CHANGES revision 743bbdc18f839499862e4fb28ec32f607b1632dc
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews2985. [bug] Add a regression test for change #2896. [RT #21324]
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews2984. [bug] Don't run MX checks when the target of the MX record
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews is ".". [RT #22645]
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews2947. [func] Add new zone type "static-stub". It's like a stub
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews zone, but the nameserver names and/or their IP
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews addresses are statically configured. [RT #21474]
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews --- 9.8.0a1 released ---
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews2982. [bug] Reference count dst keys. dst_key_attach() can be used
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson increment the reference count.
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson Note: dns_tsigkey_createfromkey() callers should now
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews always call dst_key_free() rather than setting it
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews to NULL on success. [RT #22672]
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
b627356826f7b22e2ef396b80e8394eac76bc109Mark Andrews2980. [bug] named didn't properly handle UPDATES that changed the
77467267d97c781f3f3d050e229a874831e59c3dMark Andrews TTL of the NSEC3PARAM RRset. [RT #22363]
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews2979. [bug] named could deadlock during shutdown if two
3036da01090c0d1e11cddc26af16630d6d9c1f39Mark Andrews "rndc stop" commands were issued at the same
84d8c0166ddc63ad5ce64e7d354553de38b9aabdAndreas Gustafsson time. [RT #22108]
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
58d943711575376b05b3b3b303922a8a9d7ce9c1Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews key. [RT #22573]
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson wrong lock which could lead to server deadlock.
23fb770906bf1fd98210f16ad660078274242963Mark Andrews2974. [bug] Some vaild UPDATE requests could fail due to a
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington consistency check examining the existing version
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington of the zone rather than the new version resulting
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington from the UPDATE. [RT #22413]
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews at the end of configure resulting in build failures
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews where there is very old version of perl installed.
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews Move it to "make maintainer-clean". [RT #22230]
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson2971. [bug] Fixed a bug that caused journal files not to be
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson compacted on Windows systems as a result of
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson non-POSIX-compliant rename() semantics. [RT #22434]
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews2970. [security] Adding a NO DATA negative cache entry failed to clear
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews any matching RRSIG records. A subsequent lookup of
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews of NO DATA cache entry could trigger a INSIST when the
0d6f70f1dbf77cf10e0bae8683c741f5924f6afeMark Andrews unexpected RRSIG was also returned with the NO DATA
0d6f70f1dbf77cf10e0bae8683c741f5924f6afeMark Andrews cache entry.
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews CVE-2010-3613, VU#706148. [RT #22288]
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews2969. [security] Fix acl type processing so that allow-query works
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews in options and view statements. Also add a new
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews set of tests to verify proper functioning.
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson CVE-2010-3615, VU#510208. [RT #22418]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson2968. [security] Named could fail to prove a data set was insecure
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson before marking it as insecure. One set of conditions
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson that can trigger this occurs naturally when rolling
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson DNSKEY algorithms.
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson CVE-2010-3614, VU#837744. [RT #22309]
f2c49862fb348586bb4b95a5388c86e0c0cbfa2cAndreas Gustafsson2967. [bug] 'host -D' now turns on debugging messages earlier.
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews2966. [bug] isc_print_vsnprintf() failed to check if there was
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews space available in the buffer when adding a left
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews justified character with a non zero width,
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews (e.g. "%-1c"). [RT #22270]
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews RFC 4634. [RT #21702]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews2964. [placeholder]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews2963. [security] The allow-query acl was being applied instead of the
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson allow-query-cache acl to cache lookups. [RT #22114]
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson2962. [port] win32: add more dependencies to BINDBuild.dsw.
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington2961. [bug] Be still more selective about the non-authoritative
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington answers we apply change 2748 to. [RT #22074]
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington2960. [func] Check that named accepts non-authoritative answers.
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington2959. [func] Check that named starts with a missing masterfile.
f59d47928ed33d1546e8f982370086429f727e85Andreas Gustafsson2958. [bug] named failed to start with a missing master file.
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson2957. [bug] entropy_get() and entropy_getpseudo() failed to match
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson the API for RAND_bytes() and RAND_pseudo_bytes()
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson respectively. [RT #21962]
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson2955. [func] Provide more detail in the recursing log. [RT #22043]
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews build_sqldbinstance failure. [RT #21623]
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson2953. [bug] Silence spurious "expected covering NSEC3, got an
1e4bfff1855795853648f507422b96fc8fecbff1Mark Andrews exact match" message when returning a wildcard
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson no data response. [RT #21744]
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson2952. [port] win32: named-checkzone and named-checkconf failed
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson to initialise winsock. [RT #21932]
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews2951. [bug] named failed to generate a correct signed response
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews in a optout, delegation only zone with no secure
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson delegations. [RT #22007]
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson2950. [bug] named failed to perform a SOA up to date check when
9b2c0d29248ad5f86b47319239a06c783e1b5307Andreas Gustafsson falling back to TCP on UDP timeouts when
9b2c0d29248ad5f86b47319239a06c783e1b5307Andreas Gustafsson ixfr-from-differences was set. [RT #21595]
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews it was called multiple times. [RT #21942]
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson2948. [port] MacOS: provide a mechanism to configure the test
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson interfaces at reboot. See bin/tests/system/README
11fe3dcfe2a5fbefd0cfe445872dc4c595506204Andreas Gustafsson2946. [doc] Document the default values for the minimum and maximum
d1abb8bb020aacd1ce0da65c2d5d8f7c96ebd52aMark Andrews zone refresh and retry values in the ARM. [RT #21886]
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson2945. [doc] Update empty-zones list in ARM. [RT #21772]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2944. [maint] Remove ORCHID prefix from built in empty zones.
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2943. [func] Add support to load new keys into managed zones
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington without signing immediately with "rndc loadkeys".
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington Add support to link keys with "dnssec-keygen -S"
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington and "dnssec-settime -S". [RT #21351]
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson2942. [contrib] zone2sqlite failed to setup the entropy sources.
af36ecc41ae6bd73553aacd006ae55474e193b07Andreas Gustafsson2941. [bug] sdb and sdlz (dlz's zone database) failed to support
af36ecc41ae6bd73553aacd006ae55474e193b07Andreas Gustafsson DNAME at the zone apex. [RT #21610]
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews2940. [port] Remove connection aborted error message on
af36ecc41ae6bd73553aacd006ae55474e193b07Andreas Gustafsson Windows. [RT #21549]
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews2939. [func] Check that named successfully skips NSEC3 records
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews that fail to match the NSEC3PARAM record currently
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson in use. [RT# 21868]
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson2938. [bug] When generating signed responses, from a signed zone
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson that uses NSEC3, named would use a uninitialised
ce6caa07591b3723968c22f5aa13740f9609135aAndreas Gustafsson pointer if it needed to skip a NSEC3 record because
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson it didn't match the selected NSEC3PARAM record for
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson zone. [RT# 21868]
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews2937. [bug] Worked around an apparent race condition in over
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer memory conditions. Without this fix a DNS cache DB or
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer ADB could incorrectly stay in an over memory state,
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer effectively refusing further caching, which
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson subsequently made a BIND 9 caching server unworkable.
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson This fix prevents this problem from happening by
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson polling the state of the memory context, rather than
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson making a copy of the state, which appeared to cause
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson a race. This is a "workaround" in that it doesn't
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson solve the possible race per se, but several experiments
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson proved this change solves the symptom. Also, the
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson polling overhead hasn't been reported to be an issue.
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson This bug should only affect a caching server that
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews specifies a finite max-cache-size. It's also quite
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews likely that the bug happens only when enabling threads,
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson but it's not confirmed yet. [RT #21818]
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews2936. [func] Improved configuration syntax and multiple-view
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews support for addzone/delzone feature (see change
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews #2930). Removed "new-zone-file" option, replaced
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews with "allow-new-zones (yes|no)". The new-zone-file
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews for each view is now created automatically, with
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews a filename generated from a hash of the view name.
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews It is no longer necessary to "include" the
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson new-zone-file in named.conf; this happens
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson automatically. Zones that were not added via
bad3251d3f7ffccdec39ccfe04d94308985fb36eAndreas Gustafsson "rndc addzone" can no longer be removed with
bad3251d3f7ffccdec39ccfe04d94308985fb36eAndreas Gustafsson "rndc delzone". [RT #19447]
9eec883bf871ee2235009e889440f986c98908b8Andreas Gustafsson2935. [bug] nsupdate: improve 'file not found' error message.
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
088eaf3878580eebbbd2b020411532af278aae5aAndreas Gustafsson2933. [bug] 'dig +nsid' used stack memory after it went out of
6b13908f7030e09fb4573f3c2f8d7a5edc70e0b5Mark Andrews scope. This could potentially result in a unknown,
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews potentially malformed, EDNS option being sent instead
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews of the desired NSID option. [RT #21781]
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson2932. [cleanup] Corrected a numbering error in the "dnssec" test.
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer2931. [bug] Temporarily and partially disable change 2864
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson because it would cause infinite attempts of RRSIG
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson queries. This is an urgent care fix; we'll
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson revisit the issue and complete the fix later.
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington2930. [experimental] New "rndc addzone" and "rndc delzone" commads
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington allow dynamic addition and deletion of zones.
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews To enable this feature, specify a "new-zone-file"
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews option at the view or options level in named.conf.
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson Zone configuration information for the new zones
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson will be written into that file. To make the new
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson zones persist after a restart, "include" the file
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson into named.conf in the appropriate view. (Note:
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews This feature is not yet documented, and its syntax
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews is expected to change.) [RT #19447]
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews2929. [bug] Improved handling of GSS security contexts:
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews - added LRU expiration for generated TSIGs
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews - added the ability to use a non-default realm
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews - added new "realm" keyword in nsupdate
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews - limited lifetime of generated keys to 1 hour
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews or the lifetime of the context (whichever is
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews2928. [bug] Be more selective about the non-authoritative
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews answer we apply change 2748 to. [RT #21594]
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews2927. [placeholder]
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews2926. [placeholder]
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews2925. [bug] Named failed to accept uncachable negative responses
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews from insecure zones. [RT# 21555]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews2924. [func] 'rndc secroots' dump a combined summary of the
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews current managed keys combined with trusted keys.
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews2923. [bug] 'dig +trace' could drop core after "connection
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews timeout". [RT #21514]
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews2922. [contrib] Update zkt to version 1.0.
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews2921. [bug] The resolver could attempt to destroy a fetch context
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews too soon. [RT #19878]
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews to IPv4 clients. New acl 'filter-aaaa' (default any).
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews2917. [func] Virtual time test framework. [RT #20801]
e9ca87459a20f5e6721b9bd0b28c95fc3d6b843cMark Andrews2916. [func] Add framework to use IPv6 in tests.
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews2915. [cleanup] Be smarter about which objects we attempt to compile
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews based on configure options. [RT #21444]
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson2914. [bug] Make the "autosign" system test more portable.
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson2913. [func] Add pkcs#11 system tests. [RT #20784]
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson2912. [func] Windows clients don't like UPDATE responses that clear
1418d7292da7ebaba1ba389d60192023c0170245Andreas Gustafsson the zone section. [RT #20986]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson2911. [bug] dnssec-signzone didn't handle out of zone records well.
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson2910. [func] Sanity check Kerberos credentials. [RT #20986]
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson2909. [bug] named-checkconf -p could die if "update-policy local;"
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson was specified in named.conf. [RT #21416]
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews2908. [bug] It was possible for re-signing to stop after removing
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews a DNSKEY. [RT #21384]
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews2907. [bug] The export version of libdns had undefined references.
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson2905. [port] aix: set use_atomic=yes with native compiler.
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson2904. [bug] When using DLV, sub-zones of the zones in the DLV,
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson could be incorrectly marked as insecure instead of
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews secure leading to negative proofs failing. This was
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews a unintended outcome from change 2890. [RT# 21392]
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson2903. [bug] managed-keys-directory missing from namedconf.c.
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson2902. [func] Add regression test for change 2897. [RT #21040]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
be9932698bf35d0f34e65b5ffbb81bedddd76636Mark Andrews2900. [bug] The placeholder negative caching element was not
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews properly constructed triggering a INSIST in
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson dns_ncache_towire(). [RT #21346]
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson2899. [port] win32: Support linking against OpenSSL 1.0.0.
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews2898. [bug] nslookup leaked memory when -domain=value was
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson specified. [RT #21301]
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews2897. [bug] NSEC3 chains could be left behind when transitioning
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews to insecure. [RT #21040]
b19619260fbd447b0fe3e709b2cc8ae38f27ec3fMark Andrews2896. [bug] "rndc sign" failed to properly update the zone
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson when adding a DNSKEY for publication only. [RT #21045]
1255d388f034dc556d235a002527101781dbeb29Mark Andrews2895. [func] genrandom: add support for the generation of multiple
1255d388f034dc556d235a002527101781dbeb29Mark Andrews files. [RT #20917]
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews2893. [bug] Improve managed keys support. New named.conf option
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews managed-keys-directory. [RT #20924]
f04c15adc7e62deb2f53cc53f32d890936007903Andreas Gustafsson2892. [bug] Handle REVOKED keys better. [RT #20961]
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews2891. [maint] Update empty-zones list to match
53c07ca2164f8a083aa97591345bf4339a8573bdAndreas Gustafsson draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews2890. [bug] Handle the introduction of new trusted-keys and
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson DS, DLV RRsets better. [RT #21097]
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson2889. [bug] Elements of the grammar where not properly reported.
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson2888. [bug] Only the first EDNS option was displayed. [RT #21273]
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson2887. [bug] Report the keytag times in UTC in the .key file,
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson local time is presented as a comment within the
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews comment. [RT #21223]
07eaf0b8d0c3c93d8139c413bf9cc8bba7db9432Mark Andrews2886. [bug] ctime() is not thread safe. [RT #21223]
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews2885. [bug] Improve -fno-strict-aliasing support probing in
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews configure. [RT #21080]
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews2884. [bug] Insufficient validation in dns_name_getlabelsequence().
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson2883. [bug] 'dig +short' failed to handle really large datasets.
42f61e5c46d4824918385e7279c1b71d8ada8e8dAndreas Gustafsson2882. [bug] Remove memory context from list of active contexts
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews before clearing 'magic'. [RT #21274]
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson2881. [bug] Reduce the amount of time the rbtdb write lock
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson is held when closing a version. [RT #21198]
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson consistent. [RT #21078]
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson2878. [func] Incrementally write the master file after performing
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews a AXFR. [RT #21010]
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson2877. [bug] The validator failed to skip obviously mismatching
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews RRSIGs. [RT #21138]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson2876. [bug] Named could return SERVFAIL for negative responses
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson from unsigned zones. [RT #21131]
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson2875. [bug] dns_time64_fromtext() could accept non digits.
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson2874. [bug] Cache lack of EDNS support only after the server
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson successfully responds to the query using plain DNS.
9bdb01e6c382e897572791b12190472955994d87Mark Andrews2873. [bug] Cancelling a dynamic update via the dns/client module
9bdb01e6c382e897572791b12190472955994d87Mark Andrews could trigger an assertion failure. [RT #21133]
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson2872. [bug] Modify dns/client.c:dns_client_createx() to only
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson require one of IPv4 or IPv6 rather than both.
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson2871. [bug] Type mismatch in mem_api.c between the definition and
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson the header file, causing build failure with
8ba4e82f5358815fd94f34fde408ffd047ba3430Andreas Gustafsson --enable-exportlib. [RT #21138]
61d5bfc06be978ea962b1c64309894ac80351771Mark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson2868. [cleanup] Run "make clean" at the end of configure to ensure
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson any changes made by configure are integrated.
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson Use --with-make-clean=no to disable. [RT #20994]
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson don't like it. [RT #20986]
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson2866. [bug] Windows does not like the TSIG name being compressed.
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson2865. [bug] memset to zero event.data. [RT #20986]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson2862. [bug] nsupdate didn't default to the parent zone when
4fa5d53e750b4e34e19b9648900d489315b185eaAndreas Gustafsson updating DS records. [RT #20896]
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson2861. [doc] dnssec-settime man pages didn't correctly document the
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson inactivation time. [RT #21039]
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson2860. [bug] named-checkconf's usage was out of date. [RT #21039]
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson2859. [bug] When cancelling validation it was possible to leak
3fc4c1434d7ac377c720640e2e925a3af567cccbMark Andrews memory. [RT #20800]
2975d0f819762614526c650b9c2077ef22f81328Andreas Gustafsson2858. [bug] RTT estimates were not being adjusted on ICMP errors.
