug] isc_heap_delete() sometimes violated the heap
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews invariant, causing timer events not to be posted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 198. [func] Dispatch managers hold memory pools which
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence any managed dispatcher may use. This allows
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews us to avoid dipping into the memory context for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews most allocations. [19-May-2000 explorer]
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence 197. [bug] When an incoming AXFR or IXFR completes, the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone's internal state is refreshed from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SOA data. [19-May-2000 explorer]
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson 196. [func] Dispatchers can be shared easily between views
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and/or interfaces. [19-May-2000 explorer]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 195. [bug] Including the NXT record of the root domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a negative response caused an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 194. [doc] The PDF version of the Administrator's Reference
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence Manual is no longer included in the ISC BIND9
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews distribution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 193. [func] changed dst_key_free() prototype.
358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence 192. [bug] Zone configuration validation is now done at end
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of config file parsing, and before loading
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence 191. [func] Patched to compile on UnixWare 7.x. This platform
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is not directly supported by the ISC.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 190. [cleanup] The DNSSEC tools have been moved to a separate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directory dnssec/ and given the following new,
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence more descriptive names:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keygen
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone
a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence dnssec-signkey
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-makekeyset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Their command line arguments have also been changed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be more consistent. dnssec-keygen now prints the
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence name of the generated key files (sans extension)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on standard output to simplify its use in automated
eefea43215016bce437ab4a7441b2851fd182960David Lawrence 189. [func] isc_time_secondsastimet(), a new function, will ensure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that the number of seconds in an isc_time_t does not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exceed the range of a time_t, or return ISC_R_RANGE.
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence Similarly, isc_time_now(), isc_time_nowplusinterval(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_time_add() and isc_time_subtract() now check the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews range for overflow/underflow. In the case of
c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence isc_time_subtract, this changed a calling requirement
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (ie, something that could generate an assertion)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews into merely a condition that returns an error result.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_time_add() and isc_time_subtract() were void-
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson valued before but now return isc_result_t.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 188. [func] Log a warning message when an incoming zone transfer
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence contains out-of-zone data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 187. [func] isc_ratelimiter_enqueue() has an additional argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 186. [func] dns_request_getresponse() has an additional argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'preserve_order'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 185. [bug] Fixed up handling of ISC_MEMCLUSTER_LEGACY. Several
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence public functions did not have an isc__ prefix, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referred to functions that had previously been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 184. [cleanup] Variables/functions which began with two leading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews underscores were made to conform to the ANSI/ISO
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington standard, which says that such names are reserved.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 183. [func] ISC_LOG_PRINTTAG option for log channels. Useful
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for logging the program name or other identifier.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 182. [cleanup] New command-line parameters for dnssec tools
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 181. [func] Added dst_key_buildfilename and dst_key_parsefilename
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence 180. [func] New isc_result_t ISC_R_RANGE. Supersedes DNS_R_RANGE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 179. [func] options named.conf statement *must* now come
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before any zone or view statements.
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence 178. [func] Post-load of named.conf check verifies a slave zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has non-empty list of masters defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 177. [func] New per-zone boolean:
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews enable-zone yes | no ;
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff intended to let a zone be disabled without having
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to comment out the entire zone statement.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence 176. [func] New global and per-view option:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-cache-ttl number
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 175. [func] New global and per-view option:
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence additional-data internal | minimal | maximal;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 174. [func] New public function isc_sockaddr_format(), for
8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence formatting socket addresses in log messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 173. [func] Keep a queue of zones waiting for zone transfer
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence quota so that a new transfer can be dispatched
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews immediately whenever quota becomes available.
