CHANGES revision 7310c0b1ee680a4bcb0bcaa55798e64b97c9da18
58f1ac8dadf2c1f215343a0b2d1df2df954c4b19Mark Andrews3333. [bug] Setting resolver-query-timeout too low can cause
58f1ac8dadf2c1f215343a0b2d1df2df954c4b19Mark Andrews named to not recover if it looses connectivity.
5244e505adc08719e1387392c6eb85c453729256Mark Andrews3332. [bug] Re-use cached DS rrsets if possible. [RT 29446]
cfe32752a66fe1f050d5ed7ddce75f6d58fe1637Evan Hunt3331. [security] dns_rdataslab_fromrdataset could produce bad
cfe32752a66fe1f050d5ed7ddce75f6d58fe1637Evan Hunt rdataslabs. [RT #29644]
493f3eb297ea90ad2eb349591f1cb88194dce46dMark Andrews3330. [func] Fix missing signatures on NOERROR results despite
493f3eb297ea90ad2eb349591f1cb88194dce46dMark Andrews RPZ rewriting. Also
c5734964e6400f9e6d8c3f057fcccab596929deaMark Andrews - add optional "recursive-only yes|no" to the
c5734964e6400f9e6d8c3f057fcccab596929deaMark Andrews response-policy statement
d0ffef73fdee75f30e33c628a31d031616ad9433Evan Hunt - add optional "max-policy-ttl" to the response-policy
eaa2277753c6e7e642e83b2ccd27671a15336310Evan Hunt statement to limit the false data that
eaa2277753c6e7e642e83b2ccd27671a15336310Evan Hunt "recursive-only no" can introduce into
eaa2277753c6e7e642e83b2ccd27671a15336310Evan Hunt resolvers' caches
43b9737b11f4f14b2d378746d0cd5561b1dc24a0Mark Andrews - add a RPZ performance test to bin/tests/system/rpz
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt when queryperf is available.
a338c2d94781f676283f1b110f7802c71e2015bdMukund Sivaraman - the encoding of PASSTHRU action to "rpz-passthru".
fffcc1b13582447c9f94e498f4aaf43329c531d2Evan Hunt (The old encoding is still accepted.)
3e90f6c373d2e6c9c9909b112468975c4c86544eMark Andrews3329. [bug] Handle RRSIG signer-name case consistently: We
c38341ec435fb78de6d12c1001201f9ac7487b68Mark Andrews generate RRSIG records with the signer-name in
c38341ec435fb78de6d12c1001201f9ac7487b68Mark Andrews lower case. We accept them with any case, but if
c38341ec435fb78de6d12c1001201f9ac7487b68Mark Andrews they fail to validate, we try again in lower case.
7712d1660a308ec3de17f1ddbbf801eb0d663f3eEvan Hunt3328. [bug] Fixed inconsistent data checking in dst_parse.c.
b04839cfe21f131a8e7c7cae2a89e6ca8b678b5aMark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
b04839cfe21f131a8e7c7cae2a89e6ca8b678b5aMark Andrews to 'filter-aaaa-on-v4' but applies to IPv6
3a55d4352767acb4e0572aabfa917610001f5c9cMark Andrews connections. (Use "configure --enable-filter-aaaa"
3a55d4352767acb4e0572aabfa917610001f5c9cMark Andrews to enable this option.) [RT #27308]
bc5db10d721aa9bf570578e52e17371e67bfcf5cMark Andrews3326. [func] Added task list statistics: task model, worker
bc5db10d721aa9bf570578e52e17371e67bfcf5cMark Andrews threads, quantum, tasks running, tasks ready.
70be3889746884692aa49939833d624ddd432bf0Mark Andrews3325. [func] Report cache statistics: memory use, number of
d586792059601b37b17a9b3e317f4595cb30d854Evan Hunt nodes, number of hash buckets, hit and miss counts.
586db4a3e4664109fe8ce31fdd6a1b9c5bb67cbfMukund Sivaraman3324. [test] Add better tests for ADB stats [RT #27057]
275a8affe74d29d5fa51c9ba7172b90e9968199aMark Andrews3323. [func] Report the number of buckets the resolver is using.
c6d2e19b964b304f1b0fd32d6faf43deca568979Evan Hunt3322. [func] Monitor the number of active TCP and UDP dispatches.
ac5ed748602c890d596bed07b0b23b8b5f42b2f6Mark Andrews3321. [func] Monitor the number of recursive fetches and the
ac5ed748602c890d596bed07b0b23b8b5f42b2f6Mark Andrews number of open sockets, and report these values in
ac5ed748602c890d596bed07b0b23b8b5f42b2f6Mark Andrews the statistics channel. [RT #27054]
89cf81b4625c574f60c21e0dce12b150f3c5583cMark Andrews3320. [func] Added support for monitoring of recursing client
89cf81b4625c574f60c21e0dce12b150f3c5583cMark Andrews count. [RT #27009]
2064e46209f35d2afad526622d975647f9c2098bMark Andrews3319. [func] Added support for monitoring of ADB entry count and
2064e46209f35d2afad526622d975647f9c2098bMark Andrews hash size. [RT #27057]
71ec6d09406771c0ad546d2d475a7f16c0198844Mark Andrews3318. [tuning] Reduce the amount of work performed while holding a
71ec6d09406771c0ad546d2d475a7f16c0198844Mark Andrews bucket lock when finshed with a fetch context.
a920fb9dc2ff16f32dd73e53469d0febcdcc6c11Mark Andrews3317. [protocol] Add ECDSA support (RFC 6605). [RT #21918]
a920fb9dc2ff16f32dd73e53469d0febcdcc6c11Mark Andrews3316. [tuning] Improved locking performance when recursing.
3c13af375900ffe79af4926953799e6123c9d698Mark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
d734818278966c45af997c7242e8cccd7a91a0b3Mark Andrews queries; this can improve performance on busy
d734818278966c45af997c7242e8cccd7a91a0b3Mark Andrews multiprocessor systems by reducing lock contention.
63e1ac1e0915dd1089493d6d092d39a3da817e59Mark Andrews3314. [bug] The masters list could be updated while refesh_callback
63e1ac1e0915dd1089493d6d092d39a3da817e59Mark Andrews and stub_callback were using it. [RT #26732]
89119e3cafff373426858f6cec7c09539f53e209Mark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
89119e3cafff373426858f6cec7c09539f53e209Mark Andrews3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
33399d6a143403bc4a9ccb9307af43ef04ab7633Mark Andrews3311. [bug] Abort the zone dump if zone->db is NULL in
ef117da20559f2a65f46ed9eb40deab5026cbd66Mark Andrews zone.c:zone_gotwritehandle. [RT #29028]
ef117da20559f2a65f46ed9eb40deab5026cbd66Mark Andrews3310. [test] Increase table size for mutex profiling. [RT #28809]
ba5c73b383b08326ab6b5ad2d7ca43e117e212f1Mark Andrews3309. [bug] resolver.c:fctx_finddone() was not threadsafe.
bf59efcf0ed41186a5f9c1ca61da15a3c99b46f3Mark Andrews3308. [placeholder]
cac2181160bdb3ccc89e3560addae5e38d4c05e3Evan Hunt3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
faefeaddb39e693ea6cbcb81f2e5dbded21ced93Evan Hunt3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt3305. [func] Add wire format lookup method to sdb. [RT #28563]
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
b8a9632333a92d73a503afe1aaa7990016c8bee9Evan Hunt3303. [bug] named could die when reloading. [RT #28606]
f5bb5eb7f6640af4a94e666bf1d7f84a6a7f1f23Mark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
f5bb5eb7f6640af4a94e666bf1d7f84a6a7f1f23Mark Andrews keys if the zone name contained character that
f5bb5eb7f6640af4a94e666bf1d7f84a6a7f1f23Mark Andrews required special mappings. [RT #28600]
a0d411c05f12c36b298d811af3b4f2c9f08e86d4Mark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
a0d411c05f12c36b298d811af3b4f2c9f08e86d4Mark Andrews for non-recursive queries. [RT #28565]
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman3300. [bug] Named could die if gssapi was enabled in named.conf
42782931073786f98d3d0a617351db40066949a4Mukund Sivaraman but was not compiled in. [RT #28338]
c1d33c159bf81d6faf9948ac9a6f307ca52284afEvan Hunt3299. [bug] Make SDB handle errors from database drivers better.
06e0d6bb126e9986f29036e671b59f48b1d2efbcEvan Hunt3298. [bug] Named could dereference a NULL pointer in
06e0d6bb126e9986f29036e671b59f48b1d2efbcEvan Hunt zmgr_start_xfrin_ifquota if the zone was being removed.
8d8f9f7f86a33a155dd74b9b2c1317afca555d54Evan Hunt3297. [bug] Named could die on a malformed master file. [RT #28467]
8d8f9f7f86a33a155dd74b9b2c1317afca555d54Evan Hunt3296. [bug] Named could die with a INSIST failure in
7c9d11b654028f9901183c076b37a5494635f447Evan Hunt client.c:exit_check. [RT #28346]
7c9d11b654028f9901183c076b37a5494635f447Evan Hunt3295. [bug] Adjust isc_time_secondsastimet range check to be more
20dec973da306d5b0776c9d3b598fdbd3a59a28eMark Andrews portable. [RT # 26542]
20dec973da306d5b0776c9d3b598fdbd3a59a28eMark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
3b187cad7a1754e098ab9dabfcb44c8b437fb589Mark Andrews error. [RT #28265]
b16d99bac1d100735224ab3eaa84632537ff21b5Mark Andrews3293. [func] nsupdate: list supported type. [RT #28261]
79d27f505a67ee1fb5cf104cbe7b1ead67d252b4Mukund Sivaraman3292. [func] Log messages in the axfr stream at debug 10.
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman3291. [port] Fixed a build error on systems without ENOTSUP.
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
84dc4b3e7eea3e9c8fafa5f4fd632a51ee8b356fMukund Sivaraman3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
93d4128dcd54c152cf97b2c36caba8f3c8de3280Mark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
93d4128dcd54c152cf97b2c36caba8f3c8de3280Mark Andrews by the DLZ dlopen driver. [RT #28056]
50a745417461a4c007248202bb3a8bf7be426813Mark Andrews3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
50a745417461a4c007248202bb3a8bf7be426813Mark Andrews3286. [bug] Managed key maintenance timer could fail to start
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt after 'rndc reconfig'. [RT #26786]
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt3285. [bug] val-frdataset was incorrectly disassociated in
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt proveunsecure after calling startfinddlvsep.
0cfb24736841b3e98bb25853229a0efabab88bddEvan Hunt3284. [bug] Address race conditions with the handling of
fa6308bd57f716732ba70bbafc1d09e861e4acc1Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
fa6308bd57f716732ba70bbafc1d09e861e4acc1Mark Andrews failed to load. [RT #27863]
a4d76e3f0ba6f1fc2ba4b324f318e909b83bc860Evan Hunt3282. [bug] Restrict the TTL of NS RRset to no more than that
a4d76e3f0ba6f1fc2ba4b324f318e909b83bc860Evan Hunt of the old NS RRset when replacing it.
a4d76e3f0ba6f1fc2ba4b324f318e909b83bc860Evan Hunt [RT #27792] [RT #27884]
3d751891410f9892ca1c1deba2f7d8556ae91b0cMark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
3d751891410f9892ca1c1deba2f7d8556ae91b0cMark Andrews despite succeeding over the loopback interface.
800d25b8482c52487b4dab53cb10fa74061f1e94Mark Andrews3280. [bug] Potential double free of a rdataset on out of memory
800d25b8482c52487b4dab53cb10fa74061f1e94Mark Andrews with DNS64. [RT #27762]
9b819daddf8f4a5bd42276ee91bf9686d42f3ceeMark Andrews3279. [bug] Hold a internal reference to the zone while performing
9b819daddf8f4a5bd42276ee91bf9686d42f3ceeMark Andrews a asynchronous load. Address potential memory leak
586d94eb740587975d5348b22a5fb8440d95925dMark Andrews if the asynchronous is cancelled. [RT #27750]
f7ae6c8fdd2cd5e276251647e6852cccfc92847bMark Andrews3278. [bug] Make sure automatic key maintenance is started
586d94eb740587975d5348b22a5fb8440d95925dMark Andrews when "auto-dnssec maintain" is turned on during
a569e1b3213668bc704194367ea12c23456ad1d2Mark Andrews "rndc reconfig". [RT #26805]
a569e1b3213668bc704194367ea12c23456ad1d2Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
c6f7d2b5f1378e3d61770766ee9fdd922471eb2fMark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
c6f7d2b5f1378e3d61770766ee9fdd922471eb2fMark Andrews safe_open failure. [RT #27696]
603a78708343f063b44affb882ef93bb19a5142aMark Andrews3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
603a78708343f063b44affb882ef93bb19a5142aMark Andrews option had been misspelled as '-clear'. (To avoid
ba586e9568364eb2da871f5fb2b71716f7c31865Mark Andrews future confusion, both options now work.) [RT #27173]
ba586e9568364eb2da871f5fb2b71716f7c31865Mark Andrews3274. [placeholder]
570216f5a373cdaaa2eb2d9b5990150dd5a7b41bEvan Hunt3273. [bug] AAAA responses could be returned in the additional
a0f91e910bd9af006a65e555ec4082864ca1eb8dMark Andrews section even when filter-aaaa-on-v4 was in use.
0fe07891819138ad6e1de45f279cff940d170542Mark Andrews3272. [func] New "rndc zonestatus" command prints information
0fe07891819138ad6e1de45f279cff940d170542Mark Andrews about the specified zone. [RT #21671]
d319beb9d0b08db8b7f9789d916a02a56976b9b9Tinderbox User3271. [port] darwin: mksymtbl is not always stable, loop several
ea58c563bccc2a8dc20886c99c7c3334a971b6d3Evan Hunt times before giving up. mksymtbl was using non
a6d48ae49345c1995c7ac7c0628bf5f9eac0719aJeremy C. Reed portable perl to covert 64 bit hex strings. [RT #27653]
27b09ceb12ec95de461bd2780615d4064ccb1419Mark Andrews --- 9.9.0rc2 released ---
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt3270. [bug] "rndc reload" didn't reuse existing zones correctly
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt when inline-signing was in use. [RT #27650]
896f49f8bdee644cd8d10e320ea3084ca3f74e2aEvan Hunt3269. [port] darwin 11 and later now built threaded by default.
6fa84a3e255ef9e6233f0a8d134fc6d273f04599Evan Hunt3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
6fa84a3e255ef9e6233f0a8d134fc6d273f04599Evan Hunt out the earliest expiry time. [RT #23311]
104f0e51ac7f472e69d53e4900fe121b7dc78537Tinderbox User3267. [bug] Memory allocation failures could be mis-reported as
6fa84a3e255ef9e6233f0a8d134fc6d273f04599Evan Hunt unexpected error. New ISC_R_UNSET result code.
01f881c1c5683054ee3366929eae6f811777ce46Mark Andrews3266. [bug] The maximum number of NSEC3 iterations for a
ca84a056bdb492e8894c70fd7bf6a885df03039fMark Andrews DNSKEY RRset was not being properly computed.
a14fe8522977d391096942aae5250f00ca32d2d4Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
a14fe8522977d391096942aae5250f00ca32d2d4Mark Andrews inline-signing code. [RT #27557]
5a8edcafd13fc63a066e8e42e0f95cdbf9606414Mark Andrews3264. [bug] Automatic regeneration of signatures in an
5a8edcafd13fc63a066e8e42e0f95cdbf9606414Mark Andrews inline-signing zone could stall when the server
05816676bb82a5657a741ef4d378c7fb83912cfcMark Andrews was restarted. [RT #27344]
05816676bb82a5657a741ef4d378c7fb83912cfcMark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
29225772176ec580b2c903928a5c18e2e24889d0Mark Andrews inline-signing zone. [RT #27337]
1b513b6120e6f445960149b8f057aea19e1f5fe6Francis Dupont3262. [bug] Signed responses were handled incorrectly by RPZ.
761f60fc356c9987258cd10b4aa216c6296d922bFrancis Dupont3261. [func] RRset ordering now defaults to random. [RT #27174]
0e338b60cdb2cf7cedb4fc17f6a14b518d1245c8Mark Andrews3260. [bug] "rrset-order cyclic" could appear not to rotate
0e338b60cdb2cf7cedb4fc17f6a14b518d1245c8Mark Andrews for some query patterns. [RT #27170/27185]
2c172a42b39da5913fc6b2c0d3ce987c206991faMark Andrews --- 9.9.0rc1 released ---
faa01edd13613c077c3cb663c36f36bd527d1a4bMark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
faa01edd13613c077c3cb663c36f36bd527d1a4bMark Andrews message when writing to stdout. [RT #27109]
1ea6e09c376b1351c614474a88675b1a9bda6571Evan Hunt3258. [test] Add "forcing full sign with unreadable keys" test.
60988462e5d6db53205851d056e3482a29239be9Evan Hunt3257. [bug] Do not generate a error message when calling fsync()
60988462e5d6db53205851d056e3482a29239be9Evan Hunt in a pipe or socket. [RT #27109]
cd07e4d038fda6f9bacecb3067cc6fa43a67fc0aMark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
b36fc8294e1328912b940899d436c60986c92435Mark Andrews3255. [func] No longer require that a empty zones be explicitly
fe148bca7ea6612bb7e931fdcd2e66c32d2d2a9aMark Andrews enabled or that a empty zone is disabled for
b36fc8294e1328912b940899d436c60986c92435Mark Andrews RFC 1918 empty zones to be configured. [RT #27139]
dd820d8fd2714ee1ae53ff0c7f6973250048f2d2Mark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
c0c4512020c0a4a9e5b087cb8cad1cd68fb3f52eEvan Hunt3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
5d739300d12363f36ffa72836d2c10ff8c791b12Mark Andrews too long. [RT #26956]
5d739300d12363f36ffa72836d2c10ff8c791b12Mark Andrews3252. [bug] When master zones using inline-signing were
5d739300d12363f36ffa72836d2c10ff8c791b12Mark Andrews updated while the server was offline, the source
6f78147f569c9f505ef048c2f9e4e1b5ef2a27e7Mark Andrews zone could fall out of sync with the signed
87344c2cb3d4b413941d514a078f4098bcb816e9Mark Andrews copy. They can now resynchronize. [RT #26676]
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt memory dns_sdlz_putrr() can allocate per record to
44613d4d868ed5e73a1132280880f0699af56733Evan Hunt prevent run away memory consumption on ISC_R_NOSPACE.
2b78610512f208a6a35eb0976d039c2001cba7e6Evan Hunt3250. [func] 'configure --enable-developer'; turn on various
2b78610512f208a6a35eb0976d039c2001cba7e6Evan Hunt configure options, normally off by default, that
2b78610512f208a6a35eb0976d039c2001cba7e6Evan Hunt we want developers to build and test with. [RT #27103]
0dc0b029e9aecc6e2139109091ea68cc6aff7081Evan Hunt3249. [bug] Update log message when saving slave zones files for
0dc0b029e9aecc6e2139109091ea68cc6aff7081Evan Hunt analysis after load failures. [RT #27087]
cd750f6e7449678173e8cfe080ae0bf3dcb424cfEvan Hunt3248. [bug] Configure options --enable-fixed-rrset and
cd750f6e7449678173e8cfe080ae0bf3dcb424cfEvan Hunt --enable-exportlib were incompatible with each
cd750f6e7449678173e8cfe080ae0bf3dcb424cfEvan Hunt other. [RT #27087]
cd750f6e7449678173e8cfe080ae0bf3dcb424cfEvan Hunt3247. [bug] 'raw' format zones failed to preserve load order
5cef2421bde74ef8f789c9c83c1219553060ce16Mark Andrews breaking 'fixed' sort order. [RT #27087]
b4ba66ba1e36a6d8236d20be55273ce663819d69Evan Hunt3246. [bug] Named failed to start with a empty also-notify list.
5cef2421bde74ef8f789c9c83c1219553060ce16Mark Andrews3245. [bug] Don't report a error unchanged serials unless there
6bc767b003ed72f831dff7bb1b8f1855de281eb6Mark Andrews were other changes when thawing a zone with
3e5743068c95036324c24efa47b36ab0f7916d47Evan Hunt ixfr-fromdifferences. [RT #26845]
c11e46110b2b6236c68d89d4ea557c1d35e5d271Mark Andrews3244. [func] Added readline support to nslookup and nsupdate.
c11e46110b2b6236c68d89d4ea557c1d35e5d271Mark Andrews Also simplified nsupdate syntax to make "update"
c11e46110b2b6236c68d89d4ea557c1d35e5d271Mark Andrews and "prereq" optional. [RT #24659]
e01fbe2a45f9641968264a3bdf76d290e20521d7Evan Hunt3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
e01fbe2a45f9641968264a3bdf76d290e20521d7Evan Hunt being properly set.
76884179fd3ba491db80a285c752671025f74730Mark Andrews3242. [func] Extended the header of raw-format master files to
76884179fd3ba491db80a285c752671025f74730Mark Andrews include the serial number of the zone from which
eb1a7730f013e9a16d709c9ee8f41d73cde3680eEvan Hunt they were generated, if different (as in the case
eb1a7730f013e9a16d709c9ee8f41d73cde3680eEvan Hunt of inline-signing zones). This is to be used in
eb1a7730f013e9a16d709c9ee8f41d73cde3680eEvan Hunt inline-signing zones, to track changes between the
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt unsigned and signed versions of the zone, which may
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt have different serial numbers.
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt (Note: raw zonefiles generated by this version of
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt BIND are no longer compatble with prior versions.
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt To generate a backward-compatible raw zonefile
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt using dnssec-signzone or named-compilezone, specify
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt output format "raw=0" instead of simply "raw".)
aefb3e308ba01ad47a3d3aaadf77a5edd4261cb9Evan Hunt3241. [bug] Address race conditions in the resolver code.
36e5ac00333d89001f0c518a7d381d16c38d0402Mark Andrews3240. [bug] DNSKEY state change events could be missed. [RT #26874]
37f7c4c673622e984a41570fda42c1a678622fa4Tinderbox User3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
e916c4f840e6f05c1137a2653b4ef70a1056bf74Mark Andrews timestamp. [RT #26883]
e916c4f840e6f05c1137a2653b4ef70a1056bf74Mark Andrews3238. [bug] keyrdata was not being reinitialized in
471f2b71d89897204af3f2ab00a010e4327e44f9Mark Andrews lib/dns/rbtdb.c:iszonesecure. [RT#26913]
471f2b71d89897204af3f2ab00a010e4327e44f9Mark Andrews3237. [bug] dig -6 didn't work with +trace. [RT #26906]
1a9932dde111e05b4b9177c1146695817c3a20d2Evan Hunt3236. [bug] Backed out changes #3182 and #3202, related to
1a9932dde111e05b4b9177c1146695817c3a20d2Evan Hunt EDNS(0) fallback behavior. [RT #26416]
471f2b71d89897204af3f2ab00a010e4327e44f9Mark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
471f2b71d89897204af3f2ab00a010e4327e44f9Mark Andrews the generated diff and optionally writes it to a
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt journal. [RT #26386]
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
ec3b216506b715f10e0b653afc20068ce8c5aa79Evan Hunt3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
4e7973990c2aaec391cf307a7e60583331568e01Evan Hunt3232. [bug] Zero zone->curmaster before return in
4e7973990c2aaec391cf307a7e60583331568e01Evan Hunt dns_zone_setmasterswithkeys(). [RT #26732]
a6d48ae49345c1995c7ac7c0628bf5f9eac0719aJeremy C. Reed3231. [bug] named could fail to send a uncompressable zone.
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt3230. [bug] 'dig axfr' failed to properly handle a multi-message
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt axfr with a serial of 0. [RT #26796]
7318bbc26262a66a0d740ceefed769961ef7e476Evan Hunt3229. [bug] Fix local variable to struct var assignment
469bbe0f973bf33e20d6011748cb68fab8a9a12dMark Andrews found by CLANG warning.
469bbe0f973bf33e20d6011748cb68fab8a9a12dMark Andrews3228. [tuning] Dynamically grow symbol table to improve zone
fc84418f4a809e40f16cfb5b4f3834d735fca31fTinderbox User loading performance. [RT #26523]
2dc978b8a1563f6dd413a8a9456659ade00f9e9eEvan Hunt3227. [bug] Interim fix to make WKS's use of getprotobyname()
2dc978b8a1563f6dd413a8a9456659ade00f9e9eEvan Hunt and getservbyname() self thread safe. [RT #26232]
7dcb304dd0bfe5888593199e0a9a8d64b8f022adMark Andrews3226. [bug] Address minor resource leakages. [RT #26624]
92fe6db3e46016f4ce0d6e372c745469bba10b5eEvan Hunt3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
92fe6db3e46016f4ce0d6e372c745469bba10b5eEvan Hunt messages. [RT #26507]
7cd8e7915afba7064c18c4bf74ecce0627c61027Evan Hunt3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
f5df4974b7b5081c4778d5796127b4d6584e834eEvan Hunt3223. [bug] 'task_test privilege_drop' generated false positives.
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews3222. [cleanup] Replace dns_journal_{get,set}_bitws with
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
f45f40ec2814a5ff1ed443c968772a1b2e25c462Mark Andrews3221. [bug] Fixed a potential coredump on shutdown due to
38c3ed154a2e014dad359e852b08722defa118ebEvan Hunt referencing fetch context after it's been freed.
baad8d9fd8dd054ce1edf350ff0c0f2038a1519eEvan Hunt --- 9.9.0b2 released ---
866606b9c712ac654689e02a0c12151eaa86fbc1Mark Andrews3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
866606b9c712ac654689e02a0c12151eaa86fbc1Mark Andrews could fail to set the database version correctly,
f0e9d6e905235482ff9b4be770ee35018fcd8234Evan Hunt causing an assertion failure. [RT #26180]
7ef5dc87b64d639cadfcce868428f9fb2a84fb92Evan Hunt3219. [bug] Disable NOEDNS caching following a timeout.
7ef5dc87b64d639cadfcce868428f9fb2a84fb92Evan Hunt3218. [security] Cache lookup could return RRSIG data associated with
44fbdddcadd85a6e40ebc7b7834e08e156c681a1Evan Hunt nonexistent records, leading to an assertion
44fbdddcadd85a6e40ebc7b7834e08e156c681a1Evan Hunt failure. [RT #26590]
0dfd942409fbd3ad1e9a06c887742f0c8760ffd7Mark Andrews3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
0dfd942409fbd3ad1e9a06c887742f0c8760ffd7Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
568de8123acb1a94e2d7bfe9cc5eb5d099f6c1f5Mark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
51e6164fd6b47121040f79b6330edf6258418a0bMark Andrews3214. [func] Add 'named -U' option to set the number of UDP
ef9334d745a759b02821950230260c1941d066d3Mukund Sivaraman listener threads per interface. [RT #26485]
ef9334d745a759b02821950230260c1941d066d3Mukund Sivaraman3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
6ffa8fcf764121bbe3b9eb116ddade5778608375Mark Andrews3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
bbd5c0ab33b7c76058a4b17bd1f9ce443aa90c7fEvan Hunt list prior to adding a reference to it leading a
bbd5c0ab33b7c76058a4b17bd1f9ce443aa90c7fEvan Hunt possible assertion failure. [RT #23219]
c73a7e127fd3d2b2d3257f67d7a0b94441797f3aMark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
c73a7e127fd3d2b2d3257f67d7a0b94441797f3aMark Andrews option prints in single-line-per-record format.
bad82a46c420eaa5ca62a319923472fba7e391f1Mark Andrews3210. [bug] Canceling the oldest query due to recursive-client
09ab38c151751b76b8043275422239463eb70cbdMark Andrews overload could trigger an assertion failure. [RT #26463]
09ab38c151751b76b8043275422239463eb70cbdMark Andrews3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
adbb48b4a0c6216f96d8b40712f23da893444f1cMark Andrews3208. [bug] 'dig -y' handle unknown tsig alorithm better.
61cfadb50e2ddce1073760e77880de73eb6e65daMark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
9896a01aebb4201459079f8926dcd8045514b73aEvan Hunt3206. [cleanup] Add ISC information to log at start time. [RT #25484]
22e29471c784acd09619841926c4f765e36ac74aEvan Hunt3205. [func] Upgrade dig's defaults to better reflect modern
22e29471c784acd09619841926c4f765e36ac74aEvan Hunt nameserver behaviour. Enable "dig +adflag" and
22e29471c784acd09619841926c4f765e36ac74aEvan Hunt "dig +edns=0" by default. Enable "+dnssec" when
22e29471c784acd09619841926c4f765e36ac74aEvan Hunt running "dig +trace". [RT #23497]
acbb301e648b82fcc38b876a44403cf0fe539cc9Evan Hunt3204. [bug] When a master server that has been marked as
acbb301e648b82fcc38b876a44403cf0fe539cc9Evan Hunt unreachable sends a NOTIFY, mark it reachable
9823d3d0fa2995a90f577a5801b1e5f7288a1facJeremy C. Reed again. [RT #25960]
9823d3d0fa2995a90f577a5801b1e5f7288a1facJeremy C. Reed3203. [bug] Increase log level to 'info' for validation failures
3911e7610f29dc664cbe8336f35c0652cd74652eMark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
89740699cd2191d9b84e67716c281b2dfeba5e56Evan Hunt3202. [bug] NOEDNS caching on timeout was too agressive.
89740699cd2191d9b84e67716c281b2dfeba5e56Evan Hunt3201. [func] 'rndc querylog' can now be given an on/off parameter
89740699cd2191d9b84e67716c281b2dfeba5e56Evan Hunt instead of only being used as a toggle. [RT #18351]
46bc64f4b1a0e84ab0397943453fe83a17baf2c4Evan Hunt3200. [doc] Some rndc functions were undocumented or were
46bc64f4b1a0e84ab0397943453fe83a17baf2c4Evan Hunt missing from 'rndc -h' output. [RT #25555]
46bc64f4b1a0e84ab0397943453fe83a17baf2c4Evan Hunt3199. [func] When logging client information, include the name
1cf8e9c0b7e75fcd2bfd10367ff362c674972a0dMark Andrews being queried. [RT #25944]
62258ada486dfe76afc3f0f3835d3a45d2d8105cEvan Hunt3198. [doc] Clarified that dnssec-settime can alter keyfile
62258ada486dfe76afc3f0f3835d3a45d2d8105cEvan Hunt permissions. [RT #24866]
8cbf3b6fc35091abde426930f2eadb8f53476c98Evan Hunt3197. [bug] Don't try to log the filename and line number when
8cbf3b6fc35091abde426930f2eadb8f53476c98Evan Hunt the config parser can't open a file. [RT #22263]
8cbf3b6fc35091abde426930f2eadb8f53476c98Evan Hunt3196. [bug] nsupdate: return nonzero exit code when target zone
7bd455641455950eff7d21be652c8142b134d32fTinderbox User doesn't exist. [RT #25783]
7b46a4aa418de3e1f2df63b9353b7148584afe64Evan Hunt3195. [cleanup] Silence "file not found" warnings when loading
9ba2cef72dacb1dc1105415956e1c311ac25d02cEvan Hunt managed-keys zone. [RT #26340]
9ba2cef72dacb1dc1105415956e1c311ac25d02cEvan Hunt3194. [doc] Updated RFC references in the 'empty-zones-enable'
78f79084fcfc40f1237c99e2d4325b24b750d012Evan Hunt documentation. [RT #25203]
78f79084fcfc40f1237c99e2d4325b24b750d012Evan Hunt3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
a2fd1de97d9ff685697aadba7f67a450557b0a06Evan Hunt3192. [bug] A query structure could be used after being freed.
cc2a5156841ec6dfe1e90eed40c65fa8cdec246dTinderbox User3191. [bug] Print NULL records using "unknown" format. [RT #26392]
d51456e4537729c2263303350abeff45379b1105Evan Hunt3190. [bug] Underflow in error handling in isc_mutexblock_init.
d51456e4537729c2263303350abeff45379b1105Evan Hunt3189. [test] Added a summary report after system tests. [RT #25517]
e69790ac0067c0034f57e070d513833550786a93Evan Hunt3188. [bug] zone.c:zone_refreshkeys() could fail to detach
e69790ac0067c0034f57e070d513833550786a93Evan Hunt references correctly when errors occurred, causing
67d01dcacb2051a03377c8ec5c0e36604c17aea5Evan Hunt a hang on shutdown. [RT #26372]
67d01dcacb2051a03377c8ec5c0e36604c17aea5Evan Hunt3187. [port] win32: support for Visual Studio 2008. [RT #26356]
6be12fa63b38fe7648811e042c9aad58cee2ead7Evan Hunt --- 9.9.0b1 released ---
6be12fa63b38fe7648811e042c9aad58cee2ead7Evan Hunt3186. [bug] Version/db mis-match in rpz code. [RT #26180]
262fea66373a062cac1a0e99b5a4675987bb61ffEvan Hunt3185. [func] New 'rndc signing' option for auto-dnssec zones:
262fea66373a062cac1a0e99b5a4675987bb61ffEvan Hunt - 'rndc signing -list' displays the current
262fea66373a062cac1a0e99b5a4675987bb61ffEvan Hunt state of signing operations
084ba95b083dc55fd10631ad43fa8fff48707648Evan Hunt - 'rndc signing -clear' clears the signing state
084ba95b083dc55fd10631ad43fa8fff48707648Evan Hunt records for keys that have fully signed the zone
084ba95b083dc55fd10631ad43fa8fff48707648Evan Hunt - 'rndc signing -nsec3param' sets the NSEC3
084ba95b083dc55fd10631ad43fa8fff48707648Evan Hunt parameters for the zone
3ef4b7383ab4310df48ee5143e361ab1cfa3c8e8Evan Hunt The 'rndc keydone' syntax is removed. [RT #23729]
3ef4b7383ab4310df48ee5143e361ab1cfa3c8e8Evan Hunt3184. [bug] named had excessive cpu usage when a redirect zone was
72aa3b2a4e33a1b9b3521fddce383002b7201ab7Evan Hunt configured. [RT #26013]
72aa3b2a4e33a1b9b3521fddce383002b7201ab7Evan Hunt3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
368aedf188d7c7782cae8a5ce2a978be47b5a764Evan Hunt3182. [bug] Auth servers behind firewalls which block packets
368aedf188d7c7782cae8a5ce2a978be47b5a764Evan Hunt greater than 512 bytes may cause other servers to
e71905610c72f474a2943934a48f43121c79c939Evan Hunt perform poorly. Now, adb retains edns information
e71905610c72f474a2943934a48f43121c79c939Evan Hunt and caches noedns servers. [RT #23392/24964]
1aced7b8702288f656ded594cd5bd7678bb4fe70Evan Hunt3181. [func] Inline-signing is now supported for master zones.
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt3180. [func] Local copies of slave zones are now saved in raw
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt format by default, to improve startup performance.
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt 'masterfile-format text;' can be used to override
a60bf97f9f7dcde6f4ca6e8188245fb0866200dbEvan Hunt the default, if desired. [RT #25867]
f79ee00c69259b9a27f9f0d12afa6c7b64005dedEvan Hunt3179. [port] kfreebsd: build issues. [RT #26273]
f79ee00c69259b9a27f9f0d12afa6c7b64005dedEvan Hunt3178. [bug] A race condition introduced by change #3163 could
7fbbc9bfd34f47aab843de668d5f5ffbc53d6e45Mark Andrews cause an assertion failure on shutdown. [RT #26271]
7fbbc9bfd34f47aab843de668d5f5ffbc53d6e45Mark Andrews3177. [func] 'rndc keydone', remove the indicator record that
96c17c5ecb012028ad9d66f93a252994c6ed035cMark Andrews named has finished signing the zone with the
96c17c5ecb012028ad9d66f93a252994c6ed035cMark Andrews corresponding key. [RT #26206]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt3176. [doc] Corrected example code and added a README to the
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt sample external DLZ module in contrib/dlz/example.
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt3175. [bug] Fix how DNSSEC positive wildcard responses from a
1eb5e1b4d7ea98dea07000edef15148d3d714b9dEvan Hunt NSEC3 signed zone are validated. Stop sending a
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt unnecessary NSEC3 record when generating such
3a01ded15da064de23124e5d1a89143eceec5523Evan Hunt responses. [RT #26200]
3a01ded15da064de23124e5d1a89143eceec5523Evan Hunt3174. [bug] Always compute to revoked key tag from scratch.
0072ae822d966550f7c0956ed22184ec20e98f34Mark Andrews3173. [port] Correctly validate root DS responses. [RT #25726]
9e39bafd2ef3e52719b5f16aec077c7885e7e1f1Mark Andrews3172. [port] darwin 10.* and freebsd [89] are now built threaded by
02a5e3ed85cbfc099874bb34e5901537399b5e24Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
02a5e3ed85cbfc099874bb34e5901537399b5e24Mark Andrews 'rndc addzone'. [RT #25600]
bce9696c7ac65792469b29ce0ad13564953b62caEvan Hunt --- 9.9.0a3 released ---
bce9696c7ac65792469b29ce0ad13564953b62caEvan Hunt3170. [func] RPZ update:
edd82b2ce275d513fb2799b90ec464f434880e87Mark Andrews - fix precedence among competing rules
edd82b2ce275d513fb2799b90ec464f434880e87Mark Andrews - improve ARM text including documenting rule precedence
86856f4f3069bb2d75851b56401ffde18f41198fMark Andrews - try to rewrite CNAME chains until first hit
86856f4f3069bb2d75851b56401ffde18f41198fMark Andrews - new "rpz" logging channel
86856f4f3069bb2d75851b56401ffde18f41198fMark Andrews - RDATA for CNAME rules can include wildcards
86856f4f3069bb2d75851b56401ffde18f41198fMark Andrews - replace "NO-OP" named.conf policy override with
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt "PASSTHRU" and add "DISABLED" override ("NO-OP"
83eecff731c1a049b12f01fb699fa15ab7ddac2eEvan Hunt is still recognized)
16134801ce8fffbb6c42bb54d544c3397a45ad06Mark Andrews3169. [func] Catch db/version mis-matches when calling dns_db_*().
64584aa0980625f834fa148dc3c95ab714efe703Evan Hunt3168. [bug] Nxdomain redirection could trigger an assert with
16134801ce8fffbb6c42bb54d544c3397a45ad06Mark Andrews a ANY query. [RT #26017]
64584aa0980625f834fa148dc3c95ab714efe703Evan Hunt3167. [bug] Negative answers from forwarders were not being
16134801ce8fffbb6c42bb54d544c3397a45ad06Mark Andrews correctly tagged making them appear to not be cached.
4357e13a4bc2e175d73b20f9ef3e809b3e269ee4Evan Hunt3166. [bug] Upgrading a zone to support inline-signing failed.
fd75aaa2b9816703fda5e8b2cd071a3ec7387a08Evan Hunt3165. [bug] dnssec-signzone could generate new signatures when
7e2e41df676e1e19186242afd88a6794e37a9becMark Andrews resigning, even when valid signatures were already
7f5bdf7f4063c2fefb18900468d2c851f8de7816Evan Hunt present. [RT #26025]
7f5bdf7f4063c2fefb18900468d2c851f8de7816Evan Hunt3164. [func] Enable DLZ modules to retrieve client information,
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt so that responses can be changed depending on the
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt source address of the query. [RT #25768]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User3163. [bug] Use finer-grained locking in client.c to address
35f6a21f5f8114542c050bfcb484b39ce513d4bdEvan Hunt concurrency problems with large numbers of threads.
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt3162. [test] start.pl: modified to allow for "named.args" in
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt ns*/ subdirectory to override stock arguments to
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt named. Largely from RT#26044, but no separate ticket.
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt3161. [bug] zone.c:del_sigs failed to always reset rdata leading
b5f6271f4daf1e54501af2cb7dd278d7e8003d65Mark Andrews assertion failures. [RT #25880]
96a35905057eb2ba7d977460776b06ae0911c8a7Evan Hunt3160. [bug] When printing out a NSEC3 record in multiline form
96a35905057eb2ba7d977460776b06ae0911c8a7Evan Hunt the newline was not being printed causing type codes
1361e038900701e126213261c0a1178025ae5a72Tinderbox User to be run together. [RT #25873]
64584aa0980625f834fa148dc3c95ab714efe703Evan Hunt3159. [bug] On some platforms, named could assert on startup
7da74ea46df30a7431441a3b8adf5134dab5067eJeremy C. Reed when running in a chrooted environment without
64584aa0980625f834fa148dc3c95ab714efe703Evan Hunt /proc. [RT #25863]
96a35905057eb2ba7d977460776b06ae0911c8a7Evan Hunt3158. [bug] Recursive servers would prefer a particular UDP
96a35905057eb2ba7d977460776b06ae0911c8a7Evan Hunt socket instead of using all available sockets.
1361e038900701e126213261c0a1178025ae5a72Tinderbox User3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
1361e038900701e126213261c0a1178025ae5a72Tinderbox User the config file before pausing the server. [RT #21373]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User3156. [placeholder]
1361e038900701e126213261c0a1178025ae5a72Tinderbox User --- 9.9.0a2 released ---
38eabfcee7a9f206c268834ab9cb6d3408a31380Mark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
38eabfcee7a9f206c268834ab9cb6d3408a31380Mark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
38eabfcee7a9f206c268834ab9cb6d3408a31380Mark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
7b9cb698dd07644762c675b5f57446467b4d5663Mark Andrews an assert. [RT #25452]
51143259789034ac19e12984a8390b9f86ab368cMark Andrews3153. [func] Extend request-ixfr to zone level and remove the
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt side effect of forcing an AXFR. [RT #25156]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3152. [cleanup] Some versions of gcc and clang failed due to
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt incorrect use of __builtin_expect. [RT #25183]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3151. [bug] Queries for type RRSIG or SIG could be handled
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt incorrectly. [RT #21050]
14bf4702f37cc707ede64a097f7d4aa671265492Evan Hunt3150. [func] Improved startup and reconfiguration time by
14bf4702f37cc707ede64a097f7d4aa671265492Evan Hunt enabling zones to load in multiple threads. [RT #25333]
31f6244cc25ab0f8937edc26dbb26ba4f6a01f19Evan Hunt3149. [placeholder]
31f6244cc25ab0f8937edc26dbb26ba4f6a01f19Evan Hunt3148. [bug] Processing of normal queries could be stalled when
2729aea3c1a720269aaae92ce3a84af1ba0a75ebMark Andrews forwarding a UPDATE message. [RT #24711]
a1271e2404dd42fcc477974bd0a190224f34f5f7Mark Andrews3147. [func] Initial inline signing support. [RT #23657]
a1271e2404dd42fcc477974bd0a190224f34f5f7Mark Andrews --- 9.9.0a1 released ---
842a3e6d0eb745e34a3cc3e19c8c39b9492ac739Evan Hunt3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
1124950b35ae05a12e804e670607fe5ba775cb4aTinderbox User3145. [test] Capture output of ATF unit tests in "./atf.out" if
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt there were any errors while running them. [RT #25527]
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt3144. [bug] dns_dbiterator_seek() could trigger an assert when
d7729155dff87d3c7a2b9103bf6e5164ea4d7dd7Mark Andrews used with a nonexistent database node. [RT #25358]
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews3143. [bug] Silence clang compiler warnings. [RT #25174]
850b5e80930907e4747347201dc41e4d04e036f8Mark Andrews3142. [bug] NAPTR is class agnostic. [RT #25429]
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews3141. [bug] Silence spurious "zone serial (0) unchanged" messages
62ec9fd1681ffae7d6b0d54618599ecf650e3100Mark Andrews associated with empty zones. [RT #25079]
41e55d04032c0eefd39d74ffb73657b04fb821ecEvan Hunt3140. [func] New command "rndc flushtree <name>" clears the
41e55d04032c0eefd39d74ffb73657b04fb821ecEvan Hunt specified name from the server cache along with
41e55d04032c0eefd39d74ffb73657b04fb821ecEvan Hunt all names under it. [RT #19970]
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt for the hashing algorithms (md5, sha1 - sha512, and
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt their hmac counterparts). [RT #25067]
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt3138. [bug] Address memory leaks and out-of-order operations when
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt shutting named down. [RT #25210]
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt3137. [func] Improve hardware scalability by allowing multiple
166341d55424ca522eb456a1c7d0211e391f1ac8Evan Hunt worker threads to process incoming UDP packets.
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt This can significantly increase query throughput
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt on some systems. [RT #22992]
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt3136. [func] Add RFC 1918 reverse zones to the list of built-in
c41d8a22ab5f4a487f4c16b78f23792f78a3a851Francis Dupont empty zones switched on by the 'empty-zones-enable'
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt option. [RT #24990]
a165a17a81ff3285f4f4d79785fafb465e626183Evan Hunt3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
08c67b5b7a54047fbfed423a59b48c86177b9859Evan Hunt See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
e5f9fa7e18d50569a7d723acbb6f641e13ed3787Evan Hunt3134. [bug] Improve the accuracy of dnssec-signzone's signing
e5f9fa7e18d50569a7d723acbb6f641e13ed3787Evan Hunt statistics. [RT #16030]
62cce60a15990bf8ec05b4234a5c965a5a8e86c0Evan Hunt3133. [bug] Change #3114 was incomplete. [RT #24577]
62cce60a15990bf8ec05b4234a5c965a5a8e86c0Evan Hunt3132. [placeholder]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt3131. [tuning] Improve scalability by allocating one zone task
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt per 100 zones at startup time, rather than using a
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt fixed-size task table. [RT #24406]
0a35160f4eb349188a988d2857e0b3052ad4b778Evan Hunt3130. [func] Support alternate methods for managing a dynamic
0a35160f4eb349188a988d2857e0b3052ad4b778Evan Hunt zone's serial number. Two methods are currently
a8cdf2a2e7e9a716a94db550138f1a65000fc19fEvan Hunt defined using serial-update-method, "increment"
a8cdf2a2e7e9a716a94db550138f1a65000fc19fEvan Hunt (default) and "unixtime". [RT #23849]
a8cdf2a2e7e9a716a94db550138f1a65000fc19fEvan Hunt3129. [bug] Named could crash on 'rndc reconfig' when
3249da26fc28297265d444a1f3647f1e6700a2a0Evan Hunt allow-new-zones was set to yes and named ACLs
3249da26fc28297265d444a1f3647f1e6700a2a0Evan Hunt were used. [RT #22739]
0666e6db543cda2de2b8472ba49ed9b53c836326Tinderbox User3128. [func] Inserting an NSEC3PARAM via dynamic update in an
d0803df3310ad09447c34b972e7594d576f5cbb5Evan Hunt auto-dnssec zone that has not been signed yet
d0803df3310ad09447c34b972e7594d576f5cbb5Evan Hunt will cause it to be signed with the specified NSEC3
9d58bbdf12e77d2b62e669bc2965b0788b97731aJeremy C. Reed parameters when keys are activated. The
47c847e286ac1d9dcc1b6dec5430ad9d2abad7b2Evan Hunt NSEC3PARAM record will not appear in the zone until
47c847e286ac1d9dcc1b6dec5430ad9d2abad7b2Evan Hunt it is signed, but the parameters will be stored.
75d747e1c5a30d6ef6c6238c6e27baa11d6f3bf6Mark Andrews3127. [bug] 'rndc thaw' will now remove a zone's journal file
75d747e1c5a30d6ef6c6238c6e27baa11d6f3bf6Mark Andrews if the zone serial number has been changed and
fbc0e37e0c3732b20b0629056e98d712a118637fMark Andrews ixfr-from-differences is not in use. [RT #24687]
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews3126. [security] Using DNAME record to generate replacements caused
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews RPZ to exit with a assertion failure. [RT #24766]
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews3125. [security] Using wildcard CNAME records as a replacement with
b8cf73a3b3e21d61f5a06670551ac22e61bcc4b1Mark Andrews RPZ caused named to exit with a assertion failure.
83f69fcd6ef72c9e2ebcb025b66a2ee74176becdEvan Hunt3124. [bug] Use an rdataset attribute flag to indicate
83f69fcd6ef72c9e2ebcb025b66a2ee74176becdEvan Hunt negative-cache records rather than using rrtype 0;
83f69fcd6ef72c9e2ebcb025b66a2ee74176becdEvan Hunt this will prevent problems when that rrtype is
83f69fcd6ef72c9e2ebcb025b66a2ee74176becdEvan Hunt used in actual DNS packets. [RT #24777]
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt3123. [security] Change #2912 exposed a latent flaw in
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt dns_rdataset_totext() that could cause named to
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt crash with an assertion failure. [RT #24777]
e45d0508c3460db87afb1f743bc5210522721bb3Evan Hunt3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
e45d0508c3460db87afb1f743bc5210522721bb3Evan Hunt3121. [security] An authoritative name server sending a negative
e45d0508c3460db87afb1f743bc5210522721bb3Evan Hunt response containing a very large RRset could
f8c990f6c2d3f75120bd67a55e87f21e88e9e5a6Evan Hunt trigger an off-by-one error in the ncache code
f8c990f6c2d3f75120bd67a55e87f21e88e9e5a6Evan Hunt and crash named. [RT #24650]
f8c990f6c2d3f75120bd67a55e87f21e88e9e5a6Evan Hunt3120. [bug] Named could fail to validate zones listed in a DLV
db8938c993d3eaeae1d86feb1b5da511831a9014Mark Andrews that validated insecure without using DLV and had
db8938c993d3eaeae1d86feb1b5da511831a9014Mark Andrews DS records in the parent zone. [RT #24631]
db8938c993d3eaeae1d86feb1b5da511831a9014Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
a147de10fe5e19e593d42152ffd6879eca69860dEvan Hunt record could be created and never marked complete.
a147de10fe5e19e593d42152ffd6879eca69860dEvan Hunt3118. [bug] nsupdate could dump core on shutdown when using
702958d20247bb9e34019cf02d8ec18d4f3b1005Mark Andrews SIG(0) keys. [RT #24604]
702958d20247bb9e34019cf02d8ec18d4f3b1005Mark Andrews3117. [cleanup] Remove doc and parser references to the
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews never-implemented 'auto-dnssec create' option.
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3116. [func] New 'dnssec-update-mode' option controls updates
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews of DNSSEC records in signed dynamic zones. Set to
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews 'no-resign' to disable automatic RRSIG regeneration
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews while retaining the ability to sign new or changed
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews data. [RT #24533]
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3115. [bug] Named could fail to return requested data when
4882e183cac5772ea522811c758c402cd7e8ad5bEvan Hunt following a CNAME that points into the same zone.
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews inactive and there is no replacement key. [RT #23136]
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3113. [doc] Document the relationship between serial-query-rate
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews and NOTIFY messages.
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews3112. [doc] Add missing descriptions of the update policy name
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews types "ms-self", "ms-subdomain", "krb5-self" and
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews "krb5-subdomain", which allow machines to update
cd7f8d18f8ed073ca5478d63f49179286d38d3d6Mark Andrews their own records, to the BIND 9 ARM.
a18fc12ba3d48b66bea298c80f3e3f09f3c91527Evan Hunt3111. [bug] Improved consistency checks for dnssec-enable and
a18fc12ba3d48b66bea298c80f3e3f09f3c91527Evan Hunt dnssec-validation, added test cases to the
a18fc12ba3d48b66bea298c80f3e3f09f3c91527Evan Hunt checkconf system test. [RT #24398]
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt3110. [bug] dnssec-signzone: Wrong error message could appear
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt when attempting to sign with no KSK. [RT #24369]
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt3109. [func] The also-notify option now uses the same syntax
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt as a zone's masters clause. This means it is
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt now possible to specify a TSIG key to use when
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt sending notifies to a given server, or to include
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt an explicit named masters list in an also-notfiy
ba751492fcc4f161a18b983d4f018a1a52938cb9Evan Hunt statement. [RT #23508]
07fb9b83308daea64e50a1f07052addc25c15ec3Mark Andrews3108. [cleanup] dnssec-signzone: Clarified some error and
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt code (use -P instead). [RT #20852]
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt3107. [bug] dnssec-signzone: Report the correct number of ZSKs
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt when using -x. [RT #20852]
b751788932cf1a6d98ae83355f38a080125c2f3eEvan Hunt3106. [func] When logging client requests, include the name of
fb756ba3047770957173ba546257ca43af7ba3e4Mark Andrews the TSIG key if any. [RT #23619]
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt3105. [bug] GOST support can be suppressed by "configure
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt --without-gost" [RT #24367]
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt3104. [bug] Better support for cross-compiling. [RT #24367]
7d2b185f16b165e311e5b451324fe9ab9898dcedEvan Hunt3103. [bug] Configuring 'dnssec-validation auto' in a view
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews instead of in the options statement could trigger
39c30670e869062914b6f7245b64b9ebe8747d86Mark Andrews an assertion failure in named-checkconf. [RT #24382]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3102. [func] New 'dnssec-loadkeys-interval' option configures
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt how often, in minutes, to check the key repository
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt for updates when using automatic key maintenance.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt Default is every 60 minutes (formerly hard-coded
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt to 12 hours). [RT #23744]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3101. [bug] Zones using automatic key maintenance could fail
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt to check the key repository for updates. [RT #23744]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3100. [security] Certain response policy zone configurations could
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt trigger an INSIST when receiving a query of type
e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt RRSIG. [RT #24280]
e851ea826066ac5a5b01c2c23218faa0273a12e8Evan Hunt3099. [test] "dlz" system test now runs but gives R:SKIPPED if
d0e3216c217bf790c4a582191658c2a1900ff79fMark Andrews not compiled with --with-dlz-filesystem. [RT #24146]
d0e3216c217bf790c4a582191658c2a1900ff79fMark Andrews3098. [bug] DLZ zones were answering without setting the AA bit.
e9649ece3bf32ff43faea13c76bbba7813d7e139Mark Andrews3097. [test] Add a tool to test handling of malformed packets.
c14ba7107063650e7f4329e8c54adca57913381bEvan Hunt3096. [bug] Set KRB5_KTNAME before calling log_cred() in
3f4a0e80fabe0233086e127aaabc6e68d6975c3aEvan Hunt dst_gssapi_acceptctx(). [RT #24004]
b93ef543ab29be2c2d15049e02e66a31b27284aeMark Andrews3095. [bug] Handle isolated reserved ports in the port range.
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt3094. [doc] Expand dns64 documentation.
b93ef543ab29be2c2d15049e02e66a31b27284aeMark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
161e803a5608956271d8120be37a1b383d14b647Mark Andrews3092. [bug] Signatures for records at the zone apex could go
161e803a5608956271d8120be37a1b383d14b647Mark Andrews stale due to an incorrect timer setting. [RT #23769]
5f8d6cec48cef9055359c628942d633693f732b2Evan Hunt3091. [bug] Fixed a bug in which zone keys that were published
5f8d6cec48cef9055359c628942d633693f732b2Evan Hunt and then subsequently activated could fail to trigger
0606c47750ad362909f010db2ef1ff8dcc96f9cbEvan Hunt automatic signing. [RT #22911]
0606c47750ad362909f010db2ef1ff8dcc96f9cbEvan Hunt3090. [func] Make --with-gssapi default [RT #23738]
9b895f30f1734fd463a02b27cfd0cf36ec9893d5Evan Hunt3089. [func] dnssec-dsfromkey now supports reading keys from
9b895f30f1734fd463a02b27cfd0cf36ec9893d5Evan Hunt standard input "dnssec-dsfromkey -f -". [RT# 20662]
9b895f30f1734fd463a02b27cfd0cf36ec9893d5Evan Hunt3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
e4d0018d4c9c05fb2a2dbac05a67cc9ddbe2c3d9Mark Andrews and add setup.sh in order to resolve changing
e4d0018d4c9c05fb2a2dbac05a67cc9ddbe2c3d9Mark Andrews named.conf issue. [RT #23687]
00112618bc042f734de7b5ac86506cacb9acf36dMark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
00112618bc042f734de7b5ac86506cacb9acf36dMark Andrews type "external" could cause a crash. [RT #23735]
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt3086. [bug] Running dnssec-settime -f on an old-style key will
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt now force an update to the new key format even if no
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt other change has been specified, using "-P now -A now"
0bbe3273a224aa07b6af4165a26fd26d6f30c0adEvan Hunt as default values. [RT #22474]
445a354e63f84ac884d923f697b598b83288dc64Evan Hunt3085. [func] New '-R' option in dnssec-signzone forces removal
445a354e63f84ac884d923f697b598b83288dc64Evan Hunt of signatures which have not yet expired but
7d65cbaca0839ae23358dce26de426be1301657aMark Andrews were generated by a key that no longer exists.
bee9a28af0f923c205f76819618ed7ffcf3f6997Evan Hunt3084. [func] A new command "rndc sync" dumps pending changes in
bee9a28af0f923c205f76819618ed7ffcf3f6997Evan Hunt a dynamic zone to disk; "rndc sync -clean" also
bee9a28af0f923c205f76819618ed7ffcf3f6997Evan Hunt removes the journal file after syncing. Also,
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn "rndc freeze" no longer removes journal files.
8009525601d946805fae58b037cf7dad0da516f8Curtis Blackburn3083. [bug] NOTIFY messages were not being sent when generating
c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews a NSEC3 chain incrementally. [RT #23702]
c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840eMark Andrews3082. [port] strtok_r is threads only. [RT #23747]
2c2be89824d3899591d34c26adb155da6a993ce3Evan Hunt3081. [bug] Failure of DNAME substitution did not return
2c2be89824d3899591d34c26adb155da6a993ce3Evan Hunt YXDOMAIN. [RT #23591]
fb507315d4a921ffa9e2fd617cb3439ec8c15ca8Evan Hunt3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
ae871ebb28959bed920cc96cd9e91063b6625b78Mark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
49ae04f6ee2f2e2578e6cd8cd3d4c74e9098ccb0Mark Andrews3078. [func] Added a new include file with function typedefs
49ae04f6ee2f2e2578e6cd8cd3d4c74e9098ccb0Mark Andrews for the DLZ "dlopen" driver. [RT #23629]
d999ca28d40337907b55eebc28a255b638702379Evan Hunt3077. [bug] zone.c:zone_refreshkeys() incorrectly called
d999ca28d40337907b55eebc28a255b638702379Evan Hunt dns_zone_attach(), use zone->irefs instead. [RT #23303]
fd63f3110fe9a20d6188bc30ebf4b44595bac8eeMark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
fd63f3110fe9a20d6188bc30ebf4b44595bac8eeMark Andrews dnssec-keyfromlabel sets the default TTL of the
fd63f3110fe9a20d6188bc30ebf4b44595bac8eeMark Andrews key. When possible, automatic signing will use that
15eb0cb8e15fc0f4f02713fd8d993476f0394763Evan Hunt TTL when the key is published. [RT #23304]
225146b2c8c7de8dcff979841b56b15aef8aded2Mark Andrews3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
225146b2c8c7de8dcff979841b56b15aef8aded2Mark Andrews timestamp when determining which keys are active.
434bfc3dfa2003ba0dd4b2392286806131fd6724Evan Hunt3074. [bug] Make the adb cache read through for zone data and
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt glue learn for zone named is authoritative for.
6b0434299b05b6ca05c6836b9e8fbb7e67f05fb8Mark Andrews3073. [bug] managed-keys changes were not properly being recorded.
eb5e0b8dec22de22dd824959e39b26c4f5b1c52dMark Andrews3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
77cf489a5fad28089cd9c2635a9b2494627545e1Mark Andrews3071. [bug] has_nsec could be used unintialised in
77cf489a5fad28089cd9c2635a9b2494627545e1Mark Andrews update.c:next_active. [RT #20256]
0a47bc90af557138a2aaff614ad73d95155ddd9eMark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
20489550151432d8d99c3f49629c7c718fdca6abMark Andrews3069. [cleanup] Silence warnings messages from clang static analysis.
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews3068. [bug] Named failed to build with a OpenSSL without engine
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews support. [RT #23473]
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
49c1e0d18d6f8b894ce2e6b485ef666599a83c21Mark Andrews select the master/slave zones. [RT #23580]
37bd255fd499c26aaf474f4294212951b84d9068Mark Andrews3066. [func] The DLZ "dlopen" driver is now built by default,
37bd255fd499c26aaf474f4294212951b84d9068Mark Andrews no longer requiring a configure option. To
7aa21a491d9468bfc29d8cc331a4e963874426dfFrancis Dupont disable it, use "configure --without-dlopen".
7aa21a491d9468bfc29d8cc331a4e963874426dfFrancis Dupont Driver also supported on win32. [RT #23467]
34416a7954da96c5a5f5803fe02f059cb94bf6fdMark Andrews3065. [bug] RRSIG could have time stamps too far in the future.
11e9195ad15d1a3f2b4dcd79b64a6e19d89bbac3Mark Andrews3064. [bug] powerpc: add sync instructions to the end of atomic
6100b1769956200b2815803ab7b35556396ce0d1Mark Andrews operations. [RT #23469]
03152360db6fcb0fcc95fa63c20c5c829c95f1f6Mark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
aacd7daaf7859de742ab35eac00e70676b1b9f4fEvan Hunt3062. [func] Made several changes to enhance human readability
aacd7daaf7859de742ab35eac00e70676b1b9f4fEvan Hunt of DNSSEC data in dig output and in generated
a6d48ae49345c1995c7ac7c0628bf5f9eac0719aJeremy C. Reed - DNSKEY record comments are more verbose, no
a379c8c108de279cc4e09139c12457c1531bd122Mark Andrews longer used in multiline mode only
a379c8c108de279cc4e09139c12457c1531bd122Mark Andrews - multiline RRSIG records reformatted
a379c8c108de279cc4e09139c12457c1531bd122Mark Andrews - multiline output mode for NSEC3PARAM records
7433a204d32673e9f6747172f202272cc5bfe27cMark Andrews - "dig +norrcomments" suppresses DNSKEY comments
7433a204d32673e9f6747172f202272cc5bfe27cMark Andrews - "dig +split=X" breaks hex/base64 records into
7433a204d32673e9f6747172f202272cc5bfe27cMark Andrews fields of width X; "dig +nosplit" disables this.
1a4725bef25e60de161f77318f362c327b690d72Mark Andrews3061. [func] New option "dnssec-signzone -D", only write out
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt generated DNSSEC records. [RT #22896]
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt3060. [func] New option "dnssec-signzone -X <date>" allows
33a296aa3a3d5e808cabf556c95f29cc1eecff16Evan Hunt specification of a separate expiration date
c9ee72cb3acb4562c43333b206737ee94cbbda5eMark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
fb623f9a07857d95cf6c47db0aa81a28c3bbc5c0Mark Andrews3059. [test] Added a regression test for change #3023.
5116f25421090dffe637eb8f6cf7b44acd83678bMark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
5116f25421090dffe637eb8f6cf7b44acd83678bMark Andrews reload to fail, if a log file specified in the conf
5116f25421090dffe637eb8f6cf7b44acd83678bMark Andrews file isn't a plain file. [RT #22771]
00043fc284892099b309be37340ae80893146c69Mark Andrews3057. [bug] "rndc secroots" would abort after the first error
00043fc284892099b309be37340ae80893146c69Mark Andrews and so could miss some views. [RT #23488]
9fa2a0deed3b880f3bf04d4f615c13a0d67cc0ceMark Andrews3056. [func] Added support for URI resource record. [RT #23386]
97a2a26cd93e153dcf8fb1ea6bf2311426496251Mark Andrews3055. [placeholder]
c1b8fa61604e153d6f2c6d91acc9481446e631f2Mark Andrews3054. [bug] Added elliptic curve support check in
c1b8fa61604e153d6f2c6d91acc9481446e631f2Mark Andrews GOST OpenSSL engine detection. [RT #23485]
c7965f84c23ea9e9b8d6508e4f77d596c227ab75Evan Hunt3053. [bug] Under a sustained high query load with a finite
c7965f84c23ea9e9b8d6508e4f77d596c227ab75Evan Hunt max-cache-size, it was possible for cache memory
c7965f84c23ea9e9b8d6508e4f77d596c227ab75Evan Hunt to be exhausted and not recovered. [RT #23371]
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt3052. [test] Fixed last autosign test report. [RT #23256]
76df835d59b4715dbd3346fd65114714a42495c9Mark Andrews3051. [bug] NS records obsure DNAME records at the bottom of the
76df835d59b4715dbd3346fd65114714a42495c9Mark Andrews zone if both are present. [RT #23035]
18df9e628ea10c7d607f43fcfd935e7924731f24Evan Hunt3050. [bug] The autosign system test was timing dependent.
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews Wait for the initial autosigning to complete
18df9e628ea10c7d607f43fcfd935e7924731f24Evan Hunt before running the rest of the test. [RT #23035]
cb69994ff89179166d5e21ccc7a34223b51676c0Mark Andrews3049. [bug] Save and restore the gid when creating creating
cb69994ff89179166d5e21ccc7a34223b51676c0Mark Andrews named.pid at startup. [RT #23290]
3ad8f24ddd043148525b68a676ebdc71f6900ca9Mark Andrews3048. [bug] Fully separate view key mangement. [RT #23419]
2bae76022cbdf8a207d4c3982b589156e1a09e09Evan Hunt3047. [bug] DNSKEY NODATA responses not cached fixed in
2bae76022cbdf8a207d4c3982b589156e1a09e09Evan Hunt validator.c. Tests added to dnssec system test.
