ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson 806. [bug] DNS_R_SEENINCLUDE was failing to propogate back up

ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson the calling stack to the zone maintence level.

ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson

ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson 805. [bug] When using "forward only", missing root hints should

ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson not cause queries to fail. [RT #1143]

ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson

f2fdfe7c42f3b10f3653f851ce5a0a90ee5ac1f9David Lawrence 804. [bug] Attempting to obtain entropy could fail in some

f2fdfe7c42f3b10f3653f851ce5a0a90ee5ac1f9David Lawrence situations. This would be most common on systems

6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson with user-space threads. [RT #1131]

f2fdfe7c42f3b10f3653f851ce5a0a90ee5ac1f9David Lawrence

996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson 803. [bug] Treat all SIG queries as if they have the CD bit set,

996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson otherwise no data will be returned [RT #749]

996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson

996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson 802. [bug] DNSSEC key tags were computed incorrectly in almost

f2fdfe7c42f3b10f3653f851ce5a0a90ee5ac1f9David Lawrence all cases. [RT #1146]

f2fdfe7c42f3b10f3653f851ce5a0a90ee5ac1f9David Lawrence

6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson 801. [bug] nsupdate should treat lines beginning with ';' as

47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence comments. [RT #1139]

47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence

c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister 800. [bug] dnssec-signzone produced incorrect statistics for

c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister large zones. [RT #1133]

17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews

17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews 799. [bug] The ADB didn't find AAAA glue in a zone unless A6

17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews glue was also present.

4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister

4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister 798. [bug] nsupdate should be able to reject bad input lines

4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister and continue. [RT #1130]

e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister

e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister 797. [func] Issue a warning if the 'directory' option contains

e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister a relative path. [RT #269]

e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister

e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister 796. [func] When a size limit is associated with a log file,

e411a986b94276c28e6a971f9c3b61d45c635456James Brister only roll it when the size is reached, not every

e411a986b94276c28e6a971f9c3b61d45c635456James Brister time the log file is opened. [RT #1096]

e411a986b94276c28e6a971f9c3b61d45c635456James Brister

e411a986b94276c28e6a971f9c3b61d45c635456James Brister 795. [func] Add the +multiline option to dig. [RT #1095]

c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews

c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews 794. [func] Implement the "port" and "default-port" statements

76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson in rndc.conf.

76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson

1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson 793. [cleanup] The DNSSEC tools could create filenames that were

1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson illegal or contained shell metacharacters. They

5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews now use a different text encoding of names that

5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews doesn't have these problems. [RT #1101]

1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson

41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence 792. [cleanup] Replace the OMAPI command channel protocol with a

41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence simpler one.

5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews

5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews 791. [bug] The command channel now works over IPv6.

1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson 790. [bug] Wildcards created using dynamic update or IXFR

3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson could fail to match. [RT #1111]

3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson

3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson 789. [bug] The "localhost" and "localnets" ACLs did not match

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson when used as the second element of a two-element

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister sortlist item.

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister 788. [func] Add the "match-mapped-addresses" option, which

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson causes IPv6 v4mapped addresses to be treated as

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister IPv4 addresses for the purpose of acl matching.

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister 787. [bug] The DNSSEC tools failed to downcase domain

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister names when mapping them into file names.

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson

dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson 786. [bug] When DNSSEC signing/verifying data, owner names were

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister not properly downcased.

41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence

41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence 785. [bug] A race condition in the resolver could cause

e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister an assertion failure. [RT #673, #872, #1048]

36357e4304862fb47e9fae03c704cb6720310c45James Brister

36357e4304862fb47e9fae03c704cb6720310c45James Brister 784. [bug] nsupdate and other programs would not quit properly

36357e4304862fb47e9fae03c704cb6720310c45James Brister if some signals were blocked by the caller. [RT #1081]

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence 783. [bug] Following CNAMEs could cause an assertion failure

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence when either using an sdb database or under very

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence rare conditions.

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence 782. [func] Implement the "serial-query-rate" option.

