CHANGES revision 6b95b91c617a3e56aff611772744af32b5410e1f
c313914d0e66b20969215e519bbf2ab4ecf39512Tinderbox User3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
c80e152862cc3e3207dc837fde7116bd4c0e4b9dTinderbox User3121. [security] An authoritative name server sending a negative
8d1b3ceb4d491ce32572f1702f37ed585eede993Evan Hunt response containing a very large RRset could
8d1b3ceb4d491ce32572f1702f37ed585eede993Evan Hunt trigger an off-by-one error in the ncache code
d77cb075aae5595e460e3299bfc1e8ea5d42b560Evan Hunt and crash named. [RT #24650]
30ca20f720ad0887772a79e7abb25b4fa0e4b5b0Mark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
30ca20f720ad0887772a79e7abb25b4fa0e4b5b0Mark Andrews that validated insecure without using DLV and had
30ca20f720ad0887772a79e7abb25b4fa0e4b5b0Mark Andrews DS records in the parent zone. [RT #24631]
30ca20f720ad0887772a79e7abb25b4fa0e4b5b0Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
701a93f5a592e4652343e049aa495d409c3ee133Mark Andrews record could be created and never marked complete.
701a93f5a592e4652343e049aa495d409c3ee133Mark Andrews3118. [bug] nsupdate could dump core on shutdown when using
002f1373374a0b72fc0329baa682917929bef168Tony Finch SIG(0) keys. [RT #24604]
8f1ed05dc0aae7ae6c3da6ec6d405df61257a61eMark Andrews3117. [cleanup] Remove doc and parser references to the
8f1ed05dc0aae7ae6c3da6ec6d405df61257a61eMark Andrews never-implemented 'auto-dnssec create' option.
8f1ed05dc0aae7ae6c3da6ec6d405df61257a61eMark Andrews3116. [func] New 'dnssec-update-mode' option controls updates
73cf0ba4e82c6baef638ecc4e31321223f841d28Mark Andrews of DNSSEC records in signed dynamic zones. Set to
73cf0ba4e82c6baef638ecc4e31321223f841d28Mark Andrews 'no-resign' to disable automatic RRSIG regeneration
73cf0ba4e82c6baef638ecc4e31321223f841d28Mark Andrews while retaining the ability to sign new or changed
d8351dfc9b725b0d727be7acab6247d7d501d9a0Mark Andrews data. [RT #24533]
d8351dfc9b725b0d727be7acab6247d7d501d9a0Mark Andrews3115. [bug] Named could fail to return requested data when
3a29ce9c08dd31709c73e7187aebda0d360c537bEvan Hunt following a CNAME that points into the same zone.
f1740da065d4555039fe8bb53beb4153e3f94de3Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
f1740da065d4555039fe8bb53beb4153e3f94de3Mark Andrews inactive and there is no replacement key. [RT #23136]
31c7ab4fb3f7710af87dc9c3d64c5daf9a3dea35Mark Andrews3113. [doc] Document the relationship between serial-query-rate
31c7ab4fb3f7710af87dc9c3d64c5daf9a3dea35Mark Andrews and NOTIFY messages.
31c7ab4fb3f7710af87dc9c3d64c5daf9a3dea35Mark Andrews3112. [doc] Add missing descriptions of the update policy name
31c7ab4fb3f7710af87dc9c3d64c5daf9a3dea35Mark Andrews types "ms-self", "ms-subdomain", "krb5-self" and
ad309e8dfa0601d6053aaa12770a98a6940f89deEvan Hunt "krb5-subdomain", which allow machines to update
ad309e8dfa0601d6053aaa12770a98a6940f89deEvan Hunt their own records, to the BIND 9 ARM.
635e4351b04fd61ca6d853bdac6268c090b55129Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
fc04365d2f83f197c8a54545dd9cd4ce6a209940Mark Andrews dnssec-validation, added test cases to the
fc04365d2f83f197c8a54545dd9cd4ce6a209940Mark Andrews checkconf system test. [RT #24398]
7cbac360bf98c0a52b2d6866ad887616c32d4d3aMark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
7cbac360bf98c0a52b2d6866ad887616c32d4d3aMark Andrews when attempting to sign with no KSK. [RT #24369]
1cf118a656f5fd210787908b845362077fc507f8Evan Hunt3109. [func] The also-notify option now uses the same syntax
1cf118a656f5fd210787908b845362077fc507f8Evan Hunt as a zone's masters clause. This means it is
1cf118a656f5fd210787908b845362077fc507f8Evan Hunt now possible to specify a TSIG key to use when
1cf118a656f5fd210787908b845362077fc507f8Evan Hunt sending notifies to a given server, or to include
1cf118a656f5fd210787908b845362077fc507f8Evan Hunt an explicit named masters list in an also-notfiy
1cf118a656f5fd210787908b845362077fc507f8Evan Hunt statement. [RT #23508]
6fb3db01acad7f5c1f4e23789fb0f2ce56cc07deMukund Sivaraman3108. [cleanup] dnssec-signzone: Clarified some error and
6fb3db01acad7f5c1f4e23789fb0f2ce56cc07deMukund Sivaraman warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
6fb3db01acad7f5c1f4e23789fb0f2ce56cc07deMukund Sivaraman code (use -P instead). [RT #20852]
fd82c70695888c134287b8018296028c252d100eMukund Sivaraman3107. [bug] dnssec-signzone: Report the correct number of ZSKs
fd82c70695888c134287b8018296028c252d100eMukund Sivaraman when using -x. [RT #20852]
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews3106. [func] When logging client requests, include the name of
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews the TSIG key if any. [RT #23619]
2cf0fe3b8092f64f8f68ae3693fe2e73e90ad1a4Mark Andrews3105. [bug] GOST support can be suppressed by "configure
2cf0fe3b8092f64f8f68ae3693fe2e73e90ad1a4Mark Andrews --without-gost" [RT #24367]
2cf0fe3b8092f64f8f68ae3693fe2e73e90ad1a4Mark Andrews3104. [bug] Better support for cross-compiling. [RT #24367]
4221d9cd1d02311fbf9b5f08a038f5af78b10b4aEvan Hunt3103. [bug] Configuring 'dnssec-validation auto' in a view
4221d9cd1d02311fbf9b5f08a038f5af78b10b4aEvan Hunt instead of in the options statement could trigger
4221d9cd1d02311fbf9b5f08a038f5af78b10b4aEvan Hunt an assertion failure in named-checkconf. [RT #24382]
f9c410d93711fbf312a0162f1e2d3f2a5ede69afFrancis Dupont3102. [func] New 'dnssec-loadkeys-interval' option configures
f9c410d93711fbf312a0162f1e2d3f2a5ede69afFrancis Dupont how often, in minutes, to check the key repository
f9c410d93711fbf312a0162f1e2d3f2a5ede69afFrancis Dupont for updates when using automatic key maintenance.
f9c410d93711fbf312a0162f1e2d3f2a5ede69afFrancis Dupont Default is every 60 minutes (formerly hard-coded
e526027287b849f0b6ab6e069156697cbafa22c1Michał Kępień to 12 hours). [RT #23744]
e526027287b849f0b6ab6e069156697cbafa22c1Michał Kępień3101. [bug] Zones using automatic key maintenance could fail
e526027287b849f0b6ab6e069156697cbafa22c1Michał Kępień to check the key repository for updates. [RT #23744]
929329d2d66a7e1083c70a9c918381935bf12799Mukund Sivaraman3100. [security] Certain response policy zone configurations could
929329d2d66a7e1083c70a9c918381935bf12799Mukund Sivaraman trigger an INSIST when receiving a query of type
7e1a62eea2e4ba9d6c3fc718e679b965fa514f69Mark Andrews RRSIG. [RT #24280]
ec29d217ba3a2bf3e617a7b5b6708ae221bee999Mark Andrews3099. [test] "dlz" system test now runs but gives R:SKIPPED if
afefd754734f896bf3e0590177fff83e7cdfdf35Mark Andrews not compiled with --with-dlz-filesystem. [RT #24146]
afefd754734f896bf3e0590177fff83e7cdfdf35Mark Andrews3098. [bug] DLZ zones were answering without setting the AA bit.
7ff28f5befbee76048a23e504dcd3f9a44ce6209Evan Hunt3097. [test] Add a tool to test handling of malformed packets.
7ff28f5befbee76048a23e504dcd3f9a44ce6209Evan Hunt3096. [bug] Set KRB5_KTNAME before calling log_cred() in
7ff28f5befbee76048a23e504dcd3f9a44ce6209Evan Hunt dst_gssapi_acceptctx(). [RT #24004]
7ff28f5befbee76048a23e504dcd3f9a44ce6209Evan Hunt3095. [bug] Handle isolated reserved ports in the port range.
7ff28f5befbee76048a23e504dcd3f9a44ce6209Evan Hunt3094. [doc] Expand dns64 documentation.
cad79077bd5b2616bc4a7a6b3cbc0953bef8917fMark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
cad79077bd5b2616bc4a7a6b3cbc0953bef8917fMark Andrews3092. [bug] Signatures for records at the zone apex could go
adfe58e8e5cd1890585e92b67f1fd01989a1fa7dMark Andrews stale due to an incorrect timer setting. [RT #23769]
adfe58e8e5cd1890585e92b67f1fd01989a1fa7dMark Andrews3091. [bug] Fixed a bug in which zone keys that were published
c3237dec879f82855403ff7e3ba87b298172efd5Mark Andrews and then subsequently activated could fail to trigger
c3237dec879f82855403ff7e3ba87b298172efd5Mark Andrews automatic signing. [RT #22911]
c3237dec879f82855403ff7e3ba87b298172efd5Mark Andrews3090. [func] Make --with-gssapi default [RT #23738]
cb616c6d5c2ece1fac37fa6e0bca2b53d4043098Mark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
cb616c6d5c2ece1fac37fa6e0bca2b53d4043098Mark Andrews standard input "dnssec-dsfromkey -f -". [RT# 20662]
c0a2210466dec0cc81ebf2ffbe21693b57b9c29cMark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
c0a2210466dec0cc81ebf2ffbe21693b57b9c29cMark Andrews and add setup.sh in order to resolve changing
c0a2210466dec0cc81ebf2ffbe21693b57b9c29cMark Andrews named.conf issue. [RT #23687]
534057c9f91a3eb6e0541f3526459c716239b337Mark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
534057c9f91a3eb6e0541f3526459c716239b337Mark Andrews type "external" could cause a crash. [RT #23735]
0f14b041328c062b1fa391887376388dfc8b2fe5Mark Andrews3086. [bug] Running dnssec-settime -f on an old-style key will
0f14b041328c062b1fa391887376388dfc8b2fe5Mark Andrews now force an update to the new key format even if no
0f14b041328c062b1fa391887376388dfc8b2fe5Mark Andrews other change has been specified, using "-P now -A now"
f7f4730e563a2749629fe7fef4cd9513cd2bfab7Mark Andrews as default values. [RT #22474]
1848d38f441ebf70ab21f6151bc3487a92d25b63Mark Andrews3085. [func] New '-R' option in dnssec-signzone forces removal
1848d38f441ebf70ab21f6151bc3487a92d25b63Mark Andrews of signatures which have not yet expired but
2d82ed9456e72dc4373bea19d63411afe1c48962Mark Andrews were generated by a key that no longer exists.
a5a1cbece45e6ca68aafe3b9b995eac6b0f45dd2Mark Andrews3084. [func] A new command "rndc sync" dumps pending changes in
a5a1cbece45e6ca68aafe3b9b995eac6b0f45dd2Mark Andrews a dynamic zone to disk; "rndc sync -clean" also
0d6328ce5f6b799f8e7c6cbbb3b965cf29bfb7baMark Andrews removes the journal file after syncing. Also,
0d6328ce5f6b799f8e7c6cbbb3b965cf29bfb7baMark Andrews "rndc freeze" no longer removes journal files.
677f507de7c546c187c1505c48bc7b440545485cMark Andrews3083. [bug] NOTIFY messages were not being sent when generating
677f507de7c546c187c1505c48bc7b440545485cMark Andrews a NSEC3 chain incrementally. [RT #23702]
124cc0660c7eff8021c2422fb47441e9ca08b3f9Tinderbox User3082. [port] strtok_r is threads only. [RT #23747]
677f507de7c546c187c1505c48bc7b440545485cMark Andrews3081. [bug] Failure of DNAME substitution did not return
677f507de7c546c187c1505c48bc7b440545485cMark Andrews YXDOMAIN. [RT #23591]
677f507de7c546c187c1505c48bc7b440545485cMark Andrews3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
677f507de7c546c187c1505c48bc7b440545485cMark Andrews3078. [func] Added a new include file with function typedefs
677f507de7c546c187c1505c48bc7b440545485cMark Andrews for the DLZ "dlopen" driver. [RT #23629]
bf459d24a117ae2c54c37016430b41cd6d73491cMark Andrews3077. [bug] zone.c:zone_refreshkeys() incorrectly called
f53e0bda467d96dfeeba1b4da30c37b37766bb75Evan Hunt dns_zone_attach(), use zone->irefs instead. [RT #23303]
f53e0bda467d96dfeeba1b4da30c37b37766bb75Evan Hunt3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
f53e0bda467d96dfeeba1b4da30c37b37766bb75Evan Hunt dnssec-keyfromlabel sets the default TTL of the
f53e0bda467d96dfeeba1b4da30c37b37766bb75Evan Hunt key. When possible, automatic signing will use that
81e3e3084980afcd61416f572c6e72d38a3808abMichał Kępień TTL when the key is published. [RT #23304]
81e3e3084980afcd61416f572c6e72d38a3808abMichał Kępień3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
81e3e3084980afcd61416f572c6e72d38a3808abMichał Kępień timestamp when determining which keys are active.
64d7fa3ec4785b390665860aa6bdae304b3c1d24Mark Andrews3074. [bug] Make the adb cache read through for zone data and
64d7fa3ec4785b390665860aa6bdae304b3c1d24Mark Andrews glue learn for zone named is authoritative for.
75505befa93c993aa5d2df24a2b64eac0c34cbffMark Andrews3073. [bug] managed-keys changes were not properly being recorded.
a38f07c73790170842e4523b4a474d01ca0dede1Michał Kępień3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
39d5523a8afc73cbdb4fa426de2ce071267a5d6fMark Andrews3071. [bug] has_nsec could be used unintialised in
39d5523a8afc73cbdb4fa426de2ce071267a5d6fMark Andrews update.c:next_active. [RT #20256]
39d5523a8afc73cbdb4fa426de2ce071267a5d6fMark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
1f4a3c7088594d1b64cd734eb69e1fd023fde8bfMichał Kępień3069. [cleanup] Silence warnings messages from clang static analysis.
91827e6fd3851a5fe129ef5409ff45833ca01a0eMark Andrews3068. [bug] Named failed to build with a OpenSSL without engine
35aae5884f410180706a89a9715bf9a85eeeb4b7Michał Kępień support. [RT #23473]
35aae5884f410180706a89a9715bf9a85eeeb4b7Michał Kępień3067. [bug] ixfr-from-differences {master|slave}; failed to
57b1d64d9ae12d56973716e96f9743a00d47af4aMichał Kępień select the master/slave zones. [RT #23580]
57b1d64d9ae12d56973716e96f9743a00d47af4aMichał Kępień3066. [func] The DLZ "dlopen" driver is now built by default,
2d517e233ff3b3fcd272eb5b2e2d3db6d31a1681Michał Kępień no longer requiring a configure option. To
2d517e233ff3b3fcd272eb5b2e2d3db6d31a1681Michał Kępień disable it, use "configure --without-dlopen".
2d517e233ff3b3fcd272eb5b2e2d3db6d31a1681Michał Kępień Driver also supported on win32. [RT #23467]
09c3efda414314d7edcfb2aed9463fb935fc95a6Mark Andrews3065. [bug] RRSIG could have time stamps too far in the future.
86d2f9abc8493321aacb0d540485de4d562fb734Mark Andrews3064. [bug] powerpc: add sync instructions to the end of atomic
86d2f9abc8493321aacb0d540485de4d562fb734Mark Andrews operations. [RT #23469]
86d2f9abc8493321aacb0d540485de4d562fb734Mark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
86d2f9abc8493321aacb0d540485de4d562fb734Mark Andrews3062. [func] Made several changes to enhance human readability
09c3efda414314d7edcfb2aed9463fb935fc95a6Mark Andrews of DNSSEC data in dig output and in generated
c7e57ce1b0bca9bc7da14bec485f7a7e3e4c761fMichał Kępień - DNSKEY record comments are more verbose, no
c7e57ce1b0bca9bc7da14bec485f7a7e3e4c761fMichał Kępień longer used in multiline mode only
c7e57ce1b0bca9bc7da14bec485f7a7e3e4c761fMichał Kępień - multiline RRSIG records reformatted
3ed16e796dba90c96933c8a8a3f5b9404d8d3e61Mark Andrews - multiline output mode for NSEC3PARAM records
3ed16e796dba90c96933c8a8a3f5b9404d8d3e61Mark Andrews - "dig +norrcomments" suppresses DNSKEY comments
3ed16e796dba90c96933c8a8a3f5b9404d8d3e61Mark Andrews - "dig +split=X" breaks hex/base64 records into
14d8a144779b54b103d2da741a2242bf5f9052f7Mark Andrews fields of width X; "dig +nosplit" disables this.
70e041bea19b6ad9522b89c2299ad315a2deaafdMark Andrews3061. [func] New option "dnssec-signzone -D", only write out
70e041bea19b6ad9522b89c2299ad315a2deaafdMark Andrews generated DNSSEC records. [RT #22896]
67247b4a8304bac790648a351a95b8b0f4c512a6Mark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
67247b4a8304bac790648a351a95b8b0f4c512a6Mark Andrews specification of a separate expiration date
eeb919b6f572e033d97cf001e4cd44aaff54e5dcMichał Kępień for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
eeb919b6f572e033d97cf001e4cd44aaff54e5dcMichał Kępień3059. [test] Added a regression test for change #3023.
a55438eda32ecebf43ead45b216662b7923a465fMark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
a55438eda32ecebf43ead45b216662b7923a465fMark Andrews reload to fail, if a log file specified in the conf
8de17f83cafa91a5720dd0b8c1aee5f47f6d7f09Evan Hunt file isn't a plain file. [RT #22771]
8de17f83cafa91a5720dd0b8c1aee5f47f6d7f09Evan Hunt3057. [bug] "rndc secroots" would abort after the first error
9789e54e55b61b669fb31a8b70e9655e8357dda2Mark Andrews and so could miss some views. [RT #23488]
f8362536c647625e602c8450a778a2b7ba90c9f4Mark Andrews3056. [func] Added support for URI resource record. [RT #23386]
f8362536c647625e602c8450a778a2b7ba90c9f4Mark Andrews3055. [placeholder]
24231e53a5c3079431f84dcddfee1e761fec7329Mark Andrews3054. [bug] Added elliptic curve support check in
24231e53a5c3079431f84dcddfee1e761fec7329Mark Andrews GOST OpenSSL engine detection. [RT #23485]
4b669b69bae7dedda2faa09a7ade247499c1d49cMichał Kępień3053. [bug] Under a sustained high query load with a finite
4b669b69bae7dedda2faa09a7ade247499c1d49cMichał Kępień max-cache-size, it was possible for cache memory
4b669b69bae7dedda2faa09a7ade247499c1d49cMichał Kępień to be exhausted and not recovered. [RT #23371]
eb11b39981689e4a20fbe95e533577eacab992b4Mukund Sivaraman3052. [test] Fixed last autosign test report. [RT #23256]
eb11b39981689e4a20fbe95e533577eacab992b4Mukund Sivaraman3051. [bug] NS records obsure DNAME records at the bottom of the
8daeae9b01a2b7eb9fd6511b352b03bd7d96ae79Michał Kępień zone if both are present. [RT #23035]
e7c0f978425f45731b08be1363f20626b0344f23Evan Hunt3050. [bug] The autosign system test was timing dependent.
e7c0f978425f45731b08be1363f20626b0344f23Evan Hunt Wait for the initial autosigning to complete
01967d183990e44752fe61f193dab9c04c3afd9cEvan Hunt before running the rest of the test. [RT #23035]
01967d183990e44752fe61f193dab9c04c3afd9cEvan Hunt3049. [bug] Save and restore the gid when creating creating
575e9d9e4b6beaae688f107814a320b91243a4b2Mark Andrews named.pid at startup. [RT #23290]
575e9d9e4b6beaae688f107814a320b91243a4b2Mark Andrews3048. [bug] Fully separate view key mangement. [RT #23419]
7c442d7fe06bc95432af7513764e5cc85e133648Evan Hunt3047. [bug] DNSKEY NODATA responses not cached fixed in
7c442d7fe06bc95432af7513764e5cc85e133648Evan Hunt validator.c. Tests added to dnssec system test.
5e1ca7a326741a8f74e6f2b907c7e1fbf428bf80Michał Kępień3046. [bug] Use RRSIG original TTL to compute validated RRset
5e1ca7a326741a8f74e6f2b907c7e1fbf428bf80Michał Kępień and RRSIG TTL. [RT #23332]
5e1ca7a326741a8f74e6f2b907c7e1fbf428bf80Michał Kępień3045. [removed] Replaced by change #3050.
ba93bc80a7bce5ba07b2f98e68f0f57402f2459cMark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
5f103158280fb2e814db305f917aa42040221623Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
5f103158280fb2e814db305f917aa42040221623Mark Andrews version 0.12) for development of future unit tests.
5f103158280fb2e814db305f917aa42040221623Mark Andrews Use configure --with-atf to build ATF internally
5f103158280fb2e814db305f917aa42040221623Mark Andrews or configure --with-atf=prefix to use an external
e5715e1fe12e5ad17522bd41c31e637c869d27b7Evan Hunt copy. [RT #23209]
b7b76d6b855cd4c1152c26d34fb61af05f965c5eEvan Hunt3042. [bug] dig +trace could fail attempting to use IPv6
b7b76d6b855cd4c1152c26d34fb61af05f965c5eEvan Hunt addresses on systems with only IPv4 connectivity.
764e2f3413ca89d09abffb3eb228c8c820bf08b8Mark Andrews3041. [bug] dnssec-signzone failed to generate new signatures on
764e2f3413ca89d09abffb3eb228c8c820bf08b8Mark Andrews ttl changes. [RT #23330]
764e2f3413ca89d09abffb3eb228c8c820bf08b8Mark Andrews3040. [bug] Named failed to validate insecure zones where a node
a06198688faca5c7bc1a35ec0ec18bc68c07691cEvan Hunt with a CNAME existed between the trust anchor and the
a06198688faca5c7bc1a35ec0ec18bc68c07691cEvan Hunt top of the zone. [RT #23338]
50433a667cf0ed3ac7807768b745b0d870ff8c8bMark Andrews3039. [func] Redirect on NXDOMAIN support. [RT #23146]
3c12bec945ee71a38c5ba6f624abd12e2da7eea5Mark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
f44202ab640d22e17b4c74bdad7817622918bd27Mark Andrews3037. [doc] Update COPYRIGHT to contain all the individual
f44202ab640d22e17b4c74bdad7817622918bd27Mark Andrews copyright notices that cover various parts.
ad9772c559c6aa42f8930f4acf1a2d833a08040aMichał Kępień3036. [bug] Check built-in zone arguments to see if the zone
ad9772c559c6aa42f8930f4acf1a2d833a08040aMichał Kępień is re-usable or not. [RT #21914]
ad9772c559c6aa42f8930f4acf1a2d833a08040aMichał Kępień3035. [cleanup] Simplify by using strlcpy. [RT #22521]
5d7d67f82a8913fae5f1098e111fe50edb86cd5bEvan Hunt3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
6216df5ccded056abd5db4abac4e5cbd78c73f45Evan Hunt3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
6216df5ccded056abd5db4abac4e5cbd78c73f45Evan Hunt3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
6216df5ccded056abd5db4abac4e5cbd78c73f45Evan Hunt3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
56e30ebae6fdb0bdf94419caff3a43fb2d16c5dfEvan Hunt3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
56e30ebae6fdb0bdf94419caff3a43fb2d16c5dfEvan Hunt3029. [bug] isc_netaddr_format() handle a zero sized buffer.
0612274565d80e0ad87a19920e561cce5bddb05bEvan Hunt3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
0612274565d80e0ad87a19920e561cce5bddb05bEvan Hunt3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
f592d2f76cac7115038124c510d2ba3050334b4dEvan Hunt catch NULL pointer dereferences before they happen.
f592d2f76cac7115038124c510d2ba3050334b4dEvan Hunt3026. [bug] lib/isc/httpd.c: check that we have enough space
f592d2f76cac7115038124c510d2ba3050334b4dEvan Hunt after calling grow_headerspace() and if not
4ee1fbe056e812e661b856b4b448296331a40249Michał Kępień re-call grow_headerspace() until we do. [RT #22521]
1c8aa38b53a0494fc7d4c3439594d1913987f264Mark Andrews3025. [bug] Fixed a possible deadlock due to zone resigning.
1c8aa38b53a0494fc7d4c3439594d1913987f264Mark Andrews3024. [func] RTT Banding removed due to minor security increase
1c8aa38b53a0494fc7d4c3439594d1913987f264Mark Andrews but major impact on resolver latency. [RT #23310]
43d53a4e4b2f0f9482485a8ab764137a9898ab32Evan Hunt3023. [bug] Named could be left in an inconsistent state when
43d53a4e4b2f0f9482485a8ab764137a9898ab32Evan Hunt receiving multiple AXFR response messages that were
b1ce9b3d54cd072adb5275f08a9afac31cfb4c1cMichał Kępień not all TSIG-signed. [RT #23254]
b1ce9b3d54cd072adb5275f08a9afac31cfb4c1cMichał Kępień3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
b1ce9b3d54cd072adb5275f08a9afac31cfb4c1cMichał Kępień3021. [bug] Change #3010 was incomplete. [RT #22296]
b1ce9b3d54cd072adb5275f08a9afac31cfb4c1cMichał Kępień3020. [bug] auto-dnssec failed to correctly update the zone when
b1ce9b3d54cd072adb5275f08a9afac31cfb4c1cMichał Kępień changing the DNSKEY RRset. [RT #23232]
5fa4be41a383cfbf5e1d195b18c04bdbf5603710Evan Hunt3019. [test] Test: check apex NSEC3 records after adding DNSKEY
5fa4be41a383cfbf5e1d195b18c04bdbf5603710Evan Hunt record via UPDATE. [RT #23229]
2732d4922c2e72a399204320791acfd2fd3d6c7cMark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
2732d4922c2e72a399204320791acfd2fd3d6c7cMark Andrews if a zone may need to be re-signed. [RT #23120]
24ffba17f06746257d5c009ca8ebfe6043966d20Evan Hunt3017. [doc] dnssec-keyfromlabel -I was not properly documented.
24ffba17f06746257d5c009ca8ebfe6043966d20Evan Hunt3016. [bug] rndc usage missing '-b'. [RT #22937]
21d58795b10a13fa7ac306f7146bdcb58b2e5165Mark Andrews3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
d5bd8bb71a8970d4ebc4701b3e9ec3efef4954b7Evan Hunt IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
d5bd8bb71a8970d4ebc4701b3e9ec3efef4954b7Evan Hunt3014. [placeholder]
d5bd8bb71a8970d4ebc4701b3e9ec3efef4954b7Evan Hunt3013. [bug] The DNS64 ttl was not always being set as expected.
ad1317338af79edad878c9c3e4361798503310baMark Andrews3012. [bug] Remove DNSKEY TTL change pairs before generating
ad1317338af79edad878c9c3e4361798503310baMark Andrews signing records for any remaining DNSKEY changes.
9519bb92d7f3f35015aecb84954dd21607cc2c80Evan Hunt3011. [func] Change the default query timeout from 30 seconds
1c81aef28ddf0905344cc58dd3ea0ca539ef1414Evan Hunt to 10. Allow setting this in named.conf using the new
1c81aef28ddf0905344cc58dd3ea0ca539ef1414Evan Hunt 'resolver-query-timeout' option, which specifies a max
1c81aef28ddf0905344cc58dd3ea0ca539ef1414Evan Hunt time in seconds. 0 means 'default' and anything longer
1c81aef28ddf0905344cc58dd3ea0ca539ef1414Evan Hunt than 30 will be silently set to 30. [RT #22852]
da1f585afa8c103508c759142d6aed4edae6936eMark Andrews3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
da1f585afa8c103508c759142d6aed4edae6936eMark Andrews for refreshing managed-keys. [RT #22296]
a8fa3e2d44ce6a8f4069d8f4229d29f5ba6a4a27Mukund Sivaraman3009. [bug] clients-per-query code didn't work as expected with
a8fa3e2d44ce6a8f4069d8f4229d29f5ba6a4a27Mukund Sivaraman particular query patterns. [RT #22972]
d71d41341d36ddfd347daab982f0cb85d3dd7c4eMark Andrews --- 9.8.0b1 released ---
d72952cf254b71c44e5e956a306016a5be9b9c38Mark Andrews3008. [func] Response policy zones (RPZ) support. [RT #21726]
aae171c5421ac2ba665ff122e004e753e62bac45Mark Andrews3007. [bug] Named failed to preserve the case of domain names in
6b183c64a3281491f8232959a5ece303b4499706Mark Andrews rdata which is not compressible when writing master
6b183c64a3281491f8232959a5ece303b4499706Mark Andrews files. [RT #22863]
5a8f2f0cd67a5dd93d95e6a0935d4805721c3a0bMichał Kępień3006. [func] Allow dynamically generated TSIG keys to be preserved
5a8f2f0cd67a5dd93d95e6a0935d4805721c3a0bMichał Kępień across restarts of named. Initially this is for
5a8f2f0cd67a5dd93d95e6a0935d4805721c3a0bMichał Kępień TSIG keys generated using GSSAPI. [RT #22639]
e2cc7418bf895d22854d84590b63905fac0d4b90Mark Andrews3005. [port] Solaris: Work around the lack of
e2cc7418bf895d22854d84590b63905fac0d4b90Mark Andrews gsskrb5_register_acceptor_identity() by setting
36ec0d374836d070ba05b495e6f0a27f60e94476Evan Hunt the KRB5_KTNAME environment variable to the
36ec0d374836d070ba05b495e6f0a27f60e94476Evan Hunt contents of tkey-gssapi-keytab. Also fixed
36ec0d374836d070ba05b495e6f0a27f60e94476Evan Hunt test errors on MacOSX. [RT #22853]
f896f7c8be894a737998b97008a1389e72972fcfMukund Sivaraman3004. [func] DNS64 reverse support. [RT #22769]
027a4a5b5d806290146ce4989d34be2c8a664e8cMukund Sivaraman3003. [experimental] Added update-policy match type "external",
027a4a5b5d806290146ce4989d34be2c8a664e8cMukund Sivaraman enabling named to defer the decision of whether to
b5252fcde512405a68dd4becfe683d9763bd0feaMukund Sivaraman allow a dynamic update to an external daemon.
b5252fcde512405a68dd4becfe683d9763bd0feaMukund Sivaraman (Contributed by Andrew Tridgell.) [RT #22758]
b5252fcde512405a68dd4becfe683d9763bd0feaMukund Sivaraman3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
99056063905a9273ec59cf477ae747e0490182b7Mukund Sivaraman3001. [func] Added a default trust anchor for the root zone, which
99056063905a9273ec59cf477ae747e0490182b7Mukund Sivaraman can be switched on by setting "dnssec-validation auto;"
62f2fefaec754e6a4841ff0e72726e6c0cd89c86Michał Kępień in the named.conf options. [RT #21727]
62f2fefaec754e6a4841ff0e72726e6c0cd89c86Michał Kępień3000. [bug] More TKEY/GSS fixes:
62f2fefaec754e6a4841ff0e72726e6c0cd89c86Michał Kępień - nsupdate can now get the default realm from
b351a5864727a390e06d787e522b141ca760590fMichał Kępień the user's Kerberos principal
b351a5864727a390e06d787e522b141ca760590fMichał Kępień - corrected gsstest compilation flags
b351a5864727a390e06d787e522b141ca760590fMichał Kępień - improved documentation
b351a5864727a390e06d787e522b141ca760590fMichał Kępień - fixed some NULL dereferences
b351a5864727a390e06d787e522b141ca760590fMichał Kępień2999. [func] Add GOST support (RFC 5933). [RT #20639]
8008de0b11bacb3de3a1016c8c0a46f3c0653184Mark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
8008de0b11bacb3de3a1016c8c0a46f3c0653184Mark Andrews to the task api. [RT #22776]
8008de0b11bacb3de3a1016c8c0a46f3c0653184Mark Andrews2997. [func] named -V now reports the OpenSSL and libxml2 verions
7b4bfc0201ffbcd64a336b99c945891808c44af0Mark Andrews it was compiled against. [RT #22687]
b815731d05220f932315eb33a97c6dc888c6a026Tinderbox User2996. [security] Temporarily disable SO_ACCEPTFILTER support.
7cd594b8427fe742d44295790ba367e1de22a47dEvan Hunt2995. [bug] The Kerberos realm was not being correctly extracted
c76e8412f4ff4f5945157410312df2a8950f942dMark Andrews from the signer's identity. [RT #22770]
a2a0100e0fc73c0af67a7c9e3524816954448dc6Evan Hunt2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
a2a0100e0fc73c0af67a7c9e3524816954448dc6Evan Hunt do not use threads on earlier versions. Also kill
a2a0100e0fc73c0af67a7c9e3524816954448dc6Evan Hunt the unproven-pthreads, mit-pthreads, and ptl2 support.
1feffc6fdb1ba386b22d45ea2d2f1613e717cb9eMark Andrews2993. [func] Dynamically grow adb hash tables. [RT #21186]
1feffc6fdb1ba386b22d45ea2d2f1613e717cb9eMark Andrews2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
22bed621ef87bc8b6c1fea599b02c4b38dd6bf48Mark Andrews for looking at a secure delegation. [RT #22059]
22bed621ef87bc8b6c1fea599b02c4b38dd6bf48Mark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
68d7ff133c9a1b8cfe683c70e997d83395ffd155Evan Hunt dynamic zones. [RT #22365]
68d7ff133c9a1b8cfe683c70e997d83395ffd155Evan Hunt2990. [bug] 'dnssec-settime -S' no longer tests prepublication
e5f5675b1da287ed40aeff081ad2af86090e8d17Evan Hunt interval validity when the interval is set to 0.
29f0ced781d745591fd058e530a68a281cd7a510Evan Hunt2989. [func] Added support for writable DLZ zones. (Contributed
29f0ced781d745591fd058e530a68a281cd7a510Evan Hunt by Andrew Tridgell of the Samba project.) [RT #22629]
b9fd54f8d4572fe5dcaf9d4b74f6ecb8027cc450Evan Hunt2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
b9fd54f8d4572fe5dcaf9d4b74f6ecb8027cc450Evan Hunt of external DLZ drivers that can be loaded as
b9fd54f8d4572fe5dcaf9d4b74f6ecb8027cc450Evan Hunt shared objects at runtime rather than linked with
fcb5e646e4d775539e348fa21ba13307f2695bf5Mark Andrews named. Currently this is switched on via a
fcb5e646e4d775539e348fa21ba13307f2695bf5Mark Andrews compile-time option, "configure --with-dlz-dlopen".
fcb5e646e4d775539e348fa21ba13307f2695bf5Mark Andrews Note: the syntax for configuring DLZ zones
a22c3cf51567651f74aee5c263c597b8d752c2ccMichał Kępień is likely to be refined in future releases.
a22c3cf51567651f74aee5c263c597b8d752c2ccMichał Kępień (Contributed by Andrew Tridgell of the Samba
a22c3cf51567651f74aee5c263c597b8d752c2ccMichał Kępień project.) [RT #22629]
b301c4293c082fcce4ec26218e6fad346976eb9eMark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
b301c4293c082fcce4ec26218e6fad346976eb9eMark Andrews adding a "tkey-gssapi-keytab" option. If set,
b301c4293c082fcce4ec26218e6fad346976eb9eMark Andrews updates will be allowed with any key matching
5c4e0c7800b5c7783e7f8b9ce80a6f8dc47f8856Mark Andrews a principal in the specified keytab file.
5c4e0c7800b5c7783e7f8b9ce80a6f8dc47f8856Mark Andrews "tkey-gssapi-credential" is no longer required
5c4e0c7800b5c7783e7f8b9ce80a6f8dc47f8856Mark Andrews and is expected to be deprecated. (Contributed
6e1f755f19ef244422e1efa4551fe23775e1a38cMark Andrews by Andrew Tridgell of the Samba project.)
435a7cd2293dfa9264678508762ab9acb8d41e50Mark Andrews2986. [func] Add new zone type "static-stub". It's like a stub
435a7cd2293dfa9264678508762ab9acb8d41e50Mark Andrews zone, but the nameserver names and/or their IP
435a7cd2293dfa9264678508762ab9acb8d41e50Mark Andrews addresses are statically configured. [RT #21474]
b7a823a402eb5c4e99f283e58d778a903d2e72f5Michał Kępień2985. [bug] Add a regression test for change #2896. [RT #21324]
c46c8e5c56ec4e81a39632e0036f20a6a3c18b8bMark Andrews2984. [bug] Don't run MX checks when the target of the MX record
031bc55634f443c7c70fbf44c6ac6d8abe72f22bEvan Hunt is ".". [RT #22645]
031bc55634f443c7c70fbf44c6ac6d8abe72f22bEvan Hunt2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
a64daf673deff2358a91bee26bbf2bf874f47c6eMark Andrews --- 9.8.0a1 released ---
0aadc6dd7b719539445e7a0a058b15dd9d982a9bMichał Kępień2982. [bug] Reference count dst keys. dst_key_attach() can be used
0aadc6dd7b719539445e7a0a058b15dd9d982a9bMichał Kępień increment the reference count.
0aadc6dd7b719539445e7a0a058b15dd9d982a9bMichał Kępień Note: dns_tsigkey_createfromkey() callers should now
0aadc6dd7b719539445e7a0a058b15dd9d982a9bMichał Kępień always call dst_key_free() rather than setting it
f20ff8b74d21fa3e3f071544f6fd060d015cf27eMichał Kępień to NULL on success. [RT #22672]
f20ff8b74d21fa3e3f071544f6fd060d015cf27eMichał Kępień2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
7ff682f3c628d785048bbe0242e6a32ea26c6747Michał Kępień2980. [bug] named didn't properly handle UPDATES that changed the
7ff682f3c628d785048bbe0242e6a32ea26c6747Michał Kępień TTL of the NSEC3PARAM RRset. [RT #22363]
e02fa56849131911e9554133b17a5325b37d0828Michał Kępień2979. [bug] named could deadlock during shutdown if two
e02fa56849131911e9554133b17a5325b37d0828Michał Kępień "rndc stop" commands were issued at the same
e02fa56849131911e9554133b17a5325b37d0828Michał Kępień time. [RT #22108]
abcea74291c37abf68be4e06997c59e5494f06adMark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
d748d8a4afc200800f6289683361a393b15ba6bfMichał Kępień2977. [bug] 'nsupdate -l' report if the session key is missing.
cbb33c87f4bcf415c840acb61c9d4642c3c2a8e0Michał Kępień2976. [bug] named could die on exit after negotiating a GSS-TSIG
cbb33c87f4bcf415c840acb61c9d4642c3c2a8e0Michał Kępień key. [RT #22573]
324b00ad4950b00346f5ba2382a51709bd82afe9Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
324b00ad4950b00346f5ba2382a51709bd82afe9Mark Andrews wrong lock which could lead to server deadlock.
4dc6fa1e92af7a62875b6f6f2931beefd58cb4faEvan Hunt2974. [bug] Some valid UPDATE requests could fail due to a
4dc6fa1e92af7a62875b6f6f2931beefd58cb4faEvan Hunt consistency check examining the existing version
b81b178ab919bdbd92021cfc7e6e8d971cd38e83Mark Andrews of the zone rather than the new version resulting
b81b178ab919bdbd92021cfc7e6e8d971cd38e83Mark Andrews from the UPDATE. [RT #22413]
bf216589c1a81e4431653a145b252b6ce367d7cdMark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
bf216589c1a81e4431653a145b252b6ce367d7cdMark Andrews at the end of configure resulting in build failures
7dbeb5e7f067585abfb12fac314a0d2a8f0dd040Evan Hunt where there is very old version of perl installed.
7dbeb5e7f067585abfb12fac314a0d2a8f0dd040Evan Hunt Move it to "make maintainer-clean". [RT #22230]
6e10f87913db176724e89b52e686b0992898da75Mukund Sivaraman2972. [bug] win32: address windows socket errors. [RT #21906]
6e10f87913db176724e89b52e686b0992898da75Mukund Sivaraman2971. [bug] Fixed a bug that caused journal files not to be
6e10f87913db176724e89b52e686b0992898da75Mukund Sivaraman compacted on Windows systems as a result of
37f6466aa327a5b444e41c8cb57ab5caacfe6279Evan Hunt non-POSIX-compliant rename() semantics. [RT #22434]
36babd3e630f507843c423207cbbbd4758d7cffaTinderbox User2970. [security] Adding a NO DATA negative cache entry failed to clear
37f6466aa327a5b444e41c8cb57ab5caacfe6279Evan Hunt any matching RRSIG records. A subsequent lookup of
4162d3b36d1a3c25724c7e37ce839f67b2352bbbMark Andrews of NO DATA cache entry could trigger a INSIST when the
4162d3b36d1a3c25724c7e37ce839f67b2352bbbMark Andrews unexpected RRSIG was also returned with the NO DATA
4162d3b36d1a3c25724c7e37ce839f67b2352bbbMark Andrews cache entry.
ce6f0c122140647b5652c0d4de523c994fcfea08Michał Kępień CVE-2010-3613, VU#706148. [RT #22288]
f72f5879424ce4081893b306b8c31f29fe9205e0Evan Hunt2969. [security] Fix acl type processing so that allow-query works
f72f5879424ce4081893b306b8c31f29fe9205e0Evan Hunt in options and view statements. Also add a new
f72f5879424ce4081893b306b8c31f29fe9205e0Evan Hunt set of tests to verify proper functioning.
1073e2001caee13cc1fa52de97feddd633d50fd8Evan Hunt CVE-2010-3615, VU#510208. [RT #22418]
1073e2001caee13cc1fa52de97feddd633d50fd8Evan Hunt2968. [security] Named could fail to prove a data set was insecure
1073e2001caee13cc1fa52de97feddd633d50fd8Evan Hunt before marking it as insecure. One set of conditions
1073e2001caee13cc1fa52de97feddd633d50fd8Evan Hunt that can trigger this occurs naturally when rolling
78608b0a454246d0e1e0169f1d671b8427e48199Francis Dupont DNSKEY algorithms.
11c4e6d8fcc9bc148543c1ee632315e096d2bcf2Michał Kępień CVE-2010-3614, VU#837744. [RT #22309]
59122481b2aa65de4518677c6949f03711d2553aEvan Hunt2967. [bug] 'host -D' now turns on debugging messages earlier.
59122481b2aa65de4518677c6949f03711d2553aEvan Hunt2966. [bug] isc_print_vsnprintf() failed to check if there was
fe6d2fd8338d6f6ac4c79bea9a8daad903460040Evan Hunt space available in the buffer when adding a left
fe6d2fd8338d6f6ac4c79bea9a8daad903460040Evan Hunt justified character with a non zero width,
fe6d2fd8338d6f6ac4c79bea9a8daad903460040Evan Hunt (e.g. "%-1c"). [RT #22270]
05a456499af940762d6658366abafb220c5053ccMark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
05a456499af940762d6658366abafb220c5053ccMark Andrews RFC 4634. [RT #21702]
cb4e0ef4e2c8a942f99af6ecc6aa564c903b00a0Mark Andrews2964. [placeholder]
cb4e0ef4e2c8a942f99af6ecc6aa564c903b00a0Mark Andrews2963. [security] The allow-query acl was being applied instead of the
cb4e0ef4e2c8a942f99af6ecc6aa564c903b00a0Mark Andrews allow-query-cache acl to cache lookups. [RT #22114]
e3efc855f9f0acc9b14bb8e9c833e0fa209068b6Mark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
e56c0854589d936f911e0aac2f2bf53cbc8a6af7Michał Kępień2961. [bug] Be still more selective about the non-authoritative
e56c0854589d936f911e0aac2f2bf53cbc8a6af7Michał Kępień answers we apply change 2748 to. [RT #22074]
6727802528c27484e0d36d70f0b936022d3226e3Michał Kępień2960. [func] Check that named accepts non-authoritative answers.
4d41be5f9e86c11a6f00e2b005cfc5abae2c1ab3Mark Andrews2959. [func] Check that named starts with a missing masterfile.
bfde61d5194a534d800f3b90008d1f52261922c5Mark Andrews2958. [bug] named failed to start with a missing master file.
6b56350522d18f10edbf2d3778cd0fea74e4f3d2Mark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
6b56350522d18f10edbf2d3778cd0fea74e4f3d2Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
42ae02626d05921ca7508ae6f9c48ea699596bc6Mark Andrews respectively. [RT #21962]
16f43564c6875e2bedd346c18c494933ad51e4faMukund Sivaraman2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
16f43564c6875e2bedd346c18c494933ad51e4faMukund Sivaraman2955. [func] Provide more detail in the recursing log. [RT #22043]
16f43564c6875e2bedd346c18c494933ad51e4faMukund Sivaraman2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
72b322cde0e51c4c87df0c9e3226deac95dfb4ceMark Andrews build_sqldbinstance failure. [RT #21623]
28ea558bc80f75e46d77ea0533232bb9d4e644f7Mark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
28ea558bc80f75e46d77ea0533232bb9d4e644f7Mark Andrews exact match" message when returning a wildcard
8ed6c49f1a7f06d3ed39bee7731ff91d8dfd8dc7Mark Andrews no data response. [RT #21744]
447dfe4f115b17274eabf1087f035634e1129bb9Mark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
565535d1820c63c64ec3c89e1f4815c326aed7aeEvan Hunt to initialise winsock. [RT #21932]
6045abbc9a0d7d449a13b6fbfbf32d419b6bee96Mark Andrews2951. [bug] named failed to generate a correct signed response
f7d148398ca4511551c737e655b15f7d0d59a783Mark Andrews in a optout, delegation only zone with no secure
f7d148398ca4511551c737e655b15f7d0d59a783Mark Andrews delegations. [RT #22007]
3a84275b10ab16965e86f6ca97e70c1bdca885a0Mark Andrews2950. [bug] named failed to perform a SOA up to date check when
3a84275b10ab16965e86f6ca97e70c1bdca885a0Mark Andrews falling back to TCP on UDP timeouts when
3a84275b10ab16965e86f6ca97e70c1bdca885a0Mark Andrews ixfr-from-differences was set. [RT #21595]
398834f7559617bdfd6c10ba555609a2f306e3d4Mark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
398834f7559617bdfd6c10ba555609a2f306e3d4Mark Andrews it was called multiple times. [RT #21942]
398834f7559617bdfd6c10ba555609a2f306e3d4Mark Andrews2948. [port] MacOS: provide a mechanism to configure the test
398834f7559617bdfd6c10ba555609a2f306e3d4Mark Andrews interfaces at reboot. See bin/tests/system/README
28061f80b698171892e81c0856bc722190947998Evan Hunt for details.
28061f80b698171892e81c0856bc722190947998Evan Hunt2947. [placeholder]
a785bf2c39c6f223a93c27bbff81591b38095577Mark Andrews2946. [doc] Document the default values for the minimum and maximum
a03f4b1ea4f1a4a70963fbeb606841c217f9e5f3Evan Hunt zone refresh and retry values in the ARM. [RT #21886]
a03f4b1ea4f1a4a70963fbeb606841c217f9e5f3Evan Hunt2945. [doc] Update empty-zones list in ARM. [RT #21772]
d315545e6db6792692fe2dcb788ac6717a33b75fEvan Hunt2944. [maint] Remove ORCHID prefix from built in empty zones.
d315545e6db6792692fe2dcb788ac6717a33b75fEvan Hunt2943. [func] Add support to load new keys into managed zones
00f131293520b70728cd48840e09953fa45a745bMark Andrews without signing immediately with "rndc loadkeys".
00f131293520b70728cd48840e09953fa45a745bMark Andrews Add support to link keys with "dnssec-keygen -S"
00f131293520b70728cd48840e09953fa45a745bMark Andrews and "dnssec-settime -S". [RT #21351]
b2e71853060a384070d422afda6d1c692ff608e3Mark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
42c1acfa478aacfbda2d298cf74a137de2df4b87Michał Kępień2941. [bug] sdb and sdlz (dlz's zone database) failed to support
42c1acfa478aacfbda2d298cf74a137de2df4b87Michał Kępień DNAME at the zone apex. [RT #21610]
214b53880b6d77359f60feccb91bd2589059300aEvan Hunt2940. [port] Remove connection aborted error message on
214b53880b6d77359f60feccb91bd2589059300aEvan Hunt Windows. [RT #21549]
dd5375de0a7a515ee4fb2fd217e9577259d38c07Mark Andrews2939. [func] Check that named successfully skips NSEC3 records
dd5375de0a7a515ee4fb2fd217e9577259d38c07Mark Andrews that fail to match the NSEC3PARAM record currently
dd5375de0a7a515ee4fb2fd217e9577259d38c07Mark Andrews in use. [RT# 21868]
3a58e1fefb0a9fd5dab11f271a320c6b90473f76Mukund Sivaraman2938. [bug] When generating signed responses, from a signed zone
3a58e1fefb0a9fd5dab11f271a320c6b90473f76Mukund Sivaraman that uses NSEC3, named would use a uninitialised
7c67b8c2b076971e6a9f8b0db932201366f13d47Mark Andrews pointer if it needed to skip a NSEC3 record because
7c67b8c2b076971e6a9f8b0db932201366f13d47Mark Andrews it didn't match the selected NSEC3PARAM record for
7c67b8c2b076971e6a9f8b0db932201366f13d47Mark Andrews zone. [RT# 21868]
5aed5dc329a2bf1340e9ff2256c1cf4e3005ea0bMark Andrews2937. [bug] Worked around an apparent race condition in over
387f5e872d40426acbc739d2e9b2bb37c123dd56Mark Andrews memory conditions. Without this fix a DNS cache DB or
8664a1bd40814ed0b42eacfc5eb354b598dfd6dfTinderbox User ADB could incorrectly stay in an over memory state,
c28e44f3f8bc46c6bf1c15cc06af0c42fcd7e924Evan Hunt effectively refusing further caching, which
c28e44f3f8bc46c6bf1c15cc06af0c42fcd7e924Evan Hunt subsequently made a BIND 9 caching server unworkable.
387f5e872d40426acbc739d2e9b2bb37c123dd56Mark Andrews This fix prevents this problem from happening by
3440cf9c60cd5d35634e7f274fd3eccbba2173a5Evan Hunt polling the state of the memory context, rather than
3440cf9c60cd5d35634e7f274fd3eccbba2173a5Evan Hunt making a copy of the state, which appeared to cause
3440cf9c60cd5d35634e7f274fd3eccbba2173a5Evan Hunt a race. This is a "workaround" in that it doesn't
387f5e872d40426acbc739d2e9b2bb37c123dd56Mark Andrews solve the possible race per se, but several experiments
541ce84ff2f0c54340da8b3e04c5686ed82420e1Mark Andrews proved this change solves the symptom. Also, the
541ce84ff2f0c54340da8b3e04c5686ed82420e1Mark Andrews polling overhead hasn't been reported to be an issue.
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews This bug should only affect a caching server that
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews specifies a finite max-cache-size. It's also quite
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews likely that the bug happens only when enabling threads,
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt but it's not confirmed yet. [RT #21818]
fb9ef31fed818384ef8997f2dc5f27252c6f767eEvan Hunt2936. [func] Improved configuration syntax and multiple-view
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt support for addzone/delzone feature (see change
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt #2930). Removed "new-zone-file" option, replaced
823ccd1f02802966395d58c916e9f988320fd6eeEvan Hunt with "allow-new-zones (yes|no)". The new-zone-file
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt for each view is now created automatically, with
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt a filename generated from a hash of the view name.
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt It is no longer necessary to "include" the
b6fa637fc8c92f42a21e6f97259598968717af3dEvan Hunt new-zone-file in named.conf; this happens
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews automatically. Zones that were not added via
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews "rndc addzone" can no longer be removed with
ace5680c122ef239e64eec1120f13f5a7f087d79Mark Andrews "rndc delzone". [RT #19447]
59d940391ce90963cd3f4b22201b3fca2ffda22aMark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
6b432e11497f905a6b6f048df3e8a01ce8abbb1eMark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
cb9345c996de9d9c990009f14fc83fbbe9c5e3e6Mark Andrews scope. This could potentially result in a unknown,
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews potentially malformed, EDNS option being sent instead
c935952ede45595a821cfed7f73b57f3b239ca2bMark Andrews of the desired NSID option. [RT #21781]
9604a49da0130534f2f4aaa0cbfa78b5f589196fMark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews2931. [bug] Temporarily and partially disable change 2864
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews because it would cause infinite attempts of RRSIG
da5b569ddb9b8bf84242f3085d18e215ec490fdaMark Andrews queries. This is an urgent care fix; we'll
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt revisit the issue and complete the fix later.
c83a3061551c86bd661839be935de061f7322f5cEvan Hunt2930. [experimental] New "rndc addzone" and "rndc delzone" commads
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews allow dynamic addition and deletion of zones.
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews To enable this feature, specify a "new-zone-file"
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews option at the view or options level in named.conf.
ac9072210cea5283e554f1787876b647a08fda96Mark Andrews Zone configuration information for the new zones
512765ba1e3f0b29e2c1ae4b0138838c6422f2bdEvan Hunt will be written into that file. To make the new
512765ba1e3f0b29e2c1ae4b0138838c6422f2bdEvan Hunt zones persist after a restart, "include" the file
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews into named.conf in the appropriate view. (Note:
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews This feature is not yet documented, and its syntax
27a262bc4d38c7a8230677ac2685ec7a4f509f70Mark Andrews is expected to change.) [RT #19447]
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman2929. [bug] Improved handling of GSS security contexts:
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman - added LRU expiration for generated TSIGs
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman - added the ability to use a non-default realm
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman - added new "realm" keyword in nsupdate
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman - limited lifetime of generated keys to 1 hour
3b38e4b8344cb3bb28f2b116d2e39f8371ef8e34Mukund Sivaraman or the lifetime of the context (whichever is
0d24df5c0b2f9546f403113df8ac4457223bc92fEvan Hunt2928. [bug] Be more selective about the non-authoritative
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews answer we apply change 2748 to. [RT #21594]
7c1c9b4dcd9efa507cdb58d3d83e99ab4836096dMark Andrews2927. [placeholder]
9689922a0d936b04feb418fbaf4c1420f745ea58Mark Andrews2926. [placeholder]
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt2925. [bug] Named failed to accept uncachable negative responses
02989eceeff85cd6c5dd31848a12674f74bba7cfEvan Hunt from insecure zones. [RT# 21555]
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt2924. [func] 'rndc secroots' dump a combined summary of the
34f649fa22a16acb488ccf0f8a41d541c6ba7da1Evan Hunt current managed keys combined with trusted keys.
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt2923. [bug] 'dig +trace' could drop core after "connection
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt timeout". [RT #21514]
8b9c4592ed718c4187971f1104381faf538bf4f7Evan Hunt2922. [contrib] Update zkt to version 1.0.
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman2921. [bug] The resolver could attempt to destroy a fetch context
264e17e73941059877ccf3c96f26aac15a25500bMukund Sivaraman too soon. [RT #19878]
9a8b2b3ab35fbbdf03acba32dade90ad91f75742Mukund Sivaraman2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
9a8b2b3ab35fbbdf03acba32dade90ad91f75742Mukund Sivaraman to IPv4 clients. New acl 'filter-aaaa' (default any).
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
eeb16584fbd3564136cb4c950fc5e1b54690de68Mukund Sivaraman2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman2917. [func] Virtual time test framework. [RT #20801]
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman2916. [func] Add framework to use IPv6 in tests.
9540b42695c15fdd5f01b4c663e21936e6c38c82Mukund Sivaraman fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman2915. [cleanup] Be smarter about which objects we attempt to compile
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman based on configure options. [RT #21444]
fec9247b8f1ab52e999643ae03f0550387ec359fMukund Sivaraman2914. [bug] Make the "autosign" system test more portable.
0d7548ee341c83c540624a423e2c701b6e9ddc4eEvan Hunt2913. [func] Add pkcs#11 system tests. [RT #20784]
2883bbaef3b2b712acfb89358f5a9c7ebb62733bEvan Hunt2912. [func] Windows clients don't like UPDATE responses that clear
527163f0e5e8639bcceb7fe52387285042f5b24cEvan Hunt the zone section. [RT #20986]
62a6147e51fd1ccb9ec1c1b6c97b6e9b9ef1f002Evan Hunt2911. [bug] dnssec-signzone didn't handle out of zone records well.
4c432aae90bc9b220725ca7df5a6af40cf4c74b3Mark Andrews2910. [func] Sanity check Kerberos credentials. [RT #20986]
4c432aae90bc9b220725ca7df5a6af40cf4c74b3Mark Andrews2909. [bug] named-checkconf -p could die if "update-policy local;"
3195754154292f0651c195433607696a259a98e2Evan Hunt was specified in named.conf. [RT #21416]
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt2908. [bug] It was possible for re-signing to stop after removing
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt a DNSKEY. [RT #21384]
911576956388270fe2401fbf9236d8879d2795e9Evan Hunt2907. [bug] The export version of libdns had undefined references.
fd0d60b3a0139c040fedb0bb765fd9667831412eMark Andrews2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
3001a1b4e6298466882a4147307b4c28a3b08f91Mark Andrews2905. [port] aix: set use_atomic=yes with native compiler.
1bce43adcc11d21afaf645cbe466553aabc725b2Mark Andrews2904. [bug] When using DLV, sub-zones of the zones in the DLV,
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews could be incorrectly marked as insecure instead of
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews secure leading to negative proofs failing. This was
da4823c08a9a41e7b5ff1f3a83c80007f60fd21cMark Andrews a unintended outcome from change 2890. [RT# 21392]
52cae869e0296713b764f6065bdad80832d4c493Mark Andrews2903. [bug] managed-keys-directory missing from namedconf.c.
403e7b451207fe6514a5d641562713b1af233b9cEvan Hunt2902. [func] Add regression test for change 2897. [RT #21040]
62b5dd5b09cb575281f8193476b58a4bd9870fc9Evan Hunt2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews2900. [bug] The placeholder negative caching element was not
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews properly constructed triggering a INSIST in
8c31a25f3ff5d6783c7add7c887e52f7031d173dMark Andrews dns_ncache_towire(). [RT #21346]
8c31a25f3ff5d6783c7add7c887e52f7031d173dMark Andrews2899. [port] win32: Support linking against OpenSSL 1.0.0.
3be4330b77e6de0c6aa7cca74c1ae17fc661ac32Tinderbox User2898. [bug] nslookup leaked memory when -domain=value was
8bcd80824c51c802c2927236b012cd526f569b04Mark Andrews specified. [RT #21301]
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews2897. [bug] NSEC3 chains could be left behind when transitioning
7fcbbd6fa9ed199cf6947bb6b204da5438211faaMark Andrews to insecure. [RT #21040]
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt2896. [bug] "rndc sign" failed to properly update the zone
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt when adding a DNSKEY for publication only. [RT #21045]
559cbe04e73cf601784a371e09554c20407a6c7bEvan Hunt2895. [func] genrandom: add support for the generation of multiple
6ef61e764583887172e27c3bc681e36cfa27b469Mark Andrews files. [RT #20917]
b81977ae70138c9befd8fa4bb66b6145e1986561Mark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
43769594c0e42e9822ef71daee8bbf35252d9300Evan Hunt2893. [bug] Improve managed keys support. New named.conf option
43769594c0e42e9822ef71daee8bbf35252d9300Evan Hunt managed-keys-directory. [RT #20924]
9ecedaea58defeadaf54dfc1211270653e0657ceMark Andrews2892. [bug] Handle REVOKED keys better. [RT #20961]
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt2891. [maint] Update empty-zones list to match
fc8c8966c906b305cb8b416a8f23f21abf103b7fEvan Hunt draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt2890. [bug] Handle the introduction of new trusted-keys and
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt DS, DLV RRsets better. [RT #21097]
07b7a3eadeda94eddd50977c9582dae2f955b638Evan Hunt2889. [bug] Elements of the grammar where not properly reported.
85a26f938eac3e147a48f671f6a6b5ee9cd1767dEvan Hunt2888. [bug] Only the first EDNS option was displayed. [RT #21273]
4901f2c10b4393fd4407c8feb022c3415ab323c7Mark Andrews2887. [bug] Report the keytag times in UTC in the .key file,
4901f2c10b4393fd4407c8feb022c3415ab323c7Mark Andrews local time is presented as a comment within the
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt comment. [RT #21223]
8e9dbb62224ce4d7342b0e7db96cf31e415aaaf0Evan Hunt2886. [bug] ctime() is not thread safe. [RT #21223]
b5ad0916242ca4ce3f053efe78c1725dce996717Mark Andrews2885. [bug] Improve -fno-strict-aliasing support probing in
b5ad0916242ca4ce3f053efe78c1725dce996717Mark Andrews configure. [RT #21080]
da23e32e410eb9b106ae926858140303bfd1d96fMark Andrews2884. [bug] Insufficient validation in dns_name_getlabelsequence().
18ab9a0a34ea025a6bbb09b711b00cfa11eec1b5Evan Hunt2883. [bug] 'dig +short' failed to handle really large datasets.
c742ef745e1f3400b79c9df3d188896ccbb50f15Evan Hunt2882. [bug] Remove memory context from list of active contexts
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews before clearing 'magic'. [RT #21274]
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
832f5803f69f4548ba3777f8b5741768bbbf5f75Mark Andrews is held when closing a version. [RT #21198]
8ce73e5c8cd5e985310ad42b76e8cacee406cb34Mark Andrews2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
4441328a1d38bbb2ec20a0a219b84d472312da26Mark Andrews consistent. [RT #21078]
22e3ffcf2c52114092b2dbdf2bc1872371c96192Mark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews2878. [func] Incrementally write the master file after performing
7bcba68b9510908c07d6c2568faca06629511660Mark Andrews a AXFR. [RT #21010]
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews2877. [bug] The validator failed to skip obviously mismatching
2cee8eadec6545fb0ce10fb8c1d7b60870ec2fb4Mark Andrews RRSIGs. [RT #21138]
81df1363fbd13f3a80987704c23e14413e6f1d2aMark Andrews2876. [bug] Named could return SERVFAIL for negative responses
81df1363fbd13f3a80987704c23e14413e6f1d2aMark Andrews from unsigned zones. [RT #21131]
08397f5b6ca783a8c55f48b827201b75c3fca4bfMark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt2874. [bug] Cache lack of EDNS support only after the server
e63d63dc8510c669e1575b2762265842e8783822Evan Hunt successfully responds to the query using plain DNS.
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt2873. [bug] Cancelling a dynamic update via the dns/client module
f5c17a057fc5974bb51d7bc8c5827a7fd6dc9aeeEvan Hunt could trigger an assertion failure. [RT #21133]
d6080de9be23024f5f7a1e40d0cb06df94cdcb72Mark Andrews2872. [bug] Modify dns/client.c:dns_client_createx() to only
2a2618356ecdf5962230fe11606d2b106a638295Tinderbox User require one of IPv4 or IPv6 rather than both.
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk2871. [bug] Type mismatch in mem_api.c between the definition and
6649db1ca4f3dc2d14f41f77e03867ac013215f9Evan Hunt the header file, causing build failure with
b1866070ef4fb9e17bff16ad458f629bbc5a4accwpk --enable-exportlib. [RT #21138]
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
72cae054ad81a985f1e0023f9ff92b6ff1872183Mark Andrews any changes made by configure are integrated.
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews Use --with-make-clean=no to disable. [RT #20994]
f1e3dd087b7ce34382df8354efddaae79caa11b7Mark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
544e2b48ece5724f2c4a0d6636048a72335cfd54Evan Hunt don't like it. [RT #20986]
23ac7e663494ffdfd78b52d1a0a62d93f0d30d93Mark Andrews2866. [bug] Windows does not like the TSIG name being compressed.
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2865. [bug] memset to zero event.data. [RT #20986]
d84a356d4b122d9a50dbca6776c820f5e59ec44dMark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
bc2510a6a5e406bdef580452e6ae3e1298a7d1d6Mark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
1160ea4c2847b276946cf6bd00504929ec4f6e44Mark Andrews2862. [bug] nsupdate didn't default to the parent zone when
348d80fb8490f4547aaa569e5f7ea2a032543bacMark Andrews updating DS records. [RT #20896]
47071b7310bd6d4d12169c336faac72c8c3d9ecfMark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews inactivation time. [RT #21039]
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews2859. [bug] When cancelling validation it was possible to leak
f6f3264d8c81cda5d489e29d2141f1a92fbe4c84Mark Andrews memory. [RT #20800]
960989925556246cc86f1905a5d62e6b0b69dc02Mark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
d77cab69bf9676f828c48c217828a25e8ba41c63Mark Andrews2856. [bug] The size of a memory allocation was not always properly
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt recorded. [RT #20927]
f1b29d8428362842c429157b4925e529463eab4cEvan Hunt2855. [func] nsupdate will now preserve the entered case of domain
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews names in update requests it sends. [RT #20928]
d0c5ff7f65a08e2ccc9bc06e0ef9f61e36875b50Mark Andrews2854. [func] dig: allow the final soa record in a axfr response to
83a28ca274521e15086fc39febde507bcc4e145eMark Andrews be suppressed, dig +onesoa. [RT #20929]
1585a9f239969a65b974ff741ff2a7a79b148891Evan Hunt2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
1585a9f239969a65b974ff741ff2a7a79b148891Evan Hunt2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt2851. [doc] nslookup.1, removed <informalexample> from the docbook
2fb4184d9d55a6b8709356144730e323e265d58fEvan Hunt source as it produced bad nroff. [RT #21007]
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews2850. [bug] If isc_heap_insert() failed due to memory shortage
5be93f5dff21fa067f52065e3521b7d82f32c779Mark Andrews the heap would have corrupted entries. [RT #20951]
6ae22c411920be5f5fd1780ac0cd44cbb21b144aMukund Sivaraman2849. [bug] Don't treat errors from the xml2 library as fatal.
74d98566ed6a2280ea84d146e7c81275f1c5649dMark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
74d98566ed6a2280ea84d146e7c81275f1c5649dMark Andrews README.rfc5011 into the ARM. [RT #20899]
1c89e89eaf761c378fd48bfd1c4abf1b5ad026e9Evan Hunt2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
b1ab6766f7cf3d2c189b415c50cc574d9b21a9a2Mark Andrews2846. [bug] EOF on unix domain sockets was not being handled
0c2d891abeb2b35e290ca9da29e1227110b5be23Mark Andrews correctly. [RT #20731]
fd017eea638d690b6a90c4d2a3f2ebe51c472173Mark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews been five (5) seconds.
2595d1da358cc7391e001894d45471509976e7d5Mark Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
6ef1cdec9a52a21a3db649817184702abfe6dd95Mark Andrews creating key files if there is a chance that the new
6ef1cdec9a52a21a3db649817184702abfe6dd95Mark Andrews key ID will collide with an existing one after
6ef1cdec9a52a21a3db649817184702abfe6dd95Mark Andrews either of the keys has been revoked. (To override
294ef74e5ad68d898207c4fb36d8b18d526a11f6Curtis Blackburn this in the case of dnssec-keyfromlabel, use the -y
1008577c673876037d60b5241a8f1de0d1b680d9Tinderbox User option. dnssec-keygen will simply create a
294ef74e5ad68d898207c4fb36d8b18d526a11f6Curtis Blackburn different, non-colliding key, so an override is
fe6557e5901162308e716791077ace6811728242Mark Andrews not necessary.) [RT #20838]
21e5f9c5cdb3052f282e3dbdc2dc47f29cfe1187Mark Andrews2842. [func] Added "smartsign" and improved "autosign" and
21e5f9c5cdb3052f282e3dbdc2dc47f29cfe1187Mark Andrews "dnssec" regression tests. [RT #20865]
4df43743ab1ef4bad2b96840a7b2b9c77bc82bc2Mark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
4df43743ab1ef4bad2b96840a7b2b9c77bc82bc2Mark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews2839. [bug] A KSK revoked by named could not be deleted.
701aa95d9605fd6ad25b60dfd38d05a1942ee147Mark Andrews2838. [placeholder]
7a3d063847290b204dfcedaef7288033c8424bfbEvan Hunt2837. [port] Prevent Linux spurious warnings about fwrite().
b243aa40f97cb2f77fbe746977d61f0a8c2e9194Mark Andrews2836. [bug] Keys that were scheduled to become active could
b243aa40f97cb2f77fbe746977d61f0a8c2e9194Mark Andrews be delayed. [RT #20874]
b243aa40f97cb2f77fbe746977d61f0a8c2e9194Mark Andrews2835. [bug] Key inactivity dates were inadvertently stored in
2b8679cf0f832c5e55121eb23806da577d272dd7Francis Dupont the private key file with the outdated tag
6db55b4ff9b099bc8d6621f6e13ec1f087d35e04Mark Andrews "Unpublish" rather than "Inactive". This has been
6db55b4ff9b099bc8d6621f6e13ec1f087d35e04Mark Andrews fixed; however, any existing keys that had Inactive
2ac8829a8a7ce2f5fbcf006c3bf6c5a6c821abf3Mark Andrews dates set will now need to have them reset, using
2ac8829a8a7ce2f5fbcf006c3bf6c5a6c821abf3Mark Andrews 'dnssec-settime -I'. [RT #20868]
744c1db6352c4c3f11c8538e4a2a57c8b0e0d570Mark Andrews2834. [bug] HMAC-SHA* keys that were longer than the algorithm
744c1db6352c4c3f11c8538e4a2a57c8b0e0d570Mark Andrews digest length were used incorrectly, leading to
744c1db6352c4c3f11c8538e4a2a57c8b0e0d570Mark Andrews interoperability problems with other DNS
d9b96d0a42a70c1a43415dcbe0f8872b84d76a13Evan Hunt implementations. This has been corrected.
8a5809527e6c85e39699901712a455d5480907c1Evan Hunt (Note: If an oversize key is in use, and
3d0f9f8cca44ba9f1972de9e3fcabe6b70b5a33bMark Andrews compatibility is needed with an older release of
8a5809527e6c85e39699901712a455d5480907c1Evan Hunt BIND, the new tool "isc-hmac-fixup" can convert
bd19cef22382906a11fb6f1ffdef11038e432bcaMark Andrews the key secret to a form that will work with all
bd19cef22382906a11fb6f1ffdef11038e432bcaMark Andrews versions.) [RT #20751]
a0e34c90eaf2464c6ef7c46c75c2df2dcb152293Mark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
669e108d6753b27a9745cc506193a9e0b32d217cEvan Hunt2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
669e108d6753b27a9745cc506193a9e0b32d217cEvan Hunt to avoid redefinition in some OSs [RT 20831]
45fd95544cd650a8e6a0fc39b656d1109b811ac0Evan Hunt2831. [security] Do not attempt to validate or cache
45fd95544cd650a8e6a0fc39b656d1109b811ac0Evan Hunt out-of-bailiwick data returned with a secure
45fd95544cd650a8e6a0fc39b656d1109b811ac0Evan Hunt answer; it must be re-fetched from its original
76af83c9adb772f7b045c62cf8b411165bfaa5efMark Andrews source and validated in that context. [RT #20819]
6552f33198438390724c5823b8dbcf477ec9638cEvan Hunt2830. [bug] Changing the OPTOUT setting could take multiple
6552f33198438390724c5823b8dbcf477ec9638cEvan Hunt passes. [RT #20813]
6552f33198438390724c5823b8dbcf477ec9638cEvan Hunt2829. [bug] Fixed potential node inconsistency in rbtdb.c.
fb9cdee4af778c5e53fc9e25f15364f5bbd2dae3Mark Andrews2828. [security] Cached CNAME or DNAME RR could be returned to clients
2a1860ad83294da4abe34a72bdb6f5a28b87f2efMark Andrews without DNSSEC validation. [RT #20737]
de6469b663b55aacd19bdcdd925ce381f0c4b4dfMark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
de6469b663b55aacd19bdcdd925ce381f0c4b4dfMark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
b1ab6766f7cf3d2c189b415c50cc574d9b21a9a2Mark Andrews being released. [RT #20740]
d389069a397c99347b5b281f90577e19e7662b03Mark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
d389069a397c99347b5b281f90577e19e7662b03Mark Andrews was in the process of being created was not properly
fd2f4551d9498e1dce8e44a24e5e886ef2aa75cbMark Andrews recorded in the zone. [RT #20786]
fd2f4551d9498e1dce8e44a24e5e886ef2aa75cbMark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
7c66fc970082f2f8b4a7ae1bbfca3531ab6798b4Mark Andrews2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
32f4f500a5dfa77631217a390f3cd616827cab18Mukund Sivaraman2822. [bug] rbtdb.c:loadnode() could return the wrong result.
2a80bc01530013293016172b1dcc1d12471ccf33Mark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews2820. [func] Handle read access failure of OpenSSL configuration
2bbab60f504e4cd905080d42eae5cc8fe62599cbMark Andrews file more user friendly (PKCS#11 engine patch).
0b612b420df38f1b2f1ba19df727f77a492f08a7Mark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
802e0662ef6041078cb7bad4cdb197a295eab770Mark Andrews2818. [cleanup] rndc could return an incorrect error code
802e0662ef6041078cb7bad4cdb197a295eab770Mark Andrews when a zone was not found. [RT #20767]
3fe7c625ff1d4477806e5ecd700c5917ba2d7b90Mark Andrews2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
af9b975ccc2f0e6d82a4dfc2daa6cedfc5f4bdc2Mark Andrews2816. [bug] previous_closest_nsec() could fail to return
94694e720a911a38b01ff5036c01d883b3c9cbb1Evan Hunt data for NSEC3 nodes [RT #29730]
538c6bd3f15c6f525972e2226708805dbab03240Mark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
e8fab79146fe8010728513f4458cfd2f4d8bd48bWitold Krecicki2814. [func] Provide a definitive error message when a master
e8fab79146fe8010728513f4458cfd2f4d8bd48bWitold Krecicki zone is not loaded. [RT #20757]
c034b72ba147e86ec40816fdf0cfb19c9ed7f1d6Witold Krecicki2813. [bug] Better handling of unreadable DNSSEC key files.