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer 172. [bug] $TTL directive was sometimes missing from dumped
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews master files because totext_ctx_init() failed to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence initialize ctx->current_ttl_valid.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 171. [cleanup] On NetBSD systems, the mit-pthreads or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unproven-pthreads library is now always used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unless --with-ptl2 is explicitly specified on
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the configure command line. The
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-mit-pthreads option is no longer needed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and has been removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 170. [cleanup] Remove inter server consistency checks from zone,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews these should return as a separate module in 9.1.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dns_zone_checkservers(), dns_zone_checkparents(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_checkchildren(), dns_zone_checkglue().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Remove dns_zone_setadb(), dns_zone_setresolver(),
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dns_zone_setrequestmgr() these should now be found
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via the view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 169. [func] ratelimiter can now process N events per interval.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 168. [bug] include statements in named.conf caused syntax errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to not consuming the semicolon ending the include
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement before switching input streams.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 167. [bug] Make lack of masters for a slave zone a soft error.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 166. [bug] Keygen was overwriting existing keys if key_id
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conflicted, now it will retry, and non-null keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with key_id == 0 are not generated anymore. Key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was not able to generate NOAUTHCONF DSA key,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews increased RSA key size to 2048 bits.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 165. [cleanup] Silence "end-of-loop condition not reached" warnings
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from Solaris compiler.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 164. [func] Added functions isc_stdio_open(), isc_stdio_close(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_stdio_seek(), isc_stdio_read(), isc_stdio_write(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_stdio_flush(), isc_stdio_sync(), isc_file_remove()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to encapsulate nonportable usage of errno and sync.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 163. [func] Added result codes ISC_R_FILENOTFOUND and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_FILEEXISTS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 162. [bug] Ensure proper range for arguments to ctype.h functions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 161. [cleanup] error in yyparse prototype that only HPUX caught.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 160. [cleanup] getnet*() are not going to be implemented at this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 159. [func] Redefinition of config file elements is now an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error (instead of a warning).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 158. [bug] Log channel and category list copy routines
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence weren't assigning properly to output parameter.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 157. [port] Fix missing prototype for getopt().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 156. [func] Support new 'database' statement in zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews database "quoted-string";
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 155. [bug] ns_notify_start() was not detaching the found zone.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 154. [func] The signer now logs libdns warnings to stderr even when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not verbose, and in a nicer format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 153. [func] dns_rdata_tostruct() 'mctx' is now optional. If 'mctx'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is NULL then you need to preserve the 'rdata' until
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson you have finished using the structure as there may be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews references to the associated memory. If 'mctx' is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-NULL it is guaranteed that there are no references
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to memory associated with 'rdata'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_freestruct() must be called if 'mctx' was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-NULL and may safely be called if 'mctx' was NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 152. [bug] keygen dumped core if domain name argument was omitted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from command line.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 151. [func] Support 'disabled' statement in zone config (causes
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence zone to be parsed and then ignored). Currently must
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews come after the 'type' clause.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 150. [func] Support optional ports in masters and also-notify
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 149. [cleanup] Removed unused argument 'olist' from
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence dns_c_view_unsetordering().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 148. [cleanup] Stop issuing some warnings about some configuration
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson file statements that were not implemented, but now are.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 147. [bug] Changed yacc union size to be smaller for yaccs that
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence put yacc-stack on the real stack.
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence 146. [cleanup] More general redundant header file cleanup. Rather
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than continuing to itemize every header which changed,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this changelog entry just notes that if a header file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not need another header file that it was including
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence in order to provide its advertised functionality, the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inclusion of the other header file was removed. See
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews util/check-includes for how this was tested.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_LANG_ENDDECLS to header files that had function
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley prototypes, and removed it from those that did not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 144. [cleanup] libdns header files too numerous to name were made
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to conform to the same style for multiple inclusion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 143. [func] Added function dns_rdatatype_isknown().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 142. [cleanup] <isc/stdtime.h> does not need <time.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 141. [bug] Corrupt requests with multiple questions could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 140. [cleanup] <isc/time.h> does not need <time.h> or <isc/result.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 139. [cleanup] <isc/net.h> now includes <isc/types.h> instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 138. [cleanup] isc_strtouq moved from str.[ch] to string.[ch] and
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence renamed isc_string_touint64. isc_strsep moved from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews strsep.c to string.c and renamed isc_string_separate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 137. [cleanup] <isc/commandline.h>, <isc/mem.h>, <isc/print.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/serial.h>, <isc/string.h> and <isc/offset.h>
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence made to conform to the same style for multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inclusion protection.