2634686b14ccdf0aa18a6d346628d03ce3e3d0b4Mark Andrews3046. [bug] Use RRSIG original TTL to compute validated RRset
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews and RRSIG TTL. [RT #23332]
b5f4cc132e91afb1217f4aa79424793c0e11c09aMark Andrews3045. [removed] Replaced by change #3050.
8afea636ab0c07399aa3e2410b2cfbd41099df98Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
8afea636ab0c07399aa3e2410b2cfbd41099df98Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
d6f99498d624d5c5c8ee45067df02e6a6b35a1a3Mark Andrews version 0.12) for development of future unit tests.
d6f99498d624d5c5c8ee45067df02e6a6b35a1a3Mark Andrews Use configure --with-atf to build ATF internally
d6f99498d624d5c5c8ee45067df02e6a6b35a1a3Mark Andrews or configure --with-atf=prefix to use an external
54a00ea5ca94ff9e3a4204aea78639ba781d5865Mark Andrews copy. [RT #23209]
c4348cb50f039f0785bd1d6f6a37c0a85d15c1f4Curtis Blackburn3042. [bug] dig +trace could fail attempting to use IPv6
997c2c5116927bab77284c24c3bd0d7f646da5eeMark Andrews addresses on systems with only IPv4 connectivity.
e548e07a9a2f1ec64774d7ae872d530eaf270eb7Mark Andrews3041. [bug] dnssec-signzone failed to generate new signatures on
e548e07a9a2f1ec64774d7ae872d530eaf270eb7Mark Andrews ttl changes. [RT #23330]
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews3040. [bug] Named failed to validate insecure zones where a node
fdc41dd109fba6b95a4ed7355210118ad9fe5e90Jeremy C. Reed with a CNAME existed between the trust anchor and the
d1e22676de16e6dee54c58b27cca11c5fb8f1ff5Mark Andrews top of the zone. [RT #23338]
0e1dfb8ff5ac2cf1215691ffc32d7a0b76709721Mark Andrews3039. [func] Redirect on NXDOMAIN support. [RT #23146]
8e091f3d3ee0079f35dfccdc4479105e8f087ab2Mark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
8e091f3d3ee0079f35dfccdc4479105e8f087ab2Mark Andrews3037. [doc] Update COPYRIGHT to contain all the individual
7ace3277956c49f7554b7130ef761bde3b35db30Mark Andrews copyright notices that cover various parts.
7ace3277956c49f7554b7130ef761bde3b35db30Mark Andrews3036. [bug] Check built-in zone arguments to see if the zone
06ace051e7522b153b487581c9439fc8c162fb18Mark Andrews is re-usable or not. [RT #21914]
06ace051e7522b153b487581c9439fc8c162fb18Mark Andrews3035. [cleanup] Simplify by using strlcpy. [RT #22521]
5d4343a9988cd5bd057aa385bb8c5e72d41202d1Evan Hunt3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
75ae74f8fd0847817bce2db7c868b179db67f019Mark Andrews3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
16bd30ae6987cd4ba4fe3b873e72abf5b7178c26Mark Andrews3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
16bd30ae6987cd4ba4fe3b873e72abf5b7178c26Mark Andrews3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
a499dddb4b4d4db2bb6ced82b5ee7a459e23603eEvan Hunt3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
f45f6541857a5dbb93ac24f321b9cf350ce242baMark Andrews3029. [bug] isc_netaddr_format() handle a zero sized buffer.
673a2bb07b9e54a32699a9d7ca916dc5114d8d45Mark Andrews3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
e3c273a865bede10bfb1e0f29d300706cae3e00dMark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
d640b4a0ab9dec252749793f78a1ed1e8551ea19Evan Hunt catch NULL pointer dereferences before they happen.
fdb4ae8f6c00d8ea03bde929bd4e47056972017dMark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
fdb4ae8f6c00d8ea03bde929bd4e47056972017dMark Andrews after calling grow_headerspace() and if not
fdb4ae8f6c00d8ea03bde929bd4e47056972017dMark Andrews re-call grow_headerspace() until we do. [RT #22521]
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt3025. [bug] Fixed a possible deadlock due to zone resigning.
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt3024. [func] RTT Banding removed due to minor security increase
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt but major impact on resolver latency. [RT #23310]
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt3023. [bug] Named could be left in an inconsistent state when
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt receiving multiple AXFR response messages that were
421d4a06479e61fbdc35087f3c4abc9fe65ad72aEvan Hunt not all TSIG-signed. [RT #23254]
0949306cb96f9ccbb7d0205584ed2db293a5aad2Evan Hunt3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
964bdcd7add44e5bc87e1d44f2f4ece351b28eedEvan Hunt3021. [bug] Change #3010 was incomplete. [RT #22296]
964bdcd7add44e5bc87e1d44f2f4ece351b28eedEvan Hunt3020. [bug] auto-dnssec failed to correctly update the zone when
cf0a69e999430722e3c3942929eeb304b658dfb0Evan Hunt changing the DNSKEY RRset. [RT #23232]
71697fd082b1c76562dc80fa91787af3860146bfEvan Hunt3019. [test] Test: check apex NSEC3 records after adding DNSKEY
71697fd082b1c76562dc80fa91787af3860146bfEvan Hunt record via UPDATE. [RT #23229]
71697fd082b1c76562dc80fa91787af3860146bfEvan Hunt3018. [bug] Named failed to check for the "none;" acl when deciding
71697fd082b1c76562dc80fa91787af3860146bfEvan Hunt if a zone may need to be re-signed. [RT #23120]
c174d5c13c03dd59283243e3fd5461d41140a798Evan Hunt3017. [doc] dnssec-keyfromlabel -I was not properly documented.
927e4c9fecf448bf3894c68fcaf9dc2f89557f3aEvan Hunt3016. [bug] rndc usage missing '-b'. [RT #22937]
4b13ea47db7d72596d3fa10c30b20c16b4936747Evan Hunt3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
5b7abbef511cea0b568be0bc8d5b3120a0b9034dEvan Hunt IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
5b7abbef511cea0b568be0bc8d5b3120a0b9034dEvan Hunt3014. [placeholder]
26bda028ad3854d2e695feb9333ef3dbe6b2fa1aEvan Hunt3013. [bug] The DNS64 ttl was not always being set as expected.
eb4458b4784a2206d939f9c4cfed4b37b076b5bcEvan Hunt3012. [bug] Remove DNSKEY TTL change pairs before generating
eb4458b4784a2206d939f9c4cfed4b37b076b5bcEvan Hunt signing records for any remaining DNSKEY changes.
1da46be57223340c07ea8505d485ec4397a4e484Evan Hunt3011. [func] Change the default query timeout from 30 seconds
1da46be57223340c07ea8505d485ec4397a4e484Evan Hunt to 10. Allow setting this in named.conf using the new
9d69017bc635f7be5c8df2b18ae6d4491fc5bb63Mark Andrews 'resolver-query-timeout' option, which specifies a max
9d69017bc635f7be5c8df2b18ae6d4491fc5bb63Mark Andrews time in seconds. 0 means 'default' and anything longer
9d69017bc635f7be5c8df2b18ae6d4491fc5bb63Mark Andrews than 30 will be silently set to 30. [RT #22852]
9d4ec6d2c59bd5845ac8bca5a5d790be9a772862Evan Hunt3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
caa0a135d49dfbe3de9711eacf94d6e112a77688Mark Andrews for refreshing managed-keys. [RT #22296]
9fa5a723e188ddb5e6165af4957ba789e17cfdf5Evan Hunt3009. [bug] clients-per-query code didn't work as expected with
f42c0dcca86f2009c089e27ba513cb6fc9ee88baEvan Hunt particular query patterns. [RT #22972]
f42c0dcca86f2009c089e27ba513cb6fc9ee88baEvan Hunt --- 9.8.0b1 released ---
7aba1a9660630ab7d16792b7388d9b8f56d7bf0fEvan Hunt3008. [func] Response policy zones (RPZ) support. [RT #21726]
682a574e6716cea30386c38e68f4fc6c3d4b20e7Mark Andrews3007. [bug] Named failed to preserve the case of domain names in
682a574e6716cea30386c38e68f4fc6c3d4b20e7Mark Andrews rdata which is not compressible when writing master
3b9ba6bd74e2cbbc0f821e5483ebf46fa8c4d8deEvan Hunt files. [RT #22863]
3b9ba6bd74e2cbbc0f821e5483ebf46fa8c4d8deEvan Hunt3006. [func] Allow dynamically generated TSIG keys to be preserved
3b9ba6bd74e2cbbc0f821e5483ebf46fa8c4d8deEvan Hunt across restarts of named. Initially this is for
1761ecb90ff770b87d0f021e13ad94d3e8c6f2afFrancis Dupont TSIG keys generated using GSSAPI. [RT #22639]
1761ecb90ff770b87d0f021e13ad94d3e8c6f2afFrancis Dupont3005. [port] Solaris: Work around the lack of
f48358cffb35bb4b24731c136b07816bdcdce651Evan Hunt gsskrb5_register_acceptor_identity() by setting
f48358cffb35bb4b24731c136b07816bdcdce651Evan Hunt the KRB5_KTNAME environment variable to the
f48358cffb35bb4b24731c136b07816bdcdce651Evan Hunt contents of tkey-gssapi-keytab. Also fixed
c3b554214416b434c6db7881907c962110aecba9Evan Hunt test errors on MacOSX. [RT #22853]
c3b554214416b434c6db7881907c962110aecba9Evan Hunt3004. [func] DNS64 reverse support. [RT #22769]
31707708c585c53b61ca1edb2e224e6bb1b985a5Evan Hunt3003. [experimental] Added update-policy match type "external",
b7e40659efd6cf6f5e6b3b1f904f16f74efb0d16Evan Hunt enabling named to defer the decision of whether to
b7e40659efd6cf6f5e6b3b1f904f16f74efb0d16Evan Hunt allow a dynamic update to an external daemon.
b7e40659efd6cf6f5e6b3b1f904f16f74efb0d16Evan Hunt (Contributed by Andrew Tridgell.) [RT #22758]
caa0a135d49dfbe3de9711eacf94d6e112a77688Mark Andrews3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
166c4c6c5bafd25283b797979f77d780856fef30Evan Hunt3001. [func] Added a default trust anchor for the root zone, which
166c4c6c5bafd25283b797979f77d780856fef30Evan Hunt can be switched on by setting "dnssec-validation auto;"
beb12aad6bebb0d6891613e65a4e19a42e6e3f8eMark Andrews in the named.conf options. [RT #21727]
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews3000. [bug] More TKEY/GSS fixes:
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews - nsupdate can now get the default realm from
8e15d5eb3a000f1341e6bea0ddbc28d6dd2a0591Mark Andrews the user's Kerberos principal
1b2a4ce2b112ec91b0f13c411144e721c7952914Evan Hunt - corrected gsstest compilation flags
1b2a4ce2b112ec91b0f13c411144e721c7952914Evan Hunt - improved documentation
1b2a4ce2b112ec91b0f13c411144e721c7952914Evan Hunt - fixed some NULL dereferences
e59937c7283216ca22ce6e7937b06eab6d97f4acEvan Hunt2999. [func] Add GOST support (RFC 5933). [RT #20639]
89be55dc9040b119fd85bb33e7dc97d2ad454c6fEvan Hunt2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
89be55dc9040b119fd85bb33e7dc97d2ad454c6fEvan Hunt to the task api. [RT #22776]
89be55dc9040b119fd85bb33e7dc97d2ad454c6fEvan Hunt2997. [func] named -V now reports the OpenSSL and libxml2 verions
c6eb92beb1951b0634c349b24891522c273e9f69Mark Andrews it was compiled against. [RT #22687]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt2996. [security] Temporarily disable SO_ACCEPTFILTER support.
bf0441a339755618efcbe0b427afa5cb8e62dc68Evan Hunt2995. [bug] The Kerberos realm was not being correctly extracted
bf0441a339755618efcbe0b427afa5cb8e62dc68Evan Hunt from the signer's identity. [RT #22770]
8144dc702beec803d7b847e6f28ce845c57ae468Mark Andrews2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
8144dc702beec803d7b847e6f28ce845c57ae468Mark Andrews do not use threads on earlier versions. Also kill
1ac1cc12fc993b060e868a94ec1c292c9ffbccc4Jeremy C. Reed the unproven-pthreads, mit-pthreads, and ptl2 support.
5f1dc0d505d7f53f1e89a1a41e4c2415af4934feEvan Hunt2993. [func] Dynamically grow adb hash tables. [RT #21186]
5f1dc0d505d7f53f1e89a1a41e4c2415af4934feEvan Hunt2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
276457f7a38f56a5f762238ab89bb45e27948af6Evan Hunt for looking at a secure delegation. [RT #22059]
b0bd5a3f730410e0bc7ac4e05f061616daf818b2Mark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
276457f7a38f56a5f762238ab89bb45e27948af6Evan Hunt dynamic zones. [RT #22365]
2347c72129ce9393578966225f915284f0730214Mark Andrews2990. [bug] 'dnssec-settime -S' no longer tests prepublication
1e34fe9044874422104e84373988d07876f716b6Mark Andrews interval validity when the interval is set to 0.
30d6dc14e918f9f72ff090c34d6e328ae8e7d68bCurtis Blackburn2989. [func] Added support for writable DLZ zones. (Contributed
30d6dc14e918f9f72ff090c34d6e328ae8e7d68bCurtis Blackburn by Andrew Tridgell of the Samba project.) [RT #22629]
5183f9d9daa139cbf000c12709877f62e79dfb14Evan Hunt2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
0193e63da91a4da27809b9a528eb043fa6b4da26Mark Andrews of external DLZ drivers that can be loaded as
0193e63da91a4da27809b9a528eb043fa6b4da26Mark Andrews shared objects at runtime rather than linked with
0193e63da91a4da27809b9a528eb043fa6b4da26Mark Andrews named. Currently this is switched on via a
17a00ff54c51f6bdfddd7d9ceaef6f2dcf387cc1Mark Andrews compile-time option, "configure --with-dlz-dlopen".
17a00ff54c51f6bdfddd7d9ceaef6f2dcf387cc1Mark Andrews Note: the syntax for configuring DLZ zones
17a00ff54c51f6bdfddd7d9ceaef6f2dcf387cc1Mark Andrews is likely to be refined in future releases.
5f238c3c64dd68100dc1b60f9c1e178522d1b333Mark Andrews (Contributed by Andrew Tridgell of the Samba
5f238c3c64dd68100dc1b60f9c1e178522d1b333Mark Andrews project.) [RT #22629]
2cd3c8856c97b770cc4843bfad63922e23a6f661Mark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
f3c8e48b95996c3020d138b87ee8941da29cc124Evan Hunt adding a "tkey-gssapi-keytab" option. If set,
f3c8e48b95996c3020d138b87ee8941da29cc124Evan Hunt updates will be allowed with any key matching
f3c8e48b95996c3020d138b87ee8941da29cc124Evan Hunt a principal in the specified keytab file.
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews "tkey-gssapi-credential" is no longer required
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews and is expected to be deprecated. (Contributed
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews by Andrew Tridgell of the Samba project.)
dc775799d9a5a61f485bff5b883a60cc748afaf3Evan Hunt2986. [func] Add new zone type "static-stub". It's like a stub
428dd5c588cfe0dc1519af728e6e75c10aeb4439Curtis Blackburn zone, but the nameserver names and/or their IP
0d18225b5e2d17e4bef0077212fd6927ca58dda6Evan Hunt addresses are statically configured. [RT #21474]
0d18225b5e2d17e4bef0077212fd6927ca58dda6Evan Hunt2985. [bug] Add a regression test for change #2896. [RT #21324]
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews2984. [bug] Don't run MX checks when the target of the MX record
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews is ".". [RT #22645]
7ee225cf90fd06de61682b442600af88b68b99dbMark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
5ba1d3dcc5739a1f77ec2875b276b163a42ef1e8Evan Hunt --- 9.8.0a1 released ---
5ba1d3dcc5739a1f77ec2875b276b163a42ef1e8Evan Hunt2982. [bug] Reference count dst keys. dst_key_attach() can be used
af9f195c9e128fc9cc5912498b8f7f26f07887c3Evan Hunt increment the reference count.
af9f195c9e128fc9cc5912498b8f7f26f07887c3Evan Hunt Note: dns_tsigkey_createfromkey() callers should now
e47208b6fb724cba7053baee4246b308e35403a2Evan Hunt always call dst_key_free() rather than setting it
e47208b6fb724cba7053baee4246b308e35403a2Evan Hunt to NULL on success. [RT #22672]
34f3693b93f3ba16634f0c08368ef7f81182ef93Evan Hunt2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
e72a81148a8c68de2ea5e8169aaa4a7762f6ed79Evan Hunt2980. [bug] named didn't properly handle UPDATES that changed the
1a076410c260ff1d3124ce8b7e22ac111e9cf92aEvan Hunt TTL of the NSEC3PARAM RRset. [RT #22363]
96a116178567d4eb22e57aba533073de9a2f9d84Evan Hunt2979. [bug] named could deadlock during shutdown if two
96a116178567d4eb22e57aba533073de9a2f9d84Evan Hunt "rndc stop" commands were issued at the same
03b5d2689df73fa9a50ff684511fa9d81f317e6cEvan Hunt time. [RT #22108]
03b5d2689df73fa9a50ff684511fa9d81f317e6cEvan Hunt2978. [port] hpux: look for <devpoll.h> [RT #21919]
93aba6dcec9855cd9c69c10717f62c350ff766eaMark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
afc047fdb535cdd44e20ffbb62d12b2408f0a07eMark Andrews key. [RT #22573]
26bb3b7a67b833f0a18072567de036226890ca1aMark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
26bb3b7a67b833f0a18072567de036226890ca1aMark Andrews wrong lock which could lead to server deadlock.
9a785712f1eaccba2b43d29a76f4c02ef2c391d0Mark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
ec8a802114d3cb12805fecf1dd209fe46706b35bMark Andrews consistency check examining the existing version
ec8a802114d3cb12805fecf1dd209fe46706b35bMark Andrews of the zone rather than the new version resulting
73ad83bcf0664c2774bec67d688a590e992d4629Evan Hunt from the UPDATE. [RT #22413]
ff5ac6d4213e3e2f3f6a93db8c5e65cc170a7e2bEvan Hunt2973. [bug] bind.keys.h was being removed by the "make clean"
ff5ac6d4213e3e2f3f6a93db8c5e65cc170a7e2bEvan Hunt at the end of configure resulting in build failures
ff5ac6d4213e3e2f3f6a93db8c5e65cc170a7e2bEvan Hunt where there is very old version of perl installed.
a6d43d18b1f6164fd144b2fa25ea57f5566b3bf9Evan Hunt Move it to "make maintainer-clean". [RT #22230]
a6d43d18b1f6164fd144b2fa25ea57f5566b3bf9Evan Hunt2972. [bug] win32: address windows socket errors. [RT #21906]
330f98fe3b12535072708c273eaf59f7bf887065Evan Hunt2971. [bug] Fixed a bug that caused journal files not to be
330f98fe3b12535072708c273eaf59f7bf887065Evan Hunt compacted on Windows systems as a result of
d3c8ba219f7c0fd31aabd06ee6b8ef0e92ef9e14Mark Andrews non-POSIX-compliant rename() semantics. [RT #22434]
d3c8ba219f7c0fd31aabd06ee6b8ef0e92ef9e14Mark Andrews2970. [security] Adding a NO DATA negative cache entry failed to clear
b4914b3d69de3eb57bcf1d6cb3bb8e0b645c1081Mark Andrews any matching RRSIG records. A subsequent lookup of
b4914b3d69de3eb57bcf1d6cb3bb8e0b645c1081Mark Andrews of NO DATA cache entry could trigger a INSIST when the
b99bfa184bc9375421b5df915eea7dfac6a68a99Evan Hunt unexpected RRSIG was also returned with the NO DATA
b99bfa184bc9375421b5df915eea7dfac6a68a99Evan Hunt cache entry.
b99bfa184bc9375421b5df915eea7dfac6a68a99Evan Hunt CVE-2010-3613, VU#706148. [RT #22288]
c4a453fa5c3d8b21d8982137b03e052c0d446c57Evan Hunt2969. [security] Fix acl type processing so that allow-query works
c4a453fa5c3d8b21d8982137b03e052c0d446c57Evan Hunt in options and view statements. Also add a new
4adf97c32fcca7d00e5756607fd045f2aab9c3d4Mark Andrews set of tests to verify proper functioning.
4adf97c32fcca7d00e5756607fd045f2aab9c3d4Mark Andrews CVE-2010-3615, VU#510208. [RT #22418]
1cc4695f0da63f0190e3514adccf6a96f3dc1519Mark Andrews2968. [security] Named could fail to prove a data set was insecure
1cc4695f0da63f0190e3514adccf6a96f3dc1519Mark Andrews before marking it as insecure. One set of conditions
1cc4695f0da63f0190e3514adccf6a96f3dc1519Mark Andrews that can trigger this occurs naturally when rolling
3a6d62c59f73d024d1b2ba2ac94d7600530166ffMark Andrews DNSKEY algorithms.
ad668472f1a924e0355faf313e7cdba1970161c8Evan Hunt CVE-2010-3614, VU#837744. [RT #22309]
ad668472f1a924e0355faf313e7cdba1970161c8Evan Hunt2967. [bug] 'host -D' now turns on debugging messages earlier.
dc1ed2622fa78dc21dda49488c496437083e17c9Evan Hunt2966. [bug] isc_print_vsnprintf() failed to check if there was
dc1ed2622fa78dc21dda49488c496437083e17c9Evan Hunt space available in the buffer when adding a left
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews justified character with a non zero width,
dd8bbbfac3f3f14235820a593f1efd8e3ba8d2faMark Andrews (e.g. "%-1c"). [RT #22270]
99425bedc4dcd586f751148bbdcba19578c6f39eMark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
99425bedc4dcd586f751148bbdcba19578c6f39eMark Andrews RFC 4634. [RT #21702]
92754e2e4954e497eb2983c76198889b5a3218aaEvan Hunt2964. [placeholder]
92754e2e4954e497eb2983c76198889b5a3218aaEvan Hunt2963. [security] The allow-query acl was being applied instead of the
8c460e01594e83f21ff5e60cd7a417a1ed618703Mark Andrews allow-query-cache acl to cache lookups. [RT #22114]
99bf6a57d9f6b55da6de9c22fb6883a4bf7d569eEvan Hunt2962. [port] win32: add more dependencies to BINDBuild.dsw.
5805fc20a3f65ee3a78b66aa17801f1d3103cbe1Curtis Blackburn2961. [bug] Be still more selective about the non-authoritative
e57a83b57659ae1d4f755a7841b519c047ec7f75Evan Hunt answers we apply change 2748 to. [RT #22074]
e57a83b57659ae1d4f755a7841b519c047ec7f75Evan Hunt2960. [func] Check that named accepts non-authoritative answers.
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt2959. [func] Check that named starts with a missing masterfile.
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt2958. [bug] named failed to start with a missing master file.
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt2957. [bug] entropy_get() and entropy_getpseudo() failed to match
67adc03ef81fb610f8df093b17f55275ee816754Evan Hunt the API for RAND_bytes() and RAND_pseudo_bytes()
bbb3705e4cbdacf7cf6da7e448d79d97fdab2411Mark Andrews respectively. [RT #21962]
4bf686cf5d6b83981abdf2d8157c829922acc6d4Evan Hunt2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
4bf686cf5d6b83981abdf2d8157c829922acc6d4Evan Hunt2955. [func] Provide more detail in the recursing log. [RT #22043]
da4436812c7108dd39e09069d4af770eaa738c7fMark Andrews2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
da4436812c7108dd39e09069d4af770eaa738c7fMark Andrews build_sqldbinstance failure. [RT #21623]
c82da2167dcbd8300f0eaa81fb900c0b17e8f94cMark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
c82da2167dcbd8300f0eaa81fb900c0b17e8f94cMark Andrews exact match" message when returning a wildcard
c82da2167dcbd8300f0eaa81fb900c0b17e8f94cMark Andrews no data response. [RT #21744]
384fef003441df4067b773688237700513390f9eEvan Hunt2952. [port] win32: named-checkzone and named-checkconf failed
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews to initialise winsock. [RT #21932]
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews2951. [bug] named failed to generate a correct signed response
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews in a optout, delegation only zone with no secure
06a05efc07ac7b6ff1973a6463291f5d48ece6ebMark Andrews delegations. [RT #22007]
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt2950. [bug] named failed to perform a SOA up to date check when
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt falling back to TCP on UDP timeouts when
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt ixfr-from-differences was set. [RT #21595]
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt2949. [bug] dns_view_setnewzones() contained a memory leak if
831f59eb43b56642b00f82e07722836d2f9593abEvan Hunt it was called multiple times. [RT #21942]
a13aa526be16869d1284256fbb2136f4d50ed1d7Evan Hunt2948. [port] MacOS: provide a mechanism to configure the test
a13aa526be16869d1284256fbb2136f4d50ed1d7Evan Hunt interfaces at reboot. See bin/tests/system/README
a13aa526be16869d1284256fbb2136f4d50ed1d7Evan Hunt for details.
741ebf10047c3e32e1a0691316ec45666f003583Evan Hunt2947. [placeholder]
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt2946. [doc] Document the default values for the minimum and maximum
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt zone refresh and retry values in the ARM. [RT #21886]
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt2945. [doc] Update empty-zones list in ARM. [RT #21772]
4eb998928b9aef0ceda42d7529980d658138698aEvan Hunt2944. [maint] Remove ORCHID prefix from built in empty zones.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt2943. [func] Add support to load new keys into managed zones
c218f119cd052ab9f9cbf92442f08f6cafaccd62Evan Hunt without signing immediately with "rndc loadkeys".
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt Add support to link keys with "dnssec-keygen -S"
72c86c105a7cf315036d7131a4ef408bc6227639Evan Hunt and "dnssec-settime -S". [RT #21351]
72c86c105a7cf315036d7131a4ef408bc6227639Evan Hunt2942. [contrib] zone2sqlite failed to setup the entropy sources.
21a7fde6ba34c62f4859a4c19de4f49ec1bab474Evan Hunt2941. [bug] sdb and sdlz (dlz's zone database) failed to support
21a7fde6ba34c62f4859a4c19de4f49ec1bab474Evan Hunt DNAME at the zone apex. [RT #21610]
aababae79572d8c80fcec9b809671987007451c9Mark Andrews2940. [port] Remove connection aborted error message on
aababae79572d8c80fcec9b809671987007451c9Mark Andrews Windows. [RT #21549]
3a0da183bb40bd120698102b20b61ef12665c09bMark Andrews2939. [func] Check that named successfully skips NSEC3 records
3a0da183bb40bd120698102b20b61ef12665c09bMark Andrews that fail to match the NSEC3PARAM record currently
c1e88f8d8679501def1896fb4c4af927a70813ebEvan Hunt in use. [RT# 21868]
c1e88f8d8679501def1896fb4c4af927a70813ebEvan Hunt2938. [bug] When generating signed responses, from a signed zone
c1e88f8d8679501def1896fb4c4af927a70813ebEvan Hunt that uses NSEC3, named would use a uninitialised
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews pointer if it needed to skip a NSEC3 record because
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews it didn't match the selected NSEC3PARAM record for
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews zone. [RT# 21868]
af21fc66447083a01e41e533fe9737ffcf21cc2dMark Andrews2937. [bug] Worked around an apparent race condition in over
e7b9603ead84761813fd4598303b8e969ab4d7acMark Andrews memory conditions. Without this fix a DNS cache DB or
e7b9603ead84761813fd4598303b8e969ab4d7acMark Andrews ADB could incorrectly stay in an over memory state,
cff340c9e7ac9dc926f5f1f176d973d277c1b68bEvan Hunt effectively refusing further caching, which
cff340c9e7ac9dc926f5f1f176d973d277c1b68bEvan Hunt subsequently made a BIND 9 caching server unworkable.
550c92405fc1df47e725f2ecbaa5154c9239fcfdMark Andrews This fix prevents this problem from happening by
550c92405fc1df47e725f2ecbaa5154c9239fcfdMark Andrews polling the state of the memory context, rather than
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt making a copy of the state, which appeared to cause
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt a race. This is a "workaround" in that it doesn't
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt solve the possible race per se, but several experiments
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt proved this change solves the symptom. Also, the
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt polling overhead hasn't been reported to be an issue.
33b8db1bb3f0aa3a39db459e6a32a1082b8dce13Evan Hunt This bug should only affect a caching server that
19b037bcb900e75528bf6f2582d77c3f1a6d6714Evan Hunt specifies a finite max-cache-size. It's also quite
19b037bcb900e75528bf6f2582d77c3f1a6d6714Evan Hunt likely that the bug happens only when enabling threads,
19b037bcb900e75528bf6f2582d77c3f1a6d6714Evan Hunt but it's not confirmed yet. [RT #21818]
9ffd0f0270ef06bd60b1b2754bbeefbe1da33ce7Evan Hunt2936. [func] Improved configuration syntax and multiple-view
9ffd0f0270ef06bd60b1b2754bbeefbe1da33ce7Evan Hunt support for addzone/delzone feature (see change
77845708f756cfe921b845423be6410e26c167b7Evan Hunt #2930). Removed "new-zone-file" option, replaced
77845708f756cfe921b845423be6410e26c167b7Evan Hunt with "allow-new-zones (yes|no)". The new-zone-file
4f9f8fa0528ce843a3bdf7993e94463508d8320eEvan Hunt for each view is now created automatically, with
4f9f8fa0528ce843a3bdf7993e94463508d8320eEvan Hunt a filename generated from a hash of the view name.
4f9f8fa0528ce843a3bdf7993e94463508d8320eEvan Hunt It is no longer necessary to "include" the
53a4e18582ae0c50f3742d2f6b684231a50be038Curtis Blackburn new-zone-file in named.conf; this happens
53a4e18582ae0c50f3742d2f6b684231a50be038Curtis Blackburn automatically. Zones that were not added via
53a4e18582ae0c50f3742d2f6b684231a50be038Curtis Blackburn "rndc addzone" can no longer be removed with
53a4e18582ae0c50f3742d2f6b684231a50be038Curtis Blackburn "rndc delzone". [RT #19447]
5eab7b89825dd2ed4c0a7fc0ed45ad028170303eEvan Hunt2935. [bug] nsupdate: improve 'file not found' error message.
2b8dac99166f74532264f756f5c0b43a6b04d995Evan Hunt2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt2933. [bug] 'dig +nsid' used stack memory after it went out of
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt scope. This could potentially result in a unknown,
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt potentially malformed, EDNS option being sent instead
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt of the desired NSID option. [RT #21781]
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt2932. [cleanup] Corrected a numbering error in the "dnssec" test.
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt2931. [bug] Temporarily and partially disable change 2864
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt because it would cause infinite attempts of RRSIG
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt queries. This is an urgent care fix; we'll
2a184ff86544cc67c36e2ce6bb3ddb5ac44684b8Evan Hunt revisit the issue and complete the fix later.
501941f0b6cce74c2ff75b10aff3f230d5d37e4cEvan Hunt2930. [experimental] New "rndc addzone" and "rndc delzone" commads
501941f0b6cce74c2ff75b10aff3f230d5d37e4cEvan Hunt allow dynamic addition and deletion of zones.
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews To enable this feature, specify a "new-zone-file"
de1223830f23c2fcd343e40d0940aa591fc363b6Evan Hunt option at the view or options level in named.conf.
de1223830f23c2fcd343e40d0940aa591fc363b6Evan Hunt Zone configuration information for the new zones
85f89d58a50a86859c04069ea87b2b23b3325d11Evan Hunt will be written into that file. To make the new
85f89d58a50a86859c04069ea87b2b23b3325d11Evan Hunt zones persist after a restart, "include" the file
85f89d58a50a86859c04069ea87b2b23b3325d11Evan Hunt into named.conf in the appropriate view. (Note:
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt This feature is not yet documented, and its syntax
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt is expected to change.) [RT #19447]
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt2929. [bug] Improved handling of GSS security contexts:
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt - added LRU expiration for generated TSIGs
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt - added the ability to use a non-default realm
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt - added new "realm" keyword in nsupdate
c548cbbf6b92e4fa5c7c78114c97ef1e50b87379Evan Hunt - limited lifetime of generated keys to 1 hour
30b7c81c13391a6886eb9d12a7f9e0472a5c1110Mark Andrews or the lifetime of the context (whichever is
bdc7cf66ff626163801cc59b2fd25523da07d238Mark Andrews2928. [bug] Be more selective about the non-authoritative
bdc7cf66ff626163801cc59b2fd25523da07d238Mark Andrews answer we apply change 2748 to. [RT #21594]
bdc7cf66ff626163801cc59b2fd25523da07d238Mark Andrews2927. [placeholder]
118bdfd8c4b4dbdd47c17afe61e506fefee9c2daMark Andrews2926. [placeholder]
118bdfd8c4b4dbdd47c17afe61e506fefee9c2daMark Andrews2925. [bug] Named failed to accept uncachable negative responses
58154043cca0caf03d6fc1a47ed7f24681f24762Evan Hunt from insecure zones. [RT# 21555]
cfec3165b151ed9a0b5b7d5f1609dac9ff12efe3Evan Hunt2924. [func] 'rndc secroots' dump a combined summary of the
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews current managed keys combined with trusted keys.
cfec3165b151ed9a0b5b7d5f1609dac9ff12efe3Evan Hunt2923. [bug] 'dig +trace' could drop core after "connection
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews timeout". [RT #21514]
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt2922. [contrib] Update zkt to version 1.0.
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt2921. [bug] The resolver could attempt to destroy a fetch context
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt too soon. [RT #19878]
62d63e5f02a5e7fcda59cf361149e3d7c78477beEvan Hunt2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews to IPv4 clients. New acl 'filter-aaaa' (default any).
df925e6c66d45d960fbac0383169763967d2111cEvan Hunt2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
a81ae06ed3081753a73e7638919673be57eaf47fEvan Hunt2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
2425d8bb7ccf5dc956ad12d64d97b5a42e022930Evan Hunt2917. [func] Virtual time test framework. [RT #20801]
2425d8bb7ccf5dc956ad12d64d97b5a42e022930Evan Hunt2916. [func] Add framework to use IPv6 in tests.
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews2915. [cleanup] Be smarter about which objects we attempt to compile
740e7340c55e9f0cf80c6fbbf7e8d3c1bdeaa255Mark Andrews based on configure options. [RT #21444]
3c7df84b2019e454f6333ca354ef709f6451a2abMark Andrews2914. [bug] Make the "autosign" system test more portable.
c9297d37593b36de9978c122dbeaf1bb7ae8d19dMark Andrews2913. [func] Add pkcs#11 system tests. [RT #20784]
c9297d37593b36de9978c122dbeaf1bb7ae8d19dMark Andrews2912. [func] Windows clients don't like UPDATE responses that clear
0b8bd3a4ae3efd91f88e8901323faf99b5b06136Evan Hunt the zone section. [RT #20986]
0b8bd3a4ae3efd91f88e8901323faf99b5b06136Evan Hunt2911. [bug] dnssec-signzone didn't handle out of zone records well.
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt2910. [func] Sanity check Kerberos credentials. [RT #20986]
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt2909. [bug] named-checkconf -p could die if "update-policy local;"
8d21efc150998f9643f98ce5a4f0b17460e12043Evan Hunt was specified in named.conf. [RT #21416]
ab7a67829ffe2a7b3220a1cd366bc6255235923aJINMEI Tatuya2908. [bug] It was possible for re-signing to stop after removing
ab7a67829ffe2a7b3220a1cd366bc6255235923aJINMEI Tatuya a DNSKEY. [RT #21384]
ab7a67829ffe2a7b3220a1cd366bc6255235923aJINMEI Tatuya2907. [bug] The export version of libdns had undefined references.
9dac1de625301aeb520cb1e83723d98cd65999eeEvan Hunt2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
9dac1de625301aeb520cb1e83723d98cd65999eeEvan Hunt2905. [port] aix: set use_atomic=yes with native compiler.
9c9b75c43566058727cb89204d36977559cb99afMark Andrews2904. [bug] When using DLV, sub-zones of the zones in the DLV,
cd63e943104ab4f7f8b37da8d49738e91a8db1ddEvan Hunt could be incorrectly marked as insecure instead of
cd63e943104ab4f7f8b37da8d49738e91a8db1ddEvan Hunt secure leading to negative proofs failing. This was
cd63e943104ab4f7f8b37da8d49738e91a8db1ddEvan Hunt a unintended outcome from change 2890. [RT# 21392]
da49a52345d44caebc63c8ef0192daa68c068d1dMark Andrews2903. [bug] managed-keys-directory missing from namedconf.c.
6225380ca6dd045302fd5cb22d1dbbe6a88a7509Evan Hunt2902. [func] Add regression test for change 2897. [RT #21040]
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
c91c439f80c555f016cce8e9fd910630f81bb5c9Curtis Blackburn2900. [bug] The placeholder negative caching element was not
ffff5d67926821d3db8df63bdd84a9cb1ce56739Evan Hunt properly constructed triggering a INSIST in
ffff5d67926821d3db8df63bdd84a9cb1ce56739Evan Hunt dns_ncache_towire(). [RT #21346]
9a0dd99a757c469d9530acd5cb11789b3b0af5ceEvan Hunt2899. [port] win32: Support linking against OpenSSL 1.0.0.
9a0dd99a757c469d9530acd5cb11789b3b0af5ceEvan Hunt2898. [bug] nslookup leaked memory when -domain=value was
9a0dd99a757c469d9530acd5cb11789b3b0af5ceEvan Hunt specified. [RT #21301]
641e87a1a0ee716f46b4d0f529e73b58f19aee4eEvan Hunt2897. [bug] NSEC3 chains could be left behind when transitioning
641e87a1a0ee716f46b4d0f529e73b58f19aee4eEvan Hunt to insecure. [RT #21040]
2154c019124246199c7fe494b86860461c8a5f40Evan Hunt2896. [bug] "rndc sign" failed to properly update the zone
2154c019124246199c7fe494b86860461c8a5f40Evan Hunt when adding a DNSKEY for publication only. [RT #21045]
214836c18496e0d2630df1cda5eeee13c38b9068Evan Hunt2895. [func] genrandom: add support for the generation of multiple
214836c18496e0d2630df1cda5eeee13c38b9068Evan Hunt files. [RT #20917]
43d84798fac5cfeeecf9431ef848a9ffdcf0d86fEvan Hunt2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
43d84798fac5cfeeecf9431ef848a9ffdcf0d86fEvan Hunt2893. [bug] Improve managed keys support. New named.conf option
43d84798fac5cfeeecf9431ef848a9ffdcf0d86fEvan Hunt managed-keys-directory. [RT #20924]
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt2892. [bug] Handle REVOKED keys better. [RT #20961]
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt2891. [maint] Update empty-zones list to match
71f8edccba553c4ed4988dd12ac877564e4987d1Evan Hunt draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
c8803902d6e740d1ed85e099835813466fa51391Curtis Blackburn2890. [bug] Handle the introduction of new trusted-keys and
b3d116c299722ed7b27550744fff789a61ad3d2bEvan Hunt DS, DLV RRsets better. [RT #21097]
b3d116c299722ed7b27550744fff789a61ad3d2bEvan Hunt2889. [bug] Elements of the grammar where not properly reported.
dc6cea0448ea7b10eb1ae7d38bfc18544a4dfb97Evan Hunt2888. [bug] Only the first EDNS option was displayed. [RT #21273]
dc6cea0448ea7b10eb1ae7d38bfc18544a4dfb97Evan Hunt2887. [bug] Report the keytag times in UTC in the .key file,
2425d8bb7ccf5dc956ad12d64d97b5a42e022930Evan Hunt local time is presented as a comment within the
54ca2413348024c6d03904c01486c952c3d4a3bcEvan Hunt comment. [RT #21223]
54ca2413348024c6d03904c01486c952c3d4a3bcEvan Hunt2886. [bug] ctime() is not thread safe. [RT #21223]
48019314431389cca5f8eba7ee9aa5bc08a67f4eMark Andrews2885. [bug] Improve -fno-strict-aliasing support probing in
48019314431389cca5f8eba7ee9aa5bc08a67f4eMark Andrews configure. [RT #21080]
dab4aac006fadcaf3c5a9ccd983188b37ead08eeMark Andrews2884. [bug] Insufficient validation in dns_name_getlabelsequence().
578e3196076b409c509c6c0a0873e7bfe54f4d61Evan Hunt2883. [bug] 'dig +short' failed to handle really large datasets.
c07c2a862e0f9d671e2961cd179c7b28d7b04f10Mark Andrews2882. [bug] Remove memory context from list of active contexts
c07c2a862e0f9d671e2961cd179c7b28d7b04f10Mark Andrews before clearing 'magic'. [RT #21274]
f1c1aab2c9e720399d66d8db5f40515d47c45ecfMark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
a6b0db81c82ab3528d19137b08d1cb3f8ed06a52Evan Hunt is held when closing a version. [RT #21198]
24798afb6e0fa969cf9f6d3b91d1545410853bb8Mark Andrews2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
24798afb6e0fa969cf9f6d3b91d1545410853bb8Mark Andrews consistent. [RT #21078]
aa24128022b85c49f59ad45a3c81ad124d645530Mark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
fc0bfa07c7b7aff70cf75e9414167e1f2d532845Mark Andrews2878. [func] Incrementally write the master file after performing
cdf252d6b84dd160dbf37b22845d54d6e4b1732dMark Andrews a AXFR. [RT #21010]
c359f7b10f2ea19f08668a3c89c91d0834035ec8Mark Andrews2877. [bug] The validator failed to skip obviously mismatching
c359f7b10f2ea19f08668a3c89c91d0834035ec8Mark Andrews RRSIGs. [RT #21138]
25b95d31ce658326510bef979cf2909c6eddc428Mark Andrews2876. [bug] Named could return SERVFAIL for negative responses
25b95d31ce658326510bef979cf2909c6eddc428Mark Andrews from unsigned zones. [RT #21131]
e285c6ea84312a7be807b3af30151444b0002ba6Mark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
e285c6ea84312a7be807b3af30151444b0002ba6Mark Andrews2874. [bug] Cache lack of EDNS support only after the server
222d38735f97f771054e223b03f84c5858252332Evan Hunt successfully responds to the query using plain DNS.
0277a7d6c19ab116b6832076ab9d850e1bf112d3Mark Andrews2873. [bug] Cancelling a dynamic update via the dns/client module
0277a7d6c19ab116b6832076ab9d850e1bf112d3Mark Andrews could trigger an assertion failure. [RT #21133]
2dd959aa18d0f661efb0d9646963993a4773d036Evan Hunt2872. [bug] Modify dns/client.c:dns_client_createx() to only
2dd959aa18d0f661efb0d9646963993a4773d036Evan Hunt require one of IPv4 or IPv6 rather than both.
3ad3e9c948fd8781d0343b19f0412f5bf3ea6415Evan Hunt2871. [bug] Type mismatch in mem_api.c between the definition and
32d24fef856a5938278abe502f02a66f4f608a05Mark Andrews the header file, causing build failure with
8462dfb880040cde3a60f047ec18808737fd7e85Mark Andrews --enable-exportlib. [RT #21138]
53402b52b67aa6cbbd1d437d6cf8984e7175319eEvan Hunt2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
53402b52b67aa6cbbd1d437d6cf8984e7175319eEvan Hunt2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
03958ad4b9fd6b2d6f1fbf20e85d8ff2a1f9d069Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
9f6b57798da8c71effe19296fa86560dad638a31Mark Andrews any changes made by configure are integrated.
9f6b57798da8c71effe19296fa86560dad638a31Mark Andrews Use --with-make-clean=no to disable. [RT #20994]
fcc04c160feef526cc209ca03e8bbdfe34afd83bMark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
fcc04c160feef526cc209ca03e8bbdfe34afd83bMark Andrews don't like it. [RT #20986]
f0058a25b0de3246c63e4ca95788c611b3896a97Mark Andrews2866. [bug] Windows does not like the TSIG name being compressed.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews2865. [bug] memset to zero event.data. [RT #20986]
6f7abb89ec22aef5eda40ed60fcf605a42b78d4dMark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
b123b265e3a3d9b72a14230b6517e0f6fdb5c5b5Mark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt2862. [bug] nsupdate didn't default to the parent zone when
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt updating DS records. [RT #20896]
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt2861. [doc] dnssec-settime man pages didn't correctly document the
abff0f462a758383d012887d3a97da4dac0c5a94Evan Hunt inactivation time. [RT #21039]
177be355d4ccf0ce6308e3e6c0f5404eaf13e9a0Evan Hunt2860. [bug] named-checkconf's usage was out of date. [RT #21039]
177be355d4ccf0ce6308e3e6c0f5404eaf13e9a0Evan Hunt2859. [bug] When cancelling validation it was possible to leak
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt memory. [RT #20800]
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt2858. [bug] RTT estimates were not being adjusted on ICMP errors.
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt2857. [bug] named-checkconf did not fail on a bad trusted key.
2b8bed6681d1541474f022586cbe728dfce36880Evan Hunt2856. [bug] The size of a memory allocation was not always properly
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Hunt recorded. [RT #20927]
de5890da9b87cb4b91aca033db0e25b1fdb68c77Evan Hunt2855. [func] nsupdate will now preserve the entered case of domain
8a6f41d86ac80fd1397ffee65bed5131129a84e2Mark Andrews names in update requests it sends. [RT #20928]
8a6f41d86ac80fd1397ffee65bed5131129a84e2Mark Andrews2854. [func] dig: allow the final soa record in a axfr response to
538f4a22b1cbde59a9e53fef51583904a7f7393fMark Andrews be suppressed, dig +onesoa. [RT #20929]
538f4a22b1cbde59a9e53fef51583904a7f7393fMark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
706219e547c90fb7d9435b20e70fb4003dc6dfd5Evan Hunt2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
2f21adbc6a0962117015a51a44b33a99f3f94ac7Evan Hunt2851. [doc] nslookup.1, removed <informalexample> from the docbook
2f21adbc6a0962117015a51a44b33a99f3f94ac7Evan Hunt source as it produced bad nroff. [RT #21007]
4d077be1351ea10db3bc7843865a5d1ba1e81d5bEvan Hunt2850. [bug] If isc_heap_insert() failed due to memory shortage
4d077be1351ea10db3bc7843865a5d1ba1e81d5bEvan Hunt the heap would have corrupted entries. [RT #20951]
2e22f903da490cefb98e0c8b14ac66b466cfe1d9Mark Andrews2849. [bug] Don't treat errors from the xml2 library as fatal.
b13b4520207e401d81d7e759162ede870896d82dMark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
b13b4520207e401d81d7e759162ede870896d82dMark Andrews README.rfc5011 into the ARM. [RT #20899]
8c9d5521e760ead39f75adc3c87dc1dd0f9c101dMark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
8c9d5521e760ead39f75adc3c87dc1dd0f9c101dMark Andrews2846. [bug] EOF on unix domain sockets was not being handled
03ccae042b4acd22805d667f823066d3690965cfMark Andrews correctly. [RT #20731]
2786b6c53fb198d742e9738294fa0a51a52e4dceckb2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
20b95f5ff63cdae6bb5d4b96c1cc6e6e5373df8eMark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
20b95f5ff63cdae6bb5d4b96c1cc6e6e5373df8eMark Andrews been five (5) seconds.
c3b9fad5e3be639c9b36ff0ac921c30133da395cMar Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
39bfdc2ff9da3c2ecdbc70d46cabfd56d66f24f6Mark Andrews creating key files if there is a chance that the new
39bfdc2ff9da3c2ecdbc70d46cabfd56d66f24f6Mark Andrews key ID will collide with an existing one after
03ccae042b4acd22805d667f823066d3690965cfMark Andrews either of the keys has been revoked. (To override
03ccae042b4acd22805d667f823066d3690965cfMark Andrews this in the case of dnssec-keyfromlabel, use the -y
03ccae042b4acd22805d667f823066d3690965cfMark Andrews option. dnssec-keygen will simply create a
03ccae042b4acd22805d667f823066d3690965cfMark Andrews different, non-colliding key, so an override is
03ccae042b4acd22805d667f823066d3690965cfMark Andrews not necessary.) [RT #20838]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb2842. [func] Added "smartsign" and improved "autosign" and
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb "dnssec" regression tests. [RT #20865]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb2841. [bug] Change 2836 was not complete. [RT #20883]
55670a1e5517e9587171e9f41dc8f3e40b6fcfefMark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
1a09fefa59a9f00ed380494ae4722a0666f1ccaaMark Andrews2839. [bug] A KSK revoked by named could not be deleted.
8f4572372c4b496a43b50a6c14d82f2aba26a054Mark Andrews2838. [placeholder]
4786e693a7c4b41ba4554f06a2f6d16c74017f15Mark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
4d30dd89f5dba10b3ffc0531c35ec635033d310bMark Andrews2836. [bug] Keys that were scheduled to become active could
4d30dd89f5dba10b3ffc0531c35ec635033d310bMark Andrews be delayed. [RT #20874]
c2e80cf47ebb1ceecb4ad2ee01191ba2677f6feeMark Andrews2835. [bug] Key inactivity dates were inadvertently stored in
c2e80cf47ebb1ceecb4ad2ee01191ba2677f6feeMark Andrews the private key file with the outdated tag
f83542787f882444d2abf9fcaf47a34c29e4fec2Mark Andrews "Unpublish" rather than "Inactive". This has been
f83542787f882444d2abf9fcaf47a34c29e4fec2Mark Andrews fixed; however, any existing keys that had Inactive
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt dates set will now need to have them reset, using
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt 'dnssec-settime -I'. [RT #20868]
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt2834. [bug] HMAC-SHA* keys that were longer than the algorithm
e7dfefe19d70b4c86f9a999bebc27ebf9a8590a2Evan Hunt digest length were used incorrectly, leading to
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt interoperability problems with other DNS
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt implementations. This has been corrected.
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt (Note: If an oversize key is in use, and
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt compatibility is needed with an older release of
f46168b87966f679a22aaf494c555f0de821aff9Evan Hunt BIND, the new tool "isc-hmac-fixup" can convert
57c3a831c5314c16c40e519b3b70071b2001c3efMark Andrews the key secret to a form that will work with all
57c3a831c5314c16c40e519b3b70071b2001c3efMark Andrews versions.) [RT #20751]
2f57f353e8d0b761884303f49e0c2a937b7d6243Evan Hunt2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
f3e10cca1b9a95fab5ac7a162c0705e2d9da7370Mark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
f3e10cca1b9a95fab5ac7a162c0705e2d9da7370Mark Andrews to avoid redefinition in some OSs [RT 20831]
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews2831. [security] Do not attempt to validate or cache
4b3d727d96fc3ee3a0c12c716f14163adfcf1fedEvan Hunt out-of-bailiwick data returned with a secure
4b3d727d96fc3ee3a0c12c716f14163adfcf1fedEvan Hunt answer; it must be re-fetched from its original
d65a29175a23d43511ae7554e347d4519c9594fcEvan Hunt source and validated in that context. [RT #20819]
a8ef22d88e89f551bceb04cc7dbefdab74146960Evan Hunt2830. [bug] Changing the OPTOUT setting could take multiple
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews passes. [RT #20813]
47c5b8af920a93763c97d9a93ea1fd766961a5b3Evan Hunt2829. [bug] Fixed potential node inconsistency in rbtdb.c.
3b9b4c75f9121de7824b1e621921bb407e82d3c6Evan Hunt2828. [security] Cached CNAME or DNAME RR could be returned to clients
3b9b4c75f9121de7824b1e621921bb407e82d3c6Evan Hunt without DNSSEC validation. [RT #20737]
965371b8cffbd02d667594c8e17e413c723f9112Mark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
965371b8cffbd02d667594c8e17e413c723f9112Mark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
de0fd6809754ad9dc47b7c60fda8f4c8b22ea1f8Mark Andrews being released. [RT #20740]
de0fd6809754ad9dc47b7c60fda8f4c8b22ea1f8Mark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
de0fd6809754ad9dc47b7c60fda8f4c8b22ea1f8Mark Andrews was in the process of being created was not properly
f3f76f009b282953652770408be38e6f9e47cbb3ckb recorded in the zone. [RT #20786]
0fbd29837a5911e0f0a83fca93aa4453200a8ccfMark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
1c8f2b6dcd0b3952e4f5f2d6a2f0225675379739Mark Andrews2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
1c8f2b6dcd0b3952e4f5f2d6a2f0225675379739Mark Andrews2822. [bug] rbtdb.c:loadnode() could return the wrong result.
47c6d89485d2ec62e94eda745267e7387f995e96Mark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
7786d6542bb800be7d8c56793985d510626806b2Mark Andrews2820. [func] Handle read access failure of OpenSSL configuration
7786d6542bb800be7d8c56793985d510626806b2Mark Andrews file more user friendly (PKCS#11 engine patch).
91dd13bacf452437b6f0284bacd4c7f6f763cb45Mark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
611dc8876869036ab5e981e53ae7a446145d9354Mark Andrews2818. [cleanup] rndc could return an incorrect error code
611dc8876869036ab5e981e53ae7a446145d9354Mark Andrews when a zone was not found. [RT #20767]
2ec7373254331f183ae62a13acbac24c80a6a3aaMark Andrews2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt2816. [bug] previous_closest_nsec() could fail to return
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt data for NSEC3 nodes [RT #29730]
3806133da574f4570db3005473e0d56b746cc6eaEvan Hunt2815. [bug] Exclusively lock the task when freezing a zone.
1e8259d911ed8e368ae4c6361f5aa99a9496b2a6Mark Andrews2814. [func] Provide a definitive error message when a master
058e44186b74531402c1f99088eb9dbe4926f8daMark Andrews zone is not loaded. [RT #20757]
9e70b51d3b19b0592116e722a7452383a0e8e366Mark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
aa49af836ce7a7a2888f5cedf4cbb14ff4dc1d11Mark Andrews2812. [bug] Make sure updates can't result in a zone with
aa49af836ce7a7a2888f5cedf4cbb14ff4dc1d11Mark Andrews NSEC-only keys and NSEC3 records. [RT #20748]
d1ac7adb3e2620b7a22d6141e814800aefc7e844Evan Hunt2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
c22f896f3ae1d7258e99a090ded1f7fe3e232322Evan Hunt output. [RT #20733]
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews2810. [doc] Clarified the process of transitioning an NSEC3 zone
c872f39a00e8209ff6412b3383ed9099ac3e14a7Evan Hunt to insecure. [RT #20746]
da35568c7169d7218b0be7203ed03e2e626566c0Evan Hunt2809. [cleanup] Restored accidentally-deleted text in usage output
da35568c7169d7218b0be7203ed03e2e626566c0Evan Hunt in dnssec-settime and dnssec-revoke [RT #20739]
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt2808. [bug] Remove the attempt to install atomic.h from lib/isc.
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt atomic.h is correctly installed by the architecture
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt specific subdirectories. [RT #20722]
fec1c619189b1fec1f63528363bf600cd0b1a87eMark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
fec1c619189b1fec1f63528363bf600cd0b1a87eMark Andrews keys. [RT #20720]
27809a2ee5db141b684e53bf1d94da26e9f92d3aMark Andrews --- 9.7.0rc1 released ---
05284949f73d496092c6f21f1ef9d788075fa2dbEvan Hunt2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
05284949f73d496092c6f21f1ef9d788075fa2dbEvan Hunt when it had changed. [RT #20703]
664320a88f4782d0bccf012da01a39dd54632d24Evan Hunt2805. [bug] Fixed namespace problems encountered when building
664320a88f4782d0bccf012da01a39dd54632d24Evan Hunt external programs using non-exported BIND9 libraries
664320a88f4782d0bccf012da01a39dd54632d24Evan Hunt (i.e., built without --enable-exportlib). [RT #20679]
eed495737be4846ab054654a48f3387f77cadaaaMark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
eed495737be4846ab054654a48f3387f77cadaaaMark Andrews or as a result of a scheduled key change. [RT #20700]
5f26ffc2b4afc462acef8766ce5418cb4d75bfffMark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
b3f23e7a7d5aeddf1fc2d3b658b2a72c5710327fMark Andrews and genrandom under windows. [RT #20670]
179d8f4cc893420557c38d940b611404608d0239ckb2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
7e9d637131516486630290d36c4c0db544cb700eMark Andrews2801. [func] Detect and report records that are different according
4c2168728cbfc210e35cd438fe57b95fb55d738aMark Andrews to DNSSEC but are semantically equal according to plain
4c2168728cbfc210e35cd438fe57b95fb55d738aMark Andrews DNS. Apply plain DNS comparisons rather than DNSSEC
4c2168728cbfc210e35cd438fe57b95fb55d738aMark Andrews comparisons when processing UPDATE requests.
4118cd4276c3f53f9f6f0133688e05e52d70336bMark Andrews dnssec-signzone now removes such semantically duplicate
4118cd4276c3f53f9f6f0133688e05e52d70336bMark Andrews records prior to signing the RRset.
4118cd4276c3f53f9f6f0133688e05e52d70336bMark Andrews named-checkzone -r {ignore|warn|fail} (default warn)
8e0a15f42f06d1616b6f5d43658e2f90ff91cbfaMark Andrews named-compilezone -r {ignore|warn|fail} (default warn)
8e0a15f42f06d1616b6f5d43658e2f90ff91cbfaMark Andrews named.conf: check-dup-records {ignore|warn|fail};
d1f43359e4349bb9d934b96b7aa22b54ae7cef7cMark Andrews2800. [func] Reject zones which have NS records which refer to
8f7e0e25a55e75cf9683583266faa14abcbda899Mark Andrews CNAMEs, DNAMEs or don't have address record (class IN
767f7ebc1a7932b56868f61facae314df8a2871dEvan Hunt only). Reject UPDATEs which would cause the zone
8f7e0e25a55e75cf9683583266faa14abcbda899Mark Andrews to fail the above checks if committed. [RT #20678]
b29e8482207fe64ea15960f2048a60e6a37e00ebMark Andrews2799. [cleanup] Changed the "secure-to-insecure" option to
b29e8482207fe64ea15960f2048a60e6a37e00ebMark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
34fba65d39b884775c30da2ae4eee15973b1b30dMark Andrews to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
339f08ee1eea16401bb9fbd9232a336cf6f52a8dckb2798. [bug] Addressed bugs in managed-keys initialization
78ba74e63db0c30b30107106dfd4f7e6f671dc35Evan Hunt and rollover. [RT #20683]
78ba74e63db0c30b30107106dfd4f7e6f671dc35Evan Hunt2797. [bug] Don't decrement the dispatch manager's maxbuffers.
1bbd36c4db2c86762b582db4b0504e6e68a183f6Mark Andrews2796. [bug] Missing dns_rdataset_disassociate() call in
85705b4b5a4b666981997ffe222738d281b9bf58Evan Hunt dns_nsec3_delnsec3sx(). [RT #20681]
85705b4b5a4b666981997ffe222738d281b9bf58Evan Hunt2795. [cleanup] Add text to differentiate "update with no effect"
85705b4b5a4b666981997ffe222738d281b9bf58Evan Hunt log messages. [RT #18889]
820fdd61dd35e359a8e616031209d074a7140d97Evan Hunt2794. [bug] Install <isc/namespace.h>. [RT #20677]
820fdd61dd35e359a8e616031209d074a7140d97Evan Hunt2793. [func] Add "autosign" and "metadata" tests to the
8f6d6d72e80314bd36c50f1805e424b6f6332caeEvan Hunt automatic tests. [RT #19946]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews2792. [func] "filter-aaaa-on-v4" can now be set in view
f06dad6860f209da422790ab7b9df36857e8c0f3Mark Andrews options (if compiled in). [RT #20635]
3f755529ee7ecdc9227eed572e007cf71d4d5107Evan Hunt2791. [bug] The installation of isc-config.sh was broken.
5f250186409cff46d0409c6d3cc34d4bf08f1d17Mark Andrews2790. [bug] Handle DS queries to stub zones. [RT #20440]
1eb871bb42d2728377ea1ebcb3c1ebb2d9535f3cMar Andrews2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews2788. [bug] dnssec-signzone could sign with keys that were
e7857b5ee05414961bb11f9e57f654163fae6acbckb not requested [RT #20625]
e7857b5ee05414961bb11f9e57f654163fae6acbckb2787. [bug] Spurious log message when zone keys were
3ce2018dfa0912a29666e7e477a9daddf23fc224Mark Andrews dynamically reconfigured. [RT #20659]
6eb6af6732194157224e2b8d81a02a9e80c4530aMark Andrews2786. [bug] Additional could be promoted to answer. [RT #20663]
c965b1869024ab38518fade703cc1dae2d71a59eMark Andrews --- 9.7.0b3 released ---
c965b1869024ab38518fade703cc1dae2d71a59eMark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
ee2f98d5cf12c86e7590efcdf6725ab133a430f3Mark Andrews2784. [bug] TC was not always being set when required glue was
ee2f98d5cf12c86e7590efcdf6725ab133a430f3Mark Andrews dropped. [RT #20655]
c963ca7542743c4b1293b245b8750bfdcdde7580Mark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
c963ca7542743c4b1293b245b8750bfdcdde7580Mark Andrews buffer size of 512 or less. [RT #20654]
d0d892f44941986629021fcdad388d54de829ea0Mark Andrews2782. [port] win32: use getaddrinfo() for hostname lookups.
d0d892f44941986629021fcdad388d54de829ea0Mark Andrews2781. [bug] Inactive keys could be used for signing. [RT #20649]
1a594d204a1d63538e76f8453be1f4ce9f87b88eMark Andrews2780. [bug] dnssec-keygen -A none didn't properly unset the
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews activation date in all cases. [RT #20648]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews2779. [bug] Dynamic key revocation could fail. [RT #20644]
34fba65d39b884775c30da2ae4eee15973b1b30dMark Andrews2778. [bug] dnssec-signzone could fail when a key was revoked
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews without deleting the unrevoked version. [RT #20638]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
ca092ed9f2732f61b31d58c8b8507253d99c26e0ckb2776. [bug] Change #2762 was not correct. [RT #20647]
cdd271b14aebc6a3f076eb82a016e0a4d0d4247aEvan Hunt2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
cdd271b14aebc6a3f076eb82a016e0a4d0d4247aEvan Hunt in dnssec-keyfromlabel. [RT #20643]
d64138e5778e99a994039b3861471929a49a2042Evan Hunt2774. [bug] Existing cache DB wasn't being reused after
d64138e5778e99a994039b3861471929a49a2042Evan Hunt reconfiguration. [RT #20629]
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews2773. [bug] In autosigned zones, the SOA could be signed
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews with the KSK. [RT #20628]
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews2772. [security] When validating, track whether pending data was from
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews the additional section or not and only return it if
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews validates as secure. [RT #20438]
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
2bf80ddc755eec26a75beff63e4f83f88a4c5ba9Mark Andrews corrupted when importing from key files [RT #20624]
00c605a6438c16d4159aa7951e31ec5ed00812eeMark Andrews2770. [cleanup] Add log messages to resolver.c to indicate events
c41c261fc7b2ae573fab3675a03a5f1ef099a2eaMark Andrews causing FORMERR responses. [RT #20526]
c41c261fc7b2ae573fab3675a03a5f1ef099a2eaMark Andrews2769. [cleanup] Change #2742 was incomplete. [RT #19589]
ad127d839d2e7aa542939a8a336691407e23397eMark Andrews2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
ad127d839d2e7aa542939a8a336691407e23397eMark Andrews2767. [bug] named could crash on startup if a zone was
ad127d839d2e7aa542939a8a336691407e23397eMark Andrews configured with auto-dnssec and there was no
c9611b45736af157e2993c6ef852e55e8e24ca83Evan Hunt key-directory. [RT #20615]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews socketmgr state if the socket is not pending on a
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews read or write. [RT #20603]
3d1eaf18c7603dfc134000488447dcb40d9d2bc5ckb2765. [bug] Skip masters for which the TSIG key cannot be found.