82a50a619afa73ae9a212399505b9f1b327128cdMark Andrews2812. [bug] Make sure updates can't result in a zone with
82a50a619afa73ae9a212399505b9f1b327128cdMark Andrews NSEC-only keys and NSEC3 records. [RT #20748]
2f1c460beaa1e372255e7a1b8aad8996f011816dMark Andrews2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
2f1c460beaa1e372255e7a1b8aad8996f011816dMark Andrews output. [RT #20733]
9ee66e3a5b45654235472711439f9db1766c82caMark Andrews2810. [doc] Clarified the process of transitioning an NSEC3 zone
af9b975ccc2f0e6d82a4dfc2daa6cedfc5f4bdc2Mark Andrews to insecure. [RT #20746]
9ee66e3a5b45654235472711439f9db1766c82caMark Andrews2809. [cleanup] Restored accidentally-deleted text in usage output
8b2b41ba4f8cabed897f2d852a6c07abfb23231eMark Andrews in dnssec-settime and dnssec-revoke [RT #20739]
47f8b47b8df05aade51e35b31c3df46fb121a098Mark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
47f8b47b8df05aade51e35b31c3df46fb121a098Mark Andrews atomic.h is correctly installed by the architecture
fcadf0b3205be950da14c80fedbf088fc8fd2190Evan Hunt specific subdirectories. [RT #20722]
fcadf0b3205be950da14c80fedbf088fc8fd2190Evan Hunt2807. [bug] Fixed a possible ASSERT when reconfiguring zone
fcadf0b3205be950da14c80fedbf088fc8fd2190Evan Hunt keys. [RT #20720]
47f8b47b8df05aade51e35b31c3df46fb121a098Mark Andrews --- 9.7.0rc1 released ---
47f8b47b8df05aade51e35b31c3df46fb121a098Mark Andrews2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
d9a713819621972af4f90dfaa9e2bc72aad54d48Mark Andrews when it had changed. [RT #20703]
db9781d4a2ed15c4b34bb5c97ea68b8f598992fcMark Andrews2805. [bug] Fixed namespace problems encountered when building
db9781d4a2ed15c4b34bb5c97ea68b8f598992fcMark Andrews external programs using non-exported BIND9 libraries
6f2752da7a1036cd59be17236ca66630d00f11cdMukund Sivaraman (i.e., built without --enable-exportlib). [RT #20679]
700d3cb7895b5da2543282d18735d2176d1aff86Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
f0244761611dc4d0f80b36c0c0ccdb26fa6cf830Mark Andrews or as a result of a scheduled key change. [RT #20700]
f0244761611dc4d0f80b36c0c0ccdb26fa6cf830Mark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
48ec547968d7da5b1240222c53a90efce25157a2Mark Andrews and genrandom under windows. [RT #20670]
48ec547968d7da5b1240222c53a90efce25157a2Mark Andrews2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
095c47be5456c17087d7b39dfc97ebee65e0dfbbMark Andrews2801. [func] Detect and report records that are different according
178dc0e1d617a6ef6387e9942ba9cdb370d1bde2Mark Andrews to DNSSEC but are semantically equal according to plain
178dc0e1d617a6ef6387e9942ba9cdb370d1bde2Mark Andrews DNS. Apply plain DNS comparisons rather than DNSSEC
178dc0e1d617a6ef6387e9942ba9cdb370d1bde2Mark Andrews comparisons when processing UPDATE requests.
6aaf3d01a1a9829802498c5772b22d649d012181Mark Andrews dnssec-signzone now removes such semantically duplicate
6aaf3d01a1a9829802498c5772b22d649d012181Mark Andrews records prior to signing the RRset.
e51ba2650025460b26092fb2500e0b6dfbf6d548Mark Andrews named-checkzone -r {ignore|warn|fail} (default warn)
e51ba2650025460b26092fb2500e0b6dfbf6d548Mark Andrews named-compilezone -r {ignore|warn|fail} (default warn)
143526179e5965921e1bd17a4759c3993854b4f4Mark Andrews named.conf: check-dup-records {ignore|warn|fail};
15bee593e70faca91a00331184fbbbc66080d422Mark Andrews2800. [func] Reject zones which have NS records which refer to
15bee593e70faca91a00331184fbbbc66080d422Mark Andrews CNAMEs, DNAMEs or don't have address record (class IN
15bee593e70faca91a00331184fbbbc66080d422Mark Andrews only). Reject UPDATEs which would cause the zone
af326c2e3f90d86a8966a1298d7aa157667f97cdEvan Hunt to fail the above checks if committed. [RT #20678]
af326c2e3f90d86a8966a1298d7aa157667f97cdEvan Hunt2799. [cleanup] Changed the "secure-to-insecure" option to
af326c2e3f90d86a8966a1298d7aa157667f97cdEvan Hunt "dnssec-secure-to-insecure", and "dnskey-ksk-only"
ce786900292468e465fb74df8712a625ce10e103Mukund Sivaraman to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
ce786900292468e465fb74df8712a625ce10e103Mukund Sivaraman2798. [bug] Addressed bugs in managed-keys initialization
d102ab1b847716b045640faebf074a8092e0b023Mark Andrews and rollover. [RT #20683]
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews2797. [bug] Don't decrement the dispatch manager's maxbuffers.
f503aa345b451f94875a5bab637223bcbbd93b6dEvan Hunt2796. [bug] Missing dns_rdataset_disassociate() call in
f503aa345b451f94875a5bab637223bcbbd93b6dEvan Hunt dns_nsec3_delnsec3sx(). [RT #20681]
f503aa345b451f94875a5bab637223bcbbd93b6dEvan Hunt2795. [cleanup] Add text to differentiate "update with no effect"
7df3f06c0bf0b78a88221348d6af6704d9ece7efMark Andrews log messages. [RT #18889]
a3253fb44c15a52bbb19bb38592b4dc02a004527Tinderbox User2794. [bug] Install <isc/namespace.h>. [RT #20677]
d1cacbb37474b0cbee6c1ddd05d27f731b2b43baMark Andrews2793. [func] Add "autosign" and "metadata" tests to the
2be9d18ee9bd1b4eec4720218e4f43352603291fMark Andrews automatic tests. [RT #19946]
2be9d18ee9bd1b4eec4720218e4f43352603291fMark Andrews2792. [func] "filter-aaaa-on-v4" can now be set in view
2be9d18ee9bd1b4eec4720218e4f43352603291fMark Andrews options (if compiled in). [RT #20635]
65a3f6329735860093004f6b0fe69d6be886417bTinderbox User2791. [bug] The installation of isc-config.sh was broken.
c40906dfad6dd6e3a3e3c94b8c8847bc9bc064e5Mark Andrews2790. [bug] Handle DS queries to stub zones. [RT #20440]
f9e49fd80e2ac4fce0fef11d330b88ff3693ad99Witold Krecicki2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
e8c70b0c35c27a28ea2e0cafb252e1774ccc1727Mark Andrews2788. [bug] dnssec-signzone could sign with keys that were
e8c70b0c35c27a28ea2e0cafb252e1774ccc1727Mark Andrews not requested [RT #20625]
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews2787. [bug] Spurious log message when zone keys were
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews dynamically reconfigured. [RT #20659]
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews2786. [bug] Additional could be promoted to answer. [RT #20663]
6ce5279d0f30c8c760e27baf92bb44b3f4962354Evan Hunt --- 9.7.0b3 released ---
6ce5279d0f30c8c760e27baf92bb44b3f4962354Evan Hunt2785. [bug] Revoked keys could fail to self-sign [RT #20652]
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt2784. [bug] TC was not always being set when required glue was
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt dropped. [RT #20655]
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt buffer size of 512 or less. [RT #20654]
f5898cf3484b1588d5239faa4062a2b2b606ce91Evan Hunt2782. [port] win32: use getaddrinfo() for hostname lookups.
c27c710939766a7bb315bde1f12ab18d93c77cc8Mark Andrews2781. [bug] Inactive keys could be used for signing. [RT #20649]
4e9a1ad22618a46dab82eeb2d030190cec0afbc6Mukund Sivaraman2780. [bug] dnssec-keygen -A none didn't properly unset the
4e9a1ad22618a46dab82eeb2d030190cec0afbc6Mukund Sivaraman activation date in all cases. [RT #20648]
4e9a1ad22618a46dab82eeb2d030190cec0afbc6Mukund Sivaraman2779. [bug] Dynamic key revocation could fail. [RT #20644]
555469af35c12189525921abbc3de3cefb5f9f0fMark Andrews2778. [bug] dnssec-signzone could fail when a key was revoked
555469af35c12189525921abbc3de3cefb5f9f0fMark Andrews without deleting the unrevoked version. [RT #20638]
c5342425ea5568af04f4b87d5d9690453b21c9f1Mark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
b4bbf494183e4158b417d9200297ff0764af2f9dMark Andrews2776. [bug] Change #2762 was not correct. [RT #20647]
b4bbf494183e4158b417d9200297ff0764af2f9dMark Andrews2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
f3a4a5f8db3d9fd352a3e2eb6be779a78da03f52Mark Andrews in dnssec-keyfromlabel. [RT #20643]
f3a4a5f8db3d9fd352a3e2eb6be779a78da03f52Mark Andrews2774. [bug] Existing cache DB wasn't being reused after
2fb6d3782b548ba678cfb8ff09e0d1e49fafb84dMark Andrews reconfiguration. [RT #20629]
2fb6d3782b548ba678cfb8ff09e0d1e49fafb84dMark Andrews2773. [bug] In autosigned zones, the SOA could be signed
2fb6d3782b548ba678cfb8ff09e0d1e49fafb84dMark Andrews with the KSK. [RT #20628]
2fb6d3782b548ba678cfb8ff09e0d1e49fafb84dMark Andrews2772. [security] When validating, track whether pending data was from
bc09fd1365d1a48972fa99cd6ed2aa788a28ef33Mark Andrews the additional section or not and only return it if
bc09fd1365d1a48972fa99cd6ed2aa788a28ef33Mark Andrews validates as secure. [RT #20438]
36be0aad8ec241987e1866a547372eb28ee7dc09Mark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
36be0aad8ec241987e1866a547372eb28ee7dc09Mark Andrews corrupted when importing from key files [RT #20624]
36be0aad8ec241987e1866a547372eb28ee7dc09Mark Andrews2770. [cleanup] Add log messages to resolver.c to indicate events
36be0aad8ec241987e1866a547372eb28ee7dc09Mark Andrews causing FORMERR responses. [RT #20526]
33f91e248b67afa96c5b855ba3ace20b5d89dbd0Mark Andrews2769. [cleanup] Change #2742 was incomplete. [RT #19589]
51227d6f16840ae359701b5d56970a5f3860db5aEvan Hunt2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
51227d6f16840ae359701b5d56970a5f3860db5aEvan Hunt2767. [bug] named could crash on startup if a zone was
175a8414a785689cb028e6e133385dba9e1b9a95Evan Hunt configured with auto-dnssec and there was no
9e4811dc90cca1f6f2d1ef86182f9613add06df3Mark Andrews key-directory. [RT #20615]
12b791ae2018561482f3b68dd6658c2ad1a4d934Mark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
12b791ae2018561482f3b68dd6658c2ad1a4d934Mark Andrews socketmgr state if the socket is not pending on a
12b791ae2018561482f3b68dd6658c2ad1a4d934Mark Andrews read or write. [RT #20603]
080582dc4739cabf0170b54e9a453785d577e364Mark Andrews2765. [bug] Skip masters for which the TSIG key cannot be found.
3a71cd8ca3c4970b71ef503553eda2666ce3d2b1Mark Andrews2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
02ceed9f83f82f0de35c7bd73c27a33d4f0fe9cbMark Andrews2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
02ceed9f83f82f0de35c7bd73c27a33d4f0fe9cbMark Andrews2762. [bug] DLV validation failed with a local slave DLV zone.
32431c79c76257130e1b31223e59a614e19bea1bEvan Hunt2761. [cleanup] Enable internal symbol table for backtrace only for
8db83c1e908ac92a28ad0dd6dc2bdcff1d20084cWitold Krecicki systems that are known to work. Currently, BSD
8db83c1e908ac92a28ad0dd6dc2bdcff1d20084cWitold Krecicki variants, Linux and Solaris are supported. [RT# 20202]
ba340e446906b21925df63b0dec9b299ef093ad2Witold Krecicki2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
b62db16a580addacf9b2a4d0a6e272632ad5712aMark Andrews2759. [doc] Add information about .jbk/.jnw files to
b62db16a580addacf9b2a4d0a6e272632ad5712aMark Andrews the ARM. [RT #20303]
b7161f9898405faee05ba72a63ad10e4541f1346Mark Andrews2758. [bug] win32: Added a workaround for a windows 2008 bug
b7161f9898405faee05ba72a63ad10e4541f1346Mark Andrews that could cause the UDP client handler to shut
b7161f9898405faee05ba72a63ad10e4541f1346Mark Andrews down. [RT #19176]
b7161f9898405faee05ba72a63ad10e4541f1346Mark Andrews2757. [bug] dig: assertion failure could occur in connect
b7161f9898405faee05ba72a63ad10e4541f1346Mark Andrews timeout. [RT #20599]
6d609c3cbe7d91bf02ac60a4a34cc4bffa13a3e6Evan Hunt2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
6d609c3cbe7d91bf02ac60a4a34cc4bffa13a3e6Evan Hunt2755. [placeholder]
b83e886b3023c9a3bb40f20e399c3d2d40604eadEvan Hunt2754. [bug] Secure-to-insecure transitions failed when zone
b83e886b3023c9a3bb40f20e399c3d2d40604eadEvan Hunt was signed with NSEC3. [RT #20587]
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt2753. [bug] Removed an unnecessary warning that could appear when
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt building an NSEC chain. [RT #20589]
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt2752. [bug] Locking violation. [RT #20587]
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt2750. [bug] dig: assertion failure could occur when a server
adb0ac475d4a58404812eee3a158447decf9e026Tinderbox User didn't have an address. [RT #20579]
801707fe19600313a0b1f7845a518100f69e58b6Evan Hunt2749. [bug] ixfr-from-differences generated a non-minimal ixfr
529d8a7cf1960f96a78d1b2b004aa63aff80b16bMark Andrews for NSEC3 signed zones. [RT #20452]
529d8a7cf1960f96a78d1b2b004aa63aff80b16bMark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
d9d7b2657e2b688b2ad601a3ea0a23a4078c1f02Witold Krecicki as referrals. [RT #18884]
d9d7b2657e2b688b2ad601a3ea0a23a4078c1f02Witold Krecicki2747. [bug] Journal roll forwards failed to set the re-signing
1fe29e5d65d81d1ff0b94bfa7ce80f506a62af91Witold Krecicki time of RRSIGs correctly. [RT #20541]
d907426f0f5b6100cbe4d03e417f59ce67ff171bEvan Hunt2746. [port] hpux: address signed/unsigned expansion mismatch of
d907426f0f5b6100cbe4d03e417f59ce67ff171bEvan Hunt2745. [bug] configure script didn't probe the return type of
f0fe1930a2350c1110bff2203e48335c147ca52dEvan Hunt gai_strerror(3) correctly. [RT #20573]
f0fe1930a2350c1110bff2203e48335c147ca52dEvan Hunt2744. [func] Log if a query was over TCP. [RT #19961]
a78396e6522d807dceb81c09cfdbca9acee3cc00Evan Hunt2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
6ce370550225d4a9251346575bb7020145708bc2Tinderbox User for a insecure delegation.
7bc7cdd947a9f5671e8de77ef74b28bf35d15c8eEvan Hunt --- 9.7.0b2 released ---
55d61515ec5a64c19ecfbd8b554d02515c878f2bMark Andrews2742. [cleanup] Clarify some DNSSEC-related log messages in
1ddde9710ed9298bf8cd4dfd1921ec363e308f87Mark Andrews2741. [func] Allow the dnssec-keygen progress messages to be
1ddde9710ed9298bf8cd4dfd1921ec363e308f87Mark Andrews suppressed (dnssec-keygen -q). Automatically
2d5581de6e5d6606a8acef041ca808f4b8e24b1bMukund Sivaraman suppress the progress messages when stdin is not
2d5581de6e5d6606a8acef041ca808f4b8e24b1bMukund Sivaraman a tty. [RT #20474]
a217937e597bbdaa1805d13cf85c9a9d6131b884Tinderbox User2740. [placeholder]
3525200d9fb0e70aec4f6a3c7e0ed5a7dd8398afEvan Hunt2739. [cleanup] Clean up API for initializing and clearing trust
3525200d9fb0e70aec4f6a3c7e0ed5a7dd8398afEvan Hunt anchors for a view. [RT #20211]
3525200d9fb0e70aec4f6a3c7e0ed5a7dd8398afEvan Hunt2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
28303a06cec9c9c71ffb8164c85e47281dfca873Mark Andrews test. [RT #20453]
28303a06cec9c9c71ffb8164c85e47281dfca873Mark Andrews2737. [func] UPDATE requests can leak existence information.
4d8940486ca555f8308c503eef3bd479c0095eb8Mark Andrews2736. [func] Improve the performance of NSEC signed zones with
35c014cb1d151983c455ad1ac99093591cbda97aMark Andrews more than a normal amount of glue below a delegation.
a16f42441a0bdfc911aafe841a975af55181f2f0Mukund Sivaraman2735. [bug] dnssec-signzone could fail to read keys
a16f42441a0bdfc911aafe841a975af55181f2f0Mukund Sivaraman that were specified on the command line with
a16f42441a0bdfc911aafe841a975af55181f2f0Mukund Sivaraman full paths, but weren't in the current
61b1075ddbc2d32043531dd90c20043f419fcfb7Mark Andrews directory. [RT #20421]
f555b59e3678ba3e67201ef158b5f355e6d3ce13Mark Andrews2734. [port] cygwin: arpaname did not compile. [RT #20473]
b740318a42e7e9e9511c4a3213a81a51257c1ab9Mark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
8d9a134fe75c57052094b30ad43a20582ad71ebfMark Andrews2732. [func] Add optional filter-aaaa-on-v4 option, available
8d9a134fe75c57052094b30ad43a20582ad71ebfMark Andrews if built with './configure --enable-filter-aaaa'.
8d9a134fe75c57052094b30ad43a20582ad71ebfMark Andrews Filters out AAAA answers to clients connecting
8d9a134fe75c57052094b30ad43a20582ad71ebfMark Andrews via IPv4. (This is NOT recommended for general
c2a6e9d347ea5364041d4241e4683d076d4e091bMark Andrews use.) [RT #20339]
c2a6e9d347ea5364041d4241e4683d076d4e091bMark Andrews2731. [func] Additional work on change 2709. The key parser
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews will now ignore unrecognized fields when the
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews minor version number of the private key format
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews has been increased. It will reject any key with
e8555412f186ad05a064591bcb25c2f7d7395756Mark Andrews the major version number increased. [RT #20310]
f5b0ad3c8d4b665037b4eeda2fc24547c698c012Witold Krecicki2730. [func] Have dnssec-keygen display a progress indication
f5b0ad3c8d4b665037b4eeda2fc24547c698c012Witold Krecicki a la 'openssl genrsa' on standard error. Note
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when the first '.' is followed by a long stop
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews one has the choice between slow generation vs.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
8d49a1a0d1658952181cc686fc4dc62006baa1a7Mark Andrews TTL. [RT #20451]
8d49a1a0d1658952181cc686fc4dc62006baa1a7Mark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
97e13cc244a1fc67fd42c421c92ccead5e38a2f5Mark Andrews dnssec-signzone now warn immediately if asked to
97e13cc244a1fc67fd42c421c92ccead5e38a2f5Mark Andrews write into a nonexistent directory. [RT #20278]
9f5443280fcfd625a06f63a1b457ed2335840278Mark Andrews2727. [func] The 'key-directory' option can now specify a relative
9f5443280fcfd625a06f63a1b457ed2335840278Mark Andrews path. [RT #20154]
c1a72112b2391bd8f149c5f19bdb12fa0d39fef4Mark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
c1a72112b2391bd8f149c5f19bdb12fa0d39fef4Mark Andrews RSASHA256 and RSASHA512. [RT #20023]
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews2725. [doc] Added information about the file "managed-keys.bind"
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews to the ARM. [RT #20235]
990494909886f2cef94d3874f4dc4add03cece81Mark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
7d262a3647a517a86d6d83058aedd18b7a6b06dfMark Andrews were failing. [RT #20448]
96d49a84fff54fe19b430c56912db0a55cf3ded8Mark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
96d49a84fff54fe19b430c56912db0a55cf3ded8Mark Andrews isc_base64_totext(), didn't always mark regions of
f4c0d8db2b1a14e62660fa92f8aaf614b99d7f2fWitold Krecicki memory as fully consumed after conversion. [RT #20445]
10966da999f8f7f364418aa446d8ead9c8a761cfMark Andrews2722. [bug] Ensure that the memory associated with the name of
f0e7471845e0c9f1509fb91cae4a8e6655132acbEvan Hunt a node in a rbt tree is not altered during the life
047e477d27b7faa9a063fde549e2b2c141f2291bWitold Krecicki of the node. [RT #20431]
322efcb27d26cb5949ceabf6d3b93d0a2e25746fWitold Krecicki2721. [port] Have dst__entropy_status() prime the random number
322efcb27d26cb5949ceabf6d3b93d0a2e25746fWitold Krecicki generator. [RT #20369]
4681ab1fc2c40e1d70fae38e64630c72c51c300eWitold Krecicki2720. [bug] RFC 5011 trust anchor updates could trigger an
4681ab1fc2c40e1d70fae38e64630c72c51c300eWitold Krecicki assert if the DNSKEY record was unsigned. [RT #20406]
4681ab1fc2c40e1d70fae38e64630c72c51c300eWitold Krecicki2719. [func] Skip trusted/managed keys for unsupported algorithms.
b56bd9b59f590ade778ac6621fb5bede4001d8aeMark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
96beefd76f597b77d4fcd51f8d766e5e59a2d216Mark Andrews incorrect. [RT #20394]
3f06b888ae80a8724b300ab39a4276537b0241cdWitold Krecicki2717. [bug] named failed to update the NSEC/NSEC3 record when
3f06b888ae80a8724b300ab39a4276537b0241cdWitold Krecicki the last private type record was removed as a result
3f06b888ae80a8724b300ab39a4276537b0241cdWitold Krecicki of completing the signing the zone with a key.
948fe5822b9c8489856bc38b3063e30e9d34fcd3Mark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
ecff557eebd67a717ab6fd3323af27363ee3273dMark Andrews --- 9.7.0b1 released ---
fbc50678e18eced2c1324bd968e77d4d7737d0caMark Andrews2715. [bug] Require OpenSSL support to be explicitly disabled.
fbc50678e18eced2c1324bd968e77d4d7737d0caMark Andrews2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
c2afbab9dc8de73c85b32624a8364bc7532d1fa9Witold Krecicki2713. [bug] powerpc: atomic operations missing asm("ics") /
51ec0decc11beda6b903fbfa18c35edef09ad5feWitold Krecicki __isync() calls.
3d0b7d5cc3428dedf4486e949fbd536eef494b99Evan Hunt2712. [func] New 'auto-dnssec' zone option allows zone signing
3d0b7d5cc3428dedf4486e949fbd536eef494b99Evan Hunt to be fully automated in zones configured for
3d0b7d5cc3428dedf4486e949fbd536eef494b99Evan Hunt dynamic DNS. 'auto-dnssec allow;' permits a zone
3d0b7d5cc3428dedf4486e949fbd536eef494b99Evan Hunt to be signed by creating keys for it in the
3d0b7d5cc3428dedf4486e949fbd536eef494b99Evan Hunt key-directory and using 'rndc sign <zone>'.
3d0b7d5cc3428dedf4486e949fbd536eef494b99Evan Hunt 'auto-dnssec maintain;' allows that too, plus it
4d506ae0d1671e5a1272ef1ef13986af01616ac4Mark Andrews also keeps the zone's DNSSEC keys up to date
9268297baa1429d8851c36972d918dde66544746Mark Andrews according to their timing metadata. [RT #19943]
9268297baa1429d8851c36972d918dde66544746Mark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
d7ab0204e26098847232548f03833e185db0b99fMark Andrews build. [RT #20372]
d7ab0204e26098847232548f03833e185db0b99fMark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
aabcb1fde0ca255ff30f0a5c10cbd39f798cc5b7Mark Andrews zone option cause a zone to be signed with only KSKs
aabcb1fde0ca255ff30f0a5c10cbd39f798cc5b7Mark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
aabcb1fde0ca255ff30f0a5c10cbd39f798cc5b7Mark Andrews the size of a DNSKEY answer. [RT #20340]
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki2709. [func] Added some data fields, currently unused, to the
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki private key file format, to allow implementation
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki of explicit key rollover in a future release
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki without impairing backward or forward compatibility.
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki2708. [func] Insecure to secure and NSEC3 parameter changes via
7a00d69909ace5dc11bcff9c1e07c311f92a7f8eWitold Krecicki update are now fully supported and no longer require
ac110848296c18b3a3bfaa89bdee2dd00755b36fMark Andrews defines to enable. We now no longer overload the
ac110848296c18b3a3bfaa89bdee2dd00755b36fMark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
ac110848296c18b3a3bfaa89bdee2dd00755b36fMark Andrews apex. Secure to insecure changes are controlled by
ac110848296c18b3a3bfaa89bdee2dd00755b36fMark Andrews by the named.conf option 'secure-to-insecure'.
ede52ba98d02bc1ac4483a77d403ff1d64a003ceMark Andrews Warning: If you had previously enabled support by
7100602261f22ed9f5955f8acfbc59f37ac608bbMark Andrews adding defines at compile time to BIND 9.6 you should
a0f5a5e3c5c6dd29b18bc06fea0d02ae7fc24ac9Mark Andrews ensure that all changes that are in progress have
0cbe448914be61d0f92b1e9d3adaeba87d25639dEvan Hunt completed prior to upgrading to BIND 9.7. BIND 9.7
0cbe448914be61d0f92b1e9d3adaeba87d25639dEvan Hunt is not backwards compatible.
0cbe448914be61d0f92b1e9d3adaeba87d25639dEvan Hunt2707. [func] dnssec-keyfromlabel no longer require engine name
0cbe448914be61d0f92b1e9d3adaeba87d25639dEvan Hunt to be specified in the label if there is a default
9dede25430218a1f683dfef36f04ac7cf5bbd9e8Mark Andrews engine or the -E option has been used. Also, it
10f8dc8456ba073fdb2bfc5168d78de574debeeeMark Andrews now uses default algorithms as dnssec-keygen does
9dede25430218a1f683dfef36f04ac7cf5bbd9e8Mark Andrews (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
d3600bb89d32a7e0d943691d3cad5c569ef6158dMark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
d3600bb89d32a7e0d943691d3cad5c569ef6158dMark Andrews trigger an assert. [RT #20368]
7472cd350fe9245553e9da7f2df8e7e364d136abMukund Sivaraman2705. [placeholder]
7472cd350fe9245553e9da7f2df8e7e364d136abMukund Sivaraman2704. [bug] Serial of dynamic and stub zones could be inconsistent
7472cd350fe9245553e9da7f2df8e7e364d136abMukund Sivaraman with their SOA serial. [RT #19387]
049a49c2956dd9cc9b82974e2bbe77c57fcc73dbMark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
049a49c2956dd9cc9b82974e2bbe77c57fcc73dbMark Andrews for all binaries which can take benefit of
049a49c2956dd9cc9b82974e2bbe77c57fcc73dbMark Andrews crypto hardware. [RT #20230]
e2047969decfc0c3fc1a946ccade993cab9c9315Mark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
c3beecc1bcc6e1c15176a699b41ca77ef6533c25Mark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
c3beecc1bcc6e1c15176a699b41ca77ef6533c25Mark Andrews supported TSIG key algorithm. [RT #18046]
0be436fc397396ed490182f022d02b46c7a50271Mark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
53a70bef3508acb1517b8eb57f61a81280c11509Mark Andrews2699. [bug] Missing lock in rbtdb.c. [RT #20037]
7100602261f22ed9f5955f8acfbc59f37ac608bbMark Andrews2698. [placeholder]
e846f127d64ea690b789efa6e5b4ff9f64cf3235Witold Krecicki2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
e846f127d64ea690b789efa6e5b4ff9f64cf3235Witold Krecicki S_IFREG are defined after including <isc/stat.h>.
28053af04c5121ec234c320e4c76273305816e7aEvan Hunt2696. [bug] named failed to successfully process some valid
28053af04c5121ec234c320e4c76273305816e7aEvan Hunt acl constructs. [RT #20308]
5ac427050fa0e303171133ce3855b284ab4cfbb7Mark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
5ac427050fa0e303171133ce3855b284ab4cfbb7Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
594d15df254304ef6705a9fc028bcd34328bce42Mark Andrews callback functon for isc_socket_fdwatchcreate)
594d15df254304ef6705a9fc028bcd34328bce42Mark Andrews to include information about the direction (read
594d15df254304ef6705a9fc028bcd34328bce42Mark Andrews or write) and add isc_socket_fdwatchpoke.
19d80ce5844e00a021643759adcbe27c11b485a0Witold Krecicki2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
dc2a4887c40b1ee361cef51e188b386e19497e01Witold Krecicki2693. [port] Add some noreturn attributes. [RT #20257]
08e36aa5a5c7697a839f83831fccf8fb3f792848Mark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
08e36aa5a5c7697a839f83831fccf8fb3f792848Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
08e36aa5a5c7697a839f83831fccf8fb3f792848Mark Andrews chain when re-signing a previously-signed zone.
f1a2709aad7baa4161fdb6f63edf99b0150af252Evan Hunt Use -u to modify NSEC3 parameters or switch
f1a2709aad7baa4161fdb6f63edf99b0150af252Evan Hunt between NSEC and NSEC3. [RT #20304]
f1a2709aad7baa4161fdb6f63edf99b0150af252Evan Hunt2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
402c63495c40b2289de8daee5a396fd392cea080Mark Andrews2689. [bug] Correctly handle snprintf result. [RT #20306]
b0ffe328620db4ead7079e8cd26a584f5b947754Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
402c63495c40b2289de8daee5a396fd392cea080Mark Andrews to decide to fetch the destination address. [RT #20305]
699f790c49d03a9ef3c3234a72d272bb469203e8Evan Hunt2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
699f790c49d03a9ef3c3234a72d272bb469203e8Evan Hunt Also, added warnings when revoking a ZSK, as this is
66074f152f2a42218e6d54f50d4fa3717940c299Evan Hunt not defined by protocol (but is legal). [RT #19943]
66074f152f2a42218e6d54f50d4fa3717940c299Evan Hunt2686. [bug] dnssec-signzone should clean the old NSEC chain when
66074f152f2a42218e6d54f50d4fa3717940c299Evan Hunt signing with NSEC3 and vice versa. [RT #20301]
66074f152f2a42218e6d54f50d4fa3717940c299Evan Hunt2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
48bf87ba83396aae2251646aed9a9cac183e5780Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
cd6eeeb827f65df4bfb3e7ed3454655650f7dba7Mark Andrews +adflag and +cdflag. [RT #19305]
aa5506eda809dfd25b4e1ee6edb5285a77958d2cEvan Hunt2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
aa5506eda809dfd25b4e1ee6edb5285a77958d2cEvan Hunt the NSEC3 parameters used to sign the zone change.
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt2682. [bug] "configure --enable-symtable=all" failed to
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt build. [RT #20282]
f6096b958c8b58c4709860d7c4dcdde5deeacb7aEvan Hunt2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
aa5506eda809dfd25b4e1ee6edb5285a77958d2cEvan Hunt decoded. [RT #20269]
16591ba9ae26e4d6e1bc0dd4776725326174abaaMark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
16591ba9ae26e4d6e1bc0dd4776725326174abaaMark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
3cd204c4a46f21bf2a38f35e79af45ac595be943Evan Hunt format. [RT #20031]
3cd204c4a46f21bf2a38f35e79af45ac595be943Evan Hunt2678. [func] Treat DS queries as if "minimal-response yes;"
8fcf2413e99597b6690b6a352aa12842f9be27e5Mark Andrews was set. [RT #20258]
8fcf2413e99597b6690b6a352aa12842f9be27e5Mark Andrews2677. [func] Changes to key metadata behavior:
7660b370c363d08a43ad713a84f94798f3fc4879Mark Andrews - Keys without "publish" or "active" dates set will
7660b370c363d08a43ad713a84f94798f3fc4879Mark Andrews no longer be used for smart signing. However,
7100602261f22ed9f5955f8acfbc59f37ac608bbMark Andrews those dates will be set to "now" by default when
651be63a1111c50942533016b3a2a6403d74cd9eMark Andrews a key is created; to generate a key but not use
651be63a1111c50942533016b3a2a6403d74cd9eMark Andrews it yet, use dnssec-keygen -G.
b1888f0e2ed6bebe79822de83bf67f5c440a22e1Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
6214c3c93a43dc86f080dc0219e4560b69721f53Mark Andrews sets the time when a key is no longer used for
6214c3c93a43dc86f080dc0219e4560b69721f53Mark Andrews signing but is still published.
448884248519a8edade1b51aa7d20140b12764a9Evan Hunt - The "unpublished" date (-U) is deprecated in
448884248519a8edade1b51aa7d20140b12764a9Evan Hunt favour of "deleted" (-D).
395e6865d5b0ec13c1e4cc3947598153aa4e4914Evan Hunt2676. [bug] --with-export-installdir should have been
39225b4b510385f0cee915f0622574b76f5d6082Evan Hunt --with-export-includedir. [RT #20252]
cf24cbd837617c5cb89f04ba97b262be21a925bfEvan Hunt2675. [bug] dnssec-signzone could crash if the key directory
cf24cbd837617c5cb89f04ba97b262be21a925bfEvan Hunt did not exist. [RT #20232]
ddf3342cca1a2dbd98c5443cbb9b184c428cdda5Evan Hunt --- 9.7.0a3 released ---
558278974eb4a1021943e6bbbc6c7d80dc3707fdMark Andrews2674. [bug] "dnssec-lookaside auto;" crashed if named was built
558278974eb4a1021943e6bbbc6c7d80dc3707fdMark Andrews without openssl. [RT #20231]
132a57117978816eebf6f8c33b39bdcfcd62fd7aEvan Hunt2673. [bug] The managed-keys.bind zone file could fail to
132a57117978816eebf6f8c33b39bdcfcd62fd7aEvan Hunt load due to a spurious result from sync_keyzone()
0993cd5f2227c1aa6a8554f4a9a847efabbcfcb8Mark Andrews2672. [bug] Don't enable searching in 'host' when doing reverse
0993cd5f2227c1aa6a8554f4a9a847efabbcfcb8Mark Andrews lookups. [RT #20218]
b8dcc13bc5d49aa18a80179851cf0d7a81c54887Mark Andrews2671. [bug] Add support for PKCS#11 providers not returning
756c6433301f2f5dad3372af2bef56c0b28e99b7Mark Andrews the public exponent in RSA private keys
756c6433301f2f5dad3372af2bef56c0b28e99b7Mark Andrews (OpenCryptoki for instance) in
8e4d56d45dc6daa9dfc5c33b67138ecb9d5bf004Tinderbox User dnssec-keyfromlabel. [RT #19294]
1add4a7939a550d50b156f72631ea374b6182149Mark Andrews2670. [bug] Unexpected connect failures failed to log enough
381c77fd82ea5a51ee52929ec43c1f3adb27686aMark Andrews information to be useful. [RT #20205]
7c525954642f8fb3698b555115edb09fe3bd3354Mark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
7c525954642f8fb3698b555115edb09fe3bd3354Mark Andrews Update PKCS#11 patch to be against openssl-0.9.8i.
7c525954642f8fb3698b555115edb09fe3bd3354Mark Andrews2668. [func] Several improvements to dnssec-* tools, including:
33a4294f442f7505c8e2453beb422b5928ec697cMark Andrews - dnssec-keygen and dnssec-settime can now set key
33a4294f442f7505c8e2453beb422b5928ec697cMark Andrews metadata fields 0 (to unset a value, use "none")
33a4294f442f7505c8e2453beb422b5928ec697cMark Andrews - dnssec-revoke sets the revocation date in
d6357f09aacf518df14875fffa819607daa05d17Mark Andrews addition to the revoke bit
d6357f09aacf518df14875fffa819607daa05d17Mark Andrews - dnssec-settime can now print individual metadata
d6357f09aacf518df14875fffa819607daa05d17Mark Andrews fields instead of always printing all of them,
59328c76745ee6d2df047e3f072b118258b87cb6Mukund Sivaraman and can print them in unix epoch time format for
59328c76745ee6d2df047e3f072b118258b87cb6Mukund Sivaraman use by scripts
ade0aa3cb0fafbbe9fffb29f9abba4ce85890c3fMark Andrews2667. [func] Add support for logging stack backtrace on assertion
275265ab27815d2261ebf68b48201fb7bffdf426Mukund Sivaraman failure (not available for all platforms). [RT #19780]
8398f0015625495e228eea195e3adccfcf59ffccMark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
023ba1e6ef28d888ad0030fd72937fb4de2129bdEvan Hunt (API change from 9.7.0a2). [RT #20196]
023ba1e6ef28d888ad0030fd72937fb4de2129bdEvan Hunt2665. [func] Clarify syntax for managed-keys {} statement, add
44c86318ed432af96848269250930297eea2bba3Evan Hunt ARM documentation about RFC 5011 support. [RT #19874]
44c86318ed432af96848269250930297eea2bba3Evan Hunt2664. [bug] create_keydata() and minimal_update() in zone.c
44c86318ed432af96848269250930297eea2bba3Evan Hunt didn't properly check return values for some
806e05d28a479291110a9fdb1788e675a56fc364Mark Andrews functions. [RT #19956]
ce7216c40ac973ed9ac5a90d75cd41b14b789725Mark Andrews2663. [func] win32: allow named to run as a service using
455c0848f80a8acda27aad1466c72987cafaa029Mark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
455c0848f80a8acda27aad1466c72987cafaa029Mark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
455c0848f80a8acda27aad1466c72987cafaa029Mark Andrews returned a misleading error code when lwresd was
f9da4a8e543cf895b6171773e75d343b2914a7e7Mark Andrews down. [RT #20028]
f9da4a8e543cf895b6171773e75d343b2914a7e7Mark Andrews2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
f9da4a8e543cf895b6171773e75d343b2914a7e7Mark Andrews creating lwres context. [RT #20029]
293a9e997803ebcf4e6ade8c972465bf6330f534Mukund Sivaraman2660. [func] Add a new set of DNS libraries for non-BIND9
293a9e997803ebcf4e6ade8c972465bf6330f534Mukund Sivaraman applications. See README.libdns. [RT #19369]
5995fec51cc8bb7e53804e4936e60aa1537f3673Mukund Sivaraman2659. [doc] Clarify dnssec-keygen doc: key name must match zone
5995fec51cc8bb7e53804e4936e60aa1537f3673Mukund Sivaraman name for DNSSEC keys. [RT #19938]
5995fec51cc8bb7e53804e4936e60aa1537f3673Mukund Sivaraman2658. [bug] dnssec-settime and dnssec-revoke didn't process
a2b15b3305acd52179e6f3dc7d073b07fbc40b8eMark Andrews key file paths correctly. [RT #20078]
a2b15b3305acd52179e6f3dc7d073b07fbc40b8eMark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
d372f426ca42ee2bc7bcb1f76a52c4f154de1f9bMark Andrews log level to debug 1. [RT #20058]
79a55d4f4dcf3d6f617523228503d8584b72a3a3Mukund Sivaraman2656. [func] win32: add a "tools only" check box to the installer
79a55d4f4dcf3d6f617523228503d8584b72a3a3Mukund Sivaraman which causes it to only install dig, host, nslookup,
79a55d4f4dcf3d6f617523228503d8584b72a3a3Mukund Sivaraman nsupdate and relevant DLLs. [RT #19998]
0c29904b27c9ab3b85ecbde159b22ae1323bdbcdMukund Sivaraman2655. [doc] Document that key-directory does not affect
0c29904b27c9ab3b85ecbde159b22ae1323bdbcdMukund Sivaraman bind.keys, rndc.key or session.key. [RT #20155]
f3ad877eb05befbc862b0233d985758c0caef29aEvan Hunt2654. [bug] Improve error reporting on duplicated names for
f3ad877eb05befbc862b0233d985758c0caef29aEvan Hunt deny-answer-xxx. [RT #20164]
d88ba937124b2a4f8a074fc2aef9caf2022308b4Mark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
d88ba937124b2a4f8a074fc2aef9caf2022308b4Mark Andrews not found rather than out of memory. [RT #18033]
8d00c5ab2c16985457947ddb0376707ab7094b80Mark Andrews2652. [func] Provide more detail about what record is being
8d00c5ab2c16985457947ddb0376707ab7094b80Mark Andrews deleted. [RT #20061]
ec450fde7cee684f37b0a59d770330c700419610Evan Hunt2651. [bug] Dates could print incorrectly in K*.key files on
ec450fde7cee684f37b0a59d770330c700419610Evan Hunt 64-bit systems. [RT #20076]
d1dbf6b20fdcfa95acd75cdb96fcd57067a31144Mukund Sivaraman2650. [bug] Assertion failure in dnssec-signzone when trying
d1dbf6b20fdcfa95acd75cdb96fcd57067a31144Mukund Sivaraman to read keyset-* files. [RT #20075]
3fe17d62e32017b643b852ede1b234271ee308e1Evan Hunt2649. [bug] Set the domain for forward only zones. [RT #19944]
f02c22d58ac88777655e0b407b22b07864d39184Evan Hunt2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
f02c22d58ac88777655e0b407b22b07864d39184Evan Hunt2647. [bug] Remove unnecessary SOA updates when a new KSK is
5f4f7c688e0cca18edd67e9760b266ce8f67e29cTinderbox User added. [RT #19913]
40401165e4646f1624175ac80bf9b51826ab67ecMark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
df9a49ee07f7629ec6abd2e3bd0dee600d7e2ab4Evan Hunt2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
e073205a884d3762fdc678d4b8a61b627a4070abEvan Hunt which default to 64 bits. [RT #19927]
e073205a884d3762fdc678d4b8a61b627a4070abEvan Hunt --- 9.7.0a2 released ---
832ab79d1f8bc4edf638780b306888da30ac3a1eMark Andrews2644. [bug] Change #2628 caused a regression on some systems;
832ab79d1f8bc4edf638780b306888da30ac3a1eMark Andrews named was unable to write the PID file and would
9d85a773829484832f762a9088a7dafd6794aa39Mark Andrews fail on startup. [RT #20001]
9d85a773829484832f762a9088a7dafd6794aa39Mark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt2642. [bug] nsupdate could dump core on solaris when reading
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt improperly formatted key files. [RT #20015]
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt2641. [bug] Fixed an error in parsing update-policy syntax,
8ede7a974b126b3afe766c11ca621aee52c9889aEvan Hunt added a regression test to check it. [RT #20007]
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt2640. [security] A specially crafted update packet will cause named
f8432e3f249dbec36394539ca1f3cb25bf33abfeMark Andrews to exit. [RT #20000]
630b2d0c5a04cfc8b08d4585b7a0d997c00d7341Evan Hunt2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
630b2d0c5a04cfc8b08d4585b7a0d997c00d7341Evan Hunt2638. [bug] Install arpaname. [RT #19957]
630b2d0c5a04cfc8b08d4585b7a0d997c00d7341Evan Hunt2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
1d383fd4b23fc7031e562bf5db02e3018c5d0b9eMark Andrews2636. [func] Simplify zone signing and key maintenance with the
1d383fd4b23fc7031e562bf5db02e3018c5d0b9eMark Andrews dnssec-* tools. Major changes:
1d383fd4b23fc7031e562bf5db02e3018c5d0b9eMark Andrews - all dnssec-* tools now take a -K option to
3ecc17d5519cc5b45cba3344344f296f3ff57776Mark Andrews specify a directory in which key files will be
3ecc17d5519cc5b45cba3344344f296f3ff57776Mark Andrews - DNSSEC can now store metadata indicating when
9b789c54f8829b867c4a888c47bd2310a790415aEvan Hunt they are scheduled to be published, activated,
9b789c54f8829b867c4a888c47bd2310a790415aEvan Hunt revoked or removed; these values can be set by
9b789c54f8829b867c4a888c47bd2310a790415aEvan Hunt dnssec-keygen or overwritten by the new
d40154cab71b0c774d80df2c0091e1f8edcaa7d4Evan Hunt dnssec-settime command
d40154cab71b0c774d80df2c0091e1f8edcaa7d4Evan Hunt - dnssec-signzone -S (for "smart") option reads key
d40154cab71b0c774d80df2c0091e1f8edcaa7d4Evan Hunt metadata and uses it to determine automatically
d40154cab71b0c774d80df2c0091e1f8edcaa7d4Evan Hunt which keys to publish to the zone, use for
2879ee2c72638ea190728f931ce286760caa4521Evan Hunt signing, revoke, or remove from the zone
2879ee2c72638ea190728f931ce286760caa4521Evan Hunt2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
6bd794171f2ba0ee93b99ccbf80378959f4e965bEvan Hunt2634. [port] win32: Add support for libxml2, enable
73fbd4c9d3e65621eb32a8e01659532f131de690Mark Andrews statschannel. [RT #19773]
73fbd4c9d3e65621eb32a8e01659532f131de690Mark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
fc7bce5f350aa119d4c500fd5b35c47b14b539efMark Andrews2632. [func] util/kit.sh: warn if documentation appears to be out of
b4ccec331dbd81581c6226a54847385a27d9eb25Evan Hunt date. [RT #19922]
bb5d14d7243d71e03d262ff175b355b52873e195Evan Hunt2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
bb5d14d7243d71e03d262ff175b355b52873e195Evan Hunt [RT #19926 ]
bb5d14d7243d71e03d262ff175b355b52873e195Evan Hunt2630. [func] Improved syntax for DDNS autoconfiguration: use
bb5d14d7243d71e03d262ff175b355b52873e195Evan Hunt "update-policy local;" to switch on local DDNS in a
c8b968f4144a271213756cc33e8062b9efdd7441Evan Hunt zone. (The "ddns-autoconf" option has been removed.)
c8b968f4144a271213756cc33e8062b9efdd7441Evan Hunt2629. [port] Check for seteuid()/setegid(), use setresuid()/
41494939b62d74fb159009f28428df23e5fc70e3Evan Hunt setresgid() if not present. [RT #19932]
41494939b62d74fb159009f28428df23e5fc70e3Evan Hunt2628. [port] linux: Allow /var/run/named/named.pid to be opened
41494939b62d74fb159009f28428df23e5fc70e3Evan Hunt at startup with reduced capabilities in operation.
3bcd09b4162ccd383b4b20e3b5306b3c317c9795Evan Hunt2627. [bug] Named aborted if the same key was included in
292eb9c4e4fc51aec911e72821735a123a8c252aMark Andrews trusted-keys more than once. [RT #19918]
292eb9c4e4fc51aec911e72821735a123a8c252aMark Andrews2626. [bug] Multiple trusted-keys could trigger an assertion
292eb9c4e4fc51aec911e72821735a123a8c252aMark Andrews failure. [RT #19914]
1b3d21180244529f0099894fe9d29beb3f11efb3Mark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
fbed5f0f44515f5b3ca499a3466c875507852970Evan Hunt2624. [func] 'named-checkconf -p' will print out the parsed
fbed5f0f44515f5b3ca499a3466c875507852970Evan Hunt configuration. [RT #18871]
fbed5f0f44515f5b3ca499a3466c875507852970Evan Hunt2623. [bug] Named started searches for DS non-optimally. [RT #19915]
4fa9eaf0734e892431e78179bdcc5251c9b6aa7dMark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
49762dffc45b6c02abe5d131cb7c49369cf13e09Mark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
49762dffc45b6c02abe5d131cb7c49369cf13e09Mark Andrews2620. [bug] Delay thawing the zone until the reload of it has
49762dffc45b6c02abe5d131cb7c49369cf13e09Mark Andrews completed successfully. [RT #19750]
f647c0df9fd334b19a5bdc9c252f90d94c0abf1eMark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
ecc06cbc32c5a2b91a17e65c1820c9c66313d35cMukund Sivaraman maintenance. The new "managed-keys" statement can
ecc06cbc32c5a2b91a17e65c1820c9c66313d35cMukund Sivaraman be used in place of "trusted-keys" for zones which
ecc06cbc32c5a2b91a17e65c1820c9c66313d35cMukund Sivaraman support this protocol. (Note: this syntax is
94c7301f6f0ada7aa84ede5808ab8fdec5bae6b5Mark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
505d311709be77b2bd6ebb2aead84771588f9c29Mark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
505d311709be77b2bd6ebb2aead84771588f9c29Mark Andrews loop infinitely. [RT #19847]
5d79b60fc5e4dad4f04da39570517d20a2425f8bMukund Sivaraman2617. [bug] ifconfig.sh failed to emit an error message when
5d79b60fc5e4dad4f04da39570517d20a2425f8bMukund Sivaraman run from the wrong location. [RT #19375]
5d79b60fc5e4dad4f04da39570517d20a2425f8bMukund Sivaraman2616. [bug] 'host' used the nameservers from resolv.conf even
5d79b60fc5e4dad4f04da39570517d20a2425f8bMukund Sivaraman when a explicit nameserver was specified. [RT #19852]
5d79b60fc5e4dad4f04da39570517d20a2425f8bMukund Sivaraman2615. [bug] "__attribute__((unused))" was in the wrong place
322e6b5be784d79d15fea9db9440dd821162c574Mark Andrews for ia64 gcc builds. [RT #19854]
27bc16fcdc67f9afefefb54ae98dfdae3a5bc1f8Mukund Sivaraman2614. [port] win32: 'named -v' should automatically be executed
27bc16fcdc67f9afefefb54ae98dfdae3a5bc1f8Mukund Sivaraman in the foreground. [RT #19844]
5b13a593fe7d8055992bd12aeb399bdb06e2a533Mukund Sivaraman2613. [placeholder]
95bef099e9762c8078c0ba9749293b488727dc58Mark Andrews --- 9.7.0a1 released ---
6c1f9f5c71ff526402f3b3e87749a9ddf102f75eTinderbox User2612. [func] Add default values for the arguments to
95bef099e9762c8078c0ba9749293b488727dc58Mark Andrews dnssec-keygen. Without arguments, it will now
464c2c673b879071da66cab5a627baf35c5e0f90Evan Hunt generate a 1024-bit RSASHA1 zone-signing key,
464c2c673b879071da66cab5a627baf35c5e0f90Evan Hunt or with the -f KSK option, a 2048-bit RSASHA1
464c2c673b879071da66cab5a627baf35c5e0f90Evan Hunt key-signing key. [RT #19300]
226dd20bbd6c6bdeadffa71361d9a0ec61308d69Evan Hunt2611. [func] Add -l option to dnssec-dsfromkey to generate
226dd20bbd6c6bdeadffa71361d9a0ec61308d69Evan Hunt DLV records instead of DS records. [RT #19300]
10d7ab44cc72170c527dde8cc9e049e046342769Mark Andrews2610. [port] sunos: Change #2363 was not complete. [RT #19796]
4071efbec0e87b987aaf109f1ae8050aa8ecbcb8Evan Hunt2609. [func] Simplify the configuration of dynamic zones:
4071efbec0e87b987aaf109f1ae8050aa8ecbcb8Evan Hunt - add ddns-confgen command to generate
4071efbec0e87b987aaf109f1ae8050aa8ecbcb8Evan Hunt configuration text for named.conf
4071efbec0e87b987aaf109f1ae8050aa8ecbcb8Evan Hunt - add zone option "ddns-autoconf yes;", which
4071efbec0e87b987aaf109f1ae8050aa8ecbcb8Evan Hunt causes named to generate a TSIG session key
4071efbec0e87b987aaf109f1ae8050aa8ecbcb8Evan Hunt and allow updates to the zone using that key
b6214feb63f48e9c08f16394ae5b6902b45b9c38Evan Hunt - add '-l' (localhost) option to nsupdate, which
b6214feb63f48e9c08f16394ae5b6902b45b9c38Evan Hunt causes nsupdate to connect to a locally-running
b6214feb63f48e9c08f16394ae5b6902b45b9c38Evan Hunt named process using the session key generated
26177be2946c99a34096b7d8c202139dfc0e9760Mark Andrews2608. [func] Perform post signing verification checks in
8e73941f33fad57111142a62d99717abc001912eMark Andrews dnssec-signzone. These can be disabled with -P.
5b1c7ef35bb495820360182b5192689f33f1cc7dMark Andrews The post sign verification test ensures that for each
5b1c7ef35bb495820360182b5192689f33f1cc7dMark Andrews algorithm in use there is at least one non revoked
5b1c7ef35bb495820360182b5192689f33f1cc7dMark Andrews self signed KSK key. That all revoked KSK keys are
913d976eca8751851111c0b4357f650295d4aa3dMark Andrews self signed. That all records in the zone are signed
913d976eca8751851111c0b4357f650295d4aa3dMark Andrews by the algorithm. [RT #19653]
7bc21557f3583bab18fd9a002d115aaa5faa5561Mukund Sivaraman2607. [bug] named could incorrectly delete NSEC3 records for
7bc21557f3583bab18fd9a002d115aaa5faa5561Mukund Sivaraman empty nodes when processing a update request.
7bc21557f3583bab18fd9a002d115aaa5faa5561Mukund Sivaraman2606. [bug] "delegation-only" was not being accepted in
7bc21557f3583bab18fd9a002d115aaa5faa5561Mukund Sivaraman delegation-only type zones. [RT #19717]
a727cdff50383b98a150922e16a470cc63225309Tinderbox User2605. [bug] Accept DS responses from delegation only zones.
268c4e79c40845fb0005c44d177497bf5fad4518Mark Andrews [RT # 19296]
c8821d124c532e0a65752b378f924d4259499fd3Mark Andrews2604. [func] Add support for DNS rebinding attack prevention through
c8821d124c532e0a65752b378f924d4259499fd3Mark Andrews new options, deny-answer-addresses and
c8821d124c532e0a65752b378f924d4259499fd3Mark Andrews deny-answer-aliases. Based on contributed code from
63042d5b579ae3d43104133007e55c224c698904Evan Hunt JD Nurmi, Google. [RT #18192]
58f7af60e79a5aaf58f6a8861c306d4c617fb1d1Mukund Sivaraman2603. [port] win32: handle .exe extension of named-checkzone and
58f7af60e79a5aaf58f6a8861c306d4c617fb1d1Mukund Sivaraman named-comilezone argv[0] names under windows.
58f7af60e79a5aaf58f6a8861c306d4c617fb1d1Mukund Sivaraman2602. [port] win32: fix debugging command line build of libisccfg.
9b17fd447c684a84b2f5fbfb04ad6e890ae2078cMukund Sivaraman2601. [doc] Mention file creation mode mask in the
9b17fd447c684a84b2f5fbfb04ad6e890ae2078cMukund Sivaraman named manual page.
9b17fd447c684a84b2f5fbfb04ad6e890ae2078cMukund Sivaraman2600. [doc] ARM: miscellaneous reformatting for different
e13d04fda918c0c14c2247475bb99e0760d9a6a4Evan Hunt page widths. [RT #19574]
b51391848127d0303bd385a555c76aef57d1b4ebEvan Hunt2599. [bug] Address rapid memory growth when validation fails.
35928b7e1af8ea4d01a2855ab833dfe59d2345faMukund Sivaraman2598. [func] Reserve the -F flag. [RT #19657]
bfd4b9e11aa9e8c2b43022a6b7a896b26bd5d7a0Witold Krecicki2597. [bug] Handle a validation failure with a insecure delegation
29868ebbe3c7bc06f833e329ea190dc442331bf1Mark Andrews from a NSEC3 signed master/slave zone. [RT #19464]
29868ebbe3c7bc06f833e329ea190dc442331bf1Mark Andrews2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
92cc6acdff1ecbf157e4ab0efe3f79367233f022Mark Andrews long, leading to inefficient memory usage or rejecting
92cc6acdff1ecbf157e4ab0efe3f79367233f022Mark Andrews newer cache entries in the worst case. [RT #19563]
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews2594. [func] Have rndc warn if using its default configuration
e939674d53a127ddeeaf4b41fd72933f0b493308Mark Andrews file when the key file also exists. [RT #19424]
6b8519147a5c24b4a5942042e83fd539d0d445ccEvan Hunt2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
09f82f50798e170b172e6ba358ed123536243839Evan Hunt2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
09f82f50798e170b172e6ba358ed123536243839Evan Hunt2591. [bug] named could die when processing a update in
8475bed9de77920f884f1ae296f581efbd1e42f8Mark Andrews removed_orphaned_ds(). [RT #19507]
8475bed9de77920f884f1ae296f581efbd1e42f8Mark Andrews2590. [func] Report zone/class of "update with no effect".
821ff5e8fa1df2e09fea157ee3e298eef6cf4ec9Evan Hunt2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
f06b6a9b14509a3b473f52dd797bc490f6f6511dMark Andrews2588. [bug] SO_REUSEADDR could be set unconditionally after failure
f06b6a9b14509a3b473f52dd797bc490f6f6511dMark Andrews of bind(2) call. This should be rare and mostly
aa9b64060fb6e946a920e957805f564d149e88e0Evan Hunt harmless, but may cause interference with other
aa9b64060fb6e946a920e957805f564d149e88e0Evan Hunt processes that happen to use the same port. [RT #19642]
412f873b9fafa0f8161a1203e7731d9d67052e49Mark Andrews2587. [func] Improve logging by reporting serial numbers for
412f873b9fafa0f8161a1203e7731d9d67052e49Mark Andrews when zone serial has gone backwards or unchanged.
72ac929f2bfe186ab4fe2d9425685d6ef419f200Mark Andrews2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
a70fc47e9dc165175e77f091076559748858a488Mark Andrews or SDB. [RT #19577]
0526268c2b2806ceb67032e0bfee708b6e70e004Mark Andrews2585. [bug] Uninitialized socket name could be referenced via a
0526268c2b2806ceb67032e0bfee708b6e70e004Mark Andrews statistics channel, triggering an assertion failure in
0526268c2b2806ceb67032e0bfee708b6e70e004Mark Andrews XML rendering. [RT #19427]
932715fbbe449e814612a9ae39eac885548de5bfEvan Hunt2584. [bug] alpha: gcc optimization could break atomic operations.
f824c65d1fb6a2490b03228e63cc43dae6844f73Mark Andrews2583. [port] netbsd: provide a control to not add the compile
90174e64f49bb7cba6a83fb665ebcb597aad7b57Evan Hunt date to the version string, -DNO_VERSION_DATE.
b9d6758fc606245d79fd6e03a31c76c586694377Mark Andrews2582. [bug] Don't emit warning log message when we attempt to
90174e64f49bb7cba6a83fb665ebcb597aad7b57Evan Hunt remove non-existent journal. [RT #19516]
6588a2b404365cea59e71a3f639349272600f68dMark Andrews2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
6588a2b404365cea59e71a3f639349272600f68dMark Andrews Requires MySQL 5.0.19 or later. [RT #19084]
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt2580. [bug] UpdateRej statistics counter could be incremented twice
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt for one rejection. [RT #19476]
9260c1157d12ef716fe6227fd8af845ec7fd1eedMukund Sivaraman2579. [bug] DNSSEC lookaside validation failed to handle unknown
9260c1157d12ef716fe6227fd8af845ec7fd1eedMukund Sivaraman algorithms. [RT #19479]
930719e8767e0a58ca1b57cfbbb2b07b885afd14Mukund Sivaraman2578. [bug] Changed default sig-signing-type to 65534, because
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt 65535 turns out to be reserved. [RT #19477]
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt2577. [doc] Clarified some statistics counters. [RT #19454]
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt2576. [bug] NSEC record were not being correctly signed when
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt a zone transitions from insecure to secure.
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt Handle such incorrectly signed zones. [RT #19114]
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt2575. [func] New functions dns_name_fromstring() and
b66b333f59cf51ef87f973084a5023acd9317fb2Evan Hunt dns_name_tostring(), to simplify conversion
a625502bdd149be06bd0cc06000c3dc9e4a813b9Tinderbox User of a string to a dns_name structure and vice
a239044323418956d7d48c14d61d19f721cc5ba5Witold Krecicki versa. [RT #19451]
18749940aee8ee6cf8fc6a81f659819310d5aa78Mark Andrews2574. [doc] Document nsupdate -g and -o. [RT #19351]
65d59a4307d00f6b4e278b730c278502e5449da8Mark Andrews2573. [bug] Replacing a non-CNAME record with a CNAME record in a
18749940aee8ee6cf8fc6a81f659819310d5aa78Mark Andrews single transaction in a signed zone failed. [RT #19397]
ffdd3bc812a140fb0e3d5b6f0df0a4efbfe4b412Mark Andrews2572. [func] Simplify DLV configuration, with a new option
09f4e41912d08b5c1685f4d23bd19d32f63db935Mark Andrews "dnssec-lookaside auto;" This is the equivalent
09f4e41912d08b5c1685f4d23bd19d32f63db935Mark Andrews of "dnssec-lookaside . trust-anchor dlv.isc.org;"
09f4e41912d08b5c1685f4d23bd19d32f63db935Mark Andrews plus setting a trusted-key for dlv.isc.org.
c7e5ba1d17f2db135b2c1ab192c2746189394fa2Mark Andrews Note: The trusted key is hard-coded into named,
0dc485ffb6ca6e90979561db1705f6a89be8b8edMark Andrews but is also stored in (and can be overridden
c7e5ba1d17f2db135b2c1ab192c2746189394fa2Mark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
24231afa05b4ceefe8f0aebcdabe9ccf002346f9Mark Andrews rolls over it can be kept up to date by replacing
24231afa05b4ceefe8f0aebcdabe9ccf002346f9Mark Andrews the bind.keys file with a key downloaded from
8a0b6b3901b34530a850d78758fe4e5b6218d193Mark Andrews2571. [func] Add a new tool "arpaname" which translates IP addresses
2a12984ce69f7f49dc3aeef1b216e0c7c93373acMark Andrews to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
40c619daeeb99015afa31b1a4a76d6c20b0a3fc6Evan Hunt2570. [func] Log the destination address the query was sent to.
87e7d08a8bae58ab8edacaa990a4234063c23793Mar Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt "make install" will put them in $sbindir. [RT #19301]
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt2568. [bug] Report when the write to indicate a otherwise
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt successful start fails. [RT #19360]
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt2567. [bug] dst__privstruct_writefile() could miss write errors.
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt write_public_key() could miss write errors.
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt dnssec-dsfromkey could miss write errors.
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt2566. [cleanup] Clarify logged message when an insecure DNSSEC
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt response arrives from a zone thought to be secure:
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt "insecurity proof failed" instead of "not
a00f9e2f50675bd43cc6a9fe2669709162a2ccb4Evan Hunt insecure". [RT #19400]
e6d0a391f5f9b18f5bd497aefff269e474ee560cWitold Krecicki2565. [func] Add support for HIP record. Includes new functions
e6d0a391f5f9b18f5bd497aefff269e474ee560cWitold Krecicki dns_rdata_hip_first(), dns_rdata_hip_next()
e6d0a391f5f9b18f5bd497aefff269e474ee560cWitold Krecicki and dns_rdata_hip_current(). [RT #19384]
98a7f8c7ae44bb98d5469cb3a4240c59abceba7fMark Andrews2564. [bug] Only take EDNS fallback steps when processing timeouts.
8d80b4939dd27dc3136ab152706160c613baa93aMark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
8d80b4939dd27dc3136ab152706160c613baa93aMark Andrews to exit. [RT #19359]
5c41d472275c096be8aafb239a301b9d7c0a2cd9Jeremy C. Reed2562. [doc] ARM: miscellaneous improvements, reorganization,
5c41d472275c096be8aafb239a301b9d7c0a2cd9Jeremy C. Reed and some new content.
a21c415687a855f84fbf10db91671b1341e8b990Mark Andrews2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
a21c415687a855f84fbf10db91671b1341e8b990Mark Andrews2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
47115d91ef32317a2c0eb9daaf9c910757568de0Mark Andrews2559. [bug] dnssec-dsfromkey could compute bad DS records when
4dd41c7d5976ff6889e4fbf306036f4256af409aMark Andrews reading from a K* files. [RT #19357]
f6e45a5c54b7af4b1c303e8d3ff3b7d78622df9eMark Andrews2558. [func] Set the ownership of missing directories created
705d56b47a932cc277f980755e80ac4f46a18a64Mark Andrews for pid-file if -u has been specified on the command
705d56b47a932cc277f980755e80ac4f46a18a64Mark Andrews line. [RT #19328]
ff55c577ba8a95f763b8982b7ab5e4a980209a09Mark Andrews2557. [cleanup] PCI compliance:
ff55c577ba8a95f763b8982b7ab5e4a980209a09Mark Andrews * new libisc log module file
e0a30050c8516a3d54a4f8dcdd88435704a8a3edMark Andrews * isc_dir_chroot() now also changes the working
e0a30050c8516a3d54a4f8dcdd88435704a8a3edMark Andrews directory to "/".
dd1bcab25cf91eccb77060023d94a306411f7f14Mark Andrews * additional INSISTs
dd1bcab25cf91eccb77060023d94a306411f7f14Mark Andrews * additional logging when files can't be removed.
741b63c8695bab0582e3f9f308993ab53a60b377Mark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
741b63c8695bab0582e3f9f308993ab53a60b377Mark Andrews error checks in the correct order resulting in the
741b63c8695bab0582e3f9f308993ab53a60b377Mark Andrews wrong error code sometimes being returned. [RT #19249]
09177840c73c1edec0d085dd8d92f225ba371014Mark Andrews2555. [func] dig: when emitting a hex dump also display the
09177840c73c1edec0d085dd8d92f225ba371014Mark Andrews corresponding characters. [RT #19258]
f43e5c8ed2e68b7064c909b1fece6d976799b8dbMark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
7b1f63dcd1a20a7c66b869e323efcdbdb0612a0dMark Andrews fail. [RT #19297]
fe51e068f0892ae9258d9fd0e14fe2a469ff8edfMark Andrews2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
fe51e068f0892ae9258d9fd0e14fe2a469ff8edfMark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honoured.
0f2ecf4b5c6721629162d4fd32826189d33a9b03Mark Andrews2551. [bug] Potential Reference leak on return. [RT #19341]
e8742e9598a72a429cf2ca05c6c1bc3de9b35283Tinderbox User2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
226339ed435db90da8e072ef46e2c27cf0dc687bEvan Hunt2549. [port] linux: define NR_OPEN if not currently defined.
295a711b72b075a77065b7a952860269b5ae5d1dMark Andrews2548. [bug] Install iterated_hash.h. [RT #19335]
295a711b72b075a77065b7a952860269b5ae5d1dMark Andrews2547. [bug] openssl_link.c:mem_realloc() could reference an
aec8a3b7cff6a144bfd9d1b72415dd644a0bd828Evan Hunt out-of-range area of the source buffer. New public
757e405d3c22e263dbd4aef75f7a188f891625b9Mark Andrews function isc_mem_reallocate() was introduced to address
aec8a3b7cff6a144bfd9d1b72415dd644a0bd828Evan Hunt this bug. [RT #19313]
4523c3b371e0e8aa6451aefcf2ba593c4d16ea31Evan Hunt2546. [func] Add --enable-openssl-hash configure flag to use
4523c3b371e0e8aa6451aefcf2ba593c4d16ea31Evan Hunt OpenSSL (in place of internal routine) for hash
a0ef8211d3bb5d4a7e56145e014c3da3466051c8Mark Andrews functions (MD5, SHA[12] and HMAC). [RT #18815]
a0ef8211d3bb5d4a7e56145e014c3da3466051c8Mark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
a0ef8211d3bb5d4a7e56145e014c3da3466051c8Mark Andrews for SRV RDATA too. [RT #19304]
3fa134363f99816b36e30822a098196810ae6f20Mark Andrews2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
5a49f61ca968283d59c97e583fd6fb02ecaeb773Mark Andrews2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
8b29fc0b7a13db404f1a13fcfad42c2e7cfbe25bMark Andrews2542. [doc] Update the description of dig +adflag. [RT #19290]
0409e7451ce6898ba2e3fab401767df706b73fbfMark Andrews2541. [bug] Conditionally update dispatch manager statistics.
075a3d60c23140f05db10d70126ff271ef6469c9Mark Andrews2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
4ca7391e640bd4f0abb31508019d3bd62819fa8eMark Andrews2539. [security] Update the interaction between recursion, allow-query,
4ca7391e640bd4f0abb31508019d3bd62819fa8eMark Andrews allow-query-cache and allow-recursion. [RT #19198]
4ca7391e640bd4f0abb31508019d3bd62819fa8eMark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
fbd9aaa58c32abaeab1bd3ca6943b18ce19ea023Mark Andrews especially with threads and smaller max-cache-size
fbd9aaa58c32abaeab1bd3ca6943b18ce19ea023Mark Andrews values. [RT #19240]
02093e4c3b98ec8eca1b6b3eb9a895054ff4f1c8Mark Andrews2537. [func] Added more statistics counters including those on socket
02093e4c3b98ec8eca1b6b3eb9a895054ff4f1c8Mark Andrews I/O events and query RTT histograms. [RT #18802]
9b956d342e93ab60d5d9367785b26546f7e49391Mark Andrews2536. [cleanup] Silence some warnings when -Werror=format-security is
9b956d342e93ab60d5d9367785b26546f7e49391Mark Andrews specified. [RT #19083]
5855fd79e375c74fc9df57ce0b4c4ef1b9fcdc3eMark Andrews2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
5855fd79e375c74fc9df57ce0b4c4ef1b9fcdc3eMark Andrews2534. [func] Check NAPTR records regular expressions and
c7e5ba1d17f2db135b2c1ab192c2746189394fa2Mark Andrews replacement strings to ensure they are syntactically
dc3912f3caac1104fef441fd18571b7a975708eaMark Andrews valid and consistant. [RT #18168]
dc3912f3caac1104fef441fd18571b7a975708eaMark Andrews2533. [doc] ARM: document @ (at-sign). [RT #17144]
7d0dfa63cf3228b56053815bdf25da7d0e6dc501Mark Andrews2532. [bug] dig: check the question section of the response to
7d0dfa63cf3228b56053815bdf25da7d0e6dc501Mark Andrews see if it matches the asked question. [RT #18495]
18ba804f3ab6a7fea10404bb6675a49b59a153c5Mark Andrews2531. [bug] Change #2207 was incomplete. [RT #19098]
ec3dbae9eb0fdbda37c76c2b41e819c7982be1c4Mukund Sivaraman2530. [bug] named failed to reject insecure to secure transitions
ec3dbae9eb0fdbda37c76c2b41e819c7982be1c4Mukund Sivaraman via UPDATE. [RT #19101]
ec3dbae9eb0fdbda37c76c2b41e819c7982be1c4Mukund Sivaraman2529. [cleanup] Upgrade libtool to silence complaints from recent
ec3dbae9eb0fdbda37c76c2b41e819c7982be1c4Mukund Sivaraman version of autoconf. [RT #18657]
ec3dbae9eb0fdbda37c76c2b41e819c7982be1c4Mukund Sivaraman2528. [cleanup] Silence spurious configure warning about
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman --datarootdir [RT #19096]
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman2527. [placeholder]
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman2526. [func] New named option "attach-cache" that allows multiple
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman views to share a single cache to save memory and
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman improve lookup efficiency. Based on contributed code
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman from Barclay Osborn, Google. [RT #18905]
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman2525. [func] New logging category "query-errors" to provide detailed
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman internal information about query failures, especially
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman about server failures. [RT #19027]
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
bf350c9f1ab59ac03e34e8063b4ce58662daec2aMukund Sivaraman2523. [bug] Random type rdata freed by dns_nsec_typepresent().
b750a49f3f599023cf32997f72924d4c2a5288d7Evan Hunt2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
420a43c8d8028992a4e9c170022f97bfac689025Evan Hunt2521. [bug] Improve epoll cross compilation support. [RT #19047]
420a43c8d8028992a4e9c170022f97bfac689025Evan Hunt2520. [bug] Update xml statistics version number to 2.0 as change
475099874c1cc95289aed8498d8c6cb0ef7e54b4Evan Hunt #2388 made the schema incompatible to the previous
0d63efe476bd07c8ea9a98dc8c9da7b4b114b701Tinderbox User version. [RT #19080]
b0ba1a6059b6d6c4b3aa77d8bc84cc443b981e01Mukund Sivaraman2519. [bug] dig/host with -4 or -6 didn't work if more than two
b0ba1a6059b6d6c4b3aa77d8bc84cc443b981e01Mukund Sivaraman nameserver addresses of the excluded address family
b0ba1a6059b6d6c4b3aa77d8bc84cc443b981e01Mukund Sivaraman preceded in resolv.conf. [RT #19081]
70862302f8f6a8398b6ca67516749486688603caMark Andrews2518. [func] Add support for the new CERT types from RFC 4398.
bf4a7968e8bff29ef5d85b292526206ffde3c5c6Evan Hunt2517. [bug] dig +trace with -4 or -6 failed when it chose a
bf4a7968e8bff29ef5d85b292526206ffde3c5c6Evan Hunt nameserver address of the excluded address type.
d7262e5c8669d318531d47643356d554f7d0e2eeMukund Sivaraman2516. [bug] glue sort for responses was performed even when not
984d2bb9e5aaca7c946bc78354c12b1dd75ed00aMukund Sivaraman needed. [RT #19039]
984d2bb9e5aaca7c946bc78354c12b1dd75ed00aMukund Sivaraman2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
474921d733e9592ab93b3905907f2dcb393e12c9Mukund Sivaraman2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
563878539af45d41143701a6d299e9b226937f5bMark Andrews a nameserver of the excluded address family.
9dc5ef7f24dba2be01d1cb10ba38c4a8b603d2b6Mark Andrews2513. [bug] Fix windows cli build. [RT #19062]
7c0f238c505ed2fa29b5441de3ad6e5f91976379Evan Hunt2512. [func] Print a summary of the cached records which make up
7c0f238c505ed2fa29b5441de3ad6e5f91976379Evan Hunt the negative response. [RT #18885]
efb028b6c879c67b4e5b858f0e318a57b1073f69Mark Andrews2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
151f1bcd5efdc59a9727de7529c37664845203b7Mark Andrews2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
9b8f93083d7543baae86d6d078cb637cee14b4fcEvan Hunt2509. [bug] Specifying a fixed query source port was broken.
c707e2b9861dfa3f86b3520b9c3630db70cb020cEvan Hunt2508. [placeholder]
f5bc6889d918347c7b501e0b2f9b6ecaf3dc4b7eEvan Hunt2507. [func] Log the recursion quota values when killing the
c707e2b9861dfa3f86b3520b9c3630db70cb020cEvan Hunt oldest query or refusing to recurse due to quota.