32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington 136. [cleanup] <isc/commandline.h>, <isc/interfaceiter.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 135. [cleanup] Win32's <isc/condition.h> did not need <isc/result.h>
77f372eed39827f5efef476602de7c0505f99b91David Lawrence or <isc/boolean.h>, now uses <isc/types.h> in place
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and ISC_LANG_ENDDECLS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 134. [cleanup] <isc/dir.h> does not need <limits.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 133. [cleanup] <isc/ipv6.h> needs <isc/platform.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 132. [cleanup] <isc/app.h> does not need <isc/task.h>, but does
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 131. [cleanup] <isc/mutex.h> and <isc/util.h> need <isc/result.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for ISC_R_* codes used in macros.
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence 130. [cleanup] <isc/condition.h> does not need <pthread.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/boolean.h>, and now includes <isc/types.h>
d111a46c88adda33a93839f4934e127b6147d87dBob Halley 129. [bug] The 'default_debug' log channel was not set up when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'category default' was present in the config file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_LANG_ENDDECLS at end of header.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 127. [cleanup] The contracts for the comparison routines
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff dns_name_fullcompare(), dns_name_compare(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_rdatacompare(), and dns_rdata_compare() now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specify that the order value returned is < 0, 0, or > 0
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington instead of -1, 0, or 1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 126. [cleanup] <isc/quota.h> and <isc/taskpool.h> need <isc/lang.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 125. [cleanup] <isc/eventclass.h>, <isc/ipv6.h>, <isc/magic.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/mutex.h>, <isc/once.h>, <isc/region.h>, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 124. [func] signer now imports parent's zone key signature
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and creates null keys/sets zone status bit for
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews children when necessary
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews 123. [cleanup] <isc/event.h> does not need <stddef.h>.
2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson 122. [cleanup] <isc/task.h> does not need <isc/mem.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 121. [cleanup] <isc/symtab.h> does not need <isc/mem.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/result.h>. Multiple inclusion protection
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington symbol fixed from ISC_SYMBOL_H to ISC_SYMTAB_H.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_symtab_t moved to <isc/types.h>.
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley 120. [cleanup] <isc/socket.h> does not need <isc/boolean.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/bufferlist.h>, <isc/task.h>, <isc/mem.h> or
53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington 119. [cleanup] structure definitions for generic rdata structures do
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not have _generic_ in their names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews YACC crust (yyparse, etc) [2000-apr-27 explorer]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 117. [cleanup] libdns.a changes:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_clearnotify() and dns_zone_addnotify()
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson are replaced by dns_zone_setnotifyalso().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_clearmasters() and dns_zone_addmaster()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are replaced by dns_zone_setmasters().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews on Unix systems).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 115. [port] Shut up the -Wmissing-declarations warning about
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 114. [cleanup] <isc/sockaddr.h> does not need <isc/buffer.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 113. [func] Utility programs dig and host added.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 112. [cleanup] <isc/serial.h> does not need <isc/boolean.h>.
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley 111. [cleanup] <isc/rwlock.h> does not need <isc/result.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 110. [cleanup] <isc/result.h> does not need <isc/boolean.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 109. [bug] "make depend" did nothing for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bin/tests/{db,mem,sockaddr,tasks,timers}/.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 107. [func] Add keysigner and keysettool.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 106. [func] Allow dnssec verifications to ignore the validity
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews period. Used by several of the dnssec tools.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 105. [doc] doc/dev/coding.html expanded with other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implicit conventions the developers have used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 104. [bug] Made compress_add and compress_find static to
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley 103. [func] libisc buffer API changes for <isc/buffer.h>:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_base(b) (pointer)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_current(b) (pointer)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_active(b) (pointer)
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson isc_buffer_used(b) (pointer)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_length(b) (int)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_usedlength(b) (int)
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson isc_buffer_consumedlength(b) (int)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_remaininglength(b) (int)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_activelength(b) (int)
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington isc_buffer_availablelength(b) (int)
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson ISC_BUFFER_USEDCOUNT(b)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_BUFFER_AVAILABLECOUNT(b)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_type(b)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Changed names:
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff isc_buffer_used(b, r) ->
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_usedregion(b, r)
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence isc_buffer_available(b, r) ->