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson2857. [bug] named-checkconf did not fail on a bad trusted key.
79432444e84d2d104119fe6a3d5cbc04b1375bd4Andreas Gustafsson2856. [bug] The size of a memory allocation was not always properly
79432444e84d2d104119fe6a3d5cbc04b1375bd4Andreas Gustafsson recorded. [RT #20927]
3c17010ba5a6b8dd8a2bbc550813c7f051f45a08Andreas Gustafsson2855. [func] nsupdate will now preserve the entered case of domain
3c17010ba5a6b8dd8a2bbc550813c7f051f45a08Andreas Gustafsson names in update requests it sends. [RT #20928]
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews2854. [func] dig: allow the final soa record in a axfr response to
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews be suppressed, dig +onesoa. [RT #20929]
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
f08782f0923d11227983a352c26301cf703383cfMark Andrews2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson2851. [doc] nslookup.1, removed <informalexample> from the docbook
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson source as it produced bad nroff. [RT #21007]
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson2850. [bug] If isc_heap_insert() failed due to memory shortage
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson the heap would have corrupted entries. [RT #20951]
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson2849. [bug] Don't treat errors from the xml2 library as fatal.
edf97be2b54cbdc4f3f3a46776df3e912892e960Andreas Gustafsson2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
edf97be2b54cbdc4f3f3a46776df3e912892e960Andreas Gustafsson README.rfc5011 into the ARM. [RT #20899]
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson2846. [bug] EOF on unix domain sockets was not being handled
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson correctly. [RT #20731]
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson been five (5) seconds.
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
40dd9cb8cc240c33d820fe79f176ed51e4c06a1aMark Andrews creating key files if there is a chance that the new
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews key ID will collide with an existing one after
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews either of the keys has been revoked. (To override
3dff229f5dd223568476acec4df1f513acb00b1dAndreas Gustafsson this in the case of dnssec-keyfromlabel, use the -y
3dff229f5dd223568476acec4df1f513acb00b1dAndreas Gustafsson option. dnssec-keygen will simply create a
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews different, non-colliding key, so an override is
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson not necessary.) [RT #20838]
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson2842. [func] Added "smartsign" and improved "autosign" and
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson "dnssec" regression tests. [RT #20865]
3e934267660cb13029bcdbddf318fe1cc27b6718Andreas Gustafsson2841. [bug] Change 2836 was not complete. [RT #20883]
846474d5a6aa21cebb3e94243a11faa5c20200bfAndreas Gustafsson2840. [bug] Temporary fixed pkcs11-destroy usage check.
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson2839. [bug] A KSK revoked by named could not be deleted.
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson2838. [placeholder]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson2837. [port] Prevent Linux spurious warnings about fwrite().
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson2836. [bug] Keys that were scheduled to become active could
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson be delayed. [RT #20874]
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson2835. [bug] Key inactivity dates were inadvertently stored in
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson the private key file with the outdated tag
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson "Unpublish" rather than "Inactive". This has been
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson fixed; however, any existing keys that had Inactive
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson dates set will now need to have them reset, using
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson 'dnssec-settime -I'. [RT #20868]
595a14576ea14884c35b3726f054f2065365620bMark Andrews2834. [bug] HMAC-SHA* keys that were longer than the algorithm
595a14576ea14884c35b3726f054f2065365620bMark Andrews digest length were used incorrectly, leading to
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson interoperability problems with other DNS
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson implementations. This has been corrected.
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson (Note: If an oversize key is in use, and
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson compatibility is needed with an older release of
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson BIND, the new tool "isc-hmac-fixup" can convert
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson the key secret to a form that will work with all
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson versions.) [RT #20751]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews to avoid redefinition in some OSs [RT 20831]
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson2831. [security] Do not attempt to validate or cache
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson out-of-bailiwick data returned with a secure
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson answer; it must be re-fetched from its original
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson source and validated in that context. [RT #20819]
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson2830. [bug] Changing the OPTOUT setting could take multiple
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson passes. [RT #20813]
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson2829. [bug] Fixed potential node inconsistency in rbtdb.c.
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington2828. [security] Cached CNAME or DNAME RR could be returned to clients
ea34bcc6376555296a08e4c9e2f9c2cbe58378a9Andreas Gustafsson without DNSSEC validation. [RT #20737]
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
06f12c290c7904f0723094b5cbd11e2a1d49e95eAndreas Gustafsson2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
06f12c290c7904f0723094b5cbd11e2a1d49e95eAndreas Gustafsson being released. [RT #20740]
6e1b2ebcd65c6d0cc90d7789f884aea11184eb5dAndreas Gustafsson2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson was in the process of being created was not properly
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews recorded in the zone. [RT #20786]
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews2822. [bug] rbtdb.c:loadnode() could return the wrong result.
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews2820. [func] Handle read access failure of OpenSSL configuration
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews file more user friendly (PKCS#11 engine patch).
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson2818. [cleanup] rndc could return an incorrect error code
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson when a zone was not found. [RT #20767]
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson2816. [bug] previous_closest_nsec() could fail to return
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson data for NSEC3 nodes [RT #29730]
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson2815. [bug] Exclusively lock the task when freezing a zone.
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson2814. [func] Provide a definitive error message when a master
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson zone is not loaded. [RT #20757]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson2813. [bug] Better handling of unreadable DNSSEC key files.
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson2812. [bug] Make sure updates can't result in a zone with
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews NSEC-only keys and NSEC3 records. [RT 20748]
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews output. [RT #20733]
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson2810. [doc] Clarified the process of transitioning an NSEC3 zone
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson to insecure. [RT #20746]
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson2809. [cleanup] Restored accidentally-deleted text in usage output
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson in dnssec-settime and dnssec-revoke [RT #20739]
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson2808. [bug] Remove the attempt to install atomic.h from lib/isc.
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson atomic.h is correctly installed by the architecture
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson specific subdirectories. [RT #20722]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson2807. [bug] Fixed a possible ASSERT when reconfiguring zone
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson keys. [RT #20720]
a24d253a3f4e6f4036800744b348fba858d4959eMark Andrews --- 9.7.0rc1 released ---
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson when it had changed. [RT #20703]
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson2805. [bug] Fixed namespace problems encountered when building
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson external programs using non-exported BIND9 libraries
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson (i.e., built without --enable-exportlib). [RT #20679]
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
ed03e26c44347ec20aff6608de6082e3594d95fbMark Andrews or as a result of a scheduled key change. [RT #20700]
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews and genrandom under windows. [RT #20670]
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews2801. [func] Detect and report records that are different according
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews to DNSSEC but are semantically equal according to plain
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson DNS. Apply plain DNS comparisons rather than DNSSEC
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson comparisons when processing UPDATE requests.
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson dnssec-signzone now removes such semantically duplicate
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson records prior to signing the RRset.
5af0708e7fd78976a33de70f9380785f4086a1f0Andreas Gustafsson named-checkzone -r {ignore|warn|fail} (default warn)
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson named-compilezone -r {ignore|warn|fail} (default warn)
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews named.conf: check-dup-records {ignore|warn|fail};
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews2800. [func] Reject zones which have NS records which refer to
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews CNAMEs, DNAMEs or don't have address record (class IN
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews only). Reject UPDATEs which would cause the zone
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson to fail the above checks if committed. [RT #20678]
773e64ec150c33269e748d96dd95726ed7e0d842Mark Andrews2799. [cleanup] Changed the "secure-to-insecure" option to
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
cb8fd52bbeaf40c9166a0144541c4ff2bafc2dd6Andreas Gustafsson to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson2798. [bug] Addressed bugs in managed-keys initialization
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson and rollover. [RT #20683]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson2797. [bug] Don't decrement the dispatch manager's maxbuffers.
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson2796. [bug] Missing dns_rdataset_disassociate() call in
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer dns_nsec3_delnsec3sx(). [RT #20681]
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer2795. [cleanup] Add text to differentiate "update with no effect"
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer log messages. [RT #18889]
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer2794. [bug] Install <isc/namespace.h>. [RT #20677]
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer2793. [func] Add "autosign" and "metadata" tests to the
f462b9aed23b77bda867301f80ead6990df6f4f8Andreas Gustafsson automatic tests. [RT #19946]
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson2792. [func] "filter-aaaa-on-v4" can now be set in view
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson options (if compiled in). [RT #20635]
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson2791. [bug] The installation of isc-config.sh was broken.
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews2790. [bug] Handle DS queries to stub zones. [RT #20440]
330b421487d7c3a5e699472fe889aa633772057fMark Andrews2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson2788. [bug] dnssec-signzone could sign with keys that were
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews not requested [RT #20625]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson2787. [bug] Spurious log message when zone keys were
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews dynamically reconfigured. [RT #20659]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson2786. [bug] Additional could be promoted to answer. [RT #20663]
ea72586fc5c360539117119ee35e4c3a04b912bcAndreas Gustafsson --- 9.7.0b3 released ---
6f7660093e70d3a7c80738b681ac0f5c1b661c00Mark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews2784. [bug] TC was not always being set when required glue was
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews dropped. [RT #20655]
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer buffer size of 512 or less. [RT #20654]
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer2782. [port] win32: use getaddrinfo() for hostname lookups.
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson2781. [bug] Inactive keys could be used for signing. [RT #20649]
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews2780. [bug] dnssec-keygen -A none didn't properly unset the
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson activation date in all cases. [RT #20648]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson2779. [bug] Dynamic key revocation could fail. [RT #20644]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson2778. [bug] dnssec-signzone could fail when a key was revoked
4e400cb7a2edd25af98ebc25fcbb5b36ca08f9a0Mark Andrews without deleting the unrevoked version. [RT #20638]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson2776. [bug] Change #2762 was not correct. [RT #20647]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson in dnssec-keyfromlabel. [RT #20643]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson2774. [bug] Existing cache DB wasn't being reused after
ec5a06ccf7b15f07d20fd872c3dc1ab8f82f2ceaMark Andrews reconfiguration. [RT #20629]
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews2773. [bug] In autosigned zones, the SOA could be signed
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews with the KSK. [RT #20628]
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson2772. [security] When validating, track whether pending data was from
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson the additional section or not and only return it if
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson validates as secure. [RT #20438]
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson2771. [bug] dnssec-signzone: DNSKEY records could be
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson corrupted when importing from key files [RT #20624]
44c141f9471a6bb1fac0cba7880ba768ede2f0c8Brian Wellington2770. [cleanup] Add log messages to resolver.c to indicate events
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson causing FORMERR responses. [RT #20526]
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson2769. [cleanup] Change #2742 was incomplete. [RT #19589]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson2767. [bug] named could crash on startup if a zone was
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson configured with auto-dnssec and there was no
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews key-directory. [RT #20615]
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews socketmgr state if the socket is not pending on a
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews read or write. [RT #20603]
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson2765. [bug] Skip masters for which the TSIG key cannot be found.
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington2762. [bug] DLV validation failed with a local slave DLV zone.
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson2761. [cleanup] Enable internal symbol table for backtrace only for
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson systems that are known to work. Currently, BSD
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington variants, Linux and Solaris are supported. [RT# 20202]
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington2759. [doc] Add information about .jbk/.jnw files to
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson the ARM. [RT #20303]
2033e305852d4b76772885ea73ebfb6776c1f820Mark Andrews2758. [bug] win32: Added a workaround for a windows 2008 bug
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson that could cause the UDP client handler to shut
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson down. [RT #19176]
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington2757. [bug] dig: assertion failure could occur in connect
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson timeout. [RT #20599]
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews2755. [placeholder]
0176adc7c58bb8bd60ec71eeae94dbfbbc4018a8Mark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson was signed with NSEC3. [RT #20587]
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson2753. [bug] Removed an unnecessary warning that could appear when
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews building an NSEC chain. [RT #20589]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson2752. [bug] Locking violation. [RT #20587]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
47d48791fc352fcdf9019200070221be41a8d77cMark Andrews2750. [bug] dig: assertion failure could occur when a server
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson didn't have an address. [RT #20579]
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson2749. [bug] ixfr-from-differences generated a non-minimal ixfr
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson for NSEC3 signed zones. [RT #20452]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson2748. [func] Identify bad answers from GTLD servers and treat them
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson as referrals. [RT #18884]
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington2747. [bug] Journal roll forwards failed to set the re-signing
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson time of RRSIGs correctly. [RT #20541]
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington2746. [port] hpux: address signed/unsigned expansion mismatch of
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson2745. [bug] configure script didn't probe the return type of
c6de6524d777c90ae8011af8b10f5cac044081e5Mark Andrews gai_strerror(3) correctly. [RT #20573]
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington2744. [func] Log if a query was over TCP. [RT #19961]
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington for a insecure delegation.
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington --- 9.7.0b2 released ---
e9596e1fb3dfa560216776acdbfac3cf5ef97157Mark Andrews2742. [cleanup] Clarify some DNSSEC-related log messages in
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley2741. [func] Allow the dnssec-keygen progress messages to be
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley suppressed (dnssec-keygen -q). Automatically
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley suppress the progress messages when stdin is not
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington a tty. [RT #20474]
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington2740. [placeholder]
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson2739. [cleanup] Clean up API for initializing and clearing trust
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington anchors for a view. [RT #20211]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson test. [RT #20453]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson2737. [func] UPDATE requests can leak existence information.
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson2736. [func] Improve the performance of NSEC signed zones with
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington more than a normal amount of glue below a delegation.
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington2735. [bug] dnssec-signzone could fail to read keys
debff476ad3512687a354499c25d2793e2009acdBrian Wellington that were specified on the command line with
debff476ad3512687a354499c25d2793e2009acdBrian Wellington full paths, but weren't in the current
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson directory. [RT #20421]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson2734. [port] cygwin: arpaname did not compile. [RT #20473]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson2732. [func] Add optional filter-aaaa-on-v4 option, available
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington if built with './configure --enable-filter-aaaa'.
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson Filters out AAAA answers to clients connecting
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington via IPv4. (This is NOT recommended for general
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson use.) [RT #20339]
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson2731. [func] Additional work on change 2709. The key parser
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson will now ignore unrecognized fields when the
57188b5ff2397c0517e55f622879e69ee547918dAndreas Gustafsson minor version number of the private key format
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson has been increased. It will reject any key with
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson the major version number increased. [RT #20310]
9a72459b6040b30d043c5fd9e283441b847e569aAndreas Gustafsson2730. [func] Have dnssec-keygen display a progress indication
9a72459b6040b30d043c5fd9e283441b847e569aAndreas Gustafsson a la 'openssl genrsa' on standard error. Note
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson when the first '.' is followed by a long stop
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson one has the choice between slow generation vs.
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson poor random quality, i.e., '-r /dev/urandom'.
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson2729. [func] When constructing a CNAME from a DNAME use the DNAME
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson TTL. [RT #20451]
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
f2a16ec2e8970615d39f8fe339b215ad0a893b85Mark Andrews dnssec-signzone now warn immediately if asked to
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson write into a nonexistent directory. [RT #20278]
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence2727. [func] The 'key-directory' option can now specify a relative
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence path. [RT #20154]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence2726. [func] Added support for SHA-2 DNSSEC algorithms,
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence RSASHA256 and RSASHA512. [RT #20023]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence2725. [doc] Added information about the file "managed-keys.bind"
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence to the ARM. [RT #20235]
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence2724. [bug] Updates to a existing node in secure zone using NSEC
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence were failing. [RT #20448]
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson isc_base64_totext(), didn't always mark regions of
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington memory as fully consumed after conversion. [RT #20445]
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington2722. [bug] Ensure that the memory associated with the name of
f5ebf2f0c9e9d2068ace1dbcc2ef2ed3ebdbfde5Andreas Gustafsson a node in a rbt tree is not altered during the life
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson of the node. [RT #20431]
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson2721. [port] Have dst__entropy_status() prime the random number
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson generator. [RT #20369]
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence2720. [bug] RFC 5011 trust anchor updates could trigger an
ef8d97818f0d30a4e09db97af695f504b311372cMark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence2719. [func] Skip trusted/managed keys for unsupported algorithms.