38122021242747404f7f3e02ff4428a7cb884b77Evan Hunt2506. [port] solaris: Check at configure time if
38122021242747404f7f3e02ff4428a7cb884b77Evan Hunt hack_shutup_pthreadonceinit is needed. [RT #19037]
c4567d06753c4420af492d07b720125a918fcf23Tinderbox User2505. [port] Treat amd64 similarly to x86_64 when determining
ce9f893e21d2ffc6f6a78bf226c038c396740aebEvan Hunt atomic operation support. [RT #19031]
88278358cbfbaaf2073a04c2a74e0b56371d40feMukund Sivaraman2504. [bug] Address race condition in the socket code. [RT #18899]
fc39b6a96109b78154ec148d20eaf29e8abc14b6Mukund Sivaraman2503. [port] linux: improve compatibility with Linux Standard
fc39b6a96109b78154ec148d20eaf29e8abc14b6Mukund Sivaraman Base. [RT #18793]
2cc21870b0dd92cde23305e0030e3e6e2bfd3cdaMukund Sivaraman2502. [cleanup] isc_radix: Improve compliance with coding style,
2cc21870b0dd92cde23305e0030e3e6e2bfd3cdaMukund Sivaraman document function in <isc/radix.h>. [RT #18534]
13c55f6a6097bd23830b02f1be37515f35919b9eMark Andrews2501. [func] $GENERATE now supports all rdata types. Multi-field
dbb064aa7972ef918d9a235b713108a4846cbb62Mark Andrews rdata types need to be quoted. See the ARM for
dbb064aa7972ef918d9a235b713108a4846cbb62Mark Andrews details. [RT #18368]
3a49d0ff1000bb74a5f5abaef04f3e41e957c875Mark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
3a49d0ff1000bb74a5f5abaef04f3e41e957c875Mark Andrews function. [RT #18582]
3a49d0ff1000bb74a5f5abaef04f3e41e957c875Mark Andrews2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
0bc743f9bc0ad5989c9b2a65bf54d25c4f78d30dMark Andrews --- 9.6.0rc1 released ---
b716b9cddcf2924b83c5ba2c21142cb4c626061fEvan Hunt2498. [bug] Removed a bogus function argument used with
b716b9cddcf2924b83c5ba2c21142cb4c626061fEvan Hunt ISC_SOCKET_USE_POLLWATCH: it could cause compiler
b716b9cddcf2924b83c5ba2c21142cb4c626061fEvan Hunt warning or crash named with the debug 1 level
245c74ce39e801273ded5fd41e090cdd5563517bEvan Hunt of logging. [RT #18917]
b399f4e5684a66123e2f38e0f7e254f0f3ca0cc6Mark Andrews2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
ff6dccd21c28b6746cdb635aafabdc502df72ee4Mark Andrews2496. [bug] Add sanity length checks to NSID option. [RT #18813]
ff6dccd21c28b6746cdb635aafabdc502df72ee4Mark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt installed. [RT #18826]
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt2493. [bug] The linux capabilities code was not correctly cleaning
33ca26968b638b4ff9c657e9574d14d1a04a52ddMukund Sivaraman up after itself. [RT #18767]
33ca26968b638b4ff9c657e9574d14d1a04a52ddMukund Sivaraman2492. [func] Rndc status now reports the number of cpus discovered
33ca26968b638b4ff9c657e9574d14d1a04a52ddMukund Sivaraman and the number of worker threads when running
3e33f4198d1840fd0aed97d98ba0be8ac0cafd19Mark Andrews multi-threaded. [RT #18273]
3e33f4198d1840fd0aed97d98ba0be8ac0cafd19Mark Andrews2491. [func] Attempt to re-use a local port if we are already using
3e33f4198d1840fd0aed97d98ba0be8ac0cafd19Mark Andrews the port. [RT #18548]
3e33f4198d1840fd0aed97d98ba0be8ac0cafd19Mark Andrews2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
3e33f4198d1840fd0aed97d98ba0be8ac0cafd19Mark Andrews is cleared when IPV6_V6ONLY is set. [RT #18785]
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews2489. [port] solaris: Workaround Solaris's kernel bug about
b399f4e5684a66123e2f38e0f7e254f0f3ca0cc6Mark Andrews http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews Define ISC_SOCKET_USE_POLLWATCH at build time to enable
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews this workaround. [RT #18870]
c631ff56bfe13f7b47ff01950364f4db423bf21aMark Andrews2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
ce67023ae3ad39a77da5361d0187ab6f3f0219cbMark Andrews from keyset and .key files. [RT #18694]
307adf67922dd222bacf84ef0f074a0eb84d3a0aMark Andrews2487. [bug] Give TCP connections longer to complete. [RT #18675]
753b27a7d325f8da6ef3dc8da8a2cc43e968ccb2Mark Andrews2486. [func] The default locations for named.pid and lwresd.pid
c44c77178e0bf420483b0dd0af43839bf636a6ccMukund Sivaraman This allows the owner of the containing directory
c44c77178e0bf420483b0dd0af43839bf636a6ccMukund Sivaraman to be set, for "named -u" support, and allows there
c44c77178e0bf420483b0dd0af43839bf636a6ccMukund Sivaraman to be a permanent symbolic link in the path, for
c44c77178e0bf420483b0dd0af43839bf636a6ccMukund Sivaraman "named -t" support. [RT #18306]
08f01297320b7ad55d0abff0aca9a577196079e2Mukund Sivaraman2485. [bug] Change update's the handling of obscured RRSIG
08f01297320b7ad55d0abff0aca9a577196079e2Mukund Sivaraman records. Not all orphaned DS records were being
4a61eae6514bfde56f8801ef66f27a8d462bd164Mark Andrews removed. [RT #18828]
4a61eae6514bfde56f8801ef66f27a8d462bd164Mark Andrews2484. [bug] It was possible to trigger a REQUIRE failure when
4a61eae6514bfde56f8801ef66f27a8d462bd164Mark Andrews adding NSEC3 proofs to the response in
adbf81335b67be0cebdcf9f1f4fcb38ef4814f4dMark Andrews query_addwildcardproof(). [RT #18828]
adbf81335b67be0cebdcf9f1f4fcb38ef4814f4dMark Andrews2483. [port] win32: chroot() is not supported. [RT #18805]
2f66e2dd81c270647976eebd15a45dc4d6d2f318Mark Andrews2482. [port] libxml2: support versions 2.7.* in addition
2f66e2dd81c270647976eebd15a45dc4d6d2f318Mark Andrews to 2.6.*. [RT #18806]
f10a67dad21d7dd87ee2144964faa639f96766b5Witold Krecicki --- 9.6.0b1 released ---
6e6dcfcb45a5d2477ddf55293e9e8f587b7bcfe4Mark Andrews2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
6e6dcfcb45a5d2477ddf55293e9e8f587b7bcfe4Mark Andrews collisions. [RT #18812]
0439bfedd97fa2e004cbf572773d703b33fda10fMukund Sivaraman2480. [bug] named could fail to emit all the required NSEC3
0439bfedd97fa2e004cbf572773d703b33fda10fMukund Sivaraman records. [RT #18812]
2a815e41d2b8f30fd4cc68ccd38064a6ee6e1103Mukund Sivaraman2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
b4e114e3cd99b8875fc677a1a1c7c8257ef5a7a6Mukund Sivaraman2478. [bug] 'addresses' could be used uninitialized in
b4e114e3cd99b8875fc677a1a1c7c8257ef5a7a6Mukund Sivaraman configure_forward(). [RT #18800]
d14c2683625c5db500ab93fb7176a9570798ca1eMukund Sivaraman2477. [bug] dig: the global option to print the command line is
d14c2683625c5db500ab93fb7176a9570798ca1eMukund Sivaraman +cmd not print_cmd. Update the output to reflect
71931ab6b3815c953756a04e6029a3a113a2a9f4Mukund Sivaraman this. [RT #17008]
0d5b518107e56bcf80719b6a974b90b8a10e4efdEvan Hunt2476. [doc] ARM: improve documentation for max-journal-size and
9869bfeed4fab59c5730065cd7cce1f7c60b741fMark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
71931ab6b3815c953756a04e6029a3a113a2a9f4Mukund Sivaraman2475. [bug] LRU cache cleanup under overmem condition could purge
71931ab6b3815c953756a04e6029a3a113a2a9f4Mukund Sivaraman particular entries more aggressively. [RT #17628]
59a9cb54c112fd979b772e832b819d8efc83b85dMukund Sivaraman2474. [bug] ACL structures could be allocated with insufficient
59a9cb54c112fd979b772e832b819d8efc83b85dMukund Sivaraman space, causing an array overrun. [RT #18765]
59a9cb54c112fd979b772e832b819d8efc83b85dMukund Sivaraman2473. [port] linux: raise the limit on open files to the possible
f85deb5154d996978f0fc8455961698bc710ae73Witold Krecicki maximum value before spawning threads; 'files'
f85deb5154d996978f0fc8455961698bc710ae73Witold Krecicki specified in named.conf doesn't seem to work with
29ec74b60fcaef12c16ecb6bdb8c8ecb278d449fEvan Hunt threads as expected. [RT #18784]
29ec74b60fcaef12c16ecb6bdb8c8ecb278d449fEvan Hunt2472. [port] linux: check the number of available cpu's before
8a9bac8dec81997fec38fb880dc81b41eb026c27Mark Andrews calling chroot as it depends on "/proc". [RT #16923]
8a9bac8dec81997fec38fb880dc81b41eb026c27Mark Andrews2471. [bug] named-checkzone was not reporting missing mandatory
eb447eca8847be14e93d7b2d524154433e4ee565Evan Hunt glue when sibling checks were disabled. [RT #18768]
eb447eca8847be14e93d7b2d524154433e4ee565Evan Hunt2470. [bug] Elements of the isc_radix_node_t could be incorrectly
eb447eca8847be14e93d7b2d524154433e4ee565Evan Hunt overwritten. [RT# 18719]
8c9fba44a41e3ea23e7e8405029980aba672f7ceEvan Hunt2469. [port] solaris: Work around Solaris's select() limitations.
38c19e577915221b1783791cbb4f4e3ceea20019Mark Andrews2468. [bug] Resolver could try unreachable servers multiple times.
8bb630c7513ecfe224622a3923f0de477c44f2a9Mark Andrews2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
e53e202ef3b51c58fb9abe0d15e3829a970b00e7Mark Andrews2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
598b502695802c3d4e23316b85368e54f39f5cabMark Andrews2465. [bug] Adb's handling of lame addresses was different
a32b6291aa5f797e1336869390f99d4a655484c2Evan Hunt for IPv4 and IPv6. [RT #18738]
a32b6291aa5f797e1336869390f99d4a655484c2Evan Hunt2464. [port] linux: check that a capability is present before
39f11e83a34e8282c46afc6d189c209632cfeb6eCurtis Blackburn trying to set it. [RT #18135]
a32b6291aa5f797e1336869390f99d4a655484c2Evan Hunt2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
c55a1da4fc1188afe88264f97c1b705e188ae1feEvan Hunt API and glibc hides parts of the IPv6 Advanced Socket
c55a1da4fc1188afe88264f97c1b705e188ae1feEvan Hunt API as a result. This is stupid as it breaks how the
c55a1da4fc1188afe88264f97c1b705e188ae1feEvan Hunt two halves (Basic and Advanced) of the IPv6 Socket API
c55a1da4fc1188afe88264f97c1b705e188ae1feEvan Hunt were designed to be used but we have to live with it.
c55a1da4fc1188afe88264f97c1b705e188ae1feEvan Hunt Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
cadf8d687b9719b87c121d5cc8b028b1ddccc642Evan Hunt API. [RT #18388]
cadf8d687b9719b87c121d5cc8b028b1ddccc642Evan Hunt2462. [doc] Document -m (enable memory usage debugging)
705cea35a8f798340ac947713ab97791be521b52Mukund Sivaraman option for dig. [RT #18757]
705cea35a8f798340ac947713ab97791be521b52Mukund Sivaraman2461. [port] sunos: Change #2363 was not complete. [RT #17513]
705cea35a8f798340ac947713ab97791be521b52Mukund Sivaraman --- 9.6.0a1 released ---
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
72a1c3f1a7ad790ebe13ef6be85c269b2c2dcb95Mukund Sivaraman2458. [doc] ARM: update and correction for max-cache-size.
19365b43e922fcbaf5caff3f92b87b52cbc1b530Evan Hunt2457. [tuning] max-cache-size is reverted to 0, the previous
7e6cf6fc6e700061a1cec3bcf67786706d956fc5Evan Hunt default. It should be safe because expired cache
7e6cf6fc6e700061a1cec3bcf67786706d956fc5Evan Hunt entries are also purged. [RT #18684]
7e6cf6fc6e700061a1cec3bcf67786706d956fc5Evan Hunt2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
7e6cf6fc6e700061a1cec3bcf67786706d956fc5Evan Hunt address, regardless of family. They now correctly
247a9c2cf6637ca68b9b5d332131522bd157a3e9Mark Andrews distinguish IPv4 from IPv6. [RT #18559]
d9a0f1bea7c183864c72d0ad14f6b61fbe1b5b05Mark Andrews2455. [bug] Stop metadata being transferred via axfr/ixfr.
8f20f6c9d7ce5a0f0af6ee4c5361832d97b1c5d4Mark Andrews2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
b947e1a521c6931f787d6d1b3604d5b138170c3dMukund Sivaraman2453. [bug] Remove NULL pointer dereference in dns_journal_print().
b947e1a521c6931f787d6d1b3604d5b138170c3dMukund Sivaraman2452. [func] Improve bin/test/journalprint. [RT #18316]
9e804040a29b9c3066c8471b43835f30707039b7Evan Hunt2451. [port] solaris: handle runtime linking better. [RT #18356]
9e804040a29b9c3066c8471b43835f30707039b7Evan Hunt2450. [doc] Fix lwresd docbook problem for manual page.
8f25faf9720a0c2730c4ac80ea4c12ca1f25599fMukund Sivaraman2449. [placeholder]
8f25faf9720a0c2730c4ac80ea4c12ca1f25599fMukund Sivaraman2448. [func] Add NSEC3 support. [RT #15452]
dc877b38a0bdfd7caa0c129d6f5b5cbb1caa6848Evan Hunt2447. [cleanup] libbind has been split out as a separate product.
dc877b38a0bdfd7caa0c129d6f5b5cbb1caa6848Evan Hunt2446. [func] Add a new log message about build options on startup.
1c02dd9dd94c95a9a59bb6c10b669fb790853b10Evan Hunt A new command-line option '-V' for named is also
1c02dd9dd94c95a9a59bb6c10b669fb790853b10Evan Hunt provided to show this information. [RT# 18645]
1c02dd9dd94c95a9a59bb6c10b669fb790853b10Evan Hunt2445. [doc] ARM out-of-date on empty reverse zones (list includes
52aa2f94981aa570a37c659b451541171f7537a4Mark Andrews RFC1918 address, but these are not yet compiled in).
b292230ab8dd33480dabad2b3615dcce5dd70c35Mark Andrews2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
b292230ab8dd33480dabad2b3615dcce5dd70c35Mark Andrews (clear DF) for UDP responses and requests.
e77e44954909dd2e0af1ce724e01f4199ae1e9c0Mark Andrews2443. [bug] win32: UDP connect() would not generate an event,
e77e44954909dd2e0af1ce724e01f4199ae1e9c0Mark Andrews and so connected UDP sockets would never clean up.
ef1aaab9ed44bcc6b58d85de2673e382dc6a7c1dEvan Hunt Fix this by doing an immediate WSAConnect() rather
ef1aaab9ed44bcc6b58d85de2673e382dc6a7c1dEvan Hunt than an io completion port type for UDP.
ef1aaab9ed44bcc6b58d85de2673e382dc6a7c1dEvan Hunt2442. [bug] A lock could be destroyed twice. [RT# 18626]
ef0e6744569fdef42fa93864443005dc0593b24cMark Andrews2441. [bug] isc_radix_insert() could copy radix tree nodes
ef0e6744569fdef42fa93864443005dc0593b24cMark Andrews incompletely. [RT #18573]
017cbd4429a16d1b8eb77333c86f022dcc31045dEvan Hunt2440. [bug] named-checkconf used an incorrect test to determine
017cbd4429a16d1b8eb77333c86f022dcc31045dEvan Hunt if an ACL was set to none.
ab973ec40cc7a79bbf930085b1293824caf73e7fFrancis Dupont2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
f1a261ba2d5e11a106a0a95c46b409a9daf138efMark Andrews2438. [bug] Timeouts could be logged incorrectly under win32.
bcb68be0a8f3c3eca58d6a6a869267e5c1841de2Francis Dupont2437. [bug] Sockets could be closed too early, leading to
bcb68be0a8f3c3eca58d6a6a869267e5c1841de2Francis Dupont inconsistent states in the socket module. [RT #18298]
c03fe78ef59b2373233db1a7b568cc2000d6d3b4Evan Hunt2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
fc3ed1dbda48d0e832ffc8ad70394cd475986531Evan Hunt2435. [bug] Fixed an ACL memory leak affecting win32.
fc3ed1dbda48d0e832ffc8ad70394cd475986531Evan Hunt2434. [bug] Fixed a minor error-reporting bug in
c855e7170a7ddb5d4ebab69a771f35dc93e95e43Mark Andrews2433. [tuning] Set initial timeout to 800ms.
e840f92bfba0881039f1cdfb3349ecb03382b7beMark Andrews2432. [bug] More Windows socket handling improvements. Stop
e840f92bfba0881039f1cdfb3349ecb03382b7beMark Andrews using I/O events and use IO Completion Ports
e840f92bfba0881039f1cdfb3349ecb03382b7beMark Andrews throughout. Rewrite the receive path logic to make
bc8f82492dfdfa8b6d58bca850fa328e176cfd91Mark Andrews it easier to support multiple simultaneous
bc8f82492dfdfa8b6d58bca850fa328e176cfd91Mark Andrews requesters in the future. Add stricter consistency
bc8f82492dfdfa8b6d58bca850fa328e176cfd91Mark Andrews checking as a compile-time option (define
ac31adc3b76a3acf61c711d1cd49480a288b1317Mukund Sivaraman ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
ac31adc3b76a3acf61c711d1cd49480a288b1317Mukund Sivaraman2431. [bug] Acl processing could leak memory. [RT #18323]
2c4d5faf7fa490aa537efa36b1ba26d0cd80e442Mukund Sivaraman2430. [bug] win32: isc_interval_set() could round down to
2c4d5faf7fa490aa537efa36b1ba26d0cd80e442Mukund Sivaraman zero if the input was less than NS_INTERVAL
bc8f82492dfdfa8b6d58bca850fa328e176cfd91Mark Andrews nanoseconds. Round up instead. [RT #18549]
54fe1d05b6d78120452c71023629b35cbe55e97fMark Andrews2429. [doc] nsupdate should be in section 1 of the man pages.
d9b37259f3abcb27e6b1b0bcb312c26cfd229fdaEvan Hunt2428. [bug] dns_iptable_merge() mishandled merges of negative
f28e5058c33bfb99f8717d94c2525a976897dc91Evan Hunt tables. [RT #18409]
f28e5058c33bfb99f8717d94c2525a976897dc91Evan Hunt2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
febb020dceab01c12b406eeae6e825aca7411dd6Mark Andrews was set. [RT #18528]
febb020dceab01c12b406eeae6e825aca7411dd6Mark Andrews2426. [bug] libbind: inet_net_pton() can sometimes return the
fba894c98b8f3345a61932be6830993a059a211aMukund Sivaraman wrong value if excessively large net masks are
fba894c98b8f3345a61932be6830993a059a211aMukund Sivaraman supplied. [RT #18512]
f9f81abff0ea36f19474f3b7a11bf0f17c4f116cMukund Sivaraman2425. [bug] named didn't detect unavailable query source addresses
f9f81abff0ea36f19474f3b7a11bf0f17c4f116cMukund Sivaraman at load time. [RT #18536]
f9f81abff0ea36f19474f3b7a11bf0f17c4f116cMukund Sivaraman2424. [port] configure now probes for a working epoll
f9f81abff0ea36f19474f3b7a11bf0f17c4f116cMukund Sivaraman implementation. Allow the use of kqueue,
9a7532f83618b5abbfd7db59be77e451647ecbf2Mukund Sivaraman epoll and /dev/poll to be selected at compile
9a7532f83618b5abbfd7db59be77e451647ecbf2Mukund Sivaraman time. [RT #18277]
e89972afcb893a824db11086f4f00388057170ccEvan Hunt2423. [security] Randomize server selection on queries, so as to
e89972afcb893a824db11086f4f00388057170ccEvan Hunt make forgery a little more difficult. Instead of
ebeb4b3e094f36121e05d7cc8226047db96ba4f6Mukund Sivaraman always preferring the server with the lowest RTT,
ebeb4b3e094f36121e05d7cc8226047db96ba4f6Mukund Sivaraman pick a server with RTT within the same 128
ebeb4b3e094f36121e05d7cc8226047db96ba4f6Mukund Sivaraman millisecond band. [RT #18441]
642e4ac70ddc4e7037a515208b30d5cf8d8efc94Mukund Sivaraman2422. [bug] Handle the special return value of a empty node as
641b9fd39b1c3f895eca8dfe84d5d14d7742e045Evan Hunt if it was a NXRRSET in the validator. [RT #18447]
77b179cbbe7b820b5d838a675200a7b87eb12dacMark Andrews2421. [func] Add new command line option '-S' for named to specify
641b9fd39b1c3f895eca8dfe84d5d14d7742e045Evan Hunt the max number of sockets. [RT #18493]
24f2cc7d06e4bb6625f90323e44b42e0cad63588Mukund Sivaraman Use caution: this option may not work for some
24f2cc7d06e4bb6625f90323e44b42e0cad63588Mukund Sivaraman operating systems without rebuilding named.
73eacba1f107468b30e8aa7cd6e213bb2d7f3142Evan Hunt2420. [bug] Windows socket handling cleanup. Let the io
73eacba1f107468b30e8aa7cd6e213bb2d7f3142Evan Hunt completion event send out canceled read/write
73eacba1f107468b30e8aa7cd6e213bb2d7f3142Evan Hunt done events, which keeps us from writing to memory
da4a7772ebb33f27104bca5ceb9a9bca60136387Evan Hunt we no longer have ownership of. Add debugging
1b05d22789fd9a17aca4f459639bc2b6848c3160Mark Andrews socket_log() function. Rework TCP socket handling
1b05d22789fd9a17aca4f459639bc2b6848c3160Mark Andrews to not leak sockets.
29d52c001ff976561669375cf0c866b815a90c49Mark Andrews2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
29d52c001ff976561669375cf0c866b815a90c49Mark Andrews should not be used for isc_sockettype_fdwatch sockets.
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt2417. [bug] Connecting UDP sockets for outgoing queries could
7ae96d882326357448f8f440c52f47ac1b1fa455Evan Hunt unexpectedly fail with an 'address already in use'
a85c6b35affa7179434c41b277109dca2cbe01ecMark Andrews error. [RT #18411]
a8da00ef95ba37b9d071c2b8db1a0c967e060106Mark Andrews2416. [func] Log file descriptors that cause exceeding the
48fe77df0c604359c3a406510f4327fc3182e836Evan Hunt internal maximum. [RT #18460]
b5edc023a1bb8066d86777dd40fd4555e285de57Mark Andrews2415. [bug] 'rndc dumpdb' could trigger various assertion failures
be9720ae2c2e933da36c5fb209dd4798a0337febMark Andrews in rbtdb.c. [RT #18455]
be9720ae2c2e933da36c5fb209dd4798a0337febMark Andrews2414. [bug] A masterdump context held the database lock too long,
bb5df338d9b119bb2fe18dea9b0e3034c3925f7bMark Andrews causing various troubles such as dead lock and
bb5df338d9b119bb2fe18dea9b0e3034c3925f7bMark Andrews recursive lock acquisition. [RT #18311, #18456]
f5ea8d2838e0d9279d00afe984aa67f07ad758b1Mark Andrews2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
af669cb4fd7ecfb67ed145b176e5e764b249573bMark Andrews2412. [bug] win32: address a resource leak. [RT #18374]
044008f58f66d7a1b50c1dfc09cf8049e83a8227Evan Hunt2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
044008f58f66d7a1b50c1dfc09cf8049e83a8227Evan Hunt for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
044008f58f66d7a1b50c1dfc09cf8049e83a8227Evan Hunt at compilation time. [RT #18433]
1783676a64b8e390b756d775ae152509f1d76719Mukund Sivaraman Note: with changes #2469 and #2421 above, there is no
a85c6b35affa7179434c41b277109dca2cbe01ecMark Andrews need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
1783676a64b8e390b756d775ae152509f1d76719Mukund Sivaraman2410. [bug] Correctly delete m_versionInfo. [RT #18432]
07dd40e8eeff964d7e8018817378d903ded690e3Mukund Sivaraman2409. [bug] Only log that we disabled EDNS processing if we were
07dd40e8eeff964d7e8018817378d903ded690e3Mukund Sivaraman subsequently successful. [RT #18029]
db93c0def5c3e1e0ea40c7596482ad3fca4ed03bMukund Sivaraman2408. [bug] A duplicate TCP dispatch event could be sent, which
db93c0def5c3e1e0ea40c7596482ad3fca4ed03bMukund Sivaraman could then trigger an assertion failure in
db93c0def5c3e1e0ea40c7596482ad3fca4ed03bMukund Sivaraman resquery_response(). [RT #18275]
c10fda07d68c04221c2d552dc71a2de1352074cbTinderbox User2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
c2444e25ab0fe2a6efdba2fc789a1662b95a6eb5Evan Hunt2406. [placeholder]
aeff3f0541beed6c7e384737bc83b46ea5e66a84Evan Hunt2405. [cleanup] The default value for dnssec-validation was changed to
8378b0c190300e1652fc0ce129a4b9af4ef56e24Evan Hunt "yes" in 9.5.0-P1 and all subsequent releases; this
8378b0c190300e1652fc0ce129a4b9af4ef56e24Evan Hunt was inadvertently omitted from CHANGES at the time.
53ae008f2749a29773b27a481452b292c8f53b65Evan Hunt2404. [port] hpux: files unlimited support.
bfc11b9c659a9c46c478cd9176220a1a29a862a1Evan Hunt2403. [bug] TSIG context leak. [RT #18341]
177e523c48674936078c1422403840de159db5dfEvan Hunt2402. [port] Support Solaris 2.11 and over. [RT #18362]
177e523c48674936078c1422403840de159db5dfEvan Hunt2401. [bug] Expect to get E[MN]FILE errno internal_accept()
177e523c48674936078c1422403840de159db5dfEvan Hunt (from accept() or fcntl() system calls). [RT #18358]
7acc2f21563b79229d592f09dde17e60d64afc8fEvan Hunt2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
7acc2f21563b79229d592f09dde17e60d64afc8fEvan Hunt2399. [placeholder]
e58eb371a047c3a8aee4ce9aaca0f7f3673432a4Mukund Sivaraman2398. [bug] Improve file descriptor management. New,
e58eb371a047c3a8aee4ce9aaca0f7f3673432a4Mukund Sivaraman temporary, named.conf option reserved-sockets,
e58eb371a047c3a8aee4ce9aaca0f7f3673432a4Mukund Sivaraman default 512. [RT #18344]
e58eb371a047c3a8aee4ce9aaca0f7f3673432a4Mukund Sivaraman2397. [bug] gssapi_functions had too many elements. [RT #18355]
2ff2145ff53ec10df0e3c9c51906d63187fd54faMark Andrews2396. [bug] Don't set SO_REUSEADDR for randomized ports.
c213a58e803c0bba12e3df0f33405eaee907acc6Evan Hunt2395. [port] Avoid warning and no effect from "files unlimited"
f4102ab13ea049d73f5523c1a94fe2b83c408c9eMark Andrews on Linux when running as root. [RT #18335]
a98f70acc8d36bf73c000808ffed455ad8f15b02Evan Hunt2394. [bug] Default configuration options set the limit for
8b61aef4dcc53267a500449058c0af705e3a64d1Evan Hunt open files to 'unlimited' as described in the
2616cb69443f6ccd1900901c91e04d86886a7197Evan Hunt documentation. [RT #18331]
e785f9c1c7d838b9a773a757210388130eba5c4aMark Andrews2393. [bug] nested acls containing keys could trigger an
e785f9c1c7d838b9a773a757210388130eba5c4aMark Andrews assertion in acl.c. [RT #18166]
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt2392. [bug] remove 'grep -q' from acl test script, some platforms
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt don't support it. [RT #18253]
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt2391. [port] hpux: cover additional recvmsg() error codes.
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt2390. [bug] dispatch.c could make a false warning on 'odd socket'.
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt [RT #18301].
591389c7d44e5ca20c357627dd179772cfefaaccEvan Hunt2389. [bug] Move the "working directory writable" check to after
1a849dab19287148f12da50d890f455f02aa3622Evan Hunt the ns_os_changeuser() call. [RT #18326]
1059bc2e42e8214f8b73d3b4cd181d8394a94a6aFrancis Dupont2388. [bug] Avoid using tables for layout purposes in
1059bc2e42e8214f8b73d3b4cd181d8394a94a6aFrancis Dupont statistics XSL [RT #18159].
801fb8b894c75fc1e3fa0284e096ade6dcdc1110Evan Hunt2387. [bug] Silence compiler warnings in lib/isc/radix.c.
801fb8b894c75fc1e3fa0284e096ade6dcdc1110Evan Hunt [RT #18147] [RT #18258]
801fb8b894c75fc1e3fa0284e096ade6dcdc1110Evan Hunt2386. [func] Add warning about too small 'open files' limit.
fe12a8f1077c1556922f1a3be2f592c761917838Mukund Sivaraman2385. [bug] A condition variable in socket.c could leak in
fe12a8f1077c1556922f1a3be2f592c761917838Mukund Sivaraman rare error handling [RT #17968].
b82963f96b452e2acbdf2ebd3d96de0ff0859a68Evan Hunt2384. [security] Fully randomize UDP query ports to improve
d8890e779c0a74a8738a746f130a4bed6d6954caEvan Hunt forgery resilience. [RT #17949, #18098]
e77ef50a57091eeb70d0a6d021638c92442c8f0aMark Andrews2383. [bug] named could double queries when they resulted in
4b36b9c1fff56d836feeaa1dc7eb1d4676d9c8bbMark Andrews SERVFAIL due to overkilling EDNS0 failure detection.
9175a4ed6325e611d4c95d74f6e447a3f4b50fa0Evan Hunt2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
84ee90b52d4fb443c796f4e1481f98d5a95b5614Evan Hunt2381. [port] dlz/mysql: support multiple install layouts for
84ee90b52d4fb443c796f4e1481f98d5a95b5614Evan Hunt mysql. <prefix>/include/{,mysql/}mysql.h and
84ee90b52d4fb443c796f4e1481f98d5a95b5614Evan Hunt <prefix>/lib/{,mysql/}. [RT #18152]
875574f1e4e87d8412b682084991954c10c20e35Mark Andrews2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
875574f1e4e87d8412b682084991954c10c20e35Mark Andrews proofs which, in turn, caused validation failures
626ba6609dd45cd543a05910dd503ff712355c88Evan Hunt for insecure zones immediately below a secure zone
626ba6609dd45cd543a05910dd503ff712355c88Evan Hunt the server was authoritative for. [RT #18112]
39f68d7b64dce25e19f7132f6c46b3beabeed492Tinderbox User2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2817aa56ca12139849ba1017ff978833174f6294Evan Hunt TLDs and supported RRs with TTLs [RT #17972]
2817aa56ca12139849ba1017ff978833174f6294Evan Hunt2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
22e3e00ac95ec1ba89200c5d0e05670ed5ad8fefMark Andrews2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
ff62d4458acda2110a3763ec576a4f728450662cEvan Hunt2376. [bug] Change #2144 was not complete.
ff62d4458acda2110a3763ec576a4f728450662cEvan Hunt2375. [placeholder]
b88b75c2b88618f9c885c61e1ab0bd1cddd4474eEvan Hunt2374. [bug] "blackhole" ACLs could cause named to segfault due
b88b75c2b88618f9c885c61e1ab0bd1cddd4474eEvan Hunt to some uninitialized memory. [RT #18095]
b88b75c2b88618f9c885c61e1ab0bd1cddd4474eEvan Hunt2373. [bug] Default values of zone ACLs were re-parsed each time a
b88b75c2b88618f9c885c61e1ab0bd1cddd4474eEvan Hunt new zone was configured, causing an overconsumption
761d135ed686601f36fe3d0d4aaa6bf41287bb0fEvan Hunt of memory. [RT #18092]
11463c0ac24692e229ec87f307f5e7df3c0a7e10Evan Hunt2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
cc0a48a38173637f7a833e2da52bcfbcecb960b4Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
cc0a48a38173637f7a833e2da52bcfbcecb960b4Mark Andrews2370. [bug] "rndc freeze" could trigger an assertion in named
f8eb4e5bfd1129d7639af5c2c768f53f0895952aMark Andrews when called on a nonexistent zone. [RT #18050]
f8eb4e5bfd1129d7639af5c2c768f53f0895952aMark Andrews2369. [bug] libbind: Array bounds overrun on read in bitncmp().
b05a50c852608a40d1a06d6124bafb9b500c10c1Mukund Sivaraman2368. [port] Linux: use libcap for capability management if
b05a50c852608a40d1a06d6124bafb9b500c10c1Mukund Sivaraman possible. [RT# 18026]
f91c369b4ac84fad07e3106c5c00a15d87250d1eMukund Sivaraman2367. [bug] Improve counting of dns_resstatscounter_retry
a6f0e9c985220f0e4509777e6528afb64e0ad576Mukund Sivaraman2366. [bug] Adb shutdown race. [RT #18021]
a6f0e9c985220f0e4509777e6528afb64e0ad576Mukund Sivaraman2365. [bug] Fix a bug that caused dns_acl_isany() to return
a6f0e9c985220f0e4509777e6528afb64e0ad576Mukund Sivaraman spurious results. [RT #18000]
f4dda9cf28f8be880097ee931b3237e09731a28aMark Andrews2364. [bug] named could trigger a assertion when serving a
f4dda9cf28f8be880097ee931b3237e09731a28aMark Andrews malformed signed zone. [RT #17828]
79521569952d5e2475f05e4397dc976f4685056eMark Andrews2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
79521569952d5e2475f05e4397dc976f4685056eMark Andrews2362. [cleanup] Make "rrset-order fixed" a compile-time option.
d1f1f13c7fc1f1515930053508f1645cfafaa478Mark Andrews settable by "./configure --enable-fixed-rrset".
d1f1f13c7fc1f1515930053508f1645cfafaa478Mark Andrews Disabled by default. [RT #17977]
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt2361. [bug] "recursion" statistics counter could be counted
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt multiple times for a single query. [RT #17990]
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt2360. [bug] Fix a condition where we release a database version
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt (which may acquire a lock) while holding the lock.
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt2359. [bug] Fix NSID bug. [RT #17942]
74eb2f5cbc98d9646bcd13ffcb17688f0db5ab8dEvan Hunt2358. [doc] Update host's default query description. [RT #17934]
b0c18fffd3c81d3cb617dbba4d222d49ae266f28Mark Andrews2357. [port] Don't use OpenSSL's engine support in versions before
b0c18fffd3c81d3cb617dbba4d222d49ae266f28Mark Andrews OpenSSL 0.9.7f. [RT #17922]
511ec77fca2e2df66b36f4756fd2459cfe7998d9Mark Andrews2356. [bug] Built in mutex profiler was not scalable enough.
44032d3918d4aeb2f0cff3bb90e4a44569016559Mark Andrews2355. [func] Extend the number statistics counters available.
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews2353. [func] Add support for Name Server ID (RFC 5001).
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews 'dig +nsid' requests NSID from server.
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews 'request-nsid yes;' causes recursive server to send
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews NSID requests to upstream servers. Server responds
3bdcd91c456adec12ee9f69cfe6b0f79174f78c4Evan Hunt to NSID requests with the string configured by
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews 'server-id' option. [RT #17091]
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews2352. [bug] Various GSS_API fixups. [RT #17729]
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
1e0ed0c6f5c359df88767e2c4f0fda24f2da0468Mark Andrews2350. [port] win32: IPv6 support. [RT #17797]
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman2349. [func] Provide incremental re-signing support for secure
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman dynamic zones. [RT #1091]
47d837a49967a6a1b290024f5efb0669276013b1Mukund Sivaraman2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
2317d1f835217db65808826b72a47920963c59fdTinderbox User Documentation is in the new README.pkcs11 file.
be7fba80190c33b0e50f086509b42bb319bb95b4Evan Hunt New tool, dnssec-keyfromlabel, which takes the
be7fba80190c33b0e50f086509b42bb319bb95b4Evan Hunt label of a key pair in a HSM and constructs a DNS
be7fba80190c33b0e50f086509b42bb319bb95b4Evan Hunt key pair for use by named and dnssec-signzone.
03fd9cb81c2a92cf54baab5103db10e8ef9d524aMark Andrews2347. [bug] Delete now traverses the RB tree in the canonical
03fd9cb81c2a92cf54baab5103db10e8ef9d524aMark Andrews order. [RT #17451]
dc5e29a7d216b4233c80bec8967015aa9c05962eTinderbox User2346. [func] Memory statistics now cover all active memory contexts
017aa9aef63aaef6a370c180f6290b8388deda01Mark Andrews in increased detail. [RT #17580]
017aa9aef63aaef6a370c180f6290b8388deda01Mark Andrews2345. [bug] named-checkconf failed to detect when forwarders
017aa9aef63aaef6a370c180f6290b8388deda01Mark Andrews were set at both the options/view level and in
09290020bc9b3cd787f1a19e400413a6ca6827e3Evan Hunt a root zone. [RT #17671]
693d70f96fc2b3c1830580edcc29146afd6a9f61Mark Andrews2344. [bug] Improve "logging{ file ...; };" documentation.
c5e9423340dff77b2d3b79fcd4908708770a49c3Mukund Sivaraman2343. [bug] (Seemingly) duplicate IPv6 entries could be
ea3aa401bc74d34560af190a4009d436054d1bfaMark Andrews created in ADB. [RT #17837]
ea3aa401bc74d34560af190a4009d436054d1bfaMark Andrews2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
ea3aa401bc74d34560af190a4009d436054d1bfaMark Andrews2341. [bug] libbind: add missing -I../include for off source
6444de08d1aacf7396663b7a82d62eedf534c3d7Mark Andrews tree builds. [RT #17606]
6444de08d1aacf7396663b7a82d62eedf534c3d7Mark Andrews2340. [port] openbsd: interface configuration. [RT #17700]
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont2339. [port] tru64: support for libbind. [RT #17589]
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont2338. [bug] check_ds() could be called with a non DS rdataset.
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
fc63119c8b7aa8827fad9e3e45e50c69bc2630e8Francis Dupont2336. [func] If "named -6" is specified then listen on all IPv6
fc63119c8b7aa8827fad9e3e45e50c69bc2630e8Francis Dupont interfaces if there are not listen-on-v6 clauses in
d040fa2f1c9c3045420ee25933b699290ab19250Mark Andrews2335. [port] sunos: libbind and *printf() support for long long.
5c5c6d289db78e41f714007426a387498e15963cFrancis Dupont2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
092d3b76db6b93b8029bd7d083e74fc80fb41858Mark Andrews bug in fromstruct_txt(). [RT #17609]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt2333. [bug] Fix off by one error in isc_time_nowplusinterval().
64d715c22acbed195703bb9b96aac2b938a83de2Mark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt2331. [bug] Failure to regenerate any signatures was not being
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt reported nor being past back to the UPDATE client.
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt2330. [bug] Remove potential race condition when handling
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt over memory events. [RT #17572]
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt WARNING: API CHANGE: over memory callback
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt function now needs to call isc_mem_waterack().
c4f54e5bd1cd09f601252627b5b26768ab797742Evan Hunt See <isc/mem.h> for details.
3230429e175dcaafe9c59967124d44c02ca0ccadEvan Hunt2329. [bug] Clearer help text for dig's '-x' and '-i' options.
e32d354f754a5d7847a0862bcd6302827ea225bfEvan Hunt2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
e32d354f754a5d7847a0862bcd6302827ea225bfEvan Hunt2327. [bug] It was possible to dereference a NULL pointer in
c4abb197160a74f7cd4ad23ebc63fbe0194010abEvan Hunt rbtdb.c. Implement dead node processing in zones as
c4abb197160a74f7cd4ad23ebc63fbe0194010abEvan Hunt we do for caches. [RT #17312]
c4abb197160a74f7cd4ad23ebc63fbe0194010abEvan Hunt2326. [bug] It was possible to trigger a INSIST in the acache
a0b4f6d952cc6adde281948cf995868b44f366e8Evan Hunt2325. [port] Linux: use capset() function if available. [RT #17557]
90fc237a1fdf1680ef254f16b497f90ac759f71bEvan Hunt2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
a0b4f6d952cc6adde281948cf995868b44f366e8Evan Hunt2323. [port] tru64: namespace clash. [RT #17547]
90fc237a1fdf1680ef254f16b497f90ac759f71bEvan Hunt2322. [port] MacOS: work around the limitation of setrlimit()
0c3f2ff9738efe01c4e9cf62592516f27774b9d4Evan Hunt for RLIMIT_NOFILE. [RT #17526]
a0b4f6d952cc6adde281948cf995868b44f366e8Evan Hunt2321. [placeholder]
90fc237a1fdf1680ef254f16b497f90ac759f71bEvan Hunt2320. [func] Make statistics counters thread-safe for platforms
0c3f2ff9738efe01c4e9cf62592516f27774b9d4Evan Hunt that support certain atomic operations. [RT #17466]
3cc8c7d63040a3eafde2b00e1f60465e7053208aEvan Hunt2319. [bug] Silence Coverity warnings in
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt2318. [port] sunos fixes for libbind. [RT #17514]
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt2315. [bug] Used incorrect address family for mapped IPv4
ce96d4326c872c8165b5e3a81ac5b49950c782c6Evan Hunt addresses in acl.c. [RT #17519]
b976c39c07f7672bd1293e878b3306c7decf8afeMark Andrews2314. [bug] Uninitialized memory use on error path in
1feee79e1f8b946af9ebcc9dc31514aafb872438Mark Andrews2313. [cleanup] Silence Coverity warnings. Handle private stacks.
1feee79e1f8b946af9ebcc9dc31514aafb872438Mark Andrews [RT #17447] [RT #17478]
c2f8108123c40f9be5c7d8255300e578ca8a47a6Mark Andrews2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
4e59131f1838d31eac9b355da467516ecd291752Mark Andrews2311. [bug] IPv6 addresses could match IPv4 ACL entries and
4e59131f1838d31eac9b355da467516ecd291752Mark Andrews vice versa. [RT #17462]
f0a54842b1a50dac0b020958eb6025ed676f9a34Mark Andrews2310. [bug] dig, host, nslookup: flush stdout before emitting
f0a54842b1a50dac0b020958eb6025ed676f9a34Mark Andrews debug/fatal messages. [RT #17501]
9208b81867e8d11a641065d55ee40d24512a8452Mark Andrews2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
9208b81867e8d11a641065d55ee40d24512a8452Mark Andrews2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
f274cbeaed0e4c5fdbde9f5c30833d7f1da37cd3Mark Andrews2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
00fb0253c9df8a4686115745ae91d501f62c7451Mark Andrews2306. [bug] Remove potential race from lib/dns/resolver.c.
175a8414a785689cb028e6e133385dba9e1b9a95Evan Hunt2305. [security] inet_network() buffer overflow. CVE-2008-0122.
a5c7cfbac4e401c41741c123347739ab87c80a52Mark Andrews2304. [bug] Check returns from all dns_rdata_tostruct() calls.
d84a4d216d513bec15e83ec6c6e7863a24ff548bMark Andrews2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
e82c572164eeaaa045a26196fe6096cbef3c10c8Mark Andrews2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
d84a4d216d513bec15e83ec6c6e7863a24ff548bMark Andrews2301. [bug] Remove resource leak and fix error messages in
dd66b77417aff9a7805f52b1e37ac48e647e0102Evan Hunt2300. [bug] Fixed failure to close open file in
40b28f54029a5399fc17d895dd9e8bbcd97d6b70Mark Andrews2299. [bug] Remove unnecessary NULL check in
7fbfa379e25b675ec46ae30925b4b2923a07c893Francis Dupont2298. [bug] isc_mutex_lock() failure not caught in
498b0610312364afc5698b2e4caaa4dcc836133aEvan Hunt2297. [bug] isc_entropy_createfilesource() failure not caught in
498b0610312364afc5698b2e4caaa4dcc836133aEvan Hunt2296. [port] Allow docbook stylesheet location to be specified to
90e0af6bc6c1bcafad126e1779fc478c0aeaeb8fEvan Hunt configure. [RT #17457]
90e0af6bc6c1bcafad126e1779fc478c0aeaeb8fEvan Hunt2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
72775a79fedd13e19a567432ace70d7ead28e433Mark Andrews2294. [func] Allow the experimental statistics channels to have
871f3c8beeb2134b17414ec167b90a57adb8e122Mark Andrews multiple connections and ACL.
871f3c8beeb2134b17414ec167b90a57adb8e122Mark Andrews Note: the stats-server and stats-server-v6 options
871f3c8beeb2134b17414ec167b90a57adb8e122Mark Andrews available in the previous beta releases are replaced
6a6821668d0ff38c34303d63f727fcd11cc36863Evan Hunt with the generic statistics-channels statement.
48f97c23b7d59c925fc3f4280972e50b8ef67c35Mark Andrews2293. [func] Add ACL regression test. [RT #17375]
188690149b54145e1936898e565eb9eec139bbfeEvan Hunt2292. [bug] Log if the working directory is not writable.
27174d90ccf7d15539b9384744dbbe7beae1723cEvan Hunt2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
27174d90ccf7d15539b9384744dbbe7beae1723cEvan Hunt failure to set PR_SET_DUMPABLE. [RT #17312]
eb6d61d5e02946e1a7a959bac37eae9dbbc2051bEvan Hunt2290. [bug] Let AD in the query signal that the client wants AD
eb6d61d5e02946e1a7a959bac37eae9dbbc2051bEvan Hunt set in the response. [RT #17301]
eb6d61d5e02946e1a7a959bac37eae9dbbc2051bEvan Hunt2289. [func] named-checkzone now reports the out-of-zone CNAME
79921aeec24a15883cf3c22a15c77837e69a46beMark Andrews found. [RT #17309]
79921aeec24a15883cf3c22a15c77837e69a46beMark Andrews2288. [port] win32: mark service as running when we have finished
188690149b54145e1936898e565eb9eec139bbfeEvan Hunt loading. [RT #17441]
58a1051e92d46638306e2c17806307c04065c2b3Mark Andrews2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
8197ef7cb5619160600bf1c6e5e8374a6c10838fEvan Hunt2286. [func] Allow a TCP connection to be used as a weak
8197ef7cb5619160600bf1c6e5e8374a6c10838fEvan Hunt authentication method for reverse zones.
8197ef7cb5619160600bf1c6e5e8374a6c10838fEvan Hunt New update-policy methods tcp-self and 6to4-self.
c12c746e3abad9e4100c6694118adc1df398f0bcMark Andrews2285. [func] Test framework for client memory context management.
c81d56c03effca6303a4ba07c74163a2031b36e9Mark Andrews2284. [bug] Memory leak in UPDATE prerequisite processing.
1c182f1516d3d14de6df81f4103ebfe538a519f6Evan Hunt2283. [bug] TSIG keys were not attaching to the memory
12002ea49e5a5a6f7b9c22280dd2cb1f3f44abcfEvan Hunt context. TSIG keys should use the rings
12002ea49e5a5a6f7b9c22280dd2cb1f3f44abcfEvan Hunt memory context rather than the clients memory
6979ebf549b9c0ccd115bbf8c0d905600086f292Mark Andrews context. [RT #17377]
6979ebf549b9c0ccd115bbf8c0d905600086f292Mark Andrews2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
b24061719ced97ecdbc7cfcf925c217d0dd80834Mark Andrews2281. [bug] Attempts to use undefined acls were not being logged.
9c0589bc8b1401e02c9b557737cb756e86b094ffMark Andrews2280. [func] Allow the experimental http server to be reached
9c0589bc8b1401e02c9b557737cb756e86b094ffMark Andrews over IPv6 as well as IPv4. [RT #17332]
dda69168ead4bb44f5a23949a04ee2069b7d4ef0Mark Andrews2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
dda69168ead4bb44f5a23949a04ee2069b7d4ef0Mark Andrews to protect applications from receiving spurious
ed1c845c1d3a6b9c2c38e9f7ab177d4ce0309639Mark Andrews SIGPIPE signals when using the resolver.
ed1c845c1d3a6b9c2c38e9f7ab177d4ce0309639Mark Andrews2278. [bug] win32: handle the case where Windows returns no
7b04216015f6984fa43fc96f1c741ec287f84917Evan Hunt search list or DNS suffix. [RT #17354]
7b04216015f6984fa43fc96f1c741ec287f84917Evan Hunt2277. [bug] Empty zone names were not correctly being caught at
7d891eaf911e5cab1f704615f8f1ef87c8716f46Mark Andrews in the post parse checks. [RT #17357]
7d891eaf911e5cab1f704615f8f1ef87c8716f46Mark Andrews2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
ffeaac1d826b541af39d7b20b9b68ff19ff01832Mark Andrews2275. [func] Add support to dig to perform IXFR queries over UDP.
c83b91fb6345464807161cc36c5d9046a15d5866Mark Andrews2274. [func] Log zone transfer statistics. [RT #17336]
fa827173df3418bc56774aa528f7ca30fd0ee17cMark Andrews2273. [bug] Adjust log level to WARNING when saving inconsistent
fa827173df3418bc56774aa528f7ca30fd0ee17cMark Andrews stub/slave master and journal files. [RT# 17279]
1c5990c2f98abf0c2adf7f54a531d8a4a3965414Mark Andrews2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
80169c379dd4e0a6e164b7cac4bf5fa013c91138Mark Andrews2271. [bug] Fix a memory leak in http server code [RT #17100]
10c12aa5493f34920585164c5fb54a7ac9109fbdMark Andrews2270. [bug] dns_db_closeversion() version->writer could be reset
10c12aa5493f34920585164c5fb54a7ac9109fbdMark Andrews before it is tested. [RT #17290]
10c12aa5493f34920585164c5fb54a7ac9109fbdMark Andrews2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
10c12aa5493f34920585164c5fb54a7ac9109fbdMark Andrews2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
6b6d6509f6d80afae74eeb9f2e5baba696e29f32Mark Andrews --- 9.5.0b1 released ---
9a36fb86f5019f25705d25ea729d03fcf8ecaa95Mark Andrews2267. [bug] Radix tree node_num value could be set incorrectly,
a266ab205bfd1c510022e2cd2a8cb62988242593Mark Andrews causing positive ACL matches to look like negative
a266ab205bfd1c510022e2cd2a8cb62988242593Mark Andrews ones. [RT #17311]
3867312e4cc5c53d20f4020cc5b2459154406135Mark Andrews2266. [bug] client.c:get_clientmctx() returned the same mctx
3867312e4cc5c53d20f4020cc5b2459154406135Mark Andrews once the pool of mctx's was filled. [RT #17218]
8dba0e7d87d192deef8b2aac197e4f508043a30cEvan Hunt2265. [bug] Test that the memory context's basic_table is non NULL
8dba0e7d87d192deef8b2aac197e4f508043a30cEvan Hunt before freeing. [RT #17265]
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews2264. [bug] Server prefix length was being ignored. [RT #17308]
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews2263. [bug] "named-checkconf -z" failed to set default value
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews for "check-integrity". [RT #17306]
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews2262. [bug] Error status from all but the last view could be
947cf282a721b089c1106780f13ae8e6298bddb1Mark Andrews lost. [RT #17292]
52131a835133a76cb62d4a7d8bcf5fe7bf858858Mark Andrews2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
f687e639f00a31e0884fb2c95a627b10b50c364bEvan Hunt2260. [bug] Reported wrong clients-per-query when increasing the
f687e639f00a31e0884fb2c95a627b10b50c364bEvan Hunt value. [RT #17236]
523f3d630243211ddfda852f5224f7eff681d3a5Evan Hunt2259. [placeholder]
523f3d630243211ddfda852f5224f7eff681d3a5Evan Hunt --- 9.5.0a7 released ---
2fa1fc53324c0fca978c902e883c7cc011210536Mark Andrews2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
c9e976dc43070e2ed87988eeabed71195fab88baEvan Hunt2257. [bug] win32: Use the full path to vcredist_x86.exe when
a8783019814daa36dd57afe3f527462822834c3bEvan Hunt calling it. [RT #17222]
a8783019814daa36dd57afe3f527462822834c3bEvan Hunt2256. [bug] win32: Correctly register the installation location of
948c80ffa8f4efbade049f49d9751675f6937cf4Tinderbox User2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
fec7998314cbdaf1dc89513ffff5b45fc8ed73fdMark Andrews2254. [bug] timer.c:dispatch() failed to lock timer->lock
fec7998314cbdaf1dc89513ffff5b45fc8ed73fdMark Andrews when reading timer->idle allowing it to see
fec7998314cbdaf1dc89513ffff5b45fc8ed73fdMark Andrews intermediate values as timer->idle was reset by
7ae9399897c55d35cb6764277bce4b91d052e0dcEvan Hunt isc_timer_touch(). [RT #17243]
3d066288ad6c6fe2ec2a54475f541a305a085068Evan Hunt2253. [func] "max-cache-size" defaults to 32M.
3d066288ad6c6fe2ec2a54475f541a305a085068Evan Hunt "max-acache-size" defaults to 16M.
74717eef53ba5d6aefc80eb262bbb090ff4bb3b5Mark Andrews2252. [bug] Fixed errors in sortlist code [RT #17216]
74717eef53ba5d6aefc80eb262bbb090ff4bb3b5Mark Andrews2251. [placeholder]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt2250. [func] New flag 'memstatistics' to state whether the
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt memory statistics file should be written or not.
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt Additionally named's -m option will cause the
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt statistics file to be written. [RT #17113]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt2249. [bug] Only set Authentic Data bit if client requested
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt DNSSEC, per RFC 3655 [RT #17175]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt2247. [doc] Sort doc/misc/options. [RT #17067]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt2246. [bug] Make the startup of test servers (ans.pl) more
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt robust. [RT #17147]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt2245. [bug] Validating lack of DS records at trust anchors wasn't
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt working. [RT #17151]
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt2244. [func] Allow the check of nameserver names against the
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt SOA MNAME field to be disabled by specifying
1479200aa05414b2acf33607dbd1682c16f58c51Evan Hunt 'notify-to-soa yes;'. [RT #17073]
f5c24a7f48cd68337c21dea47a448ae2ff2ccb8cEvan Hunt2243. [func] Configuration files without a newline at the end now
f5c24a7f48cd68337c21dea47a448ae2ff2ccb8cEvan Hunt parse without error. [RT #17120]
f5c24a7f48cd68337c21dea47a448ae2ff2ccb8cEvan Hunt2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt library could require a source of random data.
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt a number of INSIST()s into plain fatal() errors
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt which report the triggering result code.
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt The 'key' command wasn't disabling GSS-TSIG.
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2548678376b5171567c902ef2d1768d2fc57f233Evan Hunt2238. [bug] It was possible to trigger a REQUIRE when a
2548678376b5171567c902ef2d1768d2fc57f233Evan Hunt validation was canceled. [RT #17106]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt2236. [bug] dnssec-signzone failed to preserve the case of
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt of wildcard owner names. [RT #17085]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
d46855caedd5cb101795707f6f467fa363ef1448Evan Hunt2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
180319f572fb6c1ca7000d22ea79a8dd77ae3f91Evan Hunt2233. [func] Add support for O(1) ACL processing, based on
180319f572fb6c1ca7000d22ea79a8dd77ae3f91Evan Hunt radix tree code originally written by Kevin
180319f572fb6c1ca7000d22ea79a8dd77ae3f91Evan Hunt Brintnall. [RT #16288]
7c73ac5e130db18837724ab53d46b23ddb98ce6eMark Andrews2232. [bug] dns_adb_findaddrinfo() could fail and return
9ba4efa4ac6d2d687cf1377bc9733d08d84da64cMark Andrews ISC_R_SUCCESS. [RT #17137]
0c2313eb367de3b58801d643d52c0fd9bc0e5df7Evan Hunt2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
0c2313eb367de3b58801d643d52c0fd9bc0e5df7Evan Hunt2230. [bug] We could INSIST reading a corrupted journal.
11649973111d83027faf08ed4fb36a2b3c29c875Mark Andrews2229. [bug] Null pointer dereference on query pool creation
74745c760c8ac4462aceb2fa6e55bc545621c66dEvan Hunt failure. [RT #17133]
74745c760c8ac4462aceb2fa6e55bc545621c66dEvan Hunt2228. [contrib] contrib: Change 2188 was incomplete.
905ba39e10a8f483d167b992ec31f4c0bf34326eMark Andrews2227. [cleanup] Tidied up the FAQ. [RT #17121]
087b3e8d90c482600c20f1bd6958697419c4e77dEvan Hunt2226. [placeholder]
24aaa0440116357eef3ab3796ebe53318b03b1ecEvan Hunt2225. [bug] More support for systems with no IPv4 addresses.
a0707b6acf359b78e06fd06228ebeec5758e7e1dJeremy C. Reed2224. [bug] Defer journal compaction if a xfrin is in progress.
251be6e99493754700f868e0021c48b82d1c670cMark Andrews2223. [bug] Make a new journal when compacting. [RT #17119]
53f91cbd80dc353ecb7e8914dae84a6cd85c67c6Mark Andrews2222. [func] named-checkconf now checks server key references.
eeb13c7cd2ddde29b8605b9444451ea6e235e06aEvan Hunt2221. [bug] Set the event result code to reflect the actual
48f97c23b7d59c925fc3f4280972e50b8ef67c35Mark Andrews record turned to caller when a cache update is
eeb13c7cd2ddde29b8605b9444451ea6e235e06aEvan Hunt rejected due to a more credible answer existing.
cef76ee5bd845a80e06da934edce4225bdba22a1Mark Andrews2220. [bug] win32: Address a race condition in final shutdown of
3d66a979b531b8549b412d9b592a6906fbb40143Mark Andrews the Windows socket code. [RT #17028]
3d66a979b531b8549b412d9b592a6906fbb40143Mark Andrews2219. [bug] Apply zone consistency checks to additions, not
3d66a979b531b8549b412d9b592a6906fbb40143Mark Andrews removals, when updating. [RT #17049]
d90344224afc80459778e4c3412fd1f9463e24d4Mark Andrews2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
f5695ad0e1a6cc8e19bfec7b71476e138de6cb6cMark Andrews2217. [func] Adjust update log levels. [RT #17092]
f5695ad0e1a6cc8e19bfec7b71476e138de6cb6cMark Andrews2216. [cleanup] Fix a number of errors reported by Coverity.
58f1ac8dadf2c1f215343a0b2d1df2df954c4b19Mark Andrews2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
5244e505adc08719e1387392c6eb85c453729256Mark Andrews2214. [bug] Deregister OpenSSL lock callback when cleaning
5244e505adc08719e1387392c6eb85c453729256Mark Andrews up. Reorder OpenSSL cleanup so that RAND_cleanup()
cfe32752a66fe1f050d5ed7ddce75f6d58fe1637Evan Hunt is called before the locks are destroyed. [RT #17098]
cfe32752a66fe1f050d5ed7ddce75f6d58fe1637Evan Hunt2213. [bug] SIG0 diagnostic failure messages were looking at the
493f3eb297ea90ad2eb349591f1cb88194dce46dMark Andrews wrong status code. [RT #17101]
c5734964e6400f9e6d8c3f057fcccab596929deaMark Andrews2212. [func] 'host -m' now causes memory statistics and active
c5734964e6400f9e6d8c3f057fcccab596929deaMark Andrews memory to be printed at exit. [RT 17028]
eaa2277753c6e7e642e83b2ccd27671a15336310Evan Hunt2211. [func] Update "dynamic update temporarily disabled" message.
43b9737b11f4f14b2d378746d0cd5561b1dc24a0Mark Andrews2210. [bug] Deleting class specific records via UPDATE could
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt fail. [RT #17074]
fffcc1b13582447c9f94e498f4aaf43329c531d2Evan Hunt2209. [port] osx: linking against user supplied static OpenSSL
3e90f6c373d2e6c9c9909b112468975c4c86544eMark Andrews libraries failed as the system ones were still being
3e90f6c373d2e6c9c9909b112468975c4c86544eMark Andrews found. [RT #17078]
3e90f6c373d2e6c9c9909b112468975c4c86544eMark Andrews2208. [port] win32: make sure both build methods produce the
c38341ec435fb78de6d12c1001201f9ac7487b68Mark Andrews same output. [RT #17058]
c38341ec435fb78de6d12c1001201f9ac7487b68Mark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
c3bb8bb228bc8a914abc77a411faace9861632eaMark Andrews ai_canonname correctly. [RT #17061]
7712d1660a308ec3de17f1ddbbf801eb0d663f3eEvan Hunt --- 9.5.0a6 released ---
7712d1660a308ec3de17f1ddbbf801eb0d663f3eEvan Hunt2206. [security] "allow-query-cache" and "allow-recursion" now
b04839cfe21f131a8e7c7cae2a89e6ca8b678b5aMark Andrews cross inherit from each other.
3a55d4352767acb4e0572aabfa917610001f5c9cMark Andrews If allow-query-cache is not set in named.conf then
3a55d4352767acb4e0572aabfa917610001f5c9cMark Andrews allow-recursion is used if set, otherwise allow-query
bc5db10d721aa9bf570578e52e17371e67bfcf5cMark Andrews is used if set, otherwise the default (localnets;
bc5db10d721aa9bf570578e52e17371e67bfcf5cMark Andrews localhost;) is used.
e539e4370b95711606a269e69ccfc18fae8f9ce7Evan Hunt If allow-recursion is not set in named.conf then
70be3889746884692aa49939833d624ddd432bf0Mark Andrews allow-query-cache is used if set, otherwise allow-query
70be3889746884692aa49939833d624ddd432bf0Mark Andrews is used if set, otherwise the default (localnets;
d586792059601b37b17a9b3e317f4595cb30d854Evan Hunt localhost;) is used.
586db4a3e4664109fe8ce31fdd6a1b9c5bb67cbfMukund Sivaraman2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
275a8affe74d29d5fa51c9ba7172b90e9968199aMark Andrews2204. [bug] "rndc flushanme name unknown-view" caused named
275a8affe74d29d5fa51c9ba7172b90e9968199aMark Andrews to crash. [RT #16984]
6a6838f97363c7f3abe47e1fb116be2593bc53a5Mark Andrews2203. [security] Query id generation was cryptographically weak.
6a6838f97363c7f3abe47e1fb116be2593bc53a5Mark Andrews [RT # 16915]
ac5ed748602c890d596bed07b0b23b8b5f42b2f6Mark Andrews2202. [security] The default acls for allow-query-cache and
ac5ed748602c890d596bed07b0b23b8b5f42b2f6Mark Andrews allow-recursion were not being applied. [RT #16960]
89cf81b4625c574f60c21e0dce12b150f3c5583cMark Andrews2201. [bug] The build failed in a separate object directory.
2064e46209f35d2afad526622d975647f9c2098bMark Andrews2200. [bug] The search for cached NSEC records was stopping to
2064e46209f35d2afad526622d975647f9c2098bMark Andrews early leading to excessive DLV queries. [RT #16930]
71ec6d09406771c0ad546d2d475a7f16c0198844Mark Andrews2199. [bug] win32: don't call WSAStartup() while loading dlls.
71ec6d09406771c0ad546d2d475a7f16c0198844Mark Andrews2198. [bug] win32: RegCloseKey() could be called when
a920fb9dc2ff16f32dd73e53469d0febcdcc6c11Mark Andrews RegOpenKeyEx() failed. [RT #16911]
a920fb9dc2ff16f32dd73e53469d0febcdcc6c11Mark Andrews2197. [bug] Add INSIST to catch negative responses which are
3c13af375900ffe79af4926953799e6123c9d698Mark Andrews not setting the event result code appropriately.
d734818278966c45af997c7242e8cccd7a91a0b3Mark Andrews2196. [port] win32: yield processor while waiting for once to
d734818278966c45af997c7242e8cccd7a91a0b3Mark Andrews to complete. [RT #16958]
63e1ac1e0915dd1089493d6d092d39a3da817e59Mark Andrews2195. [func] dnssec-keygen now defaults to nametype "ZONE"
63e1ac1e0915dd1089493d6d092d39a3da817e59Mark Andrews when generating DNSKEYs. [RT #16954]
63e1ac1e0915dd1089493d6d092d39a3da817e59Mark Andrews2194. [bug] Close journal before calling 'done' in xfrin.c.
89119e3cafff373426858f6cec7c09539f53e209Mark Andrews --- 9.5.0a5 released ---
33399d6a143403bc4a9ccb9307af43ef04ab7633Mark Andrews2193. [port] win32: BINDInstall.exe is now linked statically.
ef117da20559f2a65f46ed9eb40deab5026cbd66Mark Andrews2192. [port] win32: use vcredist_x86.exe to install Visual
ef117da20559f2a65f46ed9eb40deab5026cbd66Mark Andrews Studio's redistributable dlls if building with
ef117da20559f2a65f46ed9eb40deab5026cbd66Mark Andrews Visual Stdio 2005 or later.
ba5c73b383b08326ab6b5ad2d7ca43e117e212f1Mark Andrews2191. [func] named-checkzone now allows dumping to stdout (-).
ba5c73b383b08326ab6b5ad2d7ca43e117e212f1Mark Andrews named-checkconf now has -h for help.
bf59efcf0ed41186a5f9c1ca61da15a3c99b46f3Mark Andrews named-checkzone now has -h for help.
bf59efcf0ed41186a5f9c1ca61da15a3c99b46f3Mark Andrews rndc now has -h for help.
bf59efcf0ed41186a5f9c1ca61da15a3c99b46f3Mark Andrews Better handling of '-?' for usage summaries.
faefeaddb39e693ea6cbcb81f2e5dbded21ced93Evan Hunt2190. [func] Make fallback to plain DNS from EDNS due to timeouts
faefeaddb39e693ea6cbcb81f2e5dbded21ced93Evan Hunt more visible. New logging category "edns-disabled".
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt2189. [bug] Handle socket() returning EINTR. [RT #15949]
c3bb8bb228bc8a914abc77a411faace9861632eaMark Andrews2188. [contrib] queryperf: autoconf changes to make the search for
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt libresolv or libbind more robust. [RT #16299]
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt2187. [bug] query_addds(), query_addwildcardproof() and
f5bb5eb7f6640af4a94e666bf1d7f84a6a7f1f23Mark Andrews query_addnxrrsetnsec() should take a version
f5bb5eb7f6640af4a94e666bf1d7f84a6a7f1f23Mark Andrews argument. [RT #16368]
a0d411c05f12c36b298d811af3b4f2c9f08e86d4Mark Andrews2186. [port] cygwin: libbind: check for struct sockaddr_storage
a0d411c05f12c36b298d811af3b4f2c9f08e86d4Mark Andrews independently of IPv6. [RT #16482]
a0d411c05f12c36b298d811af3b4f2c9f08e86d4Mark Andrews2185. [port] sunos: libbind: check for ssize_t, memmove() and
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman memchr(). [RT #16463]
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman2184. [bug] bind9.xsl.h didn't build out of the source tree.
c1d33c159bf81d6faf9948ac9a6f307ca52284afEvan Hunt2183. [bug] dnssec-signzone didn't handle offline private keys
06e0d6bb126e9986f29036e671b59f48b1d2efbcEvan Hunt well. [RT #16832]
06e0d6bb126e9986f29036e671b59f48b1d2efbcEvan Hunt2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
06e0d6bb126e9986f29036e671b59f48b1d2efbcEvan Hunt could return ISC_R_SUCCESS when they ran out of
8d8f9f7f86a33a155dd74b9b2c1317afca555d54Evan Hunt memory. [RT #16365]
8d8f9f7f86a33a155dd74b9b2c1317afca555d54Evan Hunt2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
7c9d11b654028f9901183c076b37a5494635f447Evan Hunt2180. [cleanup] Remove bit test from 'compress_test' as they
7c9d11b654028f9901183c076b37a5494635f447Evan Hunt are no longer needed. [RT #16497]
20dec973da306d5b0776c9d3b598fdbd3a59a28eMark Andrews2179. [func] 'rndc command zone' will now find 'zone' if it is
20dec973da306d5b0776c9d3b598fdbd3a59a28eMark Andrews unique to all the views. [RT #16821]
3b187cad7a1754e098ab9dabfcb44c8b437fb589Mark Andrews2178. [bug] 'rndc reload' of a slave or stub zone resulted in
b16d99bac1d100735224ab3eaa84632537ff21b5Mark Andrews a reference leak. [RT #16867]
79d27f505a67ee1fb5cf104cbe7b1ead67d252b4Mukund Sivaraman2177. [bug] Array bounds overrun on read (rcodetext) at
79d27f505a67ee1fb5cf104cbe7b1ead67d252b4Mukund Sivaraman debug level 10+. [RT #16798]
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman2176. [contrib] dbus update to handle race condition during
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman initialization (Bugzilla 235809). [RT #16842]
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman2175. [bug] win32: windows broadcast condition variable support
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman was broken. [RT #16592]
93d4128dcd54c152cf97b2c36caba8f3c8de3280Mark Andrews2174. [bug] I/O errors should always be fatal when reading
93d4128dcd54c152cf97b2c36caba8f3c8de3280Mark Andrews master files. [RT #16825]
50a745417461a4c007248202bb3a8bf7be426813Mark Andrews2173. [port] win32: When compiling with MSVS 2005 SP1 we also
50a745417461a4c007248202bb3a8bf7be426813Mark Andrews --- 9.5.0a4 released ---
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt2172. [bug] query_addsoa() was being called with a non zone db.
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt2171. [bug] Handle breaks in DNSSEC trust chains where the parent
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt servers are not DS aware (DS queries to the parent
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt return a referral to the child).
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt2170. [func] Add acache processing to test suite. [RT #16711]
fa6308bd57f716732ba70bbafc1d09e861e4acc1Mark Andrews2169. [bug] host, nslookup: when reporting NXDOMAIN report the
fa6308bd57f716732ba70bbafc1d09e861e4acc1Mark Andrews given name and not the last name searched for.
a4d76e3f0ba6f1fc2ba4b324f318e909b83bc860Evan Hunt2168. [bug] nsupdate: in non-interactive mode treat syntax errors
3d751891410f9892ca1c1deba2f7d8556ae91b0cMark Andrews as fatal errors. [RT #16785]
3d751891410f9892ca1c1deba2f7d8556ae91b0cMark Andrews2167. [bug] When re-using a automatic zone named failed to
800d25b8482c52487b4dab53cb10fa74061f1e94Mark Andrews attach it to the new view. [RT #16786]
800d25b8482c52487b4dab53cb10fa74061f1e94Mark Andrews --- 9.5.0a3 released ---
9b819daddf8f4a5bd42276ee91bf9686d42f3ceeMark Andrews2166. [bug] When running in batch mode, dig could misinterpret
9b819daddf8f4a5bd42276ee91bf9686d42f3ceeMark Andrews a server address as a name to be looked up, causing
9b819daddf8f4a5bd42276ee91bf9686d42f3ceeMark Andrews unexpected output. [RT #16743]
f7ae6c8fdd2cd5e276251647e6852cccfc92847bMark Andrews2165. [func] Allow the destination address of a query to determine
f7ae6c8fdd2cd5e276251647e6852cccfc92847bMark Andrews if we will answer the query or recurse.
586d94eb740587975d5348b22a5fb8440d95925dMark Andrews allow-query-on, allow-recursion-on and
a569e1b3213668bc704194367ea12c23456ad1d2Mark Andrews allow-query-cache-on. [RT #16291]
a569e1b3213668bc704194367ea12c23456ad1d2Mark Andrews2164. [bug] The code to determine how named-checkzone /
a569e1b3213668bc704194367ea12c23456ad1d2Mark Andrews named-compilezone was called failed under windows.
603a78708343f063b44affb882ef93bb19a5142aMark Andrews2163. [bug] If only one of query-source and query-source-v6
603a78708343f063b44affb882ef93bb19a5142aMark Andrews specified a port the query pools code broke (change
603a78708343f063b44affb882ef93bb19a5142aMark Andrews 2129). [RT #16768]
ba586e9568364eb2da871f5fb2b71716f7c31865Mark Andrews2162. [func] Allow "rrset-order fixed" to be disabled at compile
ba586e9568364eb2da871f5fb2b71716f7c31865Mark Andrews time. [RT #16665]
570216f5a373cdaaa2eb2d9b5990150dd5a7b41bEvan Hunt2161. [bug] Fix which log messages are emitted for 'rndc flush'.
0fe07891819138ad6e1de45f279cff940d170542Mark Andrews2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
0fe07891819138ad6e1de45f279cff940d170542Mark Andrews from getifaddrs(). [RT #16708]
ea58c563bccc2a8dc20886c99c7c3334a971b6d3Evan Hunt --- 9.5.0a2 released ---
ea58c563bccc2a8dc20886c99c7c3334a971b6d3Evan Hunt2159. [bug] Array bounds overrun in acache processing. [RT #16710]
27b09ceb12ec95de461bd2780615d4064ccb1419Mark Andrews2158. [bug] ns_client_isself() failed to initialize key
27b09ceb12ec95de461bd2780615d4064ccb1419Mark Andrews leading to a REQUIRE failure. [RT #16688]
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt2157. [func] dns_db_transfernode() created. [RT #16685]
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt resolver.c:validated() and resolver.c:cache_name().
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt Fix a memory leak in rbtdb.c:free_noqname().
6fa84a3e255ef9e6233f0a8d134fc6d273f04599Evan Hunt Make lookup.c:lookup_find() robust against
6fa84a3e255ef9e6233f0a8d134fc6d273f04599Evan Hunt event leaks. [RT #16685]
104f0e51ac7f472e69d53e4900fe121b7dc78537Tinderbox User2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
01f881c1c5683054ee3366929eae6f811777ce46Mark Andrews2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
01f881c1c5683054ee3366929eae6f811777ce46Mark Andrews matched in acls by omitting the scope. [RT #16599]
ca84a056bdb492e8894c70fd7bf6a885df03039fMark Andrews2153. [bug] nsupdate could leak memory. [RT #16691]
a14fe8522977d391096942aae5250f00ca32d2d4Mark Andrews2152. [cleanup] Use sizeof(buf) instead of fixed number in
a14fe8522977d391096942aae5250f00ca32d2d4Mark Andrews dighost.c:get_trusted_key(). [RT #16678]
5a8edcafd13fc63a066e8e42e0f95cdbf9606414Mark Andrews2151. [bug] Missing newline in usage message for journalprint.