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence

9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence 781. [func] Avoid error packet loops by dropping duplicate FORMERR

b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence responses. [RT #1006]

b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence

b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence 780. [bug] Error handling code dealing with out of memory or

b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence other rare errors could lead to assertion failures

4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence by calling functions on unitialized names. [RT #1065]

4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence

4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence 779. [func] Added the "minimal-responses" option.

4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence

014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson 778. [bug] When starting cache cleaning, cleaning_timer_action()

014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson returned without first pausing the iterator, which

b99d080717fdd741961d736581270d37bad8bec0David Lawrence could cause deadlock. [RT #998]

b99d080717fdd741961d736581270d37bad8bec0David Lawrence

b99d080717fdd741961d736581270d37bad8bec0David Lawrence 777. [bug] An empty forwarders list in a zone failed to override

97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson global forwarders. [RT #995]

97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson

97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson 776. [func] Improved error reporting in denied messages. [RT #252]

b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence

b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence 775. [placeholder]

23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence

23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence 774. [func] max-cache-size is implemented.

23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence

358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence 773. [func] Added isc_rwlock_trylock() to attempt to lock without

358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence blocking.

358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence

358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence 772. [bug] Owner names could be incorrectly omitted from cache

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence dumps in the presence of negative caching entries.

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence [RT #991]

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence 771. [cleanup] TSIG errors related to unsynchronized clocks

54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence are logged better. [RT #919]

027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence

027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence 770. [func] Add the "edns yes_or_no" statement to the server

027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence clause. [RT #524]

027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence

5610876d1b4a851d6d8806d95aff3e571becac5bDavid Lawrence 769. [func] Improved error reporting when parsing rdata. [RT #740]

5610876d1b4a851d6d8806d95aff3e571becac5bDavid Lawrence

a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence 768. [bug] The server did not emit an SOA when a CNAME

a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence or DNAME chain ended in NXDOMAIN in an

a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence authoritative zone.

344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence

344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence 767. [placeholder]

738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence

738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence 766. [bug] A few cases in query_find() could leak fname.

eefea43215016bce437ab4a7441b2851fd182960David Lawrence This would trigger the mpctx->allocated == 0

eefea43215016bce437ab4a7441b2851fd182960David Lawrence assertion when the server exited.

eefea43215016bce437ab4a7441b2851fd182960David Lawrence [RT #739, #776, #798, #812, #818, #821, #845,

9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence #892, #935, #966]

9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence

9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence 765. [func] ACL names are once again case insensitive, like

c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence in BIND 8. [RT #252]

c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence

c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence 764. [func] Configuration files now allow "include" directives

c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence in more places, such as inside the "view" statement.

a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson [RT #377, #728, #860]

a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson

a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson 763. [func] Configuration files no longer have reserved words.

dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence [RT #731, #753]

dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence

dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence 762. [cleanup] The named.conf and rndc.conf file parsers have

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley been completely rewritten.

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley 761. [bug] _REENTRANT was still defined when building with

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley --disable-threads.

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley

e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley 760. [contrib] Significant enhancements to the pgsql sdb driver.

904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence

904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence 759. [bug] The resolver didn't turn off "avoid fetches" mode

2d78d06402ef2605ff8f6b3f5008673754d3711eDavid Lawrence when restarting, possibly causing resolution

2d78d06402ef2605ff8f6b3f5008673754d3711eDavid Lawrence to fail when it should not. This bug only affected

2d78d06402ef2605ff8f6b3f5008673754d3711eDavid Lawrence platforms which support both IPv4 and IPv6. [RT #927]

bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence

1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington 758. [bug] The "avoid fetches" code did not treat negative

1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington cache entries correctly, causing fetches that would

1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington be useful to be avoided. This bug only affected

1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington platforms which support both IPv4 and IPv6. [RT #927]

56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence

56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence 757. [func] Log zone transfers.

fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence

fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence 756. [bug] dns_zone_load() could "return" success when no master

fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence file was configured.

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence 755. [bug] Fix incorrectly formatted log messages in zone.c.