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson2718. [bug] The space calculations in opensslrsa_todns() were
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson incorrect. [RT #20394]
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson2717. [bug] named failed to update the NSEC/NSEC3 record when
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson the last private type record was removed as a result
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson of completing the signing the zone with a key.
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
4f4e44c98f315bfadc6dded1b86b465222a83967David Lawrence --- 9.7.0b1 released ---
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence2715. [bug] Require OpenSSL support to be explicitly disabled.
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence2713. [bug] powerpc: atomic operations missing asm("ics") /
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence __isync() calls.
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence2712. [func] New 'auto-dnssec' zone option allows zone signing
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence to be fully automated in zones configured for
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence dynamic DNS. 'auto-dnssec allow;' permits a zone
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence to be signed by creating keys for it in the
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence key-directory and using 'rndc sign <zone>'.
6c35e4dd17e6562a6b4d106cbf1d824b9f529356David Lawrence 'auto-dnssec maintain;' allows that too, plus it
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence also keeps the zone's DNSSEC keys up to date
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence according to their timing metadata. [RT #19943]
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence2711. [port] win32: Add the bin/pkcs11 tools into the full
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson build. [RT #20372]
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson zone option cause a zone to be signed with only KSKs
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington signing the DNSKEY RRset, not ZSKs. This reduces
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington the size of a DNSKEY answer. [RT #20340]
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson2709. [func] Added some data fields, currently unused, to the
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson private key file format, to allow implementation
7fe2ead2b3e23f68c1d3c79da51ef5af4f678f7dAndreas Gustafsson of explicit key rollover in a future release
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson without impairing backward or forward compatibility.
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson2708. [func] Insecure to secure and NSEC3 parameter changes via
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson update are now fully supported and no longer require
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson defines to enable. We now no longer overload the
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington NSEC3PARAM flag field, nor the NSEC OPT bit at the
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson apex. Secure to insecure changes are controlled by
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington by the named.conf option 'secure-to-insecure'.
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson Warning: If you had previously enabled support by
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews adding defines at compile time to BIND 9.6 you should
4585aeb2cc84c0e0602da5abf47c31f92ec3b6b2Mark Andrews ensure that all changes that are in progress have
4585aeb2cc84c0e0602da5abf47c31f92ec3b6b2Mark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson is not backwards compatible.
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson2707. [func] dnssec-keyfromlabel no longer require engine name
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson to be specified in the label if there is a default
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson engine or the -E option has been used. Also, it
711c2be7d9d99ee4415bc4e41ebe4f7f31947b3bAndreas Gustafsson now uses default algorithms as dnssec-keygen does
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson2706. [bug] Loading a zone with a very large NSEC3 salt could
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson trigger an assert. [RT #20368]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson2705. [placeholder]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson2704. [bug] Serial of dynamic and stub zones could be inconsistent
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson with their SOA serial. [RT #19387]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson2703. [func] Introduce an OpenSSL "engine" argument with -E
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews for all binaries which can take benefit of
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews crypto hardware. [RT #20230]
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington2701. [doc] Correction to ARM: hmac-md5 is no longer the only
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington supported TSIG key algorithm. [RT #18046]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2700. [doc] The match-mapped-addresses option is discouraged.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2699. [bug] Missing lock in rbtdb.c. [RT #20037]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2698. [placeholder]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence S_IFREG are defined after including <isc/stat.h>.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2696. [bug] named failed to successfully process some valid
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews acl constructs. [RT #20308]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson2695. [func] DHCP/DDNS - update fdwatch code for use by
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews callback funciton for isc_socket_fdwatchcreate)
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews to include information about the direction (read
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington or write) and add isc_socket_fdwatchpoke.
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
fb13bc029f62193a07d92384a910a0317fc7e0b0Brian Wellington2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson chain when re-signing a previously-signed zone.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence Use -u to modify NSEC3 parameters or switch
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson between NSEC and NSEC3. [RT #20304]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2689. [bug] Correctly handle snprintf result. [RT #20306]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence to decide to fetch the destination address. [RT #20305]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence Also, added warnings when revoking a ZSK, as this is
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence not defined by protocol (but is legal). [RT #19943]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2686. [bug] dnssec-signzone should clean the old NSEC chain when
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence signing with NSEC3 and vice versa. [RT #20301]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
74cc9d733ca94d43310ff3df84d7a4644c0950f9Andreas Gustafsson2684. [cleanup] dig: formalize +ad and +cd as synonyms for
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence +adflag and +cdflag. [RT #19305]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence the NSEC3 parameters used to sign the zone change.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2682. [bug] "configure --enable-symtable=all" failed to
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson build. [RT #20282]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence decoded. [RT #20269]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2679. [func] dig -k can now accept TSIG keys in named.conf
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence format. [RT #20031]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2678. [func] Treat DS queries as if "minimal-response yes;"
5455f30a7532738d750252c00e649890c694ee30Brian Wellington was set. [RT #20258]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2677. [func] Changes to key metadata behavior:
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson - Keys without "publish" or "active" dates set will
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington no longer be used for smart signing. However,
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington those dates will be set to "now" by default when
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington a key is created; to generate a key but not use
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington it yet, use dnssec-keygen -G.
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington - New "inactive" date (dnssec-keygen/settime -I)
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews sets the time when a key is no longer used for
89d03d4715120fd0c968775bf0724b5a2a647539Mark Andrews signing but is still published.
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews - The "unpublished" date (-U) is deprecated in
4fbd6a13a5ba6ec1e9bd080cba86c74b3b92c894Mark Andrews favor of "deleted" (-D).
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson2676. [bug] --with-export-installdir should have been
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson --with-export-includedir. [RT #20252]
0b135de5a52acec5bb42f96b4e79484d1629fd93Brian Wellington2675. [bug] dnssec-signzone could crash if the key directory
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson did not exist. [RT #20232]
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson --- 9.7.0a3 released ---
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson2674. [bug] "dnssec-lookaside auto;" crashed if named was built
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson without openssl. [RT #20231]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson2673. [bug] The managed-keys.bind zone file could fail to
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson load due to a spurious result from sync_keyzone()
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson2672. [bug] Don't enable searching in 'host' when doing reverse
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson lookups. [RT #20218]
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson2671. [bug] Add support for PKCS#11 providers not returning
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson the public exponent in RSA private keys
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson (OpenCryptoki for instance) in
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson dnssec-keyfromlabel. [RT #19294]
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson2670. [bug] Unexpected connect failures failed to log enough
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson information to be useful. [RT #20205]
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson2669. [func] Update PKCS#11 support to support Keyper HSM.
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington Update PKCS#11 patch to be against openssl-0.9.8i.
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley2668. [func] Several improvements to dnssec-* tools, including:
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley - dnssec-keygen and dnssec-settime can now set key
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley metadata fields 0 (to unset a value, use "none")
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley - dnssec-revoke sets the revocation date in
751aa24c98fea02215cad95a08411af547d70e41Bob Halley addition to the revoke bit
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson - dnssec-settime can now print individual metadata
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson fields instead of always printing all of them,
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson and can print them in unix epoch time format for
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson use by scripts
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson2667. [func] Add support for logging stack backtrace on assertion
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson failure (not available for all platforms). [RT #19780]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson2666. [func] Added an 'options' argument to dns_name_fromstring()
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews (API change from 9.7.0a2). [RT #20196]
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson ARM documentation about RFC 5011 support. [RT #19874]
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson2664. [bug] create_keydata() and minimal_update() in zone.c
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson didn't properly check return values for some
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington functions. [RT #19956]
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington2663. [func] win32: allow named to run as a service using
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington "NT AUTHORITY\LocalService" as the account. [RT #19977]
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington returned a misleading error code when lwresd was
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson down. [RT #20028]
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson creating lwres context. [RT #20029]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley2660. [func] Add a new set of DNS libraries for non-BIND9
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley applications. See README.libdns. [RT #19369]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley2659. [doc] Clarify dnssec-keygen doc: key name must match zone
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson name for DNSSEC keys. [RT #19938]
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson2658. [bug] dnssec-settime and dnssec-revoke didn't process
ecaedd50f4e6b8cff110f9981a0a33a34269d421Mark Andrews key file paths correctly. [RT #20078]
296253a3b9dec61190cce77e8b551e05ff514fcdAndreas Gustafsson2657. [cleanup] Lower "journal file <path> does not exist, creating it"
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence log level to debug 1. [RT #20058]
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence2656. [func] win32: add a "tools only" check box to the installer
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence which causes it to only install dig, host, nslookup,
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence nsupdate and relevant DLLs. [RT #19998]
1ac6cf2f7ae95e4c915cba7038e61930d7c4ba2aAndreas Gustafsson2655. [doc] Document that key-directory does not affect
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence bind.keys, rndc.key or session.key. [RT #20155]
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson2654. [bug] Improve error reporting on duplicated names for
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson deny-answer-xxx. [RT #20164]
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson2653. [bug] Treat ENGINE_load_private_key() failures as key
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson not found rather than out of memory. [RT #18033]
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson2652. [func] Provide more detail about what record is being
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson deleted. [RT #20061]
47afc27c28aef95d94e8d1296498ba57a5f00b25Brian Wellington2651. [bug] Dates could print incorrectly in K*.key files on
cedd0ab1e812ec7cf05d57c3e602db41b79f0a2aAndreas Gustafsson 64-bit systems. [RT #20076]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2650. [bug] Assertion failure in dnssec-signzone when trying
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington to read keyset-* files. [RT #20075]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2649. [bug] Set the domain for forward only zones. [RT #19944]
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson2647. [bug] Remove unnecessary SOA updates when a new KSK is
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson added. [RT #19913]
2b7a77a68e27fc7991a857d403cb34b2ae90fc0bMark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
0c9dd74fecd876563b7f0e4662243ff026b59622Andreas Gustafsson2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
76873278a44e5ac36ac61b070035ca6d1f353f59Andreas Gustafsson which default to 64 bits. [RT #19927]
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson --- 9.7.0a2 released ---
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson2644. [bug] Change #2628 caused a regression on some systems;
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson named was unable to write the PID file and would
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington fail on startup. [RT #20001]
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington2643. [bug] Stub zones interacted badly with NSEC3 support.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2642. [bug] nsupdate could dump core on solaris when reading
55ddb88e53838693370c213930beda1652b8a583Brian Wellington improperly formatted key files. [RT #20015]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2641. [bug] Fixed an error in parsing update-policy syntax,
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington added a regression test to check it. [RT #20007]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2640. [security] A specially crafted update packet will cause named
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington to exit. [RT #20000]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley2638. [bug] Install arpaname. [RT #19957]
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington2636. [func] Simplify zone signing and key maintenance with the
672056d560d973cac1c0d02f087e059eef8f948fBrian Wellington dnssec-* tools. Major changes:
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson - all dnssec-* tools now take a -K option to
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence specify a directory in which key files will be
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence - DNSSEC can now store metadata indicating when
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence they are scheduled to be published, activated,
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence revoked or removed; these values can be set by
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington dnssec-keygen or overwritten by the new
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington dnssec-settime command
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington - dnssec-signzone -S (for "smart") option reads key
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson metadata and uses it to determine automatically
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington which keys to publish to the zone, use for
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington signing, revoke, or remove from the zone
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2634. [port] win32: Add support for libxml2, enable
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington statschannel. [RT #19773]
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson2633. [bug] Handle 15 bit rand() functions. [RT #19783]
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson2632. [func] util/kit.sh: warn if documentation appears to be out of
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson date. [RT #19922]
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson2630. [func] Improved syntax for DDNS autoconfiguration: use
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson "update-policy local;" to switch on local DDNS in a
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington zone. (The "ddns-autoconf" option has been removed.)
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson2629. [port] Check for seteuid()/setegid(), use setresuid()/
3bd8e7cf1c082cd1021e5a6cae1cf21911217858Brian Wellington setresgid() if not present. [RT #19932]
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson2628. [port] linux: Allow /var/run/named/named.pid to be opened
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington at startup with reduced capabilities in operation.
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson2627. [bug] Named aborted if the same key was included in
48565891e8f2f8c77b87908b4893f693a08e9ba9Brian Wellington trusted-keys more than once. [RT #19918]
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson2626. [bug] Multiple trusted-keys could trigger an assertion
b0390aab30438a13f533cccae9389945214b1421Brian Wellington failure. [RT #19914]
b0390aab30438a13f533cccae9389945214b1421Brian Wellington2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson2624. [func] 'named-checkconf -p' will print out the parsed
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington configuration. [RT #18871]
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
91e35ded544576b671606779143d7fbffaf451d2Andreas Gustafsson2621. [doc] Made copyright boilterplate consistent. [RT #19833]
d9112843333472bb7700c02a10d18e2b253b2708Bob Halley2620. [bug] Delay thawing the zone until the reload of it has
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson completed successfully. [RT #19750]
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson2619. [func] Add support for RFC 5011, automatic trust anchor
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson maintenance. The new "managed-keys" statement can
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson be used in place of "trusted-keys" for zones which
04cb6056a6539539e0fc2ed695298f7fa7b1d632Brian Wellington support this protocol. (Note: this syntax is
04cb6056a6539539e0fc2ed695298f7fa7b1d632Brian Wellington expected to change prior to 9.7.0 final.) [RT #19248]
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews loop infinitely. [RT #19847]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2617. [bug] ifconfig.sh failed to emit an error message when
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence run from the wrong location. [RT #19375]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2616. [bug] 'host' used the nameservers from resolv.conf even
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence when a explicit nameserver was specified. [RT #19852]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2615. [bug] "__attribute__((unused))" was in the wrong place
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson for ia64 gcc builds. [RT #19854]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2614. [port] win32: 'named -v' should automatically be executed
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington in the foreground. [RT #19844]
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington2613. [placeholder]
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington --- 9.7.0a1 released ---
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews2612. [func] Add default values for the arguments to
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews dnssec-keygen. Without arguments, it will now
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley generate a 1024-bit RSASHA1 zone-signing key,
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley or with the -f KSK option, a 2048-bit RSASHA1
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley key-signing key. [RT #19300]
76b3ec5e0c3ae856bc1000270bf3df13580673ebBrian Wellington2611. [func] Add -l option to dnssec-dsfromkey to generate
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley DLV records instead of DS records. [RT #19300]
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley2610. [port] sunos: Change #2363 was not complete. [RT #19796]
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington2609. [func] Simplify the configuration of dynamic zones:
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington - add ddns-confgen command to generate
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley configuration text for named.conf
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson - add zone option "ddns-autoconf yes;", which
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson causes named to generate a TSIG session key
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson and allow updates to the zone using that key
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson - add '-l' (localhost) option to nsupdate, which
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson causes nsupdate to connect to a locally-running
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson named process using the session key generated
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2608. [func] Perform post signing verification checks in
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson dnssec-signzone. These can be disabled with -P.
90c099e88e9f16bfee9edee3ac1a51fc98843772Brian Wellington The post sign verification test ensures that for each
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley algorithm in use there is at least one non revoked
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley self signed KSK key. That all revoked KSK keys are
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley self signed. That all records in the zone are signed
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington by the algorithm. [RT #19653]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2607. [bug] named could incorrectly delete NSEC3 records for
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson empty nodes when processing a update request.
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2606. [bug] "delegation-only" was not being accepted in
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson delegation-only type zones. [RT #19717]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2605. [bug] Accept DS responses from delegation only zones.
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews2604. [func] Add support for DNS rebinding attack prevention through
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews new options, deny-answer-addresses and
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews deny-answer-aliases. Based on contributed code from
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews JD Nurmi, Google. [RT #18192]
a97b72bac75dd2b4294108f59e1273f50495583cAndreas Gustafsson2603. [port] win32: handle .exe extension of named-checkzone and
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson named-comilezone argv[0] names under windows.
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson2602. [port] win32: fix debugging command line build of libisccfg.
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington2601. [doc] Mention file creation mode mask in the
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington named manual page.
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington2600. [doc] ARM: miscellaneous reformatting for different
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson page widths. [RT #19574]
df0f58959ed82a2a43ca8d816ce9592541df9f2fMark Andrews2599. [bug] Address rapid memory growth when validation fails.