05816676bb82a5657a741ef4d378c7fb83912cfcMark Andrews2150. [bug] 'rrset-order cyclic' uniformly distribute the
05816676bb82a5657a741ef4d378c7fb83912cfcMark Andrews starting point for the first response for a given
29225772176ec580b2c903928a5c18e2e24889d0Mark Andrews RRset. [RT #16655]
1b513b6120e6f445960149b8f057aea19e1f5fe6Francis Dupont2149. [bug] isc_mem_checkdestroyed() failed to abort on
761f60fc356c9987258cd10b4aa216c6296d922bFrancis Dupont if there were still active memory contexts.
0e338b60cdb2cf7cedb4fc17f6a14b518d1245c8Mark Andrews2148. [func] Add positive logging for rndc commands. [RT #14623]
0e338b60cdb2cf7cedb4fc17f6a14b518d1245c8Mark Andrews2147. [bug] libbind: remove potential buffer overflow from
faa01edd13613c077c3cb663c36f36bd527d1a4bMark Andrews2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
faa01edd13613c077c3cb663c36f36bd527d1a4bMark Andrews SO_BSDCOMPAT" message. [RT #16641]
1ea6e09c376b1351c614474a88675b1a9bda6571Evan Hunt2145. [bug] Check DS/DLV digest lengths for known digests.
60988462e5d6db53205851d056e3482a29239be9Evan Hunt2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
cd07e4d038fda6f9bacecb3067cc6fa43a67fc0aMark Andrews2143. [bug] We failed to restart the IPv6 client when the
cd07e4d038fda6f9bacecb3067cc6fa43a67fc0aMark Andrews kernel failed to return the destination the
b36fc8294e1328912b940899d436c60986c92435Mark Andrews packet was sent to. [RT #16613]
fe148bca7ea6612bb7e931fdcd2e66c32d2d2a9aMark Andrews2142. [bug] Handle master files with a modification time that
b36fc8294e1328912b940899d436c60986c92435Mark Andrews matches the epoch. [RT# 16612]
dd820d8fd2714ee1ae53ff0c7f6973250048f2d2Mark Andrews2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
c0c4512020c0a4a9e5b087cb8cad1cd68fb3f52eEvan Hunt equivalent of LDH checks). [RT #16609]
c0c4512020c0a4a9e5b087cb8cad1cd68fb3f52eEvan Hunt2140. [bug] libbind: missing unlock on pthread_key_create()
5d739300d12363f36ffa72836d2c10ff8c791b12Mark Andrews failures. [RT #16654]
5d739300d12363f36ffa72836d2c10ff8c791b12Mark Andrews2139. [bug] dns_view_find() was being called with wrong type
5d739300d12363f36ffa72836d2c10ff8c791b12Mark Andrews in adb.c. [RT #16670]
87344c2cb3d4b413941d514a078f4098bcb816e9Mark Andrews2138. [bug] Lock order reversal in resolver.c. [RT #16653]
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt2137. [port] Mips little endian and/or mips 64 bit are now
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt supported for atomic operations. [RT#16648]
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt2136. [bug] nslookup/host looped if there was no search list
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt and the host didn't exist. [RT #16657]
2b78610512f208a6a35eb0976d039c2001cba7e6Evan Hunt2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
0dc0b029e9aecc6e2139109091ea68cc6aff7081Evan Hunt2134. [func] Additional statistics support. [RT #16666]
0dc0b029e9aecc6e2139109091ea68cc6aff7081Evan Hunt2133. [port] powerpc: Support both IBM and MacOS Power PC
0dc0b029e9aecc6e2139109091ea68cc6aff7081Evan Hunt assembler syntaxes. [RT #16647]
cd750f6e7449678173e8cfe080ae0bf3dcb424cfEvan Hunt2132. [bug] Missing unlock on out of memory in
cd750f6e7449678173e8cfe080ae0bf3dcb424cfEvan Hunt dns_dispatchmgr_setudp().
cd750f6e7449678173e8cfe080ae0bf3dcb424cfEvan Hunt2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
b4ba66ba1e36a6d8236d20be55273ce663819d69Evan Hunt2130. [func] Log if CD or DO were set. [RT #16640]
b4ba66ba1e36a6d8236d20be55273ce663819d69Evan Hunt2129. [func] Provide a pool of UDP sockets for queries to be
5cef2421bde74ef8f789c9c83c1219553060ce16Mark Andrews made over. See use-queryport-pool, queryport-pool-ports
5cef2421bde74ef8f789c9c83c1219553060ce16Mark Andrews and queryport-pool-updateinterval. [RT #16415]
3e5743068c95036324c24efa47b36ab0f7916d47Evan Hunt2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
c11e46110b2b6236c68d89d4ea557c1d35e5d271Mark Andrews2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
c11e46110b2b6236c68d89d4ea557c1d35e5d271Mark Andrews2126. [security] Serialize validation of type ANY responses. [RT #16555]
e01fbe2a45f9641968264a3bdf76d290e20521d7Evan Hunt2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
e01fbe2a45f9641968264a3bdf76d290e20521d7Evan Hunt was defined. [RT #16574]
76884179fd3ba491db80a285c752671025f74730Mark Andrews2124. [security] It was possible to dereference a freed fetch
76884179fd3ba491db80a285c752671025f74730Mark Andrews context. [RT #16584]
eb1a7730f013e9a16d709c9ee8f41d73cde3680eEvan Hunt --- 9.5.0a1 released ---
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt2123. [func] Use Doxygen to generate internal documentation.
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt2122. [func] Experimental http server and statistics support
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt for named via xml.
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt second timeout. [RT #16553]
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt2120. [doc] Fix markup on nsupdate man page. [RT #16556]
36e5ac00333d89001f0c518a7d381d16c38d0402Mark Andrews2119. [compat] libbind: allow res_init() to succeed enough to
36e5ac00333d89001f0c518a7d381d16c38d0402Mark Andrews return the default domain even if it was unable
36e5ac00333d89001f0c518a7d381d16c38d0402Mark Andrews to allocate memory.
37f7c4c673622e984a41570fda42c1a678622fa4Tinderbox User2118. [bug] Handle response with long chains of domain name
e916c4f840e6f05c1137a2653b4ef70a1056bf74Mark Andrews compression pointers which point to other compression
e916c4f840e6f05c1137a2653b4ef70a1056bf74Mark Andrews pointers. [RT #16427]
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt which could lead to validation failures. named didn't
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt handle negative DS responses that were in the process
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt of being validated. Check CNAME bit before accepting
1a9932dde111e05b4b9177c1146695817c3a20d2Evan Hunt NODATA proof. To be able to ignore a child NSEC there
1a9932dde111e05b4b9177c1146695817c3a20d2Evan Hunt must be SOA (and NS) set in the bitmap. [RT #16399]
1f73b46904d266abe57814ea512dc7069e7a1e73Evan Hunt2116. [bug] 'rndc reload' could cause the cache to continually
1f73b46904d266abe57814ea512dc7069e7a1e73Evan Hunt be cleaned. [RT #16401]
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt2115. [bug] 'rndc reconfig' could trigger a INSIST if the
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt number of masters for a zone was reduced. [RT #16444]
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt2114. [bug] dig/host/nslookup: searches for names with multiple
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt labels were failing. [RT #16447]
4e7973990c2aaec391cf307a7e60583331568e01Evan Hunt2113. [bug] nsupdate: if a zone is specified it should be used
4e7973990c2aaec391cf307a7e60583331568e01Evan Hunt for server discover. [RT# 16455]
a6d48ae49345c1995c7ac7c0628bf5f9eac0719aJeremy C. Reed2112. [security] Warn if weak RSA exponent is used. [RT #16460]
e560fbdf77b08ff23ab71b107f022829bcd552dbMark Andrews2111. [bug] Fix a number of errors reported by Coverity.
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt priming queries. [RT #16491]
469bbe0f973bf33e20d6011748cb68fab8a9a12dMark Andrews2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
fc84418f4a809e40f16cfb5b4f3834d735fca31fTinderbox User2108. [func] DHCID support. [RT #16456]
2dc978b8a1563f6dd413a8a9456659ade00f9e9eEvan Hunt2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
a6d48ae49345c1995c7ac7c0628bf5f9eac0719aJeremy C. Reed2106. [func] 'rndc status' now reports named's version. [RT #16426]
7dcb304dd0bfe5888593199e0a9a8d64b8f022adMark Andrews2105. [func] GSS-TSIG support (RFC 3645).
92fe6db3e46016f4ce0d6e372c745469bba10b5eEvan Hunt2104. [port] Fix Solaris SMF error message.
7cd8e7915afba7064c18c4bf74ecce0627c61027Evan Hunt2103. [port] Add /usr/sfw to list of locations for OpenSSL
7cd8e7915afba7064c18c4bf74ecce0627c61027Evan Hunt under Solaris.
f5df4974b7b5081c4778d5796127b4d6584e834eEvan Hunt2102. [port] Silence Solaris 10 warnings.
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews2101. [bug] OpenSSL version checks were not quite right.
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews2100. [port] win32: copy libeay32.dll to Build\Debug.
38c3ed154a2e014dad359e852b08722defa118ebEvan Hunt Copy Debug\named-checkzone to Debug\named-compilezone.
baad8d9fd8dd054ce1edf350ff0c0f2038a1519eEvan Hunt2099. [port] win32: more manifest issues.
baad8d9fd8dd054ce1edf350ff0c0f2038a1519eEvan Hunt2098. [bug] Race in rbtdb.c:no_references(), which occasionally
866606b9c712ac654689e02a0c12151eaa86fbc1Mark Andrews triggered an INSIST failure about the node lock
866606b9c712ac654689e02a0c12151eaa86fbc1Mark Andrews reference. [RT #16411]
f0e9d6e905235482ff9b4be770ee35018fcd8234Evan Hunt2097. [bug] named could reference a destroyed memory context
7ef5dc87b64d639cadfcce868428f9fb2a84fb92Evan Hunt after being reloaded / reconfigured. [RT #16428]
7ef5dc87b64d639cadfcce868428f9fb2a84fb92Evan Hunt2096. [bug] libbind: handle applications that fail to detect
44fbdddcadd85a6e40ebc7b7834e08e156c681a1Evan Hunt res_init() failures better.
44fbdddcadd85a6e40ebc7b7834e08e156c681a1Evan Hunt2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
0dfd942409fbd3ad1e9a06c887742f0c8760ffd7Mark Andrews net_cidr_ntop_ipv6(). [RT #16388]
0dfd942409fbd3ad1e9a06c887742f0c8760ffd7Mark Andrews2094. [contrib] Update named-bootconf. [RT# 16404]
568de8123acb1a94e2d7bfe9cc5eb5d099f6c1f5Mark Andrews2093. [bug] named-checkzone -s was broken.
51e6164fd6b47121040f79b6330edf6258418a0bMark Andrews2092. [bug] win32: dig, host, nslookup. Use registry config
ef9334d745a759b02821950230260c1941d066d3Mukund Sivaraman if resolv.conf does not exist or no nameservers
ef9334d745a759b02821950230260c1941d066d3Mukund Sivaraman listed. [RT #15877]
6ffa8fcf764121bbe3b9eb116ddade5778608375Mark Andrews2091. [port] dighost.c: race condition on cleanup. [RT #16417]
bbd5c0ab33b7c76058a4b17bd1f9ce443aa90c7fEvan Hunt2090. [port] win32: Visual C++ 2005 command line manifest support.
c73a7e127fd3d2b2d3257f67d7a0b94441797f3aMark Andrews2089. [security] Raise the minimum safe OpenSSL versions to
c73a7e127fd3d2b2d3257f67d7a0b94441797f3aMark Andrews OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
c73a7e127fd3d2b2d3257f67d7a0b94441797f3aMark Andrews prior to these have known security flaws which
bad82a46c420eaa5ca62a319923472fba7e391f1Mark Andrews are (potentially) exploitable in named. [RT #16391]
09ab38c151751b76b8043275422239463eb70cbdMark Andrews2088. [security] Change the default RSA exponent from 3 to 65537.
09ab38c151751b76b8043275422239463eb70cbdMark Andrews2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
61cfadb50e2ddce1073760e77880de73eb6e65daMark Andrews2086. [port] libbind: FreeBSD now has get*by*_r() functions.
9896a01aebb4201459079f8926dcd8045514b73aEvan Hunt2085. [doc] win32: added index.html and README to zip. [RT #16201]
22e29471c784acd09619841926c4f765e36ac74aEvan Hunt2084. [contrib] dbus update for 9.3.3rc2.
22e29471c784acd09619841926c4f765e36ac74aEvan Hunt2083. [port] win32: Visual C++ 2005 support.
acbb301e648b82fcc38b876a44403cf0fe539cc9Evan Hunt2082. [doc] Document 'cache-file' as a test only option.
acbb301e648b82fcc38b876a44403cf0fe539cc9Evan Hunt2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
9823d3d0fa2995a90f577a5801b1e5f7288a1facJeremy C. Reed2080. [port] libbind: res_init.c did not compile on older versions
3911e7610f29dc664cbe8336f35c0652cd74652eMark Andrews of Solaris. [RT #16363]
89740699cd2191d9b84e67716c281b2dfeba5e56Evan Hunt2079. [bug] The lame cache was not handling multiple types
89740699cd2191d9b84e67716c281b2dfeba5e56Evan Hunt correctly. [RT #16361]
89740699cd2191d9b84e67716c281b2dfeba5e56Evan Hunt2078. [bug] dnssec-checkzone output style "default" was badly
89740699cd2191d9b84e67716c281b2dfeba5e56Evan Hunt named. It is now called "relative". [RT #16326]
46bc64f4b1a0e84ab0397943453fe83a17baf2c4Evan Hunt2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
46bc64f4b1a0e84ab0397943453fe83a17baf2c4Evan Hunt complete signed zone. [RT #16326]
46bc64f4b1a0e84ab0397943453fe83a17baf2c4Evan Hunt2076. [bug] Several files were missing #include <config.h>
1cf8e9c0b7e75fcd2bfd10367ff362c674972a0dMark Andrews causing build failures on OSF. [RT #16341]
62258ada486dfe76afc3f0f3835d3a45d2d8105cEvan Hunt2075. [bug] The spillat timer event hander could leak memory.
8cbf3b6fc35091abde426930f2eadb8f53476c98Evan Hunt2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
8cbf3b6fc35091abde426930f2eadb8f53476c98Evan Hunt dns_request_createraw2() and dns_request_createraw3()
8cbf3b6fc35091abde426930f2eadb8f53476c98Evan Hunt failed to send multiple UDP requests. [RT #16349]
7bd455641455950eff7d21be652c8142b134d32fTinderbox User2073. [bug] Incorrect semantics check for update policy "wildcard".
9ba2cef72dacb1dc1105415956e1c311ac25d02cEvan Hunt2072. [bug] We were not generating valid HMAC SHA digests.
78f79084fcfc40f1237c99e2d4325b24b750d012Evan Hunt2071. [port] Test whether gcc accepts -fno-strict-aliasing.
a2fd1de97d9ff685697aadba7f67a450557b0a06Evan Hunt2070. [bug] The remote address was not always displayed when
a2fd1de97d9ff685697aadba7f67a450557b0a06Evan Hunt reporting dispatch failures. [RT #16315]
def8172275039dd667d2c54afa51af80fef9c2abEvan Hunt2069. [bug] Cross compiling was not working. [RT #16330]
cc2a5156841ec6dfe1e90eed40c65fa8cdec246dTinderbox User2068. [cleanup] Lower incremental tuning message to debug 1.
d51456e4537729c2263303350abeff45379b1105Evan Hunt2067. [bug] 'rndc' could close the socket too early triggering
d51456e4537729c2263303350abeff45379b1105Evan Hunt a INSIST under Windows. [RT #16317]
e69790ac0067c0034f57e070d513833550786a93Evan Hunt2066. [security] Handle SIG queries gracefully. [RT #16300]
e69790ac0067c0034f57e070d513833550786a93Evan Hunt2065. [bug] libbind: probe for HPUX prototypes for
67d01dcacb2051a03377c8ec5c0e36604c17aea5Evan Hunt endprotoent_r() and endservent_r(). [RT 16313]
67d01dcacb2051a03377c8ec5c0e36604c17aea5Evan Hunt2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
6be12fa63b38fe7648811e042c9aad58cee2ead7Evan Hunt2063. [bug] Change #1955 introduced a bug which caused the first
6be12fa63b38fe7648811e042c9aad58cee2ead7Evan Hunt 'rndc flush' call to not free memory. [RT #16244]
6be12fa63b38fe7648811e042c9aad58cee2ead7Evan Hunt2062. [bug] 'dig +nssearch' was reusing a buffer before it had
262fea66373a062cac1a0e99b5a4675987bb61ffEvan Hunt been returned by the socket code. [RT #16307]
262fea66373a062cac1a0e99b5a4675987bb61ffEvan Hunt2061. [bug] Accept expired wildcard message reversed. [RT #16296]
084ba95b083dc55fd10631ad43fa8fff48707648Evan Hunt2060. [bug] Enabling DLZ support could leave views partially
084ba95b083dc55fd10631ad43fa8fff48707648Evan Hunt configured. [RT #16295]
3ef4b7383ab4310df48ee5143e361ab1cfa3c8e8Evan Hunt2059. [bug] Search into cache rbtdb could trigger an INSIST
3ef4b7383ab4310df48ee5143e361ab1cfa3c8e8Evan Hunt failure while cleaning up a stale rdataset.
72aa3b2a4e33a1b9b3521fddce383002b7201ab7Evan Hunt2058. [bug] Adjust how we calculate rtt estimates in the presence
72aa3b2a4e33a1b9b3521fddce383002b7201ab7Evan Hunt of authoritative servers that drop EDNS and/or CD
368aedf188d7c7782cae8a5ce2a978be47b5a764Evan Hunt requests. Also fallback to EDNS/512 and plain DNS
368aedf188d7c7782cae8a5ce2a978be47b5a764Evan Hunt faster for zones with less than 3 servers. [RT #16187]
e71905610c72f474a2943934a48f43121c79c939Evan Hunt2057. [bug] Make setting "ra" dependent on both allow-query-cache
e71905610c72f474a2943934a48f43121c79c939Evan Hunt and allow-recursion. [RT #16290]
1aced7b8702288f656ded594cd5bd7678bb4fe70Evan Hunt2056. [bug] dig: ixfr= was not being treated case insensitively
1aced7b8702288f656ded594cd5bd7678bb4fe70Evan Hunt at all times. [RT #15955]
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt2055. [bug] Missing goto after dropping multicast query.
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt2054. [port] freebsd: do not explicitly link against -lpthread.
f79ee00c69259b9a27f9f0d12afa6c7b64005dedEvan Hunt2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
7fbbc9bfd34f47aab843de668d5f5ffbc53d6e45Mark Andrews2052. [bug] 'rndc' improve connect failed message to report
7fbbc9bfd34f47aab843de668d5f5ffbc53d6e45Mark Andrews the failing address. [RT #15978]
96c17c5ecb012028ad9d66f93a252994c6ed035cMark Andrews2051. [port] More strtol() fixes. [RT #16249]
96c17c5ecb012028ad9d66f93a252994c6ed035cMark Andrews2050. [bug] Parsing of NSAP records was not case insensitive.
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2049. [bug] Restore SOA before AXFR when falling back from
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt a attempted IXFR when transferring in a zone.
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt Allow a initial SOA query before attempting
1eb5e1b4d7ea98dea07000edef15148d3d714b9dEvan Hunt a AXFR to be requested. [RT #16156]
3a01ded15da064de23124e5d1a89143eceec5523Evan Hunt2048. [bug] It was possible to loop forever when using
3a01ded15da064de23124e5d1a89143eceec5523Evan Hunt avoid-v4-udp-ports / avoid-v6-udp-ports when
3a01ded15da064de23124e5d1a89143eceec5523Evan Hunt the OS always returned the same local port.
0072ae822d966550f7c0956ed22184ec20e98f34Mark Andrews2047. [bug] Failed to initialize the interface flags to zero.
9e39bafd2ef3e52719b5f16aec077c7885e7e1f1Mark Andrews2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
02a5e3ed85cbfc099874bb34e5901537399b5e24Mark Andrews cleanup [RT #16247].
02a5e3ed85cbfc099874bb34e5901537399b5e24Mark Andrews2045. [func] Use lock buckets for acache entries to limit memory
bce9696c7ac65792469b29ce0ad13564953b62caEvan Hunt consumption. [RT #16183]
bce9696c7ac65792469b29ce0ad13564953b62caEvan Hunt2044. [port] Add support for atomic operations for Itanium.
edd82b2ce275d513fb2799b90ec464f434880e87Mark Andrews2043. [port] nsupdate/nslookup: Force the flushing of the prompt
86856f4f3069bb2d75851b56401ffde18f41198fMark Andrews for interactive sessions. [RT#16148]
86856f4f3069bb2d75851b56401ffde18f41198fMark Andrews2042. [bug] named-checkconf was incorrectly rejecting the
86856f4f3069bb2d75851b56401ffde18f41198fMark Andrews logging category "config". [RT #16117]
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt set of libraries to be linked. [RT #16129]
16134801ce8fffbb6c42bb54d544c3397a45ad06Mark Andrews2040. [bug] rbtdb no_references() could trigger an INSIST
7da74ea46df30a7431441a3b8adf5134dab5067eJeremy C. Reed failure with --enable-atomic. [RT #16022]
64584aa0980625f834fa148dc3c95ab714efe703Evan Hunt2039. [func] Check that all buffers passed to the socket code
16134801ce8fffbb6c42bb54d544c3397a45ad06Mark Andrews have been retrieved when the socket event is freed.
16134801ce8fffbb6c42bb54d544c3397a45ad06Mark Andrews2038. [bug] dig/nslookup/host was unlinking from wrong list
d7b9756a214030b0022ce791b67b12fb7bceeea0Evan Hunt when handling errors. [RT #16122]
4357e13a4bc2e175d73b20f9ef3e809b3e269ee4Evan Hunt2037. [func] When unlinking the first or last element in a list
4357e13a4bc2e175d73b20f9ef3e809b3e269ee4Evan Hunt check that the list head points to the element to
d7b9756a214030b0022ce791b67b12fb7bceeea0Evan Hunt be unlinked. [RT #15959]
7e2e41df676e1e19186242afd88a6794e37a9becMark Andrews2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
7f5bdf7f4063c2fefb18900468d2c851f8de7816Evan Hunt2035. [func] Make falling back to TCP on UDP refresh failure
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt optional. Default "try-tcp-refresh yes;" for BIND 8
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt compatibility. [RT #16123]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt2033. [bug] We weren't creating multiple client memory contexts
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt on demand as expected. [RT #16095]
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt2031. [bug] Emit a error message when "rndc refresh" is called on
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt a non slave/stub zone. [RT # 16073]
0a5927a14f055f5550c76c818119f4811984272cMark Andrews2030. [bug] We were being overly conservative when disabling
96a35905057eb2ba7d977460776b06ae0911c8a7Evan Hunt openssl engine support. [RT #16030]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User2029. [bug] host printed out the server multiple times when
b5f6271f4daf1e54501af2cb7dd278d7e8003d65Mark Andrews specified on the command line. [RT #15992]
7da74ea46df30a7431441a3b8adf5134dab5067eJeremy C. Reed2028. [port] linux: socket.c compatibility for old systems.
96a35905057eb2ba7d977460776b06ae0911c8a7Evan Hunt2027. [port] libbind: Solaris x86 support. [RT #16020]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User2026. [bug] Rate limit the two recursive client exceeded messages.
1361e038900701e126213261c0a1178025ae5a72Tinderbox User2025. [func] Update "zone serial unchanged" message. [RT #16026]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User2024. [bug] named emitted spurious "zone serial unchanged"
1361e038900701e126213261c0a1178025ae5a72Tinderbox User messages on reload. [RT #16027]
38eabfcee7a9f206c268834ab9cb6d3408a31380Mark Andrews2023. [bug] "make install" should create ${localstatedir}/run and
38eabfcee7a9f206c268834ab9cb6d3408a31380Mark Andrews ${sysconfdir} if they do not exist. [RT #16033]
38eabfcee7a9f206c268834ab9cb6d3408a31380Mark Andrews2022. [bug] If dnssec validation is disabled only assert CD if
38eabfcee7a9f206c268834ab9cb6d3408a31380Mark Andrews CD was requested. [RT #16037]
7b9cb698dd07644762c675b5f57446467b4d5663Mark Andrews2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt2019. [tuning] Reduce the amount of work performed per quantum
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt when cleaning the cache. [RT #15986]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt2018. [bug] Checking if the HMAC MD5 private file was broken.
14bf4702f37cc707ede64a097f7d4aa671265492Evan Hunt2017. [bug] allow-query default was not correct. [RT #15946]
14bf4702f37cc707ede64a097f7d4aa671265492Evan Hunt2016. [bug] Return a partial answer if recursion is not
31f6244cc25ab0f8937edc26dbb26ba4f6a01f19Evan Hunt allowed but requested and we had the answer
31f6244cc25ab0f8937edc26dbb26ba4f6a01f19Evan Hunt to the original qname. [RT #15945]
2729aea3c1a720269aaae92ce3a84af1ba0a75ebMark Andrews2015. [cleanup] use-additional-cache is now acache-enable for
2729aea3c1a720269aaae92ce3a84af1ba0a75ebMark Andrews consistency. Default acache-enable off in BIND 9.4
a1271e2404dd42fcc477974bd0a190224f34f5f7Mark Andrews as it requires memory usage to be configured.
a1271e2404dd42fcc477974bd0a190224f34f5f7Mark Andrews It may be enabled by default in BIND 9.5 once we
a1271e2404dd42fcc477974bd0a190224f34f5f7Mark Andrews have more experience with it.
842a3e6d0eb745e34a3cc3e19c8c39b9492ac739Evan Hunt2014. [func] Statistics about acache now recorded and sent
842a3e6d0eb745e34a3cc3e19c8c39b9492ac739Evan Hunt to log. [RT #15976]
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt responses more gracefully. [RT #15941]
d7729155dff87d3c7a2b9103bf6e5164ea4d7dd7Mark Andrews2012. [func] Don't insert new acache entries if acache is full.
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews2011. [func] dnssec-signzone can now update the SOA record of
850b5e80930907e4747347201dc41e4d04e036f8Mark Andrews the signed zone, either as an increment or as the
850b5e80930907e4747347201dc41e4d04e036f8Mark Andrews system time(). [RT #15633]
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews2010. [placeholder] rt15958
41e55d04032c0eefd39d74ffb73657b04fb821ecEvan Hunt2009. [bug] libbind: Coverity fixes. [RT #15808]
41e55d04032c0eefd39d74ffb73657b04fb821ecEvan Hunt2008. [func] It is now possible to enable/disable DNSSEC
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt validation from rndc. This is useful for the
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt mobile hosts where the current connection point
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt breaks DNSSEC (firewall/proxy). [RT #15592]
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt rndc validation newstate [view]
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt2007. [func] It is now possible to explicitly enable DNSSEC
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt validation. default dnssec-validation no; to
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt be changed to yes in 9.5.0. [RT #15674]
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt2006. [security] Allow-query-cache and allow-recursion now default
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt to the built in acls "localnets" and "localhost".
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt This is being done to make caching servers less
c41d8a22ab5f4a487f4c16b78f23792f78a3a851Francis Dupont attractive as reflective amplifying targets for
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt spoofed traffic. This still leave authoritative
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt servers exposed.
08c67b5b7a54047fbfed423a59b48c86177b9859Evan Hunt The best fix is for full BCP 38 deployment to
08c67b5b7a54047fbfed423a59b48c86177b9859Evan Hunt remove spoofed traffic.
e5f9fa7e18d50569a7d723acbb6f641e13ed3787Evan Hunt2005. [bug] libbind: Retransmission timeouts should be
e5f9fa7e18d50569a7d723acbb6f641e13ed3787Evan Hunt based on which attempt it is to the nameserver
e5f9fa7e18d50569a7d723acbb6f641e13ed3787Evan Hunt and not the nameserver itself. [RT #13548]
62cce60a15990bf8ec05b4234a5c965a5a8e86c0Evan Hunt2004. [bug] dns_tsig_sign() could pass a NULL pointer to
62cce60a15990bf8ec05b4234a5c965a5a8e86c0Evan Hunt dst_context_destroy() when cleaning up after a
62cce60a15990bf8ec05b4234a5c965a5a8e86c0Evan Hunt error. [RT #15835]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2003. [bug] libbind: The DNS name/address lookup functions could
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt occasionally follow a random pointer due to
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt structures not being completely zeroed. [RT #15806]
0a35160f4eb349188a988d2857e0b3052ad4b778Evan Hunt2002. [bug] libbind: tighten the constraints on when
a8cdf2a2e7e9a716a94db550138f1a65000fc19fEvan Hunt struct addrinfo._ai_pad exists. [RT #15783]
a8cdf2a2e7e9a716a94db550138f1a65000fc19fEvan Hunt2001. [func] Check the KSK flag when updating a secure dynamic zone.
a8cdf2a2e7e9a716a94db550138f1a65000fc19fEvan Hunt New zone option "update-check-ksk yes;". [RT #15817]
3249da26fc28297265d444a1f3647f1e6700a2a0Evan Hunt2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
0666e6db543cda2de2b8472ba49ed9b53c836326Tinderbox User1999. [func] Implement "rrset-order fixed". [RT #13662]
d0803df3310ad09447c34b972e7594d576f5cbb5Evan Hunt1998. [bug] Restrict handling of fifos as sockets to just SunOS.
9d58bbdf12e77d2b62e669bc2965b0788b97731aJeremy C. Reed This allows named to connect to entropy gathering
47c847e286ac1d9dcc1b6dec5430ad9d2abad7b2Evan Hunt daemons that use fifos instead of sockets. [RT #15840]
63add83a2699aac4e01be6d1f2d093cfed4f744aMark Andrews1997. [bug] Named was failing to replace negative cache entries
63add83a2699aac4e01be6d1f2d093cfed4f744aMark Andrews when a positive one for the type was learnt.
fbc0e37e0c3732b20b0629056e98d712a118637fMark Andrews1996. [bug] nsupdate: if a zone has been specified it should
fbc0e37e0c3732b20b0629056e98d712a118637fMark Andrews appear in the output of 'show'. [RT #15797]
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews1995. [bug] 'host' was reporting multiple "is an alias" messages.
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews1994. [port] OpenSSL 0.9.8 support. [RT #15694]
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews1993. [bug] Log messages, via syslog, were missing the space
83f69fcd6ef72c9e2ebcb025b66a2ee74176becdEvan Hunt after the timestamp if "print-time yes" was specified.
83f69fcd6ef72c9e2ebcb025b66a2ee74176becdEvan Hunt1992. [bug] Not all incoming zone transfer messages included the
83f69fcd6ef72c9e2ebcb025b66a2ee74176becdEvan Hunt view. [RT #15825]
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt1991. [cleanup] The configuration data, once read, should be treated
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt as read only. Expand the use of const to enforce this
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt at compile time. [RT #15813]
e45d0508c3460db87afb1f743bc5210522721bb3Evan Hunt1990. [bug] libbind: isc's override of broken gettimeofday()
e45d0508c3460db87afb1f743bc5210522721bb3Evan Hunt implementations was not always effective.
f8c990f6c2d3f75120bd67a55e87f21e88e9e5a6Evan Hunt1989. [bug] win32: don't check the service password when
f8c990f6c2d3f75120bd67a55e87f21e88e9e5a6Evan Hunt re-installing. [RT #15882]
db8938c993d3eaeae1d86feb1b5da511831a9014Mark Andrews1988. [bug] Remove a bus error from the SHA256/SHA512 support.
db8938c993d3eaeae1d86feb1b5da511831a9014Mark Andrews1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
a147de10fe5e19e593d42152ffd6879eca69860dEvan Hunt1986. [func] Report when a zone is removed. [RT #15849]
a147de10fe5e19e593d42152ffd6879eca69860dEvan Hunt1985. [protocol] DLV has now been assigned a official type code of
702958d20247bb9e34019cf02d8ec18d4f3b1005Mark Andrews 32769. [RT #15807]
702958d20247bb9e34019cf02d8ec18d4f3b1005Mark Andrews Note: care should be taken to ensure you upgrade
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews both named and dnssec-signzone at the same time for
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews zones with DLV records where named is the master
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews server for the zone. Also any zones that contain
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews DLV records should be removed when upgrading a slave
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews zone. You do not however have to upgrade all
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews servers for a zone with DLV records simultaneously.
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews1984. [func] dig, nslookup and host now advertise a 4096 byte
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews EDNS UDP buffer size by default. [RT #15855]
4882e183cac5772ea522811c758c402cd7e8ad5bEvan Hunt1983. [func] Two new update policies. "selfsub" and "selfwild".
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews1982. [bug] DNSKEY was being accepted on the parent side of
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews a delegation. KEY is still accepted there for
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews RFC 3007 validated updates. [RT #15620]
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews1981. [bug] win32: condition.c:wait() could fail to reattain
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews the mutex lock.
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews1980. [func] dnssec-signzone: output the SOA record as the
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews first record in the signed zone. [RT #15758]
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews1979. [port] linux: allow named to drop core after changing
a18fc12ba3d48b66bea298c80f3e3f09f3c91527Evan Hunt user ids. [RT #15753]
a18fc12ba3d48b66bea298c80f3e3f09f3c91527Evan Hunt1978. [port] Handle systems which have a broken recvmsg().
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt1977. [bug] Silence noisy log message. [RT #15704]
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt1975. [bug] libbind: isc_gethexstring() could misparse multi-line
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt hex strings with comments. [RT #15814]
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt1974. [doc] List each of the zone types and associated zone
07fb9b83308daea64e50a1f07052addc25c15ec3Mark Andrews options separately in the ARM.
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt HMACSHA512 support. [RT #13606]
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt1972. [contrib] DBUS dynamic forwarders integration from
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt Jason Vas Dias <jvdias@redhat.com>.
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt1971. [port] linux: make detection of missing IF_NAMESIZE more
fb756ba3047770957173ba546257ca43af7ba3e4Mark Andrews robust. [RT #15443]
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt1970. [bug] nsupdate: adjust UDP timeout when falling back to
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt unsigned SOA query. [RT #15775]
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt1969. [bug] win32: the socket code was freeing the socket
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt structure too early. [RT #15776]
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
ff6de396a93b9b73a37173059a595f3d295b57cbMark Andrews1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt1966. [bug] Don't set CD when we have fallen back to plain DNS.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt1965. [func] Suppress spurious "recursion requested but not
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt available" warning with 'dig +qr'. [RT #15780].
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt1963. [port] Tru64 4.0E doesn't support send() and recv().
e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt1962. [bug] Named failed to clear old update-policy when it
e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt was removed. [RT #15491]
d0e3216c217bf790c4a582191658c2a1900ff79fMark Andrews1961. [bug] Check the port and address of responses forwarded
d0e3216c217bf790c4a582191658c2a1900ff79fMark Andrews to dispatch. [RT #15474]
e9649ece3bf32ff43faea13c76bbba7813d7e139Mark Andrews1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
2b258a1f5b02488c6a36ac1b0a7535b42ea6fd34Evan Hunt1959. [func] Control the zeroing of the negative response TTL to
c14ba7107063650e7f4329e8c54adca57913381bEvan Hunt a soa query. Defaults "zero-no-soa-ttl yes;" and
3f4a0e80fabe0233086e127aaabc6e68d6975c3aEvan Hunt "zero-no-soa-ttl-cache no;". [RT #15460]
b93ef543ab29be2c2d15049e02e66a31b27284aeMark Andrews1958. [bug] Named failed to update the zone's secure state
fa467e60c590072fd6848522456eb2cc41582c59Mark Andrews until the zone was reloaded. [RT #15412]
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt1957. [bug] Dig mishandled responses to class ANY queries.
161e803a5608956271d8120be37a1b383d14b647Mark Andrews1956. [bug] Improve cross compile support, 'gen' is now built
161e803a5608956271d8120be37a1b383d14b647Mark Andrews by native compiler. See README for additional
161e803a5608956271d8120be37a1b383d14b647Mark Andrews cross compile support information. [RT #15148]
5f8d6cec48cef9055359c628942d633693f732b2Evan Hunt1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
0606c47750ad362909f010db2ef1ff8dcc96f9cbEvan Hunt1954. [func] Named now falls back to advertising EDNS with a
0606c47750ad362909f010db2ef1ff8dcc96f9cbEvan Hunt 512 byte receive buffer if the initial EDNS queries
0606c47750ad362909f010db2ef1ff8dcc96f9cbEvan Hunt fail. [RT #14852]
9b895f30f1734fd463a02b27cfd0cf36ec9893d5Evan Hunt1953. [func] The maximum EDNS UDP response named will send can
9b895f30f1734fd463a02b27cfd0cf36ec9893d5Evan Hunt now be set in named.conf (max-udp-size). This is
9b895f30f1734fd463a02b27cfd0cf36ec9893d5Evan Hunt independent of the advertised receive buffer
9b895f30f1734fd463a02b27cfd0cf36ec9893d5Evan Hunt (edns-udp-size). [RT #14852]
e4d0018d4c9c05fb2a2dbac05a67cc9ddbe2c3d9Mark Andrews1952. [port] hpux: tell the linker to build a runtime link
e4d0018d4c9c05fb2a2dbac05a67cc9ddbe2c3d9Mark Andrews path "-Wl,+b:". [RT #14816].
00112618bc042f734de7b5ac86506cacb9acf36dMark Andrews1951. [security] Drop queries from particular well known ports.
00112618bc042f734de7b5ac86506cacb9acf36dMark Andrews Don't return FORMERR to queries from particular
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt well known ports. [RT #15636]
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt a TCP socket. This prevents the source address being
445a354e63f84ac884d923f697b598b83288dc64Evan Hunt set for TCP connections. [RT #15628]
445a354e63f84ac884d923f697b598b83288dc64Evan Hunt1949. [func] Addition memory leakage checks. [RT #15544]
7d65cbaca0839ae23358dce26de426be1301657aMark Andrews1948. [bug] If was possible to trigger a REQUIRE failure in
7d65cbaca0839ae23358dce26de426be1301657aMark Andrews xfrin.c:maybe_free() if named ran out of memory.
bee9a28af0f923c205f76819618ed7ffcf3f6997Evan Hunt1947. [func] It is now possible to configure named to accept
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn expired RRSIGs. Default "dnssec-accept-expired no;".
5465b124f1517b27c363872bd7648a950424eccaTinderbox User Setting "dnssec-accept-expired yes;" leaves named
bee9a28af0f923c205f76819618ed7ffcf3f6997Evan Hunt vulnerable to replay attacks. [RT #14685]
c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews1946. [bug] resume_dslookup() could trigger a REQUIRE failure
c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews when using forwarders. [RT #15549]
c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
2c2be89824d3899591d34c26adb155da6a993ce3Evan Hunt To generate a RSAMD5 key you must explicitly request
2c2be89824d3899591d34c26adb155da6a993ce3Evan Hunt RSAMD5. [RT #13780]
fb507315d4a921ffa9e2fd617cb3439ec8c15ca8Evan Hunt1944. [cleanup] isc_hash_create() does not need a read/write lock.
ae871ebb28959bed920cc96cd9e91063b6625b78Mark Andrews1943. [bug] Set the loadtime after rolling forward the journal.
49ae04f6ee2f2e2578e6cd8cd3d4c74e9098ccb0Mark Andrews1942. [bug] If the name of a DNSKEY match that of one in
49ae04f6ee2f2e2578e6cd8cd3d4c74e9098ccb0Mark Andrews trusted-keys do not attempt to validate the DNSKEY
d999ca28d40337907b55eebc28a255b638702379Evan Hunt using the parents DS RRset. [RT #15649]
d999ca28d40337907b55eebc28a255b638702379Evan Hunt1941. [bug] ncache_adderesult() should set eresult even if no
fd63f3110fe9a20d6188bc30ebf4b44595bac8eeMark Andrews rdataset is passed to it. [RT #15642]
fd63f3110fe9a20d6188bc30ebf4b44595bac8eeMark Andrews1940. [bug] Fixed a number of error conditions reported by
15eb0cb8e15fc0f4f02713fd8d993476f0394763Evan Hunt1939. [bug] The resolver could dereference a null pointer after
225146b2c8c7de8dcff979841b56b15aef8aded2Mark Andrews validation if all the queries have timed out.
434bfc3dfa2003ba0dd4b2392286806131fd6724Evan Hunt1938. [bug] The validator was not correctly handling unsecure
434bfc3dfa2003ba0dd4b2392286806131fd6724Evan Hunt negative responses at or below a SEP. [RT #15528]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
6b0434299b05b6ca05c6836b9e8fbb7e67f05fb8Mark Andrews1936. [bug] The validator could leak memory. [RT #15544]
6b0434299b05b6ca05c6836b9e8fbb7e67f05fb8Mark Andrews1935. [bug] 'acache' was DO sensitive. [RT #15430]
eb5e0b8dec22de22dd824959e39b26c4f5b1c52dMark Andrews1934. [func] Validate pending NS RRsets, in the authority section,
eb5e0b8dec22de22dd824959e39b26c4f5b1c52dMark Andrews prior to returning them if it can be done without
77cf489a5fad28089cd9c2635a9b2494627545e1Mark Andrews requiring DNSKEYs to be fetched. [RT #15430]
0a47bc90af557138a2aaff614ad73d95155ddd9eMark Andrews1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
0a47bc90af557138a2aaff614ad73d95155ddd9eMark Andrews1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
20489550151432d8d99c3f49629c7c718fdca6abMark Andrews1931. [bug] Per-client mctx could require a huge amount of memory,
20489550151432d8d99c3f49629c7c718fdca6abMark Andrews particularly for a busy caching server. [RT #15519]
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews1930. [port] HPUX: ia64 support. [RT #15473]
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
37bd255fd499c26aaf474f4294212951b84d9068Mark Andrews1927. [bug] Access to soanode or nsnode in rbtdb violated the
37bd255fd499c26aaf474f4294212951b84d9068Mark Andrews lock order rule and could cause a dead lock.
7aa21a491d9468bfc29d8cc331a4e963874426dfFrancis Dupont1926. [bug] The Windows installer did not check for empty
34416a7954da96c5a5f5803fe02f059cb94bf6fdMark Andrews passwords. BINDinstall was being installed in
34416a7954da96c5a5f5803fe02f059cb94bf6fdMark Andrews the wrong place. [RT #15483]
11e9195ad15d1a3f2b4dcd79b64a6e19d89bbac3Mark Andrews1925. [port] All outer level AC_TRY_RUNs need cross compiling
6100b1769956200b2815803ab7b35556396ce0d1Mark Andrews defaults. [RT #15469]
03152360db6fcb0fcc95fa63c20c5c829c95f1f6Mark Andrews1924. [port] libbind: hpux ia64 support. [RT #15473]
aacd7daaf7859de742ab35eac00e70676b1b9f4fEvan Hunt1923. [bug] ns_client_detach() called too early. [RT #15499]
aacd7daaf7859de742ab35eac00e70676b1b9f4fEvan Hunt1922. [bug] check-tool.c:setup_logging() missing call to
a6d48ae49345c1995c7ac7c0628bf5f9eac0719aJeremy C. Reed dns_log_setcontext().
a379c8c108de279cc4e09139c12457c1531bd122Mark Andrews1921. [bug] Client memory contexts were not using internal
a379c8c108de279cc4e09139c12457c1531bd122Mark Andrews malloc. [RT# 15434]
7433a204d32673e9f6747172f202272cc5bfe27cMark Andrews1920. [bug] The cache rbtdb lock array was too small to
7433a204d32673e9f6747172f202272cc5bfe27cMark Andrews have the desired performance characteristics.
1a4725bef25e60de161f77318f362c327b690d72Mark Andrews1919. [contrib] queryperf: a set of new features: collecting/printing
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt response delays, printing intermediate results, and
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt adjusting query rate for the "target" qps.
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt1918. [bug] Memory leak when checking acls. [RT #15391]
fb623f9a07857d95cf6c47db0aa81a28c3bbc5c0Mark Andrews1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
fb623f9a07857d95cf6c47db0aa81a28c3bbc5c0Mark Andrews when generating man pages. [RT #15385]
5116f25421090dffe637eb8f6cf7b44acd83678bMark Andrews1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
5116f25421090dffe637eb8f6cf7b44acd83678bMark Andrews1915. [bug] dig +ndots was broken. [RT #15215]
00043fc284892099b309be37340ae80893146c69Mark Andrews1914. [protocol] DS is required to accept mnemonic algorithms
00043fc284892099b309be37340ae80893146c69Mark Andrews (RFC 4034). Still emit numeric algorithms for
9fa2a0deed3b880f3bf04d4f615c13a0d67cc0ceMark Andrews compatibility with RFC 3658. [RT #15354]
97a2a26cd93e153dcf8fb1ea6bf2311426496251Mark Andrews1913. [func] Integrate contributed DLZ code into named. [RT #11382]
97a2a26cd93e153dcf8fb1ea6bf2311426496251Mark Andrews1912. [port] aix: atomic locking for powerpc. [RT #15020]
c1b8fa61604e153d6f2c6d91acc9481446e631f2Mark Andrews1911. [bug] Update windows socket code. [RT #14965]
c7965f84c23ea9e9b8d6508e4f77d596c227ab75Evan Hunt1910. [bug] dig's +sigchase code overhauled. [RT #14933]
c7965f84c23ea9e9b8d6508e4f77d596c227ab75Evan Hunt1909. [bug] The DLV code has been re-worked to make no longer
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt query order sensitive. [RT #14933]
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt1908. [func] dig now warns if 'RA' is not set in the answer when
76df835d59b4715dbd3346fd65114714a42495c9Mark Andrews 'RD' was set in the query. host/nslookup skip servers
76df835d59b4715dbd3346fd65114714a42495c9Mark Andrews that fail to set 'RA' when 'RD' is set unless a server
76df835d59b4715dbd3346fd65114714a42495c9Mark Andrews is explicitly set. [RT #15005]
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
cb69994ff89179166d5e21ccc7a34223b51676c0Mark Andrews1906. [func] dig now has a '-q queryname' and '+showsearch' options.
3ad8f24ddd043148525b68a676ebdc71f6900ca9Mark Andrews1905. [bug] Strings returned from cfg_obj_asstring() should be
3ad8f24ddd043148525b68a676ebdc71f6900ca9Mark Andrews treated as read-only. The prototype for
2bae76022cbdf8a207d4c3982b589156e1a09e09Evan Hunt cfg_obj_asstring() has been updated to reflect this.
0c91911b4d1e872b87eaf6431ed47fe24d18dd43Mark Andrews1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
2634686b14ccdf0aa18a6d346628d03ce3e3d0b4Mark Andrews friends. Note: RFC 1918 zones are not yet covered by
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews this but are likely to be in a future release.
b5f4cc132e91afb1217f4aa79424793c0e11c09aMark Andrews New options: empty-server, empty-contact,
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews empty-zones-enable and disable-empty-zone.
8afea636ab0c07399aa3e2410b2cfbd41099df98Mark Andrews1903. [func] ISC string copy API.
8afea636ab0c07399aa3e2410b2cfbd41099df98Mark Andrews1902. [func] Attempt to make the amount of work performed in a
d6f99498d624d5c5c8ee45067df02e6a6b35a1a3Mark Andrews iteration self tuning. The covers nodes clean from
d6f99498d624d5c5c8ee45067df02e6a6b35a1a3Mark Andrews the cache per iteration, nodes written to disk when
d6f99498d624d5c5c8ee45067df02e6a6b35a1a3Mark Andrews rewriting a master file and nodes destroyed per
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews iteration when destroying a zone or a cache.
997c2c5116927bab77284c24c3bd0d7f646da5eeMark Andrews1901. [cleanup] Don't add DNSKEY records to the additional section.
997c2c5116927bab77284c24c3bd0d7f646da5eeMark Andrews1900. [bug] ixfr-from-differences failed to ensure that the
e548e07a9a2f1ec64774d7ae872d530eaf270eb7Mark Andrews serial number increased. [RT #15036]
e548e07a9a2f1ec64774d7ae872d530eaf270eb7Mark Andrews1899. [func] named-checkconf now validates update-policy entries.
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
0e1dfb8ff5ac2cf1215691ffc32d7a0b76709721Mark Andrews ISC_NETADDR_FORMATSIZE to allow for scope details.
0e1dfb8ff5ac2cf1215691ffc32d7a0b76709721Mark Andrews1897. [func] x86 and x86_64 now have separate atomic locking
8e091f3d3ee0079f35dfccdc4479105e8f087ab2Mark Andrews implementations.
8e091f3d3ee0079f35dfccdc4479105e8f087ab2Mark Andrews1896. [bug] Recursive clients soft quota support wasn't working
7ace3277956c49f7554b7130ef761bde3b35db30Mark Andrews as expected. [RT #15103]
7ace3277956c49f7554b7130ef761bde3b35db30Mark Andrews1895. [bug] A escaped character is, potentially, converted to
06ace051e7522b153b487581c9439fc8c162fb18Mark Andrews the output character set too early. [RT #14666]
06ace051e7522b153b487581c9439fc8c162fb18Mark Andrews1894. [doc] Review ARM for BIND 9.4.
5d4343a9988cd5bd057aa385bb8c5e72d41202d1Evan Hunt1893. [port] Use uintptr_t if available. [RT #14606]
75ae74f8fd0847817bce2db7c868b179db67f019Mark Andrews1892. [func] Support for SPF rdata type. [RT #15033]
75ae74f8fd0847817bce2db7c868b179db67f019Mark Andrews1891. [port] freebsd: pthread_mutex_init can fail if it runs out
16bd30ae6987cd4ba4fe3b873e72abf5b7178c26Mark Andrews of memory. [RT #14995]
16bd30ae6987cd4ba4fe3b873e72abf5b7178c26Mark Andrews1890. [func] Raise the UDP receive buffer size to 32k if it is
df0892aea6bfd20a01c3abf2b756625d23830390Mark Andrews less than 32k. [RT #14953]
a499dddb4b4d4db2bb6ced82b5ee7a459e23603eEvan Hunt1889. [port] sunos: non blocking i/o support. [RT #14951]
f45f6541857a5dbb93ac24f321b9cf350ce242baMark Andrews1888. [func] Support for IPSECKEY rdata type. [RT #14967]
f45f6541857a5dbb93ac24f321b9cf350ce242baMark Andrews1887. [bug] The cache could delete expired records too fast for
673a2bb07b9e54a32699a9d7ca916dc5114d8d45Mark Andrews clients with a virtual time in the past. [RT #14991]
673a2bb07b9e54a32699a9d7ca916dc5114d8d45Mark Andrews1886. [bug] fctx_create() could return success even though it
e3c273a865bede10bfb1e0f29d300706cae3e00dMark Andrews failed. [RT #14993]
d640b4a0ab9dec252749793f78a1ed1e8551ea19Evan Hunt1885. [func] dig: report the number of extra bytes still left in
d640b4a0ab9dec252749793f78a1ed1e8551ea19Evan Hunt the packet after processing all the records.
fdb4ae8f6c00d8ea03bde929bd4e47056972017dMark Andrews1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
fdb4ae8f6c00d8ea03bde929bd4e47056972017dMark Andrews1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
fdb4ae8f6c00d8ea03bde929bd4e47056972017dMark Andrews levels. [RT #14962]
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt1882. [func] Limit the number of recursive clients that can be
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt waiting for a single query (<qname,qtype,qclass>) to
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt resolve. New options clients-per-query and
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt max-clients-per-query.
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt1881. [func] Add a system test for named-checkconf. [RT #14931]
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt1880. [func] The lame cache is now done on a <qname,qclass,qtype>
0949306cb96f9ccbb7d0205584ed2db293a5aad2Evan Hunt basis as some servers only appear to be lame for
0949306cb96f9ccbb7d0205584ed2db293a5aad2Evan Hunt certain query types. [RT #14916]
0949306cb96f9ccbb7d0205584ed2db293a5aad2Evan Hunt1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
964bdcd7add44e5bc87e1d44f2f4ece351b28eedEvan Hunt1878. [func] Detect duplicates of UDP queries we are recursing on
cf0a69e999430722e3c3942929eeb304b658dfb0Evan Hunt and drop them. New stats category "duplicate".
71697fd082b1c76562dc80fa91787af3860146bfEvan Hunt1877. [bug] Fix unreasonably low quantum on call to
71697fd082b1c76562dc80fa91787af3860146bfEvan Hunt dns_rbt_destroy2(). Remove unnecessary unhash_node()
71697fd082b1c76562dc80fa91787af3860146bfEvan Hunt call. [RT #14919]
c174d5c13c03dd59283243e3fd5461d41140a798Evan Hunt1876. [func] Additional memory debugging support to track size
c174d5c13c03dd59283243e3fd5461d41140a798Evan Hunt and mctx arguments. [RT #14814]
927e4c9fecf448bf3894c68fcaf9dc2f89557f3aEvan Hunt1875. [bug] process_dhtkey() was using the wrong memory context
927e4c9fecf448bf3894c68fcaf9dc2f89557f3aEvan Hunt to free some memory. [RT #14890]
4b13ea47db7d72596d3fa10c30b20c16b4936747Evan Hunt1874. [port] sunos: portability fixes. [RT #14814]
5b7abbef511cea0b568be0bc8d5b3120a0b9034dEvan Hunt1873. [port] win32: isc__errno2result() now reports its caller.
26bda028ad3854d2e695feb9333ef3dbe6b2fa1aEvan Hunt1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
eb4458b4784a2206d939f9c4cfed4b37b076b5bcEvan Hunt1871. [placeholder]
eb4458b4784a2206d939f9c4cfed4b37b076b5bcEvan Hunt1870. [func] Added framework for handling multiple EDNS versions.
1da46be57223340c07ea8505d485ec4397a4e484Evan Hunt1869. [func] dig can now specify the EDNS version when making
1da46be57223340c07ea8505d485ec4397a4e484Evan Hunt a query. [RT #14873]
9d69017bc635f7be5c8df2b18ae6d4491fc5bb63Mark Andrews1868. [func] edns-udp-size can now be overridden on a per
9d69017bc635f7be5c8df2b18ae6d4491fc5bb63Mark Andrews server basis. [RT #14851]
9d4ec6d2c59bd5845ac8bca5a5d790be9a772862Evan Hunt1867. [bug] It was possible to trigger a INSIST in
caa0a135d49dfbe3de9711eacf94d6e112a77688Mark Andrews dlv_validatezonekey(). [RT #14846]
9fa5a723e188ddb5e6165af4957ba789e17cfdf5Evan Hunt1866. [bug] resolv.conf parse errors were being ignored by
f42c0dcca86f2009c089e27ba513cb6fc9ee88baEvan Hunt1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
7aba1a9660630ab7d16792b7388d9b8f56d7bf0fEvan Hunt bad addresses. [RT #14841]
7aba1a9660630ab7d16792b7388d9b8f56d7bf0fEvan Hunt1864. [bug] Don't try the alternative transfer source if you
682a574e6716cea30386c38e68f4fc6c3d4b20e7Mark Andrews got a answer / transfer with the main source
682a574e6716cea30386c38e68f4fc6c3d4b20e7Mark Andrews address. [RT #14802]
3b9ba6bd74e2cbbc0f821e5483ebf46fa8c4d8deEvan Hunt1863. [bug] rrset-order "fixed" error messages not complete.
3b9ba6bd74e2cbbc0f821e5483ebf46fa8c4d8deEvan Hunt1862. [func] Add additional zone data constancy checks.
1761ecb90ff770b87d0f021e13ad94d3e8c6f2afFrancis Dupont named-checkzone has extended checking of NS, MX and
1761ecb90ff770b87d0f021e13ad94d3e8c6f2afFrancis Dupont SRV record and the hosts they reference.
1761ecb90ff770b87d0f021e13ad94d3e8c6f2afFrancis Dupont named has extended post zone load checks.
f48358cffb35bb4b24731c136b07816bdcdce651Evan Hunt New zone options: check-mx and integrity-check.
c3b554214416b434c6db7881907c962110aecba9Evan Hunt1861. [bug] dig could trigger a INSIST on certain malformed
c3b554214416b434c6db7881907c962110aecba9Evan Hunt responses. [RT #14801]
31707708c585c53b61ca1edb2e224e6bb1b985a5Evan Hunt1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
31707708c585c53b61ca1edb2e224e6bb1b985a5Evan Hunt incorrectly set. [RT #14775]
b7e40659efd6cf6f5e6b3b1f904f16f74efb0d16Evan Hunt1859. [func] Add support for CH A record. [RT #14695]
8f1e278931689460a49f0e9be610f2b2cc32c42dEvan Hunt1858. [bug] The flush-zones-on-shutdown option wasn't being
caa0a135d49dfbe3de9711eacf94d6e112a77688Mark Andrews parsed. [RT #14686]
166c4c6c5bafd25283b797979f77d780856fef30Evan Hunt1857. [bug] named could trigger a INSIST() if reconfigured /
166c4c6c5bafd25283b797979f77d780856fef30Evan Hunt reloaded too fast. [RT #14673]
beb12aad6bebb0d6891613e65a4e19a42e6e3f8eMark Andrews1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews1855. [bug] ixfr-from-differences was failing to detect changes
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews of ttl due to dns_diff_subtract() was ignoring the ttl
1b2a4ce2b112ec91b0f13c411144e721c7952914Evan Hunt of records. [RT #14616]
1b2a4ce2b112ec91b0f13c411144e721c7952914Evan Hunt1854. [bug] lwres also needs to know the print format for
e59937c7283216ca22ce6e7937b06eab6d97f4acEvan Hunt (long long). [RT #13754]
e59937c7283216ca22ce6e7937b06eab6d97f4acEvan Hunt1853. [bug] Rework how DLV interacts with proveunsecure().
89be55dc9040b119fd85bb33e7dc97d2ad454c6fEvan Hunt1852. [cleanup] Remove last vestiges of dnssec-signkey and
89be55dc9040b119fd85bb33e7dc97d2ad454c6fEvan Hunt dnssec-makekeyset (removed from Makefile years ago).
c6eb92beb1951b0634c349b24891522c273e9f69Mark Andrews1851. [doc] Doxygen comment markup. [RT #11398]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
bf0441a339755618efcbe0b427afa5cb8e62dc68Evan Hunt1849. [doc] All forms of the man pages (docbook, man, html) should
bf0441a339755618efcbe0b427afa5cb8e62dc68Evan Hunt have consistent copyright dates.
8144dc702beec803d7b847e6f28ce845c57ae468Mark Andrews1848. [bug] Improve SMF integration. [RT #13238]
8144dc702beec803d7b847e6f28ce845c57ae468Mark Andrews1847. [bug] isc_ondestroy_init() is called too late in
1ac1cc12fc993b060e868a94ec1c292c9ffbccc4Jeremy C. Reed dns_rbtdb_create()/dns_rbtdb64_create().
5f1dc0d505d7f53f1e89a1a41e4c2415af4934feEvan Hunt1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
5f1dc0d505d7f53f1e89a1a41e4c2415af4934feEvan Hunt <bortzmeyer@nic.fr>.
b0bd5a3f730410e0bc7ac4e05f061616daf818b2Mark Andrews1845. [bug] Improve error reporting to distinguish between
b0bd5a3f730410e0bc7ac4e05f061616daf818b2Mark Andrews accept()/fcntl() and socket()/fcntl() errors.
2347c72129ce9393578966225f915284f0730214Mark Andrews1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
1e34fe9044874422104e84373988d07876f716b6Mark Andrews for each 16 bit piece of the IPv6 address. The text
1e34fe9044874422104e84373988d07876f716b6Mark Andrews representation of a IPv6 address has been tightened
1e34fe9044874422104e84373988d07876f716b6Mark Andrews to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
5183f9d9daa139cbf000c12709877f62e79dfb14Evan Hunt1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
5183f9d9daa139cbf000c12709877f62e79dfb14Evan Hunt when CFLAGS contains "-I /usr/local/include"
0193e63da91a4da27809b9a528eb043fa6b4da26Mark Andrews resulting in old header files being used.
0193e63da91a4da27809b9a528eb043fa6b4da26Mark Andrews1842. [port] cmsg_len() could produce incorrect results on
17a00ff54c51f6bdfddd7d9ceaef6f2dcf387cc1Mark Andrews some platform. [RT #13744]
17a00ff54c51f6bdfddd7d9ceaef6f2dcf387cc1Mark Andrews1841. [bug] "dig +nssearch" now makes a recursive query to
5f238c3c64dd68100dc1b60f9c1e178522d1b333Mark Andrews find the list of nameservers to query. [RT #13694]
2cd3c8856c97b770cc4843bfad63922e23a6f661Mark Andrews1840. [func] dnssec-signzone can now randomize signature end times
2cd3c8856c97b770cc4843bfad63922e23a6f661Mark Andrews (dnssec-signzone -j jitter). [RT #13609]
f3c8e48b95996c3020d138b87ee8941da29cc124Evan Hunt1839. [bug] <isc/hash.h> was not being installed.
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews1838. [cleanup] Don't allow Linux capabilities to be inherited.
dc775799d9a5a61f485bff5b883a60cc748afaf3Evan Hunt1837. [bug] Compile time option ISC_FACILITY was not effective
dc775799d9a5a61f485bff5b883a60cc748afaf3Evan Hunt for 'named -u <user>'. [RT #13714]
428dd5c588cfe0dc1519af728e6e75c10aeb4439Curtis Blackburn1836. [cleanup] Silence compiler warnings in hash_test.c.
0d18225b5e2d17e4bef0077212fd6927ca58dda6Evan Hunt1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews1834. [bug] Bad memset in rdata_test.c. [RT #13658]
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
7ee225cf90fd06de61682b442600af88b68b99dbMark Andrews1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
5ba1d3dcc5739a1f77ec2875b276b163a42ef1e8Evan Hunt1831. [doc] Update named-checkzone documentation. [RT#13604]
af9f195c9e128fc9cc5912498b8f7f26f07887c3Evan Hunt1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
af9f195c9e128fc9cc5912498b8f7f26f07887c3Evan Hunt1829. [bug] win32: "pid-file none;" broken. [RT #13563]
e47208b6fb724cba7053baee4246b308e35403a2Evan Hunt1828. [bug] isc_rwlock_init() failed to properly cleanup if it
34f3693b93f3ba16634f0c08368ef7f81182ef93Evan Hunt encountered a error. [RT #13549]
7ee225cf90fd06de61682b442600af88b68b99dbMark Andrews1827. [bug] host: update usage message for '-a'. [RT #37116]
1a076410c260ff1d3124ce8b7e22ac111e9cf92aEvan Hunt1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
1a076410c260ff1d3124ce8b7e22ac111e9cf92aEvan Hunt of memory error. [RT #13537]
96a116178567d4eb22e57aba533073de9a2f9d84Evan Hunt1825. [bug] Missing UNLOCK() on out of memory error from in
03b5d2689df73fa9a50ff684511fa9d81f317e6cEvan Hunt rbtdb.c:subtractrdataset(). [RT #13519]
03b5d2689df73fa9a50ff684511fa9d81f317e6cEvan Hunt1824. [bug] Memory leak on dns_zone_setdbtype() failure.
93aba6dcec9855cd9c69c10717f62c350ff766eaMark Andrews1823. [bug] Wrong macro used to check for point to point interface.
afc047fdb535cdd44e20ffbb62d12b2408f0a07eMark Andrews1822. [bug] check-names test for RT was reversed. [RT #13382]
26bb3b7a67b833f0a18072567de036226890ca1aMark Andrews1821. [placeholder]
26bb3b7a67b833f0a18072567de036226890ca1aMark Andrews1820. [bug] Gracefully handle acl loops. [RT #13659]
9a785712f1eaccba2b43d29a76f4c02ef2c391d0Mark Andrews1819. [bug] The validator needed to check both the algorithm and
ec8a802114d3cb12805fecf1dd209fe46706b35bMark Andrews digest types of the DS to determine if it could be
ec8a802114d3cb12805fecf1dd209fe46706b35bMark Andrews used to introduce a secure zone. [RT #13593]
73ad83bcf0664c2774bec67d688a590e992d4629Evan Hunt1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
ff5ac6d4213e3e2f3f6a93db8c5e65cc170a7e2bEvan Hunt1817. [func] Add support for additional zone file formats for
ff5ac6d4213e3e2f3f6a93db8c5e65cc170a7e2bEvan Hunt improving loading performance. The masterfile-format
a6d43d18b1f6164fd144b2fa25ea57f5566b3bf9Evan Hunt option in named.conf can be used to specify a
a6d43d18b1f6164fd144b2fa25ea57f5566b3bf9Evan Hunt non-default format. A separate command
a6d43d18b1f6164fd144b2fa25ea57f5566b3bf9Evan Hunt named-compilezone was provided to generate zone files
a6d43d18b1f6164fd144b2fa25ea57f5566b3bf9Evan Hunt in the new format. Additionally, the -I and -O options
330f98fe3b12535072708c273eaf59f7bf887065Evan Hunt for dnssec-signzone specify the input and output
330f98fe3b12535072708c273eaf59f7bf887065Evan Hunt1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
b4914b3d69de3eb57bcf1d6cb3bb8e0b645c1081Mark Andrews1815. [bug] nsupdate triggered a REQUIRE if the server was set
b99bfa184bc9375421b5df915eea7dfac6a68a99Evan Hunt without also setting the zone and it encountered
b99bfa184bc9375421b5df915eea7dfac6a68a99Evan Hunt a CNAME and was using TSIG. [RT #13086]
b99bfa184bc9375421b5df915eea7dfac6a68a99Evan Hunt1814. [func] UNIX domain controls are now supported.
c4a453fa5c3d8b21d8982137b03e052c0d446c57Evan Hunt1813. [func] Restructured the data locking framework using
c4a453fa5c3d8b21d8982137b03e052c0d446c57Evan Hunt architecture dependent atomic operations (when
4adf97c32fcca7d00e5756607fd045f2aab9c3d4Mark Andrews available), improving response performance on
4adf97c32fcca7d00e5756607fd045f2aab9c3d4Mark Andrews multi-processor machines significantly.
4adf97c32fcca7d00e5756607fd045f2aab9c3d4Mark Andrews x86, x86_64, alpha, powerpc, and mips are currently
1cc4695f0da63f0190e3514adccf6a96f3dc1519Mark Andrews1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
3a6d62c59f73d024d1b2ba2ac94d7600530166ffMark Andrews1811. [func] Preserve the case of domain names in rdata during
ad668472f1a924e0355faf313e7cdba1970161c8Evan Hunt zone transfers. [RT #13547]
ad668472f1a924e0355faf313e7cdba1970161c8Evan Hunt1810. [bug] configure, lib/bind/configure make different default
dc1ed2622fa78dc21dda49488c496437083e17c9Evan Hunt decisions about whether to do a threaded build.
dc1ed2622fa78dc21dda49488c496437083e17c9Evan Hunt1809. [bug] "make distclean" failed for libbind if the platform
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews is not supported.
c15b536ddbea458a7a3975079276bf4a9b1617aaMark Andrews1808. [bug] zone.c:notify_zone() contained a race condition,
99425bedc4dcd586f751148bbdcba19578c6f39eMark Andrews zone->db could change underneath it. [RT #13511]
92754e2e4954e497eb2983c76198889b5a3218aaEvan Hunt1807. [bug] When forwarding (forward only) set the active domain
92754e2e4954e497eb2983c76198889b5a3218aaEvan Hunt from the forward zone name. [RT #13526]
92754e2e4954e497eb2983c76198889b5a3218aaEvan Hunt1806. [bug] The resolver returned the wrong result when a CNAME /
8c460e01594e83f21ff5e60cd7a417a1ed618703Mark Andrews DNAME was encountered when fetching glue from a
99bf6a57d9f6b55da6de9c22fb6883a4bf7d569eEvan Hunt secure namespace. [RT #13501]
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt1805. [bug] Pending status was not being cleared when DLV was
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt active. [RT #13501]
e57a83b57659ae1d4f755a7841b519c047ec7f75Evan Hunt1804. [bug] Ensure that if we are queried for glue that it fits
e57a83b57659ae1d4f755a7841b519c047ec7f75Evan Hunt in the additional section or TC is set to tell the
e57a83b57659ae1d4f755a7841b519c047ec7f75Evan Hunt client to retry using TCP. [RT #10114]
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt1803. [bug] dnssec-signzone sometimes failed to remove old
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt RRSIGs. [RT #13483]
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt1802. [bug] Handle connection resets better. [RT #11280]
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt1801. [func] Report differences between hints and real NS rrset
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt and associated address records.
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt1800. [bug] Changes #1719 allowed a INSIST to be triggered.
4bf686cf5d6b83981abdf2d8157c829922acc6d4Evan Hunt1799. [bug] 'rndc flushname' failed to flush negative cache
4bf686cf5d6b83981abdf2d8157c829922acc6d4Evan Hunt entries. [RT #13438]
da4436812c7108dd39e09069d4af770eaa738c7fMark Andrews1798. [func] The server syntax has been extended to support a
da4436812c7108dd39e09069d4af770eaa738c7fMark Andrews range of servers. [RT #11132]
da4436812c7108dd39e09069d4af770eaa738c7fMark Andrews1797. [func] named-checkconf now check acls to verify that they
c82da2167dcbd8300f0eaa81fb900c0b17e8f94cMark Andrews only refer to existing acls. [RT #13101]
c82da2167dcbd8300f0eaa81fb900c0b17e8f94cMark Andrews1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
384fef003441df4067b773688237700513390f9eEvan Hunt1795. [bug] "rndc dumpdb" was not fully documented. Minor
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews formating issues with "rndc dumpdb -all". [RT #13396]
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews1794. [func] Named and named-checkzone can now both check for
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews non-terminal wildcard records.
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt1793. [func] Extend adjusting TTL warning messages. [RT #13378]
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt1792. [func] New zone option "notify-delay". Specify a minimum
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt delay between sets of NOTIFY messages.
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt1791. [bug] 'host -t a' still printed out AAAA and MX records.
a13aa526be16869d1284256fbb2136f4d50ed1d7Evan Hunt1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
a13aa526be16869d1284256fbb2136f4d50ed1d7Evan Hunt allow parallel make to succeed.
741ebf10047c3e32e1a0691316ec45666f003583Evan Hunt1789. [bug] Prerequisite test for tkey and dnssec could fail
741ebf10047c3e32e1a0691316ec45666f003583Evan Hunt with "configure --with-libtool".
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt1788. [bug] libbind9.la/libbind9.so needs to link against
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt1786. [port] AIX: libt_api needs to be taught to look for
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt T_testlist in the main executable (--with-libtool).
c218f119cd052ab9f9cbf92442f08f6cafaccd62Evan Hunt1785. [bug] libbind9.la/libbind9.so needs to link against
72c86c105a7cf315036d7131a4ef408bc6227639Evan Hunt1784. [cleanup] "libtool -allow-undefined" is the default.
72c86c105a7cf315036d7131a4ef408bc6227639Evan Hunt Leave hooks in configure to allow it to be set
72c86c105a7cf315036d7131a4ef408bc6227639Evan Hunt if needed in the future.
21a7fde6ba34c62f4859a4c19de4f49ec1bab474Evan Hunt1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
21a7fde6ba34c62f4859a4c19de4f49ec1bab474Evan Hunt source tree.
aababae79572d8c80fcec9b809671987007451c9Mark Andrews1782. [port] OSX: --with-libtool + --enable-libbind broke on
aababae79572d8c80fcec9b809671987007451c9Mark Andrews __evOptMonoTime. [RT #13219]
3a0da183bb40bd120698102b20b61ef12665c09bMark Andrews1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
c1e88f8d8679501def1896fb4c4af927a70813ebEvan Hunt1780. [bug] Update libtool to 1.5.10.
c1e88f8d8679501def1896fb4c4af927a70813ebEvan Hunt1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews IN6ADDR_LOOPBACK_INIT macros.
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews IN6ADDR_LOOPBACK_INIT macros.
e7b9603ead84761813fd4598303b8e969ab4d7acMark Andrews1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
cff340c9e7ac9dc926f5f1f176d973d277c1b68bEvan Hunt IN6ADDR_LOOPBACK_INIT macros.
550c92405fc1df47e725f2ecbaa5154c9239fcfdMark Andrews1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt1774. [port] Aix: Silence compiler warnings / build failures.
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt1773. [bug] Fast retry on host / net unreachable. [RT #13153]
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt1772. [placeholder]
19b037bcb900e75528bf6f2582d77c3f1a6d6714Evan Hunt1771. [placeholder]
9ffd0f0270ef06bd60b1b2754bbeefbe1da33ce7Evan Hunt1770. [bug] named-checkconf failed to report missing a missing
9ffd0f0270ef06bd60b1b2754bbeefbe1da33ce7Evan Hunt file clause for rbt{64} master/hint zones. [RT#13009]
77845708f756cfe921b845423be6410e26c167b7Evan Hunt1769. [port] win32: change compiler flags /MTd ==> /MDd,
77845708f756cfe921b845423be6410e26c167b7Evan Hunt /MT ==> /MD.
4f9f8fa0528ce843a3bdf7993e94463508d8320eEvan Hunt1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
4f9f8fa0528ce843a3bdf7993e94463508d8320eEvan Hunt rdataset. [RT #12907]
53a4e18582ae0c50f3742d2f6b684231a50be038Curtis Blackburn1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
53a4e18582ae0c50f3742d2f6b684231a50be038Curtis Blackburn support for (struct in6_pktinfo) failed. [RT #13077]
5eab7b89825dd2ed4c0a7fc0ed45ad028170303eEvan Hunt1766. [bug] Update the master file timestamp on successful refresh
5eab7b89825dd2ed4c0a7fc0ed45ad028170303eEvan Hunt as well as the journal's timestamp. [RT# 13062]
2b8dac99166f74532264f756f5c0b43a6b04d995Evan Hunt1765. [bug] configure --with-openssl=auto failed. [RT #12937]
2b8dac99166f74532264f756f5c0b43a6b04d995Evan Hunt1764. [bug] dns_zone_replacedb failed to emit a error message
2b8dac99166f74532264f756f5c0b43a6b04d995Evan Hunt if there was no SOA record in the replacement db.