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence 754. [bug] Certain failure conditions sending UDP packets

7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence could cause the server to retry the transmission

32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence indefinitely. [RT #902]

32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence

32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence 753. [bug] dig, host, and nslookup would fail to contact a

32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence remote server if getaddrinfo() returned an IPv6

b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews address on a system that doesn't support IPv6.

b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews [RT #917]

b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews

68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff 752. [func] Correct bad tv_usec elements returned by

68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff gettimeofday().

68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews 751. [func] Log successful zone loads / transfers. [RT #898]

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews 750. [bug] A query should not match a DNAME whose trust level

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews is pending. [RT #916]

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews

6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews 749. [bug] When a query matched a DNAME in a secure zone, the

61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence server did not return the signature of the DNAME.

61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence [RT #915]

61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence

8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence 748. [doc] List supported RFCs in doc/misc/rfc-compliance.

8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence [RT #781]

8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence

2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence 747. [bug] The code to determine whether an IXFR was possible

2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence did not properly check for a database that could

2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence not have a journal. [RT #865, #908]

140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer

140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer 746. [bug] The sdb didn't clone rdatasets properly, causing

6d208969b3ed736f434bc5120044f8fd2f595f22David Lawrence a crash when the server followed delegations. [RT #905]

6d208969b3ed736f434bc5120044f8fd2f595f22David Lawrence

145bd6ea3394faf2faa40c99cb6bb7c96027ae16David Lawrence 745. [func] Report the owner name of records that fail

145bd6ea3394faf2faa40c99cb6bb7c96027ae16David Lawrence semantic checks while loading.

145bd6ea3394faf2faa40c99cb6bb7c96027ae16David Lawrence

0c33e418cb443ade8ed55f5433bc4d409c7af0b8David Lawrence 744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the

0c33e418cb443ade8ed55f5433bc4d409c7af0b8David Lawrence result of an ANY or SIG query, the resolver failed

0c33e418cb443ade8ed55f5433bc4d409c7af0b8David Lawrence to setup the return event's rdatasets, causing an

8a0ba20b16177d40bd557b491f56003c7d38a4a2David Lawrence assertion failure in the query code. [RT #881]

8a0ba20b16177d40bd557b491f56003c7d38a4a2David Lawrence

8a0ba20b16177d40bd557b491f56003c7d38a4a2David Lawrence 743. [bug] Receiving a large number of certain malformed

b3e77535185043f089b346166440402d092030c3David Lawrence answers could cause named to stop responding.

b3e77535185043f089b346166440402d092030c3David Lawrence [RT #861]

b3e77535185043f089b346166440402d092030c3David Lawrence

b3e77535185043f089b346166440402d092030c3David Lawrence 742. [placeholder]

b3e77535185043f089b346166440402d092030c3David Lawrence

03f0e349d81a580a562fd21402ef97d11c15429aBrian Wellington 741. [port] Support openssl-engine. [RT #709]

9e842bb2d3802de0f7da5d6d33382a4859bc6876Brian Wellington

9e842bb2d3802de0f7da5d6d33382a4859bc6876Brian Wellington 740. [port] Handle openssl library mismatches slightly better.

9e842bb2d3802de0f7da5d6d33382a4859bc6876Brian Wellington

e1747e09e7cc6771dca1a1702e42e6401dbeebedDavid Lawrence 739. [port] Look for /dev/random in configure, rather than

e1747e09e7cc6771dca1a1702e42e6401dbeebedDavid Lawrence assuming it will be there for only a predefined

e1747e09e7cc6771dca1a1702e42e6401dbeebedDavid Lawrence set of OSes.

a231769eaae9add23b16124388e1d474fb488873David Lawrence

a231769eaae9add23b16124388e1d474fb488873David Lawrence 738. [bug] If a non-threadsafe sdb driver supported AXFR and

a231769eaae9add23b16124388e1d474fb488873David Lawrence received an AXFR request, it would deadlock or die

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence with an assertion failure. [RT #852]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 737. [port] stdtime.c failed to compile on certain platforms.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 736. [func] New functions isc_task_{begin,end}exclusive().