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley2598. [func] Reserve the -F flag. [RT #19657]
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley2597. [bug] Handle a validation failure with a insecure delegation
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley from a NSEC3 signed master/slave zone. [RT #19464]
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson long, leading to inefficient memory usage or rejecting
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson newer cache entries in the worst case. [RT #19563]
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington2594. [func] Have rndc warn if using its default configuration
762a538eed7f4de4c340090536553f9c73f6432aBrian Wellington file when the key file also exists. [RT #19424]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
7ae7d499f353549162ddcf6fed957ea21e4fa52bMark Andrews2591. [bug] named could die when processing a update in
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson removed_orphaned_ds(). [RT #19507]
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley2590. [func] Report zone/class of "update with no effect".
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
40c1177517ca5312371da6cc697d813576cfe5a8Andreas Gustafsson2588. [bug] SO_REUSEADDR could be set unconditionally after failure
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson of bind(2) call. This should be rare and mostly
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington harmless, but may cause interference with other
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington processes that happen to use the same port. [RT #19642]
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington2587. [func] Improve logging by reporting serial numbers for
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington when zone serial has gone backwards or unchanged.
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington or SDB. [RT #19577]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2585. [bug] Uninitialized socket name could be referenced via a
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington statistics channel, triggering an assertion failure in
d77312050f1fb1d41b450d4fe6908ea155264d08Brian Wellington XML rendering. [RT #19427]
4b9f0fd0791cb9cb31087789a03fa3a28dd4b583Andreas Gustafsson2584. [bug] alpha: gcc optimization could break atomic operations.
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson2583. [port] netbsd: provide a control to not add the compile
dc1453b15d6656cd0661d5bec56359efa649268dAndreas Gustafsson date to the version string, -DNO_VERSION_DATE.
80aba3d49a872ca11d7cf8550c3a993162e7939fMark Andrews2582. [bug] Don't emit warning log message when we attempt to
31039b15173fb3e375269991920e4843f664457eMark Andrews remove non-existent journal. [RT #19516]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson Requires MySQL 5.0.19 or later. [RT #19084]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2580. [bug] UpdateRej statistics counter could be incremented twice
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson for one rejection. [RT #19476]
019fefd77d7e77f3c841808ab604f8ce31679d2dBrian Wellington2579. [bug] DNSSEC lookaside validation failed to handle unknown
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson algorithms. [RT #19479]
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington2578. [bug] Changed default sig-signing-type to 65534, because
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington 65535 turns out to be reserved. [RT #19477]
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington2577. [doc] Clarified some statistics counters. [RT #19454]
e880677f633f726b7df11ba3e59d4406e22256aaMark Andrews2576. [bug] NSEC record were not being correctly signed when
e880677f633f726b7df11ba3e59d4406e22256aaMark Andrews a zone transitions from insecure to secure.
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson Handle such incorrectly signed zones. [RT #19114]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson2575. [func] New functions dns_name_fromstring() and
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson dns_name_tostring(), to simplify conversion
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson of a string to a dns_name structure and vice
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson versa. [RT #19451]
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington2574. [doc] Document nsupdate -g and -o. [RT #19351]
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington2573. [bug] Replacing a non-CNAME record with a CNAME record in a
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson single transaction in a signed zone failed. [RT #19397]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson2572. [func] Simplify DLV configuration, with a new option
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley "dnssec-lookaside auto;" This is the equivalent
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson of "dnssec-lookaside . trust-anchor dlv.isc.org;"
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley plus setting a trusted-key for dlv.isc.org.
8e68489885e744ab48907414b4199c36858c27ddMark Andrews Note: The trusted key is hard-coded into named,
8e68489885e744ab48907414b4199c36858c27ddMark Andrews but is also stored in (and can be overridden
8e68489885e744ab48907414b4199c36858c27ddMark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson rolls over it can be kept up to date by replacing
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson the bind.keys file with a key downloaded from
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson https://www.isc.org/solutions/dlv. [RT #18685]
ec4f7c6d0f0cfc72bcecdb22bf59890d590218d6Mark Andrews2571. [func] Add a new tool "arpaname" which translates IP addresses
d8d95c7d2eae28c5adbde097e88efa115bae6f35Andreas Gustafsson to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson2570. [func] Log the destination address the query was sent to.
7427490a67b9547242b57c255254f7e146127c48Bob Halley2569. [func] Move journalprint, nsec3hash, and genrandom
7427490a67b9547242b57c255254f7e146127c48Bob Halley "make install" will put them in $sbindir. [RT #19301]
fbe35d126f2c4df000f50662ed9d90ced13188c3Andreas Gustafsson2568. [bug] Report when the write to indicate a otherwise
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson successful start fails. [RT #19360]
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson2567. [bug] dst__privstruct_writefile() could miss write errors.
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson write_public_key() could miss write errors.
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews dnssec-dsfromkey could miss write errors.
b1b3495eba72ea2b7270c5cd62b0bb824de74e05Mark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
b1b3495eba72ea2b7270c5cd62b0bb824de74e05Mark Andrews response arrives from a zone thought to be secure:
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson "insecurity proof failed" instead of "not
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington insecure". [RT #19400]
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington2565. [func] Add support for HIP record. Includes new functions
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington dns_rdata_hip_first(), dns_rdata_hip_next()
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington and dns_rdata_hip_current(). [RT #19384]
a1cad3b231800ca928751ff8889bdc6d312d1f88Andreas Gustafsson2564. [bug] Only take EDNS fallback steps when processing timeouts.
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington2563. [bug] Dig could leak a socket causing it to wait forever
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington to exit. [RT #19359]
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington2562. [doc] ARM: miscellaneous improvements, reorganization,
e4aeba32725a79e295c2ceed1919cba076530ba3Andreas Gustafsson and some new content.
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson2559. [bug] dnssec-dsfromkey could compute bad DS records when
f6987630ce2d424a34bb9d373b3c08de48010287Andreas Gustafsson reading from a K* files. [RT #19357]
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson2558. [func] Set the ownership of missing directories created
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews for pid-file if -u has been specified on the command
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews line. [RT #19328]
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews2557. [cleanup] PCI compliance:
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews * new libisc log module file
363cb30a83e8e57bc8874e621910f0e23dd84909Mark Andrews * isc_dir_chroot() now also changes the working
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson directory to "/".
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington * additional INSISTs
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington * additional logging when files can't be removed.
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson error checks in the correct order resulting in the
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson wrong error code sometimes being returned. [RT #19249]
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson2555. [func] dig: when emitting a hex dump also display the
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson corresponding characters. [RT #19258]
ce1269825c9d9c4bca42ae9750a7a2fd93a45557Mark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson fail. [RT #19297]
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington2552. [bug] zero-no-soa-ttl-cache was not being honoured.
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington2551. [bug] Potential Reference leak on return. [RT #19341]
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington2549. [port] linux: define NR_OPEN if not currently defined.
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington2548. [bug] Install iterated_hash.h. [RT #19335]
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson2547. [bug] openssl_link.c:mem_realloc() could reference an
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson out-of-range area of the source buffer. New public
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington function isc_mem_reallocate() was introduced to address
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington this bug. [RT #19313]
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington2546. [func] Add --enable-openssl-hash configure flag to use
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington OpenSSL (in place of internal routine) for hash
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington functions (MD5, SHA[12] and HMAC). [RT #18815]
bfd14616fa53e2572e7492a21467fad239deeae7Andreas Gustafsson2545. [doc] ARM: Legal hostname checking (check-names) is
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson for SRV RDATA too. [RT #19304]
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
3b77946b751f39bd4db5a7d1fe48a81e6b1e7a28Bob Halley2542. [doc] Update the description of dig +adflag. [RT #19290]
fb0663dbdd4811c6062fe602b511227be66aec56Mark Andrews2541. [bug] Conditionally update dispatch manager statistics.
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington2539. [security] Update the interaction between recursion, allow-query,
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson allow-query-cache and allow-recursion. [RT #19198]
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington2538. [bug] cache/ADB memory could grow over max-cache-size,
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson especially with threads and smaller max-cache-size
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews values. [RT #19240]
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews2537. [func] Added more statistics counters including those on socket
c50895694ef939f287aaa7505e0fcf634903bd34Mark Andrews I/O events and query RTT histograms. [RT #18802]
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson2536. [cleanup] Silence some warnings when -Werror=format-security is
d72269740049af28b091ba81d68a067c88f53547Mark Andrews specified. [RT #19083]
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews2534. [func] Check NAPTR records regular expressions and
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews replacement strings to ensure they are syntactically
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews valid and consistant. [RT #18168]
f7321615eaaf63461bd682513d2873d97ae31771Mark Andrews2533. [doc] ARM: document @ (at-sign). [RT #17144]
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington2532. [bug] dig: check the question section of the response to
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington see if it matches the asked question. [RT #18495]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2531. [bug] Change #2207 was incomplete. [RT #19098]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2530. [bug] named failed to reject insecure to secure transitions
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson via UPDATE. [RT #19101]
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington2529. [cleanup] Upgrade libtool to silence complaints from recent
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington version of autoconf. [RT #18657]
19c7cce8555ccc0c95455a0c35dedd017d420d05Mark Andrews2528. [cleanup] Silence spurious configure warning about
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson --datarootdir [RT #19096]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson2527. [placeholder]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson2526. [func] New named option "attach-cache" that allows multiple
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews views to share a single cache to save memory and
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews improve lookup efficiency. Based on contributed code
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews from Barclay Osborn, Google. [RT #18905]
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington2525. [func] New logging category "query-errors" to provide detailed
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington internal information about query failures, especially
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington about server failures. [RT #19027]
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
12acad068846c11ad7bb9adb23f02a6fc37b4e17Andreas Gustafsson2523. [bug] Random type rdata freed by dns_nsec_typepresent().
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington2520. [bug] Update xml statistics version number to 2.0 as change
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington #2388 made the schema incompatible to the previous
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington version. [RT #19080]
3f8ad70264645ebd6a2a8bc7e923271eb5bf8416Brian Wellington2519. [bug] dig/host with -4 or -6 didn't work if more than two
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington nameserver addresses of the excluded address family
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington preceded in resolv.conf. [RT #19081]
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington2518. [func] Add support for the new CERT types from RFC 4398.
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson2517. [bug] dig +trace with -4 or -6 failed when it chose a
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson nameserver address of the excluded address type.
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2516. [bug] glue sort for responses was performed even when not
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson needed. [RT #19039]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
8c6058d00f89792733b5c8d4ceee84ab5025857bAndreas Gustafsson2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
8c6058d00f89792733b5c8d4ceee84ab5025857bAndreas Gustafsson a nameserver of the excluded address family.
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington2513. [bug] Fix windows cli build. [RT #19062]
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2512. [func] Print a summary of the cached records which make up
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington the negative response. [RT #18885]
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington2509. [bug] Specifying a fixed query source port was broken.
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews2508. [placeholder]
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer2507. [func] Log the recursion quota values when killing the
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson oldest query or refusing to recurse due to quota.
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson2506. [port] solaris: Check at configure time if
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer hack_shutup_pthreadonceinit is needed. [RT #19037]
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington atomic operation support. [RT #19031]
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington2504. [bug] Address race condition in the socket code. [RT #18899]
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington2503. [port] linux: improve compatibility with Linux Standard
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington Base. [RT #18793]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2502. [cleanup] isc_radix: Improve compliance with coding style,
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley document function in <isc/radix.h>. [RT #18534]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2501. [func] $GENERATE now supports all rdata types. Multi-field
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley rdata types need to be quoted. See the ARM for
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley details. [RT #18368]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
4e7942dc7612acb71b111a5e8d919960f5a9efc5Mark Andrews function. [RT #18582]
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson --- 9.6.0rc1 released ---
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence2498. [bug] Removed a bogus function argument used with
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence ISC_SOCKET_USE_POLLWATCH: it could cause compiler
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence warning or crash named with the debug 1 level
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence of logging. [RT #18917]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson2496. [bug] Add sanity length checks to NSID option. [RT #18813]
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson installed. [RT #18826]
9f28451bca8377ef6c9ea3b0a49bf342c9fa6800Mark Andrews2493. [bug] The linux capabilities code was not correctly cleaning
9f28451bca8377ef6c9ea3b0a49bf342c9fa6800Mark Andrews up after itself. [RT #18767]
af5dc286ff4b750deec50d1c006aae5fc38019c0Mark Andrews2492. [func] Rndc status now reports the number of cpus discovered
af5dc286ff4b750deec50d1c006aae5fc38019c0Mark Andrews and the number of worker threads when running
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson multi-threaded. [RT #18273]
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington2491. [func] Attempt to re-use a local port if we are already using
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington the port. [RT #18548]
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence is cleared when IPV6_V6ONLY is set. [RT #18785]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2489. [port] solaris: Workaround Solaris's kernel bug about
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence Define ISC_SOCKET_USE_POLLWATCH at build time to enable
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence this workaround. [RT #18870]
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence from keyset and .key files. [RT #18694]
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington2487. [bug] Give TCP connections longer to complete. [RT #18675]
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence2486. [func] The default locations for named.pid and lwresd.pid
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence This allows the owner of the containing directory
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence to be set, for "named -u" support, and allows there
6094a7774954463e312f7266c8d4d3f26aa07d4aAndreas Gustafsson to be a permanent symbolic link in the path, for
6094a7774954463e312f7266c8d4d3f26aa07d4aAndreas Gustafsson "named -t" support. [RT #18306]
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson2485. [bug] Change update's the handling of obscured RRSIG
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson records. Not all orphaned DS records were being
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson removed. [RT #18828]
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews2484. [bug] It was possible to trigger a REQUIRE failure when
a06df85974344892431b14bec51c1beeee971eccAndreas Gustafsson adding NSEC3 proofs to the response in
24c5978e0b32137305c2bef2c6e116ee7680a610Andreas Gustafsson query_addwildcardproof(). [RT #18828]
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington2483. [port] win32: chroot() is not supported. [RT #18805]
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington2482. [port] libxml2: support versions 2.7.* in addition
9be0c3d823200bed1286cff6bddf2a8c639f5287Brian Wellington to 2.6.*. [RT #18806]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence --- 9.6.0b1 released ---
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
32bb863ea960caa650105b60dcd45e3db6840a6fAndreas Gustafsson collisions. [RT #18812]
7d33e8996948523e0180bc7e28a93d534d878dccAndreas Gustafsson2480. [bug] named could fail to emit all the required NSEC3
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington records. [RT #18812]
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson2478. [bug] 'addresses' could be used uninitialized in
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson configure_forward(). [RT #18800]
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson2477. [bug] dig: the global option to print the command line is
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson +cmd not print_cmd. Update the output to reflect
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson this. [RT #17008]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson2476. [doc] ARM: improve documentation for max-journal-size and
f53848e17123569387b279578f0100dca5407da5Mark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
f53848e17123569387b279578f0100dca5407da5Mark Andrews2475. [bug] LRU cache cleanup under overmem condition could purge
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington particular entries more aggressively. [RT #17628]
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington2474. [bug] ACL structures could be allocated with insufficient
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington space, causing an array overrun. [RT #18765]
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson2473. [port] linux: raise the limit on open files to the possible
1599bd6998f54b2b34804d7332f543744368a586Mark Andrews maximum value before spawning threads; 'files'
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson specified in named.conf doesn't seem to work with
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington threads as expected. [RT #18784]
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington2472. [port] linux: check the number of available cpu's before
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson calling chroot as it depends on "/proc". [RT #16923]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2471. [bug] named-checkzone was not reporting missing mandatory
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson glue when sibling checks were disabled. [RT #18768]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2470. [bug] Elements of the isc_radix_node_t could be incorrectly
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson overwritten. [RT# 18719]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson2469. [port] solaris: Work around Solaris's select() limitations.
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson2468. [bug] Resolver could try unreachable servers multiple times.
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence2465. [bug] Adb's handling of lame addresses was different
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence for IPv4 and IPv6. [RT #18738]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence2464. [port] linux: check that a capability is present before
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence trying to set it. [RT #18135]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence API and glibc hides parts of the IPv6 Advanced Socket
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence API as a result. This is stupid as it breaks how the
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence two halves (Basic and Advanced) of the IPv6 Socket API
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence were designed to be used but we have to live with it.