3d1eaf18c7603dfc134000488447dcb40d9d2bc5ckb [RT #20595]
7865ea9545f28f12f046b32d24c989e8441b9812Mark Andrews2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
57f1d800f8866d8b45cc130d31a92742a7c37e23Mark Andrews2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
57f1d800f8866d8b45cc130d31a92742a7c37e23Mark Andrews2762. [bug] DLV validation failed with a local slave DLV zone.
c298583db573a329f37d43301d8c3c812500ac85Mark Andrews2761. [cleanup] Enable internal symbol table for backtrace only for
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews systems that are known to work. Currently, BSD
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews variants, Linux and Solaris are supported. [RT# 20202]
04e5f9812cb02d5d86b542dfa9a394f074ff5621Evan Hunt2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
04e5f9812cb02d5d86b542dfa9a394f074ff5621Evan Hunt2759. [doc] Add information about .jbk/.jnw files to
109ebcc98023591b66f7e12010da9bde0dd07d6fMark Andrews the ARM. [RT #20303]
109ebcc98023591b66f7e12010da9bde0dd07d6fMark Andrews2758. [bug] win32: Added a workaround for a windows 2008 bug
7310c0b1ee680a4bcb0bcaa55798e64b97c9da18Mark Andrews that could cause the UDP client handler to shut
f6c77d1beab4dcd5484d7891aff04ed479dbb771Mark Andrews down. [RT #19176]
7310c0b1ee680a4bcb0bcaa55798e64b97c9da18Mark Andrews2757. [bug] dig: assertion failure could occur in connect
9c0fa8d469259a0763f61464410aba8f0db96eafMark Andrews timeout. [RT #20599]
432defb06aff07e35c762cbb9952eeb4d1957224Mark Andrews2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews2755. [placeholder]
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver was signed with NSEC3. [RT #20587]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver2753. [bug] Removed an unnecessary warning that could appear when
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver building an NSEC chain. [RT #20589]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver2752. [bug] Locking violation. [RT #20587]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver2750. [bug] dig: assertion failure could occur when a server
368aedf188d7c7782cae8a5ce2a978be47b5a764Evan Hunt didn't have an address. [RT #20579]
57a2236357a3f9c5f13a85e247f4cec7b724bcd0Vernon Schryver2749. [bug] ixfr-from-differences generated a non-minimal ixfr
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt for NSEC3 signed zones. [RT #20452]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt2748. [func] Identify bad answers from GTLD servers and treat them
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt as referrals. [RT #18884]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt2747. [bug] Journal roll forwards failed to set the re-signing
b8493d3292459454aeaf4d1ef10750f2e4e52d8eMark Andrews time of RRSIGs correctly. [RT #20541]
01695063c6c4543c39d8a2a98a2108ce7e7aa416Evan Hunt2746. [port] hpux: address signed/unsigned expansion mismatch of
d878b8d87c3f46a25ccae9f5cfe6e39af67562e0Evan Hunt2745. [bug] configure script didn't probe the return type of
d878b8d87c3f46a25ccae9f5cfe6e39af67562e0Evan Hunt gai_strerror(3) correctly. [RT #20573]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt2744. [func] Log if a query was over TCP. [RT #19961]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt for a insecure delegation.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt --- 9.7.0b2 released ---
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt2742. [cleanup] Clarify some DNSSEC-related log messages in
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt2741. [func] Allow the dnssec-keygen progress messages to be
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt suppressed (dnssec-keygen -q). Automatically
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt suppress the progress messages when stdin is not
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt a tty. [RT #20474]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt2740. [placeholder]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt2739. [cleanup] Clean up API for initializing and clearing trust
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt anchors for a view. [RT #20211]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt test. [RT #20453]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt2737. [func] UPDATE requests can leak existence information.
c438f1beb920b01adde08b32bfcfa085d7ce3efeMark Andrews2736. [func] Improve the performance of NSEC signed zones with
03ccae042b4acd22805d667f823066d3690965cfMark Andrews more than a normal amount of glue below a delegation.
34fba65d39b884775c30da2ae4eee15973b1b30dMark Andrews2735. [bug] dnssec-signzone could fail to read keys
aaaf8d4f4873d21e55c3ffb4f656203d08339865Mark Andrews that were specified on the command line with
54489ba1672458382e8dfb5490fcfc7230f8ea85Evan Hunt full paths, but weren't in the current
54489ba1672458382e8dfb5490fcfc7230f8ea85Evan Hunt directory. [RT #20421]
4e8fe357a619ae2b789b15df7e3d6abf782b4a71Evan Hunt2734. [port] cygwin: arpaname did not compile. [RT #20473]
4e8fe357a619ae2b789b15df7e3d6abf782b4a71Evan Hunt2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
4e8fe357a619ae2b789b15df7e3d6abf782b4a71Evan Hunt2732. [func] Add optional filter-aaaa-on-v4 option, available
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews if built with './configure --enable-filter-aaaa'.
744589ff64e8d98b30b746cd7a1833f77830e185Mark Andrews Filters out AAAA answers to clients connecting
1a04af5311b46955fd8c0207cc7bad1b1d632f7fMark Andrews via IPv4. (This is NOT recommended for general
393fd55d91306e6def3a3d06748eee031f57bd17Mark Andrews use.) [RT #20339]
7e9d6c707501c75c4caa1922af5c7d97b4895064Mark Andrews2731. [func] Additional work on change 2709. The key parser
7e9d6c707501c75c4caa1922af5c7d97b4895064Mark Andrews will now ignore unrecognized fields when the
7e9d6c707501c75c4caa1922af5c7d97b4895064Mark Andrews minor version number of the private key format
4c9c2a6a72616ac8a614204dc0721afcb2095f67Mark Andrews has been increased. It will reject any key with
4c9c2a6a72616ac8a614204dc0721afcb2095f67Mark Andrews the major version number increased. [RT #20310]
bdf5cdc32c658fbdfccfc3a1b9404188f1d3df98Evan Hunt2730. [func] Have dnssec-keygen display a progress indication
bdf5cdc32c658fbdfccfc3a1b9404188f1d3df98Evan Hunt a la 'openssl genrsa' on standard error. Note
03ccae042b4acd22805d667f823066d3690965cfMark Andrews when the first '.' is followed by a long stop
20d441892d670cab7a58bbd36f4e92ae73b10a20Evan Hunt one has the choice between slow generation vs.
4f3a3fc43c6e2de62997d2378e87b4248cf771aeMark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
4f3a3fc43c6e2de62997d2378e87b4248cf771aeMark Andrews TTL. [RT #20451]
75582adac73202213d936dc0850f1c9cf47d6cbeMark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
75582adac73202213d936dc0850f1c9cf47d6cbeMark Andrews dnssec-signzone now warn immediately if asked to
75582adac73202213d936dc0850f1c9cf47d6cbeMark Andrews write into a nonexistent directory. [RT #20278]
20d441892d670cab7a58bbd36f4e92ae73b10a20Evan Hunt2727. [func] The 'key-directory' option can now specify a relative
20d441892d670cab7a58bbd36f4e92ae73b10a20Evan Hunt path. [RT #20154]
bf6651e27d456817bd110ddf6ec968b44403c643Mark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
bf6651e27d456817bd110ddf6ec968b44403c643Mark Andrews RSASHA256 and RSASHA512. [RT #20023]
840659f1d7e09b9cd4af283aeadfbfe173b57a06Mark Andrews2725. [doc] Added information about the file "managed-keys.bind"
840659f1d7e09b9cd4af283aeadfbfe173b57a06Mark Andrews to the ARM. [RT #20235]
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews were failing. [RT #20448]
56fdf1d4014b0901e723d22c0bf7503c086af2d5Mark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
56fdf1d4014b0901e723d22c0bf7503c086af2d5Mark Andrews isc_base64_totext(), didn't always mark regions of
56fdf1d4014b0901e723d22c0bf7503c086af2d5Mark Andrews memory as fully consumed after conversion. [RT #20445]
85fcd0b9b2d80be4646187d7094e5644a52e3263Mark Andrews2722. [bug] Ensure that the memory associated with the name of
85fcd0b9b2d80be4646187d7094e5644a52e3263Mark Andrews a node in a rbt tree is not altered during the life
2c642143d45517bfc0990d9194a7cc536f3fce89Mark Andrews of the node. [RT #20431]
2c642143d45517bfc0990d9194a7cc536f3fce89Mark Andrews2721. [port] Have dst__entropy_status() prime the random number
2c642143d45517bfc0990d9194a7cc536f3fce89Mark Andrews generator. [RT #20369]
c51f2c9a529b2130a8058cb7a32bd284fa6cfdb9Mark Andrews2720. [bug] RFC 5011 trust anchor updates could trigger an
d8e73b1c76f2c7dcc641bfa7759c15df58c82c7eMark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
d8e73b1c76f2c7dcc641bfa7759c15df58c82c7eMark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
269c07173e24d7811e2fd09304023e3104fcbe0bMark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
962bf88eec1ea34a451769ba82c9389db7f0bef0Mark Andrews incorrect. [RT #20394]
962bf88eec1ea34a451769ba82c9389db7f0bef0Mark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
4bb9db2aed9860f7ca63f925a4b9d48e07917988Mark Andrews the last private type record was removed as a result
4bb9db2aed9860f7ca63f925a4b9d48e07917988Mark Andrews of completing the signing the zone with a key.
c6581f1ae41f8cfdaf983a0cc4936365040060a2Mark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
e5bf06eedc08179fb93a09799915139370d08055Evan Hunt --- 9.7.0b1 released ---
a7ab4ad2d45930cf42d92b26e92c5a4e39a197f8Mark Andrews2715. [bug] Require OpenSSL support to be explicitly disabled.
1864400107f7dc21e1797d602ab1f8523f599df9Mark Andrews2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
261543671b70b078a2d55bbf16ef78ae2074bbdcEvan Hunt2713. [bug] powerpc: atomic operations missing asm("ics") /
490b05960c9956cc37f52f5fd4443829d75ce7d6Mark Andrews __isync() calls.
89069e6b3abc5ab00c77227f31b771cc2fa4768fEvan Hunt2712. [func] New 'auto-dnssec' zone option allows zone signing
89069e6b3abc5ab00c77227f31b771cc2fa4768fEvan Hunt to be fully automated in zones configured for
89069e6b3abc5ab00c77227f31b771cc2fa4768fEvan Hunt dynamic DNS. 'auto-dnssec allow;' permits a zone
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews to be signed by creating keys for it in the
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews key-directory and using 'rndc sign <zone>'.
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews 'auto-dnssec maintain;' allows that too, plus it
6d386978b3a1f20a613ae10565c855aee084e2a0Mark Andrews also keeps the zone's DNSSEC keys up to date
5b57f580ce54201c6105300ea6636677531163f9Mark Andrews according to their timing metadata. [RT #19943]
5b57f580ce54201c6105300ea6636677531163f9Mark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
4c34112a69735364713758c8a22f753389fd1753Mark Andrews build. [RT #20372]
4c34112a69735364713758c8a22f753389fd1753Mark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
fb604d1cee223986d090763292015309adfcf9c7Mark Andrews zone option cause a zone to be signed with only KSKs
c478bb4c4658dddabe79118e2f84107640aa06c4Mark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
c478bb4c4658dddabe79118e2f84107640aa06c4Mark Andrews the size of a DNSKEY answer. [RT #20340]
936036e82337c5aba40e735e5b46f9112869772fMark Andrews2709. [func] Added some data fields, currently unused, to the
936036e82337c5aba40e735e5b46f9112869772fMark Andrews private key file format, to allow implementation
936036e82337c5aba40e735e5b46f9112869772fMark Andrews of explicit key rollover in a future release
936036e82337c5aba40e735e5b46f9112869772fMark Andrews without impairing backward or forward compatibility.
81274f4b08b04eade0936cd32a4ba56281d7c2d2Mark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
3fd0334e59fe72294bedafc9cb0f74d66b1cfe3aMark Andrews update are now fully supported and no longer require
fc3b3e1f7e4ec1cf3bcc08f7ecc3ed8ebd29b034Mark Andrews defines to enable. We now no longer overload the
fc3b3e1f7e4ec1cf3bcc08f7ecc3ed8ebd29b034Mark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
fc3b3e1f7e4ec1cf3bcc08f7ecc3ed8ebd29b034Mark Andrews apex. Secure to insecure changes are controlled by
3fd0334e59fe72294bedafc9cb0f74d66b1cfe3aMark Andrews by the named.conf option 'secure-to-insecure'.
99f6179191e583d23f3c5567d3c00b57b64eb52dEvan Hunt Warning: If you had previously enabled support by
99f6179191e583d23f3c5567d3c00b57b64eb52dEvan Hunt adding defines at compile time to BIND 9.6 you should
3fd0334e59fe72294bedafc9cb0f74d66b1cfe3aMark Andrews ensure that all changes that are in progress have
77cb7130e721c1352009c86fb2b38eedd06c4f97Mark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
77cb7130e721c1352009c86fb2b38eedd06c4f97Mark Andrews is not backwards compatible.
77cb7130e721c1352009c86fb2b38eedd06c4f97Mark Andrews2707. [func] dnssec-keyfromlabel no longer require engine name
adfc3ad3ce5db585fdb29d3d6000aa05ba077f13Evan Hunt to be specified in the label if there is a default
fc3b3e1f7e4ec1cf3bcc08f7ecc3ed8ebd29b034Mark Andrews engine or the -E option has been used. Also, it
adfc3ad3ce5db585fdb29d3d6000aa05ba077f13Evan Hunt now uses default algorithms as dnssec-keygen does
adfc3ad3ce5db585fdb29d3d6000aa05ba077f13Evan Hunt (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
73d187eab95980e7af7b31a22e522ed5ea1561d7Mark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
73d187eab95980e7af7b31a22e522ed5ea1561d7Mark Andrews trigger an assert. [RT #20368]
93143fd81acd86e594bac20c6c58b930dfe63a80Evan Hunt2705. [placeholder]
93143fd81acd86e594bac20c6c58b930dfe63a80Evan Hunt2704. [bug] Serial of dynamic and stub zones could be inconsistent
93143fd81acd86e594bac20c6c58b930dfe63a80Evan Hunt with their SOA serial. [RT #19387]
c2e614115b19a4c28e0067e57a48f4ed5d5e12f8Mark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
c2e614115b19a4c28e0067e57a48f4ed5d5e12f8Mark Andrews for all binaries which can take benefit of
c2e614115b19a4c28e0067e57a48f4ed5d5e12f8Mark Andrews crypto hardware. [RT #20230]
12c3204c463e2bf3a910a288f628ea1f26f77d1eEvan Hunt2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
c54dadd85337e9a8417103317a899dfba2a847d1Evan Hunt2701. [doc] Correction to ARM: hmac-md5 is no longer the only
c54dadd85337e9a8417103317a899dfba2a847d1Evan Hunt supported TSIG key algorithm. [RT #18046]
38b260f32d2be0e916e50e8bf77957ba2627a95aMark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
bc298cd0f77dce2d452efd3e3d3153e2a9a17dbfMark Andrews2699. [bug] Missing lock in rbtdb.c. [RT #20037]
1bb3831e13a65afd87078c88e0285d23b1e0bcdfMark Andrews2698. [placeholder]
1bb3831e13a65afd87078c88e0285d23b1e0bcdfMark Andrews2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews S_IFREG are defined after including <isc/stat.h>.
ef9f4d097794609e018963087fab10a8b51d8ad1Mark Andrews2696. [bug] named failed to successfully process some valid
313e570601cbe84c46b8d0427e7f1b20e71cc0c1Evan Hunt acl constructs. [RT #20308]
18d208a4a277eb460f5b47c6b167f60b04db3110Mark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt DHCP. Modify the api to isc_sockfdwatch_t (the
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt callback functon for isc_socket_fdwatchcreate)
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt to include information about the direction (read
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt or write) and add isc_socket_fdwatchpoke.
9a020198893d8389f1f3172d88ba6b16d7da3c04Evan Hunt2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
c19cfefe7e345c37ef3bb98b0db2d14fe7b1d583Evan Hunt2693. [port] Add some noreturn attributes. [RT #20257]
19c4187e35333119a2d1e40c92a55e09a59a3e93Evan Hunt2692. [port] win32: 32/64 bit cleanups. [RT #20335]
56c9fcf07580457442b80ac32bdb7c07aa0df870Evan Hunt2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
41ca314cc2fafaaa9089438bdfd24880bafa9079Mark Andrews chain when re-signing a previously-signed zone.
949eefdda49701c14579d1fd251bd09df0751c2fEvan Hunt Use -u to modify NSEC3 parameters or switch
949eefdda49701c14579d1fd251bd09df0751c2fEvan Hunt between NSEC and NSEC3. [RT #20304]
15218d6ed062ec24c4a7ec10d22d1113b4c79556Evan Hunt2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
238e0e843834f24a40692a5ea28ace14ef5807ceMark Andrews2689. [bug] Correctly handle snprintf result. [RT #20306]
9ddf371552b3554a22632996acc41ef9917a30f4Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
9ddf371552b3554a22632996acc41ef9917a30f4Mark Andrews to decide to fetch the destination address. [RT #20305]
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews Also, added warnings when revoking a ZSK, as this is
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews not defined by protocol (but is legal). [RT #19943]
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
83878aaa47488a3529897bb8ab4c2027d98b64c1Mark Andrews signing with NSEC3 and vice versa. [RT #20301]
328e0fee6b6c91c258e5ce36eb70f5e017a85af2Mark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
a5a30ae7c0636a57d8575acb98fdf906c0ea818fMark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
a5a30ae7c0636a57d8575acb98fdf906c0ea818fMark Andrews +adflag and +cdflag. [RT #19305]
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt the NSEC3 parameters used to sign the zone change.
f30785f506a522ed6a5e394af2bb13b6f883927eEvan Hunt2682. [bug] "configure --enable-symtable=all" failed to
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews build. [RT #20282]
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
dd0d54ff010c43eef6b96bd3ee34a9c671abc6e5Mark Andrews decoded. [RT #20269]
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
32ebb157b1d9409a186c86002827f8a1f4931f5aMark Andrews format. [RT #20031]
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews was set. [RT #20258]
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews2677. [func] Changes to key metadata behavior:
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews - Keys without "publish" or "active" dates set will
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews no longer be used for smart signing. However,
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews those dates will be set to "now" by default when
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews a key is created; to generate a key but not use
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews it yet, use dnssec-keygen -G.
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews sets the time when a key is no longer used for
67dc2f0536bcbbfa0970eb2893dcbc1c6713fad4Mark Andrews signing but is still published.
b290d10fc42ae909f7319eeac68f876155dbf824Mark Andrews - The "unpublished" date (-U) is deprecated in
b290d10fc42ae909f7319eeac68f876155dbf824Mark Andrews favour of "deleted" (-D).
1d32b1df372d6be6bac6450739b9e5ea23819995Evan Hunt2676. [bug] --with-export-installdir should have been
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews --with-export-includedir. [RT #20252]
1d32b1df372d6be6bac6450739b9e5ea23819995Evan Hunt2675. [bug] dnssec-signzone could crash if the key directory
9ca4e2411ca45c09494716f725b8b9a25ae887d7Mark Andrews did not exist. [RT #20232]
9ca4e2411ca45c09494716f725b8b9a25ae887d7Mark Andrews --- 9.7.0a3 released ---
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt2674. [bug] "dnssec-lookaside auto;" crashed if named was built
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt without openssl. [RT #20231]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt2673. [bug] The managed-keys.bind zone file could fail to
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt load due to a spurious result from sync_keyzone()
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt2672. [bug] Don't enable searching in 'host' when doing reverse
03ccae042b4acd22805d667f823066d3690965cfMark Andrews lookups. [RT #20218]
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt2671. [bug] Add support for PKCS#11 providers not returning
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt the public exponent in RSA private keys
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt (OpenCryptoki for instance) in
b4d8192d210290112e07b0e22b491c45c50ba696Evan Hunt dnssec-keyfromlabel. [RT #19294]
e4aac0596c89955ced3398d7e2896d05bcc70fd5Mark Andrews2670. [bug] Unexpected connect failures failed to log enough
e4aac0596c89955ced3398d7e2896d05bcc70fd5Mark Andrews information to be useful. [RT #20205]
71e4c3ee745b9fbf0c627246a9896589344f613cMark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews Update PKCS#11 patch to be against openssl-0.9.8i.
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews2668. [func] Several improvements to dnssec-* tools, including:
04281728d41b7e04afdd0789aa3bc1a3225994f3Mark Andrews - dnssec-keygen and dnssec-settime can now set key
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt metadata fields 0 (to unset a value, use "none")
9c832595d40482529ac6d369664bb59fbc05b925Mark Andrews - dnssec-revoke sets the revocation date in
28c2bc20269f3127b8bcb68e4458392f86cc0116Evan Hunt addition to the revoke bit
28c2bc20269f3127b8bcb68e4458392f86cc0116Evan Hunt - dnssec-settime can now print individual metadata
4122abdc3cfa16c8b3ecbd20830ca9a43f9fecb9Evan Hunt fields instead of always printing all of them,
4122abdc3cfa16c8b3ecbd20830ca9a43f9fecb9Evan Hunt and can print them in unix epoch time format for
4122abdc3cfa16c8b3ecbd20830ca9a43f9fecb9Evan Hunt use by scripts
de52784e45e3a7a92c0d8ad843eb4db313bbfd97Mark Andrews2667. [func] Add support for logging stack backtrace on assertion
de52784e45e3a7a92c0d8ad843eb4db313bbfd97Mark Andrews failure (not available for all platforms). [RT #19780]
b68dc65959cc38f997c365abed9f4e6c0415ecc7Mark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
56dc4c6730222cd3915a6ca39bc6578ad36a160aMark Andrews (API change from 9.7.0a2). [RT #20196]
56dc4c6730222cd3915a6ca39bc6578ad36a160aMark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
d881a5ad06db99a42e47176028c14d09041f8807Scott Mann ARM documentation about RFC 5011 support. [RT #19874]
d881a5ad06db99a42e47176028c14d09041f8807Scott Mann2664. [bug] create_keydata() and minimal_update() in zone.c
03ccae042b4acd22805d667f823066d3690965cfMark Andrews didn't properly check return values for some
553197e28833ed2d8bf26f8112eaa137dbaa040aMark Andrews functions. [RT #19956]
087f83a3b928ac090fef80e5ed09712935f38e5aMark Andrews2663. [func] win32: allow named to run as a service using
553197e28833ed2d8bf26f8112eaa137dbaa040aMark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
5927944728a530e9f43597b64a555029e2d010bdScott Mann2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
5927944728a530e9f43597b64a555029e2d010bdScott Mann returned a misleading error code when lwresd was
5927944728a530e9f43597b64a555029e2d010bdScott Mann down. [RT #20028]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
0da3b4a9a76d24ce05e6330d9bb128f18f1ca0d4Evan Hunt creating lwres context. [RT #20029]
cae06bceda6c5d415f740574a64f42bf5f561d61Mark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
cae06bceda6c5d415f740574a64f42bf5f561d61Mark Andrews applications. See README.libdns. [RT #19369]
411d2914ade28174f3789d4a8e43636fc68eb310Mark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
23daf8948b2e5462ccea082a441e9759dffa50cdMark Andrews name for DNSSEC keys. [RT #19938]
23daf8948b2e5462ccea082a441e9759dffa50cdMark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
9bd876a683709be588f6fac6781a76fdd57b2f08Mark Andrews key file paths correctly. [RT #20078]
03e2b1d18d6231d02a09e03d9300667fd6ef51d9Mark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
03e2b1d18d6231d02a09e03d9300667fd6ef51d9Mark Andrews log level to debug 1. [RT #20058]
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews2656. [func] win32: add a "tools only" check box to the installer
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews which causes it to only install dig, host, nslookup,
91ed1cc821ccef38c30f3fcaad32d78233fad94bMark Andrews nsupdate and relevant DLLs. [RT #19998]
69feafa0af18ce7b1fd4f9d330948272e6c926a1Evan Hunt2655. [doc] Document that key-directory does not affect
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews2654. [bug] Improve error reporting on duplicated names for
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews deny-answer-xxx. [RT #20164]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews not found rather than out of memory. [RT #18033]
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews2652. [func] Provide more detail about what record is being
2256c131942baddeb22bb3d9d305dd52a3b3ea04Mark Andrews deleted. [RT #20061]
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt2651. [bug] Dates could print incorrectly in K*.key files on
7c6a1a11fa6342bd14f2804cd7753bdb1966d53dEvan Hunt 64-bit systems. [RT #20076]
6fb6f8a2263f9cbc6bf979a4d79cc7a71e86f41eEvan Hunt2650. [bug] Assertion failure in dnssec-signzone when trying
6fb6f8a2263f9cbc6bf979a4d79cc7a71e86f41eEvan Hunt to read keyset-* files. [RT #20075]
3ab9d6435a7b40812e9d8d9d1ecf537e28082e3aEvan Hunt2649. [bug] Set the domain for forward only zones. [RT #19944]
77d048b03eec3222e283426beab46ec23ecf8371Evan Hunt2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
5d23a6ac8392b1eeec8effdee47fb725ace1e759Evan Hunt2647. [bug] Remove unnecessary SOA updates when a new KSK is
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews added. [RT #19913]
13790b548c6660cba736756e5184e923d15d2659Evan Hunt2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews which default to 64 bits. [RT #19927]
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt --- 9.7.0a2 released ---
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt2644. [bug] Change #2628 caused a regression on some systems;
d9eebc08497af272b2d44c07f4eb85153dec4253Evan Hunt named was unable to write the PID file and would
83c0ef88159fcae73fdbf8fe04d220c1878cce3eEvan Hunt fail on startup. [RT #20001]
83c0ef88159fcae73fdbf8fe04d220c1878cce3eEvan Hunt2643. [bug] Stub zones interacted badly with NSEC3 support.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews2642. [bug] nsupdate could dump core on solaris when reading
19ae9cbb28abf57c2605cbedaa6a7201a0cb6572Mark Andrews improperly formatted key files. [RT #20015]
5584cbf427d85488e3fbed682ea3f2406bdb8b4fEvan Hunt2641. [bug] Fixed an error in parsing update-policy syntax,
5584cbf427d85488e3fbed682ea3f2406bdb8b4fEvan Hunt added a regression test to check it. [RT #20007]
ca45c0bc34042b3821be46a6a95e71edd4c32c8dEvan Hunt2640. [security] A specially crafted update packet will cause named
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews to exit. [RT #20000]
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
3fb5bccf59abe5a0b545b4979181df0b17adee3bMark Andrews2638. [bug] Install arpaname. [RT #19957]
8899393ccd9fcbfcc6c027e9cb3bfd05fae29cabEvan Hunt2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
25845da41a621f35e76dc8560ca40de6859e0a11Evan Hunt2636. [func] Simplify zone signing and key maintenance with the
25845da41a621f35e76dc8560ca40de6859e0a11Evan Hunt dnssec-* tools. Major changes:
25845da41a621f35e76dc8560ca40de6859e0a11Evan Hunt - all dnssec-* tools now take a -K option to
03ccae042b4acd22805d667f823066d3690965cfMark Andrews specify a directory in which key files will be
a5166d5fce30e5924f279d3e92d1f20b9fb7b4dcMark Andrews - DNSSEC can now store metadata indicating when
f550b4b104d2859539b2ec287600f1dd2215d9fbEvan Hunt they are scheduled to be published, activated,
f550b4b104d2859539b2ec287600f1dd2215d9fbEvan Hunt revoked or removed; these values can be set by
f550b4b104d2859539b2ec287600f1dd2215d9fbEvan Hunt dnssec-keygen or overwritten by the new
6150d3cb666a58d5e3a15275562c9fc5c5b6b2d8Evan Hunt dnssec-settime command
6150d3cb666a58d5e3a15275562c9fc5c5b6b2d8Evan Hunt - dnssec-signzone -S (for "smart") option reads key
6150d3cb666a58d5e3a15275562c9fc5c5b6b2d8Evan Hunt metadata and uses it to determine automatically
fd0cb187615695ddc84ec25c88710c6c4e7cf096Evan Hunt which keys to publish to the zone, use for
fd0cb187615695ddc84ec25c88710c6c4e7cf096Evan Hunt signing, revoke, or remove from the zone
d7be2b79ed0934483d550e17e2bd09de4eaff8f5Evan Hunt2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
1c1879b7efe32e6fe95de0ba923249925e3a320cEvan Hunt2634. [port] win32: Add support for libxml2, enable
1c1879b7efe32e6fe95de0ba923249925e3a320cEvan Hunt statschannel. [RT #19773]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
77b8f02d19efea79c34f0d4afcefc7ad65de8000Evan Hunt2632. [func] util/kit.sh: warn if documentation appears to be out of
77b8f02d19efea79c34f0d4afcefc7ad65de8000Evan Hunt date. [RT #19922]
0c25a44aac24a452a41240c45d35320ce054427dEvan Hunt2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
0c25a44aac24a452a41240c45d35320ce054427dEvan Hunt [RT #19926 ]
8281fd83da005cdb114a4c784c847a7eec4bdc38Evan Hunt2630. [func] Improved syntax for DDNS autoconfiguration: use
8281fd83da005cdb114a4c784c847a7eec4bdc38Evan Hunt "update-policy local;" to switch on local DDNS in a
8281fd83da005cdb114a4c784c847a7eec4bdc38Evan Hunt zone. (The "ddns-autoconf" option has been removed.)
146057d7e755d646283adfe5d813f756b0538095Mark Andrews2629. [port] Check for seteuid()/setegid(), use setresuid()/
fe3472c80b76b6fed0ae674fd63471d02477a03aMark Andrews setresgid() if not present. [RT #19932]
3975f627fe9c0d3aa02ed135070e3253357daad9Mark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
3975f627fe9c0d3aa02ed135070e3253357daad9Mark Andrews at startup with reduced capabilities in operation.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2627. [bug] Named aborted if the same key was included in
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt trusted-keys more than once. [RT #19918]
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt2626. [bug] Multiple trusted-keys could trigger an assertion
5caf26b168332b69c9071aac6b72ef0f50436a14Evan Hunt failure. [RT #19914]
36e97eb661df71069df2d75f5fd3b5bb0dcf1efeMark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
62a348b15dd552e12bfbe94111e14072f1c8f02eMark Andrews2624. [func] 'named-checkconf -p' will print out the parsed
7b4b6f361b2fb2291c2019b377a9c0c8e80cfd6bMark Andrews configuration. [RT #18871]
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt2623. [bug] Named started searches for DS non-optimally. [RT #19915]
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt2620. [bug] Delay thawing the zone until the reload of it has
9c03f13e18c1b0c32f62391a17300378605bbc7bEvan Hunt completed successfully. [RT #19750]
c4352fb17ebb1cf29ccabdf1c4273a86f035f38bMark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
cd22c3e4e4ff8ad6eb399155bd8df9330aa39547Mark Andrews maintenance. The new "managed-keys" statement can
cd22c3e4e4ff8ad6eb399155bd8df9330aa39547Mark Andrews be used in place of "trusted-keys" for zones which
0148654d85b2818f9317b428a67701f4585c8243Scott Mann support this protocol. (Note: this syntax is
0148654d85b2818f9317b428a67701f4585c8243Scott Mann expected to change prior to 9.7.0 final.) [RT #19248]
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann2618. [bug] The sdb and sdlz db_interator_seek() methods could
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann loop infinitely. [RT #19847]
b91b288f923d143292af3ac35df6f6cff50647f2Scott Mann2617. [bug] ifconfig.sh failed to emit an error message when
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews run from the wrong location. [RT #19375]
24ef32426d91c5140d75031b6443397c6d24006cMark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt when a explicit nameserver was specified. [RT #19852]
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt2615. [bug] "__attribute__((unused))" was in the wrong place
9570ddcd41e2b0a0e124f0fa50653f73dfc1ef46Evan Hunt for ia64 gcc builds. [RT #19854]
9a8ffb1ac76dfa5ca913474f0b23a15934356b47Mark Andrews2614. [port] win32: 'named -v' should automatically be executed
9a8ffb1ac76dfa5ca913474f0b23a15934356b47Mark Andrews in the foreground. [RT #19844]
f704fa0ca628e5661d842ae9947024c9fd4fefcbEvan Hunt2613. [placeholder]
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews --- 9.7.0a1 released ---
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews2612. [func] Add default values for the arguments to
b1c6de5456a5287b442de5620282902da39a4968Mark Andrews dnssec-keygen. Without arguments, it will now
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt generate a 1024-bit RSASHA1 zone-signing key,
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt or with the -f KSK option, a 2048-bit RSASHA1
9336f01769f16a8eda79340094d663db0f8537c7Evan Hunt key-signing key. [RT #19300]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews DLV records instead of DS records. [RT #19300]
ada40193c85276867c6904545601c7c01e3236c3Mark Andrews2610. [port] sunos: Change #2363 was not complete. [RT #19796]
1946c596b47b0495ce745fe2fff7da799919b0d2Mark Andrews2609. [func] Simplify the configuration of dynamic zones:
4cac7d0949f2e76561b9450b2af4ebe3eece5aa2Evan Hunt - add ddns-confgen command to generate
1946c596b47b0495ce745fe2fff7da799919b0d2Mark Andrews configuration text for named.conf
020c4484fe510434c1b3aaac040ab6cfb3340115Mark Andrews - add zone option "ddns-autoconf yes;", which
020c4484fe510434c1b3aaac040ab6cfb3340115Mark Andrews causes named to generate a TSIG session key
e94c7d23589f79d5ece5a068ee6a661cebf9c2b4Mark Andrews and allow updates to the zone using that key
30d9cf665d32984fe1dc62ae355ab5b2a0fe3a35Mark Andrews - add '-l' (localhost) option to nsupdate, which
30d9cf665d32984fe1dc62ae355ab5b2a0fe3a35Mark Andrews causes nsupdate to connect to a locally-running
0a1009ae64036ad2473bc48be8c98a54392b6cb5Mark Andrews named process using the session key generated
2801318d3cf49e23ee2bfda45f66cbaa7409f0aaMark Andrews2608. [func] Perform post signing verification checks in
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews dnssec-signzone. These can be disabled with -P.
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews The post sign verification test ensures that for each
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews algorithm in use there is at least one non revoked
88a8e5a8d0784a91ac7b28656bbbf904882f55e3Mark Andrews self signed KSK key. That all revoked KSK keys are
48a3b282636db2c67c6e2dc10833689f58b05422Vernon Schryver self signed. That all records in the zone are signed
48a3b282636db2c67c6e2dc10833689f58b05422Vernon Schryver by the algorithm. [RT #19653]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2607. [bug] named could incorrectly delete NSEC3 records for
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews empty nodes when processing a update request.
ebe4f01a8fd93b6b8aeec936ae0703a97784f7b4Mark Andrews2606. [bug] "delegation-only" was not being accepted in
ebe4f01a8fd93b6b8aeec936ae0703a97784f7b4Mark Andrews delegation-only type zones. [RT #19717]
af850c4120c5bee9462de4def85d0b4c1b583963Mark Andrews2605. [bug] Accept DS responses from delegation only zones.
af850c4120c5bee9462de4def85d0b4c1b583963Mark Andrews [RT # 19296]
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews2604. [func] Add support for DNS rebinding attack prevention through
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews new options, deny-answer-addresses and
dc2e6272391c6e89eeba3de07736a9d4d01dc5d4Mark Andrews deny-answer-aliases. Based on contributed code from
02286522fbc6db783b5f0b4318289db0cefbfbcbMark Andrews JD Nurmi, Google. [RT #18192]
02286522fbc6db783b5f0b4318289db0cefbfbcbMark Andrews2603. [port] win32: handle .exe extension of named-checkzone and
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt named-comilezone argv[0] names under windows.
653a78de956fc92049c6ec15a654b65a61aea2a1Evan Hunt2602. [port] win32: fix debugging command line build of libisccfg.
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt2601. [doc] Mention file creation mode mask in the
793814f80703afdd69b59ade91e63efa81ae4178Evan Hunt named manual page.
b2086d798b442a428d50ddc247925f114aa4112fEvan Hunt2600. [doc] ARM: miscellaneous reformatting for different
b2086d798b442a428d50ddc247925f114aa4112fEvan Hunt page widths. [RT #19574]
1dacfa0ea8ee078030411d55d2021f7619568ea3Scott Mann2599. [bug] Address rapid memory growth when validation fails.
1dacfa0ea8ee078030411d55d2021f7619568ea3Scott Mann2598. [func] Reserve the -F flag. [RT #19657]
2cc56f582c1b13e5f8537610b71c1c283261a7dcMark Andrews2597. [bug] Handle a validation failure with a insecure delegation
2cc56f582c1b13e5f8537610b71c1c283261a7dcMark Andrews from a NSEC3 signed master/slave zone. [RT #19464]
8c0f354bdf003852894a9a5ad6b829eafef0d405Mark Andrews2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
8c0f354bdf003852894a9a5ad6b829eafef0d405Mark Andrews long, leading to inefficient memory usage or rejecting
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews newer cache entries in the worst case. [RT #19563]
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt2594. [func] Have rndc warn if using its default configuration
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt file when the key file also exists. [RT #19424]
a6c74da2b0a5d4ec8c7d3f4d4b240f20e3fd8334Evan Hunt2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
1219f8d1948a3e39bfeee1980ef4931fb19c4485Evan Hunt2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
1219f8d1948a3e39bfeee1980ef4931fb19c4485Evan Hunt2591. [bug] named could die when processing a update in
3d5423a48472936f3b1ad423995c5baffe9ff3b1Evan Hunt removed_orphaned_ds(). [RT #19507]
41ce9f5c27cfb50874b3274cea4f93d1fac14a91Mark Andrews2590. [func] Report zone/class of "update with no effect".
67e3b3b9fcaa9150cd79b6db0d757bd131fce913Evan Hunt2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
84f0bd3bc7ac72289cc0dfedd3d17872ad1169feEvan Hunt2588. [bug] SO_REUSEADDR could be set unconditionally after failure
84f0bd3bc7ac72289cc0dfedd3d17872ad1169feEvan Hunt of bind(2) call. This should be rare and mostly
fad5116b3d68e825d29f87a1d3cb41409f42e8f5Scott Mann harmless, but may cause interference with other
de382ae91aa6b3df7f8684135f08e6db45ab1402Scott Mann processes that happen to use the same port. [RT #19642]
76a7d4e152dc80885312e4c2b6b8d94df9153f57Evan Hunt2587. [func] Improve logging by reporting serial numbers for
76a7d4e152dc80885312e4c2b6b8d94df9153f57Evan Hunt when zone serial has gone backwards or unchanged.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
9e4afc9b39fe5c5e44798944b72d6686a5be435cEvan Hunt or SDB. [RT #19577]
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt2585. [bug] Uninitialized socket name could be referenced via a
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt statistics channel, triggering an assertion failure in
8a2ab2b9203120c3e2a883a5ee8c0b5d60c1808cEvan Hunt XML rendering. [RT #19427]
2c35c682362049f823248542e07e7dca4008b986Mark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews2583. [port] netbsd: provide a control to not add the compile
9198ab377b1cbf07d6d0c6eec25296c135bd66bdMark Andrews date to the version string, -DNO_VERSION_DATE.
e4c4cf5177d23e144897e0e26ae210cfdb9612ebEvan Hunt2582. [bug] Don't emit warning log message when we attempt to
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews remove non-existent journal. [RT #19516]
99cbc3d3a4dcbd203146f62e37478aee1c8ee673Evan Hunt2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
99cbc3d3a4dcbd203146f62e37478aee1c8ee673Evan Hunt Requires MySQL 5.0.19 or later. [RT #19084]
5a75f61dd413720c16d229b24ebba6bd6ecdb738Evan Hunt2580. [bug] UpdateRej statistics counter could be incremented twice
5a75f61dd413720c16d229b24ebba6bd6ecdb738Evan Hunt for one rejection. [RT #19476]
3a63259484bf32c0c8b9646a8bfcbe3d25a17584Mark Andrews2579. [bug] DNSSEC lookaside validation failed to handle unknown
3a63259484bf32c0c8b9646a8bfcbe3d25a17584Mark Andrews algorithms. [RT #19479]
0f972644190291c832677fafd0826532770d11d8Mark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
772dfb90be732103ef2793bca17ca57c5bb12fa7Mark Andrews 65535 turns out to be reserved. [RT #19477]
772dfb90be732103ef2793bca17ca57c5bb12fa7Mark Andrews2577. [doc] Clarified some statistics counters. [RT #19454]
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt2576. [bug] NSEC record were not being correctly signed when
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt a zone transitions from insecure to secure.
01279934803dd45c007a58b61fe20c2852135b52Evan Hunt Handle such incorrectly signed zones. [RT #19114]
c1e655fe4c2192d1c4198153d32b2506a8b3d02dEvan Hunt2575. [func] New functions dns_name_fromstring() and
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews dns_name_tostring(), to simplify conversion
8787b357e69c8c548cdad59e8c9d492a0f4a7105Curtis Blackburn of a string to a dns_name structure and vice
31f46f1869f4b6b8ecfe0d89177000fb867b8df1Mark Andrews versa. [RT #19451]
31f46f1869f4b6b8ecfe0d89177000fb867b8df1Mark Andrews2574. [doc] Document nsupdate -g and -o. [RT #19351]
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt2573. [bug] Replacing a non-CNAME record with a CNAME record in a
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt single transaction in a signed zone failed. [RT #19397]
f07b2fccaf6be13d9440d323e9e79ee84fe345e2Evan Hunt2572. [func] Simplify DLV configuration, with a new option
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews "dnssec-lookaside auto;" This is the equivalent
cf63d32d55ffed0e7e1b9eacfecb3e751dc68674Evan Hunt of "dnssec-lookaside . trust-anchor dlv.isc.org;"
cf63d32d55ffed0e7e1b9eacfecb3e751dc68674Evan Hunt plus setting a trusted-key for dlv.isc.org.
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews Note: The trusted key is hard-coded into named,
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews but is also stored in (and can be overridden
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
6fab2f80c95959b17adb2f81656e9abf003e1717Mark Andrews rolls over it can be kept up to date by replacing
96ade2bc52912bed2656a42c751edfabbcd650e6Mark Andrews the bind.keys file with a key downloaded from
b47c020d5c635b662ac57e5485d266fd62c796c0Evan Hunt2571. [func] Add a new tool "arpaname" which translates IP addresses
b47c020d5c635b662ac57e5485d266fd62c796c0Evan Hunt to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
632e44d19e8d875eb78ddd1d028c0f9c29360420Scott Mann2570. [func] Log the destination address the query was sent to.
42cf2ff7bad81c5a1f5d3be29d06e12504c3af24Evan Hunt2569. [func] Move journalprint, nsec3hash, and genrandom
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews "make install" will put them in $sbindir. [RT #19301]
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews2568. [bug] Report when the write to indicate a otherwise
a69070d8fab55dbc63ba9f96c9d3e34f0ea9119aMark Andrews successful start fails. [RT #19360]
e7220c9b841bbd3d16736726f786a86fec3c0e18Evan Hunt2567. [bug] dst__privstruct_writefile() could miss write errors.
53d308d83bfe32bf3328bac628670bd8876b1629Mark Andrews write_public_key() could miss write errors.
e7220c9b841bbd3d16736726f786a86fec3c0e18Evan Hunt dnssec-dsfromkey could miss write errors.
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt2566. [cleanup] Clarify logged message when an insecure DNSSEC
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt response arrives from a zone thought to be secure:
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt "insecurity proof failed" instead of "not
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt insecure". [RT #19400]
79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4Evan Hunt2565. [func] Add support for HIP record. Includes new functions
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt dns_rdata_hip_first(), dns_rdata_hip_next()
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt and dns_rdata_hip_current(). [RT #19384]
5e3affc6a0b155ee1cadac735c1a71f4d418ad69Evan Hunt2564. [bug] Only take EDNS fallback steps when processing timeouts.
475b1ed9cced1f92ce34bc2e59b3065dae48f366Mark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews to exit. [RT #19359]
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
b64e3b8358177cbef5db7b99fc9ddc2efe48eed7Mark Andrews and some new content.
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt2559. [bug] dnssec-dsfromkey could compute bad DS records when
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt reading from a K* files. [RT #19357]
6de9744cf9c64be2145f663e4051196a4eaa9d45Evan Hunt2558. [func] Set the ownership of missing directories created
6b95b91c617a3e56aff611772744af32b5410e1fEvan Hunt for pid-file if -u has been specified on the command
6b95b91c617a3e56aff611772744af32b5410e1fEvan Hunt line. [RT #19328]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2557. [cleanup] PCI compliance:
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews * new libisc log module file
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews * isc_dir_chroot() now also changes the working
fbe2cff19f5cddc67b967764ad95038dfcafc85aEvan Hunt directory to "/".
e482a4a3408cabf6cab8b479001ce69ec4842cbaMark Andrews * additional INSISTs
ea8278253210df030a24f0c89342b43fe279a127Mark Andrews * additional logging when files can't be removed.
ea8278253210df030a24f0c89342b43fe279a127Mark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt error checks in the correct order resulting in the
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt wrong error code sometimes being returned. [RT #19249]
0245f7725c40fd29637fbc83ee25bd84be25bfd2Evan Hunt2555. [func] dig: when emitting a hex dump also display the
47e70d820ed07895a25e5b3520adf953114ac01eEvan Hunt corresponding characters. [RT #19258]
47e70d820ed07895a25e5b3520adf953114ac01eEvan Hunt2554. [bug] Validation of uppercase queries from NSEC3 zones could
eee7f742eab409723902e229b840dcdbc9a512f5Evan Hunt fail. [RT #19297]
eee7f742eab409723902e229b840dcdbc9a512f5Evan Hunt2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt2552. [bug] zero-no-soa-ttl-cache was not being honoured.
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt2551. [bug] Potential Reference leak on return. [RT #19341]
bfe32d08c51a606744bd0d6ea518eb95084d2eefEvan Hunt2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
722fa6417b52618f84f526ff53248fcad8522caaPaul Ebersman2549. [port] linux: define NR_OPEN if not currently defined.
2a4f4945657f4dd321d30a01aa5d74159c74dbcbEvan Hunt2548. [bug] Install iterated_hash.h. [RT #19335]
7609e973f517387352a5e98b1b9c368bfb769b09Mark Andrews2547. [bug] openssl_link.c:mem_realloc() could reference an
7609e973f517387352a5e98b1b9c368bfb769b09Mark Andrews out-of-range area of the source buffer. New public
7609e973f517387352a5e98b1b9c368bfb769b09Mark Andrews function isc_mem_reallocate() was introduced to address
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews this bug. [RT #19313]
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews2546. [func] Add --enable-openssl-hash configure flag to use
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews OpenSSL (in place of internal routine) for hash
0268e42b4e5b83e1e5806caddd3b38e14735d739Mark Andrews functions (MD5, SHA[12] and HMAC). [RT #18815]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews for SRV RDATA too. [RT #19304]
be847331456855e4e2e8e71fde1efd68a04557caEvan Hunt2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
be847331456855e4e2e8e71fde1efd68a04557caEvan Hunt2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt2542. [doc] Update the description of dig +adflag. [RT #19290]
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt2541. [bug] Conditionally update dispatch manager statistics.
ac21f918f23ce95fd5be807428ee9e2c42319878Evan Hunt2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt2539. [security] Update the interaction between recursion, allow-query,
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt allow-query-cache and allow-recursion. [RT #19198]
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt2538. [bug] cache/ADB memory could grow over max-cache-size,
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt especially with threads and smaller max-cache-size
485522d7e17da517fe91c21c642c8526c3ffb14cEvan Hunt values. [RT #19240]
9eea4c5cbd864e0bc400dc665b35c3dbd00f9222Evan Hunt2537. [func] Added more statistics counters including those on socket
9eea4c5cbd864e0bc400dc665b35c3dbd00f9222Evan Hunt I/O events and query RTT histograms. [RT #18802]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2536. [cleanup] Silence some warnings when -Werror=format-security is
85a79fa7eb17767d9ae9030e0289ed3e95aab7c8Evan Hunt specified. [RT #19083]
85a79fa7eb17767d9ae9030e0289ed3e95aab7c8Evan Hunt2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt2534. [func] Check NAPTR records regular expressions and
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt replacement strings to ensure they are syntactically
d454a60f5664d7b4d026df93bf7745edd25cd897Evan Hunt valid and consistant. [RT #18168]
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt2533. [doc] ARM: document @ (at-sign). [RT #17144]
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt2532. [bug] dig: check the question section of the response to
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt see if it matches the asked question. [RT #18495]
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt2531. [bug] Change #2207 was incomplete. [RT #19098]
39f2d1a96a7c7494b1db0ea0f45e063a6a5ef9bbEvan Hunt2530. [bug] named failed to reject insecure to secure transitions
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt via UPDATE. [RT #19101]
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt2529. [cleanup] Upgrade libtool to silence complaints from recent
76db58eb818dc4839fa816df6a1a1ecb2c7a6bd0Evan Hunt version of autoconf. [RT #18657]
7a2173839c5ca103090431f36709fde99b599097Evan Hunt2528. [cleanup] Silence spurious configure warning about
7a2173839c5ca103090431f36709fde99b599097Evan Hunt --datarootdir [RT #19096]
7a2173839c5ca103090431f36709fde99b599097Evan Hunt2527. [placeholder]
c92122485d6868a88e6cc1469e06a9c8f306b575Evan Hunt2526. [func] New named option "attach-cache" that allows multiple
c92122485d6868a88e6cc1469e06a9c8f306b575Evan Hunt views to share a single cache to save memory and
c92122485d6868a88e6cc1469e06a9c8f306b575Evan Hunt improve lookup efficiency. Based on contributed code
2b3bcbce23a5539a16c1d209f83a604c775859d5Mark Andrews from Barclay Osborn, Google. [RT #18905]
2b3bcbce23a5539a16c1d209f83a604c775859d5Mark Andrews2525. [func] New logging category "query-errors" to provide detailed
9cf04a12ec5ea0ee64338feef76e885980a524dfMark Andrews internal information about query failures, especially
9cf04a12ec5ea0ee64338feef76e885980a524dfMark Andrews about server failures. [RT #19027]
9f36aef24cac3890e24e57d1821f7ede5e34ff8eMark Andrews2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
30f888cbd416f3bcc60b508c3957ef724af592d6Scott Mann2523. [bug] Random type rdata freed by dns_nsec_typepresent().
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt2521. [bug] Improve epoll cross compilation support. [RT #19047]
e1234be3ad794d8580365e76b65ee657d094b254Paul Ebersman2520. [bug] Update xml statistics version number to 2.0 as change
319b8a14881a95996af3a9ba4a20f144eb766b31Evan Hunt #2388 made the schema incompatible to the previous
4fc55db699529ce60f7f1e12aae40e315831c67fScott Mann version. [RT #19080]
0a82492610e2424bb999946bd6e5a13c83f453b4Mark Andrews2519. [bug] dig/host with -4 or -6 didn't work if more than two
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt nameserver addresses of the excluded address family
0a82492610e2424bb999946bd6e5a13c83f453b4Mark Andrews preceded in resolv.conf. [RT #19081]
95759de490339a71e301ab6aa53b7a2c664f6d0fScott Mann2518. [func] Add support for the new CERT types from RFC 4398.
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Hunt2517. [bug] dig +trace with -4 or -6 failed when it chose a
0994d3a21baeedf28cbf7e461b3bd8de5f9a6654Evan Hunt nameserver address of the excluded address type.
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt2516. [bug] glue sort for responses was performed even when not
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt needed. [RT #19039]
10a759cee69dcc3ce3a4d65e6e263c66e7f60ee8Evan Hunt2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1Evan Hunt a nameserver of the excluded address family.
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt2513. [bug] Fix windows cli build. [RT #19062]
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt2512. [func] Print a summary of the cached records which make up
7cb226ec344f3996906c015ef58749c5565b2a05Evan Hunt the negative response. [RT #18885]
5095e72ac3c0f1e16c246b56e8277614571bf132Mark Andrews2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
653cad790b4dc6c1330f634150a8941b75ed761eMark Andrews2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
cb240b0676186ba4668946c98730879f14a195faFrancis Dupont2509. [bug] Specifying a fixed query source port was broken.
e41de66a124e6e564428360c2f76e5f1ae6c6f06Francis Dupont2508. [placeholder]
cbf59e5887d69fca6fe86a1ee5fcc82dded14babMark Andrews2507. [func] Log the recursion quota values when killing the
cbf59e5887d69fca6fe86a1ee5fcc82dded14babMark Andrews oldest query or refusing to recurse due to quota.
9e102ef9697f0b0d0607fe24bc3ac00286936dd4Francis Dupont2506. [port] solaris: Check at configure time if
9e102ef9697f0b0d0607fe24bc3ac00286936dd4Francis Dupont hack_shutup_pthreadonceinit is needed. [RT #19037]
ed53ec0b06825bcc6ba54e10e0174e2de93e595dMark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
ed53ec0b06825bcc6ba54e10e0174e2de93e595dMark Andrews atomic operation support. [RT #19031]
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt2504. [bug] Address race condition in the socket code. [RT #18899]
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt2503. [port] linux: improve compatibility with Linux Standard
61bcc232038f0a2cb77ed6269675fdc288f5ec98Evan Hunt Base. [RT #18793]
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews2502. [cleanup] isc_radix: Improve compliance with coding style,
0e095727ffcae21cbf8b97942d8779094b22983bMark Andrews document function in <isc/radix.h>. [RT #18534]
26b49e84597ab3ebaa9ae1eb0fe01befa46a8107Mark Andrews2501. [func] $GENERATE now supports all rdata types. Multi-field
26b49e84597ab3ebaa9ae1eb0fe01befa46a8107Mark Andrews rdata types need to be quoted. See the ARM for
26b49e84597ab3ebaa9ae1eb0fe01befa46a8107Mark Andrews details. [RT #18368]
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2415f36f79e168a46c59cdedf0d6d3146efa5196Mark Andrews function. [RT #18582]
cf4ceeee5fee2ebdca74f82514c14fd50939f85bMark Andrews2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
03ccae042b4acd22805d667f823066d3690965cfMark Andrews --- 9.6.0rc1 released ---
4f587beb8eb70f198346333bce5b89df3ac5c88eMark Andrews2498. [bug] Removed a bogus function argument used with
649452635065426fcc08b99b351db904939a6580Mark Andrews ISC_SOCKET_USE_POLLWATCH: it could cause compiler
649452635065426fcc08b99b351db904939a6580Mark Andrews warning or crash named with the debug 1 level
649452635065426fcc08b99b351db904939a6580Mark Andrews of logging. [RT #18917]
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
19f4b069dcade77da4ce9b6de2fa6d22062bef4fMark Andrews2496. [bug] Add sanity length checks to NSID option. [RT #18813]
2d96b63d311a5252c8583eb30a56b1fc58172419Mark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
2d96b63d311a5252c8583eb30a56b1fc58172419Mark Andrews2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt installed. [RT #18826]
422009fe5b15e31e7f5d09212bd1480121a1464eEvan Hunt2493. [bug] The linux capabilities code was not correctly cleaning
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews up after itself. [RT #18767]
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews2492. [func] Rndc status now reports the number of cpus discovered
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews and the number of worker threads when running
215ef83bbed20727813a52ddcdbcd1455856638bMark Andrews multi-threaded. [RT #18273]
fea04b0ffeaa83716937f1728ff6742722cec91aMark Andrews2491. [func] Attempt to re-use a local port if we are already using
fea04b0ffeaa83716937f1728ff6742722cec91aMark Andrews the port. [RT #18548]
f02b5d87a561ba669bd368a8a6422f364f7702ecEvan Hunt2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt is cleared when IPV6_V6ONLY is set. [RT #18785]
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt2489. [port] solaris: Workaround Solaris's kernel bug about
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt Define ISC_SOCKET_USE_POLLWATCH at build time to enable
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt this workaround. [RT #18870]
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt from keyset and .key files. [RT #18694]
9a859983d7059a6eb9c877c1d2ac6a3a5b7170f7Evan Hunt2487. [bug] Give TCP connections longer to complete. [RT #18675]
eff7f78bc65f30efd87a398e66084ddab72799d3Mark Andrews2486. [func] The default locations for named.pid and lwresd.pid
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt This allows the owner of the containing directory
61271cdee65f3313e98f382b07e6674861d9020aEvan Hunt to be set, for "named -u" support, and allows there
c2f051aaaab60dbac4bc754f09d594846d99fb89Evan Hunt to be a permanent symbolic link in the path, for
c2f051aaaab60dbac4bc754f09d594846d99fb89Evan Hunt "named -t" support. [RT #18306]
32babe43eb479d2ae8736f9985a84d1b9d95a33aScott Mann2485. [bug] Change update's the handling of obscured RRSIG
d57f1ade2da01c70d1043b1f912dbef5ee6817edMark Andrews records. Not all orphaned DS records were being
35efe74edbdae034447a5bf73c78d8243e50b0b8Mark Andrews removed. [RT #18828]
f385bac3b918aac3e33d2a8219e1b78f1c7f276eEvan Hunt2484. [bug] It was possible to trigger a REQUIRE failure when
f385bac3b918aac3e33d2a8219e1b78f1c7f276eEvan Hunt adding NSEC3 proofs to the response in
11c282d8a4c87618538cfc89c9004666dc841036Francis Dupont query_addwildcardproof(). [RT #18828]
020a733707d308258768c9d677b5839edb647ec8Evan Hunt2483. [port] win32: chroot() is not supported. [RT #18805]
d54394cbefb7b0ed7bdf9aafaec4ece06578c26bFrancis Dupont2482. [port] libxml2: support versions 2.7.* in addition
d54394cbefb7b0ed7bdf9aafaec4ece06578c26bFrancis Dupont to 2.6.*. [RT #18806]
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt --- 9.6.0b1 released ---
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
70c7f4fb4fc589b04a68d67479d34eecd99c1991Evan Hunt collisions. [RT #18812]
624664e50406f63108ddc7bad47dbac87ac74261Francis Dupont2480. [bug] named could fail to emit all the required NSEC3
03ccae042b4acd22805d667f823066d3690965cfMark Andrews records. [RT #18812]
c1ced49662181d2fb2343ed7bde71d170f0d1119Mark Andrews2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
ba88bcf08b965f65c07735efa2f675b8cbeb735aMark Andrews2478. [bug] 'addresses' could be used uninitialized in
ba88bcf08b965f65c07735efa2f675b8cbeb735aMark Andrews configure_forward(). [RT #18800]
21d349b612e253bea438f3340b2f293b032ed848Mark Andrews2477. [bug] dig: the global option to print the command line is
88c63fe9c78e60e5e521d095d6e983c211902904Mark Andrews +cmd not print_cmd. Update the output to reflect
88c63fe9c78e60e5e521d095d6e983c211902904Mark Andrews this. [RT #17008]
4c05f9a6a3d0fe27d5fad1599b10500e21c705feMark Andrews2476. [doc] ARM: improve documentation for max-journal-size and
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann ixfr-from-differences. [RT #15909] [RT #18541]
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann2475. [bug] LRU cache cleanup under overmem condition could purge
d31740ce282bcf0a27e17dec49a3ff9ddd26e814Scott Mann particular entries more aggressively. [RT #17628]
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont2474. [bug] ACL structures could be allocated with insufficient
664917bedafa65dee4349c84324a31731aa1e228Francis Dupont space, causing an array overrun. [RT #18765]
17bc56e321574b43c5837d1741e9157c8f2fcd91Francis Dupont2473. [port] linux: raise the limit on open files to the possible
d3e3d7846dd5895960dcdcb1012b4be23388f81cMark Andrews maximum value before spawning threads; 'files'
d3e3d7846dd5895960dcdcb1012b4be23388f81cMark Andrews specified in named.conf doesn't seem to work with
d3e3d7846dd5895960dcdcb1012b4be23388f81cMark Andrews threads as expected. [RT #18784]
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt2472. [port] linux: check the number of available cpu's before
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews calling chroot as it depends on "/proc". [RT #16923]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2471. [bug] named-checkzone was not reporting missing mandatory
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt glue when sibling checks were disabled. [RT #18768]
7cc5632595476c20f1c0683eff35baa370dd65bbEvan Hunt2470. [bug] Elements of the isc_radix_node_t could be incorrectly
e1234be3ad794d8580365e76b65ee657d094b254Paul Ebersman overwritten. [RT# 18719]
2f09e7c3fc25c0e5028593a24531d636845c3e42Mark Andrews2469. [port] solaris: Work around Solaris's select() limitations.
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews2468. [bug] Resolver could try unreachable servers multiple times.
4f07b2b00cf52582b2ee9b55aabe7eb5066e57e7Mark Andrews2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
0e507dbb816575e6220fe309e8ada68897ffcdbeMark Andrews2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
ddd40390be246189f10dc18782914b295befb139Mark Andrews2465. [bug] Adb's handling of lame addresses was different
5715e1c6f6b549e95b312f1529efd849f7c9503fMark Andrews for IPv4 and IPv6. [RT #18738]
ddd40390be246189f10dc18782914b295befb139Mark Andrews2464. [port] linux: check that a capability is present before
b795de862ba8e75f3b9c56abb9553c28255c8567Mark Andrews trying to set it. [RT #18135]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
c12904ec531fb210066bafc33bde74d43889caacMark Andrews API and glibc hides parts of the IPv6 Advanced Socket
0a92db42c6be6a158cd41ff863831a8d2d257935Mark Andrews API as a result. This is stupid as it breaks how the
0a92db42c6be6a158cd41ff863831a8d2d257935Mark Andrews two halves (Basic and Advanced) of the IPv6 Socket API
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews were designed to be used but we have to live with it.
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
17c98e7adddf82b73f478e89213fd10148a53100Mark Andrews API. [RT #18388]
699e00089fb1a6eb31d7bd1c96bf973608953159Mark Andrews2462. [doc] Document -m (enable memory usage debugging)
6883a918f790147fd98e21b2c3d3d479320f3ed5Mark Andrews option for dig. [RT #18757]
6883a918f790147fd98e21b2c3d3d479320f3ed5Mark Andrews2461. [port] sunos: Change #2363 was not complete. [RT #17513]
e01f55daa4b611190a11a40299007e5e55018854Mark Andrews --- 9.6.0a1 released ---
4c577cbd1efc14156751e5b2ced7a866871a2f1aMark Andrews2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
2ba2a6e4be2eae3a1db1a657ceee15aa62799c7fMark Andrews2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2ba2a6e4be2eae3a1db1a657ceee15aa62799c7fMark Andrews2458. [doc] ARM: update and correction for max-cache-size.
30aaec21221ca5d8715d1ff1ce92fbdf98bb6652Mark Andrews2457. [tuning] max-cache-size is reverted to 0, the previous
30aaec21221ca5d8715d1ff1ce92fbdf98bb6652Mark Andrews default. It should be safe because expired cache
17a0bbda335ffc9af34be1000f500c622008458cMark Andrews entries are also purged. [RT #18684]
17a0bbda335ffc9af34be1000f500c622008458cMark Andrews2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews address, regardless of family. They now correctly
b32e391602b3655c90c2ded10376dbfa4ec8a074Evan Hunt distinguish IPv4 from IPv6. [RT #18559]
b32e391602b3655c90c2ded10376dbfa4ec8a074Evan Hunt2455. [bug] Stop metadata being transferred via axfr/ixfr.
52d44117c825de42dd8bba00885cfb004770c79eMichael Graff2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
1d5981dd3f7ae31703b7b4e3aa776bc8302ff78dEvan Hunt2453. [bug] Remove NULL pointer dereference in dns_journal_print().
aae88005f26209d969328703a09170e8af3faff3Mark Andrews2452. [func] Improve bin/test/journalprint. [RT #18316]
57b403c1e9cd8f814c7dbf1808f6cd8d2efb7aeaScott Mann2451. [port] solaris: handle runtime linking better. [RT #18356]
29bd52e4ee3fa047474d5d5b405d1e09c800a6f4Evan Hunt2450. [doc] Fix lwresd docbook problem for manual page.
b1b42b03b774d77ddfd38e5e0a5c0a3ed1944b89Mark Andrews2449. [placeholder]
c5fa3706950224af3f5ae6d22944b1b8298d4eddMark Andrews2448. [func] Add NSEC3 support. [RT #15452]
4d205bf79b4abacfef41c9f01ee63938deba2f31Mark Andrews2447. [cleanup] libbind has been split out as a separate product.
4d205bf79b4abacfef41c9f01ee63938deba2f31Mark Andrews2446. [func] Add a new log message about build options on startup.
5cfe4bcb0afd71f6bc1cc2dab37a9ad6181c13f9Mark Andrews A new command-line option '-V' for named is also
5cfe4bcb0afd71f6bc1cc2dab37a9ad6181c13f9Mark Andrews provided to show this information. [RT# 18645]
5b79d154014f87b6c54b1ec2d3912c35b02042a1Mark Andrews2445. [doc] ARM out-of-date on empty reverse zones (list includes
5b79d154014f87b6c54b1ec2d3912c35b02042a1Mark Andrews RFC1918 address, but these are not yet compiled in).
a8e5a5918355d883f24e4f137c13cd53841679a9Mark Andrews2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
69496e55a787f8d800c826d2405d8f38e4c52b86Mark Andrews (clear DF) for UDP responses and requests.
c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews2443. [bug] win32: UDP connect() would not generate an event,
c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews and so connected UDP sockets would never clean up.
c1ee8bb4ba3e9ab1463403ed685729631de406b1Mark Andrews Fix this by doing an immediate WSAConnect() rather
16cc4a1f56d0f9a300419da7e75e3b72169e608aMark Andrews than an io completion port type for UDP.