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt1763. [func] Perform sanity checks on NS records which refer to
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt 'in zone' names. [RT #13002]
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt even when it failed. [RT #12995]
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt1760. [bug] Host / net unreachable was not penalising rtt
501941f0b6cce74c2ff75b10aff3f230d5d37e4cEvan Hunt estimates. [RT #12970]
501941f0b6cce74c2ff75b10aff3f230d5d37e4cEvan Hunt1759. [bug] Named failed to startup if the OS supported IPv6
501941f0b6cce74c2ff75b10aff3f230d5d37e4cEvan Hunt but had no IPv6 interfaces configured. [RT #12942]
de1223830f23c2fcd343e40d0940aa591fc363b6Evan Hunt1758. [func] Don't send notify messages to self. [RT #12933]
85f89d58a50a86859c04069ea87b2b23b3325d11Evan Hunt1757. [func] host now can turn on memory debugging flags with '-m'.
85f89d58a50a86859c04069ea87b2b23b3325d11Evan Hunt1756. [func] named-checkconf now checks the logging configuration.
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt1755. [func] allow-update is now settable at the options / view
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt level. [RT #6636]
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt1754. [bug] We weren't always attempting to query the parent
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt server for the DS records at the zone cut.
298ca122505a151384a3bf3f0bb0819ed60c66e2Evan Hunt1753. [bug] Don't serve a slave zone which has no NS records.
bdc7cf66ff626163801cc59b2fd25523da07d238Mark Andrews1752. [port] Move isc_app_start() to after ns_os_daemonise()
bdc7cf66ff626163801cc59b2fd25523da07d238Mark Andrews as some fork() implementations unblock the signals
bdc7cf66ff626163801cc59b2fd25523da07d238Mark Andrews that are blocked by isc_app_start(). [RT #12810]
118bdfd8c4b4dbdd47c17afe61e506fefee9c2daMark Andrews1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
118bdfd8c4b4dbdd47c17afe61e506fefee9c2daMark Andrews1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
58154043cca0caf03d6fc1a47ed7f24681f24762Evan Hunt1749. [bug] 'check-names response ignore;' failed to ignore.
cfec3165b151ed9a0b5b7d5f1609dac9ff12efe3Evan Hunt1748. [func] dig now returns the byte count for axfr/ixfr.
cfec3165b151ed9a0b5b7d5f1609dac9ff12efe3Evan Hunt1747. [bug] BIND 8 compatibility: named/named-checkconf failed
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews to parse "host-statistics-max" in named.conf.
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt1746. [func] Make public the function to read a key file,
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt dst_key_read_public(). [RT #12450]
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt1745. [bug] Dig/host/nslookup accept replies from link locals
70b1afa5938c9bf2aed67f9d594161b905366426Jeremy C. Reed regardless of scope if no scope was specified when
62d63e5f02a5e7fcda59cf361149e3d7c78477beEvan Hunt query was sent. [RT #12745]
df925e6c66d45d960fbac0383169763967d2111cEvan Hunt1744. [bug] If tuple2msgname() failed to convert a tuple to
df925e6c66d45d960fbac0383169763967d2111cEvan Hunt a name a REQUIRE could be triggered. [RT #12796]
a81ae06ed3081753a73e7638919673be57eaf47fEvan Hunt1743. [bug] If isc_taskmgr_create() was not able to create the
a81ae06ed3081753a73e7638919673be57eaf47fEvan Hunt requested number of worker threads then destruction
a81ae06ed3081753a73e7638919673be57eaf47fEvan Hunt of the manager would trigger an INSIST() failure.
2425d8bb7ccf5dc956ad12d64d97b5a42e022930Evan Hunt1742. [bug] Deleting all records at a node then adding a
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews previously existing record, in a single UPDATE
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews transaction, failed to leave / regenerate the
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews associated RRSIG records. [RT #12788]
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews1741. [bug] Deleting all records at a node in a secure zone
3c7df84b2019e454f6333ca354ef709f6451a2abMark Andrews using a update-policy grant failed. [RT #12787]
c9297d37593b36de9978c122dbeaf1bb7ae8d19dMark Andrews1740. [bug] Replace rbt's hash algorithm as it performed badly
c9297d37593b36de9978c122dbeaf1bb7ae8d19dMark Andrews with certain zones. [RT #12729]
c9297d37593b36de9978c122dbeaf1bb7ae8d19dMark Andrews NOTE: a hash context now needs to be established
0b8bd3a4ae3efd91f88e8901323faf99b5b06136Evan Hunt via isc_hash_create() if the application was not
0b8bd3a4ae3efd91f88e8901323faf99b5b06136Evan Hunt already doing this.
7e9ccec63889f2aabee59b94307be492a77fa93bMark Andrews1739. [bug] dns_rbt_deletetree() could incorrectly return
7e9ccec63889f2aabee59b94307be492a77fa93bMark Andrews ISC_R_QUOTA. [RT #12695]
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt1738. [bug] Enable overrun checking by default. [RT #12695]
8d21efc150998f9643f98ce5a4f0b17460e12043Evan Hunt1737. [bug] named failed if more than 16 masters were specified.
ab7a67829ffe2a7b3220a1cd366bc6255235923aJINMEI Tatuya1736. [bug] dst_key_fromnamedfile() could fail to read a
ab7a67829ffe2a7b3220a1cd366bc6255235923aJINMEI Tatuya public key. [RT #12687]
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
9dac1de625301aeb520cb1e83723d98cd65999eeEvan Hunt1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
9c9b75c43566058727cb89204d36977559cb99afMark Andrews1733. [bug] Return non-zero exit status on initial load failure.
cd63e943104ab4f7f8b37da8d49738e91a8db1ddEvan Hunt1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews1731. [port] darwin: relax version test in ifconfig.sh.
6225380ca6dd045302fd5cb22d1dbbe6a88a7509Evan Hunt1730. [port] Determine the length type used by the socket API.
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt1729. [func] Improve check-names error messages.
ffff5d67926821d3db8df63bdd84a9cb1ce56739Evan Hunt1728. [doc] Update check-names documentation.
ffff5d67926821d3db8df63bdd84a9cb1ce56739Evan Hunt1727. [bug] named-checkzone: check-names support didn't match
9a0dd99a757c469d9530acd5cb11789b3b0af5ceEvan Hunt documentation.
9a0dd99a757c469d9530acd5cb11789b3b0af5ceEvan Hunt1726. [port] aix5: add support for aix5.
641e87a1a0ee716f46b4d0f529e73b58f19aee4eEvan Hunt1725. [port] linux: update error message on interaction of threads,
641e87a1a0ee716f46b4d0f529e73b58f19aee4eEvan Hunt capabilities and setuid support (named -u). [RT #12541]
2154c019124246199c7fe494b86860461c8a5f40Evan Hunt1724. [bug] Look for DNSKEY records with "dig +sigtrace".
2154c019124246199c7fe494b86860461c8a5f40Evan Hunt1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
214836c18496e0d2630df1cda5eeee13c38b9068Evan Hunt1722. [bug] Don't commit the journal on malformed ixfr streams.
43d84798fac5cfeeecf9431ef848a9ffdcf0d86fEvan Hunt1721. [bug] Error message from the journal processing were not
43d84798fac5cfeeecf9431ef848a9ffdcf0d86fEvan Hunt always identifying the relevant journal. [RT #12519]
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt negative response. [RT #12506]
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt1719. [bug] named was not correctly caching a RFC 2308 Type 1
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt negative response. [RT #12506]
c8803902d6e740d1ed85e099835813466fa51391Curtis Blackburn1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
b3d116c299722ed7b27550744fff789a61ad3d2bEvan Hunt responses when looking for the zone / master server.
99394e9807411cbbeb9814b603c7dfa3b569388eMark Andrews1717. [port] solaris: ifconfig.sh did not support Solaris 10.
99394e9807411cbbeb9814b603c7dfa3b569388eMark Andrews "ifconfig.sh down" didn't work for Solaris 9.
dc6cea0448ea7b10eb1ae7d38bfc18544a4dfb97Evan Hunt1716. [doc] named.conf(5) was being installed in the wrong
dc6cea0448ea7b10eb1ae7d38bfc18544a4dfb97Evan Hunt location. [RT# 12441]
54ca2413348024c6d03904c01486c952c3d4a3bcEvan Hunt1715. [func] 'dig +trace' now randomly selects the next servers
54ca2413348024c6d03904c01486c952c3d4a3bcEvan Hunt to try. Report if there is a bad delegation.
54ca2413348024c6d03904c01486c952c3d4a3bcEvan Hunt1714. [bug] dig/host/nslookup were only trying the first
48019314431389cca5f8eba7ee9aa5bc08a67f4eMark Andrews address when a nameserver was specified by name.
dab4aac006fadcaf3c5a9ccd983188b37ead08eeMark Andrews1713. [port] linux: extend capset failure message to say:
dab4aac006fadcaf3c5a9ccd983188b37ead08eeMark Andrews please ensure that the capset kernel module is
578e3196076b409c509c6c0a0873e7bfe54f4d61Evan Hunt loaded. see insmod(8)
578e3196076b409c509c6c0a0873e7bfe54f4d61Evan Hunt1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
c07c2a862e0f9d671e2961cd179c7b28d7b04f10Mark Andrews1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
f1c1aab2c9e720399d66d8db5f40515d47c45ecfMark Andrews1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
f1c1aab2c9e720399d66d8db5f40515d47c45ecfMark Andrews messages for the specified zone. [RT #9479]
ef2aea274a14bd33e722336ed8a15bab0289b1f3Mark Andrews1709. [port] solaris: add SMF support from Sun.
24798afb6e0fa969cf9f6d3b91d1545410853bb8Mark Andrews1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
aa24128022b85c49f59ad45a3c81ad124d645530Mark Andrews for conformance to the name space convention. Binary
aa24128022b85c49f59ad45a3c81ad124d645530Mark Andrews backward compatibility to the old function name is
fc0bfa07c7b7aff70cf75e9414167e1f2d532845Mark Andrews provided. [RT #12376]
fc0bfa07c7b7aff70cf75e9414167e1f2d532845Mark Andrews1707. [contrib] sdb/ldap updated to version 1.0-beta.
c9cecf7bb509b1c860d0b6deba7fccd85b9feb68Mark Andrews1706. [bug] 'rndc stop' failed to cause zones to be flushed
c359f7b10f2ea19f08668a3c89c91d0834035ec8Mark Andrews sometimes. [RT #12328]
c359f7b10f2ea19f08668a3c89c91d0834035ec8Mark Andrews1705. [func] Allow the journal's name to be changed via named.conf.
25b95d31ce658326510bef979cf2909c6eddc428Mark Andrews1704. [port] lwres needed a snprintf() implementation for
25b95d31ce658326510bef979cf2909c6eddc428Mark Andrews platforms without snprintf(). Add missing
e285c6ea84312a7be807b3af30151444b0002ba6Mark Andrews "#include <isc/print.h>". [RT #12321]
e285c6ea84312a7be807b3af30151444b0002ba6Mark Andrews1703. [bug] named would loop sending NOTIFY messages when it
e285c6ea84312a7be807b3af30151444b0002ba6Mark Andrews failed to receive a response. [RT #12322]
222d38735f97f771054e223b03f84c5858252332Evan Hunt1702. [bug] also-notify should not be applied to built in zones.
0277a7d6c19ab116b6832076ab9d850e1bf112d3Mark Andrews1701. [doc] A minimal named.conf man page.
2dd959aa18d0f661efb0d9646963993a4773d036Evan Hunt1700. [func] nslookup is no longer to be treated as deprecated.
2dd959aa18d0f661efb0d9646963993a4773d036Evan Hunt Remove "deprecated" warning message. Add man page.
8bd5bcd2a786dfd501a39008be79187e77735e45Mark Andrews1699. [bug] dnssec-signzone can generate "not exact" errors
3ad3e9c948fd8781d0343b19f0412f5bf3ea6415Evan Hunt when resigning. [RT #12281]
8462dfb880040cde3a60f047ec18808737fd7e85Mark Andrews1698. [doc] Use reserved IPv6 documentation prefix.
53402b52b67aa6cbbd1d437d6cf8984e7175319eEvan Hunt1697. [bug] xxx-source{,-v6} was not effective when it
53402b52b67aa6cbbd1d437d6cf8984e7175319eEvan Hunt specified one of listening addresses and a
53402b52b67aa6cbbd1d437d6cf8984e7175319eEvan Hunt different port than the listening port. [RT #12257]
03958ad4b9fd6b2d6f1fbf20e85d8ff2a1f9d069Mark Andrews1696. [bug] dnssec-signzone failed to clean out nodes that
03958ad4b9fd6b2d6f1fbf20e85d8ff2a1f9d069Mark Andrews consisted of only NSEC and RRSIG records.
fcc04c160feef526cc209ca03e8bbdfe34afd83bMark Andrews1695. [bug] DS records when forwarding require special handling.
f0058a25b0de3246c63e4ca95788c611b3896a97Mark Andrews1694. [bug] Report if the builtin views of "_default" / "_bind"
f0058a25b0de3246c63e4ca95788c611b3896a97Mark Andrews are defined in named.conf. [RT #12023]
e85702ce5be33d7c07eff6487c6bb4730165f331Mark Andrews1693. [bug] max-journal-size was not effective for master zones
03ccae042b4acd22805d667f823066d3690965cfMark Andrews with ixfr-from-differences set. [RT# 12024]
6f7abb89ec22aef5eda40ed60fcf605a42b78d4dMark Andrews1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
b123b265e3a3d9b72a14230b6517e0f6fdb5c5b5Mark Andrews1691. [bug] sdb's attachversion was not complete. [RT #11990]
b123b265e3a3d9b72a14230b6517e0f6fdb5c5b5Mark Andrews1690. [bug] Delay detaching view from the client until UPDATE
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt processing completes when shutting down. [RT #11714]
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt contained gratuitous semicolons. [RT #11707]
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt1688. [bug] LDFLAGS was not supported.
177be355d4ccf0ce6308e3e6c0f5404eaf13e9a0Evan Hunt1687. [bug] Race condition in dispatch. [RT #10272]
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt1686. [bug] Named sent a extraneous NOTIFY when it received a
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt redundant UPDATE request. [RT #11943]
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt1685. [bug] Change #1679 loop tests weren't quite right.
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt1684. [func] ixfr-from-differences now takes master and slave in
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt addition to yes and no at the options and view levels.
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt1683. [bug] dig +sigchase could leak memory. [RT #11445]
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Hunt1682. [port] Update configure test for (long long) printf format.
8a6f41d86ac80fd1397ffee65bed5131129a84e2Mark Andrews1681. [bug] Only set SO_REUSEADDR when a port is specified in
8a6f41d86ac80fd1397ffee65bed5131129a84e2Mark Andrews isc_socket_bind(). [RT #11742]
538f4a22b1cbde59a9e53fef51583904a7f7393fMark Andrews1680. [func] rndc: the source address can now be specified.
706219e547c90fb7d9435b20e70fb4003dc6dfd5Evan Hunt1679. [bug] When there was a single nameserver with multiple
706219e547c90fb7d9435b20e70fb4003dc6dfd5Evan Hunt addresses for a zone not all addresses were tried.
2f21adbc6a0962117015a51a44b33a99f3f94ac7Evan Hunt1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
4d077be1351ea10db3bc7843865a5d1ba1e81d5bEvan Hunt1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
2e22f903da490cefb98e0c8b14ac66b466cfe1d9Mark Andrews1676. [func] New option "allow-query-cache". This lets
2e22f903da490cefb98e0c8b14ac66b466cfe1d9Mark Andrews allow-query be used to specify the default zone
2e22f903da490cefb98e0c8b14ac66b466cfe1d9Mark Andrews access level rather than having to have every
b13b4520207e401d81d7e759162ede870896d82dMark Andrews zone override the global value. allow-query-cache
b13b4520207e401d81d7e759162ede870896d82dMark Andrews can be set at both the options and view levels.
b13b4520207e401d81d7e759162ede870896d82dMark Andrews If allow-query-cache is not set allow-query applies.
8c9d5521e760ead39f75adc3c87dc1dd0f9c101dMark Andrews1675. [bug] named would sometimes add extra NSEC records to
8c9d5521e760ead39f75adc3c87dc1dd0f9c101dMark Andrews the authority section.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews1674. [port] linux: increase buffer size used to scan
20b95f5ff63cdae6bb5d4b96c1cc6e6e5373df8eMark Andrews1673. [port] linux: issue a error messages if IPv6 interface
20b95f5ff63cdae6bb5d4b96c1cc6e6e5373df8eMark Andrews scans fails.
c3b9fad5e3be639c9b36ff0ac921c30133da395cMar Andrews1672. [cleanup] Tests which only function in a threaded build
c3b9fad5e3be639c9b36ff0ac921c30133da395cMar Andrews now return R:THREADONLY (rather than R:UNTESTED)
39bfdc2ff9da3c2ecdbc70d46cabfd56d66f24f6Mark Andrews in a non-threaded build.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews1671. [contrib] queryperf: add NAPTR to the list of known types.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews1670. [func] Log UPDATE requests to slave zones without an acl as
03ccae042b4acd22805d667f823066d3690965cfMark Andrews "disabled" at debug level 3. [RT# 11657]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews1669. [placeholder]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb1667. [port] linux: not all versions have IF_NAMESIZE.
55670a1e5517e9587171e9f41dc8f3e40b6fcfefMark Andrews1666. [bug] The optional port on hostnames in dual-stack-servers
55670a1e5517e9587171e9f41dc8f3e40b6fcfefMark Andrews was being ignored.
1a09fefa59a9f00ed380494ae4722a0666f1ccaaMark Andrews1665. [func] rndc now allows addresses to be set in the
1a09fefa59a9f00ed380494ae4722a0666f1ccaaMark Andrews server clauses.
8f4572372c4b496a43b50a6c14d82f2aba26a054Mark Andrews1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
4786e693a7c4b41ba4554f06a2f6d16c74017f15Mark Andrews1663. [func] Look for OpenSSL by default.
4d30dd89f5dba10b3ffc0531c35ec635033d310bMark Andrews1662. [bug] Change #1658 failed to change one use of 'type'
4d30dd89f5dba10b3ffc0531c35ec635033d310bMark Andrews to 'keytype'.
c2e80cf47ebb1ceecb4ad2ee01191ba2677f6feeMark Andrews1661. [bug] Restore dns_name_concatenate() call in
c2e80cf47ebb1ceecb4ad2ee01191ba2677f6feeMark Andrews adb.c:set_target(). [RT #11582]
f83542787f882444d2abf9fcaf47a34c29e4fec2Mark Andrews1660. [bug] win32: connection_reset_fix() was being called
f83542787f882444d2abf9fcaf47a34c29e4fec2Mark Andrews unconditionally. [RT #11595]
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt1659. [cleanup] Cleanup some messages that were referring to KEY vs
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt DNSKEY, NXT vs NSEC and SIG vs RRSIG.
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt and DH. Tighten which options apply to KEY and
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt DNSKEY records.
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt1657. [doc] ARM: document query log output.
57c3a831c5314c16c40e519b3b70071b2001c3efMark Andrews1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
57c3a831c5314c16c40e519b3b70071b2001c3efMark Andrews DNSKEY and RRSIG. [RT #11542]
2f57f353e8d0b761884303f49e0c2a937b7d6243Evan Hunt1655. [bug] Logging multiple versions w/o a size was broken.
f3e10cca1b9a95fab5ac7a162c0705e2d9da7370Mark Andrews1654. [bug] isc_result_totext() contained array bounds read
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews1653. [func] Add key type checking to dst_key_fromfilename(),
4b3d727d96fc3ee3a0c12c716f14163adfcf1fedEvan Hunt DST_TYPE_KEY should be used to read TSIG, TKEY and
4b3d727d96fc3ee3a0c12c716f14163adfcf1fedEvan Hunt SIG(0) keys.
d65a29175a23d43511ae7554e347d4519c9594fcEvan Hunt1652. [bug] TKEY still uses KEY.
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews1651. [bug] dig: process multiple dash options.
47c5b8af920a93763c97d9a93ea1fd766961a5b3Evan Hunt1650. [bug] dig, nslookup: flush standard out after each command.
3b9b4c75f9121de7824b1e621921bb407e82d3c6Evan Hunt1649. [bug] Silence "unexpected non-minimal diff" message.
3b9b4c75f9121de7824b1e621921bb407e82d3c6Evan Hunt1648. [func] Update dnssec-lookaside named.conf syntax to support
965371b8cffbd02d667594c8e17e413c723f9112Mark Andrews multiple dnssec-lookaside namespaces (not yet
965371b8cffbd02d667594c8e17e413c723f9112Mark Andrews implemented).
de0fd6809754ad9dc47b7c60fda8f4c8b22ea1f8Mark Andrews1647. [bug] It was possible trigger a INSIST when chasing a DS
de0fd6809754ad9dc47b7c60fda8f4c8b22ea1f8Mark Andrews record that required walking back over a empty node.
f3f76f009b282953652770408be38e6f9e47cbb3ckb1646. [bug] win32: logging file versions didn't work with
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews non-UNC filenames. [RT#11486]
0fbd29837a5911e0f0a83fca93aa4453200a8ccfMark Andrews1645. [bug] named could trigger a REQUIRE failure if multiple
0fbd29837a5911e0f0a83fca93aa4453200a8ccfMark Andrews masters with keys are specified.
1c8f2b6dcd0b3952e4f5f2d6a2f0225675379739Mark Andrews1644. [bug] Update the journal modification time after a
1c8f2b6dcd0b3952e4f5f2d6a2f0225675379739Mark Andrews successful refresh query. [RT #11436]
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews1643. [bug] dns_db_closeversion() could leak memory / node
47c6d89485d2ec62e94eda745267e7387f995e96Mark Andrews references. [RT #11163]
7786d6542bb800be7d8c56793985d510626806b2Mark Andrews1642. [port] Support OpenSSL implementations which don't have
7786d6542bb800be7d8c56793985d510626806b2Mark Andrews DSA support. [RT #11360]
71dfdcbfae32f150179f93476f9ff71b30336cb9Mark Andrews1641. [bug] Update the check-names description in ARM. [RT #11389]
91dd13bacf452437b6f0284bacd4c7f6f763cb45Mark Andrews1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
91dd13bacf452437b6f0284bacd4c7f6f763cb45Mark Andrews incorrectly closing the socket. [RT #11291]
611dc8876869036ab5e981e53ae7a446145d9354Mark Andrews1639. [func] Initial dlv system test.
2ec7373254331f183ae62a13acbac24c80a6a3aaMark Andrews1638. [bug] "ixfr-from-differences" could generate a REQUIRE
2ec7373254331f183ae62a13acbac24c80a6a3aaMark Andrews failure if the journal open failed. [RT #11347]
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt1637. [bug] Node reference leak on error in addnoqname().
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt a error had occurred. The database version no longer
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt matched the version of the database that was dumped.
1e8259d911ed8e368ae4c6361f5aa99a9496b2a6Mark Andrews1635. [bug] Memory leak on error in query_addds().
058e44186b74531402c1f99088eb9dbe4926f8daMark Andrews1634. [bug] named didn't supply a useful error message when it
9e70b51d3b19b0592116e722a7452383a0e8e366Mark Andrews detected duplicate views. [RT #11208]
9e70b51d3b19b0592116e722a7452383a0e8e366Mark Andrews1633. [bug] named should return NOTIMP to update requests to a
aa49af836ce7a7a2888f5cedf4cbb14ff4dc1d11Mark Andrews slaves without a allow-update-forwarding acl specified.
d1ac7adb3e2620b7a22d6141e814800aefc7e844Evan Hunt1632. [bug] nsupdate failed to send prerequisite only UPDATE
d1ac7adb3e2620b7a22d6141e814800aefc7e844Evan Hunt messages. [RT #11288]
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews1631. [bug] dns_journal_compact() could sometimes corrupt the
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews journal. [RT #11124]
da35568c7169d7218b0be7203ed03e2e626566c0Evan Hunt1630. [contrib] queryperf: add support for IPv6 transport.
da35568c7169d7218b0be7203ed03e2e626566c0Evan Hunt1629. [func] dig now supports IPv6 scoped addresses with the
da35568c7169d7218b0be7203ed03e2e626566c0Evan Hunt extended format in the local-server part. [RT #8753]
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews1627. [bug] win32: sockets were not being closed when the
fec1c619189b1fec1f63528363bf600cd0b1a87eMark Andrews last external reference was removed. [RT# 11179]
27809a2ee5db141b684e53bf1d94da26e9f92d3aMark Andrews1626. [bug] --enable-getifaddrs was broken. [RT#11259]
27809a2ee5db141b684e53bf1d94da26e9f92d3aMark Andrews1625. [bug] named failed to load/transfer RFC2535 signed zones
05284949f73d496092c6f21f1ef9d788075fa2dbEvan Hunt which contained CNAMES. [RT# 11237]
05284949f73d496092c6f21f1ef9d788075fa2dbEvan Hunt1624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
664320a88f4782d0bccf012da01a39dd54632d24Evan Hunt1623. [bug] A serial number of zero was being displayed in the
664320a88f4782d0bccf012da01a39dd54632d24Evan Hunt "sending notifies" log message when also-notify was
eed495737be4846ab054654a48f3387f77cadaaaMark Andrews used. [RT #11177]
eed495737be4846ab054654a48f3387f77cadaaaMark Andrews1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
5f26ffc2b4afc462acef8766ce5418cb4d75bfffMark Andrews available, and suppress wildcard binding if not.
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews1621. [bug] match-destinations did not work for IPv6 TCP queries.
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews1620. [func] When loading a zone report if it is signed. [RT #11149]
4c2168728cbfc210e35cd438fe57b95fb55d738aMark Andrews1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
4118cd4276c3f53f9f6f0133688e05e52d70336bMark Andrews1618. [bug] Fencepost errors in dns_name_ishostname() and
4118cd4276c3f53f9f6f0133688e05e52d70336bMark Andrews dns_name_ismailbox() could trigger a INSIST().
4118cd4276c3f53f9f6f0133688e05e52d70336bMark Andrews1617. [port] win32: VC++ 6.0 support.
8e0a15f42f06d1616b6f5d43658e2f90ff91cbfaMark Andrews1616. [compat] Ensure that named's version is visible in the core
8e0a15f42f06d1616b6f5d43658e2f90ff91cbfaMark Andrews dump. [RT #11127]
d1f43359e4349bb9d934b96b7aa22b54ae7cef7cMark Andrews1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
8f7e0e25a55e75cf9683583266faa14abcbda899Mark Andrews it is defined.
8f7e0e25a55e75cf9683583266faa14abcbda899Mark Andrews1614. [port] win32: silence resource limit messages. [RT# 11101]
b29e8482207fe64ea15960f2048a60e6a37e00ebMark Andrews1613. [bug] Builds would fail on machines w/o a if_nametoindex().
b29e8482207fe64ea15960f2048a60e6a37e00ebMark Andrews Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
339f08ee1eea16401bb9fbd9232a336cf6f52a8dckb1612. [bug] check-names at the option/view level could trigger
78ba74e63db0c30b30107106dfd4f7e6f671dc35Evan Hunt an INSIST. [RT# 11116]
78ba74e63db0c30b30107106dfd4f7e6f671dc35Evan Hunt1611. [bug] solaris: IPv6 interface scanning failed to cope with
1bbd36c4db2c86762b582db4b0504e6e68a183f6Mark Andrews no active IPv6 interfaces.
1bbd36c4db2c86762b582db4b0504e6e68a183f6Mark Andrews1610. [bug] On dual stack machines "dig -b" failed to set the
85705b4b5a4b666981997ffe222738d281b9bf58Evan Hunt address type to be looked up with "@server".
85705b4b5a4b666981997ffe222738d281b9bf58Evan Hunt1609. [func] dig now has support to chase DNSSEC signature chains.
820fdd61dd35e359a8e616031209d074a7140d97Evan Hunt Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
820fdd61dd35e359a8e616031209d074a7140d97Evan Hunt DNSSEC validation code in dig coded by Olivier Courtay
820fdd61dd35e359a8e616031209d074a7140d97Evan Hunt (olivier.courtay@irisa.fr) for the IDsA project
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews1608. [func] dig and host now accept -4/-6 to select IP transport
f06dad6860f209da422790ab7b9df36857e8c0f3Mark Andrews to use when making queries.
3f755529ee7ecdc9227eed572e007cf71d4d5107Evan Hunt1607. [bug] dig, host and nslookup were still using random()
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews to generate query ids. [RT# 11013]
5f250186409cff46d0409c6d3cc34d4bf08f1d17Mark Andrews1606. [bug] DLV insecurity proof was failing.
1eb871bb42d2728377ea1ebcb3c1ebb2d9535f3cMar Andrews1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews1604. [bug] A xfrout_ctx_create() failure would result in
e7857b5ee05414961bb11f9e57f654163fae6acbckb xfrout_ctx_destroy() being called with a
e7857b5ee05414961bb11f9e57f654163fae6acbckb partially initialized structure.
3ce2018dfa0912a29666e7e477a9daddf23fc224Mark Andrews1603. [bug] nsupdate: set interactive based on isatty().
6eb6af6732194157224e2b8d81a02a9e80c4530aMark Andrews1602. [bug] Logging to a file failed unless a size was specified.
c965b1869024ab38518fade703cc1dae2d71a59eMark Andrews1601. [bug] Silence spurious warning 'both "recursion no;" and
ee2f98d5cf12c86e7590efcdf6725ab133a430f3Mark Andrews "allow-recursion" active' warning from view "_bind".
c963ca7542743c4b1293b245b8750bfdcdde7580Mark Andrews1600. [bug] Duplicate zone pre-load checks were not case
c963ca7542743c4b1293b245b8750bfdcdde7580Mark Andrews insensitive.
c963ca7542743c4b1293b245b8750bfdcdde7580Mark Andrews1599. [bug] Fix memory leak on error path when checking named.conf.
d0d892f44941986629021fcdad388d54de829ea0Mark Andrews1598. [func] Specify that certain parts of the namespace must
d0d892f44941986629021fcdad388d54de829ea0Mark Andrews be secure (dnssec-must-be-secure).
1a594d204a1d63538e76f8453be1f4ce9f87b88eMark Andrews1597. [func] Allow notify-source and query-source to be specified
1a594d204a1d63538e76f8453be1f4ce9f87b88eMark Andrews on a per server basis similar to transfer-source.
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews1596. [func] Accept 'notify-source' style syntax for query-source.
34fba65d39b884775c30da2ae4eee15973b1b30dMark Andrews1595. [func] New notify type 'master-only'. Enable notify for
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews master zones only.
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews1594. [bug] 'rndc dumpdb' could prevent named from answering
8d678e40f6d5a172a6e5694ae819330ff667c55cEvan Hunt queries while the dump was in progress. [RT #10565]
cdd271b14aebc6a3f076eb82a016e0a4d0d4247aEvan Hunt1593. [bug] rndc should return "unknown command" to unknown
cdd271b14aebc6a3f076eb82a016e0a4d0d4247aEvan Hunt commands. [RT# 10642]
d64138e5778e99a994039b3861471929a49a2042Evan Hunt1592. [bug] configure_view() could leak a dispatch. [RT# 10675]
d64138e5778e99a994039b3861471929a49a2042Evan Hunt1591. [bug] libbind: updated to BIND 8.4.5.
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews1590. [port] netbsd: update thread support.
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews1589. [func] DNSSEC lookaside validation.
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews1587. [bug] dns_message_settsigkey() failed to clear existing key.
00c605a6438c16d4159aa7951e31ec5ed00812eeMark Andrews1586. [func] "check-names" is now implemented.
c41c261fc7b2ae573fab3675a03a5f1ef099a2eaMark Andrews1585. [placeholder]
c41c261fc7b2ae573fab3675a03a5f1ef099a2eaMark Andrews1584. [bug] "make test" failed with a read only source tree.
ad127d839d2e7aa542939a8a336691407e23397eMark Andrews1583. [bug] Records add via UPDATE failed to get the correct trust
ad127d839d2e7aa542939a8a336691407e23397eMark Andrews level. [RT #10452]
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt1582. [bug] rrset-order failed to work on RRsets with more
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews than 32 elements. [RT #10381]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews1581. [func] Disable DNSSEC support by default. To enable
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews DNSSEC specify "dnssec-enable yes;" in named.conf.
3d1eaf18c7603dfc134000488447dcb40d9d2bc5ckb1580. [bug] Zone destruction on final detach takes a long time.
3d1eaf18c7603dfc134000488447dcb40d9d2bc5ckb [RT #3746]
7865ea9545f28f12f046b32d24c989e8441b9812Mark Andrews1579. [bug] Multiple task managers could not be created.
57f1d800f8866d8b45cc130d31a92742a7c37e23Mark Andrews1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
c298583db573a329f37d43301d8c3c812500ac85Mark Andrews1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
c298583db573a329f37d43301d8c3c812500ac85Mark Andrews workaround code. [RT #10331]
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews1576. [bug] Race condition in dns_dispatch_addresponse().
04e5f9812cb02d5d86b542dfa9a394f074ff5621Evan Hunt1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
04e5f9812cb02d5d86b542dfa9a394f074ff5621Evan Hunt1574. [bug] Don't attempt to open the controls socket(s) when
109ebcc98023591b66f7e12010da9bde0dd07d6fMark Andrews running tests. [RT #9091]
109ebcc98023591b66f7e12010da9bde0dd07d6fMark Andrews1573. [port] linux: update to libtool 1.5.2 so that
7310c0b1ee680a4bcb0bcaa55798e64b97c9da18Mark Andrews "make install DESTDIR=/xx" works with
f6c77d1beab4dcd5484d7891aff04ed479dbb771Mark Andrews "configure --with-libtool". [RT #9941]
7310c0b1ee680a4bcb0bcaa55798e64b97c9da18Mark Andrews1572. [bug] nsupdate: sign the soa query to find the enclosing
9c0fa8d469259a0763f61464410aba8f0db96eafMark Andrews zone if the server is specified. [RT #10148]
432defb06aff07e35c762cbb9952eeb4d1957224Mark Andrews1571. [bug] rbt:hash_node() could fail leaving the hash table
e928207c3866f562d2800abb2afde59738c9294eMark Andrews in an inconsistent state. [RT #10208]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver1570. [bug] nsupdate failed to handle classes other than IN.
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews New keyword 'class' which sets the default class.
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver1569. [func] nsupdate new command 'answer' which displays the
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver complete answer message to the last update.
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver1568. [bug] nsupdate now reports that the update failed in
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver interactive mode. [RT# 10236]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
368aedf188d7c7782cae8a5ce2a978be47b5a764Evan Hunt1566. [port] Support for the cmsg framework on Solaris and HP/UX.
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver This also solved the problem that match-destinations
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver for IPv6 addresses did not work on these systems.
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt1565. [bug] CD flag should be copied to outgoing queries unless
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt the query is under a secure entry point in which case
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt CD should be set.
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews1564. [func] Attempt to provide a fallback entropy source to be
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews used if named is running chrooted and named is unable
01695063c6c4543c39d8a2a98a2108ce7e7aa416Evan Hunt to open entropy source within the chroot area.
d878b8d87c3f46a25ccae9f5cfe6e39af67562e0Evan Hunt1563. [bug] Gracefully fail when unable to obtain neither an IPv4
d878b8d87c3f46a25ccae9f5cfe6e39af67562e0Evan Hunt nor an IPv6 dispatch. [RT #10230]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt1562. [bug] isc_socket_create() and isc_socket_accept() could
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt leak memory under error conditions. [RT #10230]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt1561. [bug] It was possible to release the same name twice if
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt named ran out of memory. [RT #10197]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt and EAI_NONAME to the same value.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt1559. [port] named should ignore SIGFSZ.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt child zones for which we don't have a supported
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt algorithm. Such child zones are treated as unsigned.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt1557. [func] Implement missing DNSSEC tests for
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt * NOQNAME proof with wildcard answers.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt * NOWILDARD proof with NXDOMAIN.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt Cache and return NOQNAME with wildcard answers.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt1556. [bug] nsupdate now treats all names as fully qualified.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt1555. [func] 'rrset-order cyclic' no longer has a random starting
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt point per query. [RT #7572]
c438f1beb920b01adde08b32bfcfa085d7ce3efeMark Andrews1554. [bug] dig, host, nslookup failed when no nameservers
03ccae042b4acd22805d667f823066d3690965cfMark Andrews were specified in /etc/resolv.conf. [RT #8232]
c438f1beb920b01adde08b32bfcfa085d7ce3efeMark Andrews1553. [bug] The windows socket code could stop accepting
34fba65d39b884775c30da2ae4eee15973b1b30dMark Andrews connections. [RT#10115]
54489ba1672458382e8dfb5490fcfc7230f8ea85Evan Hunt1552. [bug] Accept NOTIFY requests from mapped masters if
54489ba1672458382e8dfb5490fcfc7230f8ea85Evan Hunt matched-mapped is set. [RT #10049]
4e8fe357a619ae2b789b15df7e3d6abf782b4a71Evan Hunt1551. [port] Open "/dev/null" before calling chroot().
4e8fe357a619ae2b789b15df7e3d6abf782b4a71Evan Hunt1550. [port] Call tzset(), if available, before calling chroot().
4e8fe357a619ae2b789b15df7e3d6abf782b4a71Evan Hunt1549. [func] named-checkzone can now write out the zone contents
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews in a easily parsable format (-D and -o).
1a04af5311b46955fd8c0207cc7bad1b1d632f7fMark Andrews1548. [bug] When parsing APL records it was possible to silently
393fd55d91306e6def3a3d06748eee031f57bd17Mark Andrews accept out of range ADDRESSFAMILY values. [RT# 9979]
7e9d6c707501c75c4caa1922af5c7d97b4895064Mark Andrews1547. [bug] Named wasted memory recording duplicate lame zone
7e9d6c707501c75c4caa1922af5c7d97b4895064Mark Andrews entries. [RT #9341]
4c9c2a6a72616ac8a614204dc0721afcb2095f67Mark Andrews1546. [bug] We were rejecting valid secure CNAME to negative
bdf5cdc32c658fbdfccfc3a1b9404188f1d3df98Evan Hunt1545. [bug] It was possible to leak memory if named was unable to
bdf5cdc32c658fbdfccfc3a1b9404188f1d3df98Evan Hunt bind to the specified transfer source and TSIG was
03ccae042b4acd22805d667f823066d3690965cfMark Andrews being used. [RT #10120]
20d441892d670cab7a58bbd36f4e92ae73b10a20Evan Hunt1544. [bug] Named would logged a single entry to a file despite it
e71acb8fbb0201a1b240dfd2e87a2524655884deMark Andrews being over the specified size limit.
4f3a3fc43c6e2de62997d2378e87b4248cf771aeMark Andrews1543. [bug] Logging using "versions unlimited" did not work.
3a6b896f7d9e4a657d1b4187326b4ac72b147403Mark Andrews1542. [placeholder]
75582adac73202213d936dc0850f1c9cf47d6cbeMark Andrews1541. [func] NSEC now uses new bitmap format.
75582adac73202213d936dc0850f1c9cf47d6cbeMark Andrews1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
b4b1e8f18bdf504ca3b6b5911d79c6d1570d59e7Mark Andrews1539. [bug] Open UDP sockets for notify-source and transfer-source
bf6651e27d456817bd110ddf6ec968b44403c643Mark Andrews that use reserved ports at startup. [RT #9475]
840659f1d7e09b9cd4af283aeadfbfe173b57a06Mark Andrews1538. [placeholder] rt9997
840659f1d7e09b9cd4af283aeadfbfe173b57a06Mark Andrews1537. [func] New option "querylog". If set specify whether query
840659f1d7e09b9cd4af283aeadfbfe173b57a06Mark Andrews logging is to be enabled or disabled at startup.
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews1536. [bug] Windows socket code failed to log a error description
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews when returning ISC_R_UNEXPECTED. [RT #9998]
56fdf1d4014b0901e723d22c0bf7503c086af2d5Mark Andrews1535. [placeholder]
85fcd0b9b2d80be4646187d7094e5644a52e3263Mark Andrews1534. [bug] Race condition when priming cache. [RT# 9940]
85fcd0b9b2d80be4646187d7094e5644a52e3263Mark Andrews1533. [func] Warn if both "recursion no;" and "allow-recursion"
2c642143d45517bfc0990d9194a7cc536f3fce89Mark Andrews are active. [RT# 4389]
2c642143d45517bfc0990d9194a7cc536f3fce89Mark Andrews1532. [port] netbsd: the configure test for <sys/sysctl.h>
c51f2c9a529b2130a8058cb7a32bd284fa6cfdb9Mark Andrews1531. [port] AIX more libtool fixes.
d8e73b1c76f2c7dcc641bfa7759c15df58c82c7eMark Andrews1530. [bug] It was possible to trigger a INSIST() failure if a
d8e73b1c76f2c7dcc641bfa7759c15df58c82c7eMark Andrews slave master file was removed at just the correct
269c07173e24d7811e2fd09304023e3104fcbe0bMark Andrews moment. [RT #9462]
269c07173e24d7811e2fd09304023e3104fcbe0bMark Andrews1529. [bug] "notify explicit;" failed to log that NOTIFY messages
962bf88eec1ea34a451769ba82c9389db7f0bef0Mark Andrews were being sent for the zone. [RT# 9442]
962bf88eec1ea34a451769ba82c9389db7f0bef0Mark Andrews1528. [cleanup] Simplify some dns_name_ functions based on the
4bb9db2aed9860f7ca63f925a4b9d48e07917988Mark Andrews deprecation of bitstring labels.
c6581f1ae41f8cfdaf983a0cc4936365040060a2Mark Andrews1527. [cleanup] Reduce the number of gettimeofday() calls without
c6581f1ae41f8cfdaf983a0cc4936365040060a2Mark Andrews losing necessary timer granularity.
e5bf06eedc08179fb93a09799915139370d08055Evan Hunt1526. [func] Implemented "additional section caching (or acache)",
e5bf06eedc08179fb93a09799915139370d08055Evan Hunt an internal cache framework for additional section
e5bf06eedc08179fb93a09799915139370d08055Evan Hunt content to improve response performance. Several
a7ab4ad2d45930cf42d92b26e92c5a4e39a197f8Mark Andrews configuration options were provided to control the
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews1525. [bug] dns_cache_create() could trigger a REQUIRE
261543671b70b078a2d55bbf16ef78ae2074bbdcEvan Hunt failure in isc_mem_put() during error cleanup.
490b05960c9956cc37f52f5fd4443829d75ce7d6Mark Andrews1524. [port] AIX needs to be able to resolve all symbols when
490b05960c9956cc37f52f5fd4443829d75ce7d6Mark Andrews creating shared libraries (--with-libtool).
89069e6b3abc5ab00c77227f31b771cc2fa4768fEvan Hunt1523. [bug] Fix race condition in rbtdb. [RT# 9189]
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews1522. [bug] dns_db_findnode() relax the requirements on 'name'.
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews1521. [bug] dns_view_createresolver() failed to check the
5b57f580ce54201c6105300ea6636677531163f9Mark Andrews result from isc_mem_create(). [RT# 9294]
5b57f580ce54201c6105300ea6636677531163f9Mark Andrews1520. [protocol] Add SSHFP (SSH Finger Print) type.
4c34112a69735364713758c8a22f753389fd1753Mark Andrews1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
4c34112a69735364713758c8a22f753389fd1753Mark Andrews length of the new bitmap.
c478bb4c4658dddabe79118e2f84107640aa06c4Mark Andrews1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
c478bb4c4658dddabe79118e2f84107640aa06c4Mark Andrews contained a off-by-one error when working out the
fb604d1cee223986d090763292015309adfcf9c7Mark Andrews number of octets in the bitmap.
936036e82337c5aba40e735e5b46f9112869772fMark Andrews1517. [port] Support for IPv6 interface scanning on HP/UX and
936036e82337c5aba40e735e5b46f9112869772fMark Andrews TrueUNIX 5.1.
81274f4b08b04eade0936cd32a4ba56281d7c2d2Mark Andrews1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
81274f4b08b04eade0936cd32a4ba56281d7c2d2Mark Andrews1515. [func] Allow transfer source to be set in a server statement.
fc3b3e1f7e4ec1cf3bcc08f7ecc3ed8ebd29b034Mark Andrews1514. [bug] named: isc_hash_destroy() was being called too early.
99f6179191e583d23f3c5567d3c00b57b64eb52dEvan Hunt1513. [doc] Add "US" to root-delegation-only exclude list.
99f6179191e583d23f3c5567d3c00b57b64eb52dEvan Hunt1512. [bug] Extend the delegation-only logging to return query
3fd0334e59fe72294bedafc9cb0f74d66b1cfe3aMark Andrews type, class and responding nameserver.
77cb7130e721c1352009c86fb2b38eedd06c4f97Mark Andrews1511. [bug] delegation-only was generating false positives
77cb7130e721c1352009c86fb2b38eedd06c4f97Mark Andrews on negative answers from sub-zones.
adfc3ad3ce5db585fdb29d3d6000aa05ba077f13Evan Hunt1510. [func] New view option "root-delegation-only". Apply
fc3b3e1f7e4ec1cf3bcc08f7ecc3ed8ebd29b034Mark Andrews delegation-only check to all TLDs and root.
adfc3ad3ce5db585fdb29d3d6000aa05ba077f13Evan Hunt Note there are some TLDs that are NOT delegation
adfc3ad3ce5db585fdb29d3d6000aa05ba077f13Evan Hunt only (e.g. DE, LV, US and MUSEUM) these can be excluded
73d187eab95980e7af7b31a22e522ed5ea1561d7Mark Andrews from the checks by using exclude.
73d187eab95980e7af7b31a22e522ed5ea1561d7Mark Andrews root-delegation-only exclude {
73d187eab95980e7af7b31a22e522ed5ea1561d7Mark Andrews "DE"; "LV"; "US"; "MUSEUM";
93143fd81acd86e594bac20c6c58b930dfe63a80Evan Hunt1509. [bug] Hint zones should accept delegation-only. Forward
2855e2772342e369cc8962659beac7b3001b4ec6Evan Hunt zone should not accept delegation-only.
c2e614115b19a4c28e0067e57a48f4ed5d5e12f8Mark Andrews1508. [bug] Don't apply delegation-only checks to answers from
c2e614115b19a4c28e0067e57a48f4ed5d5e12f8Mark Andrews1507. [bug] Handle BIND 8 style returns to NS queries to parents
75503c024b1a2cde5d545bc8e91b0f4e13c3398eEvan Hunt when making delegation-only checks.
c54dadd85337e9a8417103317a899dfba2a847d1Evan Hunt1506. [bug] Wrong return type for dns_view_isdelegationonly().
c54dadd85337e9a8417103317a899dfba2a847d1Evan Hunt1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
38b260f32d2be0e916e50e8bf77957ba2627a95aMark Andrews1504. [func] New zone type "delegation-only".
bc298cd0f77dce2d452efd3e3d3153e2a9a17dbfMark Andrews1503. [port] win32: install libeay32.dll outside of system32.
1bb3831e13a65afd87078c88e0285d23b1e0bcdfMark Andrews1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
1bb3831e13a65afd87078c88e0285d23b1e0bcdfMark Andrews1501. [func] Allow TCP queue length to be specified via
1bb3831e13a65afd87078c88e0285d23b1e0bcdfMark Andrews named.conf, tcp-listen-queue.
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews1500. [bug] host failed to lookup MX records. Also look up
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews AAAA records.
313e570601cbe84c46b8d0427e7f1b20e71cc0c1Evan Hunt1499. [bug] isc_random need to be seeded better if arc4random()
313e570601cbe84c46b8d0427e7f1b20e71cc0c1Evan Hunt is not used.
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt1498. [port] bsdos: 5.x support.
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt1497. [placeholder]
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt1496. [port] test for pthread_attr_setstacksize().
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt1495. [cleanup] Replace hash functions with universal hash.
c19cfefe7e345c37ef3bb98b0db2d14fe7b1d583Evan Hunt1494. [security] Turn on RSA BLINDING as a precaution.
19c4187e35333119a2d1e40c92a55e09a59a3e93Evan Hunt1493. [placeholder]
56c9fcf07580457442b80ac32bdb7c07aa0df870Evan Hunt1492. [cleanup] Preserve rwlock quota context when upgrading /
56c9fcf07580457442b80ac32bdb7c07aa0df870Evan Hunt downgrading. [RT #5599]
949eefdda49701c14579d1fd251bd09df0751c2fEvan Hunt1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
949eefdda49701c14579d1fd251bd09df0751c2fEvan Hunt lines. [RT #6206]
15218d6ed062ec24c4a7ec10d22d1113b4c79556Evan Hunt1490. [bug] Accept reading state as well as working state in
15218d6ed062ec24c4a7ec10d22d1113b4c79556Evan Hunt ns_client_next(). [RT #6813]
238e0e843834f24a40692a5ea28ace14ef5807ceMark Andrews1489. [compat] Treat 'allow-update' on slave zones as a warning.
9ddf371552b3554a22632996acc41ef9917a30f4Mark Andrews1488. [bug] Don't override trust levels for glue addresses.
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews1487. [bug] A REQUIRE() failure could be triggered if a zone was
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews queued for transfer and the zone was then removed.
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews1486. [bug] isc_print_snprintf() '%%' consumed one too many format
328e0fee6b6c91c258e5ce36eb70f5e017a85af2Mark Andrews characters. [RT# 8230]
328e0fee6b6c91c258e5ce36eb70f5e017a85af2Mark Andrews1485. [bug] gen failed to handle high type values. [RT #6225]
a5a30ae7c0636a57d8575acb98fdf906c0ea818fMark Andrews1484. [bug] The number of records reported after a AXFR was wrong.
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt1483. [bug] dig axfr failed if the message id in the answer failed
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt to match that in the request. Only the id in the first
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt message is required to match. [RT #8138]
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews1482. [bug] named could fail to start if the kernel supports
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews IPv6 but no interfaces are configured. Similarly
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews for IPv4. [RT #6229]
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews1481. [bug] Refresh and stub queries failed to use masters keys
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews if specified. [RT #7391]
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews1480. [bug] Provide replay protection for rndc commands. Full
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews replay protection requires both rndc and named to
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews be updated. Partial replay protection (limited
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews exposure after restart) is provided if just named
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews1479. [bug] cfg_create_tuple() failed to handle out of
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews memory cleanup. parse_list() would leak memory
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews on syntax errors.
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews1478. [port] ifconfig.sh didn't account for other virtual
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews interfaces. It now takes a optional argument
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews to specify the first interface number. [RT #3907]
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews1477. [bug] memory leak using stub zones and TSIG.
b290d10fc42ae909f7319eeac68f876155dbf824Mark Andrews1476. [placeholder]
b290d10fc42ae909f7319eeac68f876155dbf824Mark Andrews1475. [port] Probe for old sprintf().
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1474. [port] Provide strtoul() and memmove() for platforms
1d32b1df372d6be6bac6450739b9e5ea23819995Evan Hunt without them.
9ca4e2411ca45c09494716f725b8b9a25ae887d7Mark Andrews1473. [bug] create_map() and create_string() failed to handle out
9ca4e2411ca45c09494716f725b8b9a25ae887d7Mark Andrews of memory cleanup. [RT #6813]
108788443c2d4e4c5cc16c103bdfc7da665ed0c3Mark Andrews1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt1471. [bug] libbind: updated to BIND 8.4.0.
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt1470. [bug] Incorrect length passed to snprintf. [RT #5966]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt1469. [func] Log end of outgoing zone transfer at same level
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews as the start of transfer is logged. [RT #4441]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews1468. [func] Internal zones are no longer counted for
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt 'rndc status'. [RT #4706]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt1467. [func] $GENERATES now supports optional class and ttl.
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt1466. [bug] lwresd configuration errors resulted in memory
e4aac0596c89955ced3398d7e2896d05bcc70fd5Mark Andrews and lock leaks. [RT #5228]
e4aac0596c89955ced3398d7e2896d05bcc70fd5Mark Andrews1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
71e4c3ee745b9fbf0c627246a9896589344f613cMark Andrews failed to check that trailing bits were zero allowing
71e4c3ee745b9fbf0c627246a9896589344f613cMark Andrews some invalid base64 strings to be accepted. [RT #5397]
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews1464. [bug] Preserve "out of zone" data for outgoing zone
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews transfers. [RT #5192]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
9c832595d40482529ac6d369664bb59fbc05b925Mark Andrews NXT bit maps. [RT #5577]
28c2bc20269f3127b8bcb68e4458392f86cc0116Evan Hunt1462. [bug] parse_sizeval() failed to check the token type.
4122abdc3cfa16c8b3ecbd20830ca9a43f9fecb9Evan Hunt1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
de52784e45e3a7a92c0d8ad843eb4db313bbfd97Mark Andrews1460. [bug] inet_pton() failed to reject certain malformed
de52784e45e3a7a92c0d8ad843eb4db313bbfd97Mark Andrews IPv6 literals.
b68dc65959cc38f997c365abed9f4e6c0415ecc7Mark Andrews1459. [placeholder]
56dc4c6730222cd3915a6ca39bc6578ad36a160aMark Andrews1458. [cleanup] sprintf() -> snprintf().
56dc4c6730222cd3915a6ca39bc6578ad36a160aMark Andrews1457. [port] Provide strlcat() and strlcpy() for platforms without
d881a5ad06db99a42e47176028c14d09041f8807Scott Mann1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
553197e28833ed2d8bf26f8112eaa137dbaa040aMark Andrews1455. [bug] <netaddr> missing from server grammar in
553197e28833ed2d8bf26f8112eaa137dbaa040aMark Andrews1454. [port] Use getifaddrs() if available for interface scanning.
553197e28833ed2d8bf26f8112eaa137dbaa040aMark Andrews --disable-getifaddrs to override. Glibc currently
5927944728a530e9f43597b64a555029e2d010bdScott Mann has a getifaddrs() that does not support IPv6.
5927944728a530e9f43597b64a555029e2d010bdScott Mann Use --enable-getifaddrs=glibc to force the use of
5927944728a530e9f43597b64a555029e2d010bdScott Mann this version under linux machines.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
cae06bceda6c5d415f740574a64f42bf5f561d61Mark Andrews1452. [placeholder]
cae06bceda6c5d415f740574a64f42bf5f561d61Mark Andrews1451. [bug] rndc-confgen didn't exit with a error code for all
411d2914ade28174f3789d4a8e43636fc68eb310Mark Andrews failures. [RT #5209]
23daf8948b2e5462ccea082a441e9759dffa50cdMark Andrews1450. [bug] Fetching expired glue failed under certain
23daf8948b2e5462ccea082a441e9759dffa50cdMark Andrews circumstances. [RT #5124]
9bd876a683709be588f6fac6781a76fdd57b2f08Mark Andrews1449. [bug] query_addbestns() didn't handle running out of memory
03e2b1d18d6231d02a09e03d9300667fd6ef51d9Mark Andrews1448. [bug] Handle empty wildcards labels.
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews1447. [bug] We were casting (unsigned int) to and from (void *).
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews rdataset->private4 is now rdataset->privateuint4
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews to reflect a type change.
69feafa0af18ce7b1fd4f9d330948272e6c926a1Evan Hunt1446. [func] Implemented undocumented alternate transfer sources
69feafa0af18ce7b1fd4f9d330948272e6c926a1Evan Hunt from BIND 8. See use-alt-transfer-source,
69feafa0af18ce7b1fd4f9d330948272e6c926a1Evan Hunt alt-transfer-source and alt-transfer-source-v6.
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews SECURITY: use-alt-transfer-source is ENABLED unless
08b512b6a0c6e3c3e411275651930aeec605cf0cEvan Hunt you are using views. This may cause a security risk
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews resulting in accidental disclosure of wrong zone
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews content if the master supplying different source
08b512b6a0c6e3c3e411275651930aeec605cf0cEvan Hunt content based on IP address. If you are not certain
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews ISC recommends setting use-alt-transfer-source no;
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt been replaced with DNS_ADBFIND_STARTATZONE which
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt causes the search to start using the closest zone.
6fb6f8a2263f9cbc6bf979a4d79cc7a71e86f41eEvan Hunt1444. [func] dns_view_findzonecut2() allows you to specify if the
6fb6f8a2263f9cbc6bf979a4d79cc7a71e86f41eEvan Hunt cache should be searched for zone cuts.
3ab9d6435a7b40812e9d8d9d1ecf537e28082e3aEvan Hunt1443. [func] Masters lists can now be specified and referenced
77d048b03eec3222e283426beab46ec23ecf8371Evan Hunt in zone masters clauses and other masters lists.
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt1442. [func] New functions for manipulating port lists:
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt dns_portlist_create(), dns_portlist_add(),
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews dns_portlist_remove(), dns_portlist_match(),
13790b548c6660cba736756e5184e923d15d2659Evan Hunt dns_portlist_attach() and dns_portlist_detach().
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1441. [func] It is now possible to tell dig to bind to a specific
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews source port.
2a05d28eb174b082b604d1de1969ee371d8af568Mark Andrews1440. [func] It is now possible to tell named to avoid using
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt certain source ports (avoid-v4-udp-ports,
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt avoid-v6-udp-ports).
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt1439. [bug] Named could return NOERROR with certain NOTIFY
83c0ef88159fcae73fdbf8fe04d220c1878cce3eEvan Hunt failures. Return NOTAUTH if the NOTIFY zone is
83c0ef88159fcae73fdbf8fe04d220c1878cce3eEvan Hunt not being served.
36a13a94c5636cbed464380e56f23fb9df363731Evan Hunt1438. [func] Log TSIG (if any) when logging NOTIFY requests.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews1437. [bug] Leave space for stdio to work in. [RT #5033]
19ae9cbb28abf57c2605cbedaa6a7201a0cb6572Mark Andrews1436. [func] dns_zonemgr_resumexfrs() can be used to restart
5584cbf427d85488e3fbed682ea3f2406bdb8b4fEvan Hunt stalled transfers.
ca45c0bc34042b3821be46a6a95e71edd4c32c8dEvan Hunt1435. [bug] zmgr_resume_xfrs() was being called read locked
ca45c0bc34042b3821be46a6a95e71edd4c32c8dEvan Hunt rather than write locked. zmgr_resume_xfrs()
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews was not being called if the zone was being
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews1434. [bug] "rndc reconfig" failed to initiate the initial
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews zone transfer of new slave zones.
8899393ccd9fcbfcc6c027e9cb3bfd05fae29cabEvan Hunt1433. [bug] named could trigger a REQUIRE failure if it could
90a354ab367f420147a498e026305f59bf58a72bEvan Hunt not get a file descriptor when attempting to write
90a354ab367f420147a498e026305f59bf58a72bEvan Hunt a master file. [RT #4347]
25845da41a621f35e76dc8560ca40de6859e0a11Evan Hunt1432. [func] The advertised EDNS UDP buffer size can now be set
25845da41a621f35e76dc8560ca40de6859e0a11Evan Hunt via named.conf (edns-udp-size).
a5166d5fce30e5924f279d3e92d1f20b9fb7b4dcMark Andrews1431. [bug] isc_print_snprintf() "%s" with precision could walk off
a5166d5fce30e5924f279d3e92d1f20b9fb7b4dcMark Andrews end of argument. [RT #5191]
f550b4b104d2859539b2ec287600f1dd2215d9fbEvan Hunt1430. [port] linux: IPv6 interface scanning support.
6150d3cb666a58d5e3a15275562c9fc5c5b6b2d8Evan Hunt1429. [bug] Prevent the cache getting locked to old servers.
6150d3cb666a58d5e3a15275562c9fc5c5b6b2d8Evan Hunt1428. [placeholder]
fd0cb187615695ddc84ec25c88710c6c4e7cf096Evan Hunt1427. [bug] Race condition in adb with threaded build.
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt1426. [placeholder]
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt1425. [port] linux/libbind: define __USE_MISC when testing *_r()
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews function prototypes in netdb.h. [RT #4921]
1c1879b7efe32e6fe95de0ba923249925e3a320cEvan Hunt1424. [bug] EDNS version not being correctly printed.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1423. [contrib] queryperf: added A6 and SRV.
77b8f02d19efea79c34f0d4afcefc7ad65de8000Evan Hunt1422. [func] Log name/type/class when denying a query. [RT #4663]
77b8f02d19efea79c34f0d4afcefc7ad65de8000Evan Hunt1421. [func] Differentiate updates that don't succeed due to
0c25a44aac24a452a41240c45d35320ce054427dEvan Hunt prerequisites (unsuccessful) vs other reasons
8281fd83da005cdb114a4c784c847a7eec4bdc38Evan Hunt1420. [port] solaris: work around gcc optimizer bug.
8281fd83da005cdb114a4c784c847a7eec4bdc38Evan Hunt1419. [port] openbsd: use /dev/arandom. [RT #4950]
146057d7e755d646283adfe5d813f756b0538095Mark Andrews1418. [bug] 'rndc reconfig' did not cause new slaves to load.
fe3472c80b76b6fed0ae674fd63471d02477a03aMark Andrews1417. [func] ID.SERVER/CHAOS is now a built in zone.
fe3472c80b76b6fed0ae674fd63471d02477a03aMark Andrews See "server-id" for how to configure.
3975f627fe9c0d3aa02ed135070e3253357daad9Mark Andrews1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt from SOA MINIMUM.
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt1414. [func] Support for KSK flag.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1413. [func] Explicitly request the (re-)generation of DS records
36e97eb661df71069df2d75f5fd3b5bb0dcf1efeMark Andrews from keysets (dnssec-signzone -g).
62a348b15dd552e12bfbe94111e14072f1c8f02eMark Andrews1412. [func] You can now specify servers to be tried if a nameserver
7b4b6f361b2fb2291c2019b377a9c0c8e80cfd6bMark Andrews has IPv6 address and you only support IPv4 or the
7b4b6f361b2fb2291c2019b377a9c0c8e80cfd6bMark Andrews reverse. See dual-stack-servers.
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt1410. [func] Handle records that live in the parent zone, e.g. DS.
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt1408. [bug] "make distclean" was not complete. [RT #4700]
c4352fb17ebb1cf29ccabdf1c4273a86f035f38bMark Andrews1407. [bug] lfsr incorrectly implements the shift register.
0148654d85b2818f9317b428a67701f4585c8243Scott Mann1406. [bug] dispatch initializes one of the LFSR's with a incorrect
0148654d85b2818f9317b428a67701f4585c8243Scott Mann polynomial. [RT #4617]
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann1405. [func] Use arc4random() if available.
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews dnssec-signkey now report their version in the
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt usage message.
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt1402. [cleanup] A6 has been moved to experimental and is no longer
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt fully supported.
9a8ffb1ac76dfa5ca913474f0b23a15934356b47Mark Andrews1401. [bug] adb wasn't clearing state when the timer expired.
f704fa0ca628e5661d842ae9947024c9fd4fefcbEvan Hunt1400. [bug] Block the addition of wildcard NS records by IXFR
f704fa0ca628e5661d842ae9947024c9fd4fefcbEvan Hunt or UPDATE. [RT #3502]
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews1399. [bug] Use serial number arithmetic when testing SIG
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews timestamps. [RT #4268]
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews1398. [doc] ARM: notify-also should have been also-notify.
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1396. [func] dnssec-signzone: adjust the default signing time by
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews 1 hour to allow for clock skew.
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews have a working implementation. [RT #4079]
4cac7d0949f2e76561b9450b2af4ebe3eece5aa2Evan Hunt1394. [func] It is now possible to check if a particular element is
1946c596b47b0495ce745fe2fff7da799919b0d2Mark Andrews in a acl. Remove duplicate entries from the localnets
e94c7d23589f79d5ece5a068ee6a661cebf9c2b4Mark Andrews1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
30d9cf665d32984fe1dc62ae355ab5b2a0fe3a35Mark Andrews is not available in the kernel to prevent accidently
30d9cf665d32984fe1dc62ae355ab5b2a0fe3a35Mark Andrews listening on IPv4 interfaces.
0a1009ae64036ad2473bc48be8c98a54392b6cb5Mark Andrews1392. [bug] named-checkzone: update usage.
2801318d3cf49e23ee2bfda45f66cbaa7409f0aaMark Andrews1391. [func] Add support for IPv6 scoped addresses in named.
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews1390. [func] host now supports ixfr.
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews1389. [bug] named could fail to rotate long log files. [RT #3666]
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
48a3b282636db2c67c6e2dc10833689f58b05422Vernon Schryver defining HAVE_IFLIST_SYSCTL. [RT #3770]
bddc7537c220d2be1f496f7271382ef825826818Evan Hunt1387. [bug] named could crash due to an access to invalid memory
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews space (which caused an assertion failure) in
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews incremental cleaning. [RT #3588]
8b04568c804d6c50abb7c99adb03c689fbb00cf9Evan Hunt1386. [bug] named-checkzone -z stopped on errors in a zone.
2801318d3cf49e23ee2bfda45f66cbaa7409f0aaMark Andrews1385. [bug] Setting serial-query-rate to 10 would trigger a
af850c4120c5bee9462de4def85d0b4c1b583963Mark Andrews REQUIRE failure.
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews1384. [bug] host was incompatible with BIND 8 in its exit code and
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews in the output with the -l option. [RT #3536]
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews1383. [func] Track the serial number in a IXFR response and log if
02286522fbc6db783b5f0b4318289db0cefbfbcbMark Andrews a mismatch occurs. This is a more specific error than
02286522fbc6db783b5f0b4318289db0cefbfbcbMark Andrews "not exact". [RT #3445]
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt1382. [bug] make install failed with --enable-libbind. [RT #3656]
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt1381. [bug] named failed to correctly process answers that
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt contained DNAME records where the resulting CNAME
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt resulted in a negative answer.
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt1380. [func] 'rndc recursing' dump recursing queries to
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt 'recursing-file = "named.recursing";'.
b2086d798b442a428d50ddc247925f114aa4112fEvan Hunt1379. [func] 'rndc status' now reports tcp and recursion quota
1dacfa0ea8ee078030411d55d2021f7619568ea3Scott Mann1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1377. [func] dns_zone_load{new}() now reports if the zone was
1dacfa0ea8ee078030411d55d2021f7619568ea3Scott Mann loaded, queued for loading to up to date.
2cc56f582c1b13e5f8537610b71c1c283261a7dcMark Andrews1376. [func] New function dns_zone_logc() to log to specified
8c0f354bdf003852894a9a5ad6b829eafef0d405Mark Andrews1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt1374. [func] dns_adb_dump() now logs the lame zones associated
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt with each server.
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt1373. [bug] Recovery from expired glue failed under certain
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt circumstances.
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt1372. [bug] named crashes with an assertion failure on exit when
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt sharing the same port for listening and querying, and
1219f8d1948a3e39bfeee1980ef4931fb19c4485Evan Hunt changing listening addresses several times. [RT# 3509]
1219f8d1948a3e39bfeee1980ef4931fb19c4485Evan Hunt1371. [bug] notify-source-v6, transfer-source-v6 and
3d5423a48472936f3b1ad423995c5baffe9ff3b1Evan Hunt query-source-v6 with explicit addresses and using the
41ce9f5c27cfb50874b3274cea4f93d1fac14a91Mark Andrews same ports as named was listening on could interfere
41ce9f5c27cfb50874b3274cea4f93d1fac14a91Mark Andrews with named's ability to answer queries sent to those
67e3b3b9fcaa9150cd79b6db0d757bd131fce913Evan Hunt1370. [bug] dig '+[no]recurse' was incorrectly documented.
84f0bd3bc7ac72289cc0dfedd3d17872ad1169feEvan Hunt1369. [bug] Adding an NS record as the lexicographically last
84f0bd3bc7ac72289cc0dfedd3d17872ad1169feEvan Hunt record in a secure zone didn't work.
fad5116b3d68e825d29f87a1d3cb41409f42e8f5Scott Mann1368. [func] remove support for bitstring labels.
fad5116b3d68e825d29f87a1d3cb41409f42e8f5Scott Mann1367. [func] Use response times to select forwarders.
76a7d4e152dc80885312e4c2b6b8d94df9153f57Evan Hunt1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
9e4afc9b39fe5c5e44798944b72d6686a5be435cEvan Hunt1365. [func] "localhost" and "localnets" acls now include IPv6
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews addresses / prefixes.
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt1364. [func] Log file name when unable to open memory statistics
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt and dump database files. [RT# 3437]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt1363. [func] Listen-on-v6 now supports specific addresses.
2c35c682362049f823248542e07e7dca4008b986Mark Andrews1362. [bug] remove IFF_RUNNING test when scanning interfaces.
2c35c682362049f823248542e07e7dca4008b986Mark Andrews1361. [func] log the reason for rejecting a server when resolving
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt1360. [bug] --enable-libbind would fail when not built in the
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt source tree for certain OS's.
5e2704d0ae827dbb9296d7352219a11daa1170bcEvan Hunt1359. [security] Support patches OpenSSL libraries.
99cbc3d3a4dcbd203146f62e37478aee1c8ee673Evan Hunt1358. [bug] It was possible to trigger a INSIST when debugging
5a75f61dd413720c16d229b24ebba6bd6ecdb738Evan Hunt large dynamic updates. [RT #3390]
5a75f61dd413720c16d229b24ebba6bd6ecdb738Evan Hunt1357. [bug] nsupdate was extremely wasteful of memory.
3a63259484bf32c0c8b9646a8bfcbe3d25a17584Mark Andrews1356. [tuning] Reduce the number of events / quantum for zone tasks.
0f972644190291c832677fafd0826532770d11d8Mark Andrews1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
772dfb90be732103ef2793bca17ca57c5bb12fa7Mark Andrews1354. [doc] lwres man pages had illegal nroff.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1353. [contrib] sdb/ldap to version 0.9.
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt1352. [bug] dig, host, nslookup when falling back to TCP use the
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt current search entry (if any). [RT #3374]
c1e655fe4c2192d1c4198153d32b2506a8b3d02dEvan Hunt1351. [bug] lwres_getipnodebyname() returned the wrong name
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
31f46f1869f4b6b8ecfe0d89177000fb867b8df1Mark Andrews1350. [bug] dns_name_fromtext() failed to handle too many labels
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt1348. [port] win32: Rewrote code to use I/O Completion Ports
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews in socket.c and eliminating a host of socket
cf63d32d55ffed0e7e1b9eacfecb3e751dc68674Evan Hunt errors. Performance is enhanced.
cf63d32d55ffed0e7e1b9eacfecb3e751dc68674Evan Hunt1347. [placeholder]
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews1346. [placeholder]
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews1345. [port] Use a explicit -Wformat with gcc. Not all versions
96ade2bc52912bed2656a42c751edfabbcd650e6Mark Andrews include it in -Wall.
96ade2bc52912bed2656a42c751edfabbcd650e6Mark Andrews1344. [func] Log if the serial number on the master has gone
b47c020d5c635b662ac57e5485d266fd62c796c0Evan Hunt If you have multiple machines specified in the masters
4b08de94999f7cbd990685f7ba1ed91ede81708eEvan Hunt clause you may want to set 'multi-master yes;' to
4b08de94999f7cbd990685f7ba1ed91ede81708eEvan Hunt suppress this warning.
42cf2ff7bad81c5a1f5d3be29d06e12504c3af24Evan Hunt1343. [func] Log successful notifies received (info). Adjust log
42cf2ff7bad81c5a1f5d3be29d06e12504c3af24Evan Hunt level for failed notifies to notice.
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews1342. [func] Log remote address with TCP dispatch failures.
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews1341. [func] Allow a rate limiter to be stalled.
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews1340. [bug] Delay and spread out the startup refresh load.
e7220c9b841bbd3d16736726f786a86fec3c0e18Evan Hunt1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
53d308d83bfe32bf3328bac628670bd8876b1629Mark Andrews lookups. Bit string lookups are no longer attempted.
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt1338. [placeholder]
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt1337. [placeholder]
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt1336. [func] Nibble lookups under IP6.ARPA are now supported by
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt dns_byaddr_create(). dns_byaddr_createptrname() is
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt deprecated, use dns_byaddr_createptrname2() instead.
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt1335. [bug] When performing a nonexistence proof, the validator
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt should discard parent NXTs from higher in the DNS.
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt1334. [bug] When signing/verifying rdatasets, duplicate rdatas
475b1ed9cced1f92ce34bc2e59b3065dae48f366Mark Andrews need to be suppressed.
475b1ed9cced1f92ce34bc2e59b3065dae48f366Mark Andrews1333. [contrib] queryperf now reports a summary of returned
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews rcodes (-c), rcodes are printed in mnemonic form (-v).
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews1332. [func] Report the current serial with periodic commits when
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews rolling forward the journal.
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt1331. [func] Generate DNSSEC wildcard proofs.
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt1330. [bug] When processing events (non-threaded) only allow
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt the task one chance to use to use its quantum.
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt1329. [func] named-checkzone will now check if nameservers that
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt appear to be IP addresses. Available modes "fail",
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt "warn" (default) and "ignore" the results of the
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1328. [bug] The validator could incorrectly verify an invalid
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews negative proof.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1327. [bug] The validator would incorrectly mark data as insecure
fbe2cff19f5cddc67b967764ad95038dfcafc85aEvan Hunt when seeing a bogus signature before a correct
ea8278253210df030a24f0c89342b43fe279a127Mark Andrews1326. [bug] DNAME/CNAME signatures were not being cached when
ea8278253210df030a24f0c89342b43fe279a127Mark Andrews validation was not being performed. [RT #3284]
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt1325. [bug] If the tcpquota was exhausted it was possible to
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt to trigger a INSIST() failure.
47e70d820ed07895a25e5b3520adf953114ac01eEvan Hunt1324. [port] darwin: ifconfig.sh now supports darwin.
47e70d820ed07895a25e5b3520adf953114ac01eEvan Hunt1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
eee7f742eab409723902e229b840dcdbc9a512f5Evan Hunt1322. [bug] dnssec-signzone usage message was misleading.
eee7f742eab409723902e229b840dcdbc9a512f5Evan Hunt1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt would incorrectly duplicate its output and sign it.
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt1320. [doc] query-source-v6 was missing from options section.
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt1319. [func] libbind: log attempts to exploit #1318.
c0984ac8bdb9ab8812374651bbabcfeb5873eb38Mark Andrews1318. [bug] libbind: Remote buffer overrun.
c0984ac8bdb9ab8812374651bbabcfeb5873eb38Mark Andrews1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
2a4f4945657f4dd321d30a01aa5d74159c74dbcbEvan Hunt element name.
a50ce0f80bd665545389cfd91df31d3f4fe66b04Scott Mann1316. [bug] libbind: gethostans() could get out of sync parsing
7609e973f517387352a5e98b1b9c368bfb769b09Mark Andrews the response if there was a very long CNAME chain.
7609e973f517387352a5e98b1b9c368bfb769b09Mark Andrews1315. [bug] Options should apply to the internal _bind view.
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews1314. [port] Handle ECONNRESET from sendmsg() [unix].