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington API. [RT #18388]
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington2462. [doc] Document -m (enable memory usage debugging)
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington option for dig. [RT #18757]
253f774e358dba38742a484426a4cadf4f248817Brian Wellington2461. [port] sunos: Change #2363 was not complete. [RT #17513]
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington --- 9.6.0a1 released ---
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson2458. [doc] ARM: update and correction for max-cache-size.
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington2457. [tuning] max-cache-size is reverted to 0, the previous
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington default. It should be safe because expired cache
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer entries are also purged. [RT #18684]
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence address, regardless of family. They now correctly
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence distinguish IPv4 from IPv6. [RT #18559]
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington2455. [bug] Stop metadata being transferred via axfr/ixfr.
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence2453. [bug] Remove NULL pointer dereference in dns_journal_print().
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence2452. [func] Improve bin/test/journalprint. [RT #18316]
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington2451. [port] solaris: handle runtime linking better. [RT #18356]
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington2450. [doc] Fix lwresd docbook problem for manual page.
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington2449. [placeholder]
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington2448. [func] Add NSEC3 support. [RT #15452]
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington2447. [cleanup] libbind has been split out as a separate product.
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington2446. [func] Add a new log message about build options on startup.
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington A new command-line option '-V' for named is also
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington provided to show this information. [RT# 18645]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson2445. [doc] ARM out-of-date on empty reverse zones (list includes
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson RFC1918 address, but these are not yet compiled in).
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington (clear DF) for UDP responses and requests.
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson2443. [bug] win32: UDP connect() would not generate an event,
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson and so connected UDP sockets would never clean up.
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson Fix this by doing an immediate WSAConnect() rather
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington than an io completion port type for UDP.
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington2442. [bug] A lock could be destroyed twice. [RT# 18626]
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson2441. [bug] isc_radix_insert() could copy radix tree nodes
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson incompletely. [RT #18573]
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson2440. [bug] named-checkconf used an incorrect test to determine
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson if an ACL was set to none.
5a6335a8bffdcc15ab4b3bb01d070080f9bc892eMark Andrews2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2438. [bug] Timeouts could be logged incorrectly under win32.
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2437. [bug] Sockets could be closed too early, leading to
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson inconsistent states in the socket module. [RT #18298]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews2435. [bug] Fixed an ACL memory leak affecting win32.
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2434. [bug] Fixed a minor error-reporting bug in
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson2433. [tuning] Set initial timeout to 800ms.
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson2432. [bug] More Windows socket handling improvements. Stop
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson using I/O events and use IO Completion Ports
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson throughout. Rewrite the receive path logic to make
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson it easier to support multiple simultaneous
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson requesters in the future. Add stricter consistency
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson checking as a compile-time option (define
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
483958540f0034d543f0564beb7877326f15a45bMark Andrews2430. [bug] win32: isc_interval_set() could round down to
59e1a928bc4253b91ead0f7c46be7d3984cb3016Bob Halley zero if the input was less than NS_INTERVAL
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson nanoseconds. Round up instead. [RT #18549]
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson2429. [doc] nsupdate should be in section 1 of the man pages.
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews2428. [bug] dns_iptable_merge() mishandled merges of negative
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews tables. [RT #18409]
f9870620b346ed267023dc98ee81adcfef2e16b7Andreas Gustafsson2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews was set. [RT #18528]
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews2426. [bug] libbind: inet_net_pton() can sometimes return the
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews wrong value if excessively large net masks are
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews supplied. [RT #18512]
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews2425. [bug] named didn't detect unavailable query source addresses
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews at load time. [RT #18536]
42928d936e79dbda7ea00bbcab6e5d8034a95bf8Andreas Gustafsson2424. [port] configure now probes for a working epoll
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington implementation. Allow the use of kqueue,
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington epoll and /dev/poll to be selected at compile
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson time. [RT #18277]
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson2423. [security] Randomize server selection on queries, so as to
d7e77a9b59138e8a94d3dfa4e41e1852ad51ac25Andreas Gustafsson make forgery a little more difficult. Instead of
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson always preferring the server with the lowest RTT,
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson pick a server with RTT within the same 128
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson millisecond band. [RT #18441]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2422. [bug] Handle the special return value of a empty node as
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson if it was a NXRRSET in the validator. [RT #18447]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2421. [func] Add new command line option '-S' for named to specify
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley the max number of sockets. [RT #18493]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley Use caution: this option may not work for some
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley operating systems without rebuilding named.
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley2420. [bug] Windows socket handling cleanup. Let the io
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley completion event send out canceled read/write
5bbed85a33186db4e629e98f45ca702ac6b09127Brian Wellington done events, which keeps us from writing to memory
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson we no longer have ownership of. Add debugging
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson socket_log() function. Rework TCP socket handling
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson to not leak sockets.
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson should not be used for isc_sockettype_fdwatch sockets.
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson2417. [bug] Connecting UDP sockets for outgoing queries could
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson unexpectedly fail with an 'address already in use'
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson error. [RT #18411]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson2416. [func] Log file descriptors that cause exceeding the
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson internal maximum. [RT #18460]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2415. [bug] 'rndc dumpdb' could trigger various assertion failures
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence in rbtdb.c. [RT #18455]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2414. [bug] A masterdump context held the database lock too long,
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence causing various troubles such as dead lock and
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence recursive lock acquisition. [RT #18311, #18456]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2412. [bug] win32: address a resource leak. [RT #18374]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson at compilation time. [RT #18433]
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington Note: with changes #2469 and #2421 above, there is no
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2410. [bug] Correctly delete m_versionInfo. [RT #18432]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2409. [bug] Only log that we disabled EDNS processing if we were
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington subsequently successful. [RT #18029]
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington2408. [bug] A duplicate TCP dispatch event could be sent, which
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson could then trigger an assertion failure in
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson resquery_response(). [RT #18275]
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson2406. [placeholder]
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson2405. [cleanup] The default value for dnssec-validation was changed to
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson "yes" in 9.5.0-P1 and all subsequent releases; this
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington was inadvertently omitted from CHANGES at the time.
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson2404. [port] hpux: files unlimited support.
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson2403. [bug] TSIG context leak. [RT #18341]
dffdc24ffd76ef3d8c8141671e89fb39428fef06Brian Wellington2402. [port] Support Solaris 2.11 and over. [RT #18362]
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews2401. [bug] Expect to get E[MN]FILE errno internal_accept()
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer (from accept() or fcntl() system calls). [RT #18358]
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer2399. [placeholder]
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer2398. [bug] Improve file descriptor management. New,
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson temporary, named.conf option reserved-sockets,
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson default 512. [RT #18344]
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson2397. [bug] gssapi_functions had too many elements. [RT #18355]
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson2396. [bug] Don't set SO_REUSEADDR for randomized ports.
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington2395. [port] Avoid warning and no effect from "files unlimited"
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews on Linux when running as root. [RT #18335]
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington2394. [bug] Default configuration options set the limit for
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington open files to 'unlimited' as described in the
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews documentation. [RT #18331]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2393. [bug] nested acls containing keys could trigger an
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews assertion in acl.c. [RT #18166]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2392. [bug] remove 'grep -q' from acl test script, some platforms
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews don't support it. [RT #18253]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2391. [port] hpux: cover additional recvmsg() error codes.
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2390. [bug] dispatch.c could make a false warning on 'odd socket'.
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2389. [bug] Move the "working directory writable" check to after
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence the ns_os_changeuser() call. [RT #18326]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews2388. [bug] Avoid using tables for layout purposes in
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews statistics XSL [RT #18159].
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2387. [bug] Silence compiler warnings in lib/isc/radix.c.
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews [RT #18147] [RT #18258]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews2386. [func] Add warning about too small 'open files' limit.
72fa265baa3d138b43427bcb5c0838740f807045Mark Andrews2385. [bug] A condition variable in socket.c could leak in
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson rare error handling [RT #17968].
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews2384. [security] Fully randomize UDP query ports to improve
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson forgery resilience. [RT #17949, #18098]
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews2383. [bug] named could double queries when they resulted in
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews SERVFAIL due to overkilling EDNS0 failure detection.
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2381. [port] dlz/mysql: support multiple install layouts for
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews mysql. <prefix>/include/{,mysql/}mysql.h and
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews <prefix>/lib/{,mysql/}. [RT #18152]
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington proofs which, in turn, caused validation failures
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington for insecure zones immediately below a secure zone
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson the server was authoritative for. [RT #18112]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson TLDs and supported RRs with TTLs [RT #17972]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington2376. [bug] Change #2144 was not complete.
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews2375. [placeholder]
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson2374. [bug] "blackhole" ACLs could cause named to segfault due
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson to some uninitialized memory. [RT #18095]
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington2373. [bug] Default values of zone ACLs were re-parsed each time a
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence new zone was configured, causing an overconsumption
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence of memory. [RT #18092]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence2371. [doc] Add +nsid option to dig man page. [RT #18039]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2370. [bug] "rndc freeze" could trigger an assertion in named
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley when called on a nonexistent zone. [RT #18050]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2369. [bug] libbind: Array bounds overrun on read in bitncmp().
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington2368. [port] Linux: use libcap for capability management if
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley possible. [RT# 18026]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2367. [bug] Improve counting of dns_resstatscounter_retry
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2366. [bug] Adb shutdown race. [RT #18021]
86c270cbb24117976d6cd3098c3010e067915c24Andreas Gustafsson2365. [bug] Fix a bug that caused dns_acl_isany() to return
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews spurious results. [RT #18000]
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews2364. [bug] named could trigger a assertion when serving a
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews malformed signed zone. [RT #17828]
8217f91f8d2dd6e94a2bf893284506ea47cd294aAndreas Gustafsson2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
588b63e1a86fb707172830e14897da624ed380edMark Andrews2362. [cleanup] Make "rrset-order fixed" a compile-time option.
588b63e1a86fb707172830e14897da624ed380edMark Andrews settable by "./configure --enable-fixed-rrset".
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington Disabled by default. [RT #17977]
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington2361. [bug] "recursion" statistics counter could be counted
452d75b18f9d050086964fa39c326cf388517396Mark Andrews multiple times for a single query. [RT #17990]
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews2360. [bug] Fix a condition where we release a database version
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews (which may acquire a lock) while holding the lock.
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington2359. [bug] Fix NSID bug. [RT #17942]
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington2358. [doc] Update host's default query description. [RT #17934]
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews2357. [port] Don't use OpenSSL's engine support in versions before
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews OpenSSL 0.9.7f. [RT #17922]
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews2356. [bug] Built in mutex profiler was not scalable enough.
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews2355. [func] Extend the number statistics counters available.
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2353. [func] Add support for Name Server ID (RFC 5001).
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer 'dig +nsid' requests NSID from server.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer 'request-nsid yes;' causes recursive server to send
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer NSID requests to upstream servers. Server responds
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson to NSID requests with the string configured by
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer 'server-id' option. [RT #17091]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2352. [bug] Various GSS_API fixups. [RT #17729]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2350. [port] win32: IPv6 support. [RT #17797]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2349. [func] Provide incremental re-signing support for secure
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson dynamic zones. [RT #1091]
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson Documentation is in the new README.pkcs11 file.
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson New tool, dnssec-keyfromlabel, which takes the
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson label of a key pair in a HSM and constructs a DNS
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson key pair for use by named and dnssec-signzone.
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2347. [bug] Delete now traverses the RB tree in the canonical
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington order. [RT #17451]
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews2346. [func] Memory statistics now cover all active memory contexts
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews in increased detail. [RT #17580]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews2345. [bug] named-checkconf failed to detect when forwarders
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews were set at both the options/view level and in
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews a root zone. [RT #17671]
fce9a9550e8e7a6dff4093d4815ec41fae2d7b55Mark Andrews2344. [bug] Improve "logging{ file ...; };" documentation.
93d5a6b95e88f57b7619d9728f06e3aa5e2f0c65Andreas Gustafsson2343. [bug] (Seemingly) duplicate IPv6 entries could be
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson created in ADB. [RT #17837]
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson2341. [bug] libbind: add missing -I../include for off source
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson tree builds. [RT #17606]
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews2340. [port] openbsd: interface configuration. [RT #17700]
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington2339. [port] tru64: support for libbind. [RT #17589]
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington2338. [bug] check_ds() could be called with a non DS rdataset.
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer2336. [func] If "named -6" is specified then listen on all IPv6
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer interfaces if there are not listen-on-v6 clauses in
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson2335. [port] sunos: libbind and *printf() support for long long.
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson bug in fromstruct_txt(). [RT #17609]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2333. [bug] Fix off by one error in isc_time_nowplusinterval().
e412ae947df6de858883564b8676a9650df70d9aMark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2331. [bug] Failure to regenerate any signatures was not being
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews reported nor being past back to the UPDATE client.
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews2330. [bug] Remove potential race condition when handling
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson over memory events. [RT #17572]
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson WARNING: API CHANGE: over memory callback
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson function now needs to call isc_mem_waterack().
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson See <isc/mem.h> for details.
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson2329. [bug] Clearer help text for dig's '-x' and '-i' options.
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson2327. [bug] It was possible to dereference a NULL pointer in
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson rbtdb.c. Implement dead node processing in zones as
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson we do for caches. [RT #17312]
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson2326. [bug] It was possible to trigger a INSIST in the acache
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson2325. [port] Linux: use capset() function if available. [RT #17557]
dc2e45d08d73fdaefd92dbfa4d69b4d3f3b0f249Andreas Gustafsson2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson2323. [port] tru64: namespace clash. [RT #17547]
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson2322. [port] MacOS: work around the limitation of setrlimit()
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson for RLIMIT_NOFILE. [RT #17526]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson2321. [placeholder]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson2320. [func] Make statistics counters thread-safe for platforms
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington that support certain atomic operations. [RT #17466]
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson2319. [bug] Silence Coverity warnings in
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews2318. [port] sunos fixes for libbind. [RT #17514]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2315. [bug] Used incorrect address family for mapped IPv4
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews addresses in acl.c. [RT #17519]
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence2314. [bug] Uninitialized memory use on error path in
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence2313. [cleanup] Silence Coverity warnings. Handle private stacks.
051beeafa6547440da17985665b31952b85ede56Brian Wellington [RT #17447] [RT #17478]
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington2311. [bug] IPv6 addresses could match IPv4 ACL entries and
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington vice versa. [RT #17462]
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson2310. [bug] dig, host, nslookup: flush stdout before emitting
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson debug/fatal messages. [RT #17501]
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
a94948ad5b3b258ce9503b7322bdf82c0baabcabAndreas Gustafsson2306. [bug] Remove potential race from lib/dns/resolver.c.
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2305. [security] inet_network() buffer overflow. CVE-2008-0122.
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2304. [bug] Check returns from all dns_rdata_tostruct() calls.
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2301. [bug] Remove resource leak and fix error messages in
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson2300. [bug] Fixed failure to close open file in
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson2299. [bug] Remove unnecessary NULL check in
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews2298. [bug] isc_mutex_lock() failure not caught in
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2297. [bug] isc_entropy_createfilesource() failure not caught in
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2296. [port] Allow docbook stylesheet location to be specified to
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley configure. [RT #17457]
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer2294. [func] Allow the experimental statistics channels to have
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews multiple connections and ACL.
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews Note: the stats-server and stats-server-v6 options
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley available in the previous beta releases are replaced
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley with the generic statistics-channels statement.
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley2293. [func] Add ACL regression test. [RT #17375]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2292. [bug] Log if the working directory is not writable.
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson failure to set PR_SET_DUMPABLE. [RT #17312]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2290. [bug] Let AD in the query signal that the client wants AD
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson set in the response. [RT #17301]
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson2289. [func] named-checkzone now reports the out-of-zone CNAME
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson found. [RT #17309]
ba43c53451d5c38765f376eeede457178b36951aBob Halley2288. [port] win32: mark service as running when we have finished
ba43c53451d5c38765f376eeede457178b36951aBob Halley loading. [RT #17441]
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews2286. [func] Allow a TCP connection to be used as a weak
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews authentication method for reverse zones.