16cc4a1f56d0f9a300419da7e75e3b72169e608aMark Andrews2442. [bug] A lock could be destroyed twice. [RT# 18626]
000a8970f840a0c27c5cc404826853c4674362acMark Andrews2441. [bug] isc_radix_insert() could copy radix tree nodes
000a8970f840a0c27c5cc404826853c4674362acMark Andrews incompletely. [RT #18573]
000a8970f840a0c27c5cc404826853c4674362acMark Andrews2440. [bug] named-checkconf used an incorrect test to determine
000a8970f840a0c27c5cc404826853c4674362acMark Andrews if an ACL was set to none.
903b3c84e2428160b2921364335363bb33452dabEvan Hunt2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
1fba20bd0b3501f4c7e751e239e0992bf92443bfMark Andrews2438. [bug] Timeouts could be logged incorrectly under win32.
e02c1d738bd326beceabbe4a04692ea0282225edMark Andrews2437. [bug] Sockets could be closed too early, leading to
e02c1d738bd326beceabbe4a04692ea0282225edMark Andrews inconsistent states in the socket module. [RT #18298]
87708bde16713bc02ff2598f4a82f98c699a2f2dMark Andrews2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
38b84a1fcfdbda4d1d0fdca409004ae83be2ace8Mark Andrews2435. [bug] Fixed an ACL memory leak affecting win32.
38b84a1fcfdbda4d1d0fdca409004ae83be2ace8Mark Andrews2434. [bug] Fixed a minor error-reporting bug in
433e06a25cdd92d665abda3e64c2c65f4a3f9b21Mark Andrews2433. [tuning] Set initial timeout to 800ms.
433e06a25cdd92d665abda3e64c2c65f4a3f9b21Mark Andrews2432. [bug] More Windows socket handling improvements. Stop
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt using I/O events and use IO Completion Ports
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt throughout. Rewrite the receive path logic to make
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt it easier to support multiple simultaneous
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt requesters in the future. Add stricter consistency
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt checking as a compile-time option (define
8a743600ddfcd97adbbd83f8e9f546ce7d365acbEvan Hunt ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
dc4fa197dd1031b3c966e5ee9d69a0f49ae1d9ceMark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
a04b5f679428cefefedebe93718c0401e36f947dMark Andrews2430. [bug] win32: isc_interval_set() could round down to
3916872f379457fe344afb02398a009701c5016aEvan Hunt zero if the input was less than NS_INTERVAL
3916872f379457fe344afb02398a009701c5016aEvan Hunt nanoseconds. Round up instead. [RT #18549]
161429fc059b0eeb84fb506bca4f9f5857a9c091Mark Andrews2429. [doc] nsupdate should be in section 1 of the man pages.
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt2428. [bug] dns_iptable_merge() mishandled merges of negative
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt tables. [RT #18409]
79bf7c874bb5a01b5b5db44af10b4ae24c89b93eEvan Hunt2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt was set. [RT #18528]
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt2426. [bug] libbind: inet_net_pton() can sometimes return the
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt wrong value if excessively large net masks are
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt supplied. [RT #18512]
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt2425. [bug] named didn't detect unavailable query source addresses
d9ad0a55bb198caecf13c79f7e9a402fba8e68ebEvan Hunt at load time. [RT #18536]
37dee1ff94960a61243f611c0f87f8c316815c53Mark Andrews2424. [port] configure now probes for a working epoll
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews implementation. Allow the use of kqueue,
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews epoll and /dev/poll to be selected at compile
7a54dadeb565d746ef8b3fc77dc76455d836dd30Mark Andrews time. [RT #18277]
643935ac110cdd977759ac9b85a5795646ccc6cfMark Andrews2423. [security] Randomize server selection on queries, so as to
643935ac110cdd977759ac9b85a5795646ccc6cfMark Andrews make forgery a little more difficult. Instead of
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews always preferring the server with the lowest RTT,
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews pick a server with RTT within the same 128
79344b9710d6ab498769c5fb1889910c592c6d8bMark Andrews millisecond band. [RT #18441]
179e028b35ff89a9d493398285c40dc89b08963bMark Andrews2422. [bug] Handle the special return value of a empty node as
179e028b35ff89a9d493398285c40dc89b08963bMark Andrews if it was a NXRRSET in the validator. [RT #18447]
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews2421. [func] Add new command line option '-S' for named to specify
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews the max number of sockets. [RT #18493]
c2170a4bd022e20d7dd75e56f9ccff8e7cbbb356Mark Andrews Use caution: this option may not work for some
82f77687abd21349fa7c7f51e71fdc0c7367d2e2Mark Andrews operating systems without rebuilding named.
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews2420. [bug] Windows socket handling cleanup. Let the io
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews completion event send out canceled read/write
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews done events, which keeps us from writing to memory
1f512cd06b4aefb86e767197751879840ba3f56bMark Andrews we no longer have ownership of. Add debugging
1f512cd06b4aefb86e767197751879840ba3f56bMark Andrews socket_log() function. Rework TCP socket handling
1f512cd06b4aefb86e767197751879840ba3f56bMark Andrews to not leak sockets.
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
584ad7dedd0928a59830f82d82ae696bf6f4e705Evan Hunt should not be used for isc_sockettype_fdwatch sockets.
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt2417. [bug] Connecting UDP sockets for outgoing queries could
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt unexpectedly fail with an 'address already in use'
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt error. [RT #18411]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt2416. [func] Log file descriptors that cause exceeding the
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt internal maximum. [RT #18460]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt2415. [bug] 'rndc dumpdb' could trigger various assertion failures
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt in rbtdb.c. [RT #18455]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt2414. [bug] A masterdump context held the database lock too long,
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt causing various troubles such as dead lock and
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt recursive lock acquisition. [RT #18311, #18456]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
71bd858d8ed62672e7c23999dc7c02fd16a55089Evan Hunt2412. [bug] win32: address a resource leak. [RT #18374]
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews at compilation time. [RT #18433]
bbedadf76ab670b01887fb9b41097120ea4fdf14Evan Hunt Note: with changes #2469 and #2421 above, there is no
bbedadf76ab670b01887fb9b41097120ea4fdf14Evan Hunt need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
8d8f0b465959b799cb0d29ed694dc50ea7a73202Mark Andrews2410. [bug] Correctly delete m_versionInfo. [RT #18432]
7659fdb3aab0a96e10aac67669b6c8d79faef44fjohnd2409. [bug] Only log that we disabled EDNS processing if we were
858c4a86c12fdaf90d8d24a6535c7e0f89d0a962johnd subsequently successful. [RT #18029]
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews2408. [bug] A duplicate TCP dispatch event could be sent, which
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews could then trigger an assertion failure in
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews resquery_response(). [RT #18275]
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
9f9b7f0e8d455b1c88e51ddcefdbf19b472e1ef2Mark Andrews2406. [placeholder]
e334405421979688f2d838805ac67ee47bd62976Mark Andrews2405. [cleanup] The default value for dnssec-validation was changed to
8aee18709f238406719768b8a6b843a15c5075f8Mark Andrews "yes" in 9.5.0-P1 and all subsequent releases; this
8aee18709f238406719768b8a6b843a15c5075f8Mark Andrews was inadvertently omitted from CHANGES at the time.
e78c2b856b9bfbf713fe805224f345f8e8f84e4aEvan Hunt2404. [port] hpux: files unlimited support.
e78c2b856b9bfbf713fe805224f345f8e8f84e4aEvan Hunt2403. [bug] TSIG context leak. [RT #18341]
c0a76b3c0b42a110e14eb56103973944900400c4Mark Andrews2402. [port] Support Solaris 2.11 and over. [RT #18362]
82f0630bae09598209cc37c1db00ff4356efee27Mark Andrews2401. [bug] Expect to get E[MN]FILE errno internal_accept()
82f0630bae09598209cc37c1db00ff4356efee27Mark Andrews (from accept() or fcntl() system calls). [RT #18358]
36fc19f9397ac2469d5432e5eb6ff8774cf60676Mark Andrews2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
020120e3c72d67a86ce3fd2542b43b269a1e9233Mark Andrews2399. [placeholder]
97664670d0e45ec865da407112fceb892133eaf3Mark Andrews2398. [bug] Improve file descriptor management. New,
97664670d0e45ec865da407112fceb892133eaf3Mark Andrews temporary, named.conf option reserved-sockets,
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews default 512. [RT #18344]
b5b934a0bb46aded1552a17473652b5a7f4a3274Evan Hunt2397. [bug] gssapi_functions had too many elements. [RT #18355]
b5b934a0bb46aded1552a17473652b5a7f4a3274Evan Hunt2396. [bug] Don't set SO_REUSEADDR for randomized ports.
5af195d1dbe4c266a47264111a9293069041209dMark Andrews2395. [port] Avoid warning and no effect from "files unlimited"
5af195d1dbe4c266a47264111a9293069041209dMark Andrews on Linux when running as root. [RT #18335]
5a636f9951e0a6968498d588a57cb01161d2a109Mark Andrews2394. [bug] Default configuration options set the limit for
5a636f9951e0a6968498d588a57cb01161d2a109Mark Andrews open files to 'unlimited' as described in the
8eb30f8dd3c1170406f4f2307964e4c0994494beEvan Hunt documentation. [RT #18331]
8eb30f8dd3c1170406f4f2307964e4c0994494beEvan Hunt2393. [bug] nested acls containing keys could trigger an
8eb30f8dd3c1170406f4f2307964e4c0994494beEvan Hunt assertion in acl.c. [RT #18166]
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews2392. [bug] remove 'grep -q' from acl test script, some platforms
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews don't support it. [RT #18253]
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews2391. [port] hpux: cover additional recvmsg() error codes.
d48730a446ffffa8d75462a4abefce030425fa64Mark Andrews2390. [bug] dispatch.c could make a false warning on 'odd socket'.
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier2389. [bug] Move the "working directory writable" check to after
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews the ns_os_changeuser() call. [RT #18326]
380c874925f684847d9278b909cf511cb5b0289aShawn Routhier2388. [bug] Avoid using tables for layout purposes in
a27b3757fdd8976ce05e37f391ad9e7ac4638e5dMark Andrews statistics XSL [RT #18159].
a27b3757fdd8976ce05e37f391ad9e7ac4638e5dMark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews [RT #18147] [RT #18258]
7ffe86618c91097b73cde82fb535180dbd5f8e91Mark Andrews2386. [func] Add warning about too small 'open files' limit.
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews2385. [bug] A condition variable in socket.c could leak in
c9c2ffe729bf24a7fd0f0a234a4a84e67621d414Mark Andrews rare error handling [RT #17968].
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews2384. [security] Fully randomize UDP query ports to improve
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews forgery resilience. [RT #17949, #18098]
7bce3361868c7c00929e0c1b64a45f24a714972fMark Andrews2383. [bug] named could double queries when they resulted in
2015023399657c36e9dcc8b5dc35ce20dfc876f0Mark Andrews SERVFAIL due to overkilling EDNS0 failure detection.
b2c8cc4f2d61f0593300a5851e26e7ddb30b7e10Mark Andrews2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
ed83fa75f5657ab2394a701f7ccc169dd9ef48fcMark Andrews2381. [port] dlz/mysql: support multiple install layouts for
ed83fa75f5657ab2394a701f7ccc169dd9ef48fcMark Andrews mysql. <prefix>/include/{,mysql/}mysql.h and
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews <prefix>/lib/{,mysql/}. [RT #18152]
c470afc7ac0040f1bf7553ce8183b7a1d1726211Mark Andrews2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
506a2177bfafa4321cf1ba27ff4a1d09bac69e14Mark Andrews proofs which, in turn, caused validation failures
506a2177bfafa4321cf1ba27ff4a1d09bac69e14Mark Andrews for insecure zones immediately below a secure zone
506a2177bfafa4321cf1ba27ff4a1d09bac69e14Mark Andrews the server was authoritative for. [RT #18112]
082f42dcf2f38509a8c842013548f680a6ad06f3Mark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
082f42dcf2f38509a8c842013548f680a6ad06f3Mark Andrews TLDs and supported RRs with TTLs [RT #17972]
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
c75523bcb30c2b8426ee7cb226d9b429c337325bMark Andrews2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
70ba55161bbecab6b58ad4d2203741e9b57951bcMark Andrews2376. [bug] Change #2144 was not complete.
70ba55161bbecab6b58ad4d2203741e9b57951bcMark Andrews2375. [placeholder]
ad9107efaaae2407cf11bf0c55407d8daed2e2d4Mark Andrews2374. [bug] "blackhole" ACLs could cause named to segfault due
ad9107efaaae2407cf11bf0c55407d8daed2e2d4Mark Andrews to some uninitialized memory. [RT #18095]
3f9f14055b85c2dda341b341de0e65d4639542c5Mark Andrews2373. [bug] Default values of zone ACLs were re-parsed each time a
75f48cecb3289c6d23a45127da65f18937160341Mark Andrews new zone was configured, causing an overconsumption
75f48cecb3289c6d23a45127da65f18937160341Mark Andrews of memory. [RT #18092]
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
8fb412590e03dcf9de775dad1eb7acf320b575edMark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
1b42401954a8770d82a168ae1ac06ce66862fd25Mark Andrews2370. [bug] "rndc freeze" could trigger an assertion in named
03ccae042b4acd22805d667f823066d3690965cfMark Andrews when called on a nonexistent zone. [RT #18050]
240a7dc59d6bc135ed298436b59dc86c84928ca2Mark Andrews2369. [bug] libbind: Array bounds overrun on read in bitncmp().
240a7dc59d6bc135ed298436b59dc86c84928ca2Mark Andrews2368. [port] Linux: use libcap for capability management if
e588bfe68951d3a88f56640fdc7e43d8623642f4Mark Andrews possible. [RT# 18026]
e588bfe68951d3a88f56640fdc7e43d8623642f4Mark Andrews2367. [bug] Improve counting of dns_resstatscounter_retry
02a211f4c4d86f283f9c94bc7e5ab07b547e49f4Mark Andrews2366. [bug] Adb shutdown race. [RT #18021]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews2365. [bug] Fix a bug that caused dns_acl_isany() to return
17be07ab818846dffb79e898da888a29c919bb02Mark Andrews spurious results. [RT #18000]
17be07ab818846dffb79e898da888a29c919bb02Mark Andrews2364. [bug] named could trigger a assertion when serving a
ffa806a2948ef93a8e90e8272bb9053d87a2346eMark Andrews malformed signed zone. [RT #17828]
20599f3d0e20fe6e253f59f043f3bef5d6635de6Mark Andrews2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews2362. [cleanup] Make "rrset-order fixed" a compile-time option.
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews settable by "./configure --enable-fixed-rrset".
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews Disabled by default. [RT #17977]
38abdbf816fac8386d6f5259d5d6bdfb1b4b3d05Mark Andrews2361. [bug] "recursion" statistics counter could be counted
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews multiple times for a single query. [RT #17990]
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews2360. [bug] Fix a condition where we release a database version
c6f4972c745f8903aba6dcca41f17a44c473db66Mark Andrews (which may acquire a lock) while holding the lock.
f94ec08c17d60ee519a4f46b6dbb3519989e5b9cMark Andrews2359. [bug] Fix NSID bug. [RT #17942]
f94ec08c17d60ee519a4f46b6dbb3519989e5b9cMark Andrews2358. [doc] Update host's default query description. [RT #17934]
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews2357. [port] Don't use OpenSSL's engine support in versions before
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews OpenSSL 0.9.7f. [RT #17922]
03952196946fc638af7f20a9b59cfd2f15de01acFrancis Dupont2356. [bug] Built in mutex profiler was not scalable enough.
7c681d075027f3389c31d261e1a71473c42ac73bMark Andrews2355. [func] Extend the number statistics counters available.
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews2353. [func] Add support for Name Server ID (RFC 5001).
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 'dig +nsid' requests NSID from server.
c73d8c1b72ddc3330cfc21e2070dffabca324bf7Mark Andrews 'request-nsid yes;' causes recursive server to send
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 NSID requests to upstream servers. Server responds
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 to NSID requests with the string configured by
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 'server-id' option. [RT #17091]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2352. [bug] Various GSS_API fixups. [RT #17729]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2350. [port] win32: IPv6 support. [RT #17797]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2349. [func] Provide incremental re-signing support for secure
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 dynamic zones. [RT #1091]
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 Documentation is in the new README.pkcs11 file.
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 New tool, dnssec-keyfromlabel, which takes the
27fe1966c948ba0c1c9d0d831ea3d8bf32d052acTatuya JINMEI 神明達哉 label of a key pair in a HSM and constructs a DNS
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt key pair for use by named and dnssec-signzone.
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt2347. [bug] Delete now traverses the RB tree in the canonical
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt order. [RT #17451]
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt2346. [func] Memory statistics now cover all active memory contexts
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt in increased detail. [RT #17580]
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt2345. [bug] named-checkconf failed to detect when forwarders
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt were set at both the options/view level and in
cfd262045c23cadb8415f0111f56995258f17361Evan Hunt a root zone. [RT #17671]
4b6cb8d09e75ce9f04b2e40bd9d2e449c09b0c1fMark Andrews2344. [bug] Improve "logging{ file ...; };" documentation.
712b976a0633806b7140b17354a9398300f616b9Mark Andrews2343. [bug] (Seemingly) duplicate IPv6 entries could be
712b976a0633806b7140b17354a9398300f616b9Mark Andrews created in ADB. [RT #17837]
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews2341. [bug] libbind: add missing -I../include for off source
f0835301386ff7026fd0097198d4b42f2f8d0867Mark Andrews tree builds. [RT #17606]
cb933b69ff357100768d0b33b88e4ee986b128f2Evan Hunt2340. [port] openbsd: interface configuration. [RT #17700]
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉2339. [port] tru64: support for libbind. [RT #17589]
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉2338. [bug] check_ds() could be called with a non DS rdataset.
f1f39b7e07b2665073d976c4d27e30988552b873Tatuya JINMEI 神明達哉2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt2336. [func] If "named -6" is specified then listen on all IPv6
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt interfaces if there are not listen-on-v6 clauses in
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt2335. [port] sunos: libbind and *printf() support for long long.
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
86dcc4005887f91d23d970d4574a8f6afa7e28d2Evan Hunt bug in fromstruct_txt(). [RT #17609]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews2333. [bug] Fix off by one error in isc_time_nowplusinterval().
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt2331. [bug] Failure to regenerate any signatures was not being
bf9b852c3eaf2c9847f926751b57a06f1ae3d72aEvan Hunt reported nor being past back to the UPDATE client.
ff5864ef42c3bc55e9be20434d1f7de2f6794894Mark Andrews2330. [bug] Remove potential race condition when handling
ff5864ef42c3bc55e9be20434d1f7de2f6794894Mark Andrews over memory events. [RT #17572]
f3792d4bda1273fe82f9d0a13f141923e41d4537Tatuya JINMEI 神明達哉 WARNING: API CHANGE: over memory callback
f3792d4bda1273fe82f9d0a13f141923e41d4537Tatuya JINMEI 神明達哉 function now needs to call isc_mem_waterack().
45d9b38097eb7b43e7e0d5d20c2d0903c7224ebdMark Andrews See <isc/mem.h> for details.
810656a187f2c358323bbf679f792f19a46a7973Mark Andrews2329. [bug] Clearer help text for dig's '-x' and '-i' options.
810656a187f2c358323bbf679f792f19a46a7973Mark Andrews2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
bdc1d1b1bfad04bbae3fdf974e49e392951fb911Mark Andrews2327. [bug] It was possible to dereference a NULL pointer in
43888c231579e5b021beeadd7265cda302ea1efeMark Andrews rbtdb.c. Implement dead node processing in zones as
43888c231579e5b021beeadd7265cda302ea1efeMark Andrews we do for caches. [RT #17312]
c52235e52ee12e4d15f808ac06608584257f6479Mark Andrews2326. [bug] It was possible to trigger a INSIST in the acache
4a8dc5f8efcc8bc3033a9383f958d1de22c844f4Mark Andrews2325. [port] Linux: use capset() function if available. [RT #17557]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
718c4becc5711be71e23202a87f3aaea1aedde79Mark Andrews2323. [port] tru64: namespace clash. [RT #17547]
718c4becc5711be71e23202a87f3aaea1aedde79Mark Andrews2322. [port] MacOS: work around the limitation of setrlimit()
081b36ff9588e4d67a1a3095f5333a2b223482f7Mark Andrews for RLIMIT_NOFILE. [RT #17526]
43c770b9987375e9e0efa19617b22e8e6a748a63Mark Andrews2321. [placeholder]
9a56f03c4c63c3729ebfcff9f99b9394c6004a20Mark Andrews2320. [func] Make statistics counters thread-safe for platforms
9a56f03c4c63c3729ebfcff9f99b9394c6004a20Mark Andrews that support certain atomic operations. [RT #17466]
02181a6c7420e8f3c083d0d20e0e65a78ea25d0fMark Andrews2319. [bug] Silence Coverity warnings in
e24ccb512c110d181e01f977196e518b0e72e451Mark Andrews2318. [port] sunos fixes for libbind. [RT #17514]
e24ccb512c110d181e01f977196e518b0e72e451Mark Andrews2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
63af1a646a006867dbd99dc0aa74559d832a420fMark Andrews2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
b7bc86a4d3d78fae33577682cea7d1449abb7b33Mark Andrews2315. [bug] Used incorrect address family for mapped IPv4
675cc80975eb7d15e0d9f1d5f424baafaf189fdeMark Andrews addresses in acl.c. [RT #17519]
675cc80975eb7d15e0d9f1d5f424baafaf189fdeMark Andrews2314. [bug] Uninitialized memory use on error path in
80852eb5a8df5f3d70efb764e00f8f09efc5730cMark Andrews2313. [cleanup] Silence Coverity warnings. Handle private stacks.
a27bbd21cf07371fc71e7ade75c3d78a5b98b7f9Mark Andrews [RT #17447] [RT #17478]
29f0da7fb84ea8010175769baecd12ab20903bb4Mark Andrews2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
b00de53de2e37154d9046d481734cfb9a8573204Mark Andrews2311. [bug] IPv6 addresses could match IPv4 ACL entries and
b00de53de2e37154d9046d481734cfb9a8573204Mark Andrews vice versa. [RT #17462]
249dcf3932668693a53c2790b97f5170efb233e1Mark Andrews2310. [bug] dig, host, nslookup: flush stdout before emitting
ead77b9ad4821433ad45ef1de2c072b7c8f94f48Mark Andrews debug/fatal messages. [RT #17501]
8e22c73f3ea64337926151b53245f61342fa52faMark Andrews2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
e27d55e3ee06b6edcf625b8920a5c809da7f0b98Mark Andrews2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
7d9be933d7f4504cd0355ced1fb7fbd137e455b7Mark Andrews2306. [bug] Remove potential race from lib/dns/resolver.c.
5ae2eac4c16bdbbef032544bd9fc86f47e7bdc2cMark Andrews2305. [security] inet_network() buffer overflow. CVE-2008-0122.
5b02fc32d693bb811199308a40143df0adf818c1Mark Andrews2304. [bug] Check returns from all dns_rdata_tostruct() calls.
b667946fa548bf8cb93029458ec130be6365419fMark Andrews2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
d8624c1f19777853aa96cb797759743c82480f70Mark Andrews2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
98744b51112090a3fb7abcf858cb0657c13609ccMark Andrews2301. [bug] Remove resource leak and fix error messages in
8d31dd9ab62d91b5f23ac687657c966d44074a3fMark Andrews2300. [bug] Fixed failure to close open file in
6d5840017831db1eee3be47236ff5044449a0256Mark Andrews2299. [bug] Remove unnecessary NULL check in
3ec79bbc03fc5378a6cb37b276807cd40b5332aaMark Andrews2298. [bug] isc_mutex_lock() failure not caught in
dc64df4479df5e7cb3ed1dead21888b5af98f67eMark Andrews2297. [bug] isc_entropy_createfilesource() failure not caught in
778a01b1aa76273d4a28c7559a509edc7a00ec95Mark Andrews2296. [port] Allow docbook stylesheet location to be specified to
44f175a90a855326725439b2f1178f0dcca8f67dMark Andrews configure. [RT #17457]
21991bd14e8b59000dfc2acf2ce614596cf28cbaMark Andrews2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
b335299322e50f045f10e4636262cd2f8d407a8bMark Andrews2294. [func] Allow the experimental statistics channels to have
b335299322e50f045f10e4636262cd2f8d407a8bMark Andrews multiple connections and ACL.
b335299322e50f045f10e4636262cd2f8d407a8bMark Andrews Note: the stats-server and stats-server-v6 options
ff5c52617eecd06161344c99987a866691592e4aMark Andrews available in the previous beta releases are replaced
e12030c433a08b9e9678717ec5e8092c9e4da72cMark Andrews with the generic statistics-channels statement.
e18c62b1dab6bf82530a94c00e2320e542f40c3fMark Andrews2293. [func] Add ACL regression test. [RT #17375]
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews2292. [bug] Log if the working directory is not writable.
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
5c40acf2156bbc258fc290f38cf8d5e12d085bedMark Andrews failure to set PR_SET_DUMPABLE. [RT #17312]
8b7d3aeda264513ca83961fb752703cc3c85451dMark Andrews2290. [bug] Let AD in the query signal that the client wants AD
8b7d3aeda264513ca83961fb752703cc3c85451dMark Andrews set in the response. [RT #17301]
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews2289. [func] named-checkzone now reports the out-of-zone CNAME
f083a44415365f6464f8bd35f439dc13ee0b684fMark Andrews found. [RT #17309]
108300f7f14315b7fa72a04f009dcb4d0839f207Mark Andrews2288. [port] win32: mark service as running when we have finished
108300f7f14315b7fa72a04f009dcb4d0839f207Mark Andrews loading. [RT #17441]
2fca4a3321c0137a0bcaa4692564b249ae26322eMark Andrews2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
2fca4a3321c0137a0bcaa4692564b249ae26322eMark Andrews2286. [func] Allow a TCP connection to be used as a weak
121f783b6660f2cb49829bdc51eb522fd327437eMark Andrews authentication method for reverse zones.
121f783b6660f2cb49829bdc51eb522fd327437eMark Andrews New update-policy methods tcp-self and 6to4-self.
707d9fbd86a15a7112936473a31191dc09ca642cMark Andrews2285. [func] Test framework for client memory context management.
bb9298e0088e8a636ea59f5b435f7c5b536c8017Mark Andrews2284. [bug] Memory leak in UPDATE prerequisite processing.
1df2b7edfecd7cb7edc08ae9ec43d008cfbe7d34Mark Andrews2283. [bug] TSIG keys were not attaching to the memory
1df2b7edfecd7cb7edc08ae9ec43d008cfbe7d34Mark Andrews context. TSIG keys should use the rings
fd95cc0da9563aa85ac67462433b6a2b6ac0db9fMark Andrews memory context rather than the clients memory
fd95cc0da9563aa85ac67462433b6a2b6ac0db9fMark Andrews context. [RT #17377]
bb6d33103e672d21429ae1837ce10d91f2419800Mark Andrews2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
bb6d33103e672d21429ae1837ce10d91f2419800Mark Andrews2281. [bug] Attempts to use undefined acls were not being logged.
cc6d67469cf390842adf1bd35dd2b21fc3b7df18Mark Andrews2280. [func] Allow the experimental http server to be reached
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews over IPv6 as well as IPv4. [RT #17332]
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
1e9848fb2b4573711c02696dc4ee6540de4c81f6Mark Andrews to protect applications from receiving spurious
03ccae042b4acd22805d667f823066d3690965cfMark Andrews SIGPIPE signals when using the resolver.
c45d848e2a5898975a14a6311a406f45028a45b0Tatuya JINMEI 神明達哉2278. [bug] win32: handle the case where Windows returns no
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier search list or DNS suffix. [RT #17354]
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier2277. [bug] Empty zone names were not correctly being caught at
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier in the post parse checks. [RT #17357]
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
ce164dbd9c97331a54994748df3ba72c35920946Tatuya JINMEI 神明達哉2275. [func] Add support to dig to perform IXFR queries over UDP.
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews2274. [func] Log zone transfer statistics. [RT #17336]
b8d036c434d68e358c95bcb7268b5c310ed0579cMark Andrews2273. [bug] Adjust log level to WARNING when saving inconsistent
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews stub/slave master and journal files. [RT# 17279]
003fd2f720f79404b62d49f6dfe7aa1257f03b08Mark Andrews2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
a80d26914afece7324158918e8d74c7c8384a0dfMark Andrews2271. [bug] Fix a memory leak in http server code [RT #17100]
c19f322914f380404b613fbb31f5ac2582098f9dMark Andrews2270. [bug] dns_db_closeversion() version->writer could be reset
c19f322914f380404b613fbb31f5ac2582098f9dMark Andrews before it is tested. [RT #17290]
ff9301990d83dedca3806a16b4c9693f16d6e8b1Mark Andrews2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
fa2cb8d61d8699709b9fc14ed4f47bb63507b2a5Mark Andrews2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
08fb52ec8c3923e501c7f8d74c524cced52551f9Mark Andrews --- 9.5.0b1 released ---
08fb52ec8c3923e501c7f8d74c524cced52551f9Mark Andrews2267. [bug] Radix tree node_num value could be set incorrectly,
64c43af4f464b4ead99c3d2a561f0013fd26308cMark Andrews causing positive ACL matches to look like negative
64c43af4f464b4ead99c3d2a561f0013fd26308cMark Andrews ones. [RT #17311]
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews2266. [bug] client.c:get_clientmctx() returned the same mctx
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews once the pool of mctx's was filled. [RT #17218]
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews2265. [bug] Test that the memory context's basic_table is non NULL
c5259c013bba297cb0d38b85bd1c83fc26ef268cMark Andrews before freeing. [RT #17265]
22c4126ba51175af1453cd2254c303c6f65a766cMark Andrews2264. [bug] Server prefix length was being ignored. [RT #17308]
637a4234fab5dacacfa0d4fb8b41290b634b252fMark Andrews2263. [bug] "named-checkconf -z" failed to set default value
b1003ace6f6e15ffa212c7982c80845f549e6cefMark Andrews for "check-integrity". [RT #17306]
637a4234fab5dacacfa0d4fb8b41290b634b252fMark Andrews2262. [bug] Error status from all but the last view could be
92348098ebe7ef4c26bfe2204a7364fa18735afcMark Andrews lost. [RT #17292]
637a4234fab5dacacfa0d4fb8b41290b634b252fMark Andrews2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
d1a5fdc34a3d7caabead7bbf0cbf6fa7d89f0910Mark Andrews2260. [bug] Reported wrong clients-per-query when increasing the
5e95cf76e46d93d6b6c2e3cd1aca4c1ab33f827eMark Andrews value. [RT #17236]
2e20dea9fc0a84217c7debdef8b4b6c6f04d3998Mark Andrews2259. [placeholder]
13396661f46572d7b94703a25721aad040fbd91aMark Andrews --- 9.5.0a7 released ---
64f8608ed6b7f42a4a7d358fade2c82dfd1e9c01Mark Andrews2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
0cae66577c69c89086cd065bb297690072b471b4Mark Andrews2257. [bug] win32: Use the full path to vcredist_x86.exe when
d3cbd6b05c16c6e0e86c1651bda3b3ee06574d62Mark Andrews calling it. [RT #17222]
d3cbd6b05c16c6e0e86c1651bda3b3ee06574d62Mark Andrews2256. [bug] win32: Correctly register the installation location of
139cedabf9242add24d8326e216e451dd2d5a935Tatuya JINMEI 神明達哉2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews2254. [bug] timer.c:dispatch() failed to lock timer->lock
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews when reading timer->idle allowing it to see
0b24b2d3c423560a0a4cd9a4476b9a2dcafb7ea3Evan Hunt intermediate values as timer->idle was reset by
0b24b2d3c423560a0a4cd9a4476b9a2dcafb7ea3Evan Hunt isc_timer_touch(). [RT #17243]
dcfca6f18d5069155ae50025aaeead0cc8c04730Evan Hunt2253. [func] "max-cache-size" defaults to 32M.
dcfca6f18d5069155ae50025aaeead0cc8c04730Evan Hunt "max-acache-size" defaults to 16M.
ebaf977ecfe6b26ba4482e00d1fd78914a1e17ebMark Andrews2252. [bug] Fixed errors in sortlist code [RT #17216]
140cf92b3bbff9da00a782c8afe27f5fa63bd7f7Evan Hunt2251. [placeholder]
fd3a3783538312dc8f61a85ce4d3720f43b912c0Mark Andrews2250. [func] New flag 'memstatistics' to state whether the
fd3a3783538312dc8f61a85ce4d3720f43b912c0Mark Andrews memory statistics file should be written or not.
fd3a3783538312dc8f61a85ce4d3720f43b912c0Mark Andrews Additionally named's -m option will cause the
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont statistics file to be written. [RT #17113]
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt2249. [bug] Only set Authentic Data bit if client requested
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt DNSSEC, per RFC 3655 [RT #17175]
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
8a198fa776a09beb4dabf40b73a54d9c7bd70ac9Evan Hunt2247. [doc] Sort doc/misc/options. [RT #17067]
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont2246. [bug] Make the startup of test servers (ans.pl) more
e11a0c114cdaf8f7e7832e9f1a011138248093a6Evan Hunt robust. [RT #17147]
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont2245. [bug] Validating lack of DS records at trust anchors wasn't
b47d410f8409294863f214542a05c92cbe86cf04Evan Hunt working. [RT #17151]
6ff7cd9fa57e8f8092c08df8f9ceccbffb6b19c9Francis Dupont2244. [func] Allow the check of nameserver names against the
6ff7cd9fa57e8f8092c08df8f9ceccbffb6b19c9Francis Dupont SOA MNAME field to be disabled by specifying
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont 'notify-to-soa yes;'. [RT #17073]
f77148e02902a96bddd5948e594bd4be2efe67ffFrancis Dupont2243. [func] Configuration files without a newline at the end now
0185a9358cb8324f44e114c6fd3cbbc4b9c507e4Francis Dupont parse without error. [RT #17120]
a91029a00e83e3933046cc9354357bccaa66c272Francis Dupont2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
a91029a00e83e3933046cc9354357bccaa66c272Francis Dupont library could require a source of random data.
05b1ab91a62c09b052cdd9641355671997430d15Evan Hunt2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt a number of INSIST()s into plain fatal() errors
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt which report the triggering result code.
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt The 'key' command wasn't disabling GSS-TSIG.
03e5afa4c09d57f85a007149999619e87f501138Evan Hunt2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt2238. [bug] It was possible to trigger a REQUIRE when a
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt validation was canceled. [RT #17106]
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt2236. [bug] dnssec-signzone failed to preserve the case of
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt of wildcard owner names. [RT #17085]
0f66aced2640d964aeb6db41210711ba0640d7f2Evan Hunt2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
8ebf67b7f0aeea7ef8c6e034c57a1dc57a7b216aEvan Hunt2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
7c25b5f311a5a97ba3e9323956507f551c9b3b53Shawn Routhier2233. [func] Add support for O(1) ACL processing, based on
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews radix tree code originally written by Kevin
7c25b5f311a5a97ba3e9323956507f551c9b3b53Shawn Routhier Brintnall. [RT #16288]
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt2232. [bug] dns_adb_findaddrinfo() could fail and return
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt ISC_R_SUCCESS. [RT #17137]
597642c0baaf66172ca44104ed5a18957a969748Evan Hunt2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
d3a6cd7c7e13707d0c26e1af0e026dd6c22c5e99Evan Hunt2230. [bug] We could INSIST reading a corrupted journal.
845bb3195a4f50d438ec0fcd5d79593010314319Evan Hunt2229. [bug] Null pointer dereference on query pool creation
d8680445d6212d5552ea8a22fd2f9951b11c4b10Tatuya JINMEI 神明達哉 failure. [RT #17133]
d8680445d6212d5552ea8a22fd2f9951b11c4b10Tatuya JINMEI 神明達哉2228. [contrib] contrib: Change 2188 was incomplete.
9ead684875ab0ab5fdb8b5dd837a88f7dbd0e01dEvan Hunt2227. [cleanup] Tidied up the FAQ. [RT #17121]
687b6322fb189c41c3672226a59461cc5c24c087Evan Hunt2226. [placeholder]
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews2225. [bug] More support for systems with no IPv4 addresses.
57fb4f7bbec88bc6431a39d4a10f82c265798b1fMark Andrews2224. [bug] Defer journal compaction if a xfrin is in progress.
5b77627c09dea9a65a70d2a0b95a22ff75b3ac04Mark Andrews2223. [bug] Make a new journal when compacting. [RT #17119]
288486df9df0c5a39b3c3d625c7f133d9a8e69fbMark Andrews2222. [func] named-checkconf now checks server key references.
5773d3c007c0c065f83480aa17e61bea728221f9Mark Andrews2221. [bug] Set the event result code to reflect the actual
85c5ed3577655f4f710f0af5ee93edd71c336055Evan Hunt record turned to caller when a cache update is
85c5ed3577655f4f710f0af5ee93edd71c336055Evan Hunt rejected due to a more credible answer existing.
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont2220. [bug] win32: Address a race condition in final shutdown of
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont the Windows socket code. [RT #17028]
0faf1492c711ddb063efda9f3f03b7afa938cff8Francis Dupont2219. [bug] Apply zone consistency checks to additions, not
bd31f734eec1884bd14024a232eb3ad3b0b86489Evan Hunt removals, when updating. [RT #17049]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
ce0a4906ad27a8743e4f59e8ea06433640d78e54Mark Andrews2217. [func] Adjust update log levels. [RT #17092]
40ad4ed01be1cace49a62214d11ef1309b3029a0Evan Hunt2216. [cleanup] Fix a number of errors reported by Coverity.
b09559fd36c5081ffaf58ab64bdef170c1a720f1Evan Hunt2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
aa3415ba49c7f322845ee3dd59c2d0159f37bb34Evan Hunt2214. [bug] Deregister OpenSSL lock callback when cleaning
aa3415ba49c7f322845ee3dd59c2d0159f37bb34Evan Hunt up. Reorder OpenSSL cleanup so that RAND_cleanup()
c9630524c7560b27784fca6e456e652ff41ae7f1Mark Andrews is called before the locks are destroyed. [RT #17098]
c656722ea789f512132d5df9a613bea5717dbe3aMark Andrews2213. [bug] SIG0 diagnostic failure messages were looking at the
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt wrong status code. [RT #17101]
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt2212. [func] 'host -m' now causes memory statistics and active
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt memory to be printed at exit. [RT 17028]
4e55893d307162770fbd7e0967043f0aef9d7583Evan Hunt2211. [func] Update "dynamic update temporarily disabled" message.
0da859c5a7f17298577616577197cc6c857e4579Evan Hunt2210. [bug] Deleting class specific records via UPDATE could
19a6c40c37cd22a07b29542a5cc5c8986c1fbf57Evan Hunt fail. [RT #17074]
19a6c40c37cd22a07b29542a5cc5c8986c1fbf57Evan Hunt2209. [port] osx: linking against user supplied static OpenSSL
9de98fbbbee124bbb8d609669cfaff17ec7a36e0Evan Hunt libraries failed as the system ones were still being
9de98fbbbee124bbb8d609669cfaff17ec7a36e0Evan Hunt found. [RT #17078]
28f4cd0a4503b91d7a48ed4d157347b251ae5686Mark Andrews2208. [port] win32: make sure both build methods produce the
c221360e9f511be38c1385b9a647ebd7dceb8b42Mark Andrews same output. [RT #17058]
485a435efecda961aa117b63d8e02494a5e11e37Mark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
bc04d6ec155564b7f0c0171ac88e9e5918366c9dEvan Hunt ai_canonname correctly. [RT #17061]
bc04d6ec155564b7f0c0171ac88e9e5918366c9dEvan Hunt --- 9.5.0a6 released ---
16de5dbc7178b7fe8a9d4beb9ff50778cc8d3847Evan Hunt2206. [security] "allow-query-cache" and "allow-recursion" now
b8b602f89be848d44472df92320e9d88213a1411Evan Hunt cross inherit from each other.
b8b602f89be848d44472df92320e9d88213a1411Evan Hunt If allow-query-cache is not set in named.conf then
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt allow-recursion is used if set, otherwise allow-query
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt is used if set, otherwise the default (localnets;
12178c86525332bb0ab66155feb61fbf32eca6acEvan Hunt localhost;) is used.
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt If allow-recursion is not set in named.conf then
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt allow-query-cache is used if set, otherwise allow-query
d601ef9e8914bc914220865328de64cb4b6cec67Evan Hunt is used if set, otherwise the default (localnets;
71ba75c604df3604673232828a68bb28c420e698Mark Andrews localhost;) is used.
71ba75c604df3604673232828a68bb28c420e698Mark Andrews2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
9eba1cf5e5420aeded5ed380d9942269fbde90f1Mark Andrews2204. [bug] "rndc flushanme name unknown-view" caused named
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews to crash. [RT #16984]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews2203. [security] Query id generation was cryptographically weak.
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews [RT # 16915]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews2202. [security] The default acls for allow-query-cache and
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews allow-recursion were not being applied. [RT #16960]
3d17a3ba61a303d5c4d9867068d0fbe9f24d2988Mark Andrews2201. [bug] The build failed in a separate object directory.
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews2200. [bug] The search for cached NSEC records was stopping to
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews early leading to excessive DLV queries. [RT #16930]
5d850024cb41fdcb0b85efd3f7997bc52e6b33e8Mark Andrews2199. [bug] win32: don't call WSAStartup() while loading dlls.
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt2198. [bug] win32: RegCloseKey() could be called when
8e4f3f1cbceef520ba889270c993de0ac376a2a7Evan Hunt RegOpenKeyEx() failed. [RT #16911]
e6dda86e8b18ca24db86bd6cd986fdcbfda3f06aEvan Hunt2197. [bug] Add INSIST to catch negative responses which are
e6dda86e8b18ca24db86bd6cd986fdcbfda3f06aEvan Hunt not setting the event result code appropriately.
2a0d4c4d6ba5addb33cd1bccecc55ca4a095f191Mark Andrews2196. [port] win32: yield processor while waiting for once to
d524a81532c87c7fa8d0ce0261645fb18276b1eeMark Andrews to complete. [RT #16958]
d524a81532c87c7fa8d0ce0261645fb18276b1eeMark Andrews2195. [func] dnssec-keygen now defaults to nametype "ZONE"
feeca57f18fe7ae1825bef81a210068d4ddaf4eeEvan Hunt when generating DNSKEYs. [RT #16954]
feeca57f18fe7ae1825bef81a210068d4ddaf4eeEvan Hunt2194. [bug] Close journal before calling 'done' in xfrin.c.
8b37c0dd6e1cf3f8849f4f28b77b43ab3fb20ea4Mark Andrews --- 9.5.0a5 released ---
c073c65719eb5a7a525176d9a62e1b58a11ecab7Evan Hunt2193. [port] win32: BINDInstall.exe is now linked statically.
c073c65719eb5a7a525176d9a62e1b58a11ecab7Evan Hunt2192. [port] win32: use vcredist_x86.exe to install Visual
5d9922e86f3d7f58f4c6b1234962ee4567108830Vernon Schryver Studio's redistributable dlls if building with
c4e3976707829c3225983b80afb09215e49ea10dMark Andrews Visual Stdio 2005 or later.
49f788cbd39eb9218c19e077c7b2519c617e044dMark Andrews2191. [func] named-checkzone now allows dumping to stdout (-).
88a7702a9dc82581c554cc0b04902879cdda41a6Mark Andrews named-checkconf now has -h for help.
66ecb6789b7effa68f75dc70f0843a26825b44f6Mark Andrews named-checkzone now has -h for help.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews rndc now has -h for help.
cfc22e53a89ccac4eb04b4f41a93f73e629e80edEvan Hunt Better handling of '-?' for usage summaries.
ce3b2c5189e874f1c45d699cfb4f30fc7a8cd604Evan Hunt2190. [func] Make fallback to plain DNS from EDNS due to timeouts
fc1fb1a469dc44fb12bbe51ead6caf568239d5abEvan Hunt more visible. New logging category "edns-disabled".
d0ca4e90e2dd584db70e403ef92ab08d78d9cd6dMark Andrews2189. [bug] Handle socket() returning EINTR. [RT #15949]
d312bc5d81cff8fc156b62c970334b52227ee854Evan Hunt2188. [contrib] queryperf: autoconf changes to make the search for
d312bc5d81cff8fc156b62c970334b52227ee854Evan Hunt libresolv or libbind more robust. [RT #16299]
d312bc5d81cff8fc156b62c970334b52227ee854Evan Hunt2187. [bug] query_addds(), query_addwildcardproof() and
9dd2ee95f11de29e358cc01059861e724dbb5807Mark Andrews query_addnxrrsetnsec() should take a version
db6cd7ee05471eddeaac642b2f45dde87e770da5Mark Andrews argument. [RT #16368]
dc9270706619976c47236892c655ba76671c37f1Mark Andrews2186. [port] cygwin: libbind: check for struct sockaddr_storage
dc9270706619976c47236892c655ba76671c37f1Mark Andrews independently of IPv6. [RT #16482]
503e5aa8d2400e47c9617db10b57f2d4f3495fd2Mark Andrews2185. [port] sunos: libbind: check for ssize_t, memmove() and
503e5aa8d2400e47c9617db10b57f2d4f3495fd2Mark Andrews memchr(). [RT #16463]
5985af3f5ca3bd3aecd177c7eab497e7414c3945Evan Hunt2184. [bug] bind9.xsl.h didn't build out of the source tree.
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt2183. [bug] dnssec-signzone didn't handle offline private keys
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt well. [RT #16832]
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt could return ISC_R_SUCCESS when they ran out of
cef109efa70b55ec1cd3ed706a9607ba1c3382d5Evan Hunt memory. [RT #16365]
289dbe005c271d344296cad043157fee6604bdb0Mark Andrews2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
c16d37d06e103b259073a61e610e688e2849289aMark Andrews2180. [cleanup] Remove bit test from 'compress_test' as they
c16d37d06e103b259073a61e610e688e2849289aMark Andrews are no longer needed. [RT #16497]
1cd538c05181b7236e4a2d159a99997dcfa1cb5cFrancis Dupont2179. [func] 'rndc command zone' will now find 'zone' if it is
1cd538c05181b7236e4a2d159a99997dcfa1cb5cFrancis Dupont unique to all the views. [RT #16821]
0088b45de515b891622e7e81dee9602291231c10Evan Hunt2178. [bug] 'rndc reload' of a slave or stub zone resulted in
0088b45de515b891622e7e81dee9602291231c10Evan Hunt a reference leak. [RT #16867]
b08325a7f3092cca1131e1a04a43a4ecef713e29Evan Hunt2177. [bug] Array bounds overrun on read (rcodetext) at
b08325a7f3092cca1131e1a04a43a4ecef713e29Evan Hunt debug level 10+. [RT #16798]
a39a5f4d816ca7d3f43106712ca668dd1ab31d69Mark Andrews2176. [contrib] dbus update to handle race condition during
a39a5f4d816ca7d3f43106712ca668dd1ab31d69Mark Andrews initialization (Bugzilla 235809). [RT #16842]
7ee4b13ded769df52e8c66b3dfa1de968df7bd28Evan Hunt2175. [bug] win32: windows broadcast condition variable support
7ee4b13ded769df52e8c66b3dfa1de968df7bd28Evan Hunt was broken. [RT #16592]
44a3999cf4f71bd81a7942ff5e60c6b1828e5f9dEvan Hunt2174. [bug] I/O errors should always be fatal when reading
44a3999cf4f71bd81a7942ff5e60c6b1828e5f9dEvan Hunt master files. [RT #16825]
7048af0a551f13d2916a06cce21357714939a89bEvan Hunt2173. [port] win32: When compiling with MSVS 2005 SP1 we also
00295e065080e0b9856d00b15976d1ed5d280cbfEvan Hunt --- 9.5.0a4 released ---
e856482b1fe1c554a8e47a519b59902b21792564Evan Hunt2172. [bug] query_addsoa() was being called with a non zone db.
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt2171. [bug] Handle breaks in DNSSEC trust chains where the parent
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt servers are not DS aware (DS queries to the parent
37a34ab54fbd17651961316fadcb48edef7039c9Evan Hunt return a referral to the child).
1d0ebb4cf21324b28215c5df84cce0f84dd6948bMark Andrews2170. [func] Add acache processing to test suite. [RT #16711]
1d0ebb4cf21324b28215c5df84cce0f84dd6948bMark Andrews2169. [bug] host, nslookup: when reporting NXDOMAIN report the
adb42115869b8258cd38bc7fd044766f662bdd78Mark Andrews given name and not the last name searched for.
e9dff04d3bd9b7b247cad0f914ed80914a49bcccEvan Hunt2168. [bug] nsupdate: in non-interactive mode treat syntax errors
0c3948e6066e8910edb3f6a7820bd42ffaefedf6Evan Hunt as fatal errors. [RT #16785]
0c3948e6066e8910edb3f6a7820bd42ffaefedf6Evan Hunt2167. [bug] When re-using a automatic zone named failed to
2c016c64f533171e1342c1914754b017026c8ad5Tatuya JINMEI 神明達哉 attach it to the new view. [RT #16786]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt --- 9.5.0a3 released ---
38397492000c996d50f9bf96a4da318a742bd07cEvan Hunt2166. [bug] When running in batch mode, dig could misinterpret
38397492000c996d50f9bf96a4da318a742bd07cEvan Hunt a server address as a name to be looked up, causing
9d5e42bb875bc287387241dd7563f5698afd31f6Mark Andrews unexpected output. [RT #16743]
f82d52e82defd947805f0882f1559e88d830922aEvan Hunt2165. [func] Allow the destination address of a query to determine
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt if we will answer the query or recurse.
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt allow-query-on, allow-recursion-on and
5857247dbbfe384a1bcf376d0451f1b2bc3c2c7aEvan Hunt allow-query-cache-on. [RT #16291]
7fe4b0447fb3ef0c8ff9851624a7bca072732973Evan Hunt2164. [bug] The code to determine how named-checkzone /
7fe4b0447fb3ef0c8ff9851624a7bca072732973Evan Hunt named-compilezone was called failed under windows.
e2facd7af296d90d0d1fef7994b6b8e795490a92Evan Hunt2163. [bug] If only one of query-source and query-source-v6
3594635af7c6fedb2893ad1a9df4935bd0234a47Evan Hunt specified a port the query pools code broke (change
3594635af7c6fedb2893ad1a9df4935bd0234a47Evan Hunt 2129). [RT #16768]
cc3ed192b030ccf9a903a4a7c8667cda8ad23eebEvan Hunt2162. [func] Allow "rrset-order fixed" to be disabled at compile
cc3ed192b030ccf9a903a4a7c8667cda8ad23eebEvan Hunt time. [RT #16665]
b99efc39de7711d483f62f42bf6c365843637238Mark Andrews2161. [bug] Fix which log messages are emitted for 'rndc flush'.
302ed789bd97f34500ee4ba3a8329590d6453fc6Mark Andrews2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
6f6f08b7a4ea50806099b23ca97010195c1365cdEvan Hunt from getifaddrs(). [RT #16708]
9a050780dce1bf3cbe81bd18404df3e79c146583Evan Hunt --- 9.5.0a2 released ---
9a050780dce1bf3cbe81bd18404df3e79c146583Evan Hunt2159. [bug] Array bounds overrun in acache processing. [RT #16710]
e94fe42a2007a4ffdd27ba99d3756622f8da1008Mark Andrews2158. [bug] ns_client_isself() failed to initialize key
e94fe42a2007a4ffdd27ba99d3756622f8da1008Mark Andrews leading to a REQUIRE failure. [RT #16688]
0a30185f80f3962aba0e1f30ad7743fb8c8aa65dMark Andrews2157. [func] dns_db_transfernode() created. [RT #16685]
0181a0a92f0d3a9ec7f04754253bb6bd47307e6fMark Andrews2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
0181a0a92f0d3a9ec7f04754253bb6bd47307e6fMark Andrews resolver.c:validated() and resolver.c:cache_name().
0181a0a92f0d3a9ec7f04754253bb6bd47307e6fMark Andrews Fix a memory leak in rbtdb.c:free_noqname().
a3285e811de7204f1d4d296c7f16082fc58e1b7aMark Andrews Make lookup.c:lookup_find() robust against
a3285e811de7204f1d4d296c7f16082fc58e1b7aMark Andrews event leaks. [RT #16685]
4ffd660d41080dc4c5641c9ce4f80b04af611849Tatuya JINMEI 神明達哉2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
9d856845d63784690e347c8e8dc013f1c830c86dMark Andrews2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
9d856845d63784690e347c8e8dc013f1c830c86dMark Andrews matched in acls by omitting the scope. [RT #16599]
554d22d2deb8889bb16434176b5716ab79d15c50Mark Andrews2153. [bug] nsupdate could leak memory. [RT #16691]
da1f044e5d5e15846a9464647ebdd0e9cee3f63aEvan Hunt2152. [cleanup] Use sizeof(buf) instead of fixed number in
da1f044e5d5e15846a9464647ebdd0e9cee3f63aEvan Hunt dighost.c:get_trusted_key(). [RT #16678]
be69d484434e10d920c4d8a8bb735356eb0c2cc8Evan Hunt2151. [bug] Missing newline in usage message for journalprint.
9d5e42bb875bc287387241dd7563f5698afd31f6Mark Andrews2150. [bug] 'rrset-order cyclic' uniformly distribute the
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews starting point for the first response for a given
c6d2578fd67bc1a427d13fd0699b25a187feec8aMark Andrews RRset. [RT #16655]
5cb44a38d9b6fbd1144cf396a199db54e9e56f5bEvan Hunt2149. [bug] isc_mem_checkdestroyed() failed to abort on
e9d45c0a0456d6267d9ea220751b6e495c55a8cfMark Andrews if there were still active memory contexts.
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt2148. [func] Add positive logging for rndc commands. [RT #14623]
e09cdbac087b88524ac40e943d040e2a032c48f2Mark Andrews2147. [bug] libbind: remove potential buffer overflow from
9e9e7112f9d712fe9e1740162f88a82ef1aa4711Mark Andrews2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
9e9e7112f9d712fe9e1740162f88a82ef1aa4711Mark Andrews SO_BSDCOMPAT" message. [RT #16641]
63d5a6f680864b58b8eddc58dfa9957e19abf084Mark Andrews2145. [bug] Check DS/DLV digest lengths for known digests.
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt2143. [bug] We failed to restart the IPv6 client when the
e8831e51c162f5961fcf1d89f68acd9336cf8a83Evan Hunt kernel failed to return the destination the
af30180834ac4b3b206338be5c42e89bab07ca27Mark Andrews packet was sent to. [RT #16613]
6f9c93a8858a28b131dbd36b75b81e9250c6d11aEvan Hunt2142. [bug] Handle master files with a modification time that
6f9c93a8858a28b131dbd36b75b81e9250c6d11aEvan Hunt matches the epoch. [RT# 16612]
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt equivalent of LDH checks). [RT #16609]
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt2140. [bug] libbind: missing unlock on pthread_key_create()
c8aa7ce70d75d5d8f28f941e3a522c71e948b166Evan Hunt failures. [RT #16654]
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt2139. [bug] dns_view_find() was being called with wrong type
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt in adb.c. [RT #16670]
c02149960459e4406d9e50fb1867433e7f0e8f0dEvan Hunt2138. [bug] Lock order reversal in resolver.c. [RT #16653]
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont2137. [port] Mips little endian and/or mips 64 bit are now
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont supported for atomic operations. [RT#16648]
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont2136. [bug] nslookup/host looped if there was no search list
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont and the host didn't exist. [RT #16657]
775a8d86d93269a621a7ad15c49b31b533da0671Francis Dupont2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
c07236a635d2bbe10ffd03804a2478835c7f7018Mark Andrews2134. [func] Additional statistics support. [RT #16666]
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt2133. [port] powerpc: Support both IBM and MacOS Power PC
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt assembler syntaxes. [RT #16647]
8f0502e922120f27207fbf6b6dda18f1112e486cEvan Hunt2132. [bug] Missing unlock on out of memory in
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt dns_dispatchmgr_setudp().
f10a8fa0343038946384c44f6bb8dc2615f0cc20Evan Hunt2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
cc6cddfd94e8f0c58c290317b0853dac30b1b895Evan Hunt2130. [func] Log if CD or DO were set. [RT #16640]
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt2129. [func] Provide a pool of UDP sockets for queries to be
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt made over. See use-queryport-pool, queryport-pool-ports
8d307467b70800564491f37097f4b877c155ab3eEvan Hunt and queryport-pool-updateinterval. [RT #16415]
d2a8d00228973e59eb3efcc377126d856bf7df18Mark Andrews2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
8ec993c774d7c996cb266d0ff5f1282fa3940f09Evan Hunt2126. [security] Serialize validation of type ANY responses. [RT #16555]
7704a47aec081144bdb7a0218d5e2dd5296b6b08Mark Andrews2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
7704a47aec081144bdb7a0218d5e2dd5296b6b08Mark Andrews was defined. [RT #16574]
7704a47aec081144bdb7a0218d5e2dd5296b6b08Mark Andrews2124. [security] It was possible to dereference a freed fetch
a01095a487a2c858c4f86e0f32c93b482d179a78Mark Andrews context. [RT #16584]
a01095a487a2c858c4f86e0f32c93b482d179a78Mark Andrews --- 9.5.0a1 released ---
bfbd69c43f2b63ac122e4a47a510d46ffffb613cEvan Hunt2123. [func] Use Doxygen to generate internal documentation.
06e7340198bbd89b6765998a04abde217e7b0e7bMark Andrews2122. [func] Experimental http server and statistics support
06e7340198bbd89b6765998a04abde217e7b0e7bMark Andrews for named via xml.
3c5e54941fe8ed891d1588e84e210d8829b9903aMark Andrews2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
3c5e54941fe8ed891d1588e84e210d8829b9903aMark Andrews second timeout. [RT #16553]
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews2120. [doc] Fix markup on nsupdate man page. [RT #16556]
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews2119. [compat] libbind: allow res_init() to succeed enough to
29dd4bdd14d359dbf45bf9c8a9151b73a1a389b8Mark Andrews return the default domain even if it was unable
4b30598fb908755c4fd04f51cf3ce1f550434bf3Mark Andrews to allocate memory.
abe20c2cca12abe0523fc314af31183626c87325Evan Hunt2118. [bug] Handle response with long chains of domain name
abe20c2cca12abe0523fc314af31183626c87325Evan Hunt compression pointers which point to other compression
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews pointers. [RT #16427]
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
45eea1bda65a66106bb7d85eae5997deb013bf0cMark Andrews which could lead to validation failures. named didn't
616560e3db487f548b383c7eecc6e855e8afe7d6Mark Andrews handle negative DS responses that were in the process
616560e3db487f548b383c7eecc6e855e8afe7d6Mark Andrews of being validated. Check CNAME bit before accepting
cbee6197d1fb31453ff51f9f1c705feed67c9c73Mark Andrews NODATA proof. To be able to ignore a child NSEC there
cbee6197d1fb31453ff51f9f1c705feed67c9c73Mark Andrews must be SOA (and NS) set in the bitmap. [RT #16399]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt2116. [bug] 'rndc reload' could cause the cache to continually
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt be cleaned. [RT #16401]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt2115. [bug] 'rndc reconfig' could trigger a INSIST if the
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt number of masters for a zone was reduced. [RT #16444]
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt2114. [bug] dig/host/nslookup: searches for names with multiple
77b8f88f144928eddcca144c348d6ef53e7d5c43Evan Hunt labels were failing. [RT #16447]
6a90baa0d5ac5ad6bf5a5e29b6e8b26a931e844eEvan Hunt2113. [bug] nsupdate: if a zone is specified it should be used
6a90baa0d5ac5ad6bf5a5e29b6e8b26a931e844eEvan Hunt for server discover. [RT# 16455]
3727725bb7d63605b68a644060857013d563b67fEvan Hunt2112. [security] Warn if weak RSA exponent is used. [RT #16460]
3727725bb7d63605b68a644060857013d563b67fEvan Hunt2111. [bug] Fix a number of errors reported by Coverity.
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt priming queries. [RT #16491]
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
315a1514a58dbb1ca563445313d67c1cf664d248Evan Hunt2108. [func] DHCID support. [RT #16456]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2106. [func] 'rndc status' now reports named's version. [RT #16426]
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2105. [func] GSS-TSIG support (RFC 3645).
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2104. [port] Fix Solaris SMF error message.
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2103. [port] Add /usr/sfw to list of locations for OpenSSL
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews under Solaris.
28479307225582ad0b2e11441d85fcf5169551d0Mark Andrews2102. [port] Silence Solaris 10 warnings.
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt2101. [bug] OpenSSL version checks were not quite right.
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt2100. [port] win32: copy libeay32.dll to Build\Debug.
d1f39121a69b6afa6c0c9e44eceb60910d1d7f81Evan Hunt Copy Debug\named-checkzone to Debug\named-compilezone.
246c504f90f42e5633dfd5e85bd57b01064961feEvan Hunt2099. [port] win32: more manifest issues.
246c504f90f42e5633dfd5e85bd57b01064961feEvan Hunt2098. [bug] Race in rbtdb.c:no_references(), which occasionally
ff71474ede45c496b303af7be7cd0e2f3403bda6Evan Hunt triggered an INSIST failure about the node lock
ff71474ede45c496b303af7be7cd0e2f3403bda6Evan Hunt reference. [RT #16411]
3ff75c89eb7b8c4f8c7dd375beec2981d147c791Evan Hunt2097. [bug] named could reference a destroyed memory context
3ff75c89eb7b8c4f8c7dd375beec2981d147c791Evan Hunt after being reloaded / reconfigured. [RT #16428]
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont2096. [bug] libbind: handle applications that fail to detect
8b78c993cb475cc94e88560941b28c37684789d9Francis Dupont res_init() failures better.
b56f3f5c6663a40852866cbca469f680f7118e79Francis Dupont2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
b56f3f5c6663a40852866cbca469f680f7118e79Francis Dupont net_cidr_ntop_ipv6(). [RT #16388]
48b6d2f585d753ac89a11cb5bafb14f239e08430Evan Hunt2094. [contrib] Update named-bootconf. [RT# 16404]
1a0eecfe694275dfadccc6074aaa4340845cc85dEvan Hunt2093. [bug] named-checkzone -s was broken.
1a0eecfe694275dfadccc6074aaa4340845cc85dEvan Hunt2092. [bug] win32: dig, host, nslookup. Use registry config
c36ba263d6318740da965f5351fe09e74f1d8aa2Evan Hunt if resolv.conf does not exist or no nameservers
c36ba263d6318740da965f5351fe09e74f1d8aa2Evan Hunt listed. [RT #15877]
4256ffffb9da267edf7925597714afaacabebf5aEvan Hunt2091. [port] dighost.c: race condition on cleanup. [RT #16417]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2090. [port] win32: Visual C++ 2005 command line manifest support.
eb95d2e917b3f71c33a8be53eac75eb191ee5a9dMark Andrews2089. [security] Raise the minimum safe OpenSSL versions to
eb95d2e917b3f71c33a8be53eac75eb191ee5a9dMark Andrews OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
eb95d2e917b3f71c33a8be53eac75eb191ee5a9dMark Andrews prior to these have known security flaws which
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier are (potentially) exploitable in named. [RT #16391]
03ccae042b4acd22805d667f823066d3690965cfMark Andrews2088. [security] Change the default RSA exponent from 3 to 65537.
bafa76b324e2336d707a158cccdb309df30bca65Shawn Routhier2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
a93a66f61872a92ef4a272ca998aaff954ab4fedEvan Hunt2086. [port] libbind: FreeBSD now has get*by*_r() functions.
debd489a44363870f96f75818e89ec27d3cab736Francis Dupont2085. [doc] win32: added index.html and README to zip. [RT #16201]
1e733ffc1103667dd6cf0eae01f5dfd0c84c5108Mark Andrews2084. [contrib] dbus update for 9.3.3rc2.