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_available_region(b, r)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_consumed(b, r) ->
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_consumedregion(b, r)
11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson isc_buffer_active(b, r) ->
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_activeregion(b, r)
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence isc_buffer_remaining(b, r) ->
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_remainingregion(b, r)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Buffer types were removed, so the ISC_BUFFERTYPE_*
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews macros are no more, and the type argument to
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence isc_buffer_init and isc_buffer_allocate were removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_putstr is now void (instead of isc_result_t)
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister and requires that the caller ensure that there
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews is enough available buffer space for the string.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 102. [port] Correctly detect inet_aton, inet_pton and inet_ptop
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 100. [cleanup] <isc/random.h> does not need <isc/int.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/mutex.h>. isc_random_t moved to <isc/types.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 99. [cleanup] Rate limiter now has separate shutdown() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews destroy() functions, and it guarantees that all
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence queued events are delivered even in the shutdown case.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 98. [cleanup] <isc/print.h> does not need <stdarg.h> or <stddef.h>
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence unless ISC_PLATFORM_NEEDVSNPRINTF is defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 97. [cleanup] <isc/ondestroy.h> does not need <stddef.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 96. [cleanup] <isc/mutex.h> does not need <isc/result.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 95. [cleanup] <isc/mutexblock.h> does not need <isc/result.h>.
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson 94. [cleanup] Some installed header files did not compile as C++.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 93. [cleanup] <isc/msgcat.h> does not need <isc/result.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 92. [cleanup] <isc/mem.h> does not need <stddef.h>, <isc/boolean.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 91. [cleanup] <isc/log.h> does not need <sys/types.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 89. [cleanup] <isc/lex.h> does not need <stddef.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 88. [cleanup] <isc/interfaceiter.h> does not need <isc/result.h> or
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington <isc/mem.h>. isc_interface_t and isc_interfaceiter_t
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley 87. [cleanup] <isc/heap.h> does not need <isc/boolean.h>,
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence 86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister 85. [cleanup] <isc/bufferlist.h> does not need <isc/buffer.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 84. [func] allow-query ACL checks now apply to all data
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley added to a response.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 83. [func] If the server is authoritative for both a
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley delegating zone and its (nonsecure) delegatee, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a query is made for a KEY RR at the top of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delegatee, then the server will look for a KEY
be768c2e952c34438025999125f984995a2c675fBob Halley in the delegator if it is not found in the delegatee.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 82. [cleanup] <isc/buffer.h> does not need <isc/list.h>.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 81. [cleanup] <isc/int.h> and <isc/boolean.h> do not need
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 80. [cleanup] <isc/print.h> does not need <stdio.h> or <stdlib.h>.
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley 79. [cleanup] <dns/callbacks.h> does not need <stdio.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 78. [cleanup] lwres_conftest renamed to lwresconf_test for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consistency with other *_test programs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 77. [cleanup] typedef of isc_time_t and isc_interval_t moved from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 76. [cleanup] Rewrote keygen.
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister 75. [func] Don't load a zone if its database file is older
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than the last time the zone was loaded.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 74. [cleanup] Removed mktemplate.o and ufile.o from libisc.a,
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley 73. [func] New "file" API in libisc, including new function
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_file_getmodtime, isc_mktemplate renamed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_file_mktemplate and isc_ufile renamed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_file_openunique. By no means an exhaustive API,
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley it is just what's needed for now.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 72. [func] DNS_RBTFIND_NOPREDECESSOR and DNS_RBTFIND_NOOPTIONS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews added for dns_rbt_findnode, the former to disable the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews setting of the chain to the predecessor, and the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews latter to make clear when no options are set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 71. [cleanup] Made explicit the implicit REQUIREs of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_time_seconds, isc_time_nanoseconds, and
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington isc_time_subtract.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 70. [func] isc_time_set() added.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 69. [bug] The zone object's master and also-notify lists grew
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews longer with each server reload.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 68. [func] Partial support for SIG(0) on incoming messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 67. [performance] Allow use of alternate (compile-time supplied)
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 66. [func] Data in authoritative zones should have a trust level
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence beyond secure.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which