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews New update-policy methods tcp-self and 6to4-self.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2285. [func] Test framework for client memory context management.
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2284. [bug] Memory leak in UPDATE prerequisite processing.
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2283. [bug] TSIG keys were not attaching to the memory
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson context. TSIG keys should use the rings
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson memory context rather than the clients memory
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson context. [RT #17377]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2281. [bug] Attempts to use undefined acls were not being logged.
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson2280. [func] Allow the experimental http server to be reached
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson over IPv6 as well as IPv4. [RT #17332]
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson to protect applications from receiving spurious
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson SIGPIPE signals when using the resolver.
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson2278. [bug] win32: handle the case where Windows returns no
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson search list or DNS suffix. [RT #17354]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2277. [bug] Empty zone names were not correctly being caught at
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff in the post parse checks. [RT #17357]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2275. [func] Add support to dig to perform IXFR queries over UDP.
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington2274. [func] Log zone transfer statistics. [RT #17336]
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington2273. [bug] Adjust log level to WARNING when saving inconsistent
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson stub/slave master and journal files. [RT# 17279]
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2271. [bug] Fix a memory leak in http server code [RT #17100]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2270. [bug] dns_db_closeversion() version->writer could be reset
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington before it is tested. [RT #17290]
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson --- 9.5.0b1 released ---
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff2267. [bug] Radix tree node_num value could be set incorrectly,
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff causing positive ACL matches to look like negative
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff ones. [RT #17311]
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson2266. [bug] client.c:get_clientmctx() returned the same mctx
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson once the pool of mctx's was filled. [RT #17218]
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson2265. [bug] Test that the memory context's basic_table is non NULL
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff before freeing. [RT #17265]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2264. [bug] Server prefix length was being ignored. [RT #17308]
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff2263. [bug] "named-checkconf -z" failed to set default value
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff for "check-integrity". [RT #17306]
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson2262. [bug] Error status from all but the last view could be
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson lost. [RT #17292]
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2260. [bug] Reported wrong clients-per-query when increasing the
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson value. [RT #17236]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2259. [placeholder]
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington --- 9.5.0a7 released ---
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
0d00f4bb92090ff64d49ae803a2e75b3f299f547Andreas Gustafsson2257. [bug] win32: Use the full path to vcredist_x86.exe when
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson calling it. [RT #17222]
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington2256. [bug] win32: Correctly register the installation location of
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
d9ec31a329a14588127b0a15618dec53ca41c73eAndreas Gustafsson2254. [bug] timer.c:dispatch() failed to lock timer->lock
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson when reading timer->idle allowing it to see
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington intermediate values as timer->idle was reset by
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington isc_timer_touch(). [RT #17243]
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington2253. [func] "max-cache-size" defaults to 32M.
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson "max-acache-size" defaults to 16M.
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson2252. [bug] Fixed errors in sortlist code [RT #17216]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2251. [placeholder]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2250. [func] New flag 'memstatistics' to state whether the
cdc2d4a065b6b1a00f0b07aae94bc7cb380d15bcAndreas Gustafsson memory statistics file should be written or not.
ec4060d3104e8bec28406232eb7338c81bb1b1c1Mark Andrews Additionally named's -m option will cause the
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson statistics file to be written. [RT #17113]
2c7097eac0aed3b0b3387082cb783db64f2d7765Andreas Gustafsson2249. [bug] Only set Authentic Data bit if client requested
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson DNSSEC, per RFC 3655 [RT #17175]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson2247. [doc] Sort doc/misc/options. [RT #17067]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington2246. [bug] Make the startup of test servers (ans.pl) more
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington robust. [RT #17147]
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson2245. [bug] Validating lack of DS records at trust anchors wasn't
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson working. [RT #17151]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2244. [func] Allow the check of nameserver names against the
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson SOA MNAME field to be disabled by specifying
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson 'notify-to-soa yes;'. [RT #17073]
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington2243. [func] Configuration files without a newline at the end now
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington parse without error. [RT #17120]
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson library could require a source of random data.
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson a number of INSIST()s into plain fatal() errors
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson which report the triggering result code.
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson The 'key' command wasn't disabling GSS-TSIG.
e1368a7770744cbeadcdc27967f855196988eceaAndreas Gustafsson2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
c05eb51a1b9ebd156b9fec957d60c2579c968468Mark Andrews2238. [bug] It was possible to trigger a REQUIRE when a
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson validation was canceled. [RT #17106]
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson2236. [bug] dnssec-signzone failed to preserve the case of
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson of wildcard owner names. [RT #17085]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2233. [func] Add support for O(1) ACL processing, based on
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews radix tree code originally written by Kevin
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews Brintnall. [RT #16288]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2232. [bug] dns_adb_findaddrinfo() could fail and return
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews ISC_R_SUCCESS. [RT #17137]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson2230. [bug] We could INSIST reading a corrupted journal.
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson2229. [bug] Null pointer dereference on query pool creation
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson failure. [RT #17133]
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson2228. [contrib] contrib: Change 2188 was incomplete.
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson2227. [cleanup] Tidied up the FAQ. [RT #17121]
6d3f954c572db02159deedd444373161fda47a88Brian Wellington2226. [placeholder]
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington2225. [bug] More support for systems with no IPv4 addresses.
3f31c8c2954f857e375db8e943a35f6aa5e230b4Andreas Gustafsson2224. [bug] Defer journal compaction if a xfrin is in progress.
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson2223. [bug] Make a new journal when compacting. [RT #17119]
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence2222. [func] named-checkconf now checks server key references.
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington2221. [bug] Set the event result code to reflect the actual
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington record turned to caller when a cache update is
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington rejected due to a more credible answer existing.
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson2220. [bug] win32: Address a race condition in final shutdown of
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington the Windows socket code. [RT #17028]
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington2219. [bug] Apply zone consistency checks to additions, not
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington removals, when updating. [RT #17049]
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence2217. [func] Adjust update log levels. [RT #17092]
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews2216. [cleanup] Fix a number of errors reported by Coverity.
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington2214. [bug] Deregister OpenSSL lock callback when cleaning
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington up. Reorder OpenSSL cleanup so that RAND_cleanup()
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington is called before the locks are destroyed. [RT #17098]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2213. [bug] SIG0 diagnostic failure messages were looking at the
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson wrong status code. [RT #17101]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2212. [func] 'host -m' now causes memory statistics and active
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson memory to be printed at exit. [RT 17028]
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson2211. [func] Update "dynamic update temporarily disabled" message.
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson2210. [bug] Deleting class specific records via UPDATE could
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson fail. [RT #17074]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson2209. [port] osx: linking against user supplied static OpenSSL
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson libraries failed as the system ones were still being
e0a9b524614889ca9b75f846cb6101fc448a60dcAndreas Gustafsson found. [RT #17078]
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews2208. [port] win32: make sure both build methods produce the
385a9cb48a70b329e507c39d043fa9a44c659913James Brister same output. [RT #17058]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister2207. [port] Some implementations of getaddrinfo() fail to set
385a9cb48a70b329e507c39d043fa9a44c659913James Brister ai_canonname correctly. [RT #17061]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister --- 9.5.0a6 released ---
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington2206. [security] "allow-query-cache" and "allow-recursion" now
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington cross inherit from each other.
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer If allow-query-cache is not set in named.conf then
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer allow-recursion is used if set, otherwise allow-query
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence is used if set, otherwise the default (localnets;
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer localhost;) is used.
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington If allow-recursion is not set in named.conf then
47ddde42728034854444cf17e278cebaea06f666Michael Graff allow-query-cache is used if set, otherwise allow-query
47ddde42728034854444cf17e278cebaea06f666Michael Graff is used if set, otherwise the default (localnets;
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence localhost;) is used.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2204. [bug] "rndc flushanme name unknown-view" caused named
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence to crash. [RT #16984]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2203. [security] Query id generation was cryptographically weak.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2202. [security] The default acls for allow-query-cache and
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington allow-recursion were not being applied. [RT #16960]
529a6b5224d751504027293a766a4c8b81241869Brian Wellington2201. [bug] The build failed in a separate object directory.
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson2200. [bug] The search for cached NSEC records was stopping to
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson early leading to excessive DLV queries. [RT #16930]
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington2199. [bug] win32: don't call WSAStartup() while loading dlls.
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence2198. [bug] win32: RegCloseKey() could be called when
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence RegOpenKeyEx() failed. [RT #16911]
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson2197. [bug] Add INSIST to catch negative responses which are
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson not setting the event result code appropriately.
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington2196. [port] win32: yield processor while waiting for once to
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson to complete. [RT #16958]
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson2195. [func] dnssec-keygen now defaults to nametype "ZONE"
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington when generating DNSKEYs. [RT #16954]
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington2194. [bug] Close journal before calling 'done' in xfrin.c.
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson --- 9.5.0a5 released ---
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson2193. [port] win32: BINDInstall.exe is now linked statically.
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington2192. [port] win32: use vcredist_x86.exe to install Visual
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson Studio's redistributable dlls if building with
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson Visual Stdio 2005 or later.
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister2191. [func] named-checkzone now allows dumping to stdout (-).
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson named-checkconf now has -h for help.
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer named-checkzone now has -h for help.
48cddfee7c4d90b1901d03ccc0e67e08908a8f2fMark Andrews rndc now has -h for help.
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer Better handling of '-?' for usage summaries.
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2190. [func] Make fallback to plain DNS from EDNS due to timeouts
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer more visible. New logging category "edns-disabled".
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson2189. [bug] Handle socket() returning EINTR. [RT #15949]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2188. [contrib] queryperf: autoconf changes to make the search for
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson libresolv or libbind more robust. [RT #16299]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2187. [bug] query_addds(), query_addwildcardproof() and
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson query_addnxrrsetnsec() should take a version
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson argument. [RT #16368]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2186. [port] cygwin: libbind: check for struct sockaddr_storage
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson independently of IPv6. [RT #16482]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2185. [port] sunos: libbind: check for ssize_t, memmove() and
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson memchr(). [RT #16463]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2184. [bug] bind9.xsl.h didn't build out of the source tree.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2183. [bug] dnssec-signzone didn't handle offline private keys
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence well. [RT #16832]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson could return ISC_R_SUCCESS when they ran out of
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson memory. [RT #16365]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2180. [cleanup] Remove bit test from 'compress_test' as they
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson are no longer needed. [RT #16497]
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington2179. [func] 'rndc command zone' will now find 'zone' if it is
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson unique to all the views. [RT #16821]
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson2178. [bug] 'rndc reload' of a slave or stub zone resulted in
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson a reference leak. [RT #16867]
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson2177. [bug] Array bounds overrun on read (rcodetext) at
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson debug level 10+. [RT #16798]
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington2176. [contrib] dbus update to handle race condition during
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington initialization (Bugzilla 235809). [RT #16842]
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington2175. [bug] win32: windows broadcast condition variable support
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson was broken. [RT #16592]
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson2174. [bug] I/O errors should always be fatal when reading
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson master files. [RT #16825]
da527e4ff6a013364826637963e7ac372e024f33David Lawrence2173. [port] win32: When compiling with MSVS 2005 SP1 we also
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson --- 9.5.0a4 released ---
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson2172. [bug] query_addsoa() was being called with a non zone db.
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence2171. [bug] Handle breaks in DNSSEC trust chains where the parent
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence servers are not DS aware (DS queries to the parent
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence return a referral to the child).
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence2170. [func] Add acache processing to test suite. [RT #16711]
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister2169. [bug] host, nslookup: when reporting NXDOMAIN report the
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister given name and not the last name searched for.
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence2168. [bug] nsupdate: in non-interactive mode treat syntax errors
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence as fatal errors. [RT #16785]
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews2167. [bug] When re-using a automatic zone named failed to
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews attach it to the new view. [RT #16786]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson --- 9.5.0a3 released ---
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2166. [bug] When running in batch mode, dig could misinterpret
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson a server address as a name to be looked up, causing
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence unexpected output. [RT #16743]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2165. [func] Allow the destination address of a query to determine
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson if we will answer the query or recurse.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence allow-query-on, allow-recursion-on and
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson allow-query-cache-on. [RT #16291]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2164. [bug] The code to determine how named-checkzone /
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson named-compilezone was called failed under windows.
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson2163. [bug] If only one of query-source and query-source-v6
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson specified a port the query pools code broke (change
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson 2129). [RT #16768]
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson2162. [func] Allow "rrset-order fixed" to be disabled at compile
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson time. [RT #16665]
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson2161. [bug] Fix which log messages are emitted for 'rndc flush'.
5096958739769958dd7a6b69356bf41260033873David Lawrence2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
5096958739769958dd7a6b69356bf41260033873David Lawrence from getifaddrs(). [RT #16708]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence --- 9.5.0a2 released ---
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence2159. [bug] Array bounds overrun in acache processing. [RT #16710]
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence2158. [bug] ns_client_isself() failed to initialize key
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence leading to a REQUIRE failure. [RT #16688]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence2157. [func] dns_db_transfernode() created. [RT #16685]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
280942843277ca894571ca94c1e431ba079d0ca0Mark Andrews resolver.c:validated() and resolver.c:cache_name().
280942843277ca894571ca94c1e431ba079d0ca0Mark Andrews Fix a memory leak in rbtdb.c:free_noqname().
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews Make lookup.c:lookup_find() robust against
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson event leaks. [RT #16685]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson matched in acls by omitting the scope. [RT #16599]
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington2153. [bug] nsupdate could leak memory. [RT #16691]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2152. [cleanup] Use sizeof(buf) instead of fixed number in
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington dighost.c:get_trusted_key(). [RT #16678]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2151. [bug] Missing newline in usage message for journalprint.
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington2150. [bug] 'rrset-order cyclic' uniformly distribute the
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister starting point for the first response for a given
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister RRset. [RT #16655]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2149. [bug] isc_mem_checkdestroyed() failed to abort on
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister if there were still active memory contexts.
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2148. [func] Add positive logging for rndc commands. [RT #14623]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2147. [bug] libbind: remove potential buffer overflow from
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence SO_BSDCOMPAT" message. [RT #16641]
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2145. [bug] Check DS/DLV digest lengths for known digests.
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2143. [bug] We failed to restart the IPv6 client when the
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews kernel failed to return the destination the
96ab25294b028270eb1be867613df8a6c999b332David Lawrence packet was sent to. [RT #16613]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2142. [bug] Handle master files with a modification time that
96ab25294b028270eb1be867613df8a6c999b332David Lawrence matches the epoch. [RT# 16612]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson equivalent of LDH checks). [RT #16609]
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson2140. [bug] libbind: missing unlock on pthread_key_create()
96ab25294b028270eb1be867613df8a6c999b332David Lawrence failures. [RT #16654]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2139. [bug] dns_view_find() was being called with wrong type
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson in adb.c. [RT #16670]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2138. [bug] Lock order reversal in resolver.c. [RT #16653]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2137. [port] Mips little endian and/or mips 64 bit are now
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington supported for atomic operations. [RT#16648]
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington2136. [bug] nslookup/host looped if there was no search list
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington and the host didn't exist. [RT #16657]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2134. [func] Additional statistics support. [RT #16666]
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson2133. [port] powerpc: Support both IBM and MacOS Power PC
b6747cf19dea764e5acaa164f23b70d54348d64cMark Andrews assembler syntaxes. [RT #16647]
1318ddb52d8a8a22eae47f7d82137e74b9beacf1Mark Andrews2132. [bug] Missing unlock on out of memory in
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence dns_dispatchmgr_setudp().
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2130. [func] Log if CD or DO were set. [RT #16640]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2129. [func] Provide a pool of UDP sockets for queries to be
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence made over. See use-queryport-pool, queryport-pool-ports
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence and queryport-pool-updateinterval. [RT #16415]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson2126. [security] Serialize validation of type ANY responses. [RT #16555]
e405739af20dcdc6c7f604548e78806a0d1515c5Brian Wellington2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson was defined. [RT #16574]
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson2124. [security] It was possible to dereference a freed fetch
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson context. [RT #16584]
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson --- 9.5.0a1 released ---
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2123. [func] Use Doxygen to generate internal documentation.
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2122. [func] Experimental http server and statistics support
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson for named via xml.