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt2083. [port] win32: Visual C++ 2005 support.
fb596cc9af28ab5bf71c6796ebd1809654307a08Evan Hunt2082. [doc] Document 'cache-file' as a test only option.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
0f869e8d52fec87684c7551dcc0f315a7ed19da1Mark Andrews2080. [port] libbind: res_init.c did not compile on older versions
0f869e8d52fec87684c7551dcc0f315a7ed19da1Mark Andrews of Solaris. [RT #16363]
69338455d91b46bef10a2d73beafa05df49ed2d9Mark Andrews2079. [bug] The lame cache was not handling multiple types
69338455d91b46bef10a2d73beafa05df49ed2d9Mark Andrews correctly. [RT #16361]
53c22b8e0da67ca756ca309d5f84db9c189cd0a2Evan Hunt2078. [bug] dnssec-checkzone output style "default" was badly
53c22b8e0da67ca756ca309d5f84db9c189cd0a2Evan Hunt named. It is now called "relative". [RT #16326]
b3c8f1e9e864c30d1bb68fdf1ba7eb242c24be6eMark Andrews2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
91c6a86724e34827bdedfa3245986b31e0653ef2Mark Andrews complete signed zone. [RT #16326]
484076c3255e0cc5b179ad736cd930900e4bb06bFrancis Dupont2076. [bug] Several files were missing #include <config.h>
484076c3255e0cc5b179ad736cd930900e4bb06bFrancis Dupont causing build failures on OSF. [RT #16341]
8436cc14ba43418d60da21eee1ed045570edbd58Evan Hunt2075. [bug] The spillat timer event hander could leak memory.
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews dns_request_createraw2() and dns_request_createraw3()
011d0b7dc81e51ac5ea150935c1d9613212b58cfMark Andrews failed to send multiple UDP requests. [RT #16349]
2f4d747a267026e6298ba9ece22c9dfa0ac254daFrancis Dupont2073. [bug] Incorrect semantics check for update policy "wildcard".
c9424f08b013c676ac07173d5b058721ea632875Tatuya JINMEI 神明達哉2072. [bug] We were not generating valid HMAC SHA digests.
6b87f604311735826a0b2e1bde672a2a4f352892Francis Dupont2071. [port] Test whether gcc accepts -fno-strict-aliasing.
d514c0dc9b7f369a94d79c709b77a8f3a08afd84Evan Hunt2070. [bug] The remote address was not always displayed when
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews reporting dispatch failures. [RT #16315]
a12c8549d62d16cfcdf51c9ba9cdf7065191b4f6Mark Andrews2069. [bug] Cross compiling was not working. [RT #16330]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt2068. [cleanup] Lower incremental tuning message to debug 1.
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt2067. [bug] 'rndc' could close the socket too early triggering
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt a INSIST under Windows. [RT #16317]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt2066. [security] Handle SIG queries gracefully. [RT #16300]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt2065. [bug] libbind: probe for HPUX prototypes for
03ccae042b4acd22805d667f823066d3690965cfMark Andrews endprotoent_r() and endservent_r(). [RT 16313]
b843f577bbcd6660fbaa506d9e55b156c689a5a8Evan Hunt2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
2fa5af7b736eac0092845c5ccbddf6cc00d0321eTatuya JINMEI 神明達哉2063. [bug] Change #1955 introduced a bug which caused the first
2fa5af7b736eac0092845c5ccbddf6cc00d0321eTatuya JINMEI 神明達哉 'rndc flush' call to not free memory. [RT #16244]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2062. [bug] 'dig +nssearch' was reusing a buffer before it had
f267b27f0e1cdc55c7f1ca2a56632ce36907ff63Evan Hunt been returned by the socket code. [RT #16307]
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt2061. [bug] Accept expired wildcard message reversed. [RT #16296]
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt2060. [bug] Enabling DLZ support could leave views partially
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt configured. [RT #16295]
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt2059. [bug] Search into cache rbtdb could trigger an INSIST
be63f34b6af410ff34a169657625c12394b4f8e7Evan Hunt failure while cleaning up a stale rdataset.
14cd8ac04c999fd1d2e620856330e808cae57950Mark Andrews2058. [bug] Adjust how we calculate rtt estimates in the presence
14cd8ac04c999fd1d2e620856330e808cae57950Mark Andrews of authoritative servers that drop EDNS and/or CD
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont requests. Also fallback to EDNS/512 and plain DNS
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont faster for zones with less than 3 servers. [RT #16187]
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont2057. [bug] Make setting "ra" dependent on both allow-query-cache
1f821c10583d9cddbaf3626a96ff8cf10cdb645bFrancis Dupont and allow-recursion. [RT #16290]
0b8385f5c51def183dbccd1bc569ea8fe092dfb2Mark Andrews2056. [bug] dig: ixfr= was not being treated case insensitively
0b8385f5c51def183dbccd1bc569ea8fe092dfb2Mark Andrews at all times. [RT #15955]
bbc204a23719180dce68142ea2440c484e3ccb75Mark Andrews2055. [bug] Missing goto after dropping multicast query.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt2054. [port] freebsd: do not explicitly link against -lpthread.
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt2052. [bug] 'rndc' improve connect failed message to report
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt the failing address. [RT #15978]
eab9975bcf5830a73f18ed8f320ae18ea32775eeEvan Hunt2051. [port] More strtol() fixes. [RT #16249]
a27fe4c990f96bd792f2a07ca4d38c78d5b9df2cTatuya JINMEI 神明達哉2050. [bug] Parsing of NSAP records was not case insensitive.
44de0b1f7d9997aaf6092589c4c7da4a1df908dbTatuya JINMEI 神明達哉2049. [bug] Restore SOA before AXFR when falling back from
44de0b1f7d9997aaf6092589c4c7da4a1df908dbTatuya JINMEI 神明達哉 a attempted IXFR when transferring in a zone.
44de0b1f7d9997aaf6092589c4c7da4a1df908dbTatuya JINMEI 神明達哉 Allow a initial SOA query before attempting
85be60e3c8e47b9fdfeaa0770f445b206c39bca8Evan Hunt a AXFR to be requested. [RT #16156]
85be60e3c8e47b9fdfeaa0770f445b206c39bca8Evan Hunt2048. [bug] It was possible to loop forever when using
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews avoid-v4-udp-ports / avoid-v6-udp-ports when
b1f3364f52261c3198b3717530aabc612c5a431aEvan Hunt the OS always returned the same local port.
479b80d4d706be399fd8974e941d9a0edb4259efMark Andrews2047. [bug] Failed to initialize the interface flags to zero.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt cleanup [RT #16247].
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt2045. [func] Use lock buckets for acache entries to limit memory
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt consumption. [RT #16183]
ef22fffeebffacbcbce1f8d68d0c3f29a7d4a59eEvan Hunt2044. [port] Add support for atomic operations for Itanium.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2043. [port] nsupdate/nslookup: Force the flushing of the prompt
41eeb37b516d1bac073781b6ec50a39a669987dfEvan Hunt for interactive sessions. [RT#16148]
41eeb37b516d1bac073781b6ec50a39a669987dfEvan Hunt2042. [bug] named-checkconf was incorrectly rejecting the
747abb4993e03b8812514e4476bff67f5248c717Evan Hunt logging category "config". [RT #16117]
747abb4993e03b8812514e4476bff67f5248c717Evan Hunt2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
11b4f17027f4cf67d494eb89a8d2ea919dd16615Mark Andrews set of libraries to be linked. [RT #16129]
11b4f17027f4cf67d494eb89a8d2ea919dd16615Mark Andrews2040. [bug] rbtdb no_references() could trigger an INSIST
7179c3476f676bc8c520583b3ed7a738aa8eeee2Mark Andrews failure with --enable-atomic. [RT #16022]
d699672160ba01589227ac046a28e20d55336facEvan Hunt2039. [func] Check that all buffers passed to the socket code
7179c3476f676bc8c520583b3ed7a738aa8eeee2Mark Andrews have been retrieved when the socket event is freed.
a0ba5a502e0ca8049bff7ef4305948566703ea26Mark Andrews2038. [bug] dig/nslookup/host was unlinking from wrong list
18114698b4fad77aa0f32741cf815cff0def7696Mark Andrews when handling errors. [RT #16122]
18114698b4fad77aa0f32741cf815cff0def7696Mark Andrews2037. [func] When unlinking the first or last element in a list
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews check that the list head points to the element to
97a2451eea9dfb4ccb8d5c5392142c80b34a7e48Mark Andrews be unlinked. [RT #15959]
88471538d69a7c21b8b9fd13b489399ad6c26597Mark Andrews2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt2035. [func] Make falling back to TCP on UDP refresh failure
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt optional. Default "try-tcp-refresh yes;" for BIND 8
ddc225b15d04e5b7d637d305f4ea3c04df1896bfEvan Hunt compatibility. [RT #16123]
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
bcd0cbfdae6729c48894501b6bcddc972feda67fMark Andrews2033. [bug] We weren't creating multiple client memory contexts
bcd0cbfdae6729c48894501b6bcddc972feda67fMark Andrews on demand as expected. [RT #16095]
1d9958c6cc291916010779792f0fbdf6cd5ba368Mark Andrews2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
8cff1a894f09360814f88437c0c6bce90db11944Mark Andrews2031. [bug] Emit a error message when "rndc refresh" is called on
8cff1a894f09360814f88437c0c6bce90db11944Mark Andrews a non slave/stub zone. [RT # 16073]
048690a34d0fa89bd128ac21d1a4c84b4703a3deMark Andrews2030. [bug] We were being overly conservative when disabling
90c1e763d577da656b5eeb02462b5236dca5f266Mark Andrews openssl engine support. [RT #16030]
90c1e763d577da656b5eeb02462b5236dca5f266Mark Andrews2029. [bug] host printed out the server multiple times when
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt specified on the command line. [RT #15992]
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt2028. [port] linux: socket.c compatibility for old systems.
3a875400473e5c06199272a1292ed84646990e2fEvan Hunt2027. [port] libbind: Solaris x86 support. [RT #16020]
6beee732e49fb77e92afd613f8634f828b885560Mark Andrews2026. [bug] Rate limit the two recursive client exceeded messages.
a3288b425ae88f415d2d8209769d140b5d952fb3Evan Hunt2025. [func] Update "zone serial unchanged" message. [RT #16026]
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt2024. [bug] named emitted spurious "zone serial unchanged"
9069215eac23e32f4ef1c8e44ad7ff2865cfcdacEvan Hunt messages on reload. [RT #16027]
bd190a40a85e5ed780c9c428c6261bc397059b4bMark Andrews2023. [bug] "make install" should create ${localstatedir}/run and
bd190a40a85e5ed780c9c428c6261bc397059b4bMark Andrews ${sysconfdir} if they do not exist. [RT #16033]
d173d06cae4995f61970445d8e4216c48fb925cdMark Andrews2022. [bug] If dnssec validation is disabled only assert CD if
d173d06cae4995f61970445d8e4216c48fb925cdMark Andrews CD was requested. [RT #16037]
97725b410a7a65cd300028996b01960393532822Mark Andrews2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
520cea04a257e6009d855ddeb20f8d3a46cee22cMark Andrews2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt2019. [tuning] Reduce the amount of work performed per quantum
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt when cleaning the cache. [RT #15986]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt2018. [bug] Checking if the HMAC MD5 private file was broken.
15fcbe39173856ae3bd0198099a693e594536869Tatuya JINMEI 神明達哉2017. [bug] allow-query default was not correct. [RT #15946]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt2016. [bug] Return a partial answer if recursion is not
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt allowed but requested and we had the answer
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt to the original qname. [RT #15945]
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt2015. [cleanup] use-additional-cache is now acache-enable for
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt consistency. Default acache-enable off in BIND 9.4
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt as it requires memory usage to be configured.
553ead32ff5b00284e574dcabc39115d4d74ec66Evan Hunt It may be enabled by default in BIND 9.5 once we
3967528c773745ac32a83c2c77a910fd15db743dEvan Hunt have more experience with it.
3967528c773745ac32a83c2c77a910fd15db743dEvan Hunt2014. [func] Statistics about acache now recorded and sent
aeff7de836558fa8002ab5db35292d2bb6450da8Evan Hunt to log. [RT #15976]
aeff7de836558fa8002ab5db35292d2bb6450da8Evan Hunt2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2792e226c786e739b2924efdf8246af389384a2fMark Andrews responses more gracefully. [RT #15941]
ab280fdfc5e4251758aa9929457fba6dce3f1847Mark Andrews2012. [func] Don't insert new acache entries if acache is full.
fb8db7fc3f3ea597a959e4c8ac42247fd78ca887Mark Andrews2011. [func] dnssec-signzone can now update the SOA record of
fb8db7fc3f3ea597a959e4c8ac42247fd78ca887Mark Andrews the signed zone, either as an increment or as the
fb8db7fc3f3ea597a959e4c8ac42247fd78ca887Mark Andrews system time(). [RT #15633]
08f860f800d32007a0c9bf456f6c35fbb2ecbc81Evan Hunt2010. [placeholder] rt15958
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews2009. [bug] libbind: Coverity fixes. [RT #15808]
38cd4d14cc341c2663e574035074788bb6f0fce2Evan Hunt2008. [func] It is now possible to enable/disable DNSSEC
38cd4d14cc341c2663e574035074788bb6f0fce2Evan Hunt validation from rndc. This is useful for the
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews mobile hosts where the current connection point
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews breaks DNSSEC (firewall/proxy). [RT #15592]
a4463732ad7935992a101b3d19f0a41120b85458Mark Andrews rndc validation newstate [view]
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt2007. [func] It is now possible to explicitly enable DNSSEC
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt validation. default dnssec-validation no; to
943cbe8ae58834fb3f9a57ae799d006741a52344Evan Hunt be changed to yes in 9.5.0. [RT #15674]
ef370118d5d850912a4612122f5678e3db99ee87Evan Hunt2006. [security] Allow-query-cache and allow-recursion now default
ef370118d5d850912a4612122f5678e3db99ee87Evan Hunt to the built in acls "localnets" and "localhost".
5b7525f51fbcb074bf031d92f5cd95267c628137Mark Andrews This is being done to make caching servers less
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews attractive as reflective amplifying targets for
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews spoofed traffic. This still leave authoritative
3bc4221346e5045c5679dd0d84f4f7d888a9da79Mark Andrews servers exposed.
6d5852f318a7d09cff05a347456d1cd12407ceb1Mark Andrews The best fix is for full BCP 38 deployment to
98e8948bd715fbefa8870e6f344183bc67e22340Mark Andrews remove spoofed traffic.
020120e3c72d67a86ce3fd2542b43b269a1e9233Mark Andrews2005. [bug] libbind: Retransmission timeouts should be
d7d05319a67229b250de910b8876bea0f6e9a0b1Tatuya JINMEI 神明達哉 based on which attempt it is to the nameserver
8d80232e77cb7f2ec38bdbec424e9399d04165f3Mark Andrews and not the nameserver itself. [RT #13548]
109580e7e5c92b98c641836ccb5949b4802ffcedMark Andrews2004. [bug] dns_tsig_sign() could pass a NULL pointer to
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt dst_context_destroy() when cleaning up after a
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt error. [RT #15835]
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt2003. [bug] libbind: The DNS name/address lookup functions could
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt occasionally follow a random pointer due to
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt structures not being completely zeroed. [RT #15806]
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews2002. [bug] libbind: tighten the constraints on when
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews struct addrinfo._ai_pad exists. [RT #15783]
870332fb6d15e9fde8753399b00cb9e721c4d64fMark Andrews2001. [func] Check the KSK flag when updating a secure dynamic zone.
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews New zone option "update-check-ksk yes;". [RT #15817]
371642de8b1863b2fc6ec9a89416de4dca71bc47Mark Andrews2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews1999. [func] Implement "rrset-order fixed". [RT #13662]
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews1998. [bug] Restrict handling of fifos as sockets to just SunOS.
877769641186144911152622b4345b27ca393df8Mark Andrews This allows named to connect to entropy gathering
f7b683b054c4deb05f09d2f39da6ceb4ac838873Mark Andrews daemons that use fifos instead of sockets. [RT #15840]
95f999508b908a95d7ef7b0f891ac8b1a4f21abfTatuya JINMEI 神明達哉1997. [bug] Named was failing to replace negative cache entries
95f999508b908a95d7ef7b0f891ac8b1a4f21abfTatuya JINMEI 神明達哉 when a positive one for the type was learnt.
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt1996. [bug] nsupdate: if a zone has been specified it should
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt appear in the output of 'show'. [RT #15797]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt1995. [bug] 'host' was reporting multiple "is an alias" messages.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1994. [port] OpenSSL 0.9.8 support. [RT #15694]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt1993. [bug] Log messages, via syslog, were missing the space
f4ea363e3acc321b24ffe95a64a583e8041d6fd5Mark Andrews after the timestamp if "print-time yes" was specified.
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt1992. [bug] Not all incoming zone transfer messages included the
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt view. [RT #15825]
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt1991. [cleanup] The configuration data, once read, should be treated
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt as read only. Expand the use of const to enforce this
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt at compile time. [RT #15813]
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt1990. [bug] libbind: isc's override of broken gettimeofday()
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt implementations was not always effective.
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews1989. [bug] win32: don't check the service password when
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews re-installing. [RT #15882]
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews1988. [bug] Remove a bus error from the SHA256/SHA512 support.
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews1986. [func] Report when a zone is removed. [RT #15849]
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews1985. [protocol] DLV has now been assigned a official type code of
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews 32769. [RT #15807]
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews Note: care should be taken to ensure you upgrade
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews both named and dnssec-signzone at the same time for
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews zones with DLV records where named is the master
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews server for the zone. Also any zones that contain
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews DLV records should be removed when upgrading a slave
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews zone. You do not however have to upgrade all
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 servers for a zone with DLV records simultaneously.
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉1984. [func] dig, nslookup and host now advertise a 4096 byte
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 EDNS UDP buffer size by default. [RT #15855]
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews1983. [func] Two new update policies. "selfsub" and "selfwild".
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews1982. [bug] DNSKEY was being accepted on the parent side of
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews a delegation. KEY is still accepted there for
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews RFC 3007 validated updates. [RT #15620]
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed1981. [bug] win32: condition.c:wait() could fail to reattain
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed the mutex lock.
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed1980. [func] dnssec-signzone: output the SOA record as the
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed first record in the signed zone. [RT #15758]
4c2ed3d14168cfe34d1c036eb4885019a8153e7cMark Andrews1979. [port] linux: allow named to drop core after changing
4c2ed3d14168cfe34d1c036eb4885019a8153e7cMark Andrews user ids. [RT #15753]
ddac1a2b9822b00aa936ef24c6d971f4a1407532Francis Dupont1978. [port] Handle systems which have a broken recvmsg().
e7eede965dbc67842cb32591a8c2ace2620e5359Mark Andrews1977. [bug] Silence noisy log message. [RT #15704]
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉1975. [bug] libbind: isc_gethexstring() could misparse multi-line
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉 hex strings with comments. [RT #15814]
d302a620e0d49811874b9555ac2e4c6e05861a6bFrancis Dupont1974. [doc] List each of the zone types and associated zone
708ebf710e1c2c8f5bee6d5ba5376ec44d97aa71Jeremy Reed options separately in the ARM.
4144efb39046963989ad002cf88a0c195401100aJeremy Reed1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
cc620f9fdb69c13f1ea12bb1c90bc442f6dc0117Francis Dupont HMACSHA512 support. [RT #13606]
3836f447eeb437ae058dfecb8c321b48c50b7076Mark Andrews1972. [contrib] DBUS dynamic forwarders integration from
3836f447eeb437ae058dfecb8c321b48c50b7076Mark Andrews Jason Vas Dias <jvdias@redhat.com>.
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews1971. [port] linux: make detection of missing IF_NAMESIZE more
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews robust. [RT #15443]
b770eae51e5d53730d3836b1548829f69ab15e66Mark Andrews1970. [bug] nsupdate: adjust UDP timeout when falling back to
d2c115f9134acfefaaeb6b84036672bef93e7df8Mark Andrews unsigned SOA query. [RT #15775]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1969. [bug] win32: the socket code was freeing the socket
f030c715007053e4ceb557c78ad5c8cfdedb4240Mark Andrews structure too early. [RT #15776]
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed1966. [bug] Don't set CD when we have fallen back to plain DNS.
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed1965. [func] Suppress spurious "recursion requested but not
b1b0dca1464a11b8a63623e8567e744dccfbcb41Tatuya JINMEI 神明達哉 available" warning with 'dig +qr'. [RT #15780].
b1b0dca1464a11b8a63623e8567e744dccfbcb41Tatuya JINMEI 神明達哉1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉1963. [port] Tru64 4.0E doesn't support send() and recv().
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉1962. [bug] Named failed to clear old update-policy when it
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉 was removed. [RT #15491]
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews1961. [bug] Check the port and address of responses forwarded
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews to dispatch. [RT #15474]
64e161a7f7f7f1692ccdf2400a81b471cf6ac508Mark Andrews1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
9384dc16a1f2c3022f50f2e1ce18a28204baaef7Mark Andrews1959. [func] Control the zeroing of the negative response TTL to
9384dc16a1f2c3022f50f2e1ce18a28204baaef7Mark Andrews a soa query. Defaults "zero-no-soa-ttl yes;" and
9384dc16a1f2c3022f50f2e1ce18a28204baaef7Mark Andrews "zero-no-soa-ttl-cache no;". [RT #15460]
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉1958. [bug] Named failed to update the zone's secure state
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉 until the zone was reloaded. [RT #15412]
72dbc7216aae3626a66e6154443be219f5edcaf0Mark Andrews1957. [bug] Dig mishandled responses to class ANY queries.
ca23cf7e28b9799436c9950ea269953e29dfde16Evan Hunt1956. [bug] Improve cross compile support, 'gen' is now built
ca23cf7e28b9799436c9950ea269953e29dfde16Evan Hunt by native compiler. See README for additional
a142972ea9697b4ecaa5587fb6d9057e821d5339Tatuya JINMEI 神明達哉 cross compile support information. [RT #15148]
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
d0e7c8712f25fff65f10d70dba519e9cacc4cc8fMark Andrews1954. [func] Named now falls back to advertising EDNS with a
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews 512 byte receive buffer if the initial EDNS queries
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt fail. [RT #14852]
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt1953. [func] The maximum EDNS UDP response named will send can
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt now be set in named.conf (max-udp-size). This is
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt independent of the advertised receive buffer
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews (edns-udp-size). [RT #14852]
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews1952. [port] hpux: tell the linker to build a runtime link
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews path "-Wl,+b:". [RT #14816].
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt1951. [security] Drop queries from particular well known ports.
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt Don't return FORMERR to queries from particular
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt well known ports. [RT #15636]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt a TCP socket. This prevents the source address being
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt set for TCP connections. [RT #15628]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt1949. [func] Addition memory leakage checks. [RT #15544]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt1948. [bug] If was possible to trigger a REQUIRE failure in
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt xfrin.c:maybe_free() if named ran out of memory.
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews1947. [func] It is now possible to configure named to accept
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews expired RRSIGs. Default "dnssec-accept-expired no;".
d36ba0f0caa64111a9a3236944f730dfb3fe5245Mark Andrews Setting "dnssec-accept-expired yes;" leaves named
d36ba0f0caa64111a9a3236944f730dfb3fe5245Mark Andrews vulnerable to replay attacks. [RT #14685]
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt1946. [bug] resume_dslookup() could trigger a REQUIRE failure
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews when using forwarders. [RT #15549]
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
b3ea72e4d1c78791b807f03ea5c26e1b762d701fMark Andrews To generate a RSAMD5 key you must explicitly request
b3ea72e4d1c78791b807f03ea5c26e1b762d701fMark Andrews RSAMD5. [RT #13780]
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews1944. [cleanup] isc_hash_create() does not need a read/write lock.
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews1943. [bug] Set the loadtime after rolling forward the journal.
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt1942. [bug] If the name of a DNSKEY match that of one in
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt trusted-keys do not attempt to validate the DNSKEY
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt using the parents DS RRset. [RT #15649]
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews1941. [bug] ncache_adderesult() should set eresult even if no
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews rdataset is passed to it. [RT #15642]
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews1940. [bug] Fixed a number of error conditions reported by
499fa72075c050391b4d051f593d295670d27983Mark Andrews1939. [bug] The resolver could dereference a null pointer after
967a70944d6b1902d30919baa1c4f6faf77bbfaeMark Andrews validation if all the queries have timed out.
00c8156b24a3a80edf855190eabb8ac14ce9cc9cJeremy Reed1938. [bug] The validator was not correctly handling unsecure
3464fafb9ff13e3212c568b645194bf138504fe6Jeremy Reed negative responses at or below a SEP. [RT #15528]
4bf9fe787e9cb3085391a0560c36726eda9ac2d1Mark Andrews1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
4bf9fe787e9cb3085391a0560c36726eda9ac2d1Mark Andrews1936. [bug] The validator could leak memory. [RT #15544]
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews1935. [bug] 'acache' was DO sensitive. [RT #15430]
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews1934. [func] Validate pending NS RRsets, in the authority section,
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews prior to returning them if it can be done without
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews requiring DNSKEYs to be fetched. [RT #15430]
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews1931. [bug] Per-client mctx could require a huge amount of memory,
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews particularly for a busy caching server. [RT #15519]
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews1930. [port] HPUX: ia64 support. [RT #15473]
598da901aba066208ab57ef5a44661f00f6c7dc6Mark Andrews1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
cac4576405a48a84f3c4d5de0ffa28a865a13309Mark Andrews1927. [bug] Access to soanode or nsnode in rbtdb violated the
cac4576405a48a84f3c4d5de0ffa28a865a13309Mark Andrews lock order rule and could cause a dead lock.
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews1926. [bug] The Windows installer did not check for empty
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews passwords. BINDinstall was being installed in
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews the wrong place. [RT #15483]
45c3c12ed3415e5cce50d73a735034e32aed1f73Mark Andrews1925. [port] All outer level AC_TRY_RUNs need cross compiling
45c3c12ed3415e5cce50d73a735034e32aed1f73Mark Andrews defaults. [RT #15469]
692ce6c31351481644ce6167cb66edaff68cd493Mark Andrews1924. [port] libbind: hpux ia64 support. [RT #15473]
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews1923. [bug] ns_client_detach() called too early. [RT #15499]
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews1922. [bug] check-tool.c:setup_logging() missing call to
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews dns_log_setcontext().
b663e99af61e032273bdffa2f8d26de539ae6930Mark Andrews1921. [bug] Client memory contexts were not using internal
b663e99af61e032273bdffa2f8d26de539ae6930Mark Andrews malloc. [RT# 15434]
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉1920. [bug] The cache rbtdb lock array was too small to
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉 have the desired performance characteristics.
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont1919. [contrib] queryperf: a set of new features: collecting/printing
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont response delays, printing intermediate results, and
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont adjusting query rate for the "target" qps.
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed1918. [bug] Memory leak when checking acls. [RT #15391]
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
5d0984f4fd3133c869b0736adb5291e6fca34a0cTatuya JINMEI 神明達哉 when generating man pages. [RT #15385]
c349441d7e47a30e81726967b2398289225ebd45Mark Andrews1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
46af69f1239553d4a1c315f6eee51379828942f9Mark Andrews1915. [bug] dig +ndots was broken. [RT #15215]
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews1914. [protocol] DS is required to accept mnemonic algorithms
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews (RFC 4034). Still emit numeric algorithms for
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews compatibility with RFC 3658. [RT #15354]
53cd44e7168acb379b1c5c74b3ffc4336694779dMark Andrews1913. [func] Integrate contributed DLZ code into named. [RT #11382]
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews1912. [port] aix: atomic locking for powerpc. [RT #15020]
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉1911. [bug] Update windows socket code. [RT #14965]
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉1910. [bug] dig's +sigchase code overhauled. [RT #14933]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉1909. [bug] The DLV code has been re-worked to make no longer
f895c5b042cc0f7e3547fac7f6a4bd8d3d45acd8Tatuya JINMEI 神明達哉 query order sensitive. [RT #14933]
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews1908. [func] dig now warns if 'RA' is not set in the answer when
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews 'RD' was set in the query. host/nslookup skip servers
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews that fail to set 'RA' when 'RD' is set unless a server
e8a534049cea42ecf07113e88645cea2bd12d850Mark Andrews is explicitly set. [RT #15005]
31b7a2fed64e388db772a74742a4adc95d1a21e6Mark Andrews1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
31b7a2fed64e388db772a74742a4adc95d1a21e6Mark Andrews1906. [func] dig now has a '-q queryname' and '+showsearch' options.
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews1905. [bug] Strings returned from cfg_obj_asstring() should be
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews treated as read-only. The prototype for
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews cfg_obj_asstring() has been updated to reflect this.
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews friends. Note: RFC 1918 zones are not yet covered by
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews this but are likely to be in a future release.
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews New options: empty-server, empty-contact,
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews empty-zones-enable and disable-empty-zone.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1903. [func] ISC string copy API.
616b4544d0228604b1c5169b0c9d742f67567232Tatuya JINMEI 神明達哉1902. [func] Attempt to make the amount of work performed in a
616b4544d0228604b1c5169b0c9d742f67567232Tatuya JINMEI 神明達哉 iteration self tuning. The covers nodes clean from
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 the cache per iteration, nodes written to disk when
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 rewriting a master file and nodes destroyed per
bc4bc3579b92f2e4c6a6a2c5284d1c792c70e264Tatuya JINMEI 神明達哉 iteration when destroying a zone or a cache.
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉1901. [cleanup] Don't add DNSKEY records to the additional section.
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉1900. [bug] ixfr-from-differences failed to ensure that the
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉 serial number increased. [RT #15036]
1879dbe0d962f6f929417b02bf07f64ed41b1aabFrancis Dupont1899. [func] named-checkconf now validates update-policy entries.
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
fa7ef31685393f7c7ba1cec485d8e395bfa28867Francis Dupont ISC_NETADDR_FORMATSIZE to allow for scope details.
ddb35cf2f301ae1c3fa601792034f6d349efc8c5Mark Andrews1897. [func] x86 and x86_64 now have separate atomic locking
ddb35cf2f301ae1c3fa601792034f6d349efc8c5Mark Andrews implementations.
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉1896. [bug] Recursive clients soft quota support wasn't working
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉 as expected. [RT #15103]
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉1895. [bug] A escaped character is, potentially, converted to
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 the output character set too early. [RT #14666]
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉1894. [doc] Review ARM for BIND 9.4.
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews1893. [port] Use uintptr_t if available. [RT #14606]
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉1892. [func] Support for SPF rdata type. [RT #15033]
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉1891. [port] freebsd: pthread_mutex_init can fail if it runs out
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉 of memory. [RT #14995]
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉1890. [func] Raise the UDP receive buffer size to 32k if it is
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉 less than 32k. [RT #14953]
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews1889. [port] sunos: non blocking i/o support. [RT #14951]
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉1888. [func] Support for IPSECKEY rdata type. [RT #14967]
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉1887. [bug] The cache could delete expired records too fast for
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉 clients with a virtual time in the past. [RT #14991]
24450ad58d545e165c051fff24b320118fc00350Mark Andrews1886. [bug] fctx_create() could return success even though it
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews failed. [RT #14993]
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews1885. [func] dig: report the number of extra bytes still left in
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews the packet after processing all the records.
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
b06e03490604f5d9b590dad143e65d533918481bMark Andrews1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
8684cd3a6f1437a3c1ff6ca852e1db6d40ce6303Mark Andrews levels. [RT #14962]
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews1882. [func] Limit the number of recursive clients that can be
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews waiting for a single query (<qname,qtype,qclass>) to
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 resolve. New options clients-per-query and
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 max-clients-per-query.
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews1881. [func] Add a system test for named-checkconf. [RT #14931]
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews1880. [func] The lame cache is now done on a <qname,qclass,qtype>
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews basis as some servers only appear to be lame for
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews certain query types. [RT #14916]
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
d8fc8514b117e636b791bef429d64a7c7a75a4cfMark Andrews1878. [func] Detect duplicates of UDP queries we are recursing on
d8fc8514b117e636b791bef429d64a7c7a75a4cfMark Andrews and drop them. New stats category "duplicate".
9935447b51456f598b45246d0114b8006049244dMark Andrews1877. [bug] Fix unreasonably low quantum on call to
175a8bd2b798bbc568cd912b72c8a026cfca8527Mark Andrews dns_rbt_destroy2(). Remove unnecessary unhash_node()
175a8bd2b798bbc568cd912b72c8a026cfca8527Mark Andrews call. [RT #14919]
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews1876. [func] Additional memory debugging support to track size
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews and mctx arguments. [RT #14814]
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews1875. [bug] process_dhtkey() was using the wrong memory context
4e59e2e59b17c4e30eef801929bca91800be833eFrancis Dupont to free some memory. [RT #14890]
47d9a2bec1fee2f6c7a9cee3ca922140840223eeMark Andrews1874. [port] sunos: portability fixes. [RT #14814]
9019569316e39087410336bb76c02bf185974fe3Mark Andrews1873. [port] win32: isc__errno2result() now reports its caller.
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉1871. [placeholder]
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉1870. [func] Added framework for handling multiple EDNS versions.
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews1869. [func] dig can now specify the EDNS version when making
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews a query. [RT #14873]
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews1868. [func] edns-udp-size can now be overridden on a per
50df1ec60af410fca6b7a85d5c85e8f31bb13bc3Mark Andrews server basis. [RT #14851]
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews1867. [bug] It was possible to trigger a INSIST in
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews dlv_validatezonekey(). [RT #14846]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed1866. [bug] resolv.conf parse errors were being ignored by
d5be219ff773a91c839c660fee54f1df7448adfaMark Andrews1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews bad addresses. [RT #14841]
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews1864. [bug] Don't try the alternative transfer source if you
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews got a answer / transfer with the main source
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews address. [RT #14802]
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews1863. [bug] rrset-order "fixed" error messages not complete.
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews1862. [func] Add additional zone data constancy checks.
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 named-checkzone has extended checking of NS, MX and
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 SRV record and the hosts they reference.
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 named has extended post zone load checks.
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 New zone options: check-mx and integrity-check.
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews1861. [bug] dig could trigger a INSIST on certain malformed
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews responses. [RT #14801]
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews incorrectly set. [RT #14775]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews1859. [func] Add support for CH A record. [RT #14695]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews1858. [bug] The flush-zones-on-shutdown option wasn't being
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews parsed. [RT #14686]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews1857. [bug] named could trigger a INSIST() if reconfigured /
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews reloaded too fast. [RT #14673]
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews1855. [bug] ixfr-from-differences was failing to detect changes
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews of ttl due to dns_diff_subtract() was ignoring the ttl
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews of records. [RT #14616]
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews1854. [bug] lwres also needs to know the print format for
7b1a7a098b51381f06277860a40bd7f062c8ec19Francis Dupont (long long). [RT #13754]
bc3b1dbd69840bd7f2f0b6af2610603f334b369bFrancis Dupont1853. [bug] Rework how DLV interacts with proveunsecure().
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews1852. [cleanup] Remove last vestiges of dnssec-signkey and
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews dnssec-makekeyset (removed from Makefile years ago).
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews1851. [doc] Doxygen comment markup. [RT #11398]
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews1849. [doc] All forms of the man pages (docbook, man, html) should
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed have consistent copyright dates.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed1848. [bug] Improve SMF integration. [RT #13238]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1847. [bug] isc_ondestroy_init() is called too late in
9d02618ca6b4d2e1737ba441449f61c1f04be685Mark Andrews dns_rbtdb_create()/dns_rbtdb64_create().
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed <bortzmeyer@nic.fr>.
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed1845. [bug] Improve error reporting to distinguish between
86ee7433b38bb023912a73d842bdcef3d4871a90Mark Andrews accept()/fcntl() and socket()/fcntl() errors.
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt for each 16 bit piece of the IPv6 address. The text
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt representation of a IPv6 address has been tightened
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews when CFLAGS contains "-I /usr/local/include"
7ca0cdd7ecff4c0396970ed957df7d5d8c639abfMark Andrews resulting in old header files being used.
7ca0cdd7ecff4c0396970ed957df7d5d8c639abfMark Andrews1842. [port] cmsg_len() could produce incorrect results on
275b170cc47c897d25204fe23169dac810283f79Mark Andrews some platform. [RT #13744]
455ada05af05e39cdeb63297d60d36a0eca062e1Mark Andrews1841. [bug] "dig +nssearch" now makes a recursive query to
0d444dc136a1a8df89a329d7ad43c74e1db8dfbeMark Andrews find the list of nameservers to query. [RT #13694]
0d444dc136a1a8df89a329d7ad43c74e1db8dfbeMark Andrews1840. [func] dnssec-signzone can now randomize signature end times
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews (dnssec-signzone -j jitter). [RT #13609]
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews1839. [bug] <isc/hash.h> was not being installed.
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉1838. [cleanup] Don't allow Linux capabilities to be inherited.
b05585dcfe270c40e309ff7304cf6b69d7390bdaTatuya JINMEI 神明達哉1837. [bug] Compile time option ISC_FACILITY was not effective
1f030ca8a3df943d8016cac39bc3018f5952126aJeremy Reed for 'named -u <user>'. [RT #13714]
1f030ca8a3df943d8016cac39bc3018f5952126aJeremy Reed1836. [cleanup] Silence compiler warnings in hash_test.c.
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews1834. [bug] Bad memset in rdata_test.c. [RT #13658]
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews1831. [doc] Update named-checkzone documentation. [RT#13604]
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed1829. [bug] win32: "pid-file none;" broken. [RT #13563]
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed1828. [bug] isc_rwlock_init() failed to properly cleanup if it
99a522dad7623549cd5e32a4968e6de8eca46ff1Mark Andrews encountered a error. [RT #13549]
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews1827. [bug] host: update usage message for '-a'. [RT #37116]
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews of memory error. [RT #13537]
cd6555930b6829ebce8bbf2adc7ba05111edf595Mark Andrews1825. [bug] Missing UNLOCK() on out of memory error from in
cd6555930b6829ebce8bbf2adc7ba05111edf595Mark Andrews rbtdb.c:subtractrdataset(). [RT #13519]
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉1824. [bug] Memory leak on dns_zone_setdbtype() failure.
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉1823. [bug] Wrong macro used to check for point to point interface.
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt1822. [bug] check-names test for RT was reversed. [RT #13382]
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt1821. [placeholder]
275b170cc47c897d25204fe23169dac810283f79Mark Andrews1820. [bug] Gracefully handle acl loops. [RT #13659]
eab4a5c29ddda688d975ad59a55a965b16534432Mark Andrews1819. [bug] The validator needed to check both the algorithm and
21d493fc392d472086ad3c7c4563b7cadcb06788Mark Andrews digest types of the DS to determine if it could be
21d493fc392d472086ad3c7c4563b7cadcb06788Mark Andrews used to introduce a secure zone. [RT #13593]
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews1817. [func] Add support for additional zone file formats for
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews improving loading performance. The masterfile-format
19e4588ed76d6832be4de0813b6108a292ef413aMark Andrews option in named.conf can be used to specify a
19e4588ed76d6832be4de0813b6108a292ef413aMark Andrews non-default format. A separate command
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed named-compilezone was provided to generate zone files
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed in the new format. Additionally, the -I and -O options
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed for dnssec-signzone specify the input and output
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
11dbf2fc38eea8c5d3fe7123718bf197a8bb2e6bMark Andrews1815. [bug] nsupdate triggered a REQUIRE if the server was set
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 without also setting the zone and it encountered
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 a CNAME and was using TSIG. [RT #13086]
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉1814. [func] UNIX domain controls are now supported.
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews1813. [func] Restructured the data locking framework using
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews architecture dependent atomic operations (when
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews available), improving response performance on
ce688d65947a05561509aef48c8c240130d443eaMark Andrews multi-processor machines significantly.
c6c09f77f85860b6e084b0daad066ded08729b3eMark Andrews x86, x86_64, alpha, powerpc, and mips are currently
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff1811. [func] Preserve the case of domain names in rdata during
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt zone transfers. [RT #13547]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1810. [bug] configure, lib/bind/configure make different default
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt decisions about whether to do a threaded build.
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt1809. [bug] "make distclean" failed for libbind if the platform
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt is not supported.
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt1808. [bug] zone.c:notify_zone() contained a race condition,
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt zone->db could change underneath it. [RT #13511]
8760bb9e0c48dad3765571b6e1ce193548fc5e37Evan Hunt1807. [bug] When forwarding (forward only) set the active domain
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt from the forward zone name. [RT #13526]
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt1806. [bug] The resolver returned the wrong result when a CNAME /
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews DNAME was encountered when fetching glue from a
b247f77228f00e16dd43b4d570ad0fb15e88f3edMark Andrews secure namespace. [RT #13501]
aeadcd63196f164b219629a53c0e0925519288f3Evan Hunt1805. [bug] Pending status was not being cleared when DLV was
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews active. [RT #13501]
baeed3c40fc0a2f30ef399899e16ded472f04c06Evan Hunt1804. [bug] Ensure that if we are queried for glue that it fits
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews in the additional section or TC is set to tell the
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews client to retry using TCP. [RT #10114]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews1803. [bug] dnssec-signzone sometimes failed to remove old
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews RRSIGs. [RT #13483]
275b170cc47c897d25204fe23169dac810283f79Mark Andrews1802. [bug] Handle connection resets better. [RT #11280]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews1801. [func] Report differences between hints and real NS rrset
36440d1ec6cf1ff0cbb0b5b2fb39423e4e0bd450Evan Hunt and associated address records.
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews1800. [bug] Changes #1719 allowed a INSIST to be triggered.
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews1799. [bug] 'rndc flushname' failed to flush negative cache
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews entries. [RT #13438]
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews1798. [func] The server syntax has been extended to support a
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews range of servers. [RT #11132]
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews1797. [func] named-checkconf now check acls to verify that they
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews only refer to existing acls. [RT #13101]
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews1795. [bug] "rndc dumpdb" was not fully documented. Minor
275b170cc47c897d25204fe23169dac810283f79Mark Andrews formating issues with "rndc dumpdb -all". [RT #13396]
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews1794. [func] Named and named-checkzone can now both check for
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉 non-terminal wildcard records.
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉1793. [func] Extend adjusting TTL warning messages. [RT #13378]
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews1792. [func] New zone option "notify-delay". Specify a minimum
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews delay between sets of NOTIFY messages.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1791. [bug] 'host -t a' still printed out AAAA and MX records.
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
f5dc94b026b5153de76eeb3c1161596251f26bcbMark Andrews allow parallel make to succeed.
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt1789. [bug] Prerequisite test for tkey and dnssec could fail
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt with "configure --with-libtool".
1bfe8851c0a2eb1d7e15556bfa21291cd62ee2bcMark Andrews1788. [bug] libbind9.la/libbind9.so needs to link against
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉1786. [port] AIX: libt_api needs to be taught to look for
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews T_testlist in the main executable (--with-libtool).
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews1785. [bug] libbind9.la/libbind9.so needs to link against
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt1784. [cleanup] "libtool -allow-undefined" is the default.
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews Leave hooks in configure to allow it to be set
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews if needed in the future.
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉1782. [port] OSX: --with-libtool + --enable-libbind broke on
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 __evOptMonoTime. [RT #13219]
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
cf225ed6cd51f9acc901a60520a9368e14224a4dTatuya JINMEI 神明達哉1780. [bug] Update libtool to 1.5.10.
cf225ed6cd51f9acc901a60520a9368e14224a4dTatuya JINMEI 神明達哉1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉 IN6ADDR_LOOPBACK_INIT macros.
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉 IN6ADDR_LOOPBACK_INIT macros.
387bca7a55c0581dc36edb4a5071cb5e1d1c34f6Tatuya JINMEI 神明達哉1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
387bca7a55c0581dc36edb4a5071cb5e1d1c34f6Tatuya JINMEI 神明達哉 IN6ADDR_LOOPBACK_INIT macros.
dc842cdcb946b3f89448f07a9f024497a50c216aMark Andrews1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉1774. [port] Aix: Silence compiler warnings / build failures.
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉1773. [bug] Fast retry on host / net unreachable. [RT #13153]
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉1772. [placeholder]
04115a59c176759177545c72376e844e10dc557cMark Andrews1771. [placeholder]
b1f7d25ee1792838aa5e5d81f4433b474d4565a2Mark Andrews1770. [bug] named-checkconf failed to report missing a missing
4db36a15c5716050d40aa8e709e8c8e9475ea25bMark Andrews file clause for rbt{64} master/hint zones. [RT#13009]
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉1769. [port] win32: change compiler flags /MTd ==> /MDd,
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
146484aced3e6c1b9cc88db5e75b8cbfd166f701Mark Andrews rdataset. [RT #12907]
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
dbe9f900ecbefb34e960b69b41b9ecde36e0a256Tatuya JINMEI 神明達哉 support for (struct in6_pktinfo) failed. [RT #13077]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1766. [bug] Update the master file timestamp on successful refresh
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews as well as the journal's timestamp. [RT# 13062]
7999db4215b9398d4598ac0156ff097cda40402bMark Andrews1765. [bug] configure --with-openssl=auto failed. [RT #12937]
481e9b573b8233f8678c1dd4549c8c949312e81dMark Andrews1764. [bug] dns_zone_replacedb failed to emit a error message
481e9b573b8233f8678c1dd4549c8c949312e81dMark Andrews if there was no SOA record in the replacement db.
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont1763. [func] Perform sanity checks on NS records which refer to
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont 'in zone' names. [RT #13002]
09477e188f874c8c43a90f050733b114385992dcTatuya JINMEI 神明達哉1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
0cdb53f093f5814b40a68848025dd8d7e9ef2e9bTatuya JINMEI 神明達哉 even when it failed. [RT #12995]
05b8187cb3cf03fbd75af1afdacc4aefb373e37bTatuya JINMEI 神明達哉1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews1760. [bug] Host / net unreachable was not penalising rtt
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews estimates. [RT #12970]
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews1759. [bug] Named failed to startup if the OS supported IPv6
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews but had no IPv6 interfaces configured. [RT #12942]
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews1758. [func] Don't send notify messages to self. [RT #12933]
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews1757. [func] host now can turn on memory debugging flags with '-m'.
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews1756. [func] named-checkconf now checks the logging configuration.
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont1755. [func] allow-update is now settable at the options / view
2ca30c1774245f3aa7e8a1f3781cb965152373d8Evan Hunt level. [RT #6636]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont1754. [bug] We weren't always attempting to query the parent
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont server for the DS records at the zone cut.
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt1753. [bug] Don't serve a slave zone which has no NS records.
3d8b9b9956b64aba0d105f955ac0354fbcf5baa9Tatuya JINMEI 神明達哉1752. [port] Move isc_app_start() to after ns_os_daemonise()
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt as some fork() implementations unblock the signals
2f76108082f11d4979048f1c22602391c5733c88Tatuya JINMEI 神明達哉 that are blocked by isc_app_start(). [RT #12810]
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
efe34b8ddbecf45d1671efbcba30bdb75410c98aMark Andrews1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉1749. [bug] 'check-names response ignore;' failed to ignore.
d923262186a3111a6ac7aae5dcd9996e01115a44Mark Andrews1748. [func] dig now returns the byte count for axfr/ixfr.
f92c897cb69fbb8b7400a5df93271b0743fe9adeTatuya JINMEI 神明達哉1747. [bug] BIND 8 compatibility: named/named-checkconf failed
158f256a14b629c4157fe0da779a4ff0e3402e48Tatuya JINMEI 神明達哉 to parse "host-statistics-max" in named.conf.
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉1746. [func] Make public the function to read a key file,
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉 dst_key_read_public(). [RT #12450]
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉1745. [bug] Dig/host/nslookup accept replies from link locals
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉 regardless of scope if no scope was specified when
0f39ff74a85e16cbfd30354e24403b1ee50e1104Tatuya JINMEI 神明達哉 query was sent. [RT #12745]
05e2cc844530031e4dd4e25b3826bece7a183ee1Tatuya JINMEI 神明達哉1744. [bug] If tuple2msgname() failed to convert a tuple to
0f39ff74a85e16cbfd30354e24403b1ee50e1104Tatuya JINMEI 神明達哉 a name a REQUIRE could be triggered. [RT #12796]
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews1743. [bug] If isc_taskmgr_create() was not able to create the
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews requested number of worker threads then destruction
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews of the manager would trigger an INSIST() failure.
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews1742. [bug] Deleting all records at a node then adding a
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews previously existing record, in a single UPDATE
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews transaction, failed to leave / regenerate the
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews associated RRSIG records. [RT #12788]
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews1741. [bug] Deleting all records at a node in a secure zone
250dcb4cf5c356bb492c849edff5fe3c81f61f77Tatuya JINMEI 神明達哉 using a update-policy grant failed. [RT #12787]
250dcb4cf5c356bb492c849edff5fe3c81f61f77Tatuya JINMEI 神明達哉1740. [bug] Replace rbt's hash algorithm as it performed badly
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 with certain zones. [RT #12729]
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 NOTE: a hash context now needs to be established
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews via isc_hash_create() if the application was not
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews already doing this.
58253bddc4c33507ba28654b9c4a36ca1053730cMark Andrews1739. [bug] dns_rbt_deletetree() could incorrectly return
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉 ISC_R_QUOTA. [RT #12695]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews1738. [bug] Enable overrun checking by default. [RT #12695]
080a964a3f0622f2e343f114aa1cc066372c06caEvan Hunt1737. [bug] named failed if more than 16 masters were specified.
5a17fe2916ce37793c12b243ab08c16095a59cf7Evan Hunt1736. [bug] dst_key_fromnamedfile() could fail to read a
d230b29aba3ce1d0362194801c34321ed22f5aa5Evan Hunt public key. [RT #12687]
5a17fe2916ce37793c12b243ab08c16095a59cf7Evan Hunt1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
e1aeb1569a0ae08c97dd76acb00376e4246e59b8Mark Andrews1733. [bug] Return non-zero exit status on initial load failure.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews1731. [port] darwin: relax version test in ifconfig.sh.
816496b22114ee7c2c15321c2c6cc4be77fdf822Mark Andrews1730. [port] Determine the length type used by the socket API.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews1729. [func] Improve check-names error messages.
229442301442890aee044a0df54d3787acd68e65Mark Andrews1728. [doc] Update check-names documentation.
229442301442890aee044a0df54d3787acd68e65Mark Andrews1727. [bug] named-checkzone: check-names support didn't match
8b56b8956fc1e6c70efacb4f71db28d0d1f0c577Mark Andrews documentation.
8b56b8956fc1e6c70efacb4f71db28d0d1f0c577Mark Andrews1726. [port] aix5: add support for aix5.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews1725. [port] linux: update error message on interaction of threads,
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews capabilities and setuid support (named -u). [RT #12541]
bf64a0d5d9469c42622401bc5d55cf9888eeef44Tatuya JINMEI 神明達哉1724. [bug] Look for DNSKEY records with "dig +sigtrace".
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff1722. [bug] Don't commit the journal on malformed ixfr streams.
52cb865cf00db3437c33b57de0a17c807f9ba67eMark Andrews1721. [bug] Error message from the journal processing were not
52cb865cf00db3437c33b57de0a17c807f9ba67eMark Andrews always identifying the relevant journal. [RT #12519]
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews negative response. [RT #12506]
c4fadc88619959582ac89b841c489be0519ae79dTatuya JINMEI 神明達哉1719. [bug] named was not correctly caching a RFC 2308 Type 1
c4fadc88619959582ac89b841c489be0519ae79dTatuya JINMEI 神明達哉 negative response. [RT #12506]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews responses when looking for the zone / master server.
d904beeb3bf62d60e25f76e1ac9c4b78278c14edMark Andrews1717. [port] solaris: ifconfig.sh did not support Solaris 10.
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews "ifconfig.sh down" didn't work for Solaris 9.
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews1716. [doc] named.conf(5) was being installed in the wrong
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews location. [RT# 12441]
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews1715. [func] 'dig +trace' now randomly selects the next servers
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews to try. Report if there is a bad delegation.
887ef2682c6f66f9dcd6604c4ccf8f87894ef2a9Mark Andrews1714. [bug] dig/host/nslookup were only trying the first
420ed91d3ed516bc9d5edf2e942ae792d17d11b4Mark Andrews address when a nameserver was specified by name.
07555e64d9102eae058efd58f872b4a3b9ddff61Mark Andrews1713. [port] linux: extend capset failure message to say:
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews please ensure that the capset kernel module is
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews loaded. see insmod(8)
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
8d460bed78e2684fbb0cb150bbf800dcc4d29c54Mark Andrews1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews messages for the specified zone. [RT #9479]
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont1709. [port] solaris: add SMF support from Sun.
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
cffe96e26744abcf33494837b234219046a631d8Mark Andrews for conformance to the name space convention. Binary
cffe96e26744abcf33494837b234219046a631d8Mark Andrews backward compatibility to the old function name is
cffe96e26744abcf33494837b234219046a631d8Mark Andrews provided. [RT #12376]
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews1707. [contrib] sdb/ldap updated to version 1.0-beta.
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews1706. [bug] 'rndc stop' failed to cause zones to be flushed
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews sometimes. [RT #12328]
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews1705. [func] Allow the journal's name to be changed via named.conf.
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉1704. [port] lwres needed a snprintf() implementation for
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉 platforms without snprintf(). Add missing
ea8564f68adbacd904e55e47668fe1bbf65ddd1dMark Andrews "#include <isc/print.h>". [RT #12321]
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews1703. [bug] named would loop sending NOTIFY messages when it
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews failed to receive a response. [RT #12322]
d9936b218d9d0fd7c6a1a418e5b91b356190ea12Mark Andrews1702. [bug] also-notify should not be applied to built in zones.
4074b8e7342618ff38ffe3773a2699ee1734f1adMark Andrews1701. [doc] A minimal named.conf man page.
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews1700. [func] nslookup is no longer to be treated as deprecated.
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews Remove "deprecated" warning message. Add man page.
016c4317500eb565b82b27d00ba6b621c6e29110Mark Andrews1699. [bug] dnssec-signzone can generate "not exact" errors
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews when resigning. [RT #12281]
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews1698. [doc] Use reserved IPv6 documentation prefix.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1697. [bug] xxx-source{,-v6} was not effective when it
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews specified one of listening addresses and a
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews different port than the listening port. [RT #12257]
0e30609d7b3e31e3ff249d185041b9140b5410baMark Andrews1696. [bug] dnssec-signzone failed to clean out nodes that
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews consisted of only NSEC and RRSIG records.
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews1695. [bug] DS records when forwarding require special handling.
2005c3b37bb39a37dc0b034bb2149006df7e3759Mark Andrews1694. [bug] Report if the builtin views of "_default" / "_bind"
aef875b27e94586a1f3644d53705e6f5ea4b5dafMark Andrews are defined in named.conf. [RT #12023]
c09c2bf800ba0f5e6efe6b47ba72f43e4a61ca7dMark Andrews1693. [bug] max-journal-size was not effective for master zones
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews with ixfr-from-differences set. [RT# 12024]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews1691. [bug] sdb's attachversion was not complete. [RT #11990]
4a5b30c24ca7ceefec4ca142069b886f3d4ab9f9Mark Andrews1690. [bug] Delay detaching view from the client until UPDATE
4a5b30c24ca7ceefec4ca142069b886f3d4ab9f9Mark Andrews processing completes when shutting down. [RT #11714]
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews contained gratuitous semicolons. [RT #11707]
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews1688. [bug] LDFLAGS was not supported.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1687. [bug] Race condition in dispatch. [RT #10272]
9dcc44d7b309b61e89083807d47af471ec6bae1fMark Andrews1686. [bug] Named sent a extraneous NOTIFY when it received a
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews redundant UPDATE request. [RT #11943]
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews1685. [bug] Change #1679 loop tests weren't quite right.
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews1684. [func] ixfr-from-differences now takes master and slave in
2005c3b37bb39a37dc0b034bb2149006df7e3759Mark Andrews addition to yes and no at the options and view levels.
7539c231d47677250008737b0691f9518111f3f5Mark Andrews1683. [bug] dig +sigchase could leak memory. [RT #11445]
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉1682. [port] Update configure test for (long long) printf format.
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews1681. [bug] Only set SO_REUSEADDR when a port is specified in
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews isc_socket_bind(). [RT #11742]
1c3ed2a83d176d9023b51b60dfc96c133f678362Tatuya JINMEI 神明達哉1680. [func] rndc: the source address can now be specified.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1679. [bug] When there was a single nameserver with multiple
fc53f564caa9d40f4b73a2808260b1dc07e86fddEvan Hunt addresses for a zone not all addresses were tried.
a59640bf27db16e02e01484297e36b7456e163bbMark Andrews1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
4462e590791925b6a5efceacbff054a6b5fe35edMark Andrews1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews1676. [func] New option "allow-query-cache". This lets
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews allow-query be used to specify the default zone
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews access level rather than having to have every
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews zone override the global value. allow-query-cache
fc7043d7d1294478c9988c10af9a7fb8fd810338Evan Hunt can be set at both the options and view levels.
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews If allow-query-cache is not set allow-query applies.
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews1675. [bug] named would sometimes add extra NSEC records to
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews the authority section.
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews1674. [port] linux: increase buffer size used to scan
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews1673. [port] linux: issue a error messages if IPv6 interface
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews scans fails.
262c39b2366bf79062f7f86b218947523dd1cbacEvan Hunt1672. [cleanup] Tests which only function in a threaded build
1ff207c2fa4182156932f3f5c982170385a19225Mark Andrews now return R:THREADONLY (rather than R:UNTESTED)
b1e32169ac5cf21fca540fa122a546db71090491Mark Andrews in a non-threaded build.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews1671. [contrib] queryperf: add NAPTR to the list of known types.
1aba9fe67899522364a9dbc3ee5a14da081f0314Evan Hunt1670. [func] Log UPDATE requests to slave zones without an acl as
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews "disabled" at debug level 3. [RT# 11657]
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews1669. [placeholder]
6c7f722d31d12cf83964c8132f0a59ef70e34cb5Mark Andrews1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews1667. [port] linux: not all versions have IF_NAMESIZE.
fcdafc1e30dd4d10184b56201ea2fc3bab711e5eMark Andrews1666. [bug] The optional port on hostnames in dual-stack-servers
fcdafc1e30dd4d10184b56201ea2fc3bab711e5eMark Andrews was being ignored.
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews1665. [func] rndc now allows addresses to be set in the
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews server clauses.
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
efb3fa669f00ccfd9aada997b426616b6b0ce044Mark Andrews1663. [func] Look for OpenSSL by default.
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews1662. [bug] Change #1658 failed to change one use of 'type'
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews to 'keytype'.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1661. [bug] Restore dns_name_concatenate() call in
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews adb.c:set_target(). [RT #11582]
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews1660. [bug] win32: connection_reset_fix() was being called
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews unconditionally. [RT #11595]
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews1659. [cleanup] Cleanup some messages that were referring to KEY vs
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews DNSKEY, NXT vs NSEC and SIG vs RRSIG.
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews and DH. Tighten which options apply to KEY and
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews DNSKEY records.
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews1657. [doc] ARM: document query log output.
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews DNSKEY and RRSIG. [RT #11542]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉1655. [bug] Logging multiple versions w/o a size was broken.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉1654. [bug] isc_result_totext() contained array bounds read
1c9f629c181dfd14bb429a6699d22c3c023aa218Mark Andrews1653. [func] Add key type checking to dst_key_fromfilename(),
1c9f629c181dfd14bb429a6699d22c3c023aa218Mark Andrews DST_TYPE_KEY should be used to read TSIG, TKEY and
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews SIG(0) keys.
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews1652. [bug] TKEY still uses KEY.
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews1651. [bug] dig: process multiple dash options.
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews1650. [bug] dig, nslookup: flush standard out after each command.
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews1649. [bug] Silence "unexpected non-minimal diff" message.
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews1648. [func] Update dnssec-lookaside named.conf syntax to support
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews multiple dnssec-lookaside namespaces (not yet
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews implemented).
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews1647. [bug] It was possible trigger a INSIST when chasing a DS
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews record that required walking back over a empty node.
92f60809e854ccf5f115883c6347e370da048848Mark Andrews1646. [bug] win32: logging file versions didn't work with
92f60809e854ccf5f115883c6347e370da048848Mark Andrews non-UNC filenames. [RT#11486]
f5d0f495847eb4eb9f0058e73051f855800bee0bMark Andrews1645. [bug] named could trigger a REQUIRE failure if multiple
f5d0f495847eb4eb9f0058e73051f855800bee0bMark Andrews masters with keys are specified.
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews1644. [bug] Update the journal modification time after a
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews successful refresh query. [RT #11436]
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews1643. [bug] dns_db_closeversion() could leak memory / node
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews references. [RT #11163]
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews1642. [port] Support OpenSSL implementations which don't have
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews DSA support. [RT #11360]
604419a812b491cd35fb6fad129c3c39da7200a1Mark Andrews1641. [bug] Update the check-names description in ARM. [RT #11389]
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews incorrectly closing the socket. [RT #11291]
8c850a29eda020642c84038e449d60f124c6123bMark Andrews1639. [func] Initial dlv system test.
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews1638. [bug] "ixfr-from-differences" could generate a REQUIRE
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews failure if the journal open failed. [RT #11347]
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews1637. [bug] Node reference leak on error in addnoqname().
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews a error had occurred. The database version no longer
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews matched the version of the database that was dumped.
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews1635. [bug] Memory leak on error in query_addds().
301f6ffbbeabcbf765f8163f4ffb7f6f0146b926Mark Andrews1634. [bug] named didn't supply a useful error message when it
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews detected duplicate views. [RT #11208]
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews1633. [bug] named should return NOTIMP to update requests to a
28c49640dcb25102e5040b8d957edd905ddf82f8Mark Andrews slaves without a allow-update-forwarding acl specified.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1632. [bug] nsupdate failed to send prerequisite only UPDATE
541b9722d8031485922ab11221c2e747c0262cf5Mark Andrews messages. [RT #11288]
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews1631. [bug] dns_journal_compact() could sometimes corrupt the
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews journal. [RT #11124]
a6f7fdcc039de75e9a20da90044caa814f0357a3Michael Graff1630. [contrib] queryperf: add support for IPv6 transport.
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews1629. [func] dig now supports IPv6 scoped addresses with the
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews extended format in the local-server part. [RT #8753]
7e8214191899dc8043babdfbe9235ba14c825005Mark Andrews1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews1627. [bug] win32: sockets were not being closed when the
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews last external reference was removed. [RT# 11179]
9429f5a8318bd2142280c949d4af05998ca348a2Evan Hunt1626. [bug] --enable-getifaddrs was broken. [RT#11259]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews1625. [bug] named failed to load/transfer RFC2535 signed zones
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews which contained CNAMES. [RT# 11237]
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews1624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews1623. [bug] A serial number of zero was being displayed in the
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews "sending notifies" log message when also-notify was
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews used. [RT #11177]
544d0efa38490d67e458aa9c23a7dac2a9d546bfMark Andrews1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
544d0efa38490d67e458aa9c23a7dac2a9d546bfMark Andrews available, and suppress wildcard binding if not.
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews1621. [bug] match-destinations did not work for IPv6 TCP queries.
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews1620. [func] When loading a zone report if it is signed. [RT #11149]
1aaedde67b42c433324eecb76ee379ca0ccda294Mark Andrews1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1618. [bug] Fencepost errors in dns_name_ishostname() and
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews dns_name_ismailbox() could trigger a INSIST().
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr1617. [port] win32: VC++ 6.0 support.
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews1616. [compat] Ensure that named's version is visible in the core
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews dump. [RT #11127]
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews it is defined.
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews1614. [port] win32: silence resource limit messages. [RT# 11101]
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews1613. [bug] Builds would fail on machines w/o a if_nametoindex().
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews1612. [bug] check-names at the option/view level could trigger
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews an INSIST. [RT# 11116]
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews1611. [bug] solaris: IPv6 interface scanning failed to cope with
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews no active IPv6 interfaces.
71f4918fd8a5ec4f0a05aac657b614fdf2467bebMark Andrews1610. [bug] On dual stack machines "dig -b" failed to set the
71f4918fd8a5ec4f0a05aac657b614fdf2467bebMark Andrews address type to be looked up with "@server".
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews1609. [func] dig now has support to chase DNSSEC signature chains.