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 735. [doc] Add BIND 4 migration notes.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 734. [bug] An attempt to re-lock the zone lock could occur if

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence the server was shutdown during a zone tranfer.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence [RT #830]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 733. [bug] Reference counts of dns_acl_t objects need to be

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence locked but were not. [RT #801, #821]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 731. [bug] Certain zone errors could cause named-checkzone to

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence fail ungracefully. [RT #819]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 730. [bug] lwres_getaddrinfo() returns the correct result when

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence it fails to contact a server. [RT #768]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 729. [port] pthread_setconcurrency() needs to be called on Solaris.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 728. [bug] Fix comment processing on master file directives.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence [RT# 757]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 727. [port] Work around OS bug where accept() succeeds but

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence fails to fill in the peer address of the accepted

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence connection, by treating it as an error rather than

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence an assertion failure. [RT #809]

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 726. [func] Implement the "trace" and "notrace" commands in rndc.

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence

6e49e91bd08778d7eae45a2229dcf41ed97cc636David Lawrence 725. [bug] Installing man pages could fail.

a59b51eb1d9a80d682efc669414e16dc8da47e95David Lawrence

a59b51eb1d9a80d682efc669414e16dc8da47e95David Lawrence 724. [func] New libisc functions isc_netaddr_any(),

6b526894f47f6d6ff08f4f49b952b4ec8247ba9eDavid Lawrence isc_netaddr_any6().

6b526894f47f6d6ff08f4f49b952b4ec8247ba9eDavid Lawrence

f6cdcafa335c3ff1890c20dcaf276546f8523fe3David Lawrence 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver

f6cdcafa335c3ff1890c20dcaf276546f8523fe3David Lawrence to return DNS_R_SERVFAIL. [RT #783]

f6cdcafa335c3ff1890c20dcaf276546f8523fe3David Lawrence

16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson 722. [func] Allow incremental loads to be canceled.

16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson

16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson 721. [cleanup] Load manager and dns_master_loadfilequota() are no

16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson more.

33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence

33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence 720. [bug] Server could enter infinite loop in

33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence dispatch.c:do_cancel(). [RT #733]

3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence

3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence 719. [bug] Rapid reloads could trigger an assertion failure.

3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence [RT #743, #763]

2d78d06402ef2605ff8f6b3f5008673754d3711eDavid Lawrence

947bd6c648bd29bc226971324de1b30230a56a22David Lawrence 718. [cleanup] "internal" is no longer a reserved word in named.conf.

878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence [RT #753, #731]

878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence

cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson 717. [bug] Certain TKEY processing failure modes could

cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson reference an uninitialized variable, causing the

b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence server to crash. [RT #750]

b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence

c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence 716. [bug] The first line of a $INCLUDE master file was lost if

c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence an origin was specified. [RT #744]

c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence

c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence 715. [bug] Resolving some A6 chains could cause an assertion

c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence failure in adb.c. [RT #738]

c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence

f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson 714. [bug] Preserve interval timers across reloads unless changed.

f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson [RT# 729]

f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson

d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence 713. [func] named-checkconf takes '-t directory' similar to named.

d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence [RT #726]

38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence

38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence 712. [bug] Sending a large signed update message caused an

38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence assertion failure. [RT #718]

38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence

802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence 711. [bug] The libisc and liblwres implementations of

802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence inet_ntop contained an off by one error.

802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence 710. [func] The forwarders statement now takes an optional

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence port. [RT #418]

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence 709. [bug] ANY or SIG queries for data with a TTL of 0

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence would return SERVFAIL. [RT #620]

5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley 708. [bug] When building with --with-openssl, the openssl headers

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley included with BIND 9 should not be used. [RT #702]

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley 707. [func] The "filename" argument to named-checkzone is no

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley longer optional, to reduce confusion. [RT #612]

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley 706. [bug] Zones with an explicit "allow-update { none; };"

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley were considered dynamic and therefore not reloaded

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley on SIGHUP or "rndc reload".

32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley

cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence 705. [port] Work out resource limit type for use where rlim_t is