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews second timeout. [RT #16553]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2120. [doc] Fix markup on nsupdate man page. [RT #16556]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2119. [compat] libbind: allow res_init() to succeed enough to
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence return the default domain even if it was unable
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews to allocate memory.
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2118. [bug] Handle response with long chains of domain name
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson compression pointers which point to other compression
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson pointers. [RT #16427]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson which could lead to validation failures. named didn't
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson handle negative DS responses that were in the process
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson of being validated. Check CNAME bit before accepting
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson NODATA proof. To be able to ignore a child NSEC there
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson must be SOA (and NS) set in the bitmap. [RT #16399]
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer2116. [bug] 'rndc reload' could cause the cache to continually
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence be cleaned. [RT #16401]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2115. [bug] 'rndc reconfig' could trigger a INSIST if the
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence number of masters for a zone was reduced. [RT #16444]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2114. [bug] dig/host/nslookup: searches for names with multiple
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence labels were failing. [RT #16447]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2113. [bug] nsupdate: if a zone is specified it should be used
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence for server discover. [RT# 16455]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2112. [security] Warn if weak RSA exponent is used. [RT #16460]
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2111. [bug] Fix a number of errors reported by Coverity.
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence priming queries. [RT #16491]
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2108. [func] DHCID support. [RT #16456]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2106. [func] 'rndc status' now reports named's version. [RT #16426]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2105. [func] GSS-TSIG support (RFC 3645).
8775909be9fc67180fc480115716f88174e74471James Brister2104. [port] Fix Solaris SMF error message.
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister2103. [port] Add /usr/sfw to list of locations for OpenSSL
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence under Solaris.
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington2102. [port] Silence Solaris 10 warnings.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2101. [bug] OpenSSL version checks were not quite right.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2100. [port] win32: copy libeay32.dll to Build\Debug.
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence Copy Debug\named-checkzone to Debug\named-compilezone.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2099. [port] win32: more manifest issues.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2098. [bug] Race in rbtdb.c:no_references(), which occasionally
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence triggered an INSIST failure about the node lock
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence reference. [RT #16411]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2097. [bug] named could reference a destroyed memory context
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence after being reloaded / reconfigured. [RT #16428]
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence2096. [bug] libbind: handle applications that fail to detect
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews res_init() failures better.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson net_cidr_ntop_ipv6(). [RT #16388]
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson2094. [contrib] Update named-bootconf. [RT# 16404]
99524919752c9b9abe1814007732b86592011cc1Brian Wellington2093. [bug] named-checkzone -s was broken.
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2092. [bug] win32: dig, host, nslookup. Use registry config
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson if resolv.conf does not exist or no nameservers
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson listed. [RT #15877]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2091. [port] dighost.c: race condition on cleanup. [RT #16417]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2090. [port] win32: Visual C++ 2005 command line manifest support.
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2089. [security] Raise the minimum safe OpenSSL versions to
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington prior to these have known security flaws which
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington are (potentially) exploitable in named. [RT #16391]
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews2088. [security] Change the default RSA exponent from 3 to 65537.
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson2086. [port] libbind: FreeBSD now has get*by*_r() functions.
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer2085. [doc] win32: added index.html and README to zip. [RT #16201]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2084. [contrib] dbus update for 9.3.3rc2.
8ae26e9f87560f9d2e495328d573c25af81c49beMark Andrews2083. [port] win32: Visual C++ 2005 support.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2082. [doc] Document 'cache-file' as a test only option.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2080. [port] libbind: res_init.c did not compile on older versions
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister of Solaris. [RT #16363]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2079. [bug] The lame cache was not handling multiple types
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister correctly. [RT #16361]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2078. [bug] dnssec-checkzone output style "default" was badly
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister named. It is now called "relative". [RT #16326]
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews complete signed zone. [RT #16326]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington2076. [bug] Several files were missing #include <config.h>
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington causing build failures on OSF. [RT #16341]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington2075. [bug] The spillat timer event hander could leak memory.
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister dns_request_createraw2() and dns_request_createraw3()
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister failed to send multiple UDP requests. [RT #16349]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2073. [bug] Incorrect semantics check for update policy "wildcard".
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson2072. [bug] We were not generating valid HMAC SHA digests.
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2071. [port] Test whether gcc accepts -fno-strict-aliasing.
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2070. [bug] The remote address was not always displayed when
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson reporting dispatch failures. [RT #16315]
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews2069. [bug] Cross compiling was not working. [RT #16330]
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson2068. [cleanup] Lower incremental tuning message to debug 1.
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2067. [bug] 'rndc' could close the socket too early triggering
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister a INSIST under Windows. [RT #16317]
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence2066. [security] Handle SIG queries gracefully. [RT #16300]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2065. [bug] libbind: probe for HPUX prototypes for
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson endprotoent_r() and endservent_r(). [RT 16313]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2063. [bug] Change #1955 introduced a bug which caused the first
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister 'rndc flush' call to not free memory. [RT #16244]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2062. [bug] 'dig +nssearch' was reusing a buffer before it had
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister been returned by the socket code. [RT #16307]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister2061. [bug] Accept expired wildcard message reversed. [RT #16296]
47c196192afa37b2dea728e52579779f190bf07fJames Brister2060. [bug] Enabling DLZ support could leave views partially
29196ffb72a1337c72ffd6d52f1c8348f84c644eJames Brister configured. [RT #16295]
adf82221858138f295bce732e86dcac34645692eJames Brister2059. [bug] Search into cache rbtdb could trigger an INSIST
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington failure while cleaning up a stale rdataset.
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2058. [bug] Adjust how we calculate rtt estimates in the presence
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson of authoritative servers that drop EDNS and/or CD
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson requests. Also fallback to EDNS/512 and plain DNS
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson faster for zones with less than 3 servers. [RT #16187]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2057. [bug] Make setting "ra" dependent on both allow-query-cache
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister and allow-recursion. [RT #16290]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2056. [bug] dig: ixfr= was not being treated case insensitively
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister at all times. [RT #15955]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2055. [bug] Missing goto after dropping multicast query.
0380c44d0238a88e167526954d630d071739ed28Mark Andrews2054. [port] freebsd: do not explicitly link against -lpthread.
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington2052. [bug] 'rndc' improve connect failed message to report
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington the failing address. [RT #15978]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2051. [port] More strtol() fixes. [RT #16249]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2050. [bug] Parsing of NSAP records was not case insensitive.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2049. [bug] Restore SOA before AXFR when falling back from
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence a attempted IXFR when transferring in a zone.
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson Allow a initial SOA query before attempting
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence a AXFR to be requested. [RT #16156]
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson2048. [bug] It was possible to loop forever when using
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister avoid-v4-udp-ports / avoid-v6-udp-ports when
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister the OS always returned the same local port.
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister2047. [bug] Failed to initialize the interface flags to zero.
d5399cc351a549db957185993b320a3bffa40e41James Brister2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
d5399cc351a549db957185993b320a3bffa40e41James Brister cleanup [RT #16247].
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister2045. [func] Use lock buckets for acache entries to limit memory
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister consumption. [RT #16183]
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews2044. [port] Add support for atomic operations for Itanium.
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2043. [port] nsupdate/nslookup: Force the flushing of the prompt
69b691c9624f31e59b8d128ada902a82127c15a3James Brister for interactive sessions. [RT#16148]
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2042. [bug] named-checkconf was incorrectly rejecting the
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington logging category "config". [RT #16117]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence set of libraries to be linked. [RT #16129]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2040. [bug] rbtdb no_references() could trigger an INSIST
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence failure with --enable-atomic. [RT #16022]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2039. [func] Check that all buffers passed to the socket code
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence have been retrieved when the socket event is freed.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2038. [bug] dig/nslookup/host was unlinking from wrong list
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence when handling errors. [RT #16122]
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence2037. [func] When unlinking the first or last element in a list
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson check that the list head points to the element to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence be unlinked. [RT #15959]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2035. [func] Make falling back to TCP on UDP refresh failure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence optional. Default "try-tcp-refresh yes;" for BIND 8
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence compatibility. [RT #16123]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2033. [bug] We weren't creating multiple client memory contexts
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence on demand as expected. [RT #16095]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson2031. [bug] Emit a error message when "rndc refresh" is called on
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson a non slave/stub zone. [RT # 16073]
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2030. [bug] We were being overly conservative when disabling
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson openssl engine support. [RT #16030]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2029. [bug] host printed out the server multiple times when
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff specified on the command line. [RT #15992]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2028. [port] linux: socket.c compatibility for old systems.
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington2027. [port] libbind: Solaris x86 support. [RT #16020]
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington2026. [bug] Rate limit the two recursive client exceeded messages.
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson2025. [func] Update "zone serial unchanged" message. [RT #16026]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2024. [bug] named emitted spurious "zone serial unchanged"
b092aef75539b462d24b460b67ac49edb79aaff8Andreas Gustafsson messages on reload. [RT #16027]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2023. [bug] "make install" should create ${localstatedir}/run and
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson ${sysconfdir} if they do not exist. [RT #16033]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2022. [bug] If dnssec validation is disabled only assert CD if
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence CD was requested. [RT #16037]
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2019. [tuning] Reduce the amount of work performed per quantum
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington when cleaning the cache. [RT #15986]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2018. [bug] Checking if the HMAC MD5 private file was broken.
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2017. [bug] allow-query default was not correct. [RT #15946]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2016. [bug] Return a partial answer if recursion is not
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson allowed but requested and we had the answer
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson to the original qname. [RT #15945]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2015. [cleanup] use-additional-cache is now acache-enable for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence consistency. Default acache-enable off in BIND 9.4
6deb631b20b7e212d9a350759e472fa60f9e92e4David Lawrence as it requires memory usage to be configured.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence It may be enabled by default in BIND 9.5 once we
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington have more experience with it.
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington2014. [func] Statistics about acache now recorded and sent
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington to log. [RT #15976]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence responses more gracefully. [RT #15941]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2012. [func] Don't insert new acache entries if acache is full.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2011. [func] dnssec-signzone can now update the SOA record of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the signed zone, either as an increment or as the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence system time(). [RT #15633]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2010. [placeholder] rt15958
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington2009. [bug] libbind: Coverity fixes. [RT #15808]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2008. [func] It is now possible to enable/disable DNSSEC
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence validation from rndc. This is useful for the
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence mobile hosts where the current connection point
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson breaks DNSSEC (firewall/proxy). [RT #15592]
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson rndc validation newstate [view]
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson2007. [func] It is now possible to explicitly enable DNSSEC
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson validation. default dnssec-validation no; to
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson be changed to yes in 9.5.0. [RT #15674]
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson2006. [security] Allow-query-cache and allow-recursion now default
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson to the built in acls "localnets" and "localhost".
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson This is being done to make caching servers less
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson attractive as reflective amplifying targets for
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson spoofed traffic. This still leave authoritative
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff servers exposed.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff The best fix is for full BCP 38 deployment to
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson remove spoofed traffic.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2005. [bug] libbind: Retransmission timeouts should be
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff based on which attempt it is to the nameserver
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson and not the nameserver itself. [RT #13548]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2004. [bug] dns_tsig_sign() could pass a NULL pointer to
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson dst_context_destroy() when cleaning up after a
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff error. [RT #15835]
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson2003. [bug] libbind: The DNS name/address lookup functions could
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson occasionally follow a random pointer due to
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson structures not being completely zeroed. [RT #15806]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2002. [bug] libbind: tighten the constraints on when
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson struct addrinfo._ai_pad exists. [RT #15783]
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence2001. [func] Check the KSK flag when updating a secure dynamic zone.
c50936eb40263b65ebf6afe4e6556e2dc67c10e4Brian Wellington New zone option "update-check-ksk yes;". [RT #15817]
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister1999. [func] Implement "rrset-order fixed". [RT #13662]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1998. [bug] Restrict handling of fifos as sockets to just SunOS.
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence This allows named to connect to entropy gathering
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence daemons that use fifos instead of sockets. [RT #15840]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1997. [bug] Named was failing to replace negative cache entries
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson when a positive one for the type was learnt.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1996. [bug] nsupdate: if a zone has been specified it should
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson appear in the output of 'show'. [RT #15797]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1995. [bug] 'host' was reporting multiple "is an alias" messages.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1994. [port] OpenSSL 0.9.8 support. [RT #15694]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1993. [bug] Log messages, via syslog, were missing the space
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence after the timestamp if "print-time yes" was specified.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1992. [bug] Not all incoming zone transfer messages included the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence view. [RT #15825]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1991. [cleanup] The configuration data, once read, should be treated
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence as read only. Expand the use of const to enforce this
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence at compile time. [RT #15813]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1990. [bug] libbind: isc's override of broken gettimeofday()
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence implementations was not always effective.
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson1989. [bug] win32: don't check the service password when
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson re-installing. [RT #15882]
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews1988. [bug] Remove a bus error from the SHA256/SHA512 support.
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1986. [func] Report when a zone is removed. [RT #15849]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1985. [protocol] DLV has now been assigned a official type code of
600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence 32769. [RT #15807]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Note: care should be taken to ensure you upgrade
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence both named and dnssec-signzone at the same time for
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence zones with DLV records where named is the master
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence server for the zone. Also any zones that contain
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence DLV records should be removed when upgrading a slave
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence zone. You do not however have to upgrade all
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington servers for a zone with DLV records simultaneously.
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington1984. [func] dig, nslookup and host now advertise a 4096 byte
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington EDNS UDP buffer size by default. [RT #15855]
34b394b43e2207e8f8f3703f0402422121455638David Lawrence1983. [func] Two new update policies. "selfsub" and "selfwild".
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1982. [bug] DNSKEY was being accepted on the parent side of
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister a delegation. KEY is still accepted there for
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister RFC 3007 validated updates. [RT #15620]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1981. [bug] win32: condition.c:wait() could fail to reattain
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister the mutex lock.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1980. [func] dnssec-signzone: output the SOA record as the
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister first record in the signed zone. [RT #15758]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1979. [port] linux: allow named to drop core after changing
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence user ids. [RT #15753]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1978. [port] Handle systems which have a broken recvmsg().
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1977. [bug] Silence noisy log message. [RT #15704]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson1975. [bug] libbind: isc_gethexstring() could misparse multi-line
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson hex strings with comments. [RT #15814]
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson1974. [doc] List each of the zone types and associated zone
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson options separately in the ARM.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson HMACSHA512 support. [RT #13606]
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson1972. [contrib] DBUS dynamic forwarders integration from
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Jason Vas Dias <jvdias@redhat.com>.
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson1971. [port] linux: make detection of missing IF_NAMESIZE more
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson robust. [RT #15443]
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson1970. [bug] nsupdate: adjust UDP timeout when falling back to
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson unsigned SOA query. [RT #15775]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews1969. [bug] win32: the socket code was freeing the socket
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews structure too early. [RT #15776]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews1966. [bug] Don't set CD when we have fallen back to plain DNS.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson1965. [func] Suppress spurious "recursion requested but not
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson available" warning with 'dig +qr'. [RT #15780].
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews1963. [port] Tru64 4.0E doesn't support send() and recv().
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews1962. [bug] Named failed to clear old update-policy when it
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews was removed. [RT #15491]
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson1961. [bug] Check the port and address of responses forwarded
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to dispatch. [RT #15474]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence1959. [func] Control the zeroing of the negative response TTL to
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence a soa query. Defaults "zero-no-soa-ttl yes;" and
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson "zero-no-soa-ttl-cache no;". [RT #15460]
f2fdfe7c42f3b10f3653f851ce5a0a90ee5ac1f9David Lawrence1958. [bug] Named failed to update the zone's secure state
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson until the zone was reloaded. [RT #15412]
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence1957. [bug] Dig mishandled responses to class ANY queries.
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews1956. [bug] Improve cross compile support, 'gen' is now built
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews by native compiler. See README for additional
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews cross compile support information. [RT #15148]
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1954. [func] Named now falls back to advertising EDNS with a
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister 512 byte receive buffer if the initial EDNS queries
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister fail. [RT #14852]
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister1953. [func] The maximum EDNS UDP response named will send can
e411a986b94276c28e6a971f9c3b61d45c635456James Brister now be set in named.conf (max-udp-size). This is
e411a986b94276c28e6a971f9c3b61d45c635456James Brister independent of the advertised receive buffer
e411a986b94276c28e6a971f9c3b61d45c635456James Brister (edns-udp-size). [RT #14852]
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews1952. [port] hpux: tell the linker to build a runtime link
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews path "-Wl,+b:". [RT #14816].
76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson1951. [security] Drop queries from particular well known ports.
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson Don't return FORMERR to queries from particular
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson well known ports. [RT #15636]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence a TCP socket. This prevents the source address being
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence set for TCP connections. [RT #15628]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews1949. [func] Addition memory leakage checks. [RT #15544]
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson1948. [bug] If was possible to trigger a REQUIRE failure in
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson xfrin.c:maybe_free() if named ran out of memory.
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson1947. [func] It is now possible to configure named to accept
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence expired RRSIGs. Default "dnssec-accept-expired no;".
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister Setting "dnssec-accept-expired yes;" leaves named
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister vulnerable to replay attacks. [RT #14685]
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson1946. [bug] resume_dslookup() could trigger a REQUIRE failure
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence when using forwarders. [RT #15549]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister To generate a RSAMD5 key you must explicitly request
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence RSAMD5. [RT #13780]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister1944. [cleanup] isc_hash_create() does not need a read/write lock.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister1943. [bug] Set the loadtime after rolling forward the journal.
36357e4304862fb47e9fae03c704cb6720310c45James Brister1942. [bug] If the name of a DNSKEY match that of one in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence trusted-keys do not attempt to validate the DNSKEY
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence using the parents DS RRset. [RT #15649]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1941. [bug] ncache_adderesult() should set eresult even if no
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence rdataset is passed to it. [RT #15642]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1940. [bug] Fixed a number of error conditions reported by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1939. [bug] The resolver could dereference a null pointer after
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence validation if all the queries have timed out.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1938. [bug] The validator was not correctly handling unsecure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence negative responses at or below a SEP. [RT #15528]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1936. [bug] The validator could leak memory. [RT #15544]
b99d080717fdd741961d736581270d37bad8bec0David Lawrence1935. [bug] 'acache' was DO sensitive. [RT #15430]
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson1934. [func] Validate pending NS RRsets, in the authority section,
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson prior to returning them if it can be done without
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence requiring DNSKEYs to be fetched. [RT #15430]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1931. [bug] Per-client mctx could require a huge amount of memory,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence particularly for a busy caching server. [RT #15519]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1930. [port] HPUX: ia64 support. [RT #15473]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1927. [bug] Access to soanode or nsnode in rbtdb violated the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence lock order rule and could cause a dead lock.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1926. [bug] The Windows installer did not check for empty
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence passwords. BINDinstall was being installed in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the wrong place. [RT #15483]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1925. [port] All outer level AC_TRY_RUNs need cross compiling
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence defaults. [RT #15469]
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence1924. [port] libbind: hpux ia64 support. [RT #15473]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1923. [bug] ns_client_detach() called too early. [RT #15499]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1922. [bug] check-tool.c:setup_logging() missing call to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dns_log_setcontext().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1921. [bug] Client memory contexts were not using internal
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence malloc. [RT# 15434]
c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence1920. [bug] The cache rbtdb lock array was too small to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence have the desired performance characteristics.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1919. [contrib] queryperf: a set of new features: collecting/printing
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence response delays, printing intermediate results, and
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence adjusting query rate for the "target" qps.
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley1918. [bug] Memory leak when checking acls. [RT #15391]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley when generating man pages. [RT #15385]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1915. [bug] dig +ndots was broken. [RT #15215]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1914. [protocol] DS is required to accept mnemonic algorithms
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence (RFC 4034). Still emit numeric algorithms for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence compatibility with RFC 3658. [RT #15354]
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington1913. [func] Integrate contributed DLZ code into named. [RT #11382]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1912. [port] aix: atomic locking for powerpc. [RT #15020]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1911. [bug] Update windows socket code. [RT #14965]
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence1910. [bug] dig's +sigchase code overhauled. [RT #14933]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1909. [bug] The DLV code has been re-worked to make no longer
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence query order sensitive. [RT #14933]
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence1908. [func] dig now warns if 'RA' is not set in the answer when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 'RD' was set in the query. host/nslookup skip servers
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence that fail to set 'RA' when 'RD' is set unless a server
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence is explicitly set. [RT #15005]
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff1906. [func] dig now has a '-q queryname' and '+showsearch' options.
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews1905. [bug] Strings returned from cfg_obj_asstring() should be
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews treated as read-only. The prototype for
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews cfg_obj_asstring() has been updated to reflect this.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence friends. Note: RFC 1918 zones are not yet covered by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence this but are likely to be in a future release.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence New options: empty-server, empty-contact,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence empty-zones-enable and disable-empty-zone.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1903. [func] ISC string copy API.
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence1902. [func] Attempt to make the amount of work performed in a
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer iteration self tuning. The covers nodes clean from
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer the cache per iteration, nodes written to disk when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence rewriting a master file and nodes destroyed per
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence iteration when destroying a zone or a cache.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1901. [cleanup] Don't add DNSKEY records to the additional section.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1900. [bug] ixfr-from-differences failed to ensure that the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence serial number increased. [RT #15036]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1899. [func] named-checkconf now validates update-policy entries.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ISC_NETADDR_FORMATSIZE to allow for scope details.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1897. [func] x86 and x86_64 now have separate atomic locking
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence implementations.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1896. [bug] Recursive clients soft quota support wasn't working
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence as expected. [RT #15103]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1895. [bug] A escaped character is, potentially, converted to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the output character set too early. [RT #14666]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1894. [doc] Review ARM for BIND 9.4.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1893. [port] Use uintptr_t if available. [RT #14606]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1892. [func] Support for SPF rdata type. [RT #15033]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1891. [port] freebsd: pthread_mutex_init can fail if it runs out
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of memory. [RT #14995]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1890. [func] Raise the UDP receive buffer size to 32k if it is
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence less than 32k. [RT #14953]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1889. [port] sunos: non blocking i/o support. [RT #14951]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1888. [func] Support for IPSECKEY rdata type. [RT #14967]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1887. [bug] The cache could delete expired records too fast for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence clients with a virtual time in the past. [RT #14991]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1886. [bug] fctx_create() could return success even though it
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failed. [RT #14993]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1885. [func] dig: report the number of extra bytes still left in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the packet after processing all the records.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence levels. [RT #14962]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1882. [func] Limit the number of recursive clients that can be
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence waiting for a single query (<qname,qtype,qclass>) to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence resolve. New options clients-per-query and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence max-clients-per-query.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1881. [func] Add a system test for named-checkconf. [RT #14931]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1880. [func] The lame cache is now done on a <qname,qclass,qtype>
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence basis as some servers only appear to be lame for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence certain query types. [RT #14916]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1878. [func] Detect duplicates of UDP queries we are recursing on
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and drop them. New stats category "duplicate".
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson1877. [bug] Fix unreasonably low quantum on call to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dns_rbt_destroy2(). Remove unnecessary unhash_node()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence call. [RT #14919]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1876. [func] Additional memory debugging support to track size
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and mctx arguments. [RT #14814]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1875. [bug] process_dhtkey() was using the wrong memory context
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence to free some memory. [RT #14890]
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence1874. [port] sunos: portability fixes. [RT #14814]
cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson1873. [port] win32: isc__errno2result() now reports its caller.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence1871. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1870. [func] Added framework for handling multiple EDNS versions.
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson1869. [func] dig can now specify the EDNS version when making
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson a query. [RT #14873]
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence1868. [func] edns-udp-size can now be overridden on a per
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence server basis. [RT #14851]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1867. [bug] It was possible to trigger a INSIST in
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence dlv_validatezonekey(). [RT #14846]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1866. [bug] resolv.conf parse errors were being ignored by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence bad addresses. [RT #14841]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1864. [bug] Don't try the alternative transfer source if you
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence got a answer / transfer with the main source
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley address. [RT #14802]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley1863. [bug] rrset-order "fixed" error messages not complete.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley1862. [func] Add additional zone data constancy checks.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley named-checkzone has extended checking of NS, MX and
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley SRV record and the hosts they reference.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley named has extended post zone load checks.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley New zone options: check-mx and integrity-check.
cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence1861. [bug] dig could trigger a INSIST on certain malformed
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence responses. [RT #14801]
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence incorrectly set. [RT #14775]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1859. [func] Add support for CH A record. [RT #14695]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1858. [bug] The flush-zones-on-shutdown option wasn't being
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence parsed. [RT #14686]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1857. [bug] named could trigger a INSIST() if reconfigured /
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence reloaded too fast. [RT #14673]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1855. [bug] ixfr-from-differences was failing to detect changes
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence of ttl due to dns_diff_subtract() was ignoring the ttl
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of records. [RT #14616]
77f372eed39827f5efef476602de7c0505f99b91David Lawrence1854. [bug] lwres also needs to know the print format for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence (long long). [RT #13754]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1853. [bug] Rework how DLV interacts with proveunsecure().
8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence1852. [cleanup] Remove last vestiges of dnssec-signkey and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dnssec-makekeyset (removed from Makefile years ago).
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1851. [doc] Doxygen comment markup. [RT #11398]
cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1849. [doc] All forms of the man pages (docbook, man, html) should
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence have consistent copyright dates.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1848. [bug] Improve SMF integration. [RT #13238]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1847. [bug] isc_ondestroy_init() is called too late in
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson dns_rbtdb_create()/dns_rbtdb64_create().
6f17d90364f01c3e81073a9ffb40b0093878c8e2Brian Wellington1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff <bortzmeyer@nic.fr>.
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff1845. [bug] Improve error reporting to distinguish between
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence accept()/fcntl() and socket()/fcntl() errors.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson for each 16 bit piece of the IPv6 address. The text
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson representation of a IPv6 address has been tightened
d111a46c88adda33a93839f4934e127b6147d87dBob Halley to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
d111a46c88adda33a93839f4934e127b6147d87dBob Halley1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence when CFLAGS contains "-I /usr/local/include"
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews resulting in old header files being used.
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews1842. [port] cmsg_len() could produce incorrect results on
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence some platform. [RT #13744]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff1841. [bug] "dig +nssearch" now makes a recursive query to
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff find the list of nameservers to query. [RT #13694]
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff1840. [func] dnssec-signzone can now randomize signature end times
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff (dnssec-signzone -j jitter). [RT #13609]
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley1839. [bug] <isc/hash.h> was not being installed.
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley1838. [cleanup] Don't allow Linux capabilities to be inherited.
53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington1837. [bug] Compile time option ISC_FACILITY was not effective
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington for 'named -u <user>'. [RT #13714]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1836. [cleanup] Silence compiler warnings in hash_test.c.
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson1834. [bug] Bad memset in rdata_test.c. [RT #13658]
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews1831. [doc] Update named-checkzone documentation. [RT#13604]
4716e94840921878b26e493576f84afe4fe08752Mark Andrews1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1829. [bug] win32: "pid-file none;" broken. [RT #13563]
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence1828. [bug] isc_rwlock_init() failed to properly cleanup if it
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence encountered a error. [RT #13549]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley1827. [bug] host: update usage message for '-a'. [RT #37116]
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
3886e748a4086b813e3453232a742903762fedadBob Halley of memory error. [RT #13537]
3886e748a4086b813e3453232a742903762fedadBob Halley1825. [bug] Missing UNLOCK() on out of memory error from in
3886e748a4086b813e3453232a742903762fedadBob Halley rbtdb.c:subtractrdataset(). [RT #13519]
3886e748a4086b813e3453232a742903762fedadBob Halley1824. [bug] Memory leak on dns_zone_setdbtype() failure.
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley1823. [bug] Wrong macro used to check for point to point interface.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington1822. [bug] check-names test for RT was reversed. [RT #13382]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington1821. [placeholder]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington1820. [bug] Gracefully handle acl loops. [RT #13659]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington1819. [bug] The validator needed to check both the algorithm and
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson digest types of the DS to determine if it could be
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson used to introduce a secure zone. [RT #13593]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley1817. [func] Add support for additional zone file formats for
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley improving loading performance. The masterfile-format
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley option in named.conf can be used to specify a
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley non-default format. A separate command
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson named-compilezone was provided to generate zone files
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson in the new format. Additionally, the -I and -O options
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson for dnssec-signzone specify the input and output
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1815. [bug] nsupdate triggered a REQUIRE if the server was set
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson without also setting the zone and it encountered
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson a CNAME and was using TSIG. [RT #13086]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff1814. [func] UNIX domain controls are now supported.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1813. [func] Restructured the data locking framework using
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence architecture dependent atomic operations (when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence available), improving response performance on
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence multi-processor machines significantly.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence x86, x86_64, alpha, powerpc, and mips are currently
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence1811. [func] Preserve the case of domain names in rdata during
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence zone transfers. [RT #13547]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1810. [bug] configure, lib/bind/configure make different default
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister decisions about whether to do a threaded build.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister1809. [bug] "make distclean" failed for libbind if the platform
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister is not supported.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister1808. [bug] zone.c:notify_zone() contained a race condition,
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister zone->db could change underneath it. [RT #13511]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister1807. [bug] When forwarding (forward only) set the active domain
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister from the forward zone name. [RT #13526]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1806. [bug] The resolver returned the wrong result when a CNAME /
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister DNAME was encountered when fetching glue from a
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence secure namespace. [RT #13501]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1805. [bug] Pending status was not being cleared when DLV was
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence active. [RT #13501]
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister1804. [bug] Ensure that if we are queried for glue that it fits
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister in the additional section or TC is set to tell the
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson client to retry using TCP. [RT #10114]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson1803. [bug] dnssec-signzone sometimes failed to remove old
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson RRSIGs. [RT #13483]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson1802. [bug] Handle connection resets better. [RT #11280]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson1801. [func] Report differences between hints and real NS rrset
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson and associated address records.
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington1800. [bug] Changes #1719 allowed a INSIST to be triggered.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1799. [bug] 'rndc flushname' failed to flush negative cache
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence entries. [RT #13438]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1798. [func] The server syntax has been extended to support a
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence range of servers. [RT #11132]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington1797. [func] named-checkconf now check acls to verify that they
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington only refer to existing acls. [RT #13101]
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley1795. [bug] "rndc dumpdb" was not fully documented. Minor
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence formating issues with "rndc dumpdb -all". [RT #13396]
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence1794. [func] Named and named-checkzone can now both check for
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister non-terminal wildcard records.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1793. [func] Extend adjusting TTL warning messages. [RT #13378]
be768c2e952c34438025999125f984995a2c675fBob Halley1792. [func] New zone option "notify-delay". Specify a minimum
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence delay between sets of NOTIFY messages.
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley1791. [bug] 'host -t a' still printed out AAAA and MX records.
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
be768c2e952c34438025999125f984995a2c675fBob Halley allow parallel make to succeed.
be768c2e952c34438025999125f984995a2c675fBob Halley1789. [bug] Prerequisite test for tkey and dnssec could fail
f00e30e9322fb2170ad3e21c3336c5b81be964c2James Brister with "configure --with-libtool".
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley1788. [bug] libbind9.la/libbind9.so needs to link against
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley1786. [port] AIX: libt_api needs to be taught to look for
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley T_testlist in the main executable (--with-libtool).
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister1785. [bug] libbind9.la/libbind9.so needs to link against
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson1784. [cleanup] "libtool -allow-undefined" is the default.
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson Leave hooks in configure to allow it to be set
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence if needed in the future.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister1782. [port] OSX: --with-libtool + --enable-libbind broke on
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence __evOptMonoTime. [RT #13219]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley1780. [bug] Update libtool to 1.5.10.
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley IN6ADDR_LOOPBACK_INIT macros.
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington IN6ADDR_LOOPBACK_INIT macros.
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington IN6ADDR_LOOPBACK_INIT macros.
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley1774. [port] Aix: Silence compiler warnings / build failures.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1773. [bug] Fast retry on host / net unreachable. [RT #13153]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1772. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1771. [placeholder]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which