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews DNSSEC validation code in dig coded by Olivier Courtay
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews (olivier.courtay@irisa.fr) for the IDsA project
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1608. [func] dig and host now accept -4/-6 to select IP transport
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews to use when making queries.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1607. [bug] dig, host and nslookup were still using random()
8327cdb88fdbf306eb4c37fe00a29aac4c2f55c5Evan Hunt to generate query ids. [RT# 11013]
f2d8c4a4c3dfa212ddcf5b86d4c5fced4965e52eMark Andrews1606. [bug] DLV insecurity proof was failing.
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews1604. [bug] A xfrout_ctx_create() failure would result in
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews xfrout_ctx_destroy() being called with a
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews partially initialized structure.
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews1603. [bug] nsupdate: set interactive based on isatty().
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr1602. [bug] Logging to a file failed unless a size was specified.
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews1601. [bug] Silence spurious warning 'both "recursion no;" and
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews "allow-recursion" active' warning from view "_bind".
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1600. [bug] Duplicate zone pre-load checks were not case
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews insensitive.
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews1599. [bug] Fix memory leak on error path when checking named.conf.
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews1598. [func] Specify that certain parts of the namespace must
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews be secure (dnssec-must-be-secure).
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1597. [func] Allow notify-source and query-source to be specified
65391557db5d7dc725ed3f2b759248fea31a2445Mark Andrews on a per server basis similar to transfer-source.
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews1596. [func] Accept 'notify-source' style syntax for query-source.
a7b7a4ebc38ec7460e95da6d3d70ffe7b59573b8Mark Andrews1595. [func] New notify type 'master-only'. Enable notify for
1ca168b58e02fda534cad741a248e549e0f98d4dMark Andrews master zones only.
23450c23fd19138cfad95b6c7728e2965abfc154Mark Andrews1594. [bug] 'rndc dumpdb' could prevent named from answering
de05f7d061abfe0ce555e0d0f2089f1261b031b6Mark Andrews queries while the dump was in progress. [RT #10565]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1593. [bug] rndc should return "unknown command" to unknown
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews commands. [RT# 10642]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1592. [bug] configure_view() could leak a dispatch. [RT# 10675]
c7e266b7e5675e12d1ca3cc929f24b3e86d41f8eEvan Hunt1591. [bug] libbind: updated to BIND 8.4.5.
85db2b5fb360ccd2aeec1e6e22336b3d654bb39aMark Andrews1590. [port] netbsd: update thread support.
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews1589. [func] DNSSEC lookaside validation.
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
709220567fb820cf7e7625925449dadf86317629Mark Andrews1587. [bug] dns_message_settsigkey() failed to clear existing key.
adc3f2c0fdcc0a2bee469ffb0e7ae41b83cbf403Mark Andrews1586. [func] "check-names" is now implemented.
31a2f82193a91e24f31454ff18e0b7723c066a74Mark Andrews1585. [placeholder]
8731a2bd2f5483f50d82cf28e315090b7ceeed54Mark Andrews1584. [bug] "make test" failed with a read only source tree.
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews1583. [bug] Records add via UPDATE failed to get the correct trust
8a45eeebb8bdd4633bccfd9d77d9b50c1d337d54Mark Andrews level. [RT #10452]
8a45eeebb8bdd4633bccfd9d77d9b50c1d337d54Mark Andrews1582. [bug] rrset-order failed to work on RRsets with more
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews than 32 elements. [RT #10381]
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews1581. [func] Disable DNSSEC support by default. To enable
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews DNSSEC specify "dnssec-enable yes;" in named.conf.
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews1580. [bug] Zone destruction on final detach takes a long time.
f568dad6c7ddaa732e6562a4b89fd2ac922d263bMark Andrews1579. [bug] Multiple task managers could not be created.
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews workaround code. [RT #10331]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1576. [bug] Race condition in dns_dispatch_addresponse().
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews1574. [bug] Don't attempt to open the controls socket(s) when
c5adbd722da0908f91be4fb710c082b4b68ec782Mark Andrews running tests. [RT #9091]
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews1573. [port] linux: update to libtool 1.5.2 so that
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews "make install DESTDIR=/xx" works with
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews "configure --with-libtool". [RT #9941]
c60eaaf9b3c6bb4d693cdb5f68acdfacf076e1fdMark Andrews1572. [bug] nsupdate: sign the soa query to find the enclosing
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews zone if the server is specified. [RT #10148]
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews1571. [bug] rbt:hash_node() could fail leaving the hash table
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews in an inconsistent state. [RT #10208]
c0720b90ed6e673264b17eb752d873a89cbd6db5Mark Andrews1570. [bug] nsupdate failed to handle classes other than IN.
c0720b90ed6e673264b17eb752d873a89cbd6db5Mark Andrews New keyword 'class' which sets the default class.
c06cb907737eb7ce128c92dd729c73798733f37aMark Andrews1569. [func] nsupdate new command 'answer' which displays the
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews complete answer message to the last update.
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews1568. [bug] nsupdate now reports that the update failed in
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews interactive mode. [RT# 10236]
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews1566. [port] Support for the cmsg framework on Solaris and HP/UX.
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews This also solved the problem that match-destinations
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews for IPv6 addresses did not work on these systems.
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews1565. [bug] CD flag should be copied to outgoing queries unless
f408773d47b25594d1302525a4db6efb84b1843cMark Andrews the query is under a secure entry point in which case
f408773d47b25594d1302525a4db6efb84b1843cMark Andrews CD should be set.
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews1564. [func] Attempt to provide a fallback entropy source to be
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews used if named is running chrooted and named is unable
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews to open entropy source within the chroot area.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews1563. [bug] Gracefully fail when unable to obtain neither an IPv4
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews nor an IPv6 dispatch. [RT #10230]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews1562. [bug] isc_socket_create() and isc_socket_accept() could
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews leak memory under error conditions. [RT #10230]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews1561. [bug] It was possible to release the same name twice if
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews named ran out of memory. [RT #10197]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews and EAI_NONAME to the same value.
5888f62c204a99da60d7854fe01eda4960fb3b36Mark Andrews1559. [port] named should ignore SIGFSZ.
70b1afa5938c9bf2aed67f9d594161b905366426Jeremy C. Reed1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
fd23bc509d5fddb91247a2a1ca52d432969067e5Mark Andrews child zones for which we don't have a supported
7c200913aa7e55bbe28de456bb593c1e05bf6f79Mark Andrews algorithm. Such child zones are treated as unsigned.
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews1557. [func] Implement missing DNSSEC tests for
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews * NOQNAME proof with wildcard answers.
afd002e89aadf30181155566544480349e70339dMark Andrews * NOWILDARD proof with NXDOMAIN.
afd002e89aadf30181155566544480349e70339dMark Andrews Cache and return NOQNAME with wildcard answers.
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews1556. [bug] nsupdate now treats all names as fully qualified.
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews1555. [func] 'rrset-order cyclic' no longer has a random starting
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews point per query. [RT #7572]
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews1554. [bug] dig, host, nslookup failed when no nameservers
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews were specified in /etc/resolv.conf. [RT #8232]
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews1553. [bug] The windows socket code could stop accepting
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews connections. [RT#10115]
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews1552. [bug] Accept NOTIFY requests from mapped masters if
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews matched-mapped is set. [RT #10049]
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews1551. [port] Open "/dev/null" before calling chroot().
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews1550. [port] Call tzset(), if available, before calling chroot().
bf45f72ed319628eebce60c368177320943d001fMark Andrews1549. [func] named-checkzone can now write out the zone contents
bf45f72ed319628eebce60c368177320943d001fMark Andrews in a easily parsable format (-D and -o).
e078f002c06b6b26e2d7749a4f9e3907f3e85de3Mark Andrews1548. [bug] When parsing APL records it was possible to silently
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews accept out of range ADDRESSFAMILY values. [RT# 9979]
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews1547. [bug] Named wasted memory recording duplicate lame zone
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews entries. [RT #9341]
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews1546. [bug] We were rejecting valid secure CNAME to negative
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews1545. [bug] It was possible to leak memory if named was unable to
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews bind to the specified transfer source and TSIG was
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews being used. [RT #10120]
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews1544. [bug] Named would logged a single entry to a file despite it
fc8197c3ce31d81cd5e23703680572fac09a2e8aMark Andrews being over the specified size limit.
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews1543. [bug] Logging using "versions unlimited" did not work.
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews1542. [placeholder]
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews1541. [func] NSEC now uses new bitmap format.
4bb0f1046f3f3c26539ff91e28b3c8872519df17Mark Andrews1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews1539. [bug] Open UDP sockets for notify-source and transfer-source
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews that use reserved ports at startup. [RT #9475]
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews1538. [placeholder] rt9997
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews1537. [func] New option "querylog". If set specify whether query
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews logging is to be enabled or disabled at startup.
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews1536. [bug] Windows socket code failed to log a error description
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews when returning ISC_R_UNEXPECTED. [RT #9998]
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews1535. [placeholder]
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews1534. [bug] Race condition when priming cache. [RT# 9940]
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews1533. [func] Warn if both "recursion no;" and "allow-recursion"
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews are active. [RT# 4389]
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews1532. [port] netbsd: the configure test for <sys/sysctl.h>
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews1531. [port] AIX more libtool fixes.
63aaac8137bd1d86aab8c950fb066bb522a26e5bMark Andrews1530. [bug] It was possible to trigger a INSIST() failure if a
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews slave master file was removed at just the correct
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews moment. [RT #9462]
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews1529. [bug] "notify explicit;" failed to log that NOTIFY messages
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews were being sent for the zone. [RT# 9442]
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews1528. [cleanup] Simplify some dns_name_ functions based on the
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews deprecation of bitstring labels.
c58821f7100821e1d4e4bbace727b988bb3e0623Mark Andrews1527. [cleanup] Reduce the number of gettimeofday() calls without
c58821f7100821e1d4e4bbace727b988bb3e0623Mark Andrews losing necessary timer granularity.
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews1526. [func] Implemented "additional section caching (or acache)",
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews an internal cache framework for additional section
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews content to improve response performance. Several
f0a1b8c85792d4e04716f995a2b2a8ca73f8367dMark Andrews configuration options were provided to control the
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews1525. [bug] dns_cache_create() could trigger a REQUIRE
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews failure in isc_mem_put() during error cleanup.
7a253b705ccbc30821253e7a124658623f10c499Mark Andrews1524. [port] AIX needs to be able to resolve all symbols when
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews creating shared libraries (--with-libtool).
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews1523. [bug] Fix race condition in rbtdb. [RT# 9189]
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews1522. [bug] dns_db_findnode() relax the requirements on 'name'.
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews1521. [bug] dns_view_createresolver() failed to check the
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews result from isc_mem_create(). [RT# 9294]
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews1520. [protocol] Add SSHFP (SSH Finger Print) type.
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews length of the new bitmap.
aaa42824d2d1f5cc4add01f0191e3784ee0f7396Mark Andrews1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews contained a off-by-one error when working out the
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews number of octets in the bitmap.
c1297b6025bf8ccdc832b7bca705da1d4cf2944eMark Andrews1517. [port] Support for IPv6 interface scanning on HP/UX and
c1297b6025bf8ccdc832b7bca705da1d4cf2944eMark Andrews TrueUNIX 5.1.
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt1515. [func] Allow transfer source to be set in a server statement.
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt1514. [bug] named: isc_hash_destroy() was being called too early.
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews1513. [doc] Add "US" to root-delegation-only exclude list.
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews1512. [bug] Extend the delegation-only logging to return query
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews type, class and responding nameserver.
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews1511. [bug] delegation-only was generating false positives
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews on negative answers from sub-zones.
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews1510. [func] New view option "root-delegation-only". Apply
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews delegation-only check to all TLDs and root.
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews Note there are some TLDs that are NOT delegation
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews only (e.g. DE, LV, US and MUSEUM) these can be excluded
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews from the checks by using exclude.
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews root-delegation-only exclude {
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews "DE"; "LV"; "US"; "MUSEUM";
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews1509. [bug] Hint zones should accept delegation-only. Forward
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews zone should not accept delegation-only.
b130bf8b4ebdabd5c94eb5c6522a9971997b6ac9Mark Andrews1508. [bug] Don't apply delegation-only checks to answers from
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1507. [bug] Handle BIND 8 style returns to NS queries to parents
7a3c2d189e811933c48aace1900a868dffd42f5fMark Andrews when making delegation-only checks.
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews1506. [bug] Wrong return type for dns_view_isdelegationonly().
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews1504. [func] New zone type "delegation-only".
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews1503. [port] win32: install libeay32.dll outside of system32.
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews1501. [func] Allow TCP queue length to be specified via
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews named.conf, tcp-listen-queue.
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews1500. [bug] host failed to lookup MX records. Also look up
8c731c1219f1698f15bf5b1fcf6bc301cfd9bc42Mark Andrews AAAA records.
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews1499. [bug] isc_random need to be seeded better if arc4random()
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews is not used.
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews1498. [port] bsdos: 5.x support.
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews1497. [placeholder]
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews1496. [port] test for pthread_attr_setstacksize().
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews1495. [cleanup] Replace hash functions with universal hash.
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews1494. [security] Turn on RSA BLINDING as a precaution.
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews1493. [placeholder]
bde20a0436dff13e2299cfd4230ddec54d396d02Mark Andrews1492. [cleanup] Preserve rwlock quota context when upgrading /
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews downgrading. [RT #5599]
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews lines. [RT #6206]
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews1490. [bug] Accept reading state as well as working state in
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews ns_client_next(). [RT #6813]
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews1489. [compat] Treat 'allow-update' on slave zones as a warning.
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews1488. [bug] Don't override trust levels for glue addresses.
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews1487. [bug] A REQUIRE() failure could be triggered if a zone was
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews queued for transfer and the zone was then removed.
7228a4d9ca1f1b868e257a28de86c6a1f21e9ffeMark Andrews1486. [bug] isc_print_snprintf() '%%' consumed one too many format
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews characters. [RT# 8230]
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews1485. [bug] gen failed to handle high type values. [RT #6225]
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews1484. [bug] The number of records reported after a AXFR was wrong.
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews1483. [bug] dig axfr failed if the message id in the answer failed
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews to match that in the request. Only the id in the first
10fc76d48aa7ecb8a7242970585ba154b368f97eMark Andrews message is required to match. [RT #8138]
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews1482. [bug] named could fail to start if the kernel supports
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt IPv6 but no interfaces are configured. Similarly
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews for IPv4. [RT #6229]
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews1481. [bug] Refresh and stub queries failed to use masters keys
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews if specified. [RT #7391]
9baec3ca233efe8ffca6fbafea5c75021adff03cMark Andrews1480. [bug] Provide replay protection for rndc commands. Full
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews replay protection requires both rndc and named to
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews be updated. Partial replay protection (limited
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews exposure after restart) is provided if just named
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews1479. [bug] cfg_create_tuple() failed to handle out of
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews memory cleanup. parse_list() would leak memory
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews on syntax errors.
3d697a7eddf375586435f8fb6e1440fb3ce9058dMark Andrews1478. [port] ifconfig.sh didn't account for other virtual
8943ff626fa337419cbffad6a4a910c7d99509f4Mark Andrews interfaces. It now takes a optional argument
8943ff626fa337419cbffad6a4a910c7d99509f4Mark Andrews to specify the first interface number. [RT #3907]
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews1477. [bug] memory leak using stub zones and TSIG.
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews1476. [placeholder]
5cd4555ad444fd391002ae32450572054369fd42Rob Austein1475. [port] Probe for old sprintf().
8eb4eca37538183edb36db88580b5232f15931b0Mark Andrews1474. [port] Provide strtoul() and memmove() for platforms
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews without them.
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews1473. [bug] create_map() and create_string() failed to handle out
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews of memory cleanup. [RT #6813]
fa3d0b9991ea0d8344881c5dd4609d9c33314b9bMark Andrews1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
ed954ce73b1c712b24eab945190028871433f803Mark Andrews1471. [bug] libbind: updated to BIND 8.4.0.
ed954ce73b1c712b24eab945190028871433f803Mark Andrews1470. [bug] Incorrect length passed to snprintf. [RT #5966]
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews1469. [func] Log end of outgoing zone transfer at same level
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews as the start of transfer is logged. [RT #4441]
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews1468. [func] Internal zones are no longer counted for
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews 'rndc status'. [RT #4706]
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews1467. [func] $GENERATES now supports optional class and ttl.
8d709e3ee443222cd35e44eadc9a4c0a8d92fec2Rob Austein1466. [bug] lwresd configuration errors resulted in memory
8d709e3ee443222cd35e44eadc9a4c0a8d92fec2Rob Austein and lock leaks. [RT #5228]
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews failed to check that trailing bits were zero allowing
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews some invalid base64 strings to be accepted. [RT #5397]
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews1464. [bug] Preserve "out of zone" data for outgoing zone
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews transfers. [RT #5192]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews NXT bit maps. [RT #5577]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews1462. [bug] parse_sizeval() failed to check the token type.
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews1460. [bug] inet_pton() failed to reject certain malformed
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews IPv6 literals.
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews1459. [placeholder]
824cb6567555af556d0963d961798483d252eb5fMark Andrews1458. [cleanup] sprintf() -> snprintf().
824cb6567555af556d0963d961798483d252eb5fMark Andrews1457. [port] Provide strlcat() and strlcpy() for platforms without
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
58ea8fb1dfc8c055a7d4ad74d65e345436ede790Mark Andrews1455. [bug] <netaddr> missing from server grammar in
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews1454. [port] Use getifaddrs() if available for interface scanning.
6769ce7c7b38ae31887203aa1770692b3be92705Tatuya JINMEI 神明達哉 --disable-getifaddrs to override. Glibc currently
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews has a getifaddrs() that does not support IPv6.
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews Use --enable-getifaddrs=glibc to force the use of
f041bef2c60a092ab4dcae475451729a5345830fMark Andrews this version under linux machines.
a7dd5f21e996b01262a3d564dae9561cb3f8e717Mark Andrews1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
92d23165938a5e595f80b2e3fb5d8cb918ac7dacMark Andrews1452. [placeholder]
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews1451. [bug] rndc-confgen didn't exit with a error code for all
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews failures. [RT #5209]
289ae548d52bc8f982d9823af64cafda7bd92232Mark Andrews1450. [bug] Fetching expired glue failed under certain
4ccea866e64a8ec8525ad4bf7d57606bcd2fc15dMark Andrews circumstances. [RT #5124]
4cf228853d658a742a826393f341e2486c629f7bMark Andrews1449. [bug] query_addbestns() didn't handle running out of memory
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1448. [bug] Handle empty wildcards labels.
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews1447. [bug] We were casting (unsigned int) to and from (void *).
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews rdataset->private4 is now rdataset->privateuint4
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews to reflect a type change.
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews1446. [func] Implemented undocumented alternate transfer sources
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews from BIND 8. See use-alt-transfer-source,
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews alt-transfer-source and alt-transfer-source-v6.
92ff69c60001ed270248a6f38bafd2ae12d029beMark Andrews SECURITY: use-alt-transfer-source is ENABLED unless
a1210da03636eca13c70502a2b132ead22481b70Mark Andrews you are using views. This may cause a security risk
a1210da03636eca13c70502a2b132ead22481b70Mark Andrews resulting in accidental disclosure of wrong zone
ef54920b4c82a0ea41972d1dc21a0dc96fa791fbTatuya JINMEI 神明達哉 content if the master supplying different source
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews content based on IP address. If you are not certain
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews ISC recommends setting use-alt-transfer-source no;
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews been replaced with DNS_ADBFIND_STARTATZONE which
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews causes the search to start using the closest zone.
7c0946e74be897d02aaaf980ac146bcb500c2c8cMark Andrews1444. [func] dns_view_findzonecut2() allows you to specify if the
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews cache should be searched for zone cuts.
09cbf84907de2bd088b4ce8bd1307938bf0e81baMark Andrews1443. [func] Masters lists can now be specified and referenced
9e2789fd70b954df426b80301b62388497692481Mark Andrews in zone masters clauses and other masters lists.
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews1442. [func] New functions for manipulating port lists:
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews dns_portlist_create(), dns_portlist_add(),
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews dns_portlist_remove(), dns_portlist_match(),
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews dns_portlist_attach() and dns_portlist_detach().
8af4bf165e9a6aa111e0b6bfcbcc7f4a741a8ae5Mark Andrews1441. [func] It is now possible to tell dig to bind to a specific
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews source port.
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews1440. [func] It is now possible to tell named to avoid using
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews certain source ports (avoid-v4-udp-ports,
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews avoid-v6-udp-ports).
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews1439. [bug] Named could return NOERROR with certain NOTIFY
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews failures. Return NOTAUTH if the NOTIFY zone is
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews not being served.
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews1438. [func] Log TSIG (if any) when logging NOTIFY requests.
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews1437. [bug] Leave space for stdio to work in. [RT #5033]
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews1436. [func] dns_zonemgr_resumexfrs() can be used to restart
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews stalled transfers.
e3582ce43119a95448ccc06ea2586f6547c92967Mark Andrews1435. [bug] zmgr_resume_xfrs() was being called read locked
e3582ce43119a95448ccc06ea2586f6547c92967Mark Andrews rather than write locked. zmgr_resume_xfrs()
2952abf7cbbba6c6f821ee18579ca29d87549574Mark Andrews was not being called if the zone was being
efb82ed87e916c82b481bee4aa6651f2dbd4cedaMark Andrews1434. [bug] "rndc reconfig" failed to initiate the initial
7c693bfdbe488ca8fa4f0831c71f5809972f6cc7Mark Andrews zone transfer of new slave zones.
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews1433. [bug] named could trigger a REQUIRE failure if it could
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews not get a file descriptor when attempting to write
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews a master file. [RT #4347]
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews1432. [func] The advertised EDNS UDP buffer size can now be set
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews via named.conf (edns-udp-size).
2113dfd6e20a9ca16000ed226517b4660087c1f2Mark Andrews1431. [bug] isc_print_snprintf() "%s" with precision could walk off
2113dfd6e20a9ca16000ed226517b4660087c1f2Mark Andrews end of argument. [RT #5191]
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews1430. [port] linux: IPv6 interface scanning support.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1429. [bug] Prevent the cache getting locked to old servers.
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews1428. [placeholder]
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews1427. [bug] Race condition in adb with threaded build.
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews1426. [placeholder]
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews1425. [port] linux/libbind: define __USE_MISC when testing *_r()
6d453e1bb296e88732655f3d736e571eeaaca254Mark Andrews function prototypes in netdb.h. [RT #4921]
240e57ab983296e6d52031a594d3345728191b48Mark Andrews1424. [bug] EDNS version not being correctly printed.
cdb674387ca19dc8550553d90d8f9731befb6f1fMark Andrews1423. [contrib] queryperf: added A6 and SRV.
cdb674387ca19dc8550553d90d8f9731befb6f1fMark Andrews1422. [func] Log name/type/class when denying a query. [RT #4663]
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews1421. [func] Differentiate updates that don't succeed due to
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews prerequisites (unsuccessful) vs other reasons
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews1420. [port] solaris: work around gcc optimizer bug.
d4f5efb4d63e2e17081a49a3457f05fe06fbb5abMark Andrews1419. [port] openbsd: use /dev/arandom. [RT #4950]
e560f615b2592deea69c49bfc74acbb56f4fd913Mark Andrews1418. [bug] 'rndc reconfig' did not cause new slaves to load.
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews1417. [func] ID.SERVER/CHAOS is now a built in zone.
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews See "server-id" for how to configure.
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
f34249bb28093d6589196cd00ca040f503a65e2bMark Andrews1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
dbfc2232ef5b6e5572480070ab87a4d67c18aa39Mark Andrews from SOA MINIMUM.
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews1414. [func] Support for KSK flag.
393e4679cf4dd8bafb031d8a61ece95af61fbedcMark Andrews1413. [func] Explicitly request the (re-)generation of DS records
393e4679cf4dd8bafb031d8a61ece95af61fbedcMark Andrews from keysets (dnssec-signzone -g).
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews1412. [func] You can now specify servers to be tried if a nameserver
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews has IPv6 address and you only support IPv4 or the
67b1eee9dfde5ad86b54b2b768ff4d6b1354b651Mark Andrews reverse. See dual-stack-servers.
431fd1b0b5c3c049f9397ed4be8915715ead9cdbMark Andrews1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
cc7d91bd5c6b9be5a3c67a99112b885602c24873Mark Andrews1410. [func] Handle records that live in the parent zone, e.g. DS.
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews1408. [bug] "make distclean" was not complete. [RT #4700]
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews1407. [bug] lfsr incorrectly implements the shift register.
50d3f097d4c2779c8fb2397882d91e0cbca2c260Mark Andrews1406. [bug] dispatch initializes one of the LFSR's with a incorrect
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews polynomial. [RT #4617]
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews1405. [func] Use arc4random() if available.
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews dnssec-signkey now report their version in the
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews usage message.
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews1402. [cleanup] A6 has been moved to experimental and is no longer
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews fully supported.
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews1401. [bug] adb wasn't clearing state when the timer expired.
0b5d8941bb41edbe1296619485c16df536ecc05fMark Andrews1400. [bug] Block the addition of wildcard NS records by IXFR
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews or UPDATE. [RT #3502]
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews1399. [bug] Use serial number arithmetic when testing SIG
a34d19803a206febe10866394393ec1c09b28984Mark Andrews timestamps. [RT #4268]
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews1398. [doc] ARM: notify-also should have been also-notify.
2db8db63992d081c75d664340866e2a21913705dMark Andrews1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
2db8db63992d081c75d664340866e2a21913705dMark Andrews1396. [func] dnssec-signzone: adjust the default signing time by
2db8db63992d081c75d664340866e2a21913705dMark Andrews 1 hour to allow for clock skew.
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews have a working implementation. [RT #4079]
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews1394. [func] It is now possible to check if a particular element is
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews in a acl. Remove duplicate entries from the localnets
8626c376a038da969de1ee6c158957dfe638daacMark Andrews1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
c6ee5082db1e40ab64e08a540620da79996efa9cTatuya JINMEI 神明達哉 is not available in the kernel to prevent accidently
222dcab0a6456c5395545e885f21b5542b7d841dTatuya JINMEI 神明達哉 listening on IPv4 interfaces.
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews1392. [bug] named-checkzone: update usage.
f5a156fa25e6d341e703782de6368fbe9e256ddeTatuya JINMEI 神明達哉1391. [func] Add support for IPv6 scoped addresses in named.
78ff0e94eae96f2cf8bf94454d8ff01ba280d30dMark Andrews1390. [func] host now supports ixfr.
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews1389. [bug] named could fail to rotate long log files. [RT #3666]
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews defining HAVE_IFLIST_SYSCTL. [RT #3770]
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews1387. [bug] named could crash due to an access to invalid memory
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews space (which caused an assertion failure) in
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews incremental cleaning. [RT #3588]
d79296d147cd4c35784dd3efd7ed7f09d976ee61Mark Andrews1386. [bug] named-checkzone -z stopped on errors in a zone.
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews1385. [bug] Setting serial-query-rate to 10 would trigger a
46390a96dd5f15c9a0b3663bdb7791bdecec3052Mark Andrews REQUIRE failure.
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews1384. [bug] host was incompatible with BIND 8 in its exit code and
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews in the output with the -l option. [RT #3536]
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews1383. [func] Track the serial number in a IXFR response and log if
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews a mismatch occurs. This is a more specific error than
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews "not exact". [RT #3445]
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews1382. [bug] make install failed with --enable-libbind. [RT #3656]
5d51f534831bd648436d22e4faf203fb9abdf3d4Mark Andrews1381. [bug] named failed to correctly process answers that
5d51f534831bd648436d22e4faf203fb9abdf3d4Mark Andrews contained DNAME records where the resulting CNAME
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews resulted in a negative answer.
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews1380. [func] 'rndc recursing' dump recursing queries to
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews 'recursing-file = "named.recursing";'.
15bda409010cbf2d3e43baf10f28bae5f7b1abefMark Andrews1379. [func] 'rndc status' now reports tcp and recursion quota
b5205d860b1672c405c57004e6823af873799b42Mark Andrews1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
9a1e8f1baf3e5c53d6b6bfa97d7f60cb3358e404Mark Andrews1377. [func] dns_zone_load{new}() now reports if the zone was
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews loaded, queued for loading to up to date.
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews1376. [func] New function dns_zone_logc() to log to specified
12b1bf8b14ac3b6ec4de9cae6fea10f389b5e5dbMark Andrews1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews1374. [func] dns_adb_dump() now logs the lame zones associated
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews with each server.
529035492ea0a427cc8d007cd743934d4494d9d3Mark Andrews1373. [bug] Recovery from expired glue failed under certain
ff6bd86d5778de50cb1b4e93591e22354062ee17Mark Andrews circumstances.
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews1372. [bug] named crashes with an assertion failure on exit when
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews sharing the same port for listening and querying, and
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews changing listening addresses several times. [RT# 3509]
cd6d8d61b076eea02826596334a105b918393627Mark Andrews1371. [bug] notify-source-v6, transfer-source-v6 and
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews query-source-v6 with explicit addresses and using the
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews same ports as named was listening on could interfere
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews with named's ability to answer queries sent to those
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews1370. [bug] dig '+[no]recurse' was incorrectly documented.
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews1369. [bug] Adding an NS record as the lexicographically last
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews record in a secure zone didn't work.
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews1368. [func] remove support for bitstring labels.
5c45d30402af6860e1f66f5aa7d78dff58373b27Mark Andrews1367. [func] Use response times to select forwarders.
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews1365. [func] "localhost" and "localnets" acls now include IPv6
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews addresses / prefixes.
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews1364. [func] Log file name when unable to open memory statistics
7b68fa6229f1edadac44c7ec459c9ed77a8368c8Mark Andrews and dump database files. [RT# 3437]
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews1363. [func] Listen-on-v6 now supports specific addresses.
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews1362. [bug] remove IFF_RUNNING test when scanning interfaces.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1361. [func] log the reason for rejecting a server when resolving
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews1360. [bug] --enable-libbind would fail when not built in the
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews source tree for certain OS's.
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr1359. [security] Support patches OpenSSL libraries.
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews1358. [bug] It was possible to trigger a INSIST when debugging
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews large dynamic updates. [RT #3390]
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews1357. [bug] nsupdate was extremely wasteful of memory.
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins1356. [tuning] Reduce the number of events / quantum for zone tasks.
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
f19353d73186913a6e0f0f766c1f72e5f4c5e9e1Tatuya JINMEI 神明達哉1354. [doc] lwres man pages had illegal nroff.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1353. [contrib] sdb/ldap to version 0.9.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1352. [bug] dig, host, nslookup when falling back to TCP use the
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews current search entry (if any). [RT #3374]
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews1351. [bug] lwres_getipnodebyname() returned the wrong name
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews1350. [bug] dns_name_fromtext() failed to handle too many labels
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews1348. [port] win32: Rewrote code to use I/O Completion Ports
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews in socket.c and eliminating a host of socket
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews errors. Performance is enhanced.
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews1347. [placeholder]
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews1346. [placeholder]
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews1345. [port] Use a explicit -Wformat with gcc. Not all versions
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews include it in -Wall.
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews1344. [func] Log if the serial number on the master has gone
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews If you have multiple machines specified in the masters
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews clause you may want to set 'multi-master yes;' to
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews suppress this warning.
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews1343. [func] Log successful notifies received (info). Adjust log
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews level for failed notifies to notice.
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews1342. [func] Log remote address with TCP dispatch failures.
daba3af103617ce4dd49bfdd0d9e07df7f22d08dMark Andrews1341. [func] Allow a rate limiter to be stalled.
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews1340. [bug] Delay and spread out the startup refresh load.
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews lookups. Bit string lookups are no longer attempted.
d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews1338. [placeholder]
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews1337. [placeholder]
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews1336. [func] Nibble lookups under IP6.ARPA are now supported by
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews dns_byaddr_create(). dns_byaddr_createptrname() is
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews deprecated, use dns_byaddr_createptrname2() instead.
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews1335. [bug] When performing a nonexistence proof, the validator
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews should discard parent NXTs from higher in the DNS.
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews1334. [bug] When signing/verifying rdatasets, duplicate rdatas
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews need to be suppressed.
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews1333. [contrib] queryperf now reports a summary of returned
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews rcodes (-c), rcodes are printed in mnemonic form (-v).
25c18fded02c5df8391a333e90ea776b52bff079Mark Andrews1332. [func] Report the current serial with periodic commits when
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews rolling forward the journal.
7042126e8a10315255144989f7723f0510558928Mark Andrews1331. [func] Generate DNSSEC wildcard proofs.
5581e28ed8c05350ce6119230c223da60dafdbafMark Andrews1330. [bug] When processing events (non-threaded) only allow
2c4ae1d331c98beba03a337a58e9b44aec98d663Mark Andrews the task one chance to use to use its quantum.
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews1329. [func] named-checkzone will now check if nameservers that
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews appear to be IP addresses. Available modes "fail",
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews "warn" (default) and "ignore" the results of the
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1328. [bug] The validator could incorrectly verify an invalid
c4008fdd56a8045802ed125e40a06bf1df9b7fbeMark Andrews negative proof.
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews1327. [bug] The validator would incorrectly mark data as insecure
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews when seeing a bogus signature before a correct
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews1326. [bug] DNAME/CNAME signatures were not being cached when
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews validation was not being performed. [RT #3284]
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews1325. [bug] If the tcpquota was exhausted it was possible to
d00e58d4814b45c13434721b5771782e485dcb73Mark Andrews to trigger a INSIST() failure.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews1324. [port] darwin: ifconfig.sh now supports darwin.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews1322. [bug] dnssec-signzone usage message was misleading.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews would incorrectly duplicate its output and sign it.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1320. [doc] query-source-v6 was missing from options section.
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews1319. [func] libbind: log attempts to exploit #1318.
6e373c502584f9292e964378411d296c8259026bMark Andrews1318. [bug] libbind: Remote buffer overrun.
6e373c502584f9292e964378411d296c8259026bMark Andrews1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews element name.
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews1316. [bug] libbind: gethostans() could get out of sync parsing
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews the response if there was a very long CNAME chain.
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews1315. [bug] Options should apply to the internal _bind view.
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews1314. [port] Handle ECONNRESET from sendmsg() [unix].
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews1313. [func] Query log now says if the query was signed (S) or
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews if EDNS was used (E).
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews1312. [func] Log TSIG key used w/ outgoing zone transfers.
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews1310. [bug] 'rndc stop' failed to cause zones to be flushed
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews sometimes. [RT #3157]
d140ae28347065500e7efb1ebe884f1606f9ac7bMark Andrews1309. [func] Log that a zone transfer was covered by a TSIG.
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews1308. [func] DS (delegation signer) support.
cf029c9369548e598379490a039cfbc2b83527eeMark Andrews1307. [bug] nsupdate: allow white space base64 key data.
cf029c9369548e598379490a039cfbc2b83527eeMark Andrews1306. [bug] Badly encoded LOC record when the size, horizontal
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews precision or vertical precision was 0.1m.
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews1305. [bug] Document that internal zones are included in the
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews rndc status results.
c9eaf357a31ea5eaeeed24f2f4e800a6ef9512e0Mark Andrews1304. [func] New function: dns_zone_name().
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews1302. [func] Extended rndc dumpdb to support dumping of zones and
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews view selection: 'dumpdb [-all|-zones|-cache] [view]'.
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews1301. [func] New category 'update-security'.
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews1300. [port] Compaq Trucluster support.
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews1299. [bug] Set AI_ADDRCONFIG when looking up addresses
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews via getaddrinfo() (affects dig, host, nslookup, rndc
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews and nsupdate).
4ff0e3c8afbbbc30473701c47d75e1d7829bae3eMark Andrews1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
4ff0e3c8afbbbc30473701c47d75e1d7829bae3eMark Andrews could be left with a trailing "\" after configure
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed has been run.
9a33e2d135b0de7d2e2d768f2b9c45b2627fe4e6Mark Andrews1297. [port] linux: make handling EINVAL from socket() no longer
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews conditional on #ifdef LINUX.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1296. [bug] isc_log_closefilelogs() needed to lock the log
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews1295. [bug] isc_log_setdebuglevel() needed to lock the log
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews1294. [func] libbind: no longer attempts bit string labels for
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews IPv6 reverse resolution. Try IP6.ARPA then IP6.INT
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews for nibble style resolution.
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews1292. [func] Enable IPv6 support when using ioctl style interface
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews scanning and OS supports SIOCGLIFADDR using struct
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews if_laddrreq.
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews1291. [func] Enable IPv6 support when using sysctl style interface
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews1290. [func] "dig axfr" now reports the number of messages
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews as well as the number of records.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews reflect written requirements.
6178552326050b16f5706ee63c931e9388d74318Mark Andrews1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews a rdataset to a zone db in the rbtdb implementation of
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews addrdataset.
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews1286. [bug] dns_name_downcase() enforce requirement that
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews target != NULL or name->buffer != NULL.
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews1285. [func] lwres: probe the system to see what address families
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews are currently in use.
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews1284. [bug] The RTT estimate on unused servers was not aged.
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews1283. [func] Use "dataready" accept filter if available.
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews1282. [port] libbind: hpux 11.11 interface scanning.
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews1281. [func] Log zone when unable to get private keys to update
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews zone. Log zone when NXT records are missing from
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews secure zone.
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews1280. [bug] libbind: escape '(' and ')' when converting to
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews presentation form.
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews1278. [func] dig: now supports +[no]cl +[no]ttlid.
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews1277. [func] You can now create your own customized printing
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews styles: dns_master_stylecreate() and
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews dns_master_styledestroy().
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews1276. [bug] libbind: const pointer conflicts in res_debug.c.
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews1274. [bug] Memory leak in lwres_gnbarequest_parse().
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1273. [port] libbind: solaris: 64 bit binary compatibility.
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews1272. [contrib] Berkeley DB 4.0 sdb implementation from
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews1271. [bug] "recursion available: {denied,approved}" was too
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews1270. [bug] Check that system inet_pton() and inet_ntop() support
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews1269. [port] Openserver: ifconfig.sh support.
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews1268. [port] Openserver: the value FD_SETSIZE depends on whether
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews <sys/param.h> is included or not. Be consistent.
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews1267. [func] isc_file_openunique() now creates file using mode
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews 0666 rather than 0600.
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews are not C++ compatible, use *_TYPE versions instead.
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
57e4191a112bf57a1eab6d37212df2531b6f8a16Mark Andrews1264. [placeholder]
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews1263. [bug] Reference after free error if dns_dispatchmgr_create()
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
eba8a27e55258ee4470d7c3caa6bb3a335b9731eMark Andrews support for compressed TSIG owner names.
8af4e7aa4e2a6fe84bf4ebe09ca1d4ef1d8ab593Mark Andrews1260. [func] libbind: res_update can now update IPv6 servers,
8af4e7aa4e2a6fe84bf4ebe09ca1d4ef1d8ab593Mark Andrews new function res_findzonecut2().
d08c5dfcd4d1f69004c1382ffc00cc1848dcd1a3Mark Andrews1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews1258. [bug] libbind: res_nametotype() and res_nametoclass() were
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews1257. [bug] Failure to write pid-file should not be fatal on
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews reload. [RT #2861]
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
e24089c5c33f31a39cea0123765165fa31308343Tatuya JINMEI 神明達哉1255. [bug] When verifying that an NXT proves nonexistence, check
9547d3e03bb082d73aeabb497b60632ebfdc78a6Mark Andrews the rcode of the message and only do the matching NXT
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews check. That is, for NXDOMAIN responses, check that
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews the name is in the range between the NXT owner and
9547d3e03bb082d73aeabb497b60632ebfdc78a6Mark Andrews next name, and for NOERROR NODATA responses, check
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews that the type is not present in the NXT bitmap.
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews1254. [func] preferred-glue option from BIND 8.3.
7c61d798f54f7c19f87d46a0df775e0e58fe7d30Mark Andrews1253. [bug] The dnssec system test failed to remove the correct
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews1252. [bug] Dig, host and nslookup were not checking the address
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews the answer was coming from against the address it was
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews sent to. [RT# 2692]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1251. [port] win32: a make file contained absolute version specific
80a609bf44ee09766aeb9ae02cfbf7f9fe86dd83Mark Andrews1250. [func] Nsupdate will report the address the update was
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉1249. [bug] Missing masters clause was not handled gracefully.
bd5c8a564b21781fe6b608fe6a75c2e7152200acTatuya JINMEI 神明達哉1248. [bug] DESTDIR was not being propagated between makes.
85708f9aabbfe31fc648c90258ae18ce0edc3488Mark Andrews1247. [bug] Don't reset the interface index for link/site local
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews addresses. [RT #2576]
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews1246. [func] New functions isc_sockaddr_issitelocal(),
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
cae2cb086244dfb883739edbe79e34756079f70eMark Andrews and isc_netaddr_islinklocal().
cf0bcc2c80ca99f1e6e53dcdd0eba03fe70723dfMark Andrews1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1244. [bug] Receiving a TCP message from a blackhole address would
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews prevent further messages being received over that
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1243. [bug] It was possible to trigger a REQUIRE() in
6672b3524c2305d8c66d8189c774f549be352ac0Mark Andrews dns_message_findtype(). [RT #2659]
74f261bd2b7846d8e730ca3a1b28d6503de5c74aMark Andrews1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews1241. [bug] Drop received UDP messages with a zero source port
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews as these are invariably forged. [RT #2621]
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews1240. [bug] It was possible to leak zone references by
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews specifying an incorrect zone to rndc.
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews1239. [bug] Under certain circumstances named could continue to
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews use a name after it had been freed triggering
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews INSIST() failures. [RT #2614]
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews1238. [bug] It is possible to lockup the server when shutting down
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews if notifies were being processed. [RT #2591]
a268fec7f54a89a0772a91da0511c8eae09e6157Mark Andrews1237. [bug] nslookup: "set q=type" failed.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews NULL terminated text regions. [RT #2588]
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews1235. [func] Report 'out of memory' errors from openssl.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1234. [bug] contrib/sdb: 'zonetodb' failed to call
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews dns_result_register(). DNS_R_SEENINCLUDE should not
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews1233. [bug] The flags field of a KEY record can be expressed in
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews hex as well as decimal.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews1229. [bug] named would crash if it received a TSIG signed
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews query as part of an AXFR response. [RT #2570]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
a20e888bde4b307050d76e09266b2fb49f03bc30Mark Andrews if a number was expected and some other token was
a20e888bde4b307050d76e09266b2fb49f03bc30Mark Andrews found. [RT#2532]
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews1226. [func] Use EDNS for zone refresh queries. [RT #2551]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1225. [func] dns_message_setopt() no longer requires that
611ec5dd43d31fd6385f1a94c2f0865375f452b4Mark Andrews dns_message_renderbegin() to have been called.
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews1224. [bug] 'rrset-order' and 'sortlist' should be additive
01b8bc018d83e757b0578723977b0a71e1e626f8Mark Andrews not exclusive.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
8abe06b25d245ab2955d81525bfe6bd29b80908eMark Andrews are supported.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1222. [bug] Specifying 'port *' did not always result in a system
7755f5932a3e59d0c6a2506cc94519de92b91ca6Mark Andrews selected (non-reserved) port being used. [RT #2537]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
b5ad6dfea4cc3e7d1d322ac99f1e5a31096837c4Mark Andrews compared case insensitively. [RT #2542]
6e9efadbea9febb0494e713e54dfea6f7ef70383Mark Andrews1220. [func] Support for APL rdata type.
aa0f0779d1ea7150991c3e6eec1cc532086c13fdMark Andrews1219. [func] Named now reports the TSIG extended error code when
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews signature verification fails. [RT #1651]
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews1218. [bug] Named incorrectly returned SERVFAIL rather than
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
0563d476dea35a60a59857cc8bd26ef276d78799Mark Andrews1217. [func] Report locations of previous key definition when a
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews duplicate is detected.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1216. [bug] Multiple server clauses for the same server were not
0bb7c66ef8e3e8740cbac4a4de607060dfc4d6c8Mark Andrews reported. [RT #2514]
2b3e34f03675d6c71a654fe2094f3b9c063a70eaMark Andrews1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1214. [bug] Win32: isc_file_renameunique() could leave zero length
7216566bd596f8fbc98eafd5e9359ec7fa92c8b8Mark Andrews files behind.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1213. [func] Report view associated with client if it is not a
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews standard view (_default or _bind).
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1212. [port] libbind: 64k answer buffers were causing stack space
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews to be exceeded for certain OS. Use heap space instead.
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews1211. [bug] dns_name_fromtext() incorrectly handled certain
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews valid octal bitlabels. [RT #2483]
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews compatible addresses. [RT #2461]
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews1209. [bug] Dig, host, nslookup were not checking the message ids
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews on the responses. [RT #2454]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1208. [bug] dns_master_load*() failed to log a error message if
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews an error was detected when parsing the ownername of
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews a record. [RT #2448]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews an invalid pointer.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
ad226e3da3207fcb1dbb1054dd339dbbd19f507aMark Andrews trigger a non-EDNS retry.
9b80f3a7c739a99b498a37a711a51b6a88df3a78Mark Andrews1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews of the message. [RT #2449]
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews1204. [bug] libbind: res_nupdate() failed to update the name
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews server addresses before sending the update.
1425217e5c3a2cbab7f8344e600e0c16047289ffMark Andrews1203. [func] Report locations of previous acl and zone definitions
d4d68515d23668cfe804ab2a174a7e427decedd8Mark Andrews when a duplicate is detected.
e8e62bb7829e88fc56360f7edc021dc8493a8704Mark Andrews1202. [func] New functions: cfg_obj_line() and cfg_obj_file().
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1201. [bug] Require that if 'callbacks' is passed to
e7fb847ed570dd8c1bcdacabb3d69bd81feb79aeMark Andrews dns_rdata_fromtext(), callbacks->error and
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews callbacks->warn are initialized.
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews1200. [bug] Log 'errno' that we are unable to convert to
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews isc_result_t. [RT #2404]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews1198. [bug] OPT printing style was not consistent with the way the
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews header fields are printed. The DO bit was not reported
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews if set. Report if any of the MBZ bits are set.
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews1197. [bug] Attempts to define the same acl multiple times were not
81bdad57bd2c0c4b9a0684fe6e222ba95da625ecMark Andrews1196. [contrib] update mdnkit to 2.2.3.
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews1195. [bug] Attempts to redefine builtin acls should be caught.
3d247992c4a500caa7703edaee68612e545af602Mark Andrews1194. [bug] Not all duplicate zone definitions were being detected
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews at the named.conf checking stage. [RT #2431]
3d247992c4a500caa7703edaee68612e545af602Mark Andrews1193. [bug] dig +besteffort parsing didn't handle packet
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews truncation. dns_message_parse() has new flag
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews DNS_MESSAGE_IGNORETRUNCATION.
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews1192. [bug] The seconds fields in LOC records were restricted
cd5f6549b33bf2481538b77934d69313f452ff4bMark Andrews to three decimal places. More decimal places should
05331ce161276d879711342fadbc6144af7f5ba6Mark Andrews be allowed but warned about.
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews1191. [bug] A dynamic update removing the last non-apex name in
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews a secure zone would fail. [RT #2399]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews1189. [bug] On some systems, malloc(0) returns NULL, which
2fa0485e9e969dd42dd10339354d7949db46111aMark Andrews could cause the caller to report an out of memory
2fa0485e9e969dd42dd10339354d7949db46111aMark Andrews error. [RT #2398]
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews1188. [bug] Dynamic updates of a signed zone would fail if
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews some of the zone private keys were unavailable.
ef67e6d8fa86d98a2c0defc43b624434324d9ce7Mark Andrews1187. [bug] named was incorrectly returning DNSSEC records
841fc0fd70881499b62f15e35980dd14b905ba45Mark Andrews in negative responses when the DO bit was not set.
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews EOL token when reading to end of line.
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
afa3f2fab7144761bbf481b9d40d667529c6ec76Mark Andrews unless RES_INIT is set when calling res_*init().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when res_*init() is called.
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews1183. [bug] Handle ENOSR error when writing to the internal
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews control pipe. [RT #2395]
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews1182. [bug] The server could throw an assertion failure when
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews constructing a negative response packet.
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews1181. [func] Add the "key-directory" configuration statement,
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews which allows the server to look for online signing
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews keys in alternate directories.
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein1180. [func] dnssec-keygen should always generate keys with
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein protocol 3 (DNSSEC), since it's less confusing
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews1179. [func] Add SIG(0) support to nsupdate.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews1178. [bug] Follow and cache (if appropriate) A6 and other
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews data chains to completion in the additional section.
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews1177. [func] Report view when loading zones if it is not a
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews standard view (_default or _bind). [RT #2270]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1176. [doc] Document that allow-v6-synthesis is only performed
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews for clients that are supplied recursive service.
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews1175. [bug] named-checkzone and named-checkconf failed to call
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews dns_result_register() at startup which could
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews result in runtime exceptions when printing
d73541ea2eebe01cafc5ff1b2ba4b9a8f75237b1Mark Andrews "out of memory" errors. [RT #2335]
46cb442c5c53f16ece23bfe7f7f7bf44f78b0e46Mark Andrews1174. [bug] Win32: add WSAECONNRESET to the expected errors
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews from connect(). [RT #2308]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1173. [bug] Potential memory leaks in isc_log_create() and
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews isc_log_settag(). [RT #2336]
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews table of RR types in ARM.
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews1171. [func] Added function isc_region_compare(), updated files in
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews lib/dns to use this function instead of local one.
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews1170. [bug] Don't attempt to print the token when a I/O error
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews occurs when parsing named.conf. [RT #2275]
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews1169. [func] Identify recursive queries in the query log.
d9ec2891475b8ed894a524a83370cfce30328569Mark Andrews1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
6e8a8077faf96d8da0b6cf738913f5f1f86e4008Mark Andrews1167. [contrib] nslint-2.1a3 (from author).
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews1166. [bug] "Not Implemented" should be reported as NOTIMP,
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews not NOTIMPL. [RT #2281]
5a6874e4ed544186ccb8519765be8c3a1804e033Mark Andrews1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews1164. [bug] Empty masters clauses in slave / stub zones were not
2ab6dfca4b7432de4fb7da4cd21ee0e02a695c01Mark Andrews handled gracefully. [RT #2262]
c553b3308e34edfaddbec57b3308bbbe362ef715Mark Andrews1163. [func] isc_time_formattimestamp() now includes the year.
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews1162. [bug] The allow-notify option was not accepted in slave
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews zone statements.
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews1161. [bug] named-checkzone looped on unbalanced brackets.
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews1160. [bug] Generating Diffie-Hellman keys longer than 1024
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews bits could fail. [RT #2241]
cb2d565b507027f9e5664fa7e167bb24faa7c8fbMark Andrews1159. [bug] MD and MF are not permitted to be loaded by RFC1123.
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews1158. [func] Report the client's address when logging notify
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews1157. [func] match-clients and match-destinations now accept
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews keys. [RT #2045]
5d3083c4b5b11dfb653b15fd0eeb8e0cc9b175e0Mark Andrews1156. [port] The configure test for strsep() incorrectly
5d3083c4b5b11dfb653b15fd0eeb8e0cc9b175e0Mark Andrews succeeded on certain patched versions of
52188225731669cd571984c45a1407a55c74ee78Mark Andrews AIX 4.3.3. [RT #2190]
52188225731669cd571984c45a1407a55c74ee78Mark Andrews1155. [func] Recover from master files being removed from under
3cbc87c31f76262980d54ddbcdda7875be37b684Mark Andrews1154. [bug] Don't attempt to obtain the netmask of a interface
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews if there is no address configured. [RT #2176]
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews1153. [func] 'rndc {stop|halt} -p' now reports the process id
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews of the instance of named being shutdown.
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews1152. [bug] libbind: read buffer overflows.
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews1151. [bug] nslookup failed to check that the arguments to
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews the port, timeout, and retry options were
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews valid integers and in range. [RT #2099]
6d7007e807241ae0a32de8db8d3bf434626026eaMark Andrews1150. [bug] named incorrectly accepted TTL values
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews containing plus or minus signs, such as
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews1149. [func] New function isc_parse_uint32().
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews1148. [func] 'rndc-confgen -a' now provides positive feedback.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews the OS. listen-on-v6 { any; }; should no longer
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews result in IPv4 queries be accepted. Similarly
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews control { inet :: ... }; should no longer result
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews in IPv4 connections being accepted. This can be
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews overridden at compile time by defining
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews ISC_ALLOW_MAPPED=1.
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews supported by the OS by a new function
3d79c437d8cc10651b22601b55f4098b4cfe5979Mark Andrews isc_socket_ipv6only().
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews1145. [func] "host" no longer reports a NOERROR/NODATA response
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews by printing nothing. [RT #2065]
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews1144. [bug] rndc-confgen would crash if both the -a and -t
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews options were specified. [RT #2159]
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉1143. [bug] When a trusted-keys statement was present and named
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 was built without crypto support, it would leak memory.
6be278a81c24c6729aeaae4ba3a7ddd5030d8451Tatuya JINMEI 神明達哉1142. [bug] dnssec-signzone would fail to delete temporary files
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 in some failure cases. [RT #2144]
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews1141. [bug] When named rejected a control message, it would
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews leak a file descriptor and memory. It would also
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews fail to respond, causing rndc to hang.
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews [RT #2139, #2164]
073dfc245fd921958b1ccd869ed3471f828cf283Mark Andrews1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews to the -s option. [RT #2138]
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews1139. [func] It is now possible to flush a given name from the
65d64acb51b0655f04b165c8045d1aed556489abMark Andrews cache(s) via 'rndc flushname name [view]'. [RT #2051]
e9aca33f362d017fe0d5f7b729bce646038cf1eeMark Andrews1138. [func] It is now possible to flush a given name from the
28e36fcc1eea8b5283aa33d3a6d21d42df8fdaf2Mark Andrews cache by calling the new function
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews dns_cache_flushname().
2a2e9c7a1a8cded637be17f32dc1bbdef519ca81Mark Andrews1137. [func] It is now possible to flush a given name from the
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews ADB by calling the new function dns_adb_flushname().
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews1136. [bug] CNAME records synthesized from DNAMEs did not
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews have a TTL of zero as required by RFC2672.
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews1135. [func] You can now override the default syslog() facility for
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews named/lwresd at compile time. [RT #1982]
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews1134. [bug] Multi-threaded servers could deadlock in ferror()
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews when reloading zone files. [RT #1951, #1998]
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
70ba825728dc64439801981a1abe7f1e28182698Mark Andrews platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews1132. [func] Improve UPDATE prerequisite failure diagnostic messages.
8cd830d7c806cac681b057e0c0185f29992fa35fMark Andrews1131. [bug] The match-destinations view option did not work with
11b399514e4af7f370fe3948c3e3779a182ac5acMark Andrews IPv6 destinations. [RT #2073, #2074]
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews1130. [bug] Log messages reporting an out-of-range serial number
14a97c343bc3adb840b13d515a8298c18f15be52Mark Andrews did not include the out-of-range number but the
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews following token. [RT #2076]
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews1129. [bug] Multi-threaded servers could crash under heavy
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews resolution load due to a race condition. [RT #2018]
7087b3dc9298e85909df7a10f83bbd0588310f0cMark Andrews1128. [func] sdb drivers can now provide RR data in either text
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews or wire format, the latter using the new functions
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews dns_sdb_putrdata() and dns_sdb_putnamedrdata().
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews1127. [func] rndc: If the server to contact has multiple addresses,
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews try all of them.
7502c6600645f120434d84d0ce3df7c3585cfe43Mark Andrews1126. [bug] The server could access a freed event if shut
82572925f8942b599667bf47f22403f5dfd79ab9Mark Andrews down while a client start event was pending
cdb15282589682b664dfb70428a3c1750fe05250Mark Andrews delivery. [RT #2061]
c0a1ebb1adecc5da1f1ad6f9b06a2b4356d2b135Mark Andrews1125. [bug] rndc: -k option was missing from usage message.
4834c6a7f0054b8f4a8a267d60ef78204521e39eMark Andrews1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
f450814ab8989820a7bc9a2c484eb9f2c1c7b915Mark Andrews are now documented. [RT #2052]
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews1123. [bug] dig +[no]fail did not match description. [RT #2052]
0e93730a02a4cafbc5cdfaa04b2d813a0c11b205Mark Andrews1122. [tuning] Resolution timeout reduced from 90 to 30 seconds.
c04f4437ff8b2aba326e5099eae0cacb7de6f74bMark Andrews1121. [bug] The server could attempt to access a NULL zone
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews table if shut down while resolving.
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews [RT #1587, #2054]
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews1120. [bug] Errors in options were not fatal. [RT #2002]
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews1119. [func] Added support in Win32 for NTFS file/directory ACL's
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews for access control.
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews1118. [bug] On multi-threaded servers, a race condition
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews could cause an assertion failure in resolver.c
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews during resolver shutdown. [RT #2029]
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews1117. [port] The configure check for in6addr_loopback incorrectly
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews succeeded on AIX 4.3 when compiling with -O2
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews because the test code was optimized away.
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews1116. [bug] Setting transfers in a server clause, transfers-in,
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews or transfers-per-ns to a value greater than
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews 2147483647 disabled transfers. [RT #2002]
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews1115. [func] Set maximum values for cleaning-interval,
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews heartbeat-interval, interface-interval,
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews max-transfer-idle-in, max-transfer-idle-out,
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews max-transfer-time-in, max-transfer-time-out,
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews statistics-interval of 28 days and
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews sig-validity-interval of 3660 days. [RT #2002]
70e854766f5304f43e94212dc38ebaefe214148cMark Andrews1114. [port] Ignore more accept() errors. [RT #2021]
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews1113. [bug] The allow-update-forwarding option was ignored
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews when specified in a view. [RT #2014]
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews1112. [placeholder]
85bba08193debe026883d2d6bebbb0f7a01d7ba7Mark Andrews1111. [bug] Multi-threaded servers could deadlock processing
85bba08193debe026883d2d6bebbb0f7a01d7ba7Mark Andrews recursive queries due to a locking hierarchy
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews violation in adb.c. [RT #2017]
4091f8dfb71b78b53acd1b25f74e26c384750c03Mark Andrews1110. [bug] dig should only accept valid abbreviations of +options.
74ff5f080abdffa7823ff93da74969cd9fa25308Mark Andrews1109. [bug] nsupdate accepted illegal ttl values.
a10ae596379471b0dc76ebd8025d91bf2b90bafcMark Andrews1108. [bug] On Win32, rndc was hanging when named was not running
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews due to failure to select for exceptional conditions
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews in select(). [RT #1870]
c202b9f4dd7438252d77a4dd8936b7a051431a0bMark Andrews1107. [bug] nsupdate could catch an assertion failure if an
d844741f5516bce45f8897435342731edb2307cbMark Andrews invalid domain name was given as the argument to
53e8e0e27a3db745548a7989639b91d16f841c1fMark Andrews the "zone" command.
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews1106. [bug] After seeing an out of range TTL, nsupdate would
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews treat all TTLs as out of range. [RT #2001]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1105. [port] OpenUNIX 8 enable threads by default. [RT #1970]
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews1104. [bug] Invalid arguments to the transfer-format option
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews could cause an assertion failure. [RT #1995]
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews1102. [doc] Note that query logging is enabled by directing the
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews queries category to a channel.
e9a0e12b2b732285e00e0d9436961d0fe3655aa6Mark Andrews1101. [bug] Array bounds read error in lwres_gai_strerror.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1100. [bug] libbind: DNSSEC key ids were computed incorrectly.
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews compile time errors.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
4c8df3b2e8858e97debfe3fb771fe03f22b04d1eMark Andrews1097. [func] libbind: RES_PRF_TRUNC for dig.
6c52944ef2281095d1c317a45ea013b8f3cfa135Mark Andrews1096. [func] libbind: "DNSSEC OK" (DO) support.
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews1095. [func] libbind: resolver option: no-tld-query. disables
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews trying unqualified as a tld. no_tld_query is also
e021f388dfc2ac024a103def34818af73e7e869fMark Andrews supported for FreeBSD compatibility.
dd95acdbce0e2a2775391709cdfca0a9eda7e8f7Mark Andrews1094. [func] libbind: add support gcc's format string checking.
71e7ac828e9f4f2b124455b00c3d11560aa5d4c1Mark Andrews1093. [doc] libbind: miscellaneous nroff fixes.
1e6d80a391137b26e7250e72f6b28eb92c2b9952Mark Andrews1092. [bug] libbind: get*by*() failed to check if res_init() had
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews been called.
af4b677e0de9c4ce67a5187039681a58f73b86eaMark Andrews1091. [bug] libbind: misplaced va_end().
f34970d390482ceea61bd4d5bcd6ead7828157daMark Andrews1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
4d86cda3d7eb31578c9088c51a26643d43799533Mark Andrews the amount of memory consumed resulting in garbage
cbfce73e8e020c1d08c7be7b48a849d8333eb9bfMark Andrews address being returned. Alignment calculations were
84a5b69f0029952e33c96695f0a7d26c2bb8f7ccMark Andrews wasting space. We weren't suppressing duplicate
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews1089. [func] libbind: inet_{cidr,net}_{pton,ntop}() now have IPv6
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1088. [port] libbind: MPE/iX C.70 (incomplete)
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews1087. [bug] libbind: struct __res_state too large on 64 bit arch.
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews1086. [port] libbind: sunos: old sprintf.
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews1085. [port] libbind: solaris: sys_nerr and sys_errlist do not
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews exist when compiling in 64 bit mode.
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews1084. [cleanup] libbind: gai_strerror() rewritten.
fed3d5c2fc3fa8e1547e8b5c28c01f1095e17e5fMark Andrews1083. [bug] The default control channel listened on the
fed3d5c2fc3fa8e1547e8b5c28c01f1095e17e5fMark Andrews wildcard address, not the loopback as documented.
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews1082. [bug] The -g option to named incorrectly caused logging
21094b43a2dc4e1f569a9ed894f5369470cd1a7fMark Andrews to be sent to syslog in addition to stderr.
81e6a5849d61c2e710d628cf9a7b7282eaa88c46Mark Andrews1081. [bug] Multicast queries were incorrectly identified
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews based on the source address, not the destination
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews1080. [bug] BIND 8 compatibility: accept bare IP prefixes
cd0a7c71c0edd9540a7e917a2389a3ad0accc835Mark Andrews as the second element of a two-element top level
ad98a8699371c9c449982fbbd8ceda91ad745f2aMark Andrews sort list statement. [RT #1964]
c1807114ce574896694e3f449c73b098fe91730fMark Andrews1079. [bug] BIND 8 compatibility: accept bare elements at top
c1807114ce574896694e3f449c73b098fe91730fMark Andrews level of sort list treating them as if they were
c1807114ce574896694e3f449c73b098fe91730fMark Andrews a single element list. [RT #1963]
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews1078. [bug] We failed to correct bad tv_usec values in one case.
055597532db52233e80f617b8b015e8caadcb577Mark Andrews1077. [func] Do not accept further recursive clients when
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews the total number of recursive lookups being
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews processed exceeds max-recursive-clients, even
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews if some of the lookups are internally generated.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews [RT #1915, #1938]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews1076. [bug] A badly defined global key could trigger an assertion
055597532db52233e80f617b8b015e8caadcb577Mark Andrews on load/reload if views were used. [RT #1947]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews1075. [bug] Out-of-range network prefix lengths were not
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews reported. [RT #1954]
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews1074. [bug] Running out of memory in dump_rdataset() could
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews cause an assertion failure. [RT #1946]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews1073. [bug] The ADB cache cleaning should also be space driven.