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews1313. [func] Query log now says if the query was signed (S) or
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews if EDNS was used (E).
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1312. [func] Log TSIG key used w/ outgoing zone transfers.
de7df3e56fe99c33a415674b018aae93eee94750Evan Hunt1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
be847331456855e4e2e8e71fde1efd68a04557caEvan Hunt1310. [bug] 'rndc stop' failed to cause zones to be flushed
be847331456855e4e2e8e71fde1efd68a04557caEvan Hunt sometimes. [RT #3157]
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt1309. [func] Log that a zone transfer was covered by a TSIG.
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt1308. [func] DS (delegation signer) support.
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt1307. [bug] nsupdate: allow white space base64 key data.
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt1306. [bug] Badly encoded LOC record when the size, horizontal
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt precision or vertical precision was 0.1m.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1305. [bug] Document that internal zones are included in the
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt rndc status results.
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt1304. [func] New function: dns_zone_name().
9eea4c5cbd864e0bc400dc665b35c3dbd00f9222Evan Hunt1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1302. [func] Extended rndc dumpdb to support dumping of zones and
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews view selection: 'dumpdb [-all|-zones|-cache] [view]'.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1301. [func] New category 'update-security'.
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt1300. [port] Compaq Trucluster support.
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt1299. [bug] Set AI_ADDRCONFIG when looking up addresses
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt via getaddrinfo() (affects dig, host, nslookup, rndc
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt and nsupdate).
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt could be left with a trailing "\" after configure
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt has been run.
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt1297. [port] linux: make handling EINVAL from socket() no longer
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt conditional on #ifdef LINUX.
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt1296. [bug] isc_log_closefilelogs() needed to lock the log
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt1295. [bug] isc_log_setdebuglevel() needed to lock the log
7a2173839c5ca103090431f36709fde99b599097Evan Hunt1294. [func] libbind: no longer attempts bit string labels for
7a2173839c5ca103090431f36709fde99b599097Evan Hunt IPv6 reverse resolution. Try IP6.ARPA then IP6.INT
7a2173839c5ca103090431f36709fde99b599097Evan Hunt for nibble style resolution.
c92122485d6868a88e6cc1469e06a9c8f306b575Evan Hunt1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
c92122485d6868a88e6cc1469e06a9c8f306b575Evan Hunt1292. [func] Enable IPv6 support when using ioctl style interface
2b3bcbce23a5539a16c1d209f83a604c775859d5Mark Andrews scanning and OS supports SIOCGLIFADDR using struct
2b3bcbce23a5539a16c1d209f83a604c775859d5Mark Andrews if_laddrreq.
9cf04a12ec5ea0ee64338feef76e885980a524dfMark Andrews1291. [func] Enable IPv6 support when using sysctl style interface
9f36aef24cac3890e24e57d1821f7ede5e34ff8eMark Andrews1290. [func] "dig axfr" now reports the number of messages
9f36aef24cac3890e24e57d1821f7ede5e34ff8eMark Andrews as well as the number of records.
30f888cbd416f3bcc60b508c3957ef724af592d6Scott Mann1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt reflect written requirements.
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
e1234be3ad794d8580365e76b65ee657d094b254Paul Ebersman a rdataset to a zone db in the rbtdb implementation of
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt addrdataset.
4fc55db699529ce60f7f1e12aae40e315831c67fScott Mann1286. [bug] dns_name_downcase() enforce requirement that
0a82492610e2424bb999946bd6e5a13c83f453b4Mark Andrews target != NULL or name->buffer != NULL.
0a82492610e2424bb999946bd6e5a13c83f453b4Mark Andrews1285. [func] lwres: probe the system to see what address families
95759de490339a71e301ab6aa53b7a2c664f6d0fScott Mann are currently in use.
95759de490339a71e301ab6aa53b7a2c664f6d0fScott Mann1284. [bug] The RTT estimate on unused servers was not aged.
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Hunt1283. [func] Use "dataready" accept filter if available.
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt1282. [port] libbind: hpux 11.11 interface scanning.
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt1281. [func] Log zone when unable to get private keys to update
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt zone. Log zone when NXT records are missing from
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt secure zone.
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt1280. [bug] libbind: escape '(' and ')' when converting to
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt presentation form.
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt1278. [func] dig: now supports +[no]cl +[no]ttlid.
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt1277. [func] You can now create your own customized printing
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt styles: dns_master_stylecreate() and
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt dns_master_styledestroy().
5095e72ac3c0f1e16c246b56e8277614571bf132Mark Andrews1276. [bug] libbind: const pointer conflicts in res_debug.c.
653cad790b4dc6c1330f634150a8941b75ed761eMark Andrews1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
cb240b0676186ba4668946c98730879f14a195faFrancis Dupont1274. [bug] Memory leak in lwres_gnbarequest_parse().
cb240b0676186ba4668946c98730879f14a195faFrancis Dupont1273. [port] libbind: solaris: 64 bit binary compatibility.
e41de66a124e6e564428360c2f76e5f1ae6c6f06Francis Dupont1272. [contrib] Berkeley DB 4.0 sdb implementation from
e41de66a124e6e564428360c2f76e5f1ae6c6f06Francis Dupont Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
cbf59e5887d69fca6fe86a1ee5fcc82dded14babMark Andrews1271. [bug] "recursion available: {denied,approved}" was too
9e102ef9697f0b0d0607fe24bc3ac00286936dd4Francis Dupont1270. [bug] Check that system inet_pton() and inet_ntop() support
ed53ec0b06825bcc6ba54e10e0174e2de93e595dMark Andrews1269. [port] Openserver: ifconfig.sh support.
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt1268. [port] Openserver: the value FD_SETSIZE depends on whether
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt <sys/param.h> is included or not. Be consistent.
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt1267. [func] isc_file_openunique() now creates file using mode
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt 0666 rather than 0600.
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews are not C++ compatible, use *_TYPE versions instead.
26b49e84597ab3ebaa9ae1eb0fe01befa46a8107Mark Andrews1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
26b49e84597ab3ebaa9ae1eb0fe01befa46a8107Mark Andrews C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews1264. [placeholder]
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews1263. [bug] Reference after free error if dns_dispatchmgr_create()
cf4ceeee5fee2ebdca74f82514c14fd50939f85bMark Andrews1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
4f587beb8eb70f198346333bce5b89df3ac5c88eMark Andrews1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
4f587beb8eb70f198346333bce5b89df3ac5c88eMark Andrews support for compressed TSIG owner names.
649452635065426fcc08b99b351db904939a6580Mark Andrews1260. [func] libbind: res_update can now update IPv6 servers,
649452635065426fcc08b99b351db904939a6580Mark Andrews new function res_findzonecut2().
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
19f4b069dcade77da4ce9b6de2fa6d22062bef4fMark Andrews1258. [bug] libbind: res_nametotype() and res_nametoclass() were
2d96b63d311a5252c8583eb30a56b1fc58172419Mark Andrews1257. [bug] Failure to write pid-file should not be fatal on
2d96b63d311a5252c8583eb30a56b1fc58172419Mark Andrews reload. [RT #2861]
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews1255. [bug] When verifying that an NXT proves nonexistence, check
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt the rcode of the message and only do the matching NXT
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews check. That is, for NXDOMAIN responses, check that
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews the name is in the range between the NXT owner and
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews next name, and for NOERROR NODATA responses, check
fea04b0ffeaa83716937f1728ff6742722cec91aMark Andrews that the type is not present in the NXT bitmap.
fea04b0ffeaa83716937f1728ff6742722cec91aMark Andrews1254. [func] preferred-glue option from BIND 8.3.
f02b5d87a561ba669bd368a8a6422f364f7702ecEvan Hunt1253. [bug] The dnssec system test failed to remove the correct
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt1252. [bug] Dig, host and nslookup were not checking the address
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt the answer was coming from against the address it was
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt sent to. [RT# 2692]
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt1251. [port] win32: a make file contained absolute version specific
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt1250. [func] Nsupdate will report the address the update was
eff7f78bc65f30efd87a398e66084ddab72799d3Mark Andrews1249. [bug] Missing masters clause was not handled gracefully.
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt1248. [bug] DESTDIR was not being propagated between makes.
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt1247. [bug] Don't reset the interface index for link/site local
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt addresses. [RT #2576]
c2f051aaaab60dbac4bc754f09d594846d99fb89Evan Hunt1246. [func] New functions isc_sockaddr_issitelocal(),
32babe43eb479d2ae8736f9985a84d1b9d95a33aScott Mann isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
32babe43eb479d2ae8736f9985a84d1b9d95a33aScott Mann and isc_netaddr_islinklocal().
35efe74edbdae034447a5bf73c78d8243e50b0b8Mark Andrews1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
f385bac3b918aac3e33d2a8219e1b78f1c7f276eEvan Hunt1244. [bug] Receiving a TCP message from a blackhole address would
11c282d8a4c87618538cfc89c9004666dc841036Francis Dupont prevent further messages being received over that
020a733707d308258768c9d677b5839edb647ec8Evan Hunt1243. [bug] It was possible to trigger a REQUIRE() in
d54394cbefb7b0ed7bdf9aafaec4ece06578c26bFrancis Dupont dns_message_findtype(). [RT #2659]
d54394cbefb7b0ed7bdf9aafaec4ece06578c26bFrancis Dupont1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt1241. [bug] Drop received UDP messages with a zero source port
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt as these are invariably forged. [RT #2621]
624664e50406f63108ddc7bad47dbac87ac74261Francis Dupont1240. [bug] It was possible to leak zone references by
624664e50406f63108ddc7bad47dbac87ac74261Francis Dupont specifying an incorrect zone to rndc.
c1ced49662181d2fb2343ed7bde71d170f0d1119Mark Andrews1239. [bug] Under certain circumstances named could continue to
c1ced49662181d2fb2343ed7bde71d170f0d1119Mark Andrews use a name after it had been freed triggering
ba88bcf08b965f65c07735efa2f675b8cbeb735aMark Andrews INSIST() failures. [RT #2614]
ba88bcf08b965f65c07735efa2f675b8cbeb735aMark Andrews1238. [bug] It is possible to lockup the server when shutting down
ba88bcf08b965f65c07735efa2f675b8cbeb735aMark Andrews if notifies were being processed. [RT #2591]
88c63fe9c78e60e5e521d095d6e983c211902904Mark Andrews1237. [bug] nslookup: "set q=type" failed.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
4c05f9a6a3d0fe27d5fad1599b10500e21c705feMark Andrews NULL terminated text regions. [RT #2588]
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann1235. [func] Report 'out of memory' errors from openssl.
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann1234. [bug] contrib/sdb: 'zonetodb' failed to call
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont dns_result_register(). DNS_R_SEENINCLUDE should not
be789bc7eb6f683979cd1405a06284ee00cda366Mark Andrews1233. [bug] The flags field of a KEY record can be expressed in
17bc56e321574b43c5837d1741e9157c8f2fcd91Francis Dupont hex as well as decimal.
d3e3d7846dd5895960dcdcb1012b4be23388f81cMark Andrews1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1229. [bug] named would crash if it received a TSIG signed
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt query as part of an AXFR response. [RT #2570]
7cc5632595476c20f1c0683eff35baa370dd65bbEvan Hunt1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
7cc5632595476c20f1c0683eff35baa370dd65bbEvan Hunt1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
2f09e7c3fc25c0e5028593a24531d636845c3e42Mark Andrews if a number was expected and some other token was
2f09e7c3fc25c0e5028593a24531d636845c3e42Mark Andrews found. [RT#2532]
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews1226. [func] Use EDNS for zone refresh queries. [RT #2551]
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews1225. [func] dns_message_setopt() no longer requires that
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews dns_message_renderbegin() to have been called.
0e507dbb816575e6220fe309e8ada68897ffcdbeMark Andrews1224. [bug] 'rrset-order' and 'sortlist' should be additive
ddd40390be246189f10dc18782914b295befb139Mark Andrews not exclusive.
ddd40390be246189f10dc18782914b295befb139Mark Andrews1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
5715e1c6f6b549e95b312f1529efd849f7c9503fMark Andrews are supported.
ddd40390be246189f10dc18782914b295befb139Mark Andrews1222. [bug] Specifying 'port *' did not always result in a system
b795de862ba8e75f3b9c56abb9553c28255c8567Mark Andrews selected (non-reserved) port being used. [RT #2537]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
c12904ec531fb210066bafc33bde74d43889caacMark Andrews compared case insensitively. [RT #2542]
0a92db42c6be6a158cd41ff863831a8d2d257935Mark Andrews1220. [func] Support for APL rdata type.
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews1219. [func] Named now reports the TSIG extended error code when
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews signature verification fails. [RT #1651]
699e00089fb1a6eb31d7bd1c96bf973608953159Mark Andrews1218. [bug] Named incorrectly returned SERVFAIL rather than
6883a918f790147fd98e21b2c3d3d479320f3ed5Mark Andrews NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
6883a918f790147fd98e21b2c3d3d479320f3ed5Mark Andrews1217. [func] Report locations of previous key definition when a
e01f55daa4b611190a11a40299007e5e55018854Mark Andrews duplicate is detected.
e01f55daa4b611190a11a40299007e5e55018854Mark Andrews1216. [bug] Multiple server clauses for the same server were not
4c577cbd1efc14156751e5b2ced7a866871a2f1aMark Andrews reported. [RT #2514]
4c577cbd1efc14156751e5b2ced7a866871a2f1aMark Andrews1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
2ba2a6e4be2eae3a1db1a657ceee15aa62799c7fMark Andrews1214. [bug] Win32: isc_file_renameunique() could leave zero length
2ba2a6e4be2eae3a1db1a657ceee15aa62799c7fMark Andrews files behind.
30aaec21221ca5d8715d1ff1ce92fbdf98bb6652Mark Andrews1213. [func] Report view associated with client if it is not a
30aaec21221ca5d8715d1ff1ce92fbdf98bb6652Mark Andrews standard view (_default or _bind).
17a0bbda335ffc9af34be1000f500c622008458cMark Andrews1212. [port] libbind: 64k answer buffers were causing stack space
17a0bbda335ffc9af34be1000f500c622008458cMark Andrews to be exceeded for certain OS. Use heap space instead.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews1211. [bug] dns_name_fromtext() incorrectly handled certain
b32e391602b3655c90c2ded10376dbfa4ec8a074Evan Hunt valid octal bitlabels. [RT #2483]
b32e391602b3655c90c2ded10376dbfa4ec8a074Evan Hunt1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews compatible addresses. [RT #2461]
52d44117c825de42dd8bba00885cfb004770c79eMichael Graff1209. [bug] Dig, host, nslookup were not checking the message ids
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt on the responses. [RT #2454]
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt1208. [bug] dns_master_load*() failed to log a error message if
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt an error was detected when parsing the ownername of
aae88005f26209d969328703a09170e8af3faff3Mark Andrews a record. [RT #2448]
57b403c1e9cd8f814c7dbf1808f6cd8d2efb7aeaScott Mann1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
29bd52e4ee3fa047474d5d5b405d1e09c800a6f4Evan Hunt an invalid pointer.
b1b42b03b774d77ddfd38e5e0a5c0a3ed1944b89Mark Andrews1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
b1b42b03b774d77ddfd38e5e0a5c0a3ed1944b89Mark Andrews trigger a non-EDNS retry.
2870e5fb54c4a7e3980307b191c7e6ae649119bcEvan Hunt1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
c5fa3706950224af3f5ae6d22944b1b8298d4eddMark Andrews of the message. [RT #2449]
4d205bf79b4abacfef41c9f01ee63938deba2f31Mark Andrews1204. [bug] libbind: res_nupdate() failed to update the name
74b7355f1ee4a914aa09a6c6493aae64c588b026Mark Andrews server addresses before sending the update.
5cfe4bcb0afd71f6bc1cc2dab37a9ad6181c13f9Mark Andrews1203. [func] Report locations of previous acl and zone definitions
5cfe4bcb0afd71f6bc1cc2dab37a9ad6181c13f9Mark Andrews when a duplicate is detected.
5b79d154014f87b6c54b1ec2d3912c35b02042a1Mark Andrews1202. [func] New functions: cfg_obj_line() and cfg_obj_file().
a8e5a5918355d883f24e4f137c13cd53841679a9Mark Andrews1201. [bug] Require that if 'callbacks' is passed to
a8e5a5918355d883f24e4f137c13cd53841679a9Mark Andrews dns_rdata_fromtext(), callbacks->error and
a8e5a5918355d883f24e4f137c13cd53841679a9Mark Andrews callbacks->warn are initialized.
69496e55a787f8d800c826d2405d8f38e4c52b86Mark Andrews1200. [bug] Log 'errno' that we are unable to convert to
c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews isc_result_t. [RT #2404]
c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
16cc4a1f56d0f9a300419da7e75e3b72169e608aMark Andrews1198. [bug] OPT printing style was not consistent with the way the
16cc4a1f56d0f9a300419da7e75e3b72169e608aMark Andrews header fields are printed. The DO bit was not reported
000a8970f840a0c27c5cc404826853c4674362acMark Andrews if set. Report if any of the MBZ bits are set.
000a8970f840a0c27c5cc404826853c4674362acMark Andrews1197. [bug] Attempts to define the same acl multiple times were not
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews1196. [contrib] update mdnkit to 2.2.3.
903b3c84e2428160b2921364335363bb33452dabEvan Hunt1195. [bug] Attempts to redefine builtin acls should be caught.
1fba20bd0b3501f4c7e751e239e0992bf92443bfMark Andrews1194. [bug] Not all duplicate zone definitions were being detected
e02c1d738bd326beceabbe4a04692ea0282225edMark Andrews at the named.conf checking stage. [RT #2431]
e02c1d738bd326beceabbe4a04692ea0282225edMark Andrews1193. [bug] dig +besteffort parsing didn't handle packet
87708bde16713bc02ff2598f4a82f98c699a2f2dMark Andrews truncation. dns_message_parse() has new flag
87708bde16713bc02ff2598f4a82f98c699a2f2dMark Andrews DNS_MESSAGE_IGNORETRUNCATION.
a04b5f679428cefefedebe93718c0401e36f947dMark Andrews1192. [bug] The seconds fields in LOC records were restricted
38b84a1fcfdbda4d1d0fdca409004ae83be2ace8Mark Andrews to three decimal places. More decimal places should
38b84a1fcfdbda4d1d0fdca409004ae83be2ace8Mark Andrews be allowed but warned about.
433e06a25cdd92d665abda3e64c2c65f4a3f9b21Mark Andrews1191. [bug] A dynamic update removing the last non-apex name in
433e06a25cdd92d665abda3e64c2c65f4a3f9b21Mark Andrews a secure zone would fail. [RT #2399]
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt1189. [bug] On some systems, malloc(0) returns NULL, which
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt could cause the caller to report an out of memory
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt error. [RT #2398]
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews1188. [bug] Dynamic updates of a signed zone would fail if
3916872f379457fe344afb02398a009701c5016aEvan Hunt some of the zone private keys were unavailable.
3916872f379457fe344afb02398a009701c5016aEvan Hunt1187. [bug] named was incorrectly returning DNSSEC records
3916872f379457fe344afb02398a009701c5016aEvan Hunt in negative responses when the DO bit was not set.
161429fc059b0eeb84fb506bca4f9f5857a9c091Mark Andrews1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
161429fc059b0eeb84fb506bca4f9f5857a9c091Mark Andrews EOL token when reading to end of line.
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt unless RES_INIT is set when calling res_*init().
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt when res_*init() is called.
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt1183. [bug] Handle ENOSR error when writing to the internal
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt control pipe. [RT #2395]
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt1182. [bug] The server could throw an assertion failure when
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt constructing a negative response packet.
37dee1ff94960a61243f611c0f87f8c316815c53Mark Andrews1181. [func] Add the "key-directory" configuration statement,
37dee1ff94960a61243f611c0f87f8c316815c53Mark Andrews which allows the server to look for online signing
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews keys in alternate directories.
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews1180. [func] dnssec-keygen should always generate keys with
643935ac110cdd977759ac9b85a5795646ccc6cfMark Andrews protocol 3 (DNSSEC), since it's less confusing
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews1179. [func] Add SIG(0) support to nsupdate.
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews1178. [bug] Follow and cache (if appropriate) A6 and other
179e028b35ff89a9d493398285c40dc89b08963bMark Andrews data chains to completion in the additional section.
179e028b35ff89a9d493398285c40dc89b08963bMark Andrews1177. [func] Report view when loading zones if it is not a
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews standard view (_default or _bind). [RT #2270]
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews1176. [doc] Document that allow-v6-synthesis is only performed
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews for clients that are supplied recursive service.
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews1175. [bug] named-checkzone and named-checkconf failed to call
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews dns_result_register() at startup which could
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews result in runtime exceptions when printing
1f512cd06b4aefb86e767197751879840ba3f56bMark Andrews "out of memory" errors. [RT #2335]
1f512cd06b4aefb86e767197751879840ba3f56bMark Andrews1174. [bug] Win32: add WSAECONNRESET to the expected errors
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt from connect(). [RT #2308]
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt1173. [bug] Potential memory leaks in isc_log_create() and
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt isc_log_settag(). [RT #2336]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt table of RR types in ARM.
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt1171. [func] Added function isc_region_compare(), updated files in
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt lib/dns to use this function instead of local one.
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt1170. [bug] Don't attempt to print the token when a I/O error
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt occurs when parsing named.conf. [RT #2275]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt1169. [func] Identify recursive queries in the query log.
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt1167. [contrib] nslint-2.1a3 (from author).
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt1166. [bug] "Not Implemented" should be reported as NOTIMP,
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt not NOTIMPL. [RT #2281]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt1164. [bug] Empty masters clauses in slave / stub zones were not
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews handled gracefully. [RT #2262]
743bbdc18f839499862e4fb28ec32f607b1632dcTatuya JINMEI 神明達哉1163. [func] isc_time_formattimestamp() now includes the year.
bbedadf76ab670b01887fb9b41097120ea4fdf14Evan Hunt1162. [bug] The allow-notify option was not accepted in slave
bbedadf76ab670b01887fb9b41097120ea4fdf14Evan Hunt zone statements.
8d8f0b465959b799cb0d29ed694dc50ea7a73202Mark Andrews1161. [bug] named-checkzone looped on unbalanced brackets.
7659fdb3aab0a96e10aac67669b6c8d79faef44fjohnd1160. [bug] Generating Diffie-Hellman keys longer than 1024
858c4a86c12fdaf90d8d24a6535c7e0f89d0a962johnd bits could fail. [RT #2241]
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews1159. [bug] MD and MF are not permitted to be loaded by RFC1123.
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews1158. [func] Report the client's address when logging notify
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews1157. [func] match-clients and match-destinations now accept
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews keys. [RT #2045]
e334405421979688f2d838805ac67ee47bd62976Mark Andrews1156. [port] The configure test for strsep() incorrectly
8aee18709f238406719768b8a6b843a15c5075f8Mark Andrews succeeded on certain patched versions of
8aee18709f238406719768b8a6b843a15c5075f8Mark Andrews AIX 4.3.3. [RT #2190]
e78c2b856b9bfbf713fe805224f345f8e8f84e4aEvan Hunt1155. [func] Recover from master files being removed from under
e78c2b856b9bfbf713fe805224f345f8e8f84e4aEvan Hunt1154. [bug] Don't attempt to obtain the netmask of a interface
c0a76b3c0b42a110e14eb56103973944900400c4Mark Andrews if there is no address configured. [RT #2176]
82f0630bae09598209cc37c1db00ff4356efee27Mark Andrews1153. [func] 'rndc {stop|halt} -p' now reports the process id
82f0630bae09598209cc37c1db00ff4356efee27Mark Andrews of the instance of named being shutdown.
36fc19f9397ac2469d5432e5eb6ff8774cf60676Mark Andrews1152. [bug] libbind: read buffer overflows.
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews1151. [bug] nslookup failed to check that the arguments to
020120e3c72d67a86ce3fd2542b43b269a1e9233Mark Andrews the port, timeout, and retry options were
97664670d0e45ec865da407112fceb892133eaf3Mark Andrews valid integers and in range. [RT #2099]
97664670d0e45ec865da407112fceb892133eaf3Mark Andrews1150. [bug] named incorrectly accepted TTL values
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews containing plus or minus signs, such as
b5b934a0bb46aded1552a17473652b5a7f4a3274Evan Hunt1149. [func] New function isc_parse_uint32().
5af195d1dbe4c266a47264111a9293069041209dMark Andrews1148. [func] 'rndc-confgen -a' now provides positive feedback.
5af195d1dbe4c266a47264111a9293069041209dMark Andrews1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
5af195d1dbe4c266a47264111a9293069041209dMark Andrews the OS. listen-on-v6 { any; }; should no longer
5af195d1dbe4c266a47264111a9293069041209dMark Andrews result in IPv4 queries be accepted. Similarly
5a636f9951e0a6968498d588a57cb01161d2a109Mark Andrews control { inet :: ... }; should no longer result
5a636f9951e0a6968498d588a57cb01161d2a109Mark Andrews in IPv4 connections being accepted. This can be
8eb30f8dd3c1170406f4f2307964e4c0994494beEvan Hunt overridden at compile time by defining
8eb30f8dd3c1170406f4f2307964e4c0994494beEvan Hunt ISC_ALLOW_MAPPED=1.
8eb30f8dd3c1170406f4f2307964e4c0994494beEvan Hunt1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews supported by the OS by a new function
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews isc_socket_ipv6only().
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews1145. [func] "host" no longer reports a NOERROR/NODATA response
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews by printing nothing. [RT #2065]
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews1144. [bug] rndc-confgen would crash if both the -a and -t
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews options were specified. [RT #2159]
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier1143. [bug] When a trusted-keys statement was present and named
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier was built without crypto support, it would leak memory.
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews1142. [bug] dnssec-signzone would fail to delete temporary files
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier in some failure cases. [RT #2144]
a27b3757fdd8976ce05e37f391ad9e7ac4638e5dMark Andrews1141. [bug] When named rejected a control message, it would
a27b3757fdd8976ce05e37f391ad9e7ac4638e5dMark Andrews leak a file descriptor and memory. It would also
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews fail to respond, causing rndc to hang.
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews [RT #2139, #2164]
a27b3757fdd8976ce05e37f391ad9e7ac4638e5dMark Andrews1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews to the -s option. [RT #2138]
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews1139. [func] It is now possible to flush a given name from the
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews cache(s) via 'rndc flushname name [view]'. [RT #2051]
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews1138. [func] It is now possible to flush a given name from the
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews cache by calling the new function
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews dns_cache_flushname().
2015023399657c36e9dcc8b5dc35ce20dfc876f0Mark Andrews1137. [func] It is now possible to flush a given name from the
2015023399657c36e9dcc8b5dc35ce20dfc876f0Mark Andrews ADB by calling the new function dns_adb_flushname().
b2c8cc4f2d61f0593300a5851e26e7ddb30b7e10Mark Andrews1136. [bug] CNAME records synthesized from DNAMEs did not
ed83fa75f5657ab2394a701f7ccc169dd9ef48fcMark Andrews have a TTL of zero as required by RFC2672.
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews1135. [func] You can now override the default syslog() facility for
c470afc7ac0040f1bf7553ce8183b7a1d1726211Mark Andrews named/lwresd at compile time. [RT #1982]
506a2177bfafa4321cf1ba27ff4a1d09bac69e14Mark Andrews1134. [bug] Multi-threaded servers could deadlock in ferror()
506a2177bfafa4321cf1ba27ff4a1d09bac69e14Mark Andrews when reloading zone files. [RT #1951, #1998]
082f42dcf2f38509a8c842013548f680a6ad06f3Mark Andrews1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
082f42dcf2f38509a8c842013548f680a6ad06f3Mark Andrews platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews1132. [func] Improve UPDATE prerequisite failure diagnostic messages.
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews1131. [bug] The match-destinations view option did not work with
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews IPv6 destinations. [RT #2073, #2074]
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews1130. [bug] Log messages reporting an out-of-range serial number
70ba55161bbecab6b58ad4d2203741e9b57951bcMark Andrews did not include the out-of-range number but the
70ba55161bbecab6b58ad4d2203741e9b57951bcMark Andrews following token. [RT #2076]
70ba55161bbecab6b58ad4d2203741e9b57951bcMark Andrews1129. [bug] Multi-threaded servers could crash under heavy
ad9107efaaae2407cf11bf0c55407d8daed2e2d4Mark Andrews resolution load due to a race condition. [RT #2018]
3f9f14055b85c2dda341b341de0e65d4639542c5Mark Andrews1128. [func] sdb drivers can now provide RR data in either text
3f9f14055b85c2dda341b341de0e65d4639542c5Mark Andrews or wire format, the latter using the new functions
75f48cecb3289c6d23a45127da65f18937160341Mark Andrews dns_sdb_putrdata() and dns_sdb_putnamedrdata().
75f48cecb3289c6d23a45127da65f18937160341Mark Andrews1127. [func] rndc: If the server to contact has multiple addresses,
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews try all of them.
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews1126. [bug] The server could access a freed event if shut
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews down while a client start event was pending
1b42401954a8770d82a168ae1ac06ce66862fd25Mark Andrews delivery. [RT #2061]
1b42401954a8770d82a168ae1ac06ce66862fd25Mark Andrews1125. [bug] rndc: -k option was missing from usage message.
240a7dc59d6bc135ed298436b59dc86c84928ca2Mark Andrews1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
240a7dc59d6bc135ed298436b59dc86c84928ca2Mark Andrews are now documented. [RT #2052]
e588bfe68951d3a88f56640fdc7e43d8623642f4Mark Andrews1123. [bug] dig +[no]fail did not match description. [RT #2052]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews1122. [tuning] Resolution timeout reduced from 90 to 30 seconds.
02a211f4c4d86f283f9c94bc7e5ab07b547e49f4Mark Andrews1121. [bug] The server could attempt to access a NULL zone
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews table if shut down while resolving.
17be07ab818846dffb79e898da888a29c919bb02Mark Andrews [RT #1587, #2054]
17be07ab818846dffb79e898da888a29c919bb02Mark Andrews1120. [bug] Errors in options were not fatal. [RT #2002]
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews1119. [func] Added support in Win32 for NTFS file/directory ACL's
20599f3d0e20fe6e253f59f043f3bef5d6635de6Mark Andrews for access control.
20599f3d0e20fe6e253f59f043f3bef5d6635de6Mark Andrews1118. [bug] On multi-threaded servers, a race condition
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews could cause an assertion failure in resolver.c
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews during resolver shutdown. [RT #2029]
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews1117. [port] The configure check for in6addr_loopback incorrectly
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews succeeded on AIX 4.3 when compiling with -O2
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews because the test code was optimized away.
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews1116. [bug] Setting transfers in a server clause, transfers-in,
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews or transfers-per-ns to a value greater than
f94ec08c17d60ee519a4f46b6dbb3519989e5b9cMark Andrews 2147483647 disabled transfers. [RT #2002]
f94ec08c17d60ee519a4f46b6dbb3519989e5b9cMark Andrews1115. [func] Set maximum values for cleaning-interval,
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews heartbeat-interval, interface-interval,
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews max-transfer-idle-in, max-transfer-idle-out,
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews max-transfer-time-in, max-transfer-time-out,
03952196946fc638af7f20a9b59cfd2f15de01acFrancis Dupont statistics-interval of 28 days and
03952196946fc638af7f20a9b59cfd2f15de01acFrancis Dupont sig-validity-interval of 3660 days. [RT #2002]
7c681d075027f3389c31d261e1a71473c42ac73bMark Andrews1114. [port] Ignore more accept() errors. [RT #2021]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1113. [bug] The allow-update-forwarding option was ignored
da45cdaf79df00578c5bd2be9a9083a1bf95a4feMark Andrews when specified in a view. [RT #2014]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews1112. [placeholder]
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews1111. [bug] Multi-threaded servers could deadlock processing
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt recursive queries due to a locking hierarchy
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews violation in adb.c. [RT #2017]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉1110. [bug] dig should only accept valid abbreviations of +options.
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉1109. [bug] nsupdate accepted illegal ttl values.
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉1108. [bug] On Win32, rndc was hanging when named was not running
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 due to failure to select for exceptional conditions
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 in select(). [RT #1870]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉1107. [bug] nsupdate could catch an assertion failure if an
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 invalid domain name was given as the argument to
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 the "zone" command.
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉1106. [bug] After seeing an out of range TTL, nsupdate would
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 treat all TTLs as out of range. [RT #2001]
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt1105. [port] OpenUNIX 8 enable threads by default. [RT #1970]
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt1104. [bug] Invalid arguments to the transfer-format option
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt could cause an assertion failure. [RT #1995]
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt1102. [doc] Note that query logging is enabled by directing the
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt queries category to a channel.
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt1101. [bug] Array bounds read error in lwres_gai_strerror.
4b6cb8d09e75ce9f04b2e40bd9d2e449c09b0c1fMark Andrews1100. [bug] libbind: DNSSEC key ids were computed incorrectly.
4b6cb8d09e75ce9f04b2e40bd9d2e449c09b0c1fMark Andrews1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
712b976a0633806b7140b17354a9398300f616b9Mark Andrews compile time errors.
712b976a0633806b7140b17354a9398300f616b9Mark Andrews1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews1097. [func] libbind: RES_PRF_TRUNC for dig.
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews1096. [func] libbind: "DNSSEC OK" (DO) support.
cb933b69ff357100768d0b33b88e4ee986b128f2Evan Hunt1095. [func] libbind: resolver option: no-tld-query. disables
cb933b69ff357100768d0b33b88e4ee986b128f2Evan Hunt trying unqualified as a tld. no_tld_query is also
cb933b69ff357100768d0b33b88e4ee986b128f2Evan Hunt supported for FreeBSD compatibility.
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews1094. [func] libbind: add support gcc's format string checking.
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉1093. [doc] libbind: miscellaneous nroff fixes.
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉1092. [bug] libbind: get*by*() failed to check if res_init() had
03ccae042b4acd22805d667f823066d3690965cfMark Andrews been called.
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt1091. [bug] libbind: misplaced va_end().
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt the amount of memory consumed resulting in garbage
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt address being returned. Alignment calculations were
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt wasting space. We weren't suppressing duplicate
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt1089. [func] libbind: inet_{cidr,net}_{pton,ntop}() now have IPv6
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt1088. [port] libbind: MPE/iX C.70 (incomplete)
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt1087. [bug] libbind: struct __res_state too large on 64 bit arch.
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt1086. [port] libbind: sunos: old sprintf.
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt1085. [port] libbind: solaris: sys_nerr and sys_errlist do not
ff5864ef42c3bc55e9be20434d1f7de2f6794894Mark Andrews exist when compiling in 64 bit mode.
ff5864ef42c3bc55e9be20434d1f7de2f6794894Mark Andrews1084. [cleanup] libbind: gai_strerror() rewritten.
f3792d4bda1273fe82f9d0a13f141923e41d4537Tatuya JINMEI 神明達哉1083. [bug] The default control channel listened on the
45d9b38097eb7b43e7e0d5d20c2d0903c7224ebdMark Andrews wildcard address, not the loopback as documented.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1082. [bug] The -g option to named incorrectly caused logging
810656a187f2c358323bbf679f792f19a46a7973Mark Andrews to be sent to syslog in addition to stderr.
bf13e709db49bb19e0c2e73f0a964fe9d7bea4dfMark Andrews1081. [bug] Multicast queries were incorrectly identified
bf13e709db49bb19e0c2e73f0a964fe9d7bea4dfMark Andrews based on the source address, not the destination
43888c231579e5b021beeadd7265cda302ea1efeMark Andrews1080. [bug] BIND 8 compatibility: accept bare IP prefixes
b7ba273d32232dfadaea5af384f1e6f36c915249Mark Andrews as the second element of a two-element top level
c52235e52ee12e4d15f808ac06608584257f6479Mark Andrews sort list statement. [RT #1964]
0627874ff86b2d5c9d6d90ea9fde8111dc97654bMark Andrews1079. [bug] BIND 8 compatibility: accept bare elements at top
4a8dc5f8efcc8bc3033a9383f958d1de22c844f4Mark Andrews level of sort list treating them as if they were
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews a single element list. [RT #1963]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews1078. [bug] We failed to correct bad tv_usec values in one case.
718c4becc5711be71e23202a87f3aaea1aedde79Mark Andrews1077. [func] Do not accept further recursive clients when
081b36ff9588e4d67a1a3095f5333a2b223482f7Mark Andrews the total number of recursive lookups being
081b36ff9588e4d67a1a3095f5333a2b223482f7Mark Andrews processed exceeds max-recursive-clients, even
43c770b9987375e9e0efa19617b22e8e6a748a63Mark Andrews if some of the lookups are internally generated.
43c770b9987375e9e0efa19617b22e8e6a748a63Mark Andrews [RT #1915, #1938]
9a56f03c4c63c3729ebfcff9f99b9394c6004a20Mark Andrews1076. [bug] A badly defined global key could trigger an assertion
9a56f03c4c63c3729ebfcff9f99b9394c6004a20Mark Andrews on load/reload if views were used. [RT #1947]
02181a6c7420e8f3c083d0d20e0e65a78ea25d0fMark Andrews1075. [bug] Out-of-range network prefix lengths were not
02181a6c7420e8f3c083d0d20e0e65a78ea25d0fMark Andrews reported. [RT #1954]
e24ccb512c110d181e01f977196e518b0e72e451Mark Andrews1074. [bug] Running out of memory in dump_rdataset() could
e24ccb512c110d181e01f977196e518b0e72e451Mark Andrews cause an assertion failure. [RT #1946]
63af1a646a006867dbd99dc0aa74559d832a420fMark Andrews1073. [bug] The ADB cache cleaning should also be space driven.
b7bc86a4d3d78fae33577682cea7d1449abb7b33Mark Andrews [RT #1915, #1938]
b7bc86a4d3d78fae33577682cea7d1449abb7b33Mark Andrews1072. [bug] The TCP client quota could be exceeded when
675cc80975eb7d15e0d9f1d5f424baafaf189fdeMark Andrews recursion occurred. [RT #1937]
675cc80975eb7d15e0d9f1d5f424baafaf189fdeMark Andrews1071. [bug] Sockets listening for TCP DNS connections
a20996ab6ff2be473b85470fddd2380a3e180e7bMark Andrews specified an excessive listen backlog. [RT #1937]
80852eb5a8df5f3d70efb764e00f8f09efc5730cMark Andrews1070. [bug] Copy DNSSEC OK (DO) to response as specified by
29f0da7fb84ea8010175769baecd12ab20903bb4Mark Andrews1069. [placeholder]
29f0da7fb84ea8010175769baecd12ab20903bb4Mark Andrews1068. [bug] errno could be overwritten by catgets(). [RT #1921]
b00de53de2e37154d9046d481734cfb9a8573204Mark Andrews1067. [func] Allow quotas to be soft, isc_quota_soft().
249dcf3932668693a53c2790b97f5170efb233e1Mark Andrews1066. [bug] Provide a thread safe wrapper for strerror().
8e22c73f3ea64337926151b53245f61342fa52faMark Andrews1065. [func] Runtime support to select new / old style interface
8e22c73f3ea64337926151b53245f61342fa52faMark Andrews scanning using ioctls.
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews1064. [bug] Do not shut down active network interfaces if we
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews are unable to scan the interface list. [RT #1921]
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews1063. [bug] libbind: "make install" was failing on IRIX.
7d9be933d7f4504cd0355ced1fb7fbd137e455b7Mark Andrews1062. [bug] If the control channel listener socket was shut
5ae2eac4c16bdbbef032544bd9fc86f47e7bdc2cMark Andrews down before server exit, the listener object could
5ae2eac4c16bdbbef032544bd9fc86f47e7bdc2cMark Andrews be freed twice. [RT #1916]
5b02fc32d693bb811199308a40143df0adf818c1Mark Andrews1061. [bug] If periodic cache cleaning happened to start
b667946fa548bf8cb93029458ec130be6365419fMark Andrews while cleaning due to reaching the configured
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews maximum cache size was in progress, the server
b667946fa548bf8cb93029458ec130be6365419fMark Andrews could catch an assertion failure. [RT #1912]
d8624c1f19777853aa96cb797759743c82480f70Mark Andrews1060. [func] Move refresh, stub and notify UDP retry processing
d8624c1f19777853aa96cb797759743c82480f70Mark Andrews into dns_request.
98744b51112090a3fb7abcf858cb0657c13609ccMark Andrews1059. [func] dns_request now support will now retry UDP queries,
98744b51112090a3fb7abcf858cb0657c13609ccMark Andrews dns_request_createvia2() and dns_request_createraw2().
8d31dd9ab62d91b5f23ac687657c966d44074a3fMark Andrews1058. [func] Limited lifetime ticker timers are now available,
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews isc_timertype_limited.
6d5840017831db1eee3be47236ff5044449a0256Mark Andrews1057. [bug] Reloading the server after adding a "file" clause
6d5840017831db1eee3be47236ff5044449a0256Mark Andrews to a zone statement could cause the server to
3ec79bbc03fc5378a6cb37b276807cd40b5332aaMark Andrews crash due to a typo in change 1016.
3ec79bbc03fc5378a6cb37b276807cd40b5332aaMark Andrews1056. [bug] Rndc could catch an assertion failure on SIGINT due
dc64df4479df5e7cb3ed1dead21888b5af98f67eMark Andrews to an uninitialized variable. [RT #1908]
778a01b1aa76273d4a28c7559a509edc7a00ec95Mark Andrews1055. [func] Version and hostname queries can now be disabled
778a01b1aa76273d4a28c7559a509edc7a00ec95Mark Andrews using "version none;" and "hostname none;",
778a01b1aa76273d4a28c7559a509edc7a00ec95Mark Andrews respectively.
44f175a90a855326725439b2f1178f0dcca8f67dMark Andrews1054. [bug] On Win32, cfg_categories and cfg_modules need to be
21991bd14e8b59000dfc2acf2ce614596cf28cbaMark Andrews exported from the libisccfg DLL.
21991bd14e8b59000dfc2acf2ce614596cf28cbaMark Andrews1053. [bug] Dig did not increase its timeout when receiving
b335299322e50f045f10e4636262cd2f8d407a8bMark Andrews AXFRs unless the +time option was used. [RT #1904]
b335299322e50f045f10e4636262cd2f8d407a8bMark Andrews1052. [bug] Journals were not being created in binary mode
ff5c52617eecd06161344c99987a866691592e4aMark Andrews resulting in "journal format not recognized" error
e12030c433a08b9e9678717ec5e8092c9e4da72cMark Andrews under Win32. [RT #1889]
e18c62b1dab6bf82530a94c00e2320e542f40c3fMark Andrews1051. [bug] Do not ignore a network interface completely just
e18c62b1dab6bf82530a94c00e2320e542f40c3fMark Andrews because it has a noncontiguous netmask. Instead,
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews omit it from the localnets ACL and issue a warning.
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews1050. [bug] Log messages reporting malformed IP addresses in
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews address lists such as that of the forwarders option
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews failed to include the correct error code, file
8b7d3aeda264513ca83961fb752703cc3c85451dMark Andrews name, and line number. [RT #1890]
8b7d3aeda264513ca83961fb752703cc3c85451dMark Andrews1049. [func] "pid-file none;" will disable writing a pid file.
f083a44415365f6464f8bd35f439dc13ee0b684fMark Andrews1048. [bug] Servers built with -DISC_MEM_USE_INTERNAL_MALLOC=1
108300f7f14315b7fa72a04f009dcb4d0839f207Mark Andrews didn't work.
108300f7f14315b7fa72a04f009dcb4d0839f207Mark Andrews1047. [bug] named was incorrectly refusing all requests signed
2fca4a3321c0137a0bcaa4692564b249ae26322eMark Andrews with a TSIG key derived from an unsigned TKEY
2fca4a3321c0137a0bcaa4692564b249ae26322eMark Andrews negotiation with a NOERROR response. [RT #1886]
121f783b6660f2cb49829bdc51eb522fd327437eMark Andrews1046. [bug] The help message for the --with-openssl configure
121f783b6660f2cb49829bdc51eb522fd327437eMark Andrews option was inaccurate. [RT #1880]
707d9fbd86a15a7112936473a31191dc09ca642cMark Andrews1045. [bug] It was possible to skip saving glue for a nameserver
707d9fbd86a15a7112936473a31191dc09ca642cMark Andrews for a stub zone.
bb9298e0088e8a636ea59f5b435f7c5b536c8017Mark Andrews1044. [bug] Specifying allow-transfer, notify-source, or
bb9298e0088e8a636ea59f5b435f7c5b536c8017Mark Andrews notify-source-v6 in a stub zone was not treated
bb9298e0088e8a636ea59f5b435f7c5b536c8017Mark Andrews as an error.
1df2b7edfecd7cb7edc08ae9ec43d008cfbe7d34Mark Andrews1043. [bug] Specifying a transfer-source or transfer-source-v6
1df2b7edfecd7cb7edc08ae9ec43d008cfbe7d34Mark Andrews option in the zone statement for a master zone was
fd95cc0da9563aa85ac67462433b6a2b6ac0db9fMark Andrews not treated as an error. [RT #1876]
fd95cc0da9563aa85ac67462433b6a2b6ac0db9fMark Andrews1042. [bug] The "config" logging category did not work properly.
bb6d33103e672d21429ae1837ce10d91f2419800Mark Andrews1041. [bug] Dig/host/nslookup could catch an assertion failure
cc6d67469cf390842adf1bd35dd2b21fc3b7df18Mark Andrews on SIGINT due to an uninitialized variable. [RT #1867]
cc6d67469cf390842adf1bd35dd2b21fc3b7df18Mark Andrews1040. [bug] Multiple listen-on-v6 options with different ports
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews were not accepted. [RT #1875]
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews1039. [bug] Negative responses with CNAMEs in the answer section
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews were cached incorrectly. [RT #1862]
c45d848e2a5898975a14a6311a406f45028a45b0Tatuya JINMEI 神明達哉1038. [bug] In servers configured with a tkey-domain option,
c45d848e2a5898975a14a6311a406f45028a45b0Tatuya JINMEI 神明達哉 TKEY queries with an owner name other than the root
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier could cause an assertion failure. [RT #1866, #1869]
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier1037. [bug] Negative responses whose authority section contain
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier SOA or NS records whose owner names are not equal
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉 equal to or parents of the query name should be
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉 rejected. [RT #1862]
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉1036. [func] Silently drop requests received via multicast as
c6217b2899ea2bca7f5870ea5dbb3e46fbb72391Mark Andrews long as there is no final multicast DNS standard.
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews1035. [bug] If we respond to multicast queries (which we
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews currently do not), respond from a unicast address
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews as specified in RFC 1123. [RT #137]
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews1034. [bug] Ignore the RD bit on multicast queries as specified
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews in RFC 1123. [RT #137]
a80d26914afece7324158918e8d74c7c8384a0dfMark Andrews1033. [bug] Always respond to requests with an unsupported opcode
a80d26914afece7324158918e8d74c7c8384a0dfMark Andrews with NOTIMP, even if we don't have a matching view
a80d26914afece7324158918e8d74c7c8384a0dfMark Andrews or cannot determine the class.
c19f322914f380404b613fbb31f5ac2582098f9dMark Andrews1032. [func] hostname.bind/txt/chaos now returns the name of
c19f322914f380404b613fbb31f5ac2582098f9dMark Andrews the machine hosting the nameserver. This is useful
ff9301990d83dedca3806a16b4c9693f16d6e8b1Mark Andrews in diagnosing problems with anycast servers.
fa2cb8d61d8699709b9fc14ed4f47bb63507b2a5Mark Andrews1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
08fb52ec8c3923e501c7f8d74c524cced52551f9Mark Andrews1030. [bug] On systems with no resolv.conf file, nsupdate
08fb52ec8c3923e501c7f8d74c524cced52551f9Mark Andrews exited with an error rather than defaulting
08fb52ec8c3923e501c7f8d74c524cced52551f9Mark Andrews to using the loopback address. [RT #1836]
64c43af4f464b4ead99c3d2a561f0013fd26308cMark Andrews1029. [bug] Some named.conf errors did not cause the loading
64c43af4f464b4ead99c3d2a561f0013fd26308cMark Andrews of the configuration file to return a failure
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews status even though they were logged. [RT #1847]
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews1028. [bug] On Win32, dig/host/nslookup looked for resolv.conf
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews in the wrong directory. [RT #1833]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews1027. [bug] RRs having the reserved type 0 should be rejected.
637a4234fab5dacacfa0d4fb8b41290b634b252fMark Andrews1026. [placeholder]
b1003ace6f6e15ffa212c7982c80845f549e6cefMark Andrews1025. [bug] Don't use multicast addresses to resolve iterative
637a4234fab5dacacfa0d4fb8b41290b634b252fMark Andrews queries. [RT #101]
92348098ebe7ef4c26bfe2204a7364fa18735afcMark Andrews1024. [port] Compilation failed on HP-UX 11.11 due to
637a4234fab5dacacfa0d4fb8b41290b634b252fMark Andrews incompatible use of the SIOCGLIFCONF macro
d1a5fdc34a3d7caabead7bbf0cbf6fa7d89f0910Mark Andrews name. [RT #1831]
5e95cf76e46d93d6b6c2e3cd1aca4c1ab33f827eMark Andrews1023. [func] Accept hints without TTLs.
2e20dea9fc0a84217c7debdef8b4b6c6f04d3998Mark Andrews1022. [bug] Don't report empty root hints as "extra data".
13396661f46572d7b94703a25721aad040fbd91aMark Andrews1021. [bug] On Win32, log message timestamps were one month
64f8608ed6b7f42a4a7d358fade2c82dfd1e9c01Mark Andrews later than they should have been, and the server
64f8608ed6b7f42a4a7d358fade2c82dfd1e9c01Mark Andrews would exhibit unspecified behavior in December.
0cae66577c69c89086cd065bb297690072b471b4Mark Andrews1020. [bug] IXFR log messages did not distinguish between
d3cbd6b05c16c6e0e86c1651bda3b3ee06574d62Mark Andrews true IXFRs, AXFR-style IXFRs, and mere version
d3cbd6b05c16c6e0e86c1651bda3b3ee06574d62Mark Andrews polls. [RT #1811]
139cedabf9242add24d8326e216e451dd2d5a935Tatuya JINMEI 神明達哉1019. [bug] The value of the lame-ttl option was limited to 18000
3a28f0dc73549d8c59ad18898540892c7eed957bTatuya JINMEI 神明達哉 seconds, not 1800 seconds as documented. [RT #1803]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews1018. [bug] The default log channel was not always initialized
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews correctly. [RT #1813]
0b24b2d3c423560a0a4cd9a4476b9a2dcafb7ea3Evan Hunt1017. [bug] When specifying TSIG keys to dig and nsupdate using
0b24b2d3c423560a0a4cd9a4476b9a2dcafb7ea3Evan Hunt the -k option, they must be HMAC-MD5 keys. [RT #1810]
dcfca6f18d5069155ae50025aaeead0cc8c04730Evan Hunt1016. [bug] Slave zones with no backup file were re-transferred
dcfca6f18d5069155ae50025aaeead0cc8c04730Evan Hunt on every server reload.
ebaf977ecfe6b26ba4482e00d1fd78914a1e17ebMark Andrews1015. [bug] Log channels that had a "versions" option but no
ebaf977ecfe6b26ba4482e00d1fd78914a1e17ebMark Andrews "size" option failed to create numbered log
140cf92b3bbff9da00a782c8afe27f5fa63bd7f7Evan Hunt files. [RT #1783]
fd3a3783538312dc8f61a85ce4d3720f43b912c0Mark Andrews1014. [bug] Some queries would cause statistics counters to
fd3a3783538312dc8f61a85ce4d3720f43b912c0Mark Andrews increment more than once or not at all. [RT #1321]
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont1013. [bug] It was possible to cancel a query twice when marking
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt a server as bogus or by having a blackhole acl.
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt1012. [bug] The -p option to named did not behave as documented.
ce0a4906ad27a8743e4f59e8ea06433640d78e54Mark Andrews1011. [cleanup] Removed isc_dir_current().
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt1010. [bug] The server could attempt to execute a command channel
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont command after initiating server shutdown, causing
e11a0c114cdaf8f7e7832e9f1a011138248093a6Evan Hunt an assertion failure. [RT #1766]
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont1009. [port] OpenUNIX 8 support. [RT #1728]
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont1008. [port] libtool.m4, ltmain.sh from libtool-1.4.2.
6ff7cd9fa57e8f8092c08df8f9ceccbffb6b19c9Francis Dupont1007. [port] config.guess, config.sub from autoconf-2.52.
f77148e02902a96bddd5948e594bd4be2efe67ffFrancis Dupont1006. [bug] If a KEY RR was found missing during DNSSEC validation,
f77148e02902a96bddd5948e594bd4be2efe67ffFrancis Dupont an assertion failure could subsequently be triggered
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont in the resolver. [RT #1763]
a91029a00e83e3933046cc9354357bccaa66c272Francis Dupont1005. [bug] Don't copy nonzero RCODEs from request to response.
05b1ab91a62c09b052cdd9641355671997430d15Evan Hunt1004. [port] Deal with recvfrom() returning EHOSTDOWN. [RT #1770]
05b1ab91a62c09b052cdd9641355671997430d15Evan Hunt1003. [func] Add the +retry option to dig.
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt1002. [bug] When reporting an unknown class name in named.conf,
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt including the file name and line number. [RT #1759]
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt1001. [bug] win32 socket code doio_recv was not catching a
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt WSACONNRESET error when a client was timing out
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt the request and closing its socket. [RT #1745]
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt1000. [bug] BIND 8 compatibility: accept "HESIOD" as an alias
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt for class "HS". [RT #1759]
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt 999. [func] "rndc retransfer zone [class [view]]" added.
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt 998. [func] named-checkzone now has arguments to specify the
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt chroot directory (-t) and working directory (-w).
8ebf67b7f0aeea7ef8c6e034c57a1dc57a7b216aEvan Hunt 997. [func] Add support for RSA-SHA1 keys (RFC3110).
7c25b5f311a5a97ba3e9323956507f551c9b3b53Shawn Routhier 996. [func] Issue warning if the configuration filename contains
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews the chroot path.
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt 995. [bug] dig, host, nslookup: using a raw IPv6 address as a
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt target address should be fatal on a IPv4 only system.
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt 994. [func] Treat non-authoritative responses to queries for type
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt NS as referrals even if the NS records are in the
d3a6cd7c7e13707d0c26e1af0e026dd6c22c5e99Evan Hunt answer section, because BIND 8 servers incorrectly
d3a6cd7c7e13707d0c26e1af0e026dd6c22c5e99Evan Hunt send them that way. This is necessary for DNSSEC
d3a6cd7c7e13707d0c26e1af0e026dd6c22c5e99Evan Hunt validation of the NS records of a secure zone to
845bb3195a4f50d438ec0fcd5d79593010314319Evan Hunt succeed when the parent is a BIND 8 server. [RT #1706]
845bb3195a4f50d438ec0fcd5d79593010314319Evan Hunt 993. [func] dig: -v now reports the version.
d8680445d6212d5552ea8a22fd2f9951b11c4b10Tatuya JINMEI 神明達哉 992. [doc] dig: ~/.digrc is now documented.
9ead684875ab0ab5fdb8b5dd837a88f7dbd0e01dEvan Hunt 991. [func] Lower UDP refresh timeout messages to level
687b6322fb189c41c3672226a59461cc5c24c087Evan Hunt 990. [bug] The rndc-confgen man page was not installed.
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews 989. [bug] Report filename if $INCLUDE fails for file related
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews errors. [RT #1736]
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews 988. [bug] 'additional-from-auth no;' did not work reliably
5b77627c09dea9a65a70d2a0b95a22ff75b3ac04Mark Andrews in the case of queries answered from the cache.
288486df9df0c5a39b3c3d625c7f133d9a8e69fbMark Andrews 987. [bug] "dig -help" didn't show "+[no]stats".
5773d3c007c0c065f83480aa17e61bea728221f9Mark Andrews 986. [bug] "dig +noall" failed to clear stats and command
85c5ed3577655f4f710f0af5ee93edd71c336055Evan Hunt 985. [func] Consider network interfaces to be up iff they have
85c5ed3577655f4f710f0af5ee93edd71c336055Evan Hunt a nonzero IP address rather than based on the
85c5ed3577655f4f710f0af5ee93edd71c336055Evan Hunt IFF_UP flag. [RT #1160]
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont 984. [bug] Multi-threading should be enabled by default on
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont Solaris 2.7 and newer, but it wasn't.
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont 983. [func] The server now supports generating IXFR difference
bd31f734eec1884bd14024a232eb3ad3b0b86489Evan Hunt sequences for non-dynamic zones by comparing zone
bd31f734eec1884bd14024a232eb3ad3b0b86489Evan Hunt versions, when enabled using the new config
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews option "ixfr-from-differences". [RT #1727]
1361014b02f11cf8de8725d1770a3dccbc1c8975Evan Hunt 982. [func] If "memstatistics-file" is set in options the memory
ce0a4906ad27a8743e4f59e8ea06433640d78e54Mark Andrews statistics will be written to it.
40ad4ed01be1cace49a62214d11ef1309b3029a0Evan Hunt 981. [func] The dnssec tools can now take multiple '-r randomfile'
b09559fd36c5081ffaf58ab64bdef170c1a720f1Evan Hunt 980. [bug] Incoming zone transfers restarting after an error
aa3415ba49c7f322845ee3dd59c2d0159f37bb34Evan Hunt could trigger an assertion failure. [RT #1692]
aa3415ba49c7f322845ee3dd59c2d0159f37bb34Evan Hunt 979. [func] Incremental master file dumping. dns_master_dumpinc(),
c9630524c7560b27784fca6e456e652ff41ae7f1Mark Andrews dns_master_dumptostreaminc(), dns_dumpctx_attach(),
c9630524c7560b27784fca6e456e652ff41ae7f1Mark Andrews dns_dumpctx_detach(), dns_dumpctx_cancel(),
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews dns_dumpctx_db() and dns_dumpctx_version().
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt 978. [bug] dns_db_attachversion() had an invalid REQUIRE()
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews 977. [bug] Improve "not at top of zone" error message.
0da859c5a7f17298577616577197cc6c857e4579Evan Hunt 976. [func] named-checkconf can now test load master zones
0da859c5a7f17298577616577197cc6c857e4579Evan Hunt (named-checkconf -z). [RT #1468]
19a6c40c37cd22a07b29542a5cc5c8986c1fbf57Evan Hunt 975. [bug] "max-cache-size default;" as a view option
19a6c40c37cd22a07b29542a5cc5c8986c1fbf57Evan Hunt caused an assertion failure.
9de98fbbbee124bbb8d609669cfaff17ec7a36e0Evan Hunt 974. [bug] "max-cache-size unlimited;" as a global option
9de98fbbbee124bbb8d609669cfaff17ec7a36e0Evan Hunt was not accepted.
28f4cd0a4503b91d7a48ed4d157347b251ae5686Mark Andrews 973. [bug] Failed to log the question name when logging:
c221360e9f511be38c1385b9a647ebd7dceb8b42Mark Andrews "bad zone transfer request: non-authoritative zone
bc04d6ec155564b7f0c0171ac88e9e5918366c9dEvan Hunt 972. [bug] The file modification time code in zone.c was using the
bc04d6ec155564b7f0c0171ac88e9e5918366c9dEvan Hunt wrong epoch. [RT #1667]
16de5dbc7178b7fe8a9d4beb9ff50778cc8d3847Evan Hunt 971. [placeholder]
b8b602f89be848d44472df92320e9d88213a1411Evan Hunt 970. [func] 'max-journal-size' can now be used to set a target
b8b602f89be848d44472df92320e9d88213a1411Evan Hunt size for a journal.
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt 969. [func] dig now supports the undocumented dig 8 feature
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt of allowing arbitrary labels, not just dotted
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt decimal quads, with the -x option. This can be
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt used to conveniently look up RFC2317 names as in
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt "dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt 968. [bug] On win32, the isc_time_now() function was unnecessarily
71ba75c604df3604673232828a68bb28c420e698Mark Andrews calling strtime(). [RT #1671]
71ba75c604df3604673232828a68bb28c420e698Mark Andrews 967. [bug] On win32, the link for bindevt was not including the
71ba75c604df3604673232828a68bb28c420e698Mark Andrews required resource file to enable the event viewer
71ba75c604df3604673232828a68bb28c420e698Mark Andrews to interpret the error messages in the event log,
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews 966. [placeholder]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews 965. [bug] Including data other than root server NS and A
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews records in the root hint file could cause a rbtdb
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews node reference leak. [RT #1581, #1618]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews 964. [func] Warn if data other than root server NS and A records
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews are found in the root hint file. [RT #1581, #1618]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews 963. [bug] Bad ISC_LANG_ENDDECLS. [RT #1645]
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews 962. [bug] libbind: bad "#undef", don't attempt to install
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews non-existent nlist.h. [RT #1640]
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews 961. [bug] Tried to use a IPV6 feature when ISC_PLATFORM_HAVEIPV6
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt was not defined. [RT #1482]
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt 960. [port] liblwres failed to build on systems with support for
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt getrrsetbyname() in the OS. [RT #1592]
e6dda86e8b18ca24db86bd6cd986fdcbfda3f06aEvan Hunt 959. [port] On FreeBSD, determine the number of CPUs by calling
e6dda86e8b18ca24db86bd6cd986fdcbfda3f06aEvan Hunt sysctlbyname(). [RT #1584]
2a0d4c4d6ba5addb33cd1bccecc55ca4a095f191Mark Andrews 958. [port] ssize_t is not available on all platforms. [RT #1607]
d524a81532c87c7fa8d0ce0261645fb18276b1eeMark Andrews 957. [bug] sys/select.h inclusion was broken on older platforms.
feeca57f18fe7ae1825bef81a210068d4ddaf4eeEvan Hunt 956. [bug] ns_g_autorndcfile changed to ns_g_keyfile
feeca57f18fe7ae1825bef81a210068d4ddaf4eeEvan Hunt in named/win32/os.c due to code changes in
feeca57f18fe7ae1825bef81a210068d4ddaf4eeEvan Hunt change #953. win32 .make file for rndc-confgen
8b37c0dd6e1cf3f8849f4f28b77b43ab3fb20ea4Mark Andrews updated to add include path for os.h header.
c073c65719eb5a7a525176d9a62e1b58a11ecab7Evan Hunt --- 9.2.0rc1 released ---
c073c65719eb5a7a525176d9a62e1b58a11ecab7Evan Hunt 955. [bug] When using views, the zone's class was not being
c073c65719eb5a7a525176d9a62e1b58a11ecab7Evan Hunt inherited from the view's class. [RT #1583]
5d9922e86f3d7f58f4c6b1234962ee4567108830Vernon Schryver 954. [bug] When requesting AXFRs or IXFRs using dig, host, or
c4e3976707829c3225983b80afb09215e49ea10dMark Andrews nslookup, the RD bit should not be set as zone
c4e3976707829c3225983b80afb09215e49ea10dMark Andrews transfers are inherently non-recursive. [RT #1575]
88a7702a9dc82581c554cc0b04902879cdda41a6Mark Andrews 953. [func] The /var/run/named.key file from change #843
66ecb6789b7effa68f75dc70f0843a26825b44f6Mark Andrews has been replaced by /etc/rndc.key. Both
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews named and rndc will look for this file and use
cfc22e53a89ccac4eb04b4f41a93f73e629e80edEvan Hunt it to configure a default control channel key
ce3b2c5189e874f1c45d699cfb4f30fc7a8cd604Evan Hunt if not already configured using a different
ce3b2c5189e874f1c45d699cfb4f30fc7a8cd604Evan Hunt method (rndc.conf / controls). Unlike
fc1fb1a469dc44fb12bbe51ead6caf568239d5abEvan Hunt it must be created by manually running
fc1fb1a469dc44fb12bbe51ead6caf568239d5abEvan Hunt "rndc-confgen -a".
d0ca4e90e2dd584db70e403ef92ab08d78d9cd6dMark Andrews 952. [bug] The server required manual intervention to serve the
d0ca4e90e2dd584db70e403ef92ab08d78d9cd6dMark Andrews affected zones if it died between creating a journal
d312bc5d81cff8fc156b62c970334b52227ee854Evan Hunt and committing the first change to it.
d312bc5d81cff8fc156b62c970334b52227ee854Evan Hunt 951. [bug] CFLAGS was not passed to the linker when
d312bc5d81cff8fc156b62c970334b52227ee854Evan Hunt linking some of the test programs under
9dd2ee95f11de29e358cc01059861e724dbb5807Mark Andrews 950. [bug] Explicit TTLs did not properly override $TTL
dc9270706619976c47236892c655ba76671c37f1Mark Andrews due to a bug in change 834. [RT #1558]
dc9270706619976c47236892c655ba76671c37f1Mark Andrews 949. [bug] host was unable to print records larger than 512
503e5aa8d2400e47c9617db10b57f2d4f3495fd2Mark Andrews bytes. [RT #1557]
503e5aa8d2400e47c9617db10b57f2d4f3495fd2Mark Andrews --- 9.2.0b2 released ---
5985af3f5ca3bd3aecd177c7eab497e7414c3945Evan Hunt 948. [port] Integrated support for building on Windows NT /
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt Windows 2000.
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt 947. [bug] dns_rdata_soa_t had a badly named element "mname" which
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews was really the RNAME field from RFC1035. To avoid
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt confusion and silent errors that would occur it the
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt "origin" and "mname" elements were given their correct
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt names "mname" and "rname" respectively, the "mname"
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt element is renamed to "contact".
289dbe005c271d344296cad043157fee6604bdb0Mark Andrews 946. [cleanup] doc/misc/options is now machine-generated from the
c16d37d06e103b259073a61e610e688e2849289aMark Andrews configuration parser syntax tables, and therefore
c16d37d06e103b259073a61e610e688e2849289aMark Andrews more likely to be correct.
1cd538c05181b7236e4a2d159a99997dcfa1cb5cFrancis Dupont 945. [func] Add the new view-specific options
1cd538c05181b7236e4a2d159a99997dcfa1cb5cFrancis Dupont "match-destinations" and "match-recursive-only".
0088b45de515b891622e7e81dee9602291231c10Evan Hunt 944. [func] Check for expired signatures on load.
b08325a7f3092cca1131e1a04a43a4ecef713e29Evan Hunt 943. [bug] The server could crash when receiving a command
b08325a7f3092cca1131e1a04a43a4ecef713e29Evan Hunt via rndc if the configuration file listed only
b08325a7f3092cca1131e1a04a43a4ecef713e29Evan Hunt nonexistent keys in the controls statement. [RT #1530]
a39a5f4d816ca7d3f43106712ca668dd1ab31d69Mark Andrews 942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly
a39a5f4d816ca7d3f43106712ca668dd1ab31d69Mark Andrews defined on some platforms.
7ee4b13ded769df52e8c66b3dfa1de968df7bd28Evan Hunt 941. [bug] The configuration checker crashed if a slave
7ee4b13ded769df52e8c66b3dfa1de968df7bd28Evan Hunt zone didn't contain a masters statement. [RT #1514]
44a3999cf4f71bd81a7942ff5e60c6b1828e5f9dEvan Hunt 940. [bug] Double zone locking failure on error path. [RT #1510]
44a3999cf4f71bd81a7942ff5e60c6b1828e5f9dEvan Hunt --- 9.2.0b1 released ---
7048af0a551f13d2916a06cce21357714939a89bEvan Hunt 939. [port] Add the --disable-linux-caps option to configure for
00295e065080e0b9856d00b15976d1ed5d280cbfEvan Hunt systems that manage capabilities outside of named.
e856482b1fe1c554a8e47a519b59902b21792564Evan Hunt 938. [placeholder]
e856482b1fe1c554a8e47a519b59902b21792564Evan Hunt 937. [bug] A race when shutting down a zone could trigger a
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt INSIST() failure. [RT #1034]
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt 936. [func] Warn about IPv4 addresses that are not complete
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt dotted quads. [RT #1084]
1d0ebb4cf21324b28215c5df84cce0f84dd6948bMark Andrews 935. [bug] inet_pton failed to reject leading zeros.
adb42115869b8258cd38bc7fd044766f662bdd78Mark Andrews 934. [port] Deal with systems where accept() spuriously returns
e9dff04d3bd9b7b247cad0f914ed80914a49bcccEvan Hunt 933. [bug] configure failed doing libbind on platforms not
0c3948e6066e8910edb3f6a7820bd42ffaefedf6Evan Hunt supported by BIND 8. [RT #1496]
0c3948e6066e8910edb3f6a7820bd42ffaefedf6Evan Hunt --- 9.2.0a3 released ---
2c016c64f533171e1342c1914754b017026c8ad5Tatuya JINMEI 神明達哉 932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt when installing isc-config.sh.
2c016c64f533171e1342c1914754b017026c8ad5Tatuya JINMEI 神明達哉 [RT #198, #1466]
38397492000c996d50f9bf96a4da318a742bd07cEvan Hunt 931. [bug] The controls statement only attempted to verify
9d5e42bb875bc287387241dd7563f5698afd31f6Mark Andrews messages using the first key in the key list.
f82d52e82defd947805f0882f1559e88d830922aEvan Hunt (9.2.0a1/a2 only).
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt 930. [func] Query performance testing tool added as
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt 929. [placeholder]
7fe4b0447fb3ef0c8ff9851624a7bca072732973Evan Hunt 928. [bug] nsupdate would send empty update packets if the
7fe4b0447fb3ef0c8ff9851624a7bca072732973Evan Hunt send (or empty line) command was run after
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt another send but before any new updates or
e2facd7af296d90d0d1fef7994b6b8e795490a92Evan Hunt prerequisites were specified. It should simply
3594635af7c6fedb2893ad1a9df4935bd0234a47Evan Hunt ignore this command.
cc3ed192b030ccf9a903a4a7c8667cda8ad23eebEvan Hunt 927. [bug] Don't hold the zone lock for the entire dump to disk.
c1bfa5b0ad6a031b0a3038207938897128a241b4Evan Hunt 926. [bug] The resolver could deadlock with the ADB when
b99efc39de7711d483f62f42bf6c365843637238Mark Andrews shutting down (multi-threaded builds only).
302ed789bd97f34500ee4ba3a8329590d6453fc6Mark Andrews 925. [cleanup] Remove openssl from the distribution; require that
6f6f08b7a4ea50806099b23ca97010195c1365cdEvan Hunt --with-openssl be specified if DNSSEC is needed.
9a050780dce1bf3cbe81bd18404df3e79c146583Evan Hunt 924. [port] Extend support for pre-RFC2133 IPv6 implementation.
e94fe42a2007a4ffdd27ba99d3756622f8da1008Mark Andrews 923. [bug] Multiline TSIG secrets (and other multiline strings)
e94fe42a2007a4ffdd27ba99d3756622f8da1008Mark Andrews were not accepted in named.conf. [RT #1469]
0a30185f80f3962aba0e1f30ad7743fb8c8aa65dMark Andrews 922. [func] Added two new lwres_getrrsetbyname() result codes,
0a30185f80f3962aba0e1f30ad7743fb8c8aa65dMark Andrews ERR_NONAME and ERR_NODATA.
0181a0a92f0d3a9ec7f04754253bb6bd47307e6fMark Andrews 921. [bug] lwres returned an incorrect error code if it received
0181a0a92f0d3a9ec7f04754253bb6bd47307e6fMark Andrews a truncated message.
a3285e811de7204f1d4d296c7f16082fc58e1b7aMark Andrews 920. [func] Increase the lwres receive buffer size to 16K.
4ffd660d41080dc4c5641c9ce4f80b04af611849Tatuya JINMEI 神明達哉 919. [placeholder]
4ffd660d41080dc4c5641c9ce4f80b04af611849Tatuya JINMEI 神明達哉 918. [func] In nsupdate, TSIG errors are no longer treated as
9d856845d63784690e347c8e8dc013f1c830c86dMark Andrews fatal errors.
90065a6881d58420120ae33aac55e5ff10f65fd5Mark Andrews 917. [func] New nsupdate command 'key', allowing TSIG keys to
554d22d2deb8889bb16434176b5716ab79d15c50Mark Andrews be specified in the nsupdate command stream rather
554d22d2deb8889bb16434176b5716ab79d15c50Mark Andrews than the command line.
da1f044e5d5e15846a9464647ebdd0e9cee3f63aEvan Hunt 916. [bug] Specifying type ixfr to dig without specifying
be69d484434e10d920c4d8a8bb735356eb0c2cc8Evan Hunt a serial number failed in unexpected ways.
be69d484434e10d920c4d8a8bb735356eb0c2cc8Evan Hunt 915. [func] The named-checkconf and named-checkzone programs
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews now have a '-v' option for printing their version.
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews 914. [bug] Global 'server' statements were rejected when
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews using views, even though they were accepted
5cb44a38d9b6fbd1144cf396a199db54e9e56f5bEvan Hunt in 9.1. [RT #1368]
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt 913. [bug] Cache cleaning was not sufficiently aggressive.
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt [RT #1441, #1444]
e09cdbac087b88524ac40e943d040e2a032c48f2Mark Andrews 912. [bug] Attempts to set the 'additional-from-cache' or
e09cdbac087b88524ac40e943d040e2a032c48f2Mark Andrews 'additional-from-auth' option to 'no' in a
e09cdbac087b88524ac40e943d040e2a032c48f2Mark Andrews server with recursion enabled will now
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews be ignored and cause a warning message.
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews 911. [placeholder]
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews 910. [port] Some pre-RFC2133 IPv6 implementations do not define
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews IN6ADDR_ANY_INIT. [RT #1416]
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt 909. [placeholder]
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt 908. [func] New program, rndc-confgen, to simplify setting up rndc.
af30180834ac4b3b206338be5c42e89bab07ca27Mark Andrews 907. [func] The ability to get entropy from either the
af30180834ac4b3b206338be5c42e89bab07ca27Mark Andrews random device, a user-provided file or from
6f9c93a8858a28b131dbd36b75b81e9250c6d11aEvan Hunt the keyboard was migrated from the DNSSEC tools
6f9c93a8858a28b131dbd36b75b81e9250c6d11aEvan Hunt to libisc as isc_entropy_usebestsource().
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt 906. [port] Separated the system independent portion of
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt 905. [bug] Configuring a forward "zone" for the root domain
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt did not work. [RT #1418]
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt 904. [bug] The server would leak memory if attempting to use
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt an expired TSIG key. [RT #1406]
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt 903. [bug] dig should not crash when receiving a TCP packet
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont 902. [bug] The -d option was ignored if both -t and -g were also
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont 901. [placeholder]
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews 900. [bug] A config.guess update changed the system identification
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews string of FreeBSD systems; configure and
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews bin/tests/system/ifconfig.sh now recognize the new
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt --- 9.2.0a2 released ---
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt 899. [bug] lib/dns/soa.c failed to compile on many platforms
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt due to inappropriate use of a void value.
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt [RT #1372, #1373, #1386, #1387, #1395]
cc6cddfd94e8f0c58c290317b0853dac30b1b895Evan Hunt 898. [bug] "dig" failed to set a nonzero exit status
cc6cddfd94e8f0c58c290317b0853dac30b1b895Evan Hunt on UDP query timeout. [RT #1323]
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt 897. [bug] A config.guess update changed the system identification
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt string of UnixWare systems; configure now recognizes
d2a8d00228973e59eb3efcc377126d856bf7df18Mark Andrews the new string.
d2a8d00228973e59eb3efcc377126d856bf7df18Mark Andrews 896. [bug] If a configuration file is set on named's command line
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt and it has a relative pathname, the current directory
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt (after any possible jailing resulting from named -t)
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt will be prepended to it so that reloading works
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt properly even when a directory option is present.
7704a47aec081144bdb7a0218d5e2dd5296b6b08Mark Andrews 895. [func] New function, isc_dir_current(), akin to POSIX's
a01095a487a2c858c4f86e0f32c93b482d179a78Mark Andrews 894. [bug] When using the DNSSEC tools, a message intended to warn
a01095a487a2c858c4f86e0f32c93b482d179a78Mark Andrews when the keyboard was being used because of the lack
a01095a487a2c858c4f86e0f32c93b482d179a78Mark Andrews of a suitable random device was not being printed.
bfbd69c43f2b63ac122e4a47a510d46ffffb613cEvan Hunt 893. [func] Removed isc_file_test() and added isc_file_exists()
bfbd69c43f2b63ac122e4a47a510d46ffffb613cEvan Hunt for the basic functionality that was being added
06e7340198bbd89b6765998a04abde217e7b0e7bMark Andrews with isc_file_test().
06e7340198bbd89b6765998a04abde217e7b0e7bMark Andrews 892. [placeholder]
3c5e54941fe8ed891d1588e84e210d8829b9903aMark Andrews 891. [bug] Return an error when a SIG(0) signed response to
3c5e54941fe8ed891d1588e84e210d8829b9903aMark Andrews an unsigned query is seen. This should actually
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews do the verification, but it's not currently
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews possible. [RT #1391]
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews 890. [cleanup] The man pages no longer require the mandoc macros
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews and should now format cleanly using most versions of
4b30598fb908755c4fd04f51cf3ce1f550434bf3Mark Andrews nroff, and HTML versions of the man pages have been
4b30598fb908755c4fd04f51cf3ce1f550434bf3Mark Andrews added. Both are generated from DocBook source.
abe20c2cca12abe0523fc314af31183626c87325Evan Hunt 889. [port] Eliminated blank lines before .TH in nroff man
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews pages since they cause problems with some versions
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews of nroff. [RT #1390]
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews 888. [bug] Don't die when using TKEY to delete a nonexistent
616560e3db487f548b383c7eecc6e855e8afe7d6Mark Andrews TSIG key. [RT #1392]
cbee6197d1fb31453ff51f9f1c705feed67c9c73Mark Andrews 887. [port] Detect broken compilers that can't call static
cbee6197d1fb31453ff51f9f1c705feed67c9c73Mark Andrews functions from inline functions. [RT #1212]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt 886. [placeholder]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt 885. [placeholder]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt 884. [placeholder]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt 883. [placeholder]
9d5e42bb875bc287387241dd7563f5698afd31f6Mark Andrews 882. [placeholder]
6a90baa0d5ac5ad6bf5a5e29b6e8b26a931e844eEvan Hunt 881. [placeholder]
3727725bb7d63605b68a644060857013d563b67fEvan Hunt 880. [placeholder]
3727725bb7d63605b68a644060857013d563b67fEvan Hunt 879. [placeholder]
3727725bb7d63605b68a644060857013d563b67fEvan Hunt 878. [placeholder]
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt 877. [placeholder]
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt 876. [placeholder]
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt 875. [placeholder]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews 874. [placeholder]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews 873. [placeholder]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews 872. [placeholder]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews 871. [placeholder]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews 870. [placeholder]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews 869. [placeholder]
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt 868. [placeholder]
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt 867. [placeholder]
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt 866. [func] Close debug only file channels when debug is set to
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt zero. [RT #1246]
246c504f90f42e5633dfd5e85bd57b01064961feEvan Hunt 865. [bug] The new configuration parser did not allow
246c504f90f42e5633dfd5e85bd57b01064961feEvan Hunt the optional debug level in a "severity debug"
246c504f90f42e5633dfd5e85bd57b01064961feEvan Hunt clause of a logging channel to be omitted.
ff71474ede45c496b303af7be7cd0e2f3403bda6Evan Hunt This is now allowed and treated as "severity
ff71474ede45c496b303af7be7cd0e2f3403bda6Evan Hunt debug 1;" like it does in BIND 8.2.4, not as
3ff75c89eb7b8c4f8c7dd375beec2981d147c791Evan Hunt "severity debug 0;" like it did in BIND 9.1.
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont 864. [cleanup] Multi-threading is now enabled by default on
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont 863. [bug] If an error occurred while an outgoing zone transfer
b56f3f5c6663a40852866cbca469f680f7118e79Francis Dupont was starting up, the server could access a domain
b56f3f5c6663a40852866cbca469f680f7118e79Francis Dupont name that had already been freed when logging a
48b6d2f585d753ac89a11cb5bafb14f239e08430Evan Hunt message saying that the transfer was starting.
1a0eecfe694275dfadccc6074aaa4340845cc85dEvan Hunt 862. [bug] Use after realloc(), non portable pointer arithmetic in
c36ba263d6318740da965f5351fe09e74f1d8aa2Evan Hunt 861. [port] Add support for Mac OS X, by making it equivalent
c36ba263d6318740da965f5351fe09e74f1d8aa2Evan Hunt to Darwin. This was derived from the config.guess
4256ffffb9da267edf7925597714afaacabebf5aEvan Hunt file shipped with Mac OS X. [RT #1355]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 860. [func] Drop cross class glue in zone transfers.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 859. [bug] Cache cleaning now won't swamp the CPU if there
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews is a persistent over limit condition.
eb95d2e917b3f71c33a8be53eac75eb191ee5a9dMark Andrews 858. [func] isc_mem_setwater() no longer requires that when the
eb95d2e917b3f71c33a8be53eac75eb191ee5a9dMark Andrews callback function is non-NULL then its hi_water
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier argument must be greater than its lo_water argument
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier (they can now be equal) or that they be non-zero.
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier 857. [cleanup] Use ISC_MAGIC() to define all magic numbers for
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier structs, for our friends in EBCDIC-land.
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier 856. [func] Allow partial rdatasets to be returned in answer and
4977518a4c906da7c7cf2c5bba2cef2ccd1a409aMark Andrews authority sections to help non-TCP capable clients
a93a66f61872a92ef4a272ca998aaff954ab4fedEvan Hunt recover from truncation. [RT #1301]
4977518a4c906da7c7cf2c5bba2cef2ccd1a409aMark Andrews 855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.
4977518a4c906da7c7cf2c5bba2cef2ccd1a409aMark Andrews 854. [bug] The config parser didn't properly handle config
1e733ffc1103667dd6cf0eae01f5dfd0c84c5108Mark Andrews options that were specified in units of time other
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt than seconds. [RT #1372]
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt 853. [bug] configure_view_acl() failed to detach existing acls.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 852. [bug] Handle responses from servers which do not know
0f869e8d52fec87684c7551dcc0f315a7ed19da1Mark Andrews 851. [cleanup] The obsolete support-ixfr option was not properly
69338455d91b46bef10a2d73beafa05df49ed2d9Mark Andrews --- 9.2.0a1 released ---
b3c8f1e9e864c30d1bb68fdf1ba7eb242c24be6eMark Andrews 850. [bug] dns_rbt_findnode() would not find nodes that were
53c22b8e0da67ca756ca309d5f84db9c189cd0a2Evan Hunt split on a bitstring label somewhere other than in
53c22b8e0da67ca756ca309d5f84db9c189cd0a2Evan Hunt the last label of the node. [RT #1351]
b3c8f1e9e864c30d1bb68fdf1ba7eb242c24be6eMark Andrews 849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
4d0e2cf9b9ffcf5941b347e6bea084a12455e388Mark Andrews 848. [func] A minimum max-cache-size of two megabytes is enforced
484076c3255e0cc5b179ad736cd930900e4bb06bFrancis Dupont by the cache cleaner.
8436cc14ba43418d60da21eee1ed045570edbd58Evan Hunt 847. [func] Added isc_file_test(), which currently only has
8436cc14ba43418d60da21eee1ed045570edbd58Evan Hunt some very basic functionality to test for the
8436cc14ba43418d60da21eee1ed045570edbd58Evan Hunt existence of a file, whether a pathname is absolute,
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews or whether a pathname is the fundamental representation
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews of the current directory. It is intended that this
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews function can be expanded to test other things a
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews programmer might want to know about a file.
2f4d747a267026e6298ba9ece22c9dfa0ac254daFrancis Dupont 846. [func] A non-zero 'param' to dst_key_generate() when making an
2f4d747a267026e6298ba9ece22c9dfa0ac254daFrancis Dupont hmac-md5 key means that good entropy is not required.
c9424f08b013c676ac07173d5b058721ea632875Tatuya JINMEI 神明達哉 845. [bug] The access rights on the public file of a symmetric
790e471f6e97fd4da5dc03dd34824d814a50b9a1Tatuya JINMEI 神明達哉 key are now restricted as soon as the file is opened,
265daffadb5b69702ca355fb500d1f0d8077a983Francis Dupont rather than after it has been written and closed.
d514c0dc9b7f369a94d79c709b77a8f3a08afd84Evan Hunt 844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
d514c0dc9b7f369a94d79c709b77a8f3a08afd84Evan Hunt just as <lwres/net.h> does.
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews 843. [func] If no controls statement is present in named.conf,
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews or if any inet phrase of a controls statement is
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews lacking a keys clause, then a key will be automatically
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt generated by named and an rndc.conf-style file
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt named named.key will be written that uses it. rndc
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt will use this file only if its normal configuration
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt file, or one provided on the command line, does not
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt 842. [func] 'rndc flush' now takes an optional view.
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt 841. [bug] When sdb modules were not declared threadsafe, their
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt create and destroy functions were not serialized.
d514c0dc9b7f369a94d79c709b77a8f3a08afd84Evan Hunt 840. [bug] The config file parser could print the wrong file
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt name if an error was detected after an included file
2fa5af7b736eac0092845c5ccbddf6cc00d0321eTatuya JINMEI 神明達哉 was parsed. [RT #1353]
2fa5af7b736eac0092845c5ccbddf6cc00d0321eTatuya JINMEI 神明達哉 839. [func] Dump packets for which there was no view or that the
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews class could not be determined to category "unmatched".
f267b27f0e1cdc55c7f1ca2a56632ce36907ff63Evan Hunt 838. [port] UnixWare 7.x.x is now suported by
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt 837. [cleanup] Multi-threading is now enabled by default only on
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt OSF1, Solaris 2.7 and newer, and AIX.
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt 836. [func] Upgraded libtool to 1.4.
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt 835. [bug] The dispatcher could enter a busy loop if
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt it got an I/O error receiving on a UDP socket.
14cd8ac04c999fd1d2e620856330e808cae57950Mark Andrews 834. [func] Accept (but warn about) master files beginning with
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont an SOA record without an explicit TTL field and
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont lacking a $TTL directive, by using the SOA MINTTL
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont as a default TTL. This is for backwards compatibility
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont with old versions of BIND 8, which accepted such
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont files without warning although they are illegal
0b8385f5c51def183dbccd1bc569ea8fe092dfb2Mark Andrews according to RFC1035.
0b8385f5c51def183dbccd1bc569ea8fe092dfb2Mark Andrews 833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
bbc204a23719180dce68142ea2440c484e3ccb75Mark Andrews <dns/soa.h>, and extended them to support
bbc204a23719180dce68142ea2440c484e3ccb75Mark Andrews all the integer-valued fields of the SOA RR.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt 832. [bug] The default location for named.conf in named-checkconf
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt should depend on --sysconfdir like it does in named.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt 831. [placeholder]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt 830. [func] Implement 'rndc status'.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt 829. [bug] The DNS_R_ZONECUT result code should only be returned
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt when an ANY query is made with DNS_DBFIND_GLUEOK set.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt In all other ANY query cases, returning the delegation
a27fe4c990f96bd792f2a07ca4d38c78d5b9df2cTatuya JINMEI 神明達哉 828. [bug] The errno value from recvfrom() could be overwritten
44de0b1f7d9997aaf6092589c4c7da4a1df908dbTatuya JINMEI 神明達哉 by logging code. [RT #1293]
44de0b1f7d9997aaf6092589c4c7da4a1df908dbTatuya JINMEI 神明達哉 827. [bug] When an IXFR protocol error occurs, the slave
85be60e3c8e47b9fdfeaa0770f445b206c39bca8Evan Hunt should retry with AXFR.
85be60e3c8e47b9fdfeaa0770f445b206c39bca8Evan Hunt 826. [bug] Some IXFR protocol errors were not detected.
b1f3364f52261c3198b3717530aabc612c5a431aEvan Hunt 825. [bug] zone.c:ns_query() detached from the wrong zone
b1f3364f52261c3198b3717530aabc612c5a431aEvan Hunt reference. [RT #1264]
479b80d4d706be399fd8974e941d9a0edb4259efMark Andrews 824. [bug] Correct line numbers reported by dns_master_load().
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 823. [func] The output of "dig -h" now goes to stdout so that it
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt can easily be piped through "more". [RT #1254]
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt 822. [bug] Sending nxrrset prerequisites would crash nsupdate.
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt 821. [bug] The program name used when logging to syslog should
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 be stripped of leading path components.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 [RT #1178, #1232]
41eeb37b516d1bac073781b6ec50a39a669987dfEvan Hunt 820. [bug] Name server address lookups failed to follow
41eeb37b516d1bac073781b6ec50a39a669987dfEvan Hunt A6 chains into the glue of local authoritative
747abb4993e03b8812514e4476bff67f5248c717Evan Hunt 819. [bug] In certain cases, the resolver's attempts to
747abb4993e03b8812514e4476bff67f5248c717Evan Hunt restart an address lookup at the root could cause
11b4f17027f4cf67d494eb89a8d2ea919dd16615Mark Andrews the fetch to deadlock (with itself) instead of
11b4f17027f4cf67d494eb89a8d2ea919dd16615Mark Andrews restarting. [RT #1225]
7179c3476f676bc8c520583b3ed7a738aa8eeee2Mark Andrews 818. [bug] Certain pathological responses to ANY queries could
7179c3476f676bc8c520583b3ed7a738aa8eeee2Mark Andrews cause an assertion failure. [RT #1218]
7179c3476f676bc8c520583b3ed7a738aa8eeee2Mark Andrews 817. [func] Adjust timeouts for dialup zone queries.
a0ba5a502e0ca8049bff7ef4305948566703ea26Mark Andrews 816. [bug] Report potential problems with log file accessibility
a0ba5a502e0ca8049bff7ef4305948566703ea26Mark Andrews at configuration time, since such problems can't
18114698b4fad77aa0f32741cf815cff0def7696Mark Andrews reliably be reported at the time they actually occur.
18114698b4fad77aa0f32741cf815cff0def7696Mark Andrews 815. [bug] If a log file was specified with a path separator
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews character (i.e. "/") in its name and the directory
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews did not exist, the log file's name was treated as
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews though it were the directory name. [RT #1189]
88471538d69a7c21b8b9fd13b489399ad6c26597Mark Andrews 814. [bug] Socket objects left over from accept() failures
88471538d69a7c21b8b9fd13b489399ad6c26597Mark Andrews were incorrectly destroyed, causing corruption
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt of socket manager data structures.
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt 813. [bug] File descriptors exceeding FD_SETSIZE were handled
813b34ebecba1293ccfb91e52e3c69d5c819073dEvan Hunt badly. [RT #1192]
813b34ebecba1293ccfb91e52e3c69d5c819073dEvan Hunt 812. [bug] dig sometimes printed incomplete IXFR responses
bcd0cbfdae6729c48894501b6bcddc972feda67fMark Andrews due to an uninitialized variable. [RT #1188]
1d9958c6cc291916010779792f0fbdf6cd5ba368Mark Andrews 811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]
8cff1a894f09360814f88437c0c6bce90db11944Mark Andrews 810. [bug] The signer name in SIG records was not properly
8cff1a894f09360814f88437c0c6bce90db11944Mark Andrews down-cased when signing/verifying records. [RT #1186]
048690a34d0fa89bd128ac21d1a4c84b4703a3deMark Andrews 809. [bug] Configuring a non-local address as a transfer-source
048690a34d0fa89bd128ac21d1a4c84b4703a3deMark Andrews could cause an assertion failure during load.
90c1e763d577da656b5eeb02462b5236dca5f266Mark Andrews 808. [func] Add 'rndc flush' to flush the server's cache.
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt 807. [bug] When setting up TCP connections for incoming zone
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt transfers, the transfer-source port was not
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt ignored like it should be.
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt 806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt the calling stack to the zone maintenance level,
6beee732e49fb77e92afd613f8634f828b885560Mark Andrews causing zones to not reload when an included file was
6beee732e49fb77e92afd613f8634f828b885560Mark Andrews touched but the top-level zone file was not.
a3288b425ae88f415d2d8209769d140b5d952fb3Evan Hunt 805. [bug] When using "forward only", missing root hints should
a3288b425ae88f415d2d8209769d140b5d952fb3Evan Hunt not cause queries to fail. [RT #1143]
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt 804. [bug] Attempting to obtain entropy could fail in some
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt situations. This would be most common on systems
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt with user-space threads. [RT #1131]
bd190a40a85e5ed780c9c428c6261bc397059b4bMark Andrews 803. [bug] Treat all SIG queries as if they have the CD bit set,
610f3aa54c026e0506d22a80945bbadfcf0f6c7fMark Andrews otherwise no data will be returned [RT #749]
d173d06cae4995f61970445d8e4216c48fb925cdMark Andrews 802. [bug] DNSSEC key tags were computed incorrectly in almost
ca8576a564a0ff6aa200936f0b5392f62b2ffe02Mark Andrews all cases. [RT #1146]
ca8576a564a0ff6aa200936f0b5392f62b2ffe02Mark Andrews 801. [bug] nsupdate should treat lines beginning with ';' as
520cea04a257e6009d855ddeb20f8d3a46cee22cMark Andrews comments. [RT #1139]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt 800. [bug] dnssec-signzone produced incorrect statistics for
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt large zones. [RT #1133]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt 799. [bug] The ADB didn't find AAAA glue in a zone unless A6
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt glue was also present.
15fcbe39173856ae3bd0198099a693e594536869Tatuya JINMEI 神明達哉 798. [bug] nsupdate should be able to reject bad input lines
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt and continue. [RT #1130]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt 797. [func] Issue a warning if the 'directory' option contains
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt a relative path. [RT #269]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt 796. [func] When a size limit is associated with a log file,
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt only roll it when the size is reached, not every
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt time the log file is opened. [RT #1096]
3967528c773745ac32a83c2c77a910fd15db743dEvan Hunt 795. [func] Add the +multiline option to dig. [RT #1095]
3967528c773745ac32a83c2c77a910fd15db743dEvan Hunt 794. [func] Implement the "port" and "default-port" statements
aeff7de836558fa8002ab5db35292d2bb6450da8Evan Hunt 793. [cleanup] The DNSSEC tools could create filenames that were
2792e226c786e739b2924efdf8246af389384a2fMark Andrews illegal or contained shell meta-characters. They
2792e226c786e739b2924efdf8246af389384a2fMark Andrews now use a different text encoding of names that
ab280fdfc5e4251758aa9929457fba6dce3f1847Mark Andrews doesn't have these problems. [RT #1101]
ab280fdfc5e4251758aa9929457fba6dce3f1847Mark Andrews 792. [cleanup] Replace the OMAPI command channel protocol with a
fb8db7fc3f3ea597a959e4c8ac42247fd78ca887Mark Andrews simpler one.
fb8db7fc3f3ea597a959e4c8ac42247fd78ca887Mark Andrews 791. [bug] The command channel now works over IPv6.
08f860f800d32007a0c9bf456f6c35fbb2ecbc81Evan Hunt 790. [bug] Wildcards created using dynamic update or IXFR
63b17e175fc75adebf16563b08c89d54e6dfa253Evan Hunt could fail to match. [RT #1111]
08f860f800d32007a0c9bf456f6c35fbb2ecbc81Evan Hunt 789. [bug] The "localhost" and "localnets" ACLs did not match
38cd4d14cc341c2663e574035074788bb6f0fce2Evan Hunt when used as the second element of a two-element
38cd4d14cc341c2663e574035074788bb6f0fce2Evan Hunt sortlist item.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 788. [func] Add the "match-mapped-addresses" option, which
a4463732ad7935992a101b3d19f0a41120b85458Mark Andrews causes IPv6 v4mapped addresses to be treated as
a4463732ad7935992a101b3d19f0a41120b85458Mark Andrews IPv4 addresses for the purpose of acl matching.
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt 787. [bug] The DNSSEC tools failed to downcase domain
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt names when mapping them into file names.
ef370118d5d850912a4612122f5678e3db99ee87Evan Hunt 786. [bug] When DNSSEC signing/verifying data, owner names were
ef370118d5d850912a4612122f5678e3db99ee87Evan Hunt not properly down-cased.
5b7525f51fbcb074bf031d92f5cd95267c628137Mark Andrews 785. [bug] A race condition in the resolver could cause
5b7525f51fbcb074bf031d92f5cd95267c628137Mark Andrews an assertion failure. [RT #673, #872, #1048]
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews 784. [bug] nsupdate and other programs would not quit properly
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews if some signals were blocked by the caller. [RT #1081]
6d5852f318a7d09cff05a347456d1cd12407ceb1Mark Andrews 783. [bug] Following CNAMEs could cause an assertion failure
98e8948bd715fbefa8870e6f344183bc67e22340Mark Andrews when either using an sdb database or under very
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews rare conditions.
d7d05319a67229b250de910b8876bea0f6e9a0b1Tatuya JINMEI 神明達哉 782. [func] Implement the "serial-query-rate" option.
109580e7e5c92b98c641836ccb5949b4802ffcedMark Andrews 781. [func] Avoid error packet loops by dropping duplicate FORMERR
109580e7e5c92b98c641836ccb5949b4802ffcedMark Andrews responses. [RT #1006]
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt 780. [bug] Error handling code dealing with out of memory or
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt other rare errors could lead to assertion failures
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt by calling functions on uninitialized names. [RT #1065]
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt 779. [func] Added the "minimal-responses" option.
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews 778. [bug] When starting cache cleaning, cleaning_timer_action()
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews returned without first pausing the iterator, which
870332fb6d15e9fde8753399b00cb9e721c4d64fMark Andrews could cause deadlock. [RT #998]
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews 777. [bug] An empty forwarders list in a zone failed to override
371642de8b1863b2fc6ec9a89416de4dca71bc47Mark Andrews global forwarders. [RT #995]
d8f118f4a06cae6ec6b4ae133882f0eee1478599Mark Andrews 776. [func] Improved error reporting in denied messages. [RT #252]
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews 775. [placeholder]
877769641186144911152622b4345b27ca393df8Mark Andrews 774. [func] max-cache-size is implemented.
f7b683b054c4deb05f09d2f39da6ceb4ac838873Mark Andrews 773. [func] Added isc_rwlock_trylock() to attempt to lock without
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt 772. [bug] Owner names could be incorrectly omitted from cache
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt dumps in the presence of negative caching entries.
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt 771. [cleanup] TSIG errors related to unsynchronized clocks
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt are logged better. [RT #919]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt 770. [func] Add the "edns yes_or_no" statement to the server
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews clause. [RT #524]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt 769. [func] Improved error reporting when parsing rdata. [RT #740]
f4ea363e3acc321b24ffe95a64a583e8041d6fd5Mark Andrews 768. [bug] The server did not emit an SOA when a CNAME
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt or DNAME chain ended in NXDOMAIN in an
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt authoritative zone.
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt 767. [placeholder]
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt 766. [bug] A few cases in query_find() could leak fname.
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt This would trigger the mpctx->allocated == 0
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt assertion when the server exited.
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt [RT #739, #776, #798, #812, #818, #821, #845,
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt #892, #935, #966]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 765. [func] ACL names are once again case insensitive, like
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews in BIND 8. [RT #252]
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews 764. [func] Configuration files now allow "include" directives
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews in more places, such as inside the "view" statement.
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews [RT #377, #728, #860]
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews 763. [func] Configuration files no longer have reserved words.
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews [RT #731, #753]
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews 762. [cleanup] The named.conf and rndc.conf file parsers have
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews been completely rewritten.
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews 761. [bug] _REENTRANT was still defined when building with
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews --disable-threads.
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews 760. [contrib] Significant enhancements to the pgsql sdb driver.
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews 759. [bug] The resolver didn't turn off "avoid fetches" mode
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews when restarting, possibly causing resolution
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 to fail when it should not. This bug only affected
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 platforms which support both IPv4 and IPv6. [RT #927]
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 758. [bug] The "avoid fetches" code did not treat negative
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 cache entries correctly, causing fetches that would
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews be useful to be avoided. This bug only affected
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews platforms which support both IPv4 and IPv6. [RT #927]
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews 757. [func] Log zone transfers.
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews 756. [bug] dns_zone_load() could "return" success when no master
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews file was configured.
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed 755. [bug] Fix incorrectly formatted log messages in zone.c.
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed 754. [bug] Certain failure conditions sending UDP packets
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed could cause the server to retry the transmission
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed indefinitely. [RT #902]
4c2ed3d14168cfe34d1c036eb4885019a8153e7cMark Andrews 753. [bug] dig, host, and nslookup would fail to contact a
4c2ed3d14168cfe34d1c036eb4885019a8153e7cMark Andrews remote server if getaddrinfo() returned an IPv6
ddac1a2b9822b00aa936ef24c6d971f4a1407532Francis Dupont address on a system that doesn't support IPv6.
e7eede965dbc67842cb32591a8c2ace2620e5359Mark Andrews 752. [func] Correct bad tv_usec elements returned by
e7eede965dbc67842cb32591a8c2ace2620e5359Mark Andrews gettimeofday().
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉 751. [func] Log successful zone loads / transfers. [RT #898]
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉 750. [bug] A query should not match a DNAME whose trust level
d302a620e0d49811874b9555ac2e4c6e05861a6bFrancis Dupont is pending. [RT #916]
708ebf710e1c2c8f5bee6d5ba5376ec44d97aa71Jeremy Reed 749. [bug] When a query matched a DNAME in a secure zone, the
708ebf710e1c2c8f5bee6d5ba5376ec44d97aa71Jeremy Reed server did not return the signature of the DNAME.
cc620f9fdb69c13f1ea12bb1c90bc442f6dc0117Francis Dupont 748. [doc] List supported RFCs in doc/misc/rfc-compliance.
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews 747. [bug] The code to determine whether an IXFR was possible
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews did not properly check for a database that could
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews not have a journal. [RT #865, #908]
b770eae51e5d53730d3836b1548829f69ab15e66Mark Andrews 746. [bug] The sdb didn't clone rdatasets properly, causing
d2c115f9134acfefaaeb6b84036672bef93e7df8Mark Andrews a crash when the server followed delegations. [RT #905]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 745. [func] Report the owner name of records that fail
f030c715007053e4ceb557c78ad5c8cfdedb4240Mark Andrews semantic checks while loading.
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉 744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉 result of an ANY or SIG query, the resolver failed
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉 to setup the return event's rdatasets, causing an
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉 assertion failure in the query code. [RT #881]
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed 743. [bug] Receiving a large number of certain malformed
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed answers could cause named to stop responding.
b1b0dca1464a11b8a63623e8567e744dccfbcb41Tatuya JINMEI 神明達哉 742. [placeholder]
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉 741. [port] Support openssl-engine. [RT #709]
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉 740. [port] Handle openssl library mismatches slightly better.
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉 739. [port] Look for /dev/random in configure, rather than
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉 assuming it will be there for only a predefined
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews 738. [bug] If a non-threadsafe sdb driver supported AXFR and
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews received an AXFR request, it would deadlock or die
64e161a7f7f7f1692ccdf2400a81b471cf6ac508Mark Andrews with an assertion failure. [RT #852]
64e161a7f7f7f1692ccdf2400a81b471cf6ac508Mark Andrews 737. [port] stdtime.c failed to compile on certain platforms.
9384dc16a1f2c3022f50f2e1ce18a28204baaef7Mark Andrews 736. [func] New functions isc_task_{begin,end}exclusive().
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉 735. [doc] Add BIND 4 migration notes.
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉 734. [bug] An attempt to re-lock the zone lock could occur if
72dbc7216aae3626a66e6154443be219f5edcaf0Mark Andrews the server was shutdown during a zone transfer.
ca23cf7e28b9799436c9950ea269953e29dfde16Evan Hunt 733. [bug] Reference counts of dns_acl_t objects need to be
ca23cf7e28b9799436c9950ea269953e29dfde16Evan Hunt locked but were not. [RT #801, #821]
a142972ea9697b4ecaa5587fb6d9057e821d5339Tatuya JINMEI 神明達哉 732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews 731. [bug] Certain zone errors could cause named-checkzone to
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews fail ungracefully. [RT #819]
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews 730. [bug] lwres_getaddrinfo() returns the correct result when
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt it fails to contact a server. [RT #768]
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt 729. [port] pthread_setconcurrency() needs to be called on Solaris.
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt 728. [bug] Fix comment processing on master file directives.
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews 727. [port] Work around OS bug where accept() succeeds but
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews fails to fill in the peer address of the accepted
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews connection, by treating it as an error rather than
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt an assertion failure. [RT #809]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt 726. [func] Implement the "trace" and "notrace" commands in rndc.
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt 725. [bug] Installing man pages could fail.
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt 724. [func] New libisc functions isc_netaddr_any(),
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt isc_netaddr_any6().
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt to return DNS_R_SERVFAIL. [RT #783]
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews 722. [func] Allow incremental loads to be canceled.
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews 721. [cleanup] Load manager and dns_master_loadfilequota() are no
d36ba0f0caa64111a9a3236944f730dfb3fe5245Mark Andrews 720. [bug] Server could enter infinite loop in
d36ba0f0caa64111a9a3236944f730dfb3fe5245Mark Andrews dispatch.c:do_cancel(). [RT #733]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 719. [bug] Rapid reloads could trigger an assertion failure.
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt [RT #743, #763]
b3ea72e4d1c78791b807f03ea5c26e1b762d701fMark Andrews 718. [cleanup] "internal" is no longer a reserved word in named.conf.
b3ea72e4d1c78791b807f03ea5c26e1b762d701fMark Andrews [RT #753, #731]
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews 717. [bug] Certain TKEY processing failure modes could
98b2be76fc57a337534cda07a5ce20a41b8793adMark Andrews reference an uninitialized variable, causing the
98b2be76fc57a337534cda07a5ce20a41b8793adMark Andrews server to crash. [RT #750]
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews 716. [bug] The first line of a $INCLUDE master file was lost if
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt an origin was specified. [RT #744]
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt 715. [bug] Resolving some A6 chains could cause an assertion
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt failure in adb.c. [RT #738]
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews 714. [bug] Preserve interval timers across reloads unless changed.
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews 713. [func] named-checkconf takes '-t directory' similar to named.
499fa72075c050391b4d051f593d295670d27983Mark Andrews 712. [bug] Sending a large signed update message caused an
967a70944d6b1902d30919baa1c4f6faf77bbfaeMark Andrews assertion failure. [RT #718]
967a70944d6b1902d30919baa1c4f6faf77bbfaeMark Andrews 711. [bug] The libisc and liblwres implementations of
00c8156b24a3a80edf855190eabb8ac14ce9cc9cJeremy Reed inet_ntop contained an off by one error.
3464fafb9ff13e3212c568b645194bf138504fe6Jeremy Reed 710. [func] The forwarders statement now takes an optional
4bf9fe787e9cb3085391a0560c36726eda9ac2d1Mark Andrews port. [RT #418]
4bf9fe787e9cb3085391a0560c36726eda9ac2d1Mark Andrews 709. [bug] ANY or SIG queries for data with a TTL of 0
0f39e477c54929f3da65b083b4e3c8500ac8152eMark Andrews would return SERVFAIL. [RT #620]
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews 708. [bug] When building with --with-openssl, the openssl headers
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews included with BIND 9 should not be used. [RT #702]
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews 707. [func] The "filename" argument to named-checkzone is no
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews longer optional, to reduce confusion. [RT #612]
56907aff69cabc391e672d360c88cb1856a839efMark Andrews 706. [bug] Zones with an explicit "allow-update { none; };"
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews were considered dynamic and therefore not reloaded
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews on SIGHUP or "rndc reload".
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews 705. [port] Work out resource limit type for use where rlim_t is
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews not available. [RT #695]
56907aff69cabc391e672d360c88cb1856a839efMark Andrews 704. [port] RLIMIT_NOFILE is not available on all platforms.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 703. [port] sys/select.h is needed on older platforms. [RT #695]
cac4576405a48a84f3c4d5de0ffa28a865a13309Mark Andrews 702. [func] If the address 0.0.0.0 is seen in resolv.conf,
cac4576405a48a84f3c4d5de0ffa28a865a13309Mark Andrews use 127.0.0.1 instead. [RT #693]
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews 701. [func] Root hints are now fully optional. Class IN
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews views use compiled-in hints by default, as
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews before. Non-IN views with no root hints now
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews provide authoritative service but not recursion.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews A warning is logged if a view has neither root
45c3c12ed3415e5cce50d73a735034e32aed1f73Mark Andrews hints nor authoritative data for the root. [RT #696]
692ce6c31351481644ce6167cb66edaff68cd493Mark Andrews 700. [bug] $GENERATE range check was wrong. [RT #688]
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews 699. [bug] The lexer mishandled empty quoted strings. [RT #694]
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews 698. [bug] Aborting nsupdate with ^C would lead to several
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews race conditions.
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews 697. [bug] nsupdate was not compatible with the undocumented
b663e99af61e032273bdffa2f8d26de539ae6930Mark Andrews BIND 8 behavior of ignoring TTLs in "update delete"
b663e99af61e032273bdffa2f8d26de539ae6930Mark Andrews commands. [RT #693]
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉 696. [bug] lwresd would die with an assertion failure when passed
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉 a zero-length name. [RT #692]
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉 695. [bug] If the resolver attempted to query a blackholed or
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont bogus server, the resolution would fail immediately.
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont 694. [bug] $GENERATE did not produce the last entry.
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont [RT #682, #683]
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed 693. [bug] An empty lwres statement in named.conf caused
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed the server to crash while loading.
5d0984f4fd3133c869b0736adb5291e6fca34a0cTatuya JINMEI 神明達哉 692. [bug] Deal with systems that have getaddrinfo() but not
c349441d7e47a30e81726967b2398289225ebd45Mark Andrews gai_strerror(). [RT #679]
46af69f1239553d4a1c315f6eee51379828942f9Mark Andrews 691. [bug] Configuring per-view forwarders caused an assertion
70f292a50f9840fc25b3dbecfed71cdf835d4094Mark Andrews failure. [RT #675, #734]
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews 690. [func] $GENERATE now supports DNAME. [RT #654]
53cd44e7168acb379b1c5c74b3ffc4336694779dMark Andrews 689. [doc] man pages are now installed. [RT #210]
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews 688. [func] "make tags" now works on systems with the
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews "Exuberant Ctags" etags.
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 687. [bug] Only say we have IPv6, with sufficient functionality,
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 if it has actually been tested. [RT #586]
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 686. [bug] dig and nslookup can now be properly aborted during
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 blocking operations. [RT #568]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 685. [bug] nslookup should use the search list/domain options
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews from resolv.conf by default. [RT #405, #630]
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews 684. [bug] Memory leak with view forwarders. [RT #656]
00f83773169d9020a3ddcdaf88b198a27f571ff8Mark Andrews 683. [bug] File descriptor leak in isc_lex_openfile().
10e8f96abe072fcf4e0c938548f0970cd26f624cMark Andrews 682. [bug] nslookup displayed SOA records incorrectly. [RT #665]
31b7a2fed64e388db772a74742a4adc95d1a21e6Mark Andrews 681. [bug] $GENERATE specifying output format was broken. [RT #653]
5567f54834089be35d0df6afe2ccfaa039ab2233Jeremy Reed 680. [bug] dns_rdata_fromstruct() mishandled options bigger
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews than 255 octets.
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews 679. [bug] $INCLUDE could leak memory and file descriptors on
13f4bdc9b4f7b438cf5c2a071f108211534fae3fMark Andrews reload. [RT #639]
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews 678. [bug] "transfer-format one-answer;" could trigger an assertion
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews failure. [RT #646]
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews 677. [bug] dnssec-signzone would occasionally use the wrong ttl
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews for database operations and fail. [RT #643]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews 676. [bug] Log messages about lame servers to category
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 'lame-servers' rather than 'resolver', so as not
a8673c536b5827d87ef6c50a04afd34af2253fd9Evan Hunt to be gratuitously incompatible with BIND 8.
616b4544d0228604b1c5169b0c9d742f67567232Tatuya JINMEI 神明達哉 675. [bug] TKEY queries could cause the server to leak
bc4bc3579b92f2e4c6a6a2c5284d1c792c70e264Tatuya JINMEI 神明達哉 674. [func] Allow messages to be TSIG signed / verified using
bc4bc3579b92f2e4c6a6a2c5284d1c792c70e264Tatuya JINMEI 神明達哉 a offset from the current time.
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉 673. [func] The server can now convert RFC1886-style recursive
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉 lookup requests into RFC2874-style lookups, when
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉 enabled using the new option "allow-v6-synthesis".
1879dbe0d962f6f929417b02bf07f64ed41b1aabFrancis Dupont 672. [bug] The wrong time was in the "time signed" field when
1879dbe0d962f6f929417b02bf07f64ed41b1aabFrancis Dupont replying with BADTIME error.
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont 671. [bug] The message code was failing to parse a message with
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont no question section and a TSIG record. [RT #628]
52cee51063613b9be335d3078f13863fd0cad2cfMark Andrews 670. [bug] The lwres replacements for getaddrinfo and
ddb35cf2f301ae1c3fa601792034f6d349efc8c5Mark Andrews getipnodebyname didn't properly check for the
ddb35cf2f301ae1c3fa601792034f6d349efc8c5Mark Andrews existence of the sockaddr sa_len field.
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉 669. [bug] dnssec-keygen now makes the public key file
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉 non-world-readable for symmetric keys. [RT #403]
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 668. [func] named-checkzone now reports multiple errors in master
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 667. [bug] On Linux, running named with the -u option and a
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews non-world-readable configuration file didn't work.
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉 666. [bug] If a request sent by dig is longer than 512 bytes,
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉 665. [bug] Signed responses were not sent when the size of the
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉 TSIG + question exceeded the maximum message size.
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews 664. [bug] The t_tasks and t_timers module tests are now skipped
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews when building without threads, since they require
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 663. [func] Accept a size_spec, not just an integer, in the
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉 (unimplemented and ignored) max-ixfr-log-size option
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉 for compatibility with recent versions of BIND 8.
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews 662. [bug] dns_rdata_fromtext() failed to log certain errors.
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews 661. [bug] Certain UDP IXFR requests caused an assertion failure
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews (mpctx->allocated == 0). [RT #355, #394, #623]
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews 660. [port] Detect multiple CPUs on HP-UX and IRIX.
b06e03490604f5d9b590dad143e65d533918481bMark Andrews 659. [performance] Rewrite the name compression code to be much faster.
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews 658. [cleanup] Remove all vestiges of 16 bit global compression.
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews 657. [bug] When a listen-on statement in an lwres block does not
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 specify a port, use 921, not 53. Also update the
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 listen-on documentation. [RT #616]
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews 656. [func] Treat an unescaped newline in a quoted string as
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews an error. This means that TXT records with missing
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews close quotes should have meaningful errors printed.
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews 655. [bug] Improve error reporting on unexpected eof when loading
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews zones. [RT #611]
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews 654. [bug] Origin was being forgotten in TCP retries in dig.
d8fc8514b117e636b791bef429d64a7c7a75a4cfMark Andrews 653. [bug] +defname option in dig was reversed in sense.
9935447b51456f598b45246d0114b8006049244dMark Andrews 652. [bug] zone_saveunique() did not report the new name.
175a8bd2b798bbc568cd912b72c8a026cfca8527Mark Andrews 651. [func] The AD bit in responses now has the meaning
175a8bd2b798bbc568cd912b72c8a026cfca8527Mark Andrews specified in <draft-ietf-dnsext-ad-is-secure>.
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews 650. [bug] SIG(0) records were being generated and verified
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews incorrectly. [RT #606]
4e59e2e59b17c4e30eef801929bca91800be833eFrancis Dupont 649. [bug] It was possible to join to an already running fctx
47d9a2bec1fee2f6c7a9cee3ca922140840223eeMark Andrews after it had "cloned" its events, but before it sent
47d9a2bec1fee2f6c7a9cee3ca922140840223eeMark Andrews them. In this case, the event of the newly joined
9019569316e39087410336bb76c02bf185974fe3Mark Andrews fetch would not contain the answer, and would
9019569316e39087410336bb76c02bf185974fe3Mark Andrews trigger the INSIST() in fctx_sendevents(). In
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews BIND 9.0, this bug did not trigger an INSIST(), but
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews caused the fetch to fail with a SERVFAIL result.
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews [RT #588, #597, #605, #607]
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 648. [port] Add support for pre-RFC2133 IPv6 implementations.
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 647. [bug] Resolver queries sent after following multiple
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 referrals had excessively long retransmission
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews timeouts due to incorrectly counting the referrals
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews as "restarts".
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews 646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews didn't _cleanly_ fix the problem it was trying to fix.
50df1ec60af410fca6b7a85d5c85e8f31bb13bc3Mark Andrews 645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews 644. [bug] #622 needed more work. [RT #562]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed 643. [bug] xfrin error messages made more verbose, added class
ef4eed2a2a8897bd4e5b19dd94f638e0861ebda5Mark Andrews of the zone. [RT# 599]
d5be219ff773a91c839c660fee54f1df7448adfaMark Andrews 642. [bug] Break the exit_check() race in the zone module.
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews --- 9.1.0b2 released ---
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews 641. [bug] $GENERATE caused a uninitialized link to be used.
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews 640. [bug] Memory leak in error path could cause
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews "mpctx->allocated == 0" failure. [RT #584]
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 639. [bug] Reading entropy from the keyboard would sometimes fail.
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 638. [port] lib/isc/random.c needed to explicitly include time.h
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 to get a prototype for time() when pthreads was not
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews being used. [RT #592]
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews 637. [port] Use isc_u?int64_t instead of (unsigned) long long in
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews be compiled even if the platform does not need it.
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews 636. [port] Shut up MSVC++ about a possible loss of precision
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews in the ISC__BUFFER_PUTUINT*() macros. [RT #592]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews 635. [bug] Reloading a server with a configured blackhole list
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews would cause an assertion. [RT #590]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews 634. [bug] A log file will completely stop being written when
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews it reaches the maximum size in all cases, not just
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed when versioning is also enabled. [RT #570]
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews 633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews 632. [bug] The index array of the journal file was
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews corrupted as it was written to disk.
7b1a7a098b51381f06277860a40bd7f062c8ec19Francis Dupont 631. [port] Build without thread support on systems without
bc3b1dbd69840bd7f2f0b6af2610603f334b369bFrancis Dupont 630. [bug] Locking failure in zone code. [RT #582]
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews 629. [bug] 9.1.0b1 dereferenced a null pointer and crashed
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews when responding to a UDP IXFR request.
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews 628. [bug] If the root hints contained only AAAA addresses,
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews named would be unable to perform resolution.
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews 627. [bug] The EDNS0 blackhole detection code of change 324
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews waited for three retransmissions to each server,
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed which takes much too long when a domain has many
e597f9f376d79c8962f2373d4eb98a441e6c70caMark Andrews name servers and all of them drop EDNS0 queries.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed Now we retry without EDNS0 after three consecutive
d1ec77294eb543bbca128d8683bdf9680cbedb61Mark Andrews timeouts, even if they are all from different
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews servers. [RT #143]
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews 626. [bug] The lightweight resolver daemon no longer crashes
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews when asked for a SIG rrset. [RT #558]
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed 625. [func] Zones now inherit their class from the enclosing view.
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed 624. [bug] The zone object could get timer events after it had
86ee7433b38bb023912a73d842bdcef3d4871a90Mark Andrews been destroyed, causing a server crash. [RT #571]
86ee7433b38bb023912a73d842bdcef3d4871a90Mark Andrews 623. [func] Added "named-checkconf" and "named-checkzone" program
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt for syntax checking named.conf files and zone files,
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt respectively.
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews 622. [bug] A canceled request could be destroyed before
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews dns_request_destroy() was called. [RT #562]
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews 621. [port] Disable IPv6 at runtime if IPv6 sockets are unusable.
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews This mostly affects Red Hat Linux 7.0, which has
7ca0cdd7ecff4c0396970ed957df7d5d8c639abfMark Andrews conflicts between libc and the kernel.
7ca0cdd7ecff4c0396970ed957df7d5d8c639abfMark Andrews 620. [bug] dns_master_load*inc() now require 'task' and 'load'
275b170cc47c897d25204fe23169dac810283f79Mark Andrews to be non-null. Also 'done' will not be called if
455ada05af05e39cdeb63297d60d36a0eca062e1Mark Andrews dns_master_load*inc() fails immediately. [RT #565]
0d444dc136a1a8df89a329d7ad43c74e1db8dfbeMark Andrews 619. [placeholder]
0d444dc136a1a8df89a329d7ad43c74e1db8dfbeMark Andrews 618. [bug] Queries to a signed zone could sometimes cause
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews an assertion failure.
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews 617. [bug] When using dynamic update to add a new RR to an
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉 existing RRset with a different TTL, the journal
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉 entries generated from the update did not include
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉 explicit deletions and re-additions of the existing
b05585dcfe270c40e309ff7304cf6b69d7390bdaTatuya JINMEI 神明達哉 RRs to update their TTL to the new value.
1f030ca8a3df943d8016cac39bc3018f5952126aJeremy Reed 616. [func] dnssec-signzone -t output now includes performance
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews 615. [bug] dnssec-signzone did not like child keysets signed
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews by multiple keys.
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews 614. [bug] Checks for uninitialized link fields were prone
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews to false positives, causing assertion failures.
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews The checks are now disabled by default and may
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews be re-enabled by defining ISC_LIST_CHECKINIT.
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews 613. [bug] "rndc reload zone" now reloads primary zones.
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews It previously only updated slave and stub zones,
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews if an SOA query indicated an out of date serial.
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews 612. [cleanup] Shutup a ridiculously noisy HP-UX compiler that
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews complains relentlessly about how its treatment
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed of 'const' has changed as well as how casting
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed sometimes tightens alignment constraints.
99a522dad7623549cd5e32a4968e6de8eca46ff1Mark Andrews 611. [func] allow-notify can be used to permit processing of
99a522dad7623549cd5e32a4968e6de8eca46ff1Mark Andrews notify messages from hosts other than a slave's
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews 610. [func] rndc dumpdb is now supported.
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews 609. [bug] getrrsetbyname() would crash lwresd if the server
cd6555930b6829ebce8bbf2adc7ba05111edf595Mark Andrews found more SIGs than answers. [RT #554]
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉 608. [func] dnssec-signzone now adds a comment to the zone
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉 with the time the file was signed.
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉 607. [bug] nsupdate would fail if it encountered a CNAME or
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉 DNAME in a response to an SOA query. [RT #515]
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉 606. [bug] Compiling with --disable-threads failed due
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt to isc_thread_self() being incorrectly defined
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt as an integer rather than a function.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 605. [func] New function isc_lex_getlasttokentext().
eab4a5c29ddda688d975ad59a55a965b16534432Mark Andrews 604. [bug] The named.conf parser could print incorrect line
eab4a5c29ddda688d975ad59a55a965b16534432Mark Andrews numbers when long comments were present.
21d493fc392d472086ad3c7c4563b7cadcb06788Mark Andrews 603. [bug] Make dig handle multiple types or classes on the same
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews query more correctly.
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews 602. [func] Cope automatically with UnixWare's broken
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews IN6_IS_ADDR_* macros. [RT #539]
19e4588ed76d6832be4de0813b6108a292ef413aMark Andrews 601. [func] Return a non-zero exit code if an update fails
19e4588ed76d6832be4de0813b6108a292ef413aMark Andrews in nsupdate.
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed 600. [bug] Reverse lookups sometimes failed in dig, etc...
143852efc066b3e3cd16eeec679016adbd450474Mark Andrews 599. [func] Added four new functions to the libisc log API to
143852efc066b3e3cd16eeec679016adbd450474Mark Andrews support i18n messages. isc_log_iwrite(),
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews isc_log_ivwrite(), isc_log_iwrite1() and
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews isc_log_ivwrite1() were added.
11dbf2fc38eea8c5d3fe7123718bf197a8bb2e6bMark Andrews 598. [bug] An update-policy statement would cause the server
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 to assert while loading. [RT #536]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 597. [func] dnssec-signzone is now multi-threaded.
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews 596. [bug] DNS_RDATASLAB_FORCE and DNS_RDATASLAB_EXACT are
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews not mutually exclusive.
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews 595. [port] On Linux 2.2, socket() returns EINVAL when it
ce688d65947a05561509aef48c8c240130d443eaMark Andrews should return EAFNOSUPPORT. Work around this.
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff 594. [func] sdb drivers are now assumed to not be thread-safe
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff unless the DNS_SDBFLAG_THREADSAFE flag is supplied.
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff 593. [bug] If a secure zone was missing all its NXTs and
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff a dynamic update was attempted, the server entered
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt an infinite loop.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 592. [bug] The sig-validity-interval option now specifies a
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt number of days, not seconds. This matches the
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt documentation. [RT #529]
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt --- 9.1.0b1 released ---
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews 591. [bug] Work around non-reentrancy in openssl by disabling
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt pre-computation in keys.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews 590. [doc] There are now man pages for the lwres library in
dbe9f900ecbefb34e960b69b41b9ecde36e0a256Tatuya JINMEI 神明達哉 589. [bug] The server could deadlock if a zone was updated
dbe9f900ecbefb34e960b69b41b9ecde36e0a256Tatuya JINMEI 神明達哉 while being transferred out.
b247f77228f00e16dd43b4d570ad0fb15e88f3edMark Andrews 588. [bug] ctx->in_use was not being correctly initialized when
aeadcd63196f164b219629a53c0e0925519288f3Evan Hunt when pushing a file for $INCLUDE. [RT #523]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews 587. [func] A warning is now printed if the "allow-update"
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews option allows updates based on the source IP
baeed3c40fc0a2f30ef399899e16ded472f04c06Evan Hunt address, to alert users to the fact that this
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews is insecure and becoming increasingly so as
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews servers capable of update forwarding are being
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews 586. [bug] multiple views with the same name were fatal. [RT #516]
275b170cc47c897d25204fe23169dac810283f79Mark Andrews 585. [func] dns_db_addrdataset() and and dns_rdataslab_merge()
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews now support 'exact' additions in a similar manner to
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews dns_db_subtractrdataset() and dns_rdataslab_subtract().
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews 584. [func] You can now say 'notify explicit'; to suppress
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews notification of the servers listed in NS records
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews and notify only those servers listed in the
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews 'also-notify' option.
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews 583. [func] "rndc querylog" will now toggle logging of
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews queries, like "ndc querylog" in BIND 8.
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews 582. [bug] dns_zone_idetach() failed to lock the zone.
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews [RT #199, #463]
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews 581. [bug] log severity was not being correctly processed.
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews 580. [func] Ignore trailing garbage on incoming DNS packets,
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews for interoperability with broken server
275b170cc47c897d25204fe23169dac810283f79Mark Andrews implementations. [RT #491]
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews 579. [bug] nsupdate did not take a filename to read update from.
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉 578. [func] New config option "notify-source", to specify the
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews source address for notify messages.
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews 577. [func] Log illegal RDATA combinations. e.g. multiple
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews singleton types, cname and other data.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews 576. [doc] isc_log_create() description did not match reality.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews 575. [bug] isc_log_create() was not setting internal state
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews correctly to reflect the default channels created.
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt 574. [bug] TSIG signed queries sent by the resolver would fail to
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt have their responses validated and would leak memory.
1bfe8851c0a2eb1d7e15556bfa21291cd62ee2bcMark Andrews 573. [bug] The journal files of IXFRed slave zones were
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt inadvertently discarded on server reload, causing
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 "journal out of sync with zone" errors on subsequent
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 reloads. [RT #482]
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 572. [bug] Quoted strings were not accepted as key names in
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews address match lists.
275b170cc47c897d25204fe23169dac810283f79Mark Andrews 571. [bug] It was possible to create an rdataset of singleton
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews type which had more than one rdata. [RT #154]
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt 570. [bug] rbtdb.c allowed zones containing nodes which had
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews both a CNAME and "other data". [RT #154]
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews 569. [func] The DNSSEC AD bit will not be set on queries which
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews have not requested a DNSSEC response.
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉 568. [func] Add sample simple database drivers in contrib/sdb.
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 567. [bug] Setting the zone transfer timeout to zero caused an
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 assertion failure. [RT #302]
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 566. [func] New public function dns_timer_setidle().
cf225ed6cd51f9acc901a60520a9368e14224a4dTatuya JINMEI 神明達哉 565. [func] Log queries more like BIND 8: query logging is now
cf225ed6cd51f9acc901a60520a9368e14224a4dTatuya JINMEI 神明達哉 done to category "queries", level "info". [RT #169]
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉 564. [func] Add sortlist support to lwresd.
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉 563. [func] New public functions dns_rdatatype_format() and
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉 dns_rdataclass_format(), for convenient formatting
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉 of rdata type/class mnemonics in log messages.
387bca7a55c0581dc36edb4a5071cb5e1d1c34f6Tatuya JINMEI 神明達哉 562. [cleanup] Moved lib/dns/*conf.c to bin/named where they belong.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed 561. [func] The 'datasize', 'stacksize', 'coresize' and 'files'
dc842cdcb946b3f89448f07a9f024497a50c216aMark Andrews clauses of the options{} statement are now implemented.
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉 560. [bug] dns_name_split did not properly the resulting prefix
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉 when a maximal length bitstring label was split which
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉 was preceded by another bitstring label. [RT #429]
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉 559. [bug] dns_name_split did not properly create the suffix
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉 when splitting within a maximal length bitstring label.
04115a59c176759177545c72376e844e10dc557cMark Andrews 558. [func] New functions, isc_resource_getlimit and
04115a59c176759177545c72376e844e10dc557cMark Andrews isc_resource_setlimit.
4db36a15c5716050d40aa8e709e8c8e9475ea25bMark Andrews 557. [func] Symbolic constants for libisc integral types.
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 556. [func] The DNSSEC OK bit in the EDNS extended flags
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 is now implemented. Responses to queries without
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 this bit set will not contain any DNSSEC records.
146484aced3e6c1b9cc88db5e75b8cbfd166f701Mark Andrews 555. [bug] A slave server attempting a zone transfer could
146484aced3e6c1b9cc88db5e75b8cbfd166f701Mark Andrews crash with an assertion failure on certain
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt malformed responses from the master. [RT #457]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 554. [bug] In some cases, not all of the dnssec tools were
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews properly installed.
e43b095921450c34288cadc3406f49c84a0e4d46Evan Hunt 553. [bug] Incoming zone transfers deferred due to quota
7999db4215b9398d4598ac0156ff097cda40402bMark Andrews were not started when quota was increased but
7999db4215b9398d4598ac0156ff097cda40402bMark Andrews only when a transfer in progress finished. [RT #456]
481e9b573b8233f8678c1dd4549c8c949312e81dMark Andrews 552. [bug] We were not correctly detecting the end of all c-style
cbb8a1b7cbab933795ddee4f05f4eb5074a68e6cFrancis Dupont comments. [RT #455]
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont 551. [func] Implemented the 'sortlist' option.
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont 550. [func] Support unknown rdata types and classes.
0cdb53f093f5814b40a68848025dd8d7e9ef2e9bTatuya JINMEI 神明達哉 549. [bug] "make" did not immediately abort the build when a
0cdb53f093f5814b40a68848025dd8d7e9ef2e9bTatuya JINMEI 神明達哉 subdirectory make failed [RT #450].
05b8187cb3cf03fbd75af1afdacc4aefb373e37bTatuya JINMEI 神明達哉 548. [func] The lexer now ungets tokens more correctly.
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews 547. [placeholder]
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews 546. [func] Option 'lame-ttl' is now implemented.
e8ebdf044d241387bc3140d58fd51db357bad621Mark Andrews 545. [func] Name limit and counting options removed from dig;
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews they didn't work properly, and cannot be correctly
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews implemented without significant changes.
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews 544. [func] Add statistics option, enable statistics-file option,
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews add RNDC option "dump-statistics" to write out a
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews query statistics file.
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont 543. [doc] The 'port' option is now documented.
2ca30c1774245f3aa7e8a1f3781cb965152373d8Evan Hunt 542. [func] Add support for update forwarding as required for
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont full compliance with RFC2136. It is turned off
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont by default and can be enabled using the
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont 'allow-update-forwarding' option.
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont 541. [func] Add bogus server support.
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt 540. [func] Add dialup support.
3d8b9b9956b64aba0d105f955ac0354fbcf5baa9Tatuya JINMEI 神明達哉 539. [func] Support the blackhole option.
2f76108082f11d4979048f1c22602391c5733c88Tatuya JINMEI 神明達哉 538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt 537. [placeholder]
efe34b8ddbecf45d1671efbcba30bdb75410c98aMark Andrews 536. [func] Use transfer-source{-v6} when sending refresh queries.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 Transfer-source{-v6} now take a optional port
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 parameter for setting the UDP source port. The port
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 parameter is ignored for TCP.
d923262186a3111a6ac7aae5dcd9996e01115a44Mark Andrews 535. [func] Use transfer-source{-v6} when forwarding update
f92c897cb69fbb8b7400a5df93271b0743fe9adeTatuya JINMEI 神明達哉 534. [func] Ancestors have been removed from RBT chains. Ancestor
158f256a14b629c4157fe0da779a4ff0e3402e48Tatuya JINMEI 神明達哉 information can be discerned via node parent pointers.
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉 533. [func] Incorporated name hashing into the RBT database to
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉 improve search speed.
386d3a99c190bad55edf44d076e6bd087e230ab8Tatuya JINMEI 神明達哉 532. [func] Implement DNS UPDATE pseudo records using
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews DNS_RDATA_UPDATE flag.
0f39ff74a85e16cbfd30354e24403b1ee50e1104Tatuya JINMEI 神明達哉 531. [func] Rdata really should be initialized before being assigned
05e2cc844530031e4dd4e25b3826bece7a183ee1Tatuya JINMEI 神明達哉 to (dns_rdata_fromwire(), dns_rdata_fromtext(),
0f39ff74a85e16cbfd30354e24403b1ee50e1104Tatuya JINMEI 神明達哉 dns_rdata_clone(), dns_rdata_fromregion()),
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews check that it is.
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews 530. [func] New function dns_rdata_invalidate().
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews 529. [bug] 521 contained a bug which caused zones to always
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews reload. [RT #410]
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews 528. [func] The ISC_LIST_XXXX macros now perform sanity checks
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews on their arguments. ISC_LIST_XXXXUNSAFE can be use
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews to skip the checks however use with caution.
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews 527. [func] New function dns_rdata_clone().
250dcb4cf5c356bb492c849edff5fe3c81f61f77Tatuya JINMEI 神明達哉 526. [bug] nsupdate incorrectly refused to add RRs with a TTL
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 525. [func] New arguments 'options' for dns_db_subtractrdataset(),
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 and 'flags' for dns_rdataslab_subtract() allowing you
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews to request that the RR's must exist prior to deletion.
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews DNS_R_NOTEXACT is returned if the condition is not met.
58253bddc4c33507ba28654b9c4a36ca1053730cMark Andrews 524. [func] The 'forward' and 'forwarders' statement in
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉 non-forward zones should work now.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews 523. [doc] The source to the Administrator Reference Manual is
080a964a3f0622f2e343f114aa1cc066372c06caEvan Hunt now an XML file using the DocBook DTD, and is included
080a964a3f0622f2e343f114aa1cc066372c06caEvan Hunt in the distribution. The plain text version of the
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews ARM is temporarily unavailable while we figure out
5a17fe2916ce37793c12b243ab08c16095a59cf7Evan Hunt how to generate readable plain text from the XML.
d230b29aba3ce1d0362194801c34321ed22f5aa5Evan Hunt 522. [func] The lightweight resolver daemon can now use
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews a real configuration file, and its functionality
5a17fe2916ce37793c12b243ab08c16095a59cf7Evan Hunt can be provided by a name server. Also, the -p and -P
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews options to lwresd have been reversed.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews 521. [bug] Detect master files which contain $INCLUDE and always
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews reload. [RT #196]
e1aeb1569a0ae08c97dd76acb00376e4246e59b8Mark Andrews 520. [bug] Upgraded libtool to 1.3.5, which makes shared
e1aeb1569a0ae08c97dd76acb00376e4246e59b8Mark Andrews library builds almost work on AIX (and possibly
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 519. [bug] dns_name_split() would improperly split some bitstring
0415ca35ada2cac6a86127eaca64f3a997aea121Evan Hunt labels, zeroing a few of the least significant bits in
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews the prefix part. When such an improperly created
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews prefix was returned to the RBT database, the bogus
69ec1b7eb3be37f06b53f572f6c33622e95a7935Evan Hunt label was dutifully stored, corrupting the tree.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews 518. [bug] The resolver did not realize that a DNAME which was
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews "the answer" to the client's query was "the answer",
28ad0be64ee756013c0f6a474fc447ee613ee0d1Evan Hunt and such queries would fail. [RT #399]
229442301442890aee044a0df54d3787acd68e65Mark Andrews 517. [bug] The resolver's DNAME code would trigger an assertion
229442301442890aee044a0df54d3787acd68e65Mark Andrews if there was more than one DNAME in the chain.
8b56b8956fc1e6c70efacb4f71db28d0d1f0c577Mark Andrews 516. [bug] Cache lookups which had a NULL node pointer, e.g.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews those by dns_view_find(), and which would match a
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews DNAME, would trigger an INSIST(!search.need_cleanup)
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews assertion. [RT #399]
bf64a0d5d9469c42622401bc5d55cf9888eeef44Tatuya JINMEI 神明達哉 515. [bug] The ssu table was not being attached / detached
bf64a0d5d9469c42622401bc5d55cf9888eeef44Tatuya JINMEI 神明達哉 by dns_zone_[sg]etssutable. [RT#397]
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff 514. [func] Retry refresh and notify queries if they timeout.
375e2c913a21cb852310418785f359a6b21b851dMark Andrews 513. [func] New functionality added to rdnc and server to allow
375e2c913a21cb852310418785f359a6b21b851dMark Andrews individual zones to be refreshed or reloaded.
52cb865cf00db3437c33b57de0a17c807f9ba67eMark Andrews 512. [bug] The zone transfer code could throw an exception with
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews an invalid IXFR stream.
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews 511. [bug] The message code could throw an assertion on an
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews out of memory failure. [RT #392]
c4fadc88619959582ac89b841c489be0519ae79dTatuya JINMEI 神明達哉 510. [bug] Remove spurious view notify warning. [RT #376]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews 509. [func] Add support for write of zone files on shutdown.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 508. [func] dns_message_parse() can now do a best-effort
d904beeb3bf62d60e25f76e1ac9c4b78278c14edMark Andrews attempt, which should allow dig to print more invalid
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews 507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews and dns_view_flushanddetach().
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews 506. [func] Do not fail to start on errors in zone files.
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews 505. [bug] nsupdate was printing "unknown result code". [RT #373]
887ef2682c6f66f9dcd6604c4ccf8f87894ef2a9Mark Andrews 504. [bug] The zone was not being marked as dirty when updated via
07555e64d9102eae058efd58f872b4a3b9ddff61Mark Andrews 503. [bug] dumptime was not being set along with
07555e64d9102eae058efd58f872b4a3b9ddff61Mark Andrews DNS_ZONEFLG_NEEDDUMP.
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews 502. [func] On a SERVFAIL reply, DiG will now try the next server
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews in the list, unless the +fail option is specified.
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont 501. [bug] Incorrect port numbers were being displayed by
8d460bed78e2684fbb0cb150bbf800dcc4d29c54Mark Andrews nslookup. [RT #352]
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews 500. [func] Nearly useless +details option removed from DiG.
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont 499. [func] In DiG, specifying a class with -c or type with -t
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont changes command-line parsing so that classes and
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont types are only recognized if following -c or -t.
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont This allows hosts with the same name as a class or
cffe96e26744abcf33494837b234219046a631d8Mark Andrews type to be looked up.
cffe96e26744abcf33494837b234219046a631d8Mark Andrews 498. [doc] There is now a man page for "dig"
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews 497. [bug] The error messages printed when an IP match list
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews contained a network address with a nonzero host
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews part where not sufficiently detailed. [RT #365]
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews 496. [bug] named didn't sanity check numeric parameters. [RT #361]
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉 495. [bug] nsupdate was unable to handle large records. [RT #368]
ea8564f68adbacd904e55e47668fe1bbf65ddd1dMark Andrews 494. [func] Do not cache NXDOMAIN responses for SOA queries.
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews 493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews for SOA queries. This makes it easier to locate
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews the containing zone without polluting intermediate
4074b8e7342618ff38ffe3773a2699ee1734f1adMark Andrews 492. [bug] attempting to reload a zone caused the server fail
4074b8e7342618ff38ffe3773a2699ee1734f1adMark Andrews to shutdown cleanly. [RT #360]
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews 491. [bug] nsupdate would segfault when sending certain
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews prerequisites with empty RDATA. [RT #356]
016c4317500eb565b82b27d00ba6b621c6e29110Mark Andrews 490. [func] When a slave/stub zone has not yet successfully
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews obtained an SOA containing the zone's configured
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews retry time, perform the SOA query retries using
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews exponential backoff. [RT #337]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 489. [func] The zone manager now has a "i/o" queue.
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews 488. [bug] Locks weren't properly destroyed in some cases.
0e30609d7b3e31e3ff249d185041b9140b5410baMark Andrews 487. [port] flockfile() is not defined on all systems.
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews 486. [bug] nslookup: "set all" and "server" commands showed
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews the incorrect port number if a port other than 53
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews was specified. [RT #352]
3cff31d890bf0815b6b2c7603d1e5c37dc3f26b7Mark Andrews 485. [func] When dig had more than one server to query, it would
2005c3b37bb39a37dc0b034bb2149006df7e3759Mark Andrews send all of the messages at the same time. Add
aef875b27e94586a1f3644d53705e6f5ea4b5dafMark Andrews rate limiting of the transmitted messages.
c09c2bf800ba0f5e6efe6b47ba72f43e4a61ca7dMark Andrews 484. [bug] When the server was reloaded after removing addresses
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews from the named.conf "listen-on" statement, sockets
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews were still listening on the removed addresses due
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews to reference count loops. [RT #325]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews 483. [bug] nslookup: "set all" showed a "search" option but it
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews was not settable.
4a5b30c24ca7ceefec4ca142069b886f3d4ab9f9Mark Andrews 482. [bug] nslookup: a plain "server" or "lserver" should be
4a5b30c24ca7ceefec4ca142069b886f3d4ab9f9Mark Andrews treated as a lookup.
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews 481. [bug] nslookup:get_next_command() stack size could exceed
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews per thread limit.
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews 480. [bug] strtok() is not thread safe. [RT #349]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 479. [func] The test suite can now be run by typing "make check"
7adca0ea2fcd44641861523b718d6980c0666103Mark Andrews or "make test" at the top level.
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews 478. [bug] "make install" failed if the directory specified with
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews --prefix did not already exist.
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews 477. [bug] The the isc-config.sh script could be installed before
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews its directory was created. [RT #324]
1fa2ce7eaef0c17d554495220565b681639b2ce5Mark Andrews 476. [bug] A zone could expire while a zone transfer was in
7539c231d47677250008737b0691f9518111f3f5Mark Andrews progress triggering a INSIST failure. [RT #329]
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉 475. [bug] query_getzonedb() sometimes returned a non-null version
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉 on failure. This caused assertion failures when
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉 generating query responses where names subject to
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews additional section processing pointed to a zone
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews to which access had been denied by means of the
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews allow-query option. [RT #336]
1c3ed2a83d176d9023b51b60dfc96c133f678362Tatuya JINMEI 神明達哉 474. [bug] The mnemonic of the CHAOS class is CH according to
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews RFC1035, but it was printed and read only as CHAOS.
fc53f564caa9d40f4b73a2808260b1dc07e86fddEvan Hunt We now accept both forms as input, and print it
e951a79d901cc9b72a4882c38f02b568eed6bf24Mark Andrews as CH. [RT #305]
a59640bf27db16e02e01484297e36b7456e163bbMark Andrews 473. [bug] nsupdate overran the end of the list of name servers
4462e590791925b6a5efceacbff054a6b5fe35edMark Andrews when no servers could be reached, typically causing
4462e590791925b6a5efceacbff054a6b5fe35edMark Andrews it to print the error message "dns_request_create:
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews not implemented".
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews 472. [bug] Off-by-one error caused isc_time_add() to sometimes
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews produce invalid time values.
fc7043d7d1294478c9988c10af9a7fb8fd810338Evan Hunt 471. [bug] nsupdate didn't compile on HP/UX 10.20
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews 470. [func] $GENERATE is now supported. See also
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews 469. [bug] "query-source address * port 53;" now works.
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews 468. [bug] dns_master_load*() failed to report file and line
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews number in certain error conditions.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews 467. [bug] dns_master_load*() failed to log an error if
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews pushfile() failed.
1ff207c2fa4182156932f3f5c982170385a19225Mark Andrews 466. [bug] dns_master_load*() could return success when it failed.
827572e191fad1326c624593bf35d8eb1928f607Mark Andrews 465. [cleanup] Allow 0 to be set as an omapi_value_t value by
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews omapi_value_storeint().
1aba9fe67899522364a9dbc3ee5a14da081f0314Evan Hunt 464. [cleanup] Build with openssl's RSA code instead of dnssafe.
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews 463. [bug] nsupdate sent malformed SOA queries to the second
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews and subsequent name servers in resolv.conf if the
6c7f722d31d12cf83964c8132f0a59ef70e34cb5Mark Andrews query sent to the first one failed.
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews 462. [bug] --disable-ipv6 should work now.
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews 461. [bug] Specifying an unknown key in the "keys" clause of the
fcdafc1e30dd4d10184b56201ea2fc3bab711e5eMark Andrews "controls" statement caused a NULL pointer dereference.
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews 460. [bug] Much of the DNSSEC code only worked with class IN.
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews 459. [bug] Nslookup processed the "set" command incorrectly.
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews 458. [bug] Nslookup didn't properly check class and type values.
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews 457. [bug] Dig/host/hslookup didn't properly handle connect
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews timeouts in certain situations, causing an
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews unnecessary warning message to be printed.
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews 456. [bug] Stub zones were not resetting the refresh and expire
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews counters, loadtime or clearing the DNS_ZONE_REFRESH
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews (refresh in progress) flag upon successful update.
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews This disabled further refreshing of the stub zone,
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews causing it to eventually expire. [RT #300]
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews 455. [doc] Document IPv4 prefix notation does not require a
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews dotted decimal quad but may be just dotted decimal.
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews 454. [bug] Enforce dotted decimal and dotted decimal quad where
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews documented as such in named.conf. [RT #304, RT #311]
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews 453. [bug] Warn if the obsolete option "maintain-ixfr-base"
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews is specified in named.conf. [RT #306]
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews 452. [bug] Warn if the unimplemented option "statistics-file"
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews is specified in named.conf. [RT #301]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 451. [func] Update forwarding implemented.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 450. [func] New function ns_client_sendraw().
20837e74f5e68a8108c25bb341a3ef1c1ca22711Tatuya JINMEI 神明達哉 449. [bug] isc_bitstring_copy() only works correctly if the
1c9f629c181dfd14bb429a6699d22c3c023aa218Mark Andrews two bitstrings have the same lsb0 value, but this
1c9f629c181dfd14bb429a6699d22c3c023aa218Mark Andrews requirement was not documented, nor was there a
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews REQUIRE for it.
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews 448. [bug] Host output formatting change, to match v8. [RT #255]
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews 447. [bug] Dig didn't properly retry in TCP mode after
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews a truncated reply. [RT #277]
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews 446. [bug] Confusing notify log message. [RT #298]
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews 445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews bitstring triggered a REQUIRE statement. The REQUIRE
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews statement was incorrect. [RT #297]
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews 444. [func] "recursion denied" messages are always logged at
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews debug level 1, now, rather than sometimes at ERROR.
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews This silences these warnings in the usual case, where
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews some clients set the RD bit in all queries.
92f60809e854ccf5f115883c6347e370da048848Mark Andrews 443. [bug] When loading a master file failed because of an
92f60809e854ccf5f115883c6347e370da048848Mark Andrews unrecognized RR type name, the error message
92f60809e854ccf5f115883c6347e370da048848Mark Andrews did not include the file name and line number.
f5d0f495847eb4eb9f0058e73051f855800bee0bMark Andrews 442. [bug] TSIG signed messages that did not match any view
f5d0f495847eb4eb9f0058e73051f855800bee0bMark Andrews crashed the server. [RT #290]
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews 441. [bug] Nodes obscured by a DNAME were inaccessible even
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews when DNS_DBFIND_GLUEOK was set.