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews [RT #1915, #1938]
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews1072. [bug] The TCP client quota could be exceeded when
9076b18608d8e5cfff8fac54ef82853371fdd0d6Mark Andrews recursion occurred. [RT #1937]
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews1071. [bug] Sockets listening for TCP DNS connections
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews specified an excessive listen backlog. [RT #1937]
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews1070. [bug] Copy DNSSEC OK (DO) to response as specified by
3c20ae76389dd7bd2fbbb5145f51fe7f72f97f14Mark Andrews1069. [placeholder]
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews1068. [bug] errno could be overwritten by catgets(). [RT #1921]
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews1067. [func] Allow quotas to be soft, isc_quota_soft().
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews1066. [bug] Provide a thread safe wrapper for strerror().
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews1065. [func] Runtime support to select new / old style interface
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews scanning using ioctls.
5ec95dc3cbba160d03be874941930bdf3e515bbdMark Andrews1064. [bug] Do not shut down active network interfaces if we
31affb2ca39c483670ba71042ce4c984ac257232Mark Andrews are unable to scan the interface list. [RT #1921]
aeb33b58e1979b716d1eb0521df8bc3a0aa41a52Mark Andrews1063. [bug] libbind: "make install" was failing on IRIX.
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews1062. [bug] If the control channel listener socket was shut
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews down before server exit, the listener object could
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews be freed twice. [RT #1916]
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews1061. [bug] If periodic cache cleaning happened to start
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews while cleaning due to reaching the configured
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews maximum cache size was in progress, the server
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews could catch an assertion failure. [RT #1912]
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews1060. [func] Move refresh, stub and notify UDP retry processing
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews into dns_request.
ca155b13211202a6195b5a0f085aff06075c4300Mark Andrews1059. [func] dns_request now support will now retry UDP queries,
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews dns_request_createvia2() and dns_request_createraw2().
4b030f887e5e51c00dac499682d0b5b870ece45bMark Andrews1058. [func] Limited lifetime ticker timers are now available,
110fbe3a1315b38f1491546d82937a01c40f5fdbMark Andrews isc_timertype_limited.
561863ed947f18c8bfcaa631ad83a6bee3b7200bMark Andrews1057. [bug] Reloading the server after adding a "file" clause
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews to a zone statement could cause the server to
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews crash due to a typo in change 1016.
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews1056. [bug] Rndc could catch an assertion failure on SIGINT due
7a1cba6262f099aa5ecf9ed4db9c0345489653ccMark Andrews to an uninitialized variable. [RT #1908]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1055. [func] Version and hostname queries can now be disabled
bce2d35b4879d7878e339a9c60db9364508e38fdMark Andrews using "version none;" and "hostname none;",
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews respectively.
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews1054. [bug] On Win32, cfg_categories and cfg_modules need to be
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews exported from the libisccfg DLL.
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews1053. [bug] Dig did not increase its timeout when receiving
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews AXFRs unless the +time option was used. [RT #1904]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews1052. [bug] Journals were not being created in binary mode
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews resulting in "journal format not recognized" error
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews under Win32. [RT #1889]
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews1051. [bug] Do not ignore a network interface completely just
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews because it has a noncontiguous netmask. Instead,
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt omit it from the localnets ACL and issue a warning.
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews1050. [bug] Log messages reporting malformed IP addresses in
41be71bae48846d9525be6f71e19944e34748e26Mark Andrews address lists such as that of the forwarders option
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews failed to include the correct error code, file
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews name, and line number. [RT #1890]
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews1049. [func] "pid-file none;" will disable writing a pid file.
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews1048. [bug] Servers built with -DISC_MEM_USE_INTERNAL_MALLOC=1
4f32995bf6af48ab410b6d14b160348f5ffe0556Mark Andrews didn't work.
a4743d3d26c4dde69b80fd69bca83e0c28063425Mark Andrews1047. [bug] named was incorrectly refusing all requests signed
817a7fb62d05222fb287bbcde910ab3669f6d237Mark Andrews with a TSIG key derived from an unsigned TKEY
ac86cff0d7ff2108cd7ace66697e2de104735496Mark Andrews negotiation with a NOERROR response. [RT #1886]
2a71a21346ce6a098b7daf98358d5bdced8e6eb6Mark Andrews1046. [bug] The help message for the --with-openssl configure
8147940ae7a7280ba12dd35614b9c987b38363faMark Andrews option was inaccurate. [RT #1880]
a90cf89180ae8d9dfd281288cdc75940e46bfdd0Mark Andrews1045. [bug] It was possible to skip saving glue for a nameserver
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews for a stub zone.
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews1044. [bug] Specifying allow-transfer, notify-source, or
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews notify-source-v6 in a stub zone was not treated
9cc53f2a0819301c2de7ab93197eee11e8a365e7Mark Andrews1043. [bug] Specifying a transfer-source or transfer-source-v6
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews option in the zone statement for a master zone was
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews not treated as an error. [RT #1876]
207f0a15bb486d8dc27cf5ff963fac6068ee2972Mark Andrews1042. [bug] The "config" logging category did not work properly.
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews1041. [bug] Dig/host/nslookup could catch an assertion failure
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews on SIGINT due to an uninitialized variable. [RT #1867]
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews1040. [bug] Multiple listen-on-v6 options with different ports
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews were not accepted. [RT #1875]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1039. [bug] Negative responses with CNAMEs in the answer section
5639d60b40db2051eb7e737d86635c621ffbfa12Mark Andrews were cached incorrectly. [RT #1862]
689023771c563d8660e45d439a207e06e96de28fMark Andrews1038. [bug] In servers configured with a tkey-domain option,
689023771c563d8660e45d439a207e06e96de28fMark Andrews TKEY queries with an owner name other than the root
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews could cause an assertion failure. [RT #1866, #1869]
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews1037. [bug] Negative responses whose authority section contain
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews SOA or NS records whose owner names are not equal
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews equal to or parents of the query name should be
3a1d86e8f51c953c2407e112e15b47328b6ee4feMark Andrews rejected. [RT #1862]
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews1036. [func] Silently drop requests received via multicast as
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉 long as there is no final multicast DNS standard.
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉1035. [bug] If we respond to multicast queries (which we
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉 currently do not), respond from a unicast address
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews as specified in RFC 1123. [RT #137]
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews1034. [bug] Ignore the RD bit on multicast queries as specified
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews in RFC 1123. [RT #137]
7f2a6b0ef762b4cef9b0b2b59e7f44e4d2d4d32dMark Andrews1033. [bug] Always respond to requests with an unsupported opcode
e37dff26c6bb6e2ffbba7b089ca3599d5e3e04fbMark Andrews with NOTIMP, even if we don't have a matching view
b712879fcb6d584bb16b3f39ec1fb6ee176e4a03Mark Andrews or cannot determine the class.
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews1032. [func] hostname.bind/txt/chaos now returns the name of
f697150aefb5d64e5bed4111aa2596a268ee8848Mark Andrews the machine hosting the nameserver. This is useful
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt in diagnosing problems with anycast servers.
9baab4b1a8a5a54c04e47742c7b48311d5575a87Mark Andrews1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
c0d2891f6e08fcf5379dfb9a1bf8fbbb63f1952aMark Andrews1030. [bug] On systems with no resolv.conf file, nsupdate
c0d2891f6e08fcf5379dfb9a1bf8fbbb63f1952aMark Andrews exited with an error rather than defaulting
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews to using the loopback address. [RT #1836]
cb75f7ce19e11e3dfedee5a50a331bf53cd2c36bMark Andrews1029. [bug] Some named.conf errors did not cause the loading
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews of the configuration file to return a failure
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews status even though they were logged. [RT #1847]
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews1028. [bug] On Win32, dig/host/nslookup looked for resolv.conf
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews in the wrong directory. [RT #1833]
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews1027. [bug] RRs having the reserved type 0 should be rejected.
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews1026. [placeholder]
fbdadf789f3057a5c90ebc026dbf2d174022bd28Rob Austein1025. [bug] Don't use multicast addresses to resolve iterative
1672cff96d0b02badab6f94524e10285dde851fcMark Andrews queries. [RT #101]
e9f33cdca0565d049941117d30e4c37ab3c5e990Mark Andrews1024. [port] Compilation failed on HP-UX 11.11 due to
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews incompatible use of the SIOCGLIFCONF macro
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews name. [RT #1831]
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews1023. [func] Accept hints without TTLs.
9aa7706900e2451fcd6e44ffe4a45b042ec34cf3Mark Andrews1022. [bug] Don't report empty root hints as "extra data".
c4f9e613e12f03795bee18cf2ca8e6a9d39d6468Mark Andrews1021. [bug] On Win32, log message timestamps were one month
3b2032121d6e8ae1f4ad24b31a69e1a4b33c91a0Mark Andrews later than they should have been, and the server
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews would exhibit unspecified behavior in December.
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews1020. [bug] IXFR log messages did not distinguish between
65356eb978747c5e68d4c6b3909642cebb8479f8Mark Andrews true IXFRs, AXFR-style IXFRs, and mere version
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews polls. [RT #1811]
7de69feda2f66658ce66a8700d64ffb88d47bb6aMark Andrews1019. [bug] The value of the lame-ttl option was limited to 18000
7de69feda2f66658ce66a8700d64ffb88d47bb6aMark Andrews seconds, not 1800 seconds as documented. [RT #1803]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews1018. [bug] The default log channel was not always initialized
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews correctly. [RT #1813]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews1017. [bug] When specifying TSIG keys to dig and nsupdate using
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews the -k option, they must be HMAC-MD5 keys. [RT #1810]
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews1016. [bug] Slave zones with no backup file were re-transferred
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews on every server reload.
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews1015. [bug] Log channels that had a "versions" option but no
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews "size" option failed to create numbered log
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews files. [RT #1783]
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews1014. [bug] Some queries would cause statistics counters to
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews increment more than once or not at all. [RT #1321]
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews1013. [bug] It was possible to cancel a query twice when marking
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews a server as bogus or by having a blackhole acl.
1bf8f4b77df1e1f8c1ce8326679ab02bac235c09Mark Andrews1012. [bug] The -p option to named did not behave as documented.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt1011. [cleanup] Removed isc_dir_current().
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews1010. [bug] The server could attempt to execute a command channel
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews command after initiating server shutdown, causing
32c7aa3dd18d57979990574ddb008437b59c2428Rob Austein an assertion failure. [RT #1766]
358043e40fd0c1fe312e25c28a771aafc3bd7b79Mark Andrews1009. [port] OpenUNIX 8 support. [RT #1728]
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews1008. [port] libtool.m4, ltmain.sh from libtool-1.4.2.
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews1007. [port] config.guess, config.sub from autoconf-2.52.
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews1006. [bug] If a KEY RR was found missing during DNSSEC validation,
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews an assertion failure could subsequently be triggered
a5e055b9d8bc42b0e29d88960ed2a5c531fa5acbRob Austein in the resolver. [RT #1763]
3d8dfd44a3be708f00380064411c16b2fa28303aMark Andrews1005. [bug] Don't copy nonzero RCODEs from request to response.
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews1004. [port] Deal with recvfrom() returning EHOSTDOWN. [RT #1770]
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews1003. [func] Add the +retry option to dig.
eeac8cfcd3ad738b435ad82fcd5c6387da643f90Mark Andrews1002. [bug] When reporting an unknown class name in named.conf,
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews including the file name and line number. [RT #1759]
d1ef96c5fb81b1edbede4228480848b58e48799eMark Andrews1001. [bug] win32 socket code doio_recv was not catching a
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews WSACONNRESET error when a client was timing out
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews the request and closing its socket. [RT #1745]
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews1000. [bug] BIND 8 compatibility: accept "HESIOD" as an alias
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews for class "HS". [RT #1759]
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews 999. [func] "rndc retransfer zone [class [view]]" added.
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews 998. [func] named-checkzone now has arguments to specify the
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews chroot directory (-t) and working directory (-w).
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews 997. [func] Add support for RSA-SHA1 keys (RFC3110).
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews 996. [func] Issue warning if the configuration filename contains
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews the chroot path.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews 995. [bug] dig, host, nslookup: using a raw IPv6 address as a
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews target address should be fatal on a IPv4 only system.
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews 994. [func] Treat non-authoritative responses to queries for type
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews NS as referrals even if the NS records are in the
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews answer section, because BIND 8 servers incorrectly
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews send them that way. This is necessary for DNSSEC
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews validation of the NS records of a secure zone to
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews succeed when the parent is a BIND 8 server. [RT #1706]
1c52f228e9e2d8784273b7af76794031e480e5e8Mark Andrews 993. [func] dig: -v now reports the version.
ea0b0c283be744d8b5810927b9981a9afe2f900dMark Andrews 992. [doc] dig: ~/.digrc is now documented.
c315e5cfead876251ee4ff5600ee67303b2729a4Mark Andrews 991. [func] Lower UDP refresh timeout messages to level
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews 990. [bug] The rndc-confgen man page was not installed.
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews 989. [bug] Report filename if $INCLUDE fails for file related
c52d94fa4b7eaf8b7be9dfda15f9fc2c01041d51Mark Andrews errors. [RT #1736]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 988. [bug] 'additional-from-auth no;' did not work reliably
e94cf7074d8ac30820a715211ae914387996cca9Mark Andrews in the case of queries answered from the cache.
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews 987. [bug] "dig -help" didn't show "+[no]stats".
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 986. [bug] "dig +noall" failed to clear stats and command
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews 985. [func] Consider network interfaces to be up iff they have
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews a nonzero IP address rather than based on the
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews IFF_UP flag. [RT #1160]
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews 984. [bug] Multi-threading should be enabled by default on
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews Solaris 2.7 and newer, but it wasn't.
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews 983. [func] The server now supports generating IXFR difference
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews sequences for non-dynamic zones by comparing zone
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews versions, when enabled using the new config
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews option "ixfr-from-differences". [RT #1727]
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews 982. [func] If "memstatistics-file" is set in options the memory
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews statistics will be written to it.
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews 981. [func] The dnssec tools can now take multiple '-r randomfile'
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 980. [bug] Incoming zone transfers restarting after an error
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews could trigger an assertion failure. [RT #1692]
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews 979. [func] Incremental master file dumping. dns_master_dumpinc(),
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews dns_master_dumptostreaminc(), dns_dumpctx_attach(),
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews dns_dumpctx_detach(), dns_dumpctx_cancel(),
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews dns_dumpctx_db() and dns_dumpctx_version().
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews 978. [bug] dns_db_attachversion() had an invalid REQUIRE()
74def1c9c1880480bb62eb881e8a7ce28f9f7a20Mark Andrews 977. [bug] Improve "not at top of zone" error message.
5efa612be0471cc4e133b795db3dd3addf18ba6cMark Andrews 976. [func] named-checkconf can now test load master zones
da059d6dd4035c1f4736e7978065c4d51893b136Mark Andrews (named-checkconf -z). [RT #1468]
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews 975. [bug] "max-cache-size default;" as a view option
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews caused an assertion failure.
d9147148dde80db2ce3390ded26333d106d3c10bTatuya JINMEI 神明達哉 974. [bug] "max-cache-size unlimited;" as a global option
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉 was not accepted.
75654de87118c587629b5dc6882b6c1925d34983Tatuya JINMEI 神明達哉 973. [bug] Failed to log the question name when logging:
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt "bad zone transfer request: non-authoritative zone
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 972. [bug] The file modification time code in zone.c was using the
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews wrong epoch. [RT #1667]
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews 971. [placeholder]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 970. [func] 'max-journal-size' can now be used to set a target
445acbbea8bd5143749e97a8ff247a808321aa6cMark Andrews size for a journal.
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews 969. [func] dig now supports the undocumented dig 8 feature
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews of allowing arbitrary labels, not just dotted
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews decimal quads, with the -x option. This can be
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews used to conveniently look up RFC2317 names as in
b9625d9be5d89015b75cc7c25088a8d1a3bb7655Mark Andrews "dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews 968. [bug] On win32, the isc_time_now() function was unnecessarily
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉 calling strtime(). [RT #1671]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 967. [bug] On win32, the link for bindevt was not including the
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉 required resource file to enable the event viewer
3dc3d557be91d59317b34fc5a9ae79b1925d5878Mark Andrews to interpret the error messages in the event log,
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 966. [placeholder]
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews 965. [bug] Including data other than root server NS and A
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews records in the root hint file could cause a rbtdb
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews node reference leak. [RT #1581, #1618]
5ed76fa7ea83d3ce7a33d365aa3b84410c3b8773Mark Andrews 964. [func] Warn if data other than root server NS and A records
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews are found in the root hint file. [RT #1581, #1618]
ad3b537a241f40bbb3fdc4de252881c42645021bMark Andrews 963. [bug] Bad ISC_LANG_ENDDECLS. [RT #1645]
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews 962. [bug] libbind: bad "#undef", don't attempt to install
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews non-existent nlist.h. [RT #1640]
de6ceebf98bedee0b1e1e81d078befbd728b801cMark Andrews 961. [bug] Tried to use a IPV6 feature when ISC_PLATFORM_HAVEIPV6
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews was not defined. [RT #1482]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews 960. [port] liblwres failed to build on systems with support for
ed6e3610e3e56aac554dc93cad461a0016e961f9Mark Andrews getrrsetbyname() in the OS. [RT #1592]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 959. [port] On FreeBSD, determine the number of CPUs by calling
c3c72c1033b9d085b1a1fe74a9e3efb6db724ce2Mark Andrews sysctlbyname(). [RT #1584]
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews 958. [port] ssize_t is not available on all platforms. [RT #1607]
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews 957. [bug] sys/select.h inclusion was broken on older platforms.
46ed893dd0c8096d2bcbf31e6dcf79b2786e7b7fMark Andrews 956. [bug] ns_g_autorndcfile changed to ns_g_keyfile
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews in named/win32/os.c due to code changes in
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews change #953. win32 .make file for rndc-confgen
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews updated to add include path for os.h header.
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews --- 9.2.0rc1 released ---
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews 955. [bug] When using views, the zone's class was not being
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews inherited from the view's class. [RT #1583]
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews 954. [bug] When requesting AXFRs or IXFRs using dig, host, or
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews nslookup, the RD bit should not be set as zone
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt transfers are inherently non-recursive. [RT #1575]
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 953. [func] The /var/run/named.key file from change #843
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews has been replaced by /etc/rndc.key. Both
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews named and rndc will look for this file and use
e1f638a7141a4c1364e4ca45025241c9e2fecf74Mark Andrews it to configure a default control channel key
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews if not already configured using a different
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews method (rndc.conf / controls). Unlike
fb827ed6df9a473770fb69a75a455b4ad0d14f52Mark Andrews named.key, rndc.key is not created automatically;
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews it must be created by manually running
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews "rndc-confgen -a".
154bd87b5c9d603329dd691b822525c6885f21d4Mark Andrews 952. [bug] The server required manual intervention to serve the
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews affected zones if it died between creating a journal
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt and committing the first change to it.
cf7432f74761107ac3cbafadc524b5d650919fedMark Andrews 951. [bug] CFLAGS was not passed to the linker when
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews linking some of the test programs under
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews 950. [bug] Explicit TTLs did not properly override $TTL
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews due to a bug in change 834. [RT #1558]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews 949. [bug] host was unable to print records larger than 512
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews bytes. [RT #1557]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews --- 9.2.0b2 released ---
7d4a465de03b26bf9f5ef131d03253b8f6afc169Mark Andrews 948. [port] Integrated support for building on Windows NT /
7d4a465de03b26bf9f5ef131d03253b8f6afc169Mark Andrews Windows 2000.
39e5cab80a2abc95ca034ac79ea3f973fc66f5b3Mark Andrews 947. [bug] dns_rdata_soa_t had a badly named element "mname" which
0b9af9eb37f624033652f6cc463262474ee13344Mark Andrews was really the RNAME field from RFC1035. To avoid
85315eb5361d92ba034cecc26c3526e121392386Mark Andrews confusion and silent errors that would occur it the
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews "origin" and "mname" elements were given their correct
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews names "mname" and "rname" respectively, the "mname"
ead4d2d676b12a856769d3750861c6efbb95f709Mark Andrews element is renamed to "contact".
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews 946. [cleanup] doc/misc/options is now machine-generated from the
bdb609f5874056f6f1cd212ebf8700132e683fe5Mark Andrews configuration parser syntax tables, and therefore
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews more likely to be correct.
bae21f249ead77e442a025b9b18d90e21ebf72ceMark Andrews 945. [func] Add the new view-specific options
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt "match-destinations" and "match-recursive-only".
7f5a3cea4e93ad683b13ebef8a6589afd97fb762Mark Andrews 944. [func] Check for expired signatures on load.
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews 943. [bug] The server could crash when receiving a command
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews via rndc if the configuration file listed only
50105afc551903541608b11851d73278b23579a3Mark Andrews nonexistent keys in the controls statement. [RT #1530]
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews 942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews defined on some platforms.
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews 941. [bug] The configuration checker crashed if a slave
ad35e0aec9dae18ee31e760beab1602f7eb4ef05Mark Andrews zone didn't contain a masters statement. [RT #1514]
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews 940. [bug] Double zone locking failure on error path. [RT #1510]
9c8fb5f756d99a4ecba95df9a00757384f3b71b7Mark Andrews --- 9.2.0b1 released ---
fa7ee558e0536a94bfdb154a7c7ba298535459c4Mark Andrews 939. [port] Add the --disable-linux-caps option to configure for
d81018ac98b287438248cd0e3a1c230eb40b0b55Mark Andrews systems that manage capabilities outside of named.
7436bb66c610c039ca3dec12aac5024037898910Mark Andrews 938. [placeholder]
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews 937. [bug] A race when shutting down a zone could trigger a
e9964e7db4467722300c0d7d52ec1d7a51a784c1Mark Andrews INSIST() failure. [RT #1034]
50105afc551903541608b11851d73278b23579a3Mark Andrews 936. [func] Warn about IPv4 addresses that are not complete
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews dotted quads. [RT #1084]
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews 935. [bug] inet_pton failed to reject leading zeros.
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews 934. [port] Deal with systems where accept() spuriously returns
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews 933. [bug] configure failed doing libbind on platforms not
3ad4e307b64bcf8baa984e10a4e7549dbeaea31dMark Andrews supported by BIND 8. [RT #1496]
3f08fb69eb3b5f6eaa3c57160dff0998e1569283Mark Andrews --- 9.2.0a3 released ---
91c79af4755df2d892511512e0fc886639518a92Mark Andrews 932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt when installing isc-config.sh.
bf74532c942054bccc3df5227009ce52063a9dafMark Andrews [RT #198, #1466]
2558e3f25d4972a028c99141bd26d3f3087630d5Mark Andrews 931. [bug] The controls statement only attempted to verify
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews messages using the first key in the key list.
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews (9.2.0a1/a2 only).
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews 930. [func] Query performance testing tool added as
902aebfb5ad7c735f74f700da288dc4519b83123Mark Andrews 929. [placeholder]
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews 928. [bug] nsupdate would send empty update packets if the
0e4f7c9d4e1a4bb66f0702e9f9975c392a15918bMark Andrews send (or empty line) command was run after
7554feaef6057f5ea2926076900ac7634b911456Mark Andrews another send but before any new updates or
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews prerequisites were specified. It should simply
dbc4666b1b153775001613af160541da986429b2Mark Andrews ignore this command.
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews 927. [bug] Don't hold the zone lock for the entire dump to disk.
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews 926. [bug] The resolver could deadlock with the ADB when
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews shutting down (multi-threaded builds only).
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 925. [cleanup] Remove openssl from the distribution; require that
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews --with-openssl be specified if DNSSEC is needed.
f7e94169a9814c8e7d2ac8ac62bf0ccafb5a2cb6Mark Andrews 924. [port] Extend support for pre-RFC2133 IPv6 implementation.
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews 923. [bug] Multiline TSIG secrets (and other multiline strings)
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews were not accepted in named.conf. [RT #1469]
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews 922. [func] Added two new lwres_getrrsetbyname() result codes,
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews ERR_NONAME and ERR_NODATA.
6bd3b1fdb3915931ac158b2126fae35711bd0b26Mark Andrews 921. [bug] lwres returned an incorrect error code if it received
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews a truncated message.
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews 920. [func] Increase the lwres receive buffer size to 16K.
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews 919. [placeholder]
ea40cebe2b51bd2b3c228ac6d08a3cfeca17960aMark Andrews 918. [func] In nsupdate, TSIG errors are no longer treated as
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews fatal errors.
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews 917. [func] New nsupdate command 'key', allowing TSIG keys to
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews be specified in the nsupdate command stream rather
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews than the command line.
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews 916. [bug] Specifying type ixfr to dig without specifying
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews a serial number failed in unexpected ways.
90c4900d5cf1a1b556ae4c1de6338b2e7475ee55Mark Andrews 915. [func] The named-checkconf and named-checkzone programs
b857ba993de91a3863de92db6462afdbec47d993Mark Andrews now have a '-v' option for printing their version.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews 914. [bug] Global 'server' statements were rejected when
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews using views, even though they were accepted
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews in 9.1. [RT #1368]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews 913. [bug] Cache cleaning was not sufficiently aggressive.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews [RT #1441, #1444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 912. [bug] Attempts to set the 'additional-from-cache' or
029a79c8807a5378a31f0f92e9c600bd46be17c9Mark Andrews 'additional-from-auth' option to 'no' in a
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews server with recursion enabled will now
6ec7bd9c691cf7b7a1d4f507e89f2b7cb22a12dcMark Andrews be ignored and cause a warning message.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews 911. [placeholder]
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews 910. [port] Some pre-RFC2133 IPv6 implementations do not define
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews IN6ADDR_ANY_INIT. [RT #1416]
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews 909. [placeholder]
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews 908. [func] New program, rndc-confgen, to simplify setting up rndc.
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews 907. [func] The ability to get entropy from either the
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews random device, a user-provided file or from
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews the keyboard was migrated from the DNSSEC tools
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews to libisc as isc_entropy_usebestsource().
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews 906. [port] Separated the system independent portion of
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews 905. [bug] Configuring a forward "zone" for the root domain
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews did not work. [RT #1418]
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews 904. [bug] The server would leak memory if attempting to use
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews an expired TSIG key. [RT #1406]
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews 903. [bug] dig should not crash when receiving a TCP packet
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews of length 0.
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews 902. [bug] The -d option was ignored if both -t and -g were also
7052e191ce63fdf063a977695718ff426a27628eMark Andrews 901. [placeholder]
7052e191ce63fdf063a977695718ff426a27628eMark Andrews 900. [bug] A config.guess update changed the system identification
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews string of FreeBSD systems; configure and
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews bin/tests/system/ifconfig.sh now recognize the new
fb31e2890814be0ac3c343d91144f89ce5e05784Mark Andrews --- 9.2.0a2 released ---
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews 899. [bug] lib/dns/soa.c failed to compile on many platforms
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews due to inappropriate use of a void value.
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews [RT #1372, #1373, #1386, #1387, #1395]
f853c77478af94109291ea93f800444b949be558Mark Andrews 898. [bug] "dig" failed to set a nonzero exit status
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews on UDP query timeout. [RT #1323]
7ad4d54f29c315cbcb241ca5fc12ba1e0744358bMark Andrews 897. [bug] A config.guess update changed the system identification
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews string of UnixWare systems; configure now recognizes
6fd711065f5878c526f88f2825ab8024e2296644Mark Andrews the new string.
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews 896. [bug] If a configuration file is set on named's command line
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews and it has a relative pathname, the current directory
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews (after any possible jailing resulting from named -t)
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews will be prepended to it so that reloading works
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt properly even when a directory option is present.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews 895. [func] New function, isc_dir_current(), akin to POSIX's
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews 894. [bug] When using the DNSSEC tools, a message intended to warn
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews when the keyboard was being used because of the lack
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews of a suitable random device was not being printed.
881702c9c0079cd48a45054fd90d043f3a8b7e11Mark Andrews 893. [func] Removed isc_file_test() and added isc_file_exists()
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews for the basic functionality that was being added
012dedf87438043ff00d4deec8b488eec2be2a1cMark Andrews with isc_file_test().
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews 892. [placeholder]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 891. [bug] Return an error when a SIG(0) signed response to
1edbf336252ea6a94d58f3f1a135567e2956e8caMark Andrews an unsigned query is seen. This should actually
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉 do the verification, but it's not currently
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉 possible. [RT #1391]
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉 890. [cleanup] The man pages no longer require the mandoc macros
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉 and should now format cleanly using most versions of
582b6dc68b2defc1d8795df8f1da31bd1825c30bTatuya JINMEI 神明達哉 nroff, and HTML versions of the man pages have been
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 added. Both are generated from DocBook source.
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 889. [port] Eliminated blank lines before .TH in nroff man
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 pages since they cause problems with some versions
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 of nroff. [RT #1390]
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews 888. [bug] Don't die when using TKEY to delete a nonexistent
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews TSIG key. [RT #1392]
e724512f2be8d3de5f2982ebba0b2cdaf8325702Mark Andrews 887. [port] Detect broken compilers that can't call static
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews functions from inline functions. [RT #1212]
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews 886. [placeholder]
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews 885. [placeholder]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 884. [placeholder]
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews 883. [placeholder]
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews 882. [placeholder]
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews 881. [placeholder]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews 880. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 879. [placeholder]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews 878. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 877. [placeholder]
93d6dfaf66258337985427c86181f01fc51f0bb4Mark Andrews 876. [placeholder]
600cbd1fcea3c9cc9706dc1ff8fc0d0034ebdeacTatuya JINMEI 神明達哉 875. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 874. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 873. [placeholder]
d3fc633c344e15179480d887aeecf4a6263baeabMark Andrews 872. [placeholder]
73d74334741756eab4a9afd8d3c4e7c08da9a844Mark Andrews 871. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 870. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 869. [placeholder]
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews 868. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 867. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 866. [func] Close debug only file channels when debug is set to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zero. [RT #1246]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 865. [bug] The new configuration parser did not allow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the optional debug level in a "severity debug"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clause of a logging channel to be omitted.
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews This is now allowed and treated as "severity
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews debug 1;" like it does in BIND 8.2.4, not as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "severity debug 0;" like it did in BIND 9.1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 864. [cleanup] Multi-threading is now enabled by default on
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 863. [bug] If an error occurred while an outgoing zone transfer
20d90a37532b92b0471c56fb583d6b2ddc32caa6Mark Andrews was starting up, the server could access a domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name that had already been freed when logging a
fefe1106d96d3a89b21315f665b36a67cdea3840Mark Andrews message saying that the transfer was starting.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 862. [bug] Use after realloc(), non portable pointer arithmetic in
c528ef03d9cdfd7eed4fe6b93563dd599bbb25b0Mark Andrews 861. [port] Add support for Mac OS X, by making it equivalent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to Darwin. This was derived from the config.guess
f58233ec6c8b5866083bbaf5083ac9ade6bebe3aMark Andrews file shipped with Mac OS X. [RT #1355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 860. [func] Drop cross class glue in zone transfers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 859. [bug] Cache cleaning now won't swamp the CPU if there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is a persistent over limit condition.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 858. [func] isc_mem_setwater() no longer requires that when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews callback function is non-NULL then its hi_water
5e9f6125246cec57771bcdeefed03153d41c23fdMark Andrews argument must be greater than its lo_water argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (they can now be equal) or that they be non-zero.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 857. [cleanup] Use ISC_MAGIC() to define all magic numbers for
3184ff5e45c8f821e5165ea60d674bfb87faf5b8Mark Andrews structs, for our friends in EBCDIC-land.
1e107b3d7b54de5022c3328423164e533afcc15eMark Andrews 856. [func] Allow partial rdatasets to be returned in answer and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews authority sections to help non-TCP capable clients
cc6271e46c775592f39a1e8b4e2cb1ff457e2f89Mark Andrews recover from truncation. [RT #1301]
87c7b822b7bcdd8bec7ba1c01937286308b4847cMark Andrews 855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.
17a14e451df80b3d82278e5c925682ade3263dbcMark Andrews 854. [bug] The config parser didn't properly handle config
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options that were specified in units of time other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than seconds. [RT #1372]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 853. [bug] configure_view_acl() failed to detach existing acls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 852. [bug] Handle responses from servers which do not know
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 851. [cleanup] The obsolete support-ixfr option was not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.2.0a1 released ---
c676c1b4978bfe2d00bdf5085fd44544067f9de4Mark Andrews 850. [bug] dns_rbt_findnode() would not find nodes that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews split on a bitstring label somewhere other than in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the last label of the node. [RT #1351]
ffdfae8e4188c143297393f80f22134503372452Mark Andrews 849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 848. [func] A minimum max-cache-size of two megabytes is enforced
471e0563c7965c556c759775882cd3448dae78eaMark Andrews by the cache cleaner.
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews 847. [func] Added isc_file_test(), which currently only has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews some very basic functionality to test for the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews existence of a file, whether a pathname is absolute,
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews or whether a pathname is the fundamental representation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the current directory. It is intended that this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function can be expanded to test other things a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews programmer might want to know about a file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 846. [func] A non-zero 'param' to dst_key_generate() when making an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hmac-md5 key means that good entropy is not required.
3ca4b8062f845489a9c7e33a4af63cf9c863c1d4Mark Andrews 845. [bug] The access rights on the public file of a symmetric
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key are now restricted as soon as the file is opened,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than after it has been written and closed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews just as <lwres/net.h> does.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 843. [func] If no controls statement is present in named.conf,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or if any inet phrase of a controls statement is
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews lacking a keys clause, then a key will be automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generated by named and an rndc.conf-style file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named named.key will be written that uses it. rndc
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will use this file only if its normal configuration
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews file, or one provided on the command line, does not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 842. [func] 'rndc flush' now takes an optional view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 841. [bug] When sdb modules were not declared threadsafe, their
edfcbabd60f8479b72d91bcc2d2082a36ace4003Mark Andrews create and destroy functions were not serialized.
f95231835fdcd8d5f58486c9f9993602f27fe157Mark Andrews 840. [bug] The config file parser could print the wrong file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name if an error was detected after an included file
21f1794606dce19928cf455029e173321f166380Mark Andrews was parsed. [RT #1353]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 839. [func] Dump packets for which there was no view or that the
0cb25226fba18befbe40156c93845f2fc9bf3524Mark Andrews class could not be determined to category "unmatched".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 838. [port] UnixWare 7.x.x is now suported by
7a857bdb6828e75eec5a7080e4670ce199875922Mark Andrews 837. [cleanup] Multi-threading is now enabled by default only on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OSF1, Solaris 2.7 and newer, and AIX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 836. [func] Upgraded libtool to 1.4.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 835. [bug] The dispatcher could enter a busy loop if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it got an I/O error receiving on a UDP socket.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 834. [func] Accept (but warn about) master files beginning with
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews an SOA record without an explicit TTL field and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lacking a $TTL directive, by using the SOA MINTTL
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews as a default TTL. This is for backwards compatibility
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with old versions of BIND 8, which accepted such
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files without warning although they are illegal
f5af519ab547bc80c51387529103e4e852a1171eMark Andrews according to RFC1035.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <dns/soa.h>, and extended them to support
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews all the integer-valued fields of the SOA RR.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 832. [bug] The default location for named.conf in named-checkconf
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews should depend on --sysconfdir like it does in named.
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews 831. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 830. [func] Implement 'rndc status'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 829. [bug] The DNS_R_ZONECUT result code should only be returned
8ff31bab2f51b171a8eab3a0b8415c64529e116eMark Andrews when an ANY query is made with DNS_DBFIND_GLUEOK set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews In all other ANY query cases, returning the delegation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 828. [bug] The errno value from recvfrom() could be overwritten
806c235ecf533b98d068b3f8df9d7abbe1e30cf9Mark Andrews by logging code. [RT #1293]
935000aa6e2b9d08f363b2e698a258a458a5a7cfMark Andrews 827. [bug] When an IXFR protocol error occurs, the slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should retry with AXFR.
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews 826. [bug] Some IXFR protocol errors were not detected.
2fd63cf561135572339d4e2ff0c06695e3dcf1baMark Andrews 825. [bug] zone.c:ns_query() detached from the wrong zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reference. [RT #1264]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews 824. [bug] Correct line numbers reported by dns_master_load().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 823. [func] The output of "dig -h" now goes to stdout so that it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can easily be piped through "more". [RT #1254]
7ec0f55f1542d8bb9475bbe93e911d7520f043caMark Andrews 822. [bug] Sending nxrrset prerequisites would crash nsupdate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 821. [bug] The program name used when logging to syslog should
ea6fe0d54f36754c195b3b8dac47c81f7993677eMark Andrews be stripped of leading path components.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1178, #1232]
6bd8cee98332533a4fa705b82ca9ec1606738ba9Mark Andrews 820. [bug] Name server address lookups failed to follow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A6 chains into the glue of local authoritative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 819. [bug] In certain cases, the resolver's attempts to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews restart an address lookup at the root could cause
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews the fetch to deadlock (with itself) instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews restarting. [RT #1225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 818. [bug] Certain pathological responses to ANY queries could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause an assertion failure. [RT #1218]
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews 817. [func] Adjust timeouts for dialup zone queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 816. [bug] Report potential problems with log file accessibility
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at configuration time, since such problems can't
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews reliably be reported at the time they actually occur.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 815. [bug] If a log file was specified with a path separator
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews character (i.e. "/") in its name and the directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not exist, the log file's name was treated as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews though it were the directory name. [RT #1189]
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews 814. [bug] Socket objects left over from accept() failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were incorrectly destroyed, causing corruption
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of socket manager data structures.
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews 813. [bug] File descriptors exceeding FD_SETSIZE were handled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews badly. [RT #1192]
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews 812. [bug] dig sometimes printed incomplete IXFR responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to an uninitialized variable. [RT #1188]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews 811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 810. [bug] The signer name in SIG records was not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down-cased when signing/verifying records. [RT #1186]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews 809. [bug] Configuring a non-local address as a transfer-source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause an assertion failure during load.
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews 808. [func] Add 'rndc flush' to flush the server's cache.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 807. [bug] When setting up TCP connections for incoming zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfers, the transfer-source port was not
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews ignored like it should be.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the calling stack to the zone maintenance level,
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews causing zones to not reload when an included file was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews touched but the top-level zone file was not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 805. [bug] When using "forward only", missing root hints should
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews not cause queries to fail. [RT #1143]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 804. [bug] Attempting to obtain entropy could fail in some
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews situations. This would be most common on systems
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with user-space threads. [RT #1131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 803. [bug] Treat all SIG queries as if they have the CD bit set,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews otherwise no data will be returned [RT #749]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 802. [bug] DNSSEC key tags were computed incorrectly in almost
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all cases. [RT #1146]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 801. [bug] nsupdate should treat lines beginning with ';' as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comments. [RT #1139]
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews 800. [bug] dnssec-signzone produced incorrect statistics for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews large zones. [RT #1133]
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews 799. [bug] The ADB didn't find AAAA glue in a zone unless A6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews glue was also present.
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews 798. [bug] nsupdate should be able to reject bad input lines
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and continue. [RT #1130]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 797. [func] Issue a warning if the 'directory' option contains
c960dffe35970da729219b72f2e41350d3b64c35Mark Andrews a relative path. [RT #269]
5da49e379c79fbd597cf0d47e7697b65991f761fMark Andrews 796. [func] When a size limit is associated with a log file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only roll it when the size is reached, not every
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews time the log file is opened. [RT #1096]
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews 795. [func] Add the +multiline option to dig. [RT #1095]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 794. [func] Implement the "port" and "default-port" statements
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews 793. [cleanup] The DNSSEC tools could create filenames that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews illegal or contained shell meta-characters. They
838d608e6f37038f2fb43980a7a9d6b6a490db36Mark Andrews now use a different text encoding of names that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews doesn't have these problems. [RT #1101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 792. [cleanup] Replace the OMAPI command channel protocol with a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews simpler one.
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews 791. [bug] The command channel now works over IPv6.
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews 790. [bug] Wildcards created using dynamic update or IXFR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could fail to match. [RT #1111]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 789. [bug] The "localhost" and "localnets" ACLs did not match
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews when used as the second element of a two-element
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sortlist item.
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews 788. [func] Add the "match-mapped-addresses" option, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causes IPv6 v4mapped addresses to be treated as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv4 addresses for the purpose of acl matching.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 787. [bug] The DNSSEC tools failed to downcase domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews names when mapping them into file names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 786. [bug] When DNSSEC signing/verifying data, owner names were
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews not properly down-cased.
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews 785. [bug] A race condition in the resolver could cause
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews an assertion failure. [RT #673, #872, #1048]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 784. [bug] nsupdate and other programs would not quit properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if some signals were blocked by the caller. [RT #1081]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 783. [bug] Following CNAMEs could cause an assertion failure
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews when either using an sdb database or under very
ff2ef33a84550fa5dbd9e8fdcd82a33288f053adMark Andrews rare conditions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 782. [func] Implement the "serial-query-rate" option.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews 781. [func] Avoid error packet loops by dropping duplicate FORMERR
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews responses. [RT #1006]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 780. [bug] Error handling code dealing with out of memory or
8da0b50e8a8c74602eca97e261ce4ad457df5048Mark Andrews other rare errors could lead to assertion failures
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews by calling functions on uninitialized names. [RT #1065]
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews 779. [func] Added the "minimal-responses" option.
6388dcf8e661687c30a5d52f149d193ce86748a8Mark Andrews 778. [bug] When starting cache cleaning, cleaning_timer_action()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews returned without first pausing the iterator, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause deadlock. [RT #998]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 777. [bug] An empty forwarders list in a zone failed to override
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews global forwarders. [RT #995]
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews 776. [func] Improved error reporting in denied messages. [RT #252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 775. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 774. [func] max-cache-size is implemented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 773. [func] Added isc_rwlock_trylock() to attempt to lock without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 772. [bug] Owner names could be incorrectly omitted from cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dumps in the presence of negative caching entries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 771. [cleanup] TSIG errors related to unsynchronized clocks
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews are logged better. [RT #919]
99776003811a413457a2c35a808ad860df877d24Mark Andrews 770. [func] Add the "edns yes_or_no" statement to the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clause. [RT #524]
2ffb3eb384ae71ae9f8edbf5fa2219d965ff0552Mark Andrews 769. [func] Improved error reporting when parsing rdata. [RT #740]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 768. [bug] The server did not emit an SOA when a CNAME
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews or DNAME chain ended in NXDOMAIN in an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews authoritative zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 767. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 766. [bug] A few cases in query_find() could leak fname.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This would trigger the mpctx->allocated == 0
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion when the server exited.
52fc1457e44c476a81ec9dee6a664958cb64b8e2Mark Andrews [RT #739, #776, #798, #812, #818, #821, #845,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews #892, #935, #966]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 765. [func] ACL names are once again case insensitive, like
b8fff4f0d70bb9c5e53023ad0dae0acda67b5cdaMark Andrews in BIND 8. [RT #252]
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉 764. [func] Configuration files now allow "include" directives
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in more places, such as inside the "view" statement.
be0e075ac2c10ade3e80edef7fa14ac0fda92690Mark Andrews [RT #377, #728, #860]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 763. [func] Configuration files no longer have reserved words.
2a908588fbeacebc5f13b153b73c96e12dacaadcTatuya JINMEI 神明達哉 [RT #731, #753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 762. [cleanup] The named.conf and rndc.conf file parsers have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been completely rewritten.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 761. [bug] _REENTRANT was still defined when building with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --disable-threads.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 760. [contrib] Significant enhancements to the pgsql sdb driver.
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉 759. [bug] The resolver didn't turn off "avoid fetches" mode
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when restarting, possibly causing resolution
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to fail when it should not. This bug only affected
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews platforms which support both IPv4 and IPv6. [RT #927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 758. [bug] The "avoid fetches" code did not treat negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache entries correctly, causing fetches that would
8b0ee8448bec37bf1e771363dccce7c0e73eb1a7Mark Andrews be useful to be avoided. This bug only affected
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews platforms which support both IPv4 and IPv6. [RT #927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 757. [func] Log zone transfers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 756. [bug] dns_zone_load() could "return" success when no master
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews file was configured.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 755. [bug] Fix incorrectly formatted log messages in zone.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 754. [bug] Certain failure conditions sending UDP packets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause the server to retry the transmission
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews indefinitely. [RT #902]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews 753. [bug] dig, host, and nslookup would fail to contact a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews remote server if getaddrinfo() returned an IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address on a system that doesn't support IPv6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 752. [func] Correct bad tv_usec elements returned by
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews gettimeofday().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 751. [func] Log successful zone loads / transfers. [RT #898]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 750. [bug] A query should not match a DNAME whose trust level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is pending. [RT #916]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 749. [bug] When a query matched a DNAME in a secure zone, the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server did not return the signature of the DNAME.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 748. [doc] List supported RFCs in doc/misc/rfc-compliance.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 747. [bug] The code to determine whether an IXFR was possible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not properly check for a database that could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not have a journal. [RT #865, #908]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 746. [bug] The sdb didn't clone rdatasets properly, causing
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews a crash when the server followed delegations. [RT #905]
6b25d2f7f7a1125508f8d225a8fef94e1db83555Mark Andrews 745. [func] Report the owner name of records that fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews semantic checks while loading.
b6309ed962c4988a314d61742c4fbc4935467d68Mark Andrews 744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result of an ANY or SIG query, the resolver failed
39fe146f2ab82cb8e49caa319a3345174fa2d69aMark Andrews to setup the return event's rdatasets, causing an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure in the query code. [RT #881]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 743. [bug] Receiving a large number of certain malformed
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews answers could cause named to stop responding.
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews 742. [placeholder]
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 741. [port] Support openssl-engine. [RT #709]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 740. [port] Handle openssl library mismatches slightly better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 739. [port] Look for /dev/random in configure, rather than
5bd76af084edfdcd1cb4db9453ac781d32dde6f7Mark Andrews assuming it will be there for only a predefined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set of OSes.
8bcb0f297b50e80e3c7aab1a41b94d937acf4dc0Mark Andrews 738. [bug] If a non-threadsafe sdb driver supported AXFR and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews received an AXFR request, it would deadlock or die
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with an assertion failure. [RT #852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 737. [port] stdtime.c failed to compile on certain platforms.
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews 736. [func] New functions isc_task_{begin,end}exclusive().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 735. [doc] Add BIND 4 migration notes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 734. [bug] An attempt to re-lock the zone lock could occur if
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews the server was shutdown during a zone transfer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 733. [bug] Reference counts of dns_acl_t objects need to be
e72d4d8929fec51153e4fd0d1cf632cd59335495Mark Andrews locked but were not. [RT #801, #821]
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews 732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]
6c6673405c7e29c1d91d07b326d0fe1d7b52e478Mark Andrews 731. [bug] Certain zone errors could cause named-checkzone to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail ungracefully. [RT #819]
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews 730. [bug] lwres_getaddrinfo() returns the correct result when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it fails to contact a server. [RT #768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 729. [port] pthread_setconcurrency() needs to be called on Solaris.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 728. [bug] Fix comment processing on master file directives.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 727. [port] Work around OS bug where accept() succeeds but
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fails to fill in the peer address of the accepted
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer connection, by treating it as an error rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure. [RT #809]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 726. [func] Implement the "trace" and "notrace" commands in rndc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 725. [bug] Installing man pages could fail.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 724. [func] New libisc functions isc_netaddr_any(),
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews isc_netaddr_any6().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews to return DNS_R_SERVFAIL. [RT #783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 722. [func] Allow incremental loads to be canceled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 721. [cleanup] Load manager and dns_master_loadfilequota() are no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 720. [bug] Server could enter infinite loop in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dispatch.c:do_cancel(). [RT #733]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 719. [bug] Rapid reloads could trigger an assertion failure.
012a2b979e011b13ba0d291c279dc65a167c039eMark Andrews [RT #743, #763]
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews 718. [cleanup] "internal" is no longer a reserved word in named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #753, #731]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 717. [bug] Certain TKEY processing failure modes could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reference an uninitialized variable, causing the
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews server to crash. [RT #750]
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews 716. [bug] The first line of a $INCLUDE master file was lost if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an origin was specified. [RT #744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 715. [bug] Resolving some A6 chains could cause an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure in adb.c. [RT #738]
638fe804a524ee0c028863c0301b999c79de7651Mark Andrews 714. [bug] Preserve interval timers across reloads unless changed.
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews 713. [func] named-checkconf takes '-t directory' similar to named.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews 712. [bug] Sending a large signed update message caused an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure. [RT #718]
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews 711. [bug] The libisc and liblwres implementations of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inet_ntop contained an off by one error.
c54c1eaf26d5a7fc123c4af3712353156a766df1Mark Andrews 710. [func] The forwarders statement now takes an optional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews port. [RT #418]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 709. [bug] ANY or SIG queries for data with a TTL of 0
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would return SERVFAIL. [RT #620]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 708. [bug] When building with --with-openssl, the openssl headers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews included with BIND 9 should not be used. [RT #702]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 707. [func] The "filename" argument to named-checkzone is no
86f6b92e35c7bdb5fc1fd1021af75b981863313eMark Andrews longer optional, to reduce confusion. [RT #612]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 706. [bug] Zones with an explicit "allow-update { none; };"
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews were considered dynamic and therefore not reloaded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on SIGHUP or "rndc reload".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 705. [port] Work out resource limit type for use where rlim_t is
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews not available. [RT #695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 704. [port] RLIMIT_NOFILE is not available on all platforms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 703. [port] sys/select.h is needed on older platforms. [RT #695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 702. [func] If the address 0.0.0.0 is seen in resolv.conf,
0f8f42a09eb102fa88e4d2caacdafbeda931f94cMark Andrews use 127.0.0.1 instead. [RT #693]
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews 701. [func] Root hints are now fully optional. Class IN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews views use compiled-in hints by default, as
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews before. Non-IN views with no root hints now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews provide authoritative service but not recursion.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A warning is logged if a view has neither root
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews hints nor authoritative data for the root. [RT #696]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 700. [bug] $GENERATE range check was wrong. [RT #688]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 699. [bug] The lexer mishandled empty quoted strings. [RT #694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 698. [bug] Aborting nsupdate with ^C would lead to several
1c0927d8a091effcf9b2dc5baa533927c113bd5cMark Andrews race conditions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 697. [bug] nsupdate was not compatible with the undocumented
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews BIND 8 behavior of ignoring TTLs in "update delete"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews commands. [RT #693]
70f8c70cdd3ca68edcf9d448eb508abf3697719aMark Andrews 696. [bug] lwresd would die with an assertion failure when passed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a zero-length name. [RT #692]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 695. [bug] If the resolver attempted to query a blackholed or
ac65e45126dda424b5cc9d2865b353dc0ec23e1eMark Andrews bogus server, the resolution would fail immediately.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 694. [bug] $GENERATE did not produce the last entry.
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews [RT #682, #683]
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews 693. [bug] An empty lwres statement in named.conf caused
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the server to crash while loading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 692. [bug] Deal with systems that have getaddrinfo() but not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gai_strerror(). [RT #679]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 691. [bug] Configuring per-view forwarders caused an assertion
0b09763c354ec91fb352b6b4cea383bd0195b2d8Mark Andrews failure. [RT #675, #734]
6a3c86ff436452d062912bd91ecd289541869d42Mark Andrews 690. [func] $GENERATE now supports DNAME. [RT #654]
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews 689. [doc] man pages are now installed. [RT #210]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 688. [func] "make tags" now works on systems with the
93da96c1cfd5f3c47169855867dd18db00c8a386Mark Andrews "Exuberant Ctags" etags.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 687. [bug] Only say we have IPv6, with sufficient functionality,
7d389c324cc032475f9d219a12ab84bacbd7fbaaMark Andrews if it has actually been tested. [RT #586]
cd9bfe5b256a3e84ba090e8fcb5de0d6c50974aeMark Andrews 686. [bug] dig and nslookup can now be properly aborted during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews blocking operations. [RT #568]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 685. [bug] nslookup should use the search list/domain options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from resolv.conf by default. [RT #405, #630]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 684. [bug] Memory leak with view forwarders. [RT #656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 683. [bug] File descriptor leak in isc_lex_openfile().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 682. [bug] nslookup displayed SOA records incorrectly. [RT #665]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 681. [bug] $GENERATE specifying output format was broken. [RT #653]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 680. [bug] dns_rdata_fromstruct() mishandled options bigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than 255 octets.
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews 679. [bug] $INCLUDE could leak memory and file descriptors on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reload. [RT #639]
c61ec97ae0b859914ee26e213fe792f86a157990Mark Andrews 678. [bug] "transfer-format one-answer;" could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #646]
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews 677. [bug] dnssec-signzone would occasionally use the wrong ttl
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for database operations and fail. [RT #643]
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews 676. [bug] Log messages about lame servers to category
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'lame-servers' rather than 'resolver', so as not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be gratuitously incompatible with BIND 8.
945cb085b859dbfc6a883813dda03c83e06995d3Mark Andrews 675. [bug] TKEY queries could cause the server to leak
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 674. [func] Allow messages to be TSIG signed / verified using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a offset from the current time.
c549b3a4d5fedba2ae960df667864e824acb1ef9Mark Andrews 673. [func] The server can now convert RFC1886-style recursive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lookup requests into RFC2874-style lookups, when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabled using the new option "allow-v6-synthesis".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 672. [bug] The wrong time was in the "time signed" field when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replying with BADTIME error.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 671. [bug] The message code was failing to parse a message with
8f9664521724eefc39728c092d0bc6be527e1496Mark Andrews no question section and a TSIG record. [RT #628]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 670. [bug] The lwres replacements for getaddrinfo and
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews getipnodebyname didn't properly check for the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews existence of the sockaddr sa_len field.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 669. [bug] dnssec-keygen now makes the public key file
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews non-world-readable for symmetric keys. [RT #403]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 668. [func] named-checkzone now reports multiple errors in master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 667. [bug] On Linux, running named with the -u option and a
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews non-world-readable configuration file didn't work.
a1edcd1b8d430650d85ec0962cd32efde76a71fbMark Andrews 666. [bug] If a request sent by dig is longer than 512 bytes,
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews 665. [bug] Signed responses were not sent when the size of the
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews TSIG + question exceeded the maximum message size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 664. [bug] The t_tasks and t_timers module tests are now skipped
8989de1059c6292fc43ce507df4991224af2d789Mark Andrews when building without threads, since they require
acc8b7ac3d16538bf223545bbf71899b9accaebbMark Andrews 663. [func] Accept a size_spec, not just an integer, in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (unimplemented and ignored) max-ixfr-log-size option
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews for compatibility with recent versions of BIND 8.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews 662. [bug] dns_rdata_fromtext() failed to log certain errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 661. [bug] Certain UDP IXFR requests caused an assertion failure
8e5893c36cdccc706f9632f51e0c8d390d2a8d06Mark Andrews (mpctx->allocated == 0). [RT #355, #394, #623]
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews 660. [port] Detect multiple CPUs on HP-UX and IRIX.
9549a96654ead15b264c9159d48eb485e4f9db55Mark Andrews 659. [performance] Rewrite the name compression code to be much faster.
3d822d111c00e70830dc163a5298196a1e7db29fMark Andrews 658. [cleanup] Remove all vestiges of 16 bit global compression.
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews 657. [bug] When a listen-on statement in an lwres block does not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specify a port, use 921, not 53. Also update the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listen-on documentation. [RT #616]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 656. [func] Treat an unescaped newline in a quoted string as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an error. This means that TXT records with missing
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews close quotes should have meaningful errors printed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 655. [bug] Improve error reporting on unexpected eof when loading
57e0f58b3fd4cb49a57200c8af9cb58d984d871aMark Andrews zones. [RT #611]
26cf4737b3e84c3a686a5eacebf22ac39e57d4caMark Andrews 654. [bug] Origin was being forgotten in TCP retries in dig.
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews 653. [bug] +defname option in dig was reversed in sense.
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews 652. [bug] zone_saveunique() did not report the new name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 651. [func] The AD bit in responses now has the meaning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified in <draft-ietf-dnsext-ad-is-secure>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 650. [bug] SIG(0) records were being generated and verified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrectly. [RT #606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 649. [bug] It was possible to join to an already running fctx
ddc592d128cdde85ada64efbda95981c10c4c03cMark Andrews after it had "cloned" its events, but before it sent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews them. In this case, the event of the newly joined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fetch would not contain the answer, and would
88c2b83cc548a217cc92a2bf75ca1ef1d4237d4fMark Andrews trigger the INSIST() in fctx_sendevents(). In
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND 9.0, this bug did not trigger an INSIST(), but
bd6ad47c3dbc52a54f240432878b6832bd6dd6e2Mark Andrews caused the fetch to fail with a SERVFAIL result.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #588, #597, #605, #607]
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews 648. [port] Add support for pre-RFC2133 IPv6 implementations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 647. [bug] Resolver queries sent after following multiple
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews referrals had excessively long retransmission
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeouts due to incorrectly counting the referrals
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as "restarts".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews didn't _cleanly_ fix the problem it was trying to fix.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews 644. [bug] #622 needed more work. [RT #562]
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews 643. [bug] xfrin error messages made more verbose, added class
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the zone. [RT# 599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 642. [bug] Break the exit_check() race in the zone module.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.1.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 641. [bug] $GENERATE caused a uninitialized link to be used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 640. [bug] Memory leak in error path could cause
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews "mpctx->allocated == 0" failure. [RT #584]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 639. [bug] Reading entropy from the keyboard would sometimes fail.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 638. [port] lib/isc/random.c needed to explicitly include time.h
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to get a prototype for time() when pthreads was not
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews being used. [RT #592]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 637. [port] Use isc_u?int64_t instead of (unsigned) long long in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be compiled even if the platform does not need it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 636. [port] Shut up MSVC++ about a possible loss of precision
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews in the ISC__BUFFER_PUTUINT*() macros. [RT #592]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 635. [bug] Reloading a server with a configured blackhole list
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews would cause an assertion. [RT #590]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 634. [bug] A log file will completely stop being written when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it reaches the maximum size in all cases, not just
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews when versioning is also enabled. [RT #570]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 632. [bug] The index array of the journal file was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews corrupted as it was written to disk.
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews 631. [port] Build without thread support on systems without
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews 630. [bug] Locking failure in zone code. [RT #582]
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews 629. [bug] 9.1.0b1 dereferenced a null pointer and crashed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when responding to a UDP IXFR request.
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews 628. [bug] If the root hints contained only AAAA addresses,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named would be unable to perform resolution.
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews 627. [bug] The EDNS0 blackhole detection code of change 324
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews waited for three retransmissions to each server,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which takes much too long when a domain has many
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name servers and all of them drop EDNS0 queries.
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews Now we retry without EDNS0 after three consecutive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeouts, even if they are all from different
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers. [RT #143]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 626. [bug] The lightweight resolver daemon no longer crashes
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews when asked for a SIG rrset. [RT #558]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 625. [func] Zones now inherit their class from the enclosing view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 624. [bug] The zone object could get timer events after it had
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews been destroyed, causing a server crash. [RT #571]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 623. [func] Added "named-checkconf" and "named-checkzone" program
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for syntax checking named.conf files and zone files,
81e302788a444b81231a7cda721548a020ae5660Brian Wellington respectively.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 622. [bug] A canceled request could be destroyed before
c00a1eb423623442aff428336bb55590f79013bbMark Andrews dns_request_destroy() was called. [RT #562]
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews 621. [port] Disable IPv6 at runtime if IPv6 sockets are unusable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This mostly affects Red Hat Linux 7.0, which has
d972fa317829804a692e46a34b6f27a33f861d9dMark Andrews conflicts between libc and the kernel.
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington 620. [bug] dns_master_load*inc() now require 'task' and 'load'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be non-null. Also 'done' will not be called if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_master_load*inc() fails immediately. [RT #565]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 619. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 618. [bug] Queries to a signed zone could sometimes cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure.
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews 617. [bug] When using dynamic update to add a new RR to an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews existing RRset with a different TTL, the journal
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews entries generated from the update did not include
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews explicit deletions and re-additions of the existing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RRs to update their TTL to the new value.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 616. [func] dnssec-signzone -t output now includes performance
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 615. [bug] dnssec-signzone did not like child keysets signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by multiple keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 614. [bug] Checks for uninitialized link fields were prone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to false positives, causing assertion failures.
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews The checks are now disabled by default and may
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be re-enabled by defining ISC_LIST_CHECKINIT.
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews 613. [bug] "rndc reload zone" now reloads primary zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews It previously only updated slave and stub zones,
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews if an SOA query indicated an out of date serial.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 612. [cleanup] Shutup a ridiculously noisy HP-UX compiler that
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews complains relentlessly about how its treatment
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of 'const' has changed as well as how casting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sometimes tightens alignment constraints.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 611. [func] allow-notify can be used to permit processing of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify messages from hosts other than a slave's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 610. [func] rndc dumpdb is now supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 609. [bug] getrrsetbyname() would crash lwresd if the server
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews found more SIGs than answers. [RT #554]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 608. [func] dnssec-signzone now adds a comment to the zone
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews with the time the file was signed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 607. [bug] nsupdate would fail if it encountered a CNAME or
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews DNAME in a response to an SOA query. [RT #515]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 606. [bug] Compiling with --disable-threads failed due
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews to isc_thread_self() being incorrectly defined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as an integer rather than a function.
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews 605. [func] New function isc_lex_getlasttokentext().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 604. [bug] The named.conf parser could print incorrect line
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews numbers when long comments were present.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 603. [bug] Make dig handle multiple types or classes on the same
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews query more correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 602. [func] Cope automatically with UnixWare's broken
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6_IS_ADDR_* macros. [RT #539]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 601. [func] Return a non-zero exit code if an update fails
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in nsupdate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 600. [bug] Reverse lookups sometimes failed in dig, etc...
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews 599. [func] Added four new functions to the libisc log API to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support i18n messages. isc_log_iwrite(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_log_ivwrite(), isc_log_iwrite1() and
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews isc_log_ivwrite1() were added.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 598. [bug] An update-policy statement would cause the server
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews to assert while loading. [RT #536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 597. [func] dnssec-signzone is now multi-threaded.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 596. [bug] DNS_RDATASLAB_FORCE and DNS_RDATASLAB_EXACT are
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews not mutually exclusive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 595. [port] On Linux 2.2, socket() returns EINVAL when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should return EAFNOSUPPORT. Work around this.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 594. [func] sdb drivers are now assumed to not be thread-safe
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews unless the DNS_SDBFLAG_THREADSAFE flag is supplied.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 593. [bug] If a secure zone was missing all its NXTs and
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews a dynamic update was attempted, the server entered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an infinite loop.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 592. [bug] The sig-validity-interval option now specifies a
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews number of days, not seconds. This matches the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documentation. [RT #529]
caa8797a00ccb1a02f1690dda5b4aeda9a1db5a7Mark Andrews --- 9.1.0b1 released ---
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews 591. [bug] Work around non-reentrancy in openssl by disabling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pre-computation in keys.
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews 590. [doc] There are now man pages for the lwres library in
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews 589. [bug] The server could deadlock if a zone was updated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while being transferred out.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 588. [bug] ctx->in_use was not being correctly initialized when
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington when pushing a file for $INCLUDE. [RT #523]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 587. [func] A warning is now printed if the "allow-update"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option allows updates based on the source IP
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson address, to alert users to the fact that this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is insecure and becoming increasingly so as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers capable of update forwarding are being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 586. [bug] multiple views with the same name were fatal. [RT #516]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 585. [func] dns_db_addrdataset() and and dns_rdataslab_merge()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now support 'exact' additions in a similar manner to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_db_subtractrdataset() and dns_rdataslab_subtract().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 584. [func] You can now say 'notify explicit'; to suppress
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notification of the servers listed in NS records
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington and notify only those servers listed in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'also-notify' option.
683f10428e292811317df38fa324f242abbf7384Mark Andrews 583. [func] "rndc querylog" will now toggle logging of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries, like "ndc querylog" in BIND 8.
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews 582. [bug] dns_zone_idetach() failed to lock the zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #199, #463]
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews 581. [bug] log severity was not being correctly processed.