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews 440. [func] New function dns_zone_forwardupdate().
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews 439. [func] New function dns_request_createraw().
114c14f8adfc249cf2e5cdcb9007af46fed257e3Mark Andrews 438. [func] New function dns_message_getrawmessage().
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews 437. [func] Log NOTIFY activity to the notify channel.
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews 436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,
8c850a29eda020642c84038e449d60f124c6123bMark Andrews which sometimes happens on Linux, named would enter
8c850a29eda020642c84038e449d60f124c6123bMark Andrews a busy loop. Also, unexpected socket errors were
8c850a29eda020642c84038e449d60f124c6123bMark Andrews not logged at a high enough logging level to be
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews useful in diagnosing this situation. [RT #275]
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews 435. [bug] dns_zone_dump() overwrote existing zone files
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews rather than writing to a temporary file and
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews renaming. This could lead to empty or partial
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews zone files being left around in certain error
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews conditions involving the initial transfer of a
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews slave zone, interfering with subsequent server
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews startup. [RT #282]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 434. [func] New function isc_file_isabsolute().
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews 433. [func] isc_base64_decodestring() now accepts newlines
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews within the base64 data. This makes it possible
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews to break up the key data in a "trusted-keys"
28c49640dcb25102e5040b8d957edd905ddf82f8Mark Andrews statement into multiple lines. [RT #284]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 432. [func] Added refresh/retry jitter. The actual refresh/
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt retry time is now a random value between 75% and
541b9722d8031485922ab11221c2e747c0262cf5Mark Andrews 100% of the configured value.
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews 431. [func] Log at ISC_LOG_INFO when a zone is successfully
a6f7fdcc039de75e9a20da90044caa814f0357a3Michael Graff 430. [bug] Rewrote the lightweight resolver client management
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews code to handle shutdown correctly and general
7e8214191899dc8043babdfbe9235ba14c825005Mark Andrews 429. [bug] The space reserved for a TSIG record in a response
7e8214191899dc8043babdfbe9235ba14c825005Mark Andrews was 2 bytes too short, leading to message
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews generation failures.
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews 428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
9429f5a8318bd2142280c949d4af05998ca348a2Evan Hunt DNS_R_BADDB for nodes which had neither NXT nor SIG NXT
9429f5a8318bd2142280c949d4af05998ca348a2Evan Hunt (e.g. glue). This could cause SERVFAILs when
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews generating negative responses in a secure zone.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews 427. [bug] Avoid going into an infinite loop when the validator
0899d16ebd6a70bb027e7899c53e7f542ebc987bEvan Hunt gets a negative response to a key query where the
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews records are signed by the missing key.
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews 426. [bug] Attempting to generate an oversized RSA key could
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews cause dnssec-keygen to dump core.
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews 425. [bug] Warn about the auth-nxdomain default value change
544d0efa38490d67e458aa9c23a7dac2a9d546bfMark Andrews if there is no auth-nxdomain statement in the
544d0efa38490d67e458aa9c23a7dac2a9d546bfMark Andrews config file. [RT #287]
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews 424. [bug] notify_createmessage() could trigger an assertion
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews failure when creating the notify message failed,
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews e.g. due to corrupt zones with multiple SOA records.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews 423. [bug] When responding to a recursive query, errors that occur
b6d496d53851e5ab5ba82e800062a431b05310cbEvan Hunt after following a CNAME should cause the query to fail.
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews 422. [func] get rid of isc_random_t, and make isc_random_get()
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr and isc_random_jitter() use rand() internally
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr instead of local state. Note that isc_random_*()
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews functions are only for weak, non-critical "randomness"
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews such as timing jitter and such.
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews 421. [bug] nslookup would exit when given a blank line as input.
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews 420. [bug] nslookup failed to implement the "exit" command.
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews 419. [bug] The certificate type PKIX was misspelled as SKIX.
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews 418. [bug] At debug levels >= 10, getting an unexpected
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews socket receive error would crash the server
c368f28dad471c70213b41f7a0ad1b4ef4d8c543Mark Andrews while trying to log the error message.
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews 417. [func] Add isc_app_block() and isc_app_unblock(), which
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews allow an application to handle signals while
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews 416. [bug] Slave zones with no master file tried to use a
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews NULL pointer for a journal file name when they
b239c8294a5653d21876d084e0c5b029f6b9fc5dMichael Graff received an IXFR. [RT #273]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 415. [bug] The logging code leaked file descriptors.
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews 414. [bug] Server did not shut down until all incoming zone
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews transfers were finished.
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews 413. [bug] Notify could attempt to use the zone database after
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews it had been unloaded. [RT#267]
05d2776f6fa8e3628555463b06cb43288c9ee68eEvan Hunt 412. [bug] named -v didn't print the version.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 411. [bug] A typo in the HS A code caused an assertion failure.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 410. [bug] lwres_gethostbyname() and company set lwres_h_errno
8327cdb88fdbf306eb4c37fe00a29aac4c2f55c5Evan Hunt to a random value on success.
f2d8c4a4c3dfa212ddcf5b86d4c5fced4965e52eMark Andrews 409. [bug] If named was shut down early in the startup
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews process, ns_omapi_shutdown() would attempt to lock
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews an uninitialized mutex. [RT #262]
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews 408. [bug] stub zones could leak memory and reference counts if
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews all the masters were unreachable.
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews 407. [bug] isc_rwlock_lock() would needlessly block
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews readers when it reached the read quota even
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews if no writers were waiting.
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr 406. [bug] Log messages were occasionally lost or corrupted
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr due to a race condition in isc_log_doit().
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews 405. [func] Add support for selective forwarding (forward zones)
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews 404. [bug] The request library didn't completely work with IPv6.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 403. [bug] "host" did not use the search list.
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews 402. [bug] Treat undefined acls as errors, rather than
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews warning and then later throwing an assertion.
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews 401. [func] Added simple database API.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 400. [bug] SIG(0) signing and verifying was done incorrectly.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 399. [bug] When reloading the server with a config file
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews containing a syntax error, it could catch an
a7b7a4ebc38ec7460e95da6d3d70ffe7b59573b8Mark Andrews assertion failure trying to perform zone
a7b7a4ebc38ec7460e95da6d3d70ffe7b59573b8Mark Andrews maintenance on, or sending notifies from,
1ca168b58e02fda534cad741a248e549e0f98d4dMark Andrews tentatively created zones whose views were
6f1b09965f26ab0d6c38dec4a38f67bb34ebddceMark Andrews never fully configured and lacked an address
23450c23fd19138cfad95b6c7728e2965abfc154Mark Andrews database and request manager.
de05f7d061abfe0ce555e0d0f2089f1261b031b6Mark Andrews 398. [bug] "dig" sometimes caught an assertion failure when
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews using TSIG, depending on the key length.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 397. [func] Added utility functions dns_view_gettsig() and
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews dns_view_getpeertsig().
c7e266b7e5675e12d1ca3cc929f24b3e86d41f8eEvan Hunt 396. [doc] There is now a man page for "nsupdate"
85db2b5fb360ccd2aeec1e6e22336b3d654bb39aMark Andrews 395. [bug] nslookup printed incorrect RR type mnemonics
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews for RRs of type >= 21 [RT #237].
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews 394. [bug] Current name was not propagated via $INCLUDE.
709220567fb820cf7e7625925449dadf86317629Mark Andrews 393. [func] Initial answer while loading (awl) support.
709220567fb820cf7e7625925449dadf86317629Mark Andrews Entry points: dns_master_loadfileinc(),
fe6b6eebd74f7c5c20088f67081ae690228f9744Mark Andrews dns_master_loadstreaminc(), dns_master_loadbufferinc().
adc3f2c0fdcc0a2bee469ffb0e7ae41b83cbf403Mark Andrews Note: calls to dns_master_load*inc() should be rate
adc3f2c0fdcc0a2bee469ffb0e7ae41b83cbf403Mark Andrews be rate limited so as to not use up all file
31a2f82193a91e24f31454ff18e0b7723c066a74Mark Andrews descriptors.
8731a2bd2f5483f50d82cf28e315090b7ceeed54Mark Andrews 392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does
8731a2bd2f5483f50d82cf28e315090b7ceeed54Mark Andrews not support the given address family requested.
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews 391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 390. [func] The function dns_zone_setdbtype() now takes
8a45eeebb8bdd4633bccfd9d77d9b50c1d337d54Mark Andrews an argc/argv style vector of words and sets
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews both the zone database type and its arguments,
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews making the functions dns_zone_adddbarg()
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews and dns_zone_cleardbargs() unnecessary.
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews 389. [bug] Attempting to send a request over IPv6 using
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews dns_request_create() on a system without IPv6
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews support caused an assertion failure [RT #235].
f568dad6c7ddaa732e6562a4b89fd2ac922d263bMark Andrews 388. [func] dig and host can now do reverse ipv6 lookups.
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews 387. [func] Add dns_byaddr_createptrname(), which converts
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews an address into the name used by a PTR query.
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews 386. [bug] Missing strdup() of ACL name caused random
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews ACL matching failures [RT #228].
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),
88a4de3c24caf71426bf06e42ce18f6099d7a439Mark Andrews and dns_zt_print().
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews 384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews of 2147483647.
c5adbd722da0908f91be4fb710c082b4b68ec782Mark Andrews 383. [func] When writing a master file, print the SOA and NS
c5adbd722da0908f91be4fb710c082b4b68ec782Mark Andrews records (and their SIGs) before other records.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 382. [bug] named -u failed on many Linux systems where the
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews libc provided kernel headers do not match
c60eaaf9b3c6bb4d693cdb5f68acdfacf076e1fdMark Andrews the current kernel.
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews 381. [bug] Check for IPV6_RECVPKTINFO and use it instead of
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews IPV6_PKTINFO if found. [RT #229]
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews 380. [bug] nsupdate didn't work with IPv6.
c0720b90ed6e673264b17eb752d873a89cbd6db5Mark Andrews 379. [func] New library function isc_sockaddr_anyofpf().
576e48e28aae9f28b8e6daa2aabc839bb5c520e3Mark Andrews 378. [func] named and lwresd will log the command line arguments
c06cb907737eb7ce128c92dd729c73798733f37aMark Andrews they were started with in the "starting ..." message.
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews 377. [bug] When additional data lookups were refused due to
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews "allow-query", the databases were still being
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews attached causing reference leaks.
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews 376. [bug] The server should always use good entropy when
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews performing cryptographic functions needing entropy.
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews 375. [bug] Per-zone "allow-query" did not properly override the
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews view/global one for CNAME targets and additional
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews data [RT #220].
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews 374. [bug] SOA in authoritative negative responses had wrong TTL.
f408773d47b25594d1302525a4db6efb84b1843cMark Andrews 373. [func] nslookup is now installed by "make install".
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews 372. [bug] Deal with Microsoft DNS servers appending two bytes of
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews garbage to zone transfer requests.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews 371. [bug] At high debug levels, doing an outgoing zone transfer
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews of a very large RRset could cause an assertion failure
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews during logging.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews 370. [bug] The error messages for roll-forward failures were
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews overly terse.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews 369. [func] Support new named.conf options, view and zone
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews max-retry-time, min-retry-time,
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews max-refresh-time, min-refresh-time.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews 368. [func] Restructure the internal ".bind" view so that more
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews zones can be added to it.
5888f62c204a99da60d7854fe01eda4960fb3b36Mark Andrews 367. [bug] Allow proper selection of server on nslookup command
7c200913aa7e55bbe28de456bb593c1e05bf6f79Mark Andrews 366. [func] Allow use of '-' batch file in dig for stdin.
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews 365. [bug] nsupdate -k leaked memory.
afd002e89aadf30181155566544480349e70339dMark Andrews 364. [func] Added additional-from-{cache,auth}
afd002e89aadf30181155566544480349e70339dMark Andrews 363. [placeholder]
ba5d2a97ee0cd2cc9d4b9e7e344ae8f607cc2994Mark Andrews 362. [bug] rndc no longer aborts if the configuration file is
ba5d2a97ee0cd2cc9d4b9e7e344ae8f607cc2994Mark Andrews missing an options statement. [RT #209]
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews 361. [func] When the RBT find or chain functions set the name and
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews origin for a node that stores the root label
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews the name is now set to an empty name, instead of ".",
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews to simplify later use of the name and origin by
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews dns_name_concatenate(), dns_name_totext() or
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews dns_name_format().
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews 360. [func] dns_name_totext() and dns_name_format() now allow
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews an empty name to be passed, which is formatted as "@".
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews 359. [bug] dnssec-signzone occasionally signed glue records.
f05a4bf2bfac3aaff0462560b2793cd99a85a297Mark Andrews 358. [cleanup] Rename the intermediate files used by the dnssec
bf45f72ed319628eebce60c368177320943d001fMark Andrews 357. [bug] The zone file parser crashed if the argument
bf45f72ed319628eebce60c368177320943d001fMark Andrews to $INCLUDE was a quoted string.
e078f002c06b6b26e2d7749a4f9e3907f3e85de3Mark Andrews 356. [cleanup] isc_task_send no longer requires event->sender to
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews be non-null.
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews 355. [func] Added isc_dir_createunique(), similar to mkdtemp().
6dd9692f45d6d98df89c32c12fa39a772d57320bMark Andrews 354. [doc] Man pages for the dnssec tools are now included in
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews the distribution, in doc/man/dnssec.
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews 353. [bug] double increment in lwres/gethost.c:copytobuf().
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews 352. [bug] Race condition in dns_client_t startup could cause
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews an assertion failure.
fc8197c3ce31d81cd5e23703680572fac09a2e8aMark Andrews 351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews signed query could crash the server.
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews 350. [bug] Also-notify lists specified in the global options
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews block were not correctly reference counted, causing
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews a memory leak.
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews 349. [bug] Processing a query with the CD bit set now works
4bb0f1046f3f3c26539ff91e28b3c8872519df17Mark Andrews as expected.
68df4d65c624a9ca06e94fc67ef915adf2ec97beMark Andrews 348. [func] New boolean named.conf options 'additional-from-auth'
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews and 'additional-from-cache' now supported in view and
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews global options statement.
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews 347. [bug] Don't crash if an argument is left off options in dig.
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews 346. [placeholder]
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews 345. [bug] Large-scale changes/cleanups to dig:
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews * Significantly improve structure handling
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews * Don't pre-load entire batch files
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews * Fix SIGINT handling
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews * Shorten timeouts to match v8's behavior
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews 344. [bug] When shutting down, lwresd sometimes tried
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews to shut down its client tasks twice,
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews triggering an assertion.
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews 343. [bug] Although zone maintenance SOA queries and
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews notify requests were signed with TSIG keys
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews when configured for the server in case,
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews the TSIG was not verified on the response.
63aaac8137bd1d86aab8c950fb066bb522a26e5bMark Andrews 342. [bug] The wrong name was being passed to
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews dns_name_dup() when generating a TSIG
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews key using TKEY.
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews 341. [func] Support 'key' clause in named.conf zone masters
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews statement to allow authentication via TSIG keys:
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews 10.0.0.1 port 5353 key "foo";
77397daf05511dc737eeec159badc05f11bfadddMark Andrews 340. [bug] The top-level COPYRIGHT file was missing from
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews the distribution.
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews 339. [bug] DNSSEC validation of the response to an ANY
f0a1b8c85792d4e04716f995a2b2a8ca73f8367dMark Andrews query at a name with a CNAME RR in a secure
a5d7c242b564cbd3cebc0dd27c19d9093d38b3abMark Andrews zone triggered an assertion failure.
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews 338. [bug] lwresd logged to syslog as named, not lwresd.
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews 337. [bug] "dig" did not recognize "nsap-ptr" as an RR type
7a253b705ccbc30821253e7a124658623f10c499Mark Andrews on the command line.
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews 336. [bug] "dig -f" used 64 k of memory for each line in
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews the file. It now uses much less, though still
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews proportionally to the file size.
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews 335. [bug] named would occasionally attempt recursion when
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews it was disallowed or undesired.
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews 334. [func] Added hmac-md5 to libisc.
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews 333. [bug] The resolver incorrectly accepted referrals to
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews domains that were not parents of the query name,
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews causing assertion failures.
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews 332. [func] New function dns_name_reset().
aaa42824d2d1f5cc4add01f0191e3784ee0f7396Mark Andrews 331. [bug] Only log "recursion denied" if RD is set. [RT #178]
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews 330. [bug] Many debugging messages were partially formatted
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews even when debugging was turned off, causing a
c1297b6025bf8ccdc832b7bca705da1d4cf2944eMark Andrews significant decrease in query performance.
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt 329. [func] omapi_auth_register() now takes a size_t argument for
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt the length of a key's secret data. Previously
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt OMAPI only stored secrets up to the first NUL byte.
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt 328. [func] Added isc_base64_decodestring().
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt 327. [bug] rndc.conf parser wasn't correctly recognizing an IP
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews address where a host specification was required.
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews 326. [func] 'keys' in an 'inet' control statement is now
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews required and must have at least one item in it.
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews A "not supported" warning is now issued if a 'unix'
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews control channel is defined.
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews 325. [bug] isc_lex_gettoken was processing octal strings when
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews ISC_LEXOPT_CNUMBER was not set.
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews 324. [func] In the resolver, turn EDNS0 off if there is no
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews response after a number of retransmissions.
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews This is to allow queries some chance of succeeding
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews even if all the authoritative servers of a zone
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews silently discard EDNS0 requests instead of
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews sending an error response like they ought to.
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews 323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews Because of this, servers authoritative for a parent
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews and grandchild zone but not authoritative for the
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews intervening child zone did not correctly issue
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews referrals to the servers of the child zone.
b130bf8b4ebdabd5c94eb5c6522a9971997b6ac9Mark Andrews 322. [bug] Queries for KEY RRs are now sent to the parent
62ea33ba1ab5dd4d8e0a83423f52fd7cb0783ecfMark Andrews server before the authoritative one, making
b130bf8b4ebdabd5c94eb5c6522a9971997b6ac9Mark Andrews DNSSEC insecurity proofs work in many cases
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews where they previously didn't.
7a3c2d189e811933c48aace1900a868dffd42f5fMark Andrews 321. [bug] When synthesizing a CNAME RR for a DNAME
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews response, query_addcname() failed to initialize
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews the type and class of the CNAME dns_rdata_t,
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews causing random failures.
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews 320. [func] Multiple rndc changes: parses an rndc.conf file,
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews uses authentication to talk to named, command
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews line syntax changed. This will all be described
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews 319. [func] The named.conf "controls" statement is now used
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews to configure the OMAPI command channel.
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews 318. [func] dns_c_ndcctx_destroy() could never return anything
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews except ISC_R_SUCCESS; made it have void return instead.
8c731c1219f1698f15bf5b1fcf6bc301cfd9bc42Mark Andrews 317. [func] Use callbacks from libomapi to determine if a
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews new connection is valid, and if a key requested
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews to be used with that connection is valid.
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews 316. [bug] Generate a warning if we detect an unexpected <eof>
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews but treat as <eol><eof>.
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews 315. [bug] Handle non-empty blanks lines. [RT #163]
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews 314. [func] The named.conf controls statement can now have
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews more than one key specified for the inet clause.
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews 313. [bug] When parsing resolv.conf, don't terminate on an
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews error. Instead, parse as much as possible, but
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews still return an error if one was found.
bde20a0436dff13e2299cfd4230ddec54d396d02Mark Andrews 312. [bug] Increase the number of allowed elements in the
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews resolv.conf search path from 6 to 8. If there
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews are more than this, ignore the remainder rather
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews than returning a failure in lwres_conf_parse.
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews 311. [bug] lwres_conf_parse failed when the first line of
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews resolv.conf was empty or a comment.
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews 310. [func] Changes to named.conf "controls" statement (inet
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews subtype only)
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews - support "keys" clause
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews inet * port 1024
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews allow { any; } keys { "foo"; }
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt - allow "port xxx" to be left out of statement,
7228a4d9ca1f1b868e257a28de86c6a1f21e9ffeMark Andrews in which case it defaults to omapi's default port
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews 309. [bug] When sending a referral, the server did not look
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews for name server addresses as glue in the zone
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews holding the NS RRset in the case where this zone
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews was not the same as the one where it looked for
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews name server addresses as authoritative data.
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews 308. [bug] Treat a SOA record not at top of zone as an error
10fc76d48aa7ecb8a7242970585ba154b368f97eMark Andrews when loading a zone. [RT #154]
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews 307. [bug] When canceling a query, the resolver didn't check for
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt isc_socket_sendto() calls that did not yet have their
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews completion events posted, so it could (rarely) end up
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews destroying the query context and then want to use
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews it again when the send event posted, triggering an
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews assertion as it tried to cancel an already-canceled
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt query. [RT #77]
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews 306. [bug] Reading HMAC-MD5 private key files didn't work.
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews 305. [bug] When reloading the server with a config file
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews containing a syntax error, it could catch an
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews assertion failure trying to perform zone
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews maintenance on tentatively created zones whose
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews views were never fully configured and lacked
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews an address database.
3d697a7eddf375586435f8fb6e1440fb3ce9058dMark Andrews 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
8943ff626fa337419cbffad6a4a910c7d99509f4Mark Andrews are listed in resolv.conf, silently ignore them
8943ff626fa337419cbffad6a4a910c7d99509f4Mark Andrews instead of returning failure.
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews 303. [bug] Add additional sanity checks to differentiate a AXFR
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews response vs a IXFR response. [RT #157]
5cd4555ad444fd391002ae32450572054369fd42Rob Austein 302. [bug] In dig, host, and nslookup, MXNAME should be large
5cd4555ad444fd391002ae32450572054369fd42Rob Austein enough to hold any legal domain name in presentation
8eb4eca37538183edb36db88580b5232f15931b0Mark Andrews format + terminating NULL.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 301. [bug] Uninitialized pointer in host:printmessage(). [RT #159]
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews 300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews on platforms lacking IPv6 because each included their
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews own ipv6 header file for the missing definitions. Now
fa3d0b9991ea0d8344881c5dd4609d9c33314b9bMark Andrews each library's ipv6.h defines the wrapper symbol of
e3f66e1617f9fca7313e4005b8c3c611551906d1Mark Andrews the other (ISC_IPV6_H and LWRES_IPV6_H).
ed954ce73b1c712b24eab945190028871433f803Mark Andrews 299. [cleanup] Get the user and group information before changing the
ed954ce73b1c712b24eab945190028871433f803Mark Andrews root directory, so the administrator does not need to
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews keep a copy of the user and group databases in the
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews chroot'ed environment. Suggested by Hakan Olsson.
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews 298. [bug] A mutex deadlock occurred during shutdown of the
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews interface manager under certain conditions.
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews Digital Unix systems were the most affected.
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews 297. [bug] Specifying a key name that wasn't fully qualified
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews in certain parts of the config file could cause
8d709e3ee443222cd35e44eadc9a4c0a8d92fec2Rob Austein an assertion failure.
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews 296. [bug] "make install" from a separate build directory
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews failed unless configure had been run in the source
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews directory, too.
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews 295. [bug] When invoked with type==CNAME and a message
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews not constructed by dns_message_parse(),
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews dns_message_findname() failed to find anything
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews due to checking for attribute bits that are set
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews only in dns_message_parse(). This caused an
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews infinite loop when constructing the response to
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews an ANY query at a CNAME in a secure zone.
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews 294. [bug] If we run out of space in while processing glue
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews when reading a master file and commit "current name"
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews reverts to "name_current" instead of staying as
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews "name_glue".
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews 293. [port] Add support for FreeBSD 4.0 system tests.
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews 292. [bug] Due to problems with the way some operating systems
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews handle simultaneous listening on IPv4 and IPv6
824cb6567555af556d0963d961798483d252eb5fMark Andrews addresses, the server no longer listens on IPv6
895ae38da194143331d667289affd3b43c5bfc14Mark Andrews addresses by default. To revert to the previous
824cb6567555af556d0963d961798483d252eb5fMark Andrews behavior, specify "listen-on-v6 { any; };" in
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews the config file.
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews 291. [func] Caching servers no longer send outgoing queries
58ea8fb1dfc8c055a7d4ad74d65e345436ede790Mark Andrews over TCP just because the incoming recursive query
58ea8fb1dfc8c055a7d4ad74d65e345436ede790Mark Andrews was a TCP one.
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews 290. [cleanup] +twiddle option to dig (for testing only) removed.
6769ce7c7b38ae31887203aa1770692b3be92705Tatuya JINMEI 神明達哉 289. [cleanup] dig is now installed in $bindir instead of $sbindir.
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews host is now installed in $bindir. (Be sure to remove
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews any $sbindir/dig from a previous release.)
f041bef2c60a092ab4dcae475451729a5345830fMark Andrews 288. [func] rndc is now installed by "make install" into $sbindir.
a7dd5f21e996b01262a3d564dae9561cb3f8e717Mark Andrews 287. [bug] rndc now works again as "rndc 127.1 reload" (for
92d23165938a5e595f80b2e3fb5d8cb918ac7dacMark Andrews only that task). Parsing its configuration file and
92d23165938a5e595f80b2e3fb5d8cb918ac7dacMark Andrews using digital signatures for authentication has been
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews disabled until named supports the "controls" statement,
289ae548d52bc8f982d9823af64cafda7bd92232Mark Andrews 286. [bug] On Solaris 2, when named inherited a signal state
4ccea866e64a8ec8525ad4bf7d57606bcd2fc15dMark Andrews where SIGHUP had the SIG_IGN action, SIGHUP would
4ccea866e64a8ec8525ad4bf7d57606bcd2fc15dMark Andrews be ignored rather than causing the server to reload
4cf228853d658a742a826393f341e2486c629f7bMark Andrews its configuration.
4cf228853d658a742a826393f341e2486c629f7bMark Andrews 285. [bug] A change made to the dst API for beta4 inadvertently
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews broke OMAPI's creation of a dst key from an incoming
1672cc63c190e073706a742ebaabc20ac4d2c916Mark Andrews message, causing an assertion to be triggered. Fixed.
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews 284. [func] The DNSSEC key generation and signing tools now
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews generate randomness from keyboard input on systems
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews 283. [cleanup] The 'lwresd' program is now a link to 'named'.
5de1ad63735deb0ea86b2d0a9366eddf5fbeddc1Mark Andrews 282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is
92ff69c60001ed270248a6f38bafd2ae12d029beMark Andrews too big for an unsigned long.
a1210da03636eca13c70502a2b132ead22481b70Mark Andrews 281. [bug] Fixed list of recognized config file category names.
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews 280. [func] Add isc-config.sh, which can be used to more
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews easily build applications that link with
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews our libraries.
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews 279. [bug] Private omapi function symbols shared between
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews two or more files in libomapi.a were not namespace
7c0946e74be897d02aaaf980ac146bcb500c2c8cMark Andrews protected using the ISC convention of starting with
7c0946e74be897d02aaaf980ac146bcb500c2c8cMark Andrews the library name and two underscores ("omapi__"...)
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 278. [bug] bin/named/logconf.c:category_fromconf() didn't take
09cbf84907de2bd088b4ce8bd1307938bf0e81baMark Andrews note of when isc_log_categorybyname() wasn't able
9e2789fd70b954df426b80301b62388497692481Mark Andrews to find the category name and would then apply the
9e2789fd70b954df426b80301b62388497692481Mark Andrews channel list of the unknown category to all categories.
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews 277. [bug] isc_log_categorybyname() and isc_log_modulebyname()
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews would fail to find the first member of any category
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews or module array apart from the internal defaults.
8af4bf165e9a6aa111e0b6bfcbcc7f4a741a8ae5Mark Andrews Thus, for example, the "notify" category was improperly
8af4bf165e9a6aa111e0b6bfcbcc7f4a741a8ae5Mark Andrews configured by named.
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews 276. [bug] dig now supports maximum sized TCP messages.
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews 275. [bug] The definition of lwres_gai_strerror() was missing
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews the lwres_ prefix.
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews 274. [bug] TSIG AXFR verify failed when talking to a BIND 8
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews 273. [func] The default for the 'transfer-format' option is
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews now 'many-answers'. This will break zone transfers
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews to BIND 4.9.5 and older unless there is an explicit
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews 'one-answer' configuration.
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews 272. [bug] The sending of large TCP responses was canceled
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews in mid-transmission due to a race condition
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews caused by the failure to set the client object's
e3582ce43119a95448ccc06ea2586f6547c92967Mark Andrews "newstate" variable correctly when transitioning
e3582ce43119a95448ccc06ea2586f6547c92967Mark Andrews to the "working" state.
2952abf7cbbba6c6f821ee18579ca29d87549574Mark Andrews 271. [func] Attempt to probe the number of cpus in named
efb82ed87e916c82b481bee4aa6651f2dbd4cedaMark Andrews if unspecified rather than defaulting to 1.
7c693bfdbe488ca8fa4f0831c71f5809972f6cc7Mark Andrews 270. [func] Allow maximum sized TCP answers.
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews 269. [bug] Failed DNSSEC validations could cause an assertion
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews failure by causing clone_results() to be called with
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews with hevent->node == NULL.
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews 268. [doc] A plain text version of the Administrator
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews Reference Manual is now included in the distribution,
2113dfd6e20a9ca16000ed226517b4660087c1f2Mark Andrews 267. [func] Nsupdate is now provided in the distribution.
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews 266. [bug] zone.c:save_nsrrset() node was not initialized.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 265. [bug] dns_request_create() now works for TCP.
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews 264. [func] Dispatch can not take TCP sockets in connecting
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews state. Set DNS_DISPATCHATTR_CONNECTED when calling
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews dns_dispatch_createtcp() for connected TCP sockets
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews or call dns_dispatch_starttcp() when the socket is
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews 263. [func] New logging channel type 'stderr'
240e57ab983296e6d52031a594d3345728191b48Mark Andrews channel some-name {
240e57ab983296e6d52031a594d3345728191b48Mark Andrews severity error;
cdb674387ca19dc8550553d90d8f9731befb6f1fMark Andrews 262. [bug] 'master' was not initialized in zone.c:stub_callback().
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews 261. [func] Add dns_zone_markdirty().
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews 260. [bug] Running named as a non-root user failed on Linux
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews kernels new enough to support retaining capabilities
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews after setuid().
d4f5efb4d63e2e17081a49a3457f05fe06fbb5abMark Andrews 259. [func] New random-device and random-seed-file statements
d4f5efb4d63e2e17081a49a3457f05fe06fbb5abMark Andrews for global options block of named.conf. Both accept
e560f615b2592deea69c49bfc74acbb56f4fd913Mark Andrews a single string argument.
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews 258. [bug] Fixed printing of lwres_addr_t.address field.
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews 257. [bug] The server detached the last zone manager reference
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews too early, while it could still be in use by queries.
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews This manifested itself as assertion failures during the
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews shutdown process for busy name servers. [RT #133]
dbfc2232ef5b6e5572480070ab87a4d67c18aa39Mark Andrews 256. [func] isc_ratelimiter_t now has attach/detach semantics, and
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews isc_ratelimiter_shutdown guarantees that the rate
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews limiter is detached from its task.
393e4679cf4dd8bafb031d8a61ece95af61fbedcMark Andrews 255. [func] New function dns_zonemgr_attach().
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews 254. [bug] Suppress "query denied" messages on additional data
67b1eee9dfde5ad86b54b2b768ff4d6b1354b651Mark Andrews --- 9.0.0b4 released ---
431fd1b0b5c3c049f9397ed4be8915715ead9cdbMark Andrews 253. [func] resolv.conf parser now recognizes ';' and '#' as
cc7d91bd5c6b9be5a3c67a99112b885602c24873Mark Andrews comments (anywhere in line, not just as the beginning).
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews 252. [bug] resolv.conf parser mishandled masks on sortlists.
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews It also aborted when an unrecognized keyword was seen,
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews now it silently ignores the entire line.
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews 251. [bug] lwresd caught an assertion failure on startup.
3b572928731d3595990fe360c80977a2d043eb02Tatuya JINMEI 神明達哉 250. [bug] fixed handling of size+unit when value would be too
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews large for internal representation.
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews 249. [cleanup] max-cache-size config option now takes a size-spec
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews like 'datasize', except 'default' is not allowed.
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews 248. [bug] global lame-ttl option was not being printed when
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews config structures were written out.
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews 247. [cleanup] Rename cache-size config option to max-cache-size.
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews 246. [func] Rename global option cachesize to cache-size and
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews add corresponding option to view statement.
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews 245. [bug] If an uncompressed name will take more than 255
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews bytes and the buffer is sufficiently long,
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews dns_name_fromwire should return DNS_R_FORMERR,
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews not ISC_R_NOSPACE. This bug caused cause the
0b5d8941bb41edbe1296619485c16df536ecc05fMark Andrews server to catch an assertion failure when it
0b5d8941bb41edbe1296619485c16df536ecc05fMark Andrews received a query for a name longer than 255
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews 244. [bug] empty named.conf file and empty options statement are
a34d19803a206febe10866394393ec1c09b28984Mark Andrews now parsed properly.
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews 243. [func] new cachesize option for named.conf
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews 242. [cleanup] fixed incorrect warning about auth-nxdomain usage.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 241. [cleanup] nscount and soacount have been removed from the
2db8db63992d081c75d664340866e2a21913705dMark Andrews dns_master_*() argument lists.
2db8db63992d081c75d664340866e2a21913705dMark Andrews 240. [func] databases now come in three flavours: zone, cache
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews 239. [func] If ISC_MEM_DEBUG is enabled, the variable
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews isc_mem_debugging controls whether messages
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews are printed or not.
8626c376a038da969de1ee6c158957dfe638daacMark Andrews 238. [cleanup] A few more compilation warnings have been quieted:
8626c376a038da969de1ee6c158957dfe638daacMark Andrews + missing sigwait prototype on BSD/OS 4.0/4.0.1.
c6ee5082db1e40ab64e08a540620da79996efa9cTatuya JINMEI 神明達哉 + PTHREAD_ONCE_INIT unbraced initializer warnings on
c6ee5082db1e40ab64e08a540620da79996efa9cTatuya JINMEI 神明達哉 + IN6ADDR_ANY_INIT unbraced initializer warnings on
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews BSD/OS 4.*, Linux and Solaris 2.8.
f5a156fa25e6d341e703782de6368fbe9e256ddeTatuya JINMEI 神明達哉 237. [bug] If connect() returned ENOBUFS when the resolver was
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews initiating a TCP query, the socket didn't get
78ff0e94eae96f2cf8bf94454d8ff01ba280d30dMark Andrews destroyed, and the server did not shut down cleanly.
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews 236. [func] Added new listen-on-v6 config file statement.
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews 235. [func] Consider it a config file error if a listen-on
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews statement has an IPv6 address in it, or a
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews listen-on-v6 statement has an IPv4 address in it.
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews 234. [bug] Allow a trusted-key's first field (domain-name) be
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews either a quoted or an unquoted string, instead of
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews requiring a quoted string.
d79296d147cd4c35784dd3efd7ed7f09d976ee61Mark Andrews 233. [cleanup] Convert all config structure integer values to unsigned
4f5a43c5f084290054ddf212add7b4c2abe6edc5Tatuya JINMEI 神明達哉 integer (isc_uint32_t) to match grammar.
46390a96dd5f15c9a0b3663bdb7791bdecec3052Mark Andrews 232. [bug] Allow slave zones to not have a file.
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews 231. [func] Support new 'port' clause in config file options
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews section. Causes 'listen-on', 'masters' and
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews 'also-notify' statements to use its value instead of
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews default (53).
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews 230. [func] Replace the dst sign/verify API with a cleaner one.
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews 229. [func] Support config file sig-validity-interval statement
5d51f534831bd648436d22e4faf203fb9abdf3d4Mark Andrews in options, views and zone statements (master
5d51f534831bd648436d22e4faf203fb9abdf3d4Mark Andrews zones only).
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews 228. [cleanup] Logging messages in config module stripped of
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews trailing period.
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews 227. [cleanup] The enumerated identifiers dns_rdataclass_*,
15bda409010cbf2d3e43baf10f28bae5f7b1abefMark Andrews dns_rcode_*, dns_opcode_*, and dns_trust_* are
15bda409010cbf2d3e43baf10f28bae5f7b1abefMark Andrews also now cast to their appropriate types, as with
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews dns_rdatatype_* in item number 225 below.
b5205d860b1672c405c57004e6823af873799b42Mark Andrews 226. [func] dns_name_totext() now always prints the root name as
9a1e8f1baf3e5c53d6b6bfa97d7f60cb3358e404Mark Andrews '.', even when omit_final_dot is true.
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews 225. [cleanup] The enumerated dns_rdatatype_* identifiers are now
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews cast to dns_rdatatype_t via macros of their same name
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews so that they are of the proper integral type wherever
12b1bf8b14ac3b6ec4de9cae6fea10f389b5e5dbMark Andrews a dns_rdatatype_t is needed.
12b1bf8b14ac3b6ec4de9cae6fea10f389b5e5dbMark Andrews 224. [cleanup] The entire project builds cleanly with gcc's
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews -Wcast-qual and -Wwrite-strings warnings enabled,
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews which is now the default when using gcc. (Warnings
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews from confparser.c, because of yacc's code, are
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews unfortunately to be expected.)
529035492ea0a427cc8d007cd743934d4494d9d3Mark Andrews 223. [func] Several functions were re-prototyped to qualify one
ff6bd86d5778de50cb1b4e93591e22354062ee17Mark Andrews or more of their arguments with "const". Similarly,
11e43ff752bab2983d9328b6624bbcef613a93e1Mark Andrews several functions that return pointers now have
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews those pointers qualified with const.
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews 222. [bug] The global 'also-notify' option was ignored.
cd6d8d61b076eea02826596334a105b918393627Mark Andrews 221. [bug] An uninitialized variable was sometimes passed to
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews dns_rdata_freestruct() when loading a zone, causing
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews an assertion failure.
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews 220. [cleanup] Set the default outgoing port in the view, and
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews set it in sockaddrs returned from the ADB.
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews [31-May-2000 explorer]
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews 219. [bug] Signed truncated messages more correctly follow
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews the respective specs.
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews 218. [func] When an rdataset is signed, its ttl is normalized
5c45d30402af6860e1f66f5aa7d78dff58373b27Mark Andrews based on the signature validity period.
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews 217. [func] Also-notify and trusted-keys can now be used in
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews the 'view' statement.
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews 216. [func] The 'max-cache-ttl' and 'max-ncache-ttl' options
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews 215. [bug] Failures at certain points in request processing
7b68fa6229f1edadac44c7ec459c9ed77a8368c8Mark Andrews could cause the assertion INSIST(client->lockview
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews == NULL) to be triggered.
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews 214. [func] New public function isc_netaddr_format(), for
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews formatting network addresses in log messages.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 213. [bug] Don't leak memory when reloading the zone if
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews an update-policy clause was present in the old zone.
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews 212. [func] Added dns_message_get/settsigkey, to make TSIG
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews key management reasonable.
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr 211. [func] The 'key' and 'server' statements can now occur
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr inside 'view' statements.
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews 210. [bug] The 'allow-transfer' option was ignored for slave
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews zones, and the 'transfers-per-ns' option was
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews was ignored for all zones.
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews 209. [cleanup] Upgraded openssl files to new version 0.9.5a
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins 208. [func] Added ISC_OFFSET_MAXIMUM for the maximum value
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins of an isc_offset_t.
f19353d73186913a6e0f0f766c1f72e5f4c5e9e1Tatuya JINMEI 神明達哉 207. [func] The dnssec tools properly use the logging subsystem.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 206. [cleanup] dst now stores the key name as a dns_name_t, not
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews 205. [cleanup] On IRIX, turn off the mostly harmless warnings 1692
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews ("prototyped function redeclared without prototype")
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews and 1552 ("variable ... set but not used") when
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews compiling in the lib/dns/sec/{dnssafe,openssl}
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews directories, which contain code imported from outside
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews 204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews to quiet the warnings that "The linked output may not
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews run on a PA 1.x system."
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 203. [func] notify and zone soa queries are now tsig signed when
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews appropriate.
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews 202. [func] isc_lex_getsourceline() changed from returning int
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews to returning unsigned long, the type of its underlying
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews 201. [cleanup] Removed the test/sdig program, it has been
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews --- 9.0.0b3 released ---
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews 200. [bug] Failures in sending query responses to clients
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews (e.g., running out of network buffers) were
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews 199. [bug] isc_heap_delete() sometimes violated the heap
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews invariant, causing timer events not to be posted
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews 198. [func] Dispatch managers hold memory pools which
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews any managed dispatcher may use. This allows
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews us to avoid dipping into the memory context for
daba3af103617ce4dd49bfdd0d9e07df7f22d08dMark Andrews most allocations. [19-May-2000 explorer]
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews 197. [bug] When an incoming AXFR or IXFR completes, the
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews zone's internal state is refreshed from the
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews SOA data. [19-May-2000 explorer]
ac124a78a097a0840992c5726cbbdaf1448b6ab3Mark Andrews 196. [func] Dispatchers can be shared easily between views
d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews and/or interfaces. [19-May-2000 explorer]
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews 195. [bug] Including the NXT record of the root domain
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews in a negative response caused an assertion
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews 194. [doc] The PDF version of the Administrator's Reference
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews Manual is no longer included in the ISC BIND9
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews distribution.
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews 193. [func] changed dst_key_free() prototype.
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews 192. [bug] Zone configuration validation is now done at end
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews of config file parsing, and before loading
25c18fded02c5df8391a333e90ea776b52bff079Mark Andrews 191. [func] Patched to compile on UnixWare 7.x. This platform
25c18fded02c5df8391a333e90ea776b52bff079Mark Andrews is not directly supported by the ISC.
7042126e8a10315255144989f7723f0510558928Mark Andrews 190. [cleanup] The DNSSEC tools have been moved to a separate
7042126e8a10315255144989f7723f0510558928Mark Andrews directory dnssec/ and given the following new,
7042126e8a10315255144989f7723f0510558928Mark Andrews more descriptive names:
2c4ae1d331c98beba03a337a58e9b44aec98d663Mark Andrews dnssec-keygen
2c4ae1d331c98beba03a337a58e9b44aec98d663Mark Andrews dnssec-signzone
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews dnssec-signkey
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews dnssec-makekeyset
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews Their command line arguments have also been changed to
c4008fdd56a8045802ed125e40a06bf1df9b7fbeMark Andrews be more consistent. dnssec-keygen now prints the
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews name of the generated key files (sans extension)
c4008fdd56a8045802ed125e40a06bf1df9b7fbeMark Andrews on standard output to simplify its use in automated
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews 189. [func] isc_time_secondsastimet(), a new function, will ensure
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews that the number of seconds in an isc_time_t does not
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews exceed the range of a time_t, or return ISC_R_RANGE.
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews Similarly, isc_time_now(), isc_time_nowplusinterval(),
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews isc_time_add() and isc_time_subtract() now check the
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews range for overflow/underflow. In the case of
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews isc_time_subtract, this changed a calling requirement
d00e58d4814b45c13434721b5771782e485dcb73Mark Andrews (ie, something that could generate an assertion)
d00e58d4814b45c13434721b5771782e485dcb73Mark Andrews into merely a condition that returns an error result.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews isc_time_add() and isc_time_subtract() were void-
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews valued before but now return isc_result_t.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews 188. [func] Log a warning message when an incoming zone transfer
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews contains out-of-zone data.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews 187. [func] isc_ratelimiter_enqueue() has an additional argument
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 186. [func] dns_request_getresponse() has an additional argument
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews 'preserve_order'.
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews 185. [bug] Fixed up handling of ISC_MEMCLUSTER_LEGACY. Several
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews public functions did not have an isc__ prefix, and
6e373c502584f9292e964378411d296c8259026bMark Andrews referred to functions that had previously been
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews 184. [cleanup] Variables/functions which began with two leading
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews underscores were made to conform to the ANSI/ISO
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews standard, which says that such names are reserved.
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews 183. [func] ISC_LOG_PRINTTAG option for log channels. Useful
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews for logging the program name or other identifier.
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews 182. [cleanup] New command-line parameters for dnssec tools
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews 181. [func] Added dst_key_buildfilename and dst_key_parsefilename
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews 180. [func] New isc_result_t ISC_R_RANGE. Supersedes DNS_R_RANGE.
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews 179. [func] options named.conf statement *must* now come
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews before any zone or view statements.
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews 178. [func] Post-load of named.conf check verifies a slave zone
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews has non-empty list of masters defined.
d140ae28347065500e7efb1ebe884f1606f9ac7bMark Andrews 177. [func] New per-zone boolean:
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews enable-zone yes | no ;
cf029c9369548e598379490a039cfbc2b83527eeMark Andrews intended to let a zone be disabled without having
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews to comment out the entire zone statement.
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews 176. [func] New global and per-view option:
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews max-cache-ttl number
c9eaf357a31ea5eaeeed24f2f4e800a6ef9512e0Mark Andrews 175. [func] New global and per-view option:
3fc7753efdc33559978ce61785961b1305944077Mark Andrews additional-data internal | minimal | maximal;
3fc7753efdc33559978ce61785961b1305944077Mark Andrews 174. [func] New public function isc_sockaddr_format(), for
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews formatting socket addresses in log messages.
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews 173. [func] Keep a queue of zones waiting for zone transfer
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews quota so that a new transfer can be dispatched
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews immediately whenever quota becomes available.
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews 172. [bug] $TTL directive was sometimes missing from dumped
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews master files because totext_ctx_init() failed to
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews initialize ctx->current_ttl_valid.
a957b9ccdccf519018e06213a27e1b70b8dc4640Mark Andrews 171. [cleanup] On NetBSD systems, the mit-pthreads or
4ff0e3c8afbbbc30473701c47d75e1d7829bae3eMark Andrews unproven-pthreads library is now always used
4ff0e3c8afbbbc30473701c47d75e1d7829bae3eMark Andrews unless --with-ptl2 is explicitly specified on
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed the configure command line. The
9a33e2d135b0de7d2e2d768f2b9c45b2627fe4e6Mark Andrews --with-mit-pthreads option is no longer needed
9a33e2d135b0de7d2e2d768f2b9c45b2627fe4e6Mark Andrews and has been removed.
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews 170. [cleanup] Remove inter server consistency checks from zone,
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews these should return as a separate module in 9.1.
94b58e01ae98764a045e18581d7aaf05d2889e60Mark Andrews dns_zone_checkservers(), dns_zone_checkparents(),
94b58e01ae98764a045e18581d7aaf05d2889e60Mark Andrews dns_zone_checkchildren(), dns_zone_checkglue().
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews Remove dns_zone_setadb(), dns_zone_setresolver(),
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews dns_zone_setrequestmgr() these should now be found
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews via the view.
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews 169. [func] ratelimiter can now process N events per interval.
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews 168. [bug] include statements in named.conf caused syntax errors
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews due to not consuming the semicolon ending the include
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews statement before switching input streams.
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews 167. [bug] Make lack of masters for a slave zone a soft error.
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews 166. [bug] Keygen was overwriting existing keys if key_id
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews conflicted, now it will retry, and non-null keys
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews with key_id == 0 are not generated anymore. Key
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews was not able to generate NOAUTHCONF DSA key,
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews increased RSA key size to 2048 bits.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews 165. [cleanup] Silence "end-of-loop condition not reached" warnings
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews from Solaris compiler.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews 164. [func] Added functions isc_stdio_open(), isc_stdio_close(),
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews isc_stdio_seek(), isc_stdio_read(), isc_stdio_write(),
6178552326050b16f5706ee63c931e9388d74318Mark Andrews isc_stdio_flush(), isc_stdio_sync(), isc_file_remove()
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews to encapsulate nonportable usage of errno and sync.
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews 163. [func] Added result codes ISC_R_FILENOTFOUND and
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews ISC_R_FILEEXISTS.
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews 162. [bug] Ensure proper range for arguments to ctype.h functions.
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews 161. [cleanup] error in yyparse prototype that only HPUX caught.
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews 160. [cleanup] getnet*() are not going to be implemented at this
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews 159. [func] Redefinition of config file elements is now an
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews error (instead of a warning).
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 158. [bug] Log channel and category list copy routines
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews weren't assigning properly to output parameter.
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews 157. [port] Fix missing prototype for getopt().
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews 156. [func] Support new 'database' statement in zone.
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews database "quoted-string";
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews 155. [bug] ns_notify_start() was not detaching the found zone.
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews 154. [func] The signer now logs libdns warnings to stderr even when
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews not verbose, and in a nicer format.
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews 153. [func] dns_rdata_tostruct() 'mctx' is now optional. If 'mctx'
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews is NULL then you need to preserve the 'rdata' until
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews you have finished using the structure as there may be
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews references to the associated memory. If 'mctx' is
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews non-NULL it is guaranteed that there are no references
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews to memory associated with 'rdata'.
2a90390deeff6ba07125bfb2c81ab4b582eb2777Mark Andrews dns_rdata_freestruct() must be called if 'mctx' was
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews non-NULL and may safely be called if 'mctx' was NULL.
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews 152. [bug] keygen dumped core if domain name argument was omitted
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews from command line.
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews 151. [func] Support 'disabled' statement in zone config (causes
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews zone to be parsed and then ignored). Currently must
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews come after the 'type' clause.
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews 150. [func] Support optional ports in masters and also-notify
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews 149. [cleanup] Removed unused argument 'olist' from
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews dns_c_view_unsetordering().
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews 148. [cleanup] Stop issuing some warnings about some configuration
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews file statements that were not implemented, but now are.
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews 147. [bug] Changed yacc union size to be smaller for yaccs that
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews put yacc-stack on the real stack.
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews 146. [cleanup] More general redundant header file cleanup. Rather
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews than continuing to itemize every header which changed,
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews this changelog entry just notes that if a header file
57e4191a112bf57a1eab6d37212df2531b6f8a16Mark Andrews did not need another header file that it was including
7d116211ec7b063891130f191e3ed437b45dba70Mark Andrews in order to provide its advertised functionality, the
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews inclusion of the other header file was removed. See
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews util/check-includes for how this was tested.
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews 145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews ISC_LANG_ENDDECLS to header files that had function
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews prototypes, and removed it from those that did not.
203629e729b756601646c639c0dbfb267030a617Mark Andrews 144. [cleanup] libdns header files too numerous to name were made
8af4e7aa4e2a6fe84bf4ebe09ca1d4ef1d8ab593Mark Andrews to conform to the same style for multiple inclusion
d08c5dfcd4d1f69004c1382ffc00cc1848dcd1a3Mark Andrews 143. [func] Added function dns_rdatatype_isknown().
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews 142. [cleanup] <isc/stdtime.h> does not need <time.h> or
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews 141. [bug] Corrupt requests with multiple questions could
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews cause an assertion failure.
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews 140. [cleanup] <isc/time.h> does not need <time.h> or <isc/result.h>.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 139. [cleanup] <isc/net.h> now includes <isc/types.h> instead of
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews 138. [cleanup] isc_strtouq moved from str.[ch] to string.[ch] and
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews renamed isc_string_touint64. isc_strsep moved from
9547d3e03bb082d73aeabb497b60632ebfdc78a6Mark Andrews strsep.c to string.c and renamed isc_string_separate.
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews 137. [cleanup] <isc/commandline.h>, <isc/mem.h>, <isc/print.h>
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews <isc/serial.h>, <isc/string.h> and <isc/offset.h>
7c61d798f54f7c19f87d46a0df775e0e58fe7d30Mark Andrews made to conform to the same style for multiple
7c61d798f54f7c19f87d46a0df775e0e58fe7d30Mark Andrews inclusion protection.
e23932d3c8c154cff3fea0ecff64e26c6ac6f5d8Mark Andrews 136. [cleanup] <isc/commandline.h>, <isc/interfaceiter.h>,
885e60828681cecd17bccbe5ceff8f4e75ef4c5cMark Andrews 135. [cleanup] Win32's <isc/condition.h> did not need <isc/result.h>
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt or <isc/boolean.h>, now uses <isc/types.h> in place
8ec056723666c71a499880ffa415661f37ffd08eMark Andrews of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
037b732f88edc943f3141e0342dc993156e3abf3Mark Andrews and ISC_LANG_ENDDECLS.
80a609bf44ee09766aeb9ae02cfbf7f9fe86dd83Mark Andrews 134. [cleanup] <isc/dir.h> does not need <limits.h>.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 133. [cleanup] <isc/ipv6.h> needs <isc/platform.h>.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 132. [cleanup] <isc/app.h> does not need <isc/task.h>, but does
85708f9aabbfe31fc648c90258ae18ce0edc3488Mark Andrews 131. [cleanup] <isc/mutex.h> and <isc/util.h> need <isc/result.h>
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews for ISC_R_* codes used in macros.
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews 130. [cleanup] <isc/condition.h> does not need <pthread.h> or
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews <isc/boolean.h>, and now includes <isc/types.h>
cf0bcc2c80ca99f1e6e53dcdd0eba03fe70723dfMark Andrews 129. [bug] The 'default_debug' log channel was not set up when
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews 'category default' was present in the config file
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews ISC_LANG_ENDDECLS at end of header.
03e200df5dc283f24a6a349f0b31d3eab26da893Mark Andrews 127. [cleanup] The contracts for the comparison routines
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews dns_name_fullcompare(), dns_name_compare(),
6672b3524c2305d8c66d8189c774f549be352ac0Mark Andrews dns_name_rdatacompare(), and dns_rdata_compare() now
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews specify that the order value returned is < 0, 0, or > 0
74f261bd2b7846d8e730ca3a1b28d6503de5c74aMark Andrews instead of -1, 0, or 1.
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews 126. [cleanup] <isc/quota.h> and <isc/taskpool.h> need <isc/lang.h>.
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews 125. [cleanup] <isc/eventclass.h>, <isc/ipv6.h>, <isc/magic.h>,
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews <isc/mutex.h>, <isc/once.h>, <isc/region.h>, and
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews 124. [func] signer now imports parent's zone key signature
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews and creates null keys/sets zone status bit for
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews children when necessary
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews 123. [cleanup] <isc/event.h> does not need <stddef.h>.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 122. [cleanup] <isc/task.h> does not need <isc/mem.h> or
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 121. [cleanup] <isc/symtab.h> does not need <isc/mem.h> or
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews <isc/result.h>. Multiple inclusion protection
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews symbol fixed from ISC_SYMBOL_H to ISC_SYMTAB_H.
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews isc_symtab_t moved to <isc/types.h>.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 120. [cleanup] <isc/socket.h> does not need <isc/boolean.h>,
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews <isc/bufferlist.h>, <isc/task.h>, <isc/mem.h> or
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews 119. [cleanup] structure definitions for generic rdata structures do
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews not have _generic_ in their names.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
74a14c4eb8518a9cc31cb5a918547a93d0c0e838Mark Andrews YACC crust (yyparse, etc) [2000-apr-27 explorer]
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews 117. [cleanup] libdns.a changes:
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews dns_zone_clearnotify() and dns_zone_addnotify()
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews are replaced by dns_zone_setnotifyalso().
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews dns_zone_clearmasters() and dns_zone_addmaster()
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews are replaced by dns_zone_setmasters().
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
7c678cfe0bd477ded2995b9490d72edf7bc76a84Mark Andrews on Unix systems).
a20e888bde4b307050d76e09266b2fb49f03bc30Mark Andrews 115. [port] Shut up the -Wmissing-declarations warning about
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews 114. [cleanup] <isc/sockaddr.h> does not need <isc/buffer.h> or
611ec5dd43d31fd6385f1a94c2f0865375f452b4Mark Andrews 113. [func] Utility programs dig and host added.
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews 112. [cleanup] <isc/serial.h> does not need <isc/boolean.h>.
01b8bc018d83e757b0578723977b0a71e1e626f8Mark Andrews 111. [cleanup] <isc/rwlock.h> does not need <isc/result.h> or
8abe06b25d245ab2955d81525bfe6bd29b80908eMark Andrews 110. [cleanup] <isc/result.h> does not need <isc/boolean.h> or
7755f5932a3e59d0c6a2506cc94519de92b91ca6Mark Andrews 109. [bug] "make depend" did nothing for
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews bin/tests/{db,mem,sockaddr,tasks,timers}/.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 107. [func] Add keysigner and keysettool.
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews 106. [func] Allow dnssec verifications to ignore the validity
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews period. Used by several of the dnssec tools.
0563d476dea35a60a59857cc8bd26ef276d78799Mark Andrews 105. [doc] doc/dev/coding.html expanded with other
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews implicit conventions the developers have used.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 104. [bug] Made compress_add and compress_find static to
2b3e34f03675d6c71a654fe2094f3b9c063a70eaMark Andrews 103. [func] libisc buffer API changes for <isc/buffer.h>:
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews isc_buffer_base(b) (pointer)
7216566bd596f8fbc98eafd5e9359ec7fa92c8b8Mark Andrews isc_buffer_current(b) (pointer)
7216566bd596f8fbc98eafd5e9359ec7fa92c8b8Mark Andrews isc_buffer_active(b) (pointer)
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews isc_buffer_used(b) (pointer)
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews isc_buffer_length(b) (int)
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews isc_buffer_usedlength(b) (int)
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews isc_buffer_consumedlength(b) (int)
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews isc_buffer_remaininglength(b) (int)
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews isc_buffer_activelength(b) (int)
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews isc_buffer_availablelength(b) (int)
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews ISC_BUFFER_USEDCOUNT(b)
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews ISC_BUFFER_AVAILABLECOUNT(b)
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews isc_buffer_type(b)
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews Changed names:
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews isc_buffer_used(b, r) ->
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews isc_buffer_usedregion(b, r)
2bef3713093349af52ba61eaab07adf3207da873Mark Andrews isc_buffer_available(b, r) ->
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews isc_buffer_available_region(b, r)
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews isc_buffer_consumed(b, r) ->
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews isc_buffer_consumedregion(b, r)
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews isc_buffer_active(b, r) ->
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews isc_buffer_activeregion(b, r)
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews isc_buffer_remaining(b, r) ->
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews isc_buffer_remainingregion(b, r)
ad226e3da3207fcb1dbb1054dd339dbbd19f507aMark Andrews Buffer types were removed, so the ISC_BUFFERTYPE_*
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews macros are no more, and the type argument to
9b80f3a7c739a99b498a37a711a51b6a88df3a78Mark Andrews isc_buffer_init and isc_buffer_allocate were removed.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews isc_buffer_putstr is now void (instead of isc_result_t)
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews and requires that the caller ensure that there
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews is enough available buffer space for the string.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 102. [port] Correctly detect inet_aton, inet_pton and inet_ptop
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
e8e62bb7829e88fc56360f7edc021dc8493a8704Mark Andrews 100. [cleanup] <isc/random.h> does not need <isc/int.h> or
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews <isc/mutex.h>. isc_random_t moved to <isc/types.h>.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 99. [cleanup] Rate limiter now has separate shutdown() and
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews destroy() functions, and it guarantees that all
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews queued events are delivered even in the shutdown case.
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews 98. [cleanup] <isc/print.h> does not need <stdarg.h> or <stddef.h>
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews unless ISC_PLATFORM_NEEDVSNPRINTF is defined.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 97. [cleanup] <isc/ondestroy.h> does not need <stddef.h> or
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews 96. [cleanup] <isc/mutex.h> does not need <isc/result.h>.
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews 95. [cleanup] <isc/mutexblock.h> does not need <isc/result.h>.
1c153afce556ff3c687986fb7c4a0b0a7f5e7cd8Mark Andrews 94. [cleanup] Some installed header files did not compile as C++.
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews 93. [cleanup] <isc/msgcat.h> does not need <isc/result.h>.
a5768d889b4e139e78f2b1d9433f3e9f8d225ff4Mark Andrews 92. [cleanup] <isc/mem.h> does not need <stddef.h>, <isc/boolean.h>,
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews 91. [cleanup] <isc/log.h> does not need <sys/types.h> or
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews 90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews 89. [cleanup] <isc/lex.h> does not need <stddef.h>.
05331ce161276d879711342fadbc6144af7f5ba6Mark Andrews 88. [cleanup] <isc/interfaceiter.h> does not need <isc/result.h> or
05331ce161276d879711342fadbc6144af7f5ba6Mark Andrews <isc/mem.h>. isc_interface_t and isc_interfaceiter_t
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews 87. [cleanup] <isc/heap.h> does not need <isc/boolean.h>,
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews 86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
2fa0485e9e969dd42dd10339354d7949db46111aMark Andrews 85. [cleanup] <isc/bufferlist.h> does not need <isc/buffer.h>,
437404e8313481329baa5897eeda8c45bf748553Mark Andrews 84. [func] allow-query ACL checks now apply to all data
ef67e6d8fa86d98a2c0defc43b624434324d9ce7Mark Andrews added to a response.
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews 83. [func] If the server is authoritative for both a
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews delegating zone and its (nonsecure) delegatee, and
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews a query is made for a KEY RR at the top of the
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews delegatee, then the server will look for a KEY
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews in the delegator if it is not found in the delegatee.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 82. [cleanup] <isc/buffer.h> does not need <isc/list.h>.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 81. [cleanup] <isc/int.h> and <isc/boolean.h> do not need
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews 80. [cleanup] <isc/print.h> does not need <stdio.h> or <stdlib.h>.
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews 79. [cleanup] <dns/callbacks.h> does not need <stdio.h>.
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews 78. [cleanup] lwres_conftest renamed to lwresconf_test for
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews consistency with other *_test programs.
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews 77. [cleanup] typedef of isc_time_t and isc_interval_t moved from
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein 76. [cleanup] Rewrote keygen.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein 75. [func] Don't load a zone if its database file is older
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews than the last time the zone was loaded.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews 74. [cleanup] Removed mktemplate.o and ufile.o from libisc.a,
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews 73. [func] New "file" API in libisc, including new function
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews isc_file_getmodtime, isc_mktemplate renamed to
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews isc_file_mktemplate and isc_ufile renamed to
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews isc_file_openunique. By no means an exhaustive API,
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews it is just what's needed for now.
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews 72. [func] DNS_RBTFIND_NOPREDECESSOR and DNS_RBTFIND_NOOPTIONS
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews added for dns_rbt_findnode, the former to disable the
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews setting of the chain to the predecessor, and the
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews latter to make clear when no options are set.
d73541ea2eebe01cafc5ff1b2ba4b9a8f75237b1Mark Andrews 71. [cleanup] Made explicit the implicit REQUIREs of
46cb442c5c53f16ece23bfe7f7f7bf44f78b0e46Mark Andrews isc_time_seconds, isc_time_nanoseconds, and
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews isc_time_subtract.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 70. [func] isc_time_set() added.
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews 69. [bug] The zone object's master and also-notify lists grew
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews longer with each server reload.
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews 68. [func] Partial support for SIG(0) on incoming messages.
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews 67. [performance] Allow use of alternate (compile-time supplied)
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews 66. [func] Data in authoritative zones should have a trust level
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews beyond secure.
30884083d4149a8ff838b84dac1ad55c86948da8Mark Andrews 65. [cleanup] Removed obsolete typedef of dns_zone_callbackarg_t
6e8a8077faf96d8da0b6cf738913f5f1f86e4008Mark Andrews 64. [func] The RBT, DB, and zone table APIs now allow the
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews caller find the most-enclosing superdomain of
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews 63. [func] Generate NOTIFY messages.
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews 62. [func] Add UDP refresh support.
2ab6dfca4b7432de4fb7da4cd21ee0e02a695c01Mark Andrews 61. [cleanup] Use single quotes consistently in log messages.
c553b3308e34edfaddbec57b3308bbbe362ef715Mark Andrews 60. [func] Catch and disallow singleton types on message
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews 59. [bug] Cause net/host unreachable to be a hard error
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews when sending and receiving.
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews 58. [bug] bin/named/query.c could sometimes trigger the
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews (client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews == 0 assertion in query_newname().
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 57. [func] Added dns_nxt_typepresent()
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews 56. [bug] SIG records were not properly returned in cached
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews negative answers.
1439214380abcc123e27a42d43a23ba441209ebeMark Andrews 55. [bug] Responses containing multiple names in the authority
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews section were not negatively cached.
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews 54. [bug] If a fetch with sigrdataset==NULL joined one with
5d3083c4b5b11dfb653b15fd0eeb8e0cc9b175e0Mark Andrews sigrdataset!=NULL or vice versa, the resolver
5d3083c4b5b11dfb653b15fd0eeb8e0cc9b175e0Mark Andrews could catch an assertion or lose signature data,
52188225731669cd571984c45a1407a55c74ee78Mark Andrews respectively.
52188225731669cd571984c45a1407a55c74ee78Mark Andrews 53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
3cbc87c31f76262980d54ddbcdda7875be37b684Mark Andrews 52. [bug] rndc: taskmgr and socketmgr were not initialized
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews 51. [cleanup] dns/compress.h and dns/zt.h did not need to include
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews dns/rbt.h; it was needed only by compress.c and zt.c.
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews 50. [func] RBT deletion no longer requires a valid chain to work,
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews and dns_rbt_deletenode was added.
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews 49. [func] Each cache now has its own mctx.
d5af5bb38b9b2626b97626569adde258c8f6b808Mark Andrews 48. [func] isc_task_create() no longer takes an mctx.
6d7007e807241ae0a32de8db8d3bf434626026eaMark Andrews isc_task_mem() has been eliminated.
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews 47. [func] A number of modules now use memory context reference
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews 46. [func] Memory contexts are now reference counted.
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews Added isc_mem_inuse() and isc_mem_preallocate().
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews Renamed isc_mem_destroy_check() to
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews isc_mem_setdestroycheck().
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews 45. [bug] The trusted-key statement incorrectly loaded keys.
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews 44. [bug] Don't include authority data if it would force us
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews to unset the AD bit in the message.
25899e7f1ff0db5322362ada01f7aec3006ff0beTatuya JINMEI 神明達哉 43. [bug] DNSSEC verification of cached rdatasets was failing.
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews 42. [cleanup] Simplified logging of messages with embedded domain
3d79c437d8cc10651b22601b55f4098b4cfe5979Mark Andrews names by introducing a new convenience function
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews dns_name_format().
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews 41. [func] Use PR_SET_KEEPCAPS on Linux 2.3.99-pre3 and later
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews to allow 'named' to run as a non-root user while
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews retaining the ability to bind() to privileged
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 40. [func] Introduced new logging category "dnssec" and
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 logging module "dns/validator".
6be278a81c24c6729aeaae4ba3a7ddd5030d8451Tatuya JINMEI 神明達哉 39. [cleanup] Moved the typedefs for isc_region_t, isc_textregion_t,
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 and isc_lex_t to <isc/types.h>.
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews 38. [bug] TSIG signed incoming zone transfers work now.
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews 37. [bug] If the first RR in an incoming zone transfer was
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews not an SOA, the server died with an assertion failure
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews instead of just reporting an error.
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews 36. [cleanup] Change DNS_R_SUCCESS (and others) to ISC_R_SUCCESS
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews 35. [performance] Log messages which are of a level too high to be
65d64acb51b0655f04b165c8045d1aed556489abMark Andrews logged by any channel in the logging configuration
e9aca33f362d017fe0d5f7b729bce646038cf1eeMark Andrews will not cause the log mutex to be locked.
28e36fcc1eea8b5283aa33d3a6d21d42df8fdaf2Mark Andrews 34. [bug] Recursion was allowed even with 'recursion no'.
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews 33. [func] The RBT now maintains a parent pointer at each node.
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews 32. [cleanup] bin/lwresd/client.c needs <string.h> for memset()
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews 31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews 30. [func] config file grammar change to support optional
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews class type for a view.
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews 29. [func] support new config file view options:
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews auth-nxdomain recursion query-source
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews query-source-v6 transfer-source
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews transfer-source-v6 max-transfer-time-out
70ba825728dc64439801981a1abe7f1e28182698Mark Andrews max-transfer-idle-out transfer-format
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews request-ixfr provide-ixfr cleaning-interval
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews fetch-glue notify rfc2308-type1 lame-ttl
28b65e6d0a03704f4faee88ebf5105addfa57968Mark Andrews max-ncache-ttl min-roots
11b399514e4af7f370fe3948c3e3779a182ac5acMark Andrews 28. [func] support lame-ttl, min-roots and serial-queries
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews config global options.
14a97c343bc3adb840b13d515a8298c18f15be52Mark Andrews 27. [bug] Only include <netinet6/in6.h> on BSD/OS 4.[01]*.
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews Including it on other platforms (eg, NetBSD) can
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews cause a forced #error from the C preprocessor.
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews 26. [func] new match-clients statement in config file view.
7087b3dc9298e85909df7a10f83bbd0588310f0cMark Andrews 25. [bug] make install failed to install <isc/log.h> and
db2649bad98fc08054feb1a1ed234d8b9b011ea8Mark Andrews 24. [cleanup] Eliminate some unnecessary #includes of header
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews files from header files.
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews 23. [cleanup] Provide more context in log messages about client
7502c6600645f120434d84d0ce3df7c3585cfe43Mark Andrews requests, using a new function ns_client_log().
cdb15282589682b664dfb70428a3c1750fe05250Mark Andrews 22. [bug] SIGs weren't returned in the answer section when
b326d7e3a3a50eb65dd06db007d2fddc62606bbfMark Andrews the query resulted in a fetch.
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews 21. [port] Look at STD_CINCLUDES after CINCLUDES during
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews compilation, so additional system include directories
4834c6a7f0054b8f4a8a267d60ef78204521e39eMark Andrews can be searched but header files in the bind9 source
f450814ab8989820a7bc9a2c484eb9f2c1c7b915Mark Andrews tree with conflicting names take precedence. This
4c47c184b98a5ec1b303281959c1f3b0db85d733Mark Andrews avoids issues with installed versions of dnssafe and
0e93730a02a4cafbc5cdfaa04b2d813a0c11b205Mark Andrews 20. [func] Configuration file post-load validation of zones
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews failed if there were no zones.
c04f4437ff8b2aba326e5099eae0cacb7de6f74bMark Andrews 19. [bug] dns_zone_notifyreceive() failed to unlock the zone
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews lock in certain error cases.
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews 18. [bug] Use AC_TRY_LINK rather than AC_TRY_COMPILE in
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews configure.in to check for presence of in6addr_any.
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews 17. [func] Do configuration file post-load validation of zones.
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews 16. [bug] put quotes around key names on config file
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews output to avoid possible keyword clashes.
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews 15. [func] Add dns_name_dupwithoffsets(). This function is
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews improves comparison performance for duped names.
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews 14. [bug] free_rbtdb() could have 'put' unallocated memory in
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews an unlikely error path.
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews 13. [bug] lib/dns/master.c and lib/dns/xfrin.c didn't ignore
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews out-of-zone data.
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews 12. [bug] Fixed possible uninitialized variable error.
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews 11. [bug] axfr_rrstream_first() didn't check the result code of
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews db_rr_iterator_first(), possibly causing an assertion
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews to be triggered later.
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews 10. [bug] A bug in the code which makes EDNS0 OPT records in
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews bin/named/client.c and lib/dns/resolver.c could
b68fe6c0fbfee1dc0659661993de5c6727b66c76Mark Andrews trigger an assertion.
136e739d0d7267a8ce72468233fa795359db62faMark Andrews 9. [cleanup] replaced bit-setting code in confctx.c and replaced
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews repeated code with macro calls.
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews 8. [bug] Shutdown of incoming zone transfer accessed
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews freed memory.
5173d52b3eb9715259a2890614f869c6baeb18e1Mark Andrews 7. [cleanup] removed 'listen-on' from view statement.
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews 6. [bug] quote RR names when generating config file to
5173d52b3eb9715259a2890614f869c6baeb18e1Mark Andrews prevent possible clash with config file keywords
4091f8dfb71b78b53acd1b25f74e26c384750c03Mark Andrews (such as 'key').
5173d52b3eb9715259a2890614f869c6baeb18e1Mark Andrews 5. [func] syntax change to named.conf file: new ssu grant/deny
74ff5f080abdffa7823ff93da74969cd9fa25308Mark Andrews statements must now be enclosed by an 'update-policy'
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews 4. [port] bin/named/unix/os.c didn't compile on systems with
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews linux 2.3 kernel includes due to conflicts between
d5f13fecca944fc7229dac3215581cebec3ac314Mark Andrews C library includes and the kernel includes. We now
c202b9f4dd7438252d77a4dd8936b7a051431a0bMark Andrews get only what we need from <linux/capability.h>, and
d844741f5516bce45f8897435342731edb2307cbMark Andrews avoid pulling in other linux kernel .h files.
53e8e0e27a3db745548a7989639b91d16f841c1fMark Andrews 3. [bug] TKEYs go in the answer section of responses, not
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews the additional section.
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews 2. [bug] Generating cryptographic randomness failed on
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt systems without /dev/random.
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews 1. [bug] The installdirs rule in
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews lib/isc/unix/include/isc/Makefile.in had a typo which
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews prevented the isc directory from being created if it
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews didn't exist.
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews --- 9.0.0b2 released ---
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews# This tells Emacs to use hard tabs in this file.
e9a0e12b2b732285e00e0d9436961d0fe3655aa6Mark Andrews# Local Variables:
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews# indent-tabs-mode: t