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews 580. [func] Ignore trailing garbage on incoming DNS packets,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for interoperability with broken server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementations. [RT #491]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 579. [bug] nsupdate did not take a filename to read update from.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 578. [func] New config option "notify-source", to specify the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source address for notify messages.
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington 577. [func] Log illegal RDATA combinations. e.g. multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews singleton types, cname and other data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 576. [doc] isc_log_create() description did not match reality.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 575. [bug] isc_log_create() was not setting internal state
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews correctly to reflect the default channels created.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 574. [bug] TSIG signed queries sent by the resolver would fail to
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews have their responses validated and would leak memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 573. [bug] The journal files of IXFRed slave zones were
49f62849e5f80add0ee36b0f9b42cdce8de9748aMark Andrews inadvertently discarded on server reload, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "journal out of sync with zone" errors on subsequent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reloads. [RT #482]
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews 572. [bug] Quoted strings were not accepted as key names in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address match lists.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 571. [bug] It was possible to create an rdataset of singleton
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews type which had more than one rdata. [RT #154]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 570. [bug] rbtdb.c allowed zones containing nodes which had
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews both a CNAME and "other data". [RT #154]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 569. [func] The DNSSEC AD bit will not be set on queries which
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews have not requested a DNSSEC response.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 568. [func] Add sample simple database drivers in contrib/sdb.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 567. [bug] Setting the zone transfer timeout to zero caused an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure. [RT #302]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 566. [func] New public function dns_timer_setidle().
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews 565. [func] Log queries more like BIND 8: query logging is now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews done to category "queries", level "info". [RT #169]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 564. [func] Add sortlist support to lwresd.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 563. [func] New public functions dns_rdatatype_format() and
da5d1cf1b1aa29ae53a0427be49291b04bd60549Mark Andrews dns_rdataclass_format(), for convenient formatting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of rdata type/class mnemonics in log messages.
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews 562. [cleanup] Moved lib/dns/*conf.c to bin/named where they belong.
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews 561. [func] The 'datasize', 'stacksize', 'coresize' and 'files'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clauses of the options{} statement are now implemented.
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews 560. [bug] dns_name_split did not properly the resulting prefix
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a maximal length bitstring label was split which
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson was preceded by another bitstring label. [RT #429]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 559. [bug] dns_name_split did not properly create the suffix
23fb770906bf1fd98210f16ad660078274242963Mark Andrews when splitting within a maximal length bitstring label.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 558. [func] New functions, isc_resource_getlimit and
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington isc_resource_setlimit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 557. [func] Symbolic constants for libisc integral types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 556. [func] The DNSSEC OK bit in the EDNS extended flags
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews is now implemented. Responses to queries without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this bit set will not contain any DNSSEC records.
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews 555. [bug] A slave server attempting a zone transfer could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews crash with an assertion failure on certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews malformed responses from the master. [RT #457]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 554. [bug] In some cases, not all of the dnssec tools were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews properly installed.
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews 553. [bug] Incoming zone transfers deferred due to quota
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were not started when quota was increased but
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only when a transfer in progress finished. [RT #456]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 552. [bug] We were not correctly detecting the end of all c-style
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comments. [RT #455]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 551. [func] Implemented the 'sortlist' option.
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews 550. [func] Support unknown rdata types and classes.
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson 549. [bug] "make" did not immediately abort the build when a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews subdirectory make failed [RT #450].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 548. [func] The lexer now ungets tokens more correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 547. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 546. [func] Option 'lame-ttl' is now implemented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 545. [func] Name limit and counting options removed from dig;
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews they didn't work properly, and cannot be correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implemented without significant changes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 544. [func] Add statistics option, enable statistics-file option,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews add RNDC option "dump-statistics" to write out a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query statistics file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 543. [doc] The 'port' option is now documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 542. [func] Add support for update forwarding as required for
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews full compliance with RFC2136. It is turned off
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by default and can be enabled using the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'allow-update-forwarding' option.
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson 541. [func] Add bogus server support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 540. [func] Add dialup support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 539. [func] Support the blackhole option.
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington 538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 537. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 536. [func] Use transfer-source{-v6} when sending refresh queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Transfer-source{-v6} now take a optional port
b541c10d0442d9804d94567a97956cec3bd2912dBrian Wellington parameter for setting the UDP source port. The port
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parameter is ignored for TCP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 535. [func] Use transfer-source{-v6} when forwarding update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 534. [func] Ancestors have been removed from RBT chains. Ancestor
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews information can be discerned via node parent pointers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 533. [func] Incorporated name hashing into the RBT database to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews improve search speed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 532. [func] Implement DNS UPDATE pseudo records using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNS_RDATA_UPDATE flag.
1e4bfff1855795853648f507422b96fc8fecbff1Mark Andrews 531. [func] Rdata really should be initialized before being assigned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to (dns_rdata_fromwire(), dns_rdata_fromtext(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_clone(), dns_rdata_fromregion()),
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson check that it is.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 530. [func] New function dns_rdata_invalidate().
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews 529. [bug] 521 contained a bug which caused zones to always
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reload. [RT #410]
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson 528. [func] The ISC_LIST_XXXX macros now perform sanity checks
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on their arguments. ISC_LIST_XXXXUNSAFE can be use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to skip the checks however use with caution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 527. [func] New function dns_rdata_clone().
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews 526. [bug] nsupdate incorrectly refused to add RRs with a TTL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 525. [func] New arguments 'options' for dns_db_subtractrdataset(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and 'flags' for dns_rdataslab_subtract() allowing you
d1abb8bb020aacd1ce0da65c2d5d8f7c96ebd52aMark Andrews to request that the RR's must exist prior to deletion.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNS_R_NOTEXACT is returned if the condition is not met.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 524. [func] The 'forward' and 'forwarders' statement in
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson non-forward zones should work now.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 523. [doc] The source to the Administrator Reference Manual is
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson now an XML file using the DocBook DTD, and is included
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the distribution. The plain text version of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ARM is temporarily unavailable while we figure out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews how to generate readable plain text from the XML.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 522. [func] The lightweight resolver daemon can now use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a real configuration file, and its functionality
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson can be provided by a name server. Also, the -p and -P
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options to lwresd have been reversed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 521. [bug] Detect master files which contain $INCLUDE and always
6d6529b5e5ab7223fa2560ebe144bcb82517cef3Mark Andrews reload. [RT #196]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 520. [bug] Upgraded libtool to 1.3.5, which makes shared
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews library builds almost work on AIX (and possibly
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews 519. [bug] dns_name_split() would improperly split some bitstring
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews labels, zeroing a few of the least significant bits in
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson the prefix part. When such an improperly created
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prefix was returned to the RBT database, the bogus
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews label was dutifully stored, corrupting the tree.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 518. [bug] The resolver did not realize that a DNAME which was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "the answer" to the client's query was "the answer",
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews and such queries would fail. [RT #399]
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer 517. [bug] The resolver's DNAME code would trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if there was more than one DNAME in the chain.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 516. [bug] Cache lookups which had a NULL node pointer, e.g.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews those by dns_view_find(), and which would match a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNAME, would trigger an INSIST(!search.need_cleanup)
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson assertion. [RT #399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 515. [bug] The ssu table was not being attached / detached
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews by dns_zone_[sg]etssutable. [RT#397]
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews 514. [func] Retry refresh and notify queries if they timeout.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 513. [func] New functionality added to rdnc and server to allow
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews individual zones to be refreshed or reloaded.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 512. [bug] The zone transfer code could throw an exception with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an invalid IXFR stream.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 511. [bug] The message code could throw an assertion on an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews out of memory failure. [RT #392]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 510. [bug] Remove spurious view notify warning. [RT #376]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 509. [func] Add support for write of zone files on shutdown.
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer 508. [func] dns_message_parse() can now do a best-effort
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attempt, which should allow dig to print more invalid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dns_view_flushanddetach().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 506. [func] Do not fail to start on errors in zone files.
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews 505. [bug] nsupdate was printing "unknown result code". [RT #373]
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer 504. [bug] The zone was not being marked as dirty when updated via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 503. [bug] dumptime was not being set along with
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson DNS_ZONEFLG_NEEDDUMP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 502. [func] On a SERVFAIL reply, DiG will now try the next server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the list, unless the +fail option is specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 501. [bug] Incorrect port numbers were being displayed by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nslookup. [RT #352]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 500. [func] Nearly useless +details option removed from DiG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 499. [func] In DiG, specifying a class with -c or type with -t
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews changes command-line parsing so that classes and
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews types are only recognized if following -c or -t.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This allows hosts with the same name as a class or
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews type to be looked up.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 498. [doc] There is now a man page for "dig"
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews 497. [bug] The error messages printed when an IP match list
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contained a network address with a nonzero host
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews part where not sufficiently detailed. [RT #365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 496. [bug] named didn't sanity check numeric parameters. [RT #361]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 495. [bug] nsupdate was unable to handle large records. [RT #368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 494. [func] Do not cache NXDOMAIN responses for SOA queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews for SOA queries. This makes it easier to locate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the containing zone without polluting intermediate
923de3bb9cf4d619de206544975986a22b18196fMark Andrews 492. [bug] attempting to reload a zone caused the server fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to shutdown cleanly. [RT #360]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 491. [bug] nsupdate would segfault when sending certain
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews prerequisites with empty RDATA. [RT #356]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 490. [func] When a slave/stub zone has not yet successfully
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews obtained an SOA containing the zone's configured
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews retry time, perform the SOA query retries using
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews exponential backoff. [RT #337]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 489. [func] The zone manager now has a "i/o" queue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 488. [bug] Locks weren't properly destroyed in some cases.
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews 487. [port] flockfile() is not defined on all systems.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 486. [bug] nslookup: "set all" and "server" commands showed
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews the incorrect port number if a port other than 53
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was specified. [RT #352]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 485. [func] When dig had more than one server to query, it would
e9ca87459a20f5e6721b9bd0b28c95fc3d6b843cMark Andrews send all of the messages at the same time. Add
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rate limiting of the transmitted messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 484. [bug] When the server was reloaded after removing addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the named.conf "listen-on" statement, sockets
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews were still listening on the removed addresses due
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to reference count loops. [RT #325]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 483. [bug] nslookup: "set all" showed a "search" option but it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was not settable.
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson 482. [bug] nslookup: a plain "server" or "lserver" should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews treated as a lookup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 481. [bug] nslookup:get_next_command() stack size could exceed
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson per thread limit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 480. [bug] strtok() is not thread safe. [RT #349]
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson 479. [func] The test suite can now be run by typing "make check"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or "make test" at the top level.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 478. [bug] "make install" failed if the directory specified with
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews --prefix did not already exist.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 477. [bug] The the isc-config.sh script could be installed before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews its directory was created. [RT #324]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 476. [bug] A zone could expire while a zone transfer was in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews progress triggering a INSIST failure. [RT #329]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 475. [bug] query_getzonedb() sometimes returned a non-null version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on failure. This caused assertion failures when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generating query responses where names subject to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews additional section processing pointed to a zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to which access had been denied by means of the
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews allow-query option. [RT #336]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 474. [bug] The mnemonic of the CHAOS class is CH according to
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson RFC1035, but it was printed and read only as CHAOS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews We now accept both forms as input, and print it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as CH. [RT #305]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 473. [bug] nsupdate overran the end of the list of name servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when no servers could be reached, typically causing
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews it to print the error message "dns_request_create:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not implemented".
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson 472. [bug] Off-by-one error caused isc_time_add() to sometimes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews produce invalid time values.
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson 471. [bug] nsupdate didn't compile on HP/UX 10.20
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 470. [func] $GENERATE is now supported. See also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 469. [bug] "query-source address * port 53;" now works.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 468. [bug] dns_master_load*() failed to report file and line
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson number in certain error conditions.
1255d388f034dc556d235a002527101781dbeb29Mark Andrews 467. [bug] dns_master_load*() failed to log an error if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pushfile() failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 466. [bug] dns_master_load*() could return success when it failed.
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews 465. [cleanup] Allow 0 to be set as an omapi_value_t value by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews omapi_value_storeint().
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews 464. [cleanup] Build with openssl's RSA code instead of dnssafe.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 463. [bug] nsupdate sent malformed SOA queries to the second
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews and subsequent name servers in resolv.conf if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query sent to the first one failed.
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson 462. [bug] --disable-ipv6 should work now.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 461. [bug] Specifying an unknown key in the "keys" clause of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "controls" statement caused a NULL pointer dereference.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 460. [bug] Much of the DNSSEC code only worked with class IN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 459. [bug] Nslookup processed the "set" command incorrectly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 458. [bug] Nslookup didn't properly check class and type values.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 457. [bug] Dig/host/hslookup didn't properly handle connect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeouts in certain situations, causing an
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews unnecessary warning message to be printed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 456. [bug] Stub zones were not resetting the refresh and expire
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson counters, loadtime or clearing the DNS_ZONE_REFRESH
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (refresh in progress) flag upon successful update.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This disabled further refreshing of the stub zone,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing it to eventually expire. [RT #300]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 455. [doc] Document IPv4 prefix notation does not require a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dotted decimal quad but may be just dotted decimal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 454. [bug] Enforce dotted decimal and dotted decimal quad where
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documented as such in named.conf. [RT #304, RT #311]
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews 453. [bug] Warn if the obsolete option "maintain-ixfr-base"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is specified in named.conf. [RT #306]
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson 452. [bug] Warn if the unimplemented option "statistics-file"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is specified in named.conf. [RT #301]
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews 451. [func] Update forwarding implemented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 450. [func] New function ns_client_sendraw().
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson 449. [bug] isc_bitstring_copy() only works correctly if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews two bitstrings have the same lsb0 value, but this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requirement was not documented, nor was there a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews REQUIRE for it.
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson 448. [bug] Host output formatting change, to match v8. [RT #255]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 447. [bug] Dig didn't properly retry in TCP mode after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a truncated reply. [RT #277]
9bdb01e6c382e897572791b12190472955994d87Mark Andrews 446. [bug] Confusing notify log message. [RT #298]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson bitstring triggered a REQUIRE statement. The REQUIRE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement was incorrect. [RT #297]
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson 444. [func] "recursion denied" messages are always logged at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews debug level 1, now, rather than sometimes at ERROR.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This silences these warnings in the usual case, where
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews some clients set the RD bit in all queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 443. [bug] When loading a master file failed because of an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unrecognized RR type name, the error message
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews did not include the file name and line number.
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson 442. [bug] TSIG signed messages that did not match any view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews crashed the server. [RT #290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 441. [bug] Nodes obscured by a DNAME were inaccessible even
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson when DNS_DBFIND_GLUEOK was set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 440. [func] New function dns_zone_forwardupdate().
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson 439. [func] New function dns_request_createraw().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 438. [func] New function dns_message_getrawmessage().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 437. [func] Log NOTIFY activity to the notify channel.
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson 436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which sometimes happens on Linux, named would enter
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a busy loop. Also, unexpected socket errors were
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson not logged at a high enough logging level to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews useful in diagnosing this situation. [RT #275]
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson 435. [bug] dns_zone_dump() overwrote existing zone files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than writing to a temporary file and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews renaming. This could lead to empty or partial
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone files being left around in certain error
3fc4c1434d7ac377c720640e2e925a3af567cccbMark Andrews conditions involving the initial transfer of a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews slave zone, interfering with subsequent server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews startup. [RT #282]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 434. [func] New function isc_file_isabsolute().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 433. [func] isc_base64_decodestring() now accepts newlines
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews within the base64 data. This makes it possible
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews to break up the key data in a "trusted-keys"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement into multiple lines. [RT #284]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 432. [func] Added refresh/retry jitter. The actual refresh/
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews retry time is now a random value between 75% and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 100% of the configured value.
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews 431. [func] Log at ISC_LOG_INFO when a zone is successfully
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 430. [bug] Rewrote the lightweight resolver client management
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews code to handle shutdown correctly and general
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 429. [bug] The space reserved for a TSIG record in a response
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson was 2 bytes too short, leading to message
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generation failures.
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson 428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNS_R_BADDB for nodes which had neither NXT nor SIG NXT
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (e.g. glue). This could cause SERVFAILs when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generating negative responses in a secure zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 427. [bug] Avoid going into an infinite loop when the validator
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gets a negative response to a key query where the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records are signed by the missing key.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 426. [bug] Attempting to generate an oversized RSA key could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause dnssec-keygen to dump core.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 425. [bug] Warn about the auth-nxdomain default value change
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if there is no auth-nxdomain statement in the
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson config file. [RT #287]
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews 424. [bug] notify_createmessage() could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure when creating the notify message failed,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews e.g. due to corrupt zones with multiple SOA records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 423. [bug] When responding to a recursive query, errors that occur
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after following a CNAME should cause the query to fail.
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews 422. [func] get rid of isc_random_t, and make isc_random_get()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and isc_random_jitter() use rand() internally
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of local state. Note that isc_random_*()
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson functions are only for weak, non-critical "randomness"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews such as timing jitter and such.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 421. [bug] nslookup would exit when given a blank line as input.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 420. [bug] nslookup failed to implement the "exit" command.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 419. [bug] The certificate type PKIX was misspelled as SKIX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 418. [bug] At debug levels >= 10, getting an unexpected
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews socket receive error would crash the server
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson while trying to log the error message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 417. [func] Add isc_app_block() and isc_app_unblock(), which
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington allow an application to handle signals while
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson 416. [bug] Slave zones with no master file tried to use a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NULL pointer for a journal file name when they
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews received an IXFR. [RT #273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 415. [bug] The logging code leaked file descriptors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 414. [bug] Server did not shut down until all incoming zone
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson transfers were finished.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 413. [bug] Notify could attempt to use the zone database after
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson it had been unloaded. [RT#267]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 412. [bug] named -v didn't print the version.
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson 411. [bug] A typo in the HS A code caused an assertion failure.
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson 410. [bug] lwres_gethostbyname() and company set lwres_h_errno
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to a random value on success.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 409. [bug] If named was shut down early in the startup
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews process, ns_omapi_shutdown() would attempt to lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an uninitialized mutex. [RT #262]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 408. [bug] stub zones could leak memory and reference counts if
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews all the masters were unreachable.
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson 407. [bug] isc_rwlock_lock() would needlessly block
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews readers when it reached the read quota even
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson if no writers were waiting.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 406. [bug] Log messages were occasionally lost or corrupted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to a race condition in isc_log_doit().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 405. [func] Add support for selective forwarding (forward zones)
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson 404. [bug] The request library didn't completely work with IPv6.
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington 403. [bug] "host" did not use the search list.
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews 402. [bug] Treat undefined acls as errors, rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews warning and then later throwing an assertion.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 401. [func] Added simple database API.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 400. [bug] SIG(0) signing and verifying was done incorrectly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 399. [bug] When reloading the server with a config file
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews containing a syntax error, it could catch an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure trying to perform zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews maintenance on, or sending notifies from,
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews tentatively created zones whose views were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews never fully configured and lacked an address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews database and request manager.
36e37042c6c9252cdf6eb99bd71ccb6e6c43ba6dBrian Wellington 398. [bug] "dig" sometimes caught an assertion failure when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using TSIG, depending on the key length.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 397. [func] Added utility functions dns_view_gettsig() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_view_getpeertsig().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 396. [doc] There is now a man page for "nsupdate"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 395. [bug] nslookup printed incorrect RR type mnemonics
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for RRs of type >= 21 [RT #237].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 394. [bug] Current name was not propagated via $INCLUDE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 393. [func] Initial answer while loading (awl) support.
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews Entry points: dns_master_loadfileinc(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_master_loadstreaminc(), dns_master_loadbufferinc().
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson Note: calls to dns_master_load*inc() should be rate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be rate limited so as to not use up all file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson not support the given address family requested.
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson 391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 390. [func] The function dns_zone_setdbtype() now takes
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson an argc/argv style vector of words and sets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews both the zone database type and its arguments,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews making the functions dns_zone_adddbarg()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dns_zone_cleardbargs() unnecessary.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 389. [bug] Attempting to send a request over IPv6 using
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson dns_request_create() on a system without IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support caused an assertion failure [RT #235].
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson 388. [func] dig and host can now do reverse ipv6 lookups.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 387. [func] Add dns_byaddr_createptrname(), which converts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an address into the name used by a PTR query.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 386. [bug] Missing strdup() of ACL name caused random
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ACL matching failures [RT #228].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dns_zt_print().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson of 2147483647.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 383. [func] When writing a master file, print the SOA and NS
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington records (and their SIGs) before other records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 382. [bug] named -u failed on many Linux systems where the
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson libc provided kernel headers do not match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the current kernel.
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews 381. [bug] Check for IPV6_RECVPKTINFO and use it instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPV6_PKTINFO if found. [RT #229]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 380. [bug] nsupdate didn't work with IPv6.
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews 379. [func] New library function isc_sockaddr_anyofpf().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 378. [func] named and lwresd will log the command line arguments
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews they were started with in the "starting ..." message.
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson 377. [bug] When additional data lookups were refused due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "allow-query", the databases were still being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attached causing reference leaks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 376. [bug] The server should always use good entropy when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews performing cryptographic functions needing entropy.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 375. [bug] Per-zone "allow-query" did not properly override the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews view/global one for CNAME targets and additional
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews data [RT #220].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 374. [bug] SOA in authoritative negative responses had wrong TTL.
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews 373. [func] nslookup is now installed by "make install".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 372. [bug] Deal with Microsoft DNS servers appending two bytes of
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews garbage to zone transfer requests.
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson 371. [bug] At high debug levels, doing an outgoing zone transfer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of a very large RRset could cause an assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews during logging.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 370. [bug] The error messages for roll-forward failures were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overly terse.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 369. [func] Support new named.conf options, view and zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-retry-time, min-retry-time,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-refresh-time, min-refresh-time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 368. [func] Restructure the internal ".bind" view so that more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones can be added to it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 367. [bug] Allow proper selection of server on nslookup command
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson 366. [func] Allow use of '-' batch file in dig for stdin.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 365. [bug] nsupdate -k leaked memory.
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews 364. [func] Added additional-from-{cache,auth}
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 363. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 362. [bug] rndc no longer aborts if the configuration file is
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews missing an options statement. [RT #209]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed 361. [func] When the RBT find or chain functions set the name and
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews origin for a node that stores the root label
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the name is now set to an empty name, instead of ".",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to simplify later use of the name and origin by
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews dns_name_concatenate(), dns_name_totext() or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_format().
6f7660093e70d3a7c80738b681ac0f5c1b661c00Mark Andrews 360. [func] dns_name_totext() and dns_name_format() now allow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an empty name to be passed, which is formatted as "@".
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews 359. [bug] dnssec-signzone occasionally signed glue records.
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews 358. [cleanup] Rename the intermediate files used by the dnssec
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson 357. [bug] The zone file parser crashed if the argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to $INCLUDE was a quoted string.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 356. [cleanup] isc_task_send no longer requires event->sender to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be non-null.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 355. [func] Added isc_dir_createunique(), similar to mkdtemp().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 354. [doc] Man pages for the dnssec tools are now included in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the distribution, in doc/man/dnssec.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 353. [bug] double increment in lwres/gethost.c:copytobuf().
ec5a06ccf7b15f07d20fd872c3dc1ab8f82f2ceaMark Andrews 352. [bug] Race condition in dns_client_t startup could cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signed query could crash the server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 350. [bug] Also-notify lists specified in the global options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews block were not correctly reference counted, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a memory leak.
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson 349. [bug] Processing a query with the CD bit set now works
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as expected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 348. [func] New boolean named.conf options 'additional-from-auth'
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson and 'additional-from-cache' now supported in view and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews global options statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 347. [bug] Don't crash if an argument is left off options in dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 346. [placeholder]
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson 345. [bug] Large-scale changes/cleanups to dig:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * Significantly improve structure handling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * Don't pre-load entire batch files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * Fix SIGINT handling
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson * Shorten timeouts to match v8's behavior
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 344. [bug] When shutting down, lwresd sometimes tried
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington to shut down its client tasks twice,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews triggering an assertion.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 343. [bug] Although zone maintenance SOA queries and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify requests were signed with TSIG keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when configured for the server in case,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the TSIG was not verified on the response.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 342. [bug] The wrong name was being passed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_dup() when generating a TSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key using TKEY.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 341. [func] Support 'key' clause in named.conf zone masters
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement to allow authentication via TSIG keys:
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington 10.0.0.1 port 5353 key "foo";
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews 340. [bug] The top-level COPYRIGHT file was missing from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the distribution.
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington 339. [bug] DNSSEC validation of the response to an ANY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query at a name with a CNAME RR in a secure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone triggered an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 338. [bug] lwresd logged to syslog as named, not lwresd.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 337. [bug] "dig" did not recognize "nsap-ptr" as an RR type
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington on the command line.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 336. [bug] "dig -f" used 64 k of memory for each line in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the file. It now uses much less, though still
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews proportionally to the file size.
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson 335. [bug] named would occasionally attempt recursion when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it was disallowed or undesired.
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews 334. [func] Added hmac-md5 to libisc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 333. [bug] The resolver incorrectly accepted referrals to
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson domains that were not parents of the query name,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing assertion failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 332. [func] New function dns_name_reset().
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson 331. [bug] Only log "recursion denied" if RD is set. [RT #178]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 330. [bug] Many debugging messages were partially formatted
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson even when debugging was turned off, causing a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews significant decrease in query performance.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 329. [func] omapi_auth_register() now takes a size_t argument for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the length of a key's secret data. Previously
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OMAPI only stored secrets up to the first NUL byte.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 328. [func] Added isc_base64_decodestring().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 327. [bug] rndc.conf parser wasn't correctly recognizing an IP
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson address where a host specification was required.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 326. [func] 'keys' in an 'inet' control statement is now
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington required and must have at least one item in it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A "not supported" warning is now issued if a 'unix'
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington control channel is defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 325. [bug] isc_lex_gettoken was processing octal strings when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_LEXOPT_CNUMBER was not set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 324. [func] In the resolver, turn EDNS0 off if there is no
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson response after a number of retransmissions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This is to allow queries some chance of succeeding
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews even if all the authoritative servers of a zone
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley silently discard EDNS0 requests instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sending an error response like they ought to.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington Because of this, servers authoritative for a parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and grandchild zone but not authoritative for the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews intervening child zone did not correctly issue
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington referrals to the servers of the child zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 322. [bug] Queries for KEY RRs are now sent to the parent
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson server before the authoritative one, making
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSSEC insecurity proofs work in many cases
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews where they previously didn't.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 321. [bug] When synthesizing a CNAME RR for a DNAME
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response, query_addcname() failed to initialize
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington the type and class of the CNAME dns_rdata_t,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing random failures.
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington 320. [func] Multiple rndc changes: parses an rndc.conf file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews uses authentication to talk to named, command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews line syntax changed. This will all be described
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson 319. [func] The named.conf "controls" statement is now used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to configure the OMAPI command channel.
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson 318. [func] dns_c_ndcctx_destroy() could never return anything
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews except ISC_R_SUCCESS; made it have void return instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 317. [func] Use callbacks from libomapi to determine if a
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington new connection is valid, and if a key requested
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be used with that connection is valid.
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson 316. [bug] Generate a warning if we detect an unexpected <eof>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but treat as <eol><eof>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 315. [bug] Handle non-empty blanks lines. [RT #163]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 314. [func] The named.conf controls statement can now have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more than one key specified for the inet clause.
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson 313. [bug] When parsing resolv.conf, don't terminate on an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. Instead, parse as much as possible, but
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews still return an error if one was found.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 312. [bug] Increase the number of allowed elements in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolv.conf search path from 6 to 8. If there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are more than this, ignore the remainder rather
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than returning a failure in lwres_conf_parse.
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews 311. [bug] lwres_conf_parse failed when the first line of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolv.conf was empty or a comment.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 310. [func] Changes to named.conf "controls" statement (inet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews subtype only)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - support "keys" clause
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence inet * port 1024
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow { any; } keys { "foo"; }
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - allow "port xxx" to be left out of statement,
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence in which case it defaults to omapi's default port
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 309. [bug] When sending a referral, the server did not look
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson for name server addresses as glue in the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews holding the NS RRset in the case where this zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was not the same as the one where it looked for
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington name server addresses as authoritative data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 308. [bug] Treat a SOA record not at top of zone as an error
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington when loading a zone. [RT #154]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 307. [bug] When canceling a query, the resolver didn't check for
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson isc_socket_sendto() calls that did not yet have their
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completion events posted, so it could (rarely) end up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews destroying the query context and then want to use
ef8d97818f0d30a4e09db97af695f504b311372cMark Andrews it again when the send event posted, triggering an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion as it tried to cancel an already-canceled
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson query. [RT #77]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 306. [bug] Reading HMAC-MD5 private key files didn't work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 305. [bug] When reloading the server with a config file
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson containing a syntax error, it could catch an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure trying to perform zone
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson maintenance on tentatively created zones whose
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews views were never fully configured and lacked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an address database.
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are listed in resolv.conf, silently ignore them
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of returning failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 303. [bug] Add additional sanity checks to differentiate a AXFR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response vs a IXFR response. [RT #157]
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence 302. [bug] In dig, host, and nslookup, MXNAME should be large
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enough to hold any legal domain name in presentation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format + terminating NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 301. [bug] Uninitialized pointer in host:printmessage(). [RT #159]
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence 300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on platforms lacking IPv6 because each included their
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews own ipv6 header file for the missing definitions. Now
6c35e4dd17e6562a6b4d106cbf1d824b9f529356David Lawrence each library's ipv6.h defines the wrapper symbol of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the other (ISC_IPV6_H and LWRES_IPV6_H).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 299. [cleanup] Get the user and group information before changing the
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence root directory, so the administrator does not need to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews keep a copy of the user and group databases in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews chroot'ed environment. Suggested by Hakan Olsson.
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson 298. [bug] A mutex deadlock occurred during shutdown of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interface manager under certain conditions.
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson Digital Unix systems were the most affected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 297. [bug] Specifying a key name that wasn't fully qualified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in certain parts of the config file could cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 296. [bug] "make install" from a separate build directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed unless configure had been run in the source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directory, too.
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson 295. [bug] When invoked with type==CNAME and a message
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not constructed by dns_message_parse(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_message_findname() failed to find anything
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to checking for attribute bits that are set
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington only in dns_message_parse(). This caused an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews infinite loop when constructing the response to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an ANY query at a CNAME in a secure zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 294. [bug] If we run out of space in while processing glue
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when reading a master file and commit "current name"
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews reverts to "name_current" instead of staying as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "name_glue".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 293. [port] Add support for FreeBSD 4.0 system tests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 292. [bug] Due to problems with the way some operating systems
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews handle simultaneous listening on IPv4 and IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses, the server no longer listens on IPv6
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews addresses by default. To revert to the previous
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews behavior, specify "listen-on-v6 { any; };" in
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews the config file.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 291. [func] Caching servers no longer send outgoing queries
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews over TCP just because the incoming recursive query
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews was a TCP one.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 290. [cleanup] +twiddle option to dig (for testing only) removed.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 289. [cleanup] dig is now installed in $bindir instead of $sbindir.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews host is now installed in $bindir. (Be sure to remove
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews any $sbindir/dig from a previous release.)
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 288. [func] rndc is now installed by "make install" into $sbindir.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 287. [bug] rndc now works again as "rndc 127.1 reload" (for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only that task). Parsing its configuration file and
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews using digital signatures for authentication has been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews disabled until named supports the "controls" statement,
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 286. [bug] On Solaris 2, when named inherited a signal state
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews where SIGHUP had the SIG_IGN action, SIGHUP would
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews be ignored rather than causing the server to reload
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews its configuration.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 285. [bug] A change made to the dst API for beta4 inadvertently
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews broke OMAPI's creation of a dst key from an incoming
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews message, causing an assertion to be triggered. Fixed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 284. [func] The DNSSEC key generation and signing tools now
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson generate randomness from keyboard input on systems
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson 283. [cleanup] The 'lwresd' program is now a link to 'named'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too big for an unsigned long.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 281. [bug] Fixed list of recognized config file category names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 280. [func] Add isc-config.sh, which can be used to more
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson easily build applications that link with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews our libraries.
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson 279. [bug] Private omapi function symbols shared between
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews two or more files in libomapi.a were not namespace
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews protected using the ISC convention of starting with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the library name and two underscores ("omapi__"...)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 278. [bug] bin/named/logconf.c:category_fromconf() didn't take
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews note of when isc_log_categorybyname() wasn't able
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to find the category name and would then apply the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews channel list of the unknown category to all categories.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 277. [bug] isc_log_categorybyname() and isc_log_modulebyname()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would fail to find the first member of any category
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or module array apart from the internal defaults.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence Thus, for example, the "notify" category was improperly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured by named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 276. [bug] dig now supports maximum sized TCP messages.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence 275. [bug] The definition of lwres_gai_strerror() was missing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the lwres_ prefix.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 274. [bug] TSIG AXFR verify failed when talking to a BIND 8
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 273. [func] The default for the 'transfer-format' option is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now 'many-answers'. This will break zone transfers
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews to BIND 4.9.5 and older unless there is an explicit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'one-answer' configuration.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 272. [bug] The sending of large TCP responses was canceled
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews in mid-transmission due to a race condition
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews caused by the failure to set the client object's
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington "newstate" variable correctly when transitioning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the "working" state.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 271. [func] Attempt to probe the number of cpus in named
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews if unspecified rather than defaulting to 1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 270. [func] Allow maximum sized TCP answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 269. [bug] Failed DNSSEC validations could cause an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure by causing clone_results() to be called with
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence with hevent->node == NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 268. [doc] A plain text version of the Administrator
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson Reference Manual is now included in the distribution,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 267. [func] Nsupdate is now provided in the distribution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 266. [bug] zone.c:save_nsrrset() node was not initialized.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 265. [bug] dns_request_create() now works for TCP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 264. [func] Dispatch can not take TCP sockets in connecting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews state. Set DNS_DISPATCHATTR_CONNECTED when calling
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence dns_dispatch_createtcp() for connected TCP sockets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or call dns_dispatch_starttcp() when the socket is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 263. [func] New logging channel type 'stderr'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews channel some-name {
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence severity error;
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence 262. [bug] 'master' was not initialized in zone.c:stub_callback().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 261. [func] Add dns_zone_markdirty().
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence 260. [bug] Running named as a non-root user failed on Linux
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews kernels new enough to support retaining capabilities
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after setuid().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 259. [func] New random-device and random-seed-file statements
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for global options block of named.conf. Both accept
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a single string argument.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 258. [bug] Fixed printing of lwres_addr_t.address field.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 257. [bug] The server detached the last zone manager reference
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too early, while it could still be in use by queries.
5455f30a7532738d750252c00e649890c694ee30Brian Wellington This manifested itself as assertion failures during the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews shutdown process for busy name servers. [RT #133]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 256. [func] isc_ratelimiter_t now has attach/detach semantics, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_ratelimiter_shutdown guarantees that the rate
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington limiter is detached from its task.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 255. [func] New function dns_zonemgr_attach().
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews 254. [bug] Suppress "query denied" messages on additional data
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson --- 9.0.0b4 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 253. [func] resolv.conf parser now recognizes ';' and '#' as
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson comments (anywhere in line, not just as the beginning).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 252. [bug] resolv.conf parser mishandled masks on sortlists.
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson It also aborted when an unrecognized keyword was seen,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now it silently ignores the entire line.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 251. [bug] lwresd caught an assertion failure on startup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 250. [bug] fixed handling of size+unit when value would be too
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson large for internal representation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 249. [cleanup] max-cache-size config option now takes a size-spec
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews like 'datasize', except 'default' is not allowed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 248. [bug] global lame-ttl option was not being printed when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews config structures were written out.
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson 247. [cleanup] Rename cache-size config option to max-cache-size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 246. [func] Rename global option cachesize to cache-size and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews add corresponding option to view statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 245. [bug] If an uncompressed name will take more than 255
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bytes and the buffer is sufficiently long,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_fromwire should return DNS_R_FORMERR,
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson not ISC_R_NOSPACE. This bug caused cause the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server to catch an assertion failure when it
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington received a query for a name longer than 255
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 244. [bug] empty named.conf file and empty options statement are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now parsed properly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 243. [func] new cachesize option for named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 242. [cleanup] fixed incorrect warning about auth-nxdomain usage.
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson 241. [cleanup] nscount and soacount have been removed from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_master_*() argument lists.
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson 240. [func] databases now come in three flavours: zone, cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 239. [func] If ISC_MEM_DEBUG is enabled, the variable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_mem_debugging controls whether messages
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson are printed or not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 238. [cleanup] A few more compilation warnings have been quieted:
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson + missing sigwait prototype on BSD/OS 4.0/4.0.1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews + PTHREAD_ONCE_INIT unbraced initializer warnings on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Solaris 2.8.
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington + IN6ADDR_ANY_INIT unbraced initializer warnings on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BSD/OS 4.*, Linux and Solaris 2.8.
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington 237. [bug] If connect() returned ENOBUFS when the resolver was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initiating a TCP query, the socket didn't get
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews destroyed, and the server did not shut down cleanly.
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson 236. [func] Added new listen-on-v6 config file statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 235. [func] Consider it a config file error if a listen-on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement has an IPv6 address in it, or a
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley listen-on-v6 statement has an IPv4 address in it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 234. [bug] Allow a trusted-key's first field (domain-name) be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews either a quoted or an unquoted string, instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requiring a quoted string.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 233. [cleanup] Convert all config structure integer values to unsigned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews integer (isc_uint32_t) to match grammar.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 232. [bug] Allow slave zones to not have a file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 231. [func] Support new 'port' clause in config file options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews section. Causes 'listen-on', 'masters' and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'also-notify' statements to use its value instead of
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence default (53).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 230. [func] Replace the dst sign/verify API with a cleaner one.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 229. [func] Support config file sig-validity-interval statement
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson in options, views and zone statements (master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones only).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 228. [cleanup] Logging messages in config module stripped of
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson trailing period.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 227. [cleanup] The enumerated identifiers dns_rdataclass_*,
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson dns_rcode_*, dns_opcode_*, and dns_trust_* are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews also now cast to their appropriate types, as with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdatatype_* in item number 225 below.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 226. [func] dns_name_totext() now always prints the root name as
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington '.', even when omit_final_dot is true.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 225. [cleanup] The enumerated dns_rdatatype_* identifiers are now
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington cast to dns_rdatatype_t via macros of their same name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews so that they are of the proper integral type wherever
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a dns_rdatatype_t is needed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 224. [cleanup] The entire project builds cleanly with gcc's
2b7a77a68e27fc7991a857d403cb34b2ae90fc0bMark Andrews -Wcast-qual and -Wwrite-strings warnings enabled,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which is now the default when using gcc. (Warnings
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from confparser.c, because of yacc's code, are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unfortunately to be expected.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 223. [func] Several functions were re-prototyped to qualify one
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews or more of their arguments with "const". Similarly,
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews several functions that return pointers now have
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews those pointers qualified with const.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 222. [bug] The global 'also-notify' option was ignored.
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington 221. [bug] An uninitialized variable was sometimes passed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_freestruct() when loading a zone, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure.
55ddb88e53838693370c213930beda1652b8a583Brian Wellington 220. [cleanup] Set the default outgoing port in the view, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set it in sockaddrs returned from the ADB.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [31-May-2000 explorer]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 219. [bug] Signed truncated messages more correctly follow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the respective specs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 218. [func] When an rdataset is signed, its ttl is normalized
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews based on the signature validity period.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 217. [func] Also-notify and trusted-keys can now be used in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the 'view' statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 216. [func] The 'max-cache-ttl' and 'max-ncache-ttl' options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 215. [bug] Failures at certain points in request processing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause the assertion INSIST(client->lockview
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence == NULL) to be triggered.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 214. [func] New public function isc_netaddr_format(), for
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence formatting network addresses in log messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 213. [bug] Don't leak memory when reloading the zone if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an update-policy clause was present in the old zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 212. [func] Added dns_message_get/settsigkey, to make TSIG
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington key management reasonable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 211. [func] The 'key' and 'server' statements can now occur
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington inside 'view' statements.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 210. [bug] The 'allow-transfer' option was ignored for slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones, and the 'transfers-per-ns' option was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was ignored for all zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 209. [cleanup] Upgraded openssl files to new version 0.9.5a
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson 208. [func] Added ISC_OFFSET_MAXIMUM for the maximum value
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of an isc_offset_t.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 207. [func] The dnssec tools properly use the logging subsystem.
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson 206. [cleanup] dst now stores the key name as a dns_name_t, not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 205. [cleanup] On IRIX, turn off the mostly harmless warnings 1692
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington ("prototyped function redeclared without prototype")
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and 1552 ("variable ... set but not used") when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compiling in the lib/dns/sec/{dnssafe,openssl}
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directories, which contain code imported from outside
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington to quiet the warnings that "The linked output may not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews run on a PA 1.x system."
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson 203. [func] notify and zone soa queries are now tsig signed when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews appropriate.
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson 202. [func] isc_lex_getsourceline() changed from returning int
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to returning unsigned long, the type of its underlying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 201. [cleanup] Removed the test/sdig program, it has been
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington --- 9.0.0b3 released ---
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson 200. [bug] Failures in sending query responses to clients
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (e.g., running out of network buffers) were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 199. [bug] isc_heap_delete() sometimes violated the heap
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews invariant, causing timer events not to be posted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 198. [func] Dispatch managers hold memory pools which
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson any managed dispatcher may use. This allows
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews us to avoid dipping into the memory context for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews most allocations. [19-May-2000 explorer]
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington 197. [bug] When an incoming AXFR or IXFR completes, the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone's internal state is refreshed from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SOA data. [19-May-2000 explorer]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 196. [func] Dispatchers can be shared easily between views
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson and/or interfaces. [19-May-2000 explorer]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence 195. [bug] Including the NXT record of the root domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a negative response caused an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 194. [doc] The PDF version of the Administrator's Reference
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson Manual is no longer included in the ISC BIND9
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews distribution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 193. [func] changed dst_key_free() prototype.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 192. [bug] Zone configuration validation is now done at end
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of config file parsing, and before loading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 191. [func] Patched to compile on UnixWare 7.x. This platform
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews is not directly supported by the ISC.
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley 190. [cleanup] The DNSSEC tools have been moved to a separate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directory dnssec/ and given the following new,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more descriptive names:
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley dnssec-keygen
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley dnssec-signkey
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-makekeyset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Their command line arguments have also been changed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be more consistent. dnssec-keygen now prints the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name of the generated key files (sans extension)
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson on standard output to simplify its use in automated
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson 189. [func] isc_time_secondsastimet(), a new function, will ensure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that the number of seconds in an isc_time_t does not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exceed the range of a time_t, or return ISC_R_RANGE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Similarly, isc_time_now(), isc_time_nowplusinterval(),
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson isc_time_add() and isc_time_subtract() now check the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews range for overflow/underflow. In the case of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_time_subtract, this changed a calling requirement
90c099e88e9f16bfee9edee3ac1a51fc98843772Brian Wellington (ie, something that could generate an assertion)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews into merely a condition that returns an error result.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_time_add() and isc_time_subtract() were void-
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley valued before but now return isc_result_t.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 188. [func] Log a warning message when an incoming zone transfer
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington contains out-of-zone data.
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson 187. [func] isc_ratelimiter_enqueue() has an additional argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 186. [func] dns_request_getresponse() has an additional argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'preserve_order'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 185. [bug] Fixed up handling of ISC_MEMCLUSTER_LEGACY. Several
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews public functions did not have an isc__ prefix, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referred to functions that had previously been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 184. [cleanup] Variables/functions which began with two leading
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews underscores were made to conform to the ANSI/ISO
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews standard, which says that such names are reserved.
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson 183. [func] ISC_LOG_PRINTTAG option for log channels. Useful
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for logging the program name or other identifier.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 182. [cleanup] New command-line parameters for dnssec tools
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 181. [func] Added dst_key_buildfilename and dst_key_parsefilename
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 180. [func] New isc_result_t ISC_R_RANGE. Supersedes DNS_R_RANGE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 179. [func] options named.conf statement *must* now come
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before any zone or view statements.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 178. [func] Post-load of named.conf check verifies a slave zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has non-empty list of masters defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 177. [func] New per-zone boolean:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enable-zone yes | no ;
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson intended to let a zone be disabled without having
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to comment out the entire zone statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 176. [func] New global and per-view option:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-cache-ttl number
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington 175. [func] New global and per-view option:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews additional-data internal | minimal | maximal;
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington 174. [func] New public function isc_sockaddr_format(), for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews formatting socket addresses in log messages.
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson 173. [func] Keep a queue of zones waiting for zone transfer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews quota so that a new transfer can be dispatched
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews immediately whenever quota becomes available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 172. [bug] $TTL directive was sometimes missing from dumped
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews master files because totext_ctx_init() failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initialize ctx->current_ttl_valid.
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson 171. [cleanup] On NetBSD systems, the mit-pthreads or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unproven-pthreads library is now always used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unless --with-ptl2 is explicitly specified on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the configure command line. The
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington --with-mit-pthreads option is no longer needed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and has been removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 170. [cleanup] Remove inter server consistency checks from zone,
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington these should return as a separate module in 9.1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_checkservers(), dns_zone_checkparents(),
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington dns_zone_checkchildren(), dns_zone_checkglue().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Remove dns_zone_setadb(), dns_zone_setresolver(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_setrequestmgr() these should now be found
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington via the view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 169. [func] ratelimiter can now process N events per interval.
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson 168. [bug] include statements in named.conf caused syntax errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to not consuming the semicolon ending the include
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson statement before switching input streams.
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews 167. [bug] Make lack of masters for a slave zone a soft error.
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson 166. [bug] Keygen was overwriting existing keys if key_id
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conflicted, now it will retry, and non-null keys
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews with key_id == 0 are not generated anymore. Key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was not able to generate NOAUTHCONF DSA key,
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson increased RSA key size to 2048 bits.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 165. [cleanup] Silence "end-of-loop condition not reached" warnings
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley from Solaris compiler.
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington 164. [func] Added functions isc_stdio_open(), isc_stdio_close(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_stdio_seek(), isc_stdio_read(), isc_stdio_write(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_stdio_flush(), isc_stdio_sync(), isc_file_remove()
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington to encapsulate nonportable usage of errno and sync.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 163. [func] Added result codes ISC_R_FILENOTFOUND and
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington ISC_R_FILEEXISTS.
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson 162. [bug] Ensure proper range for arguments to ctype.h functions.
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt 161. [cleanup] error in yyparse prototype that only HPUX caught.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 160. [cleanup] getnet*() are not going to be implemented at this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 159. [func] Redefinition of config file elements is now an
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington error (instead of a warning).
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington 158. [bug] Log channel and category list copy routines
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews weren't assigning properly to output parameter.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 157. [port] Fix missing prototype for getopt().
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley 156. [func] Support new 'database' statement in zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews database "quoted-string";
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 155. [bug] ns_notify_start() was not detaching the found zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 154. [func] The signer now logs libdns warnings to stderr even when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not verbose, and in a nicer format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 153. [func] dns_rdata_tostruct() 'mctx' is now optional. If 'mctx'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is NULL then you need to preserve the 'rdata' until
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson you have finished using the structure as there may be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews references to the associated memory. If 'mctx' is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-NULL it is guaranteed that there are no references
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson to memory associated with 'rdata'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_freestruct() must be called if 'mctx' was
7427490a67b9547242b57c255254f7e146127c48Bob Halley non-NULL and may safely be called if 'mctx' was NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 152. [bug] keygen dumped core if domain name argument was omitted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from command line.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 151. [func] Support 'disabled' statement in zone config (causes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone to be parsed and then ignored). Currently must
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson come after the 'type' clause.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 150. [func] Support optional ports in masters and also-notify
4499a6a3063eceb1c412f5165b9c5b47d32d5a62Evan Hunt masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 149. [cleanup] Removed unused argument 'olist' from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_c_view_unsetordering().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 148. [cleanup] Stop issuing some warnings about some configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file statements that were not implemented, but now are.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 147. [bug] Changed yacc union size to be smaller for yaccs that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews put yacc-stack on the real stack.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 146. [cleanup] More general redundant header file cleanup. Rather
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than continuing to itemize every header which changed,
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington this changelog entry just notes that if a header file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not need another header file that it was including
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in order to provide its advertised functionality, the
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington inclusion of the other header file was removed. See
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews util/check-includes for how this was tested.
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson 145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_LANG_ENDDECLS to header files that had function
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prototypes, and removed it from those that did not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 144. [cleanup] libdns header files too numerous to name were made
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to conform to the same style for multiple inclusion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 143. [func] Added function dns_rdatatype_isknown().
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews 142. [cleanup] <isc/stdtime.h> does not need <time.h> or
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson 141. [bug] Corrupt requests with multiple questions could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 140. [cleanup] <isc/time.h> does not need <time.h> or <isc/result.h>.
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson 139. [cleanup] <isc/net.h> now includes <isc/types.h> instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 138. [cleanup] isc_strtouq moved from str.[ch] to string.[ch] and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews renamed isc_string_touint64. isc_strsep moved from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews strsep.c to string.c and renamed isc_string_separate.
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson 137. [cleanup] <isc/commandline.h>, <isc/mem.h>, <isc/print.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/serial.h>, <isc/string.h> and <isc/offset.h>
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson made to conform to the same style for multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inclusion protection.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 136. [cleanup] <isc/commandline.h>, <isc/interfaceiter.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 135. [cleanup] Win32's <isc/condition.h> did not need <isc/result.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or <isc/boolean.h>, now uses <isc/types.h> in place
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and ISC_LANG_ENDDECLS.
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington 134. [cleanup] <isc/dir.h> does not need <limits.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 133. [cleanup] <isc/ipv6.h> needs <isc/platform.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 132. [cleanup] <isc/app.h> does not need <isc/task.h>, but does
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 131. [cleanup] <isc/mutex.h> and <isc/util.h> need <isc/result.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for ISC_R_* codes used in macros.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 130. [cleanup] <isc/condition.h> does not need <pthread.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/boolean.h>, and now includes <isc/types.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 129. [bug] The 'default_debug' log channel was not set up when
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews 'category default' was present in the config file
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington 128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_LANG_ENDDECLS at end of header.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 127. [cleanup] The contracts for the comparison routines
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_fullcompare(), dns_name_compare(),
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson dns_name_rdatacompare(), and dns_rdata_compare() now
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews specify that the order value returned is < 0, 0, or > 0
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of -1, 0, or 1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 126. [cleanup] <isc/quota.h> and <isc/taskpool.h> need <isc/lang.h>.
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington 125. [cleanup] <isc/eventclass.h>, <isc/ipv6.h>, <isc/magic.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/mutex.h>, <isc/once.h>, <isc/region.h>, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 124. [func] signer now imports parent's zone key signature
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews and creates null keys/sets zone status bit for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews children when necessary
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 123. [cleanup] <isc/event.h> does not need <stddef.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 122. [cleanup] <isc/task.h> does not need <isc/mem.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 121. [cleanup] <isc/symtab.h> does not need <isc/mem.h> or
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews <isc/result.h>. Multiple inclusion protection
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews symbol fixed from ISC_SYMBOL_H to ISC_SYMTAB_H.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_symtab_t moved to <isc/types.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 120. [cleanup] <isc/socket.h> does not need <isc/boolean.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/bufferlist.h>, <isc/task.h>, <isc/mem.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 119. [cleanup] structure definitions for generic rdata structures do
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson not have _generic_ in their names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews YACC crust (yyparse, etc) [2000-apr-27 explorer]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 117. [cleanup] libdns.a changes:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_clearnotify() and dns_zone_addnotify()
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson are replaced by dns_zone_setnotifyalso().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_clearmasters() and dns_zone_addmaster()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are replaced by dns_zone_setmasters().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on Unix systems).
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews 115. [port] Shut up the -Wmissing-declarations warning about
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington 114. [cleanup] <isc/sockaddr.h> does not need <isc/buffer.h> or
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington 113. [func] Utility programs dig and host added.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 112. [cleanup] <isc/serial.h> does not need <isc/boolean.h>.
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington 111. [cleanup] <isc/rwlock.h> does not need <isc/result.h> or
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews 110. [cleanup] <isc/result.h> does not need <isc/boolean.h> or
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington 109. [bug] "make depend" did nothing for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bin/tests/{db,mem,sockaddr,tasks,timers}/.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington <dns/types.h> to <dns/bit.h> and renamed to
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson 107. [func] Add keysigner and keysettool.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 106. [func] Allow dnssec verifications to ignore the validity
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews period. Used by several of the dnssec tools.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 105. [doc] doc/dev/coding.html expanded with other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implicit conventions the developers have used.
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson 104. [bug] Made compress_add and compress_find static to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 103. [func] libisc buffer API changes for <isc/buffer.h>:
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington isc_buffer_base(b) (pointer)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_current(b) (pointer)
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson isc_buffer_active(b) (pointer)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_used(b) (pointer)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_length(b) (int)
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington isc_buffer_usedlength(b) (int)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_consumedlength(b) (int)
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington isc_buffer_remaininglength(b) (int)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_activelength(b) (int)
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington isc_buffer_availablelength(b) (int)
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington ISC_BUFFER_USEDCOUNT(b)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_BUFFER_AVAILABLECOUNT(b)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_type(b)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Changed names:
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington isc_buffer_used(b, r) ->
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_usedregion(b, r)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_available(b, r) ->
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_available_region(b, r)
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews isc_buffer_consumed(b, r) ->
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_consumedregion(b, r)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_active(b, r) ->
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer isc_buffer_activeregion(b, r)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_remaining(b, r) ->
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_remainingregion(b, r)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Buffer types were removed, so the ISC_BUFFERTYPE_*
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews macros are no more, and the type argument to
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews isc_buffer_init and isc_buffer_allocate were removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_buffer_putstr is now void (instead of isc_result_t)
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington and requires that the caller ensure that there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is enough available buffer space for the string.
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington 102. [port] Correctly detect inet_aton, inet_pton and inet_ptop
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley 101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 100. [cleanup] <isc/random.h> does not need <isc/int.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/mutex.h>. isc_random_t moved to <isc/types.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 99. [cleanup] Rate limiter now has separate shutdown() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews destroy() functions, and it guarantees that all
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queued events are delivered even in the shutdown case.
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence 98. [cleanup] <isc/print.h> does not need <stdarg.h> or <stddef.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unless ISC_PLATFORM_NEEDVSNPRINTF is defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 97. [cleanup] <isc/ondestroy.h> does not need <stddef.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 96. [cleanup] <isc/mutex.h> does not need <isc/result.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 95. [cleanup] <isc/mutexblock.h> does not need <isc/result.h>.
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence 94. [cleanup] Some installed header files did not compile as C++.
046a9aca49bdc25bd57d75fd0dd34c021722f095Mark Andrews 93. [cleanup] <isc/msgcat.h> does not need <isc/result.h>.
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews 92. [cleanup] <isc/mem.h> does not need <stddef.h>, <isc/boolean.h>,
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews 91. [cleanup] <isc/log.h> does not need <sys/types.h> or
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson 90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 89. [cleanup] <isc/lex.h> does not need <stddef.h>.
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson 88. [cleanup] <isc/interfaceiter.h> does not need <isc/result.h> or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <isc/mem.h>. isc_interface_t and isc_interfaceiter_t
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 87. [cleanup] <isc/heap.h> does not need <isc/boolean.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence 85. [cleanup] <isc/bufferlist.h> does not need <isc/buffer.h>,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 84. [func] allow-query ACL checks now apply to all data
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence added to a response.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 83. [func] If the server is authoritative for both a
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington delegating zone and its (nonsecure) delegatee, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a query is made for a KEY RR at the top of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delegatee, then the server will look for a KEY
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence in the delegator if it is not found in the delegatee.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 82. [cleanup] <isc/buffer.h> does not need <isc/list.h>.
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence 81. [cleanup] <isc/int.h> and <isc/boolean.h> do not need
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 80. [cleanup] <isc/print.h> does not need <stdio.h> or <stdlib.h>.
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson 79. [cleanup] <dns/callbacks.h> does not need <stdio.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 78. [cleanup] lwres_conftest renamed to lwresconf_test for
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews consistency with other *_test programs.
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson 77. [cleanup] typedef of isc_time_t and isc_interval_t moved from
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington 76. [cleanup] Rewrote keygen.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 75. [func] Don't load a zone if its database file is older
7d33e8996948523e0180bc7e28a93d534d878dccAndreas Gustafsson than the last time the zone was loaded.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 74. [cleanup] Removed mktemplate.o and ufile.o from libisc.a,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 73. [func] New "file" API in libisc, including new function
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_file_getmodtime, isc_mktemplate renamed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_file_mktemplate and isc_ufile renamed to
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington isc_file_openunique. By no means an exhaustive API,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it is just what's needed for now.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson 72. [func] DNS_RBTFIND_NOPREDECESSOR and DNS_RBTFIND_NOOPTIONS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews added for dns_rbt_findnode, the former to disable the
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson setting of the chain to the predecessor, and the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews latter to make clear when no options are set.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson 71. [cleanup] Made explicit the implicit REQUIREs of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_time_seconds, isc_time_nanoseconds, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_time_subtract.
f53848e17123569387b279578f0100dca5407da5Mark Andrews 70. [func] isc_time_set() added.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 69. [bug] The zone object's master and also-notify lists grew
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington longer with each server reload.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 68. [func] Partial support for SIG(0) on incoming messages.
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson 67. [performance] Allow use of alternate (compile-time supplied)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 66. [func] Data in authoritative zones should have a trust level
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews beyond secure.
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington 65. [cleanup] Removed obsolete typedef of dns_zone_callbackarg_t
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson 64. [func] The RBT, DB, and zone table APIs now allow the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews caller find the most-enclosing superdomain of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 63. [func] Generate NOTIFY messages.
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson 62. [func] Add UDP refresh support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 61. [cleanup] Use single quotes consistently in log messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 60. [func] Catch and disallow singleton types on message
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 59. [bug] Cause net/host unreachable to be a hard error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when sending and receiving.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 58. [bug] bin/named/query.c could sometimes trigger the
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence (client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews == 0 assertion in query_newname().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 57. [func] Added dns_nxt_typepresent()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 56. [bug] SIG records were not properly returned in cached
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 55. [bug] Responses containing multiple names in the authority
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence section were not negatively cached.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 54. [bug] If a fetch with sigrdataset==NULL joined one with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sigrdataset!=NULL or vice versa, the resolver
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington could catch an assertion or lose signature data,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews respectively.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 52. [bug] rndc: taskmgr and socketmgr were not initialized
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 51. [cleanup] dns/compress.h and dns/zt.h did not need to include
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns/rbt.h; it was needed only by compress.c and zt.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 50. [func] RBT deletion no longer requires a valid chain to work,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dns_rbt_deletenode was added.
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson 49. [func] Each cache now has its own mctx.
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington 48. [func] isc_task_create() no longer takes an mctx.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_task_mem() has been eliminated.
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer 47. [func] A number of modules now use memory context reference
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence 46. [func] Memory contexts are now reference counted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Added isc_mem_inuse() and isc_mem_preallocate().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Renamed isc_mem_destroy_check() to
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington isc_mem_setdestroycheck().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 45. [bug] The trusted-key statement incorrectly loaded keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 44. [bug] Don't include authority data if it would force us
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson to unset the AD bit in the message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 43. [bug] DNSSEC verification of cached rdatasets was failing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 42. [cleanup] Simplified logging of messages with embedded domain
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington names by introducing a new convenience function
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_format().
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington 41. [func] Use PR_SET_KEEPCAPS on Linux 2.3.99-pre3 and later
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to allow 'named' to run as a non-root user while
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington retaining the ability to bind() to privileged
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington 40. [func] Introduced new logging category "dnssec" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews logging module "dns/validator".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 39. [cleanup] Moved the typedefs for isc_region_t, isc_textregion_t,
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington and isc_lex_t to <isc/types.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 38. [bug] TSIG signed incoming zone transfers work now.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 37. [bug] If the first RR in an incoming zone transfer was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not an SOA, the server died with an assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of just reporting an error.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 36. [cleanup] Change DNS_R_SUCCESS (and others) to ISC_R_SUCCESS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 35. [performance] Log messages which are of a level too high to be
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson logged by any channel in the logging configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will not cause the log mutex to be locked.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 34. [bug] Recursion was allowed even with 'recursion no'.
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson 33. [func] The RBT now maintains a parent pointer at each node.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 32. [cleanup] bin/lwresd/client.c needs <string.h> for memset()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 30. [func] config file grammar change to support optional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews class type for a view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 29. [func] support new config file view options:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews auth-nxdomain recursion query-source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query-source-v6 transfer-source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfer-source-v6 max-transfer-time-out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-transfer-idle-out transfer-format
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews request-ixfr provide-ixfr cleaning-interval
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fetch-glue notify rfc2308-type1 lame-ttl
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson max-ncache-ttl min-roots
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 28. [func] support lame-ttl, min-roots and serial-queries
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews config global options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 27. [bug] Only include <netinet6/in6.h> on BSD/OS 4.[01]*.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Including it on other platforms (eg, NetBSD) can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause a forced #error from the C preprocessor.
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson 26. [func] new match-clients statement in config file view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 25. [bug] make install failed to install <isc/log.h> and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 24. [cleanup] Eliminate some unnecessary #includes of header
59e1a928bc4253b91ead0f7c46be7d3984cb3016Bob Halley files from header files.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 23. [cleanup] Provide more context in log messages about client
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson requests, using a new function ns_client_log().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 22. [bug] SIGs weren't returned in the answer section when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the query resulted in a fetch.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 21. [port] Look at STD_CINCLUDES after CINCLUDES during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compilation, so additional system include directories
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews can be searched but header files in the bind9 source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews tree with conflicting names take precedence. This
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews avoids issues with installed versions of dnssafe and
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 20. [func] Configuration file post-load validation of zones
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews failed if there were no zones.
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson 19. [bug] dns_zone_notifyreceive() failed to unlock the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lock in certain error cases.
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington 18. [bug] Use AC_TRY_LINK rather than AC_TRY_COMPILE in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure.in to check for presence of in6addr_any.
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson 17. [func] Do configuration file post-load validation of zones.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 16. [bug] put quotes around key names on config file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output to avoid possible keyword clashes.
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson 15. [func] Add dns_name_dupwithoffsets(). This function is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews improves comparison performance for duped names.
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley 14. [bug] free_rbtdb() could have 'put' unallocated memory in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an unlikely error path.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 13. [bug] lib/dns/master.c and lib/dns/xfrin.c didn't ignore
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley out-of-zone data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 12. [bug] Fixed possible uninitialized variable error.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 11. [bug] axfr_rrstream_first() didn't check the result code of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews db_rr_iterator_first(), possibly causing an assertion
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson to be triggered later.
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson 10. [bug] A bug in the code which makes EDNS0 OPT records in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bin/named/client.c and lib/dns/resolver.c could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger an assertion.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 9. [cleanup] replaced bit-setting code in confctx.c and replaced
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson repeated code with macro calls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 8. [bug] Shutdown of incoming zone transfer accessed
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington freed memory.
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson 7. [cleanup] removed 'listen-on' from view statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 6. [bug] quote RR names when generating config file to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prevent possible clash with config file keywords
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson (such as 'key').
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence 5. [func] syntax change to named.conf file: new ssu grant/deny
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statements must now be enclosed by an 'update-policy'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 4. [port] bin/named/unix/os.c didn't compile on systems with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews linux 2.3 kernel includes due to conflicts between
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews C library includes and the kernel includes. We now
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence get only what we need from <linux/capability.h>, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews avoid pulling in other linux kernel .h files.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence 3. [bug] TKEYs go in the answer section of responses, not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the additional section.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson 2. [bug] Generating cryptographic randomness failed on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews systems without /dev/random.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 1. [bug] The installdirs rule in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lib/isc/unix/include/isc/Makefile.in had a typo which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prevented the isc directory from being created if it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.0.0b2 released ---
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington# This tells Emacs to use hard tabs in this file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews# Local Variables:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews# indent-tabs-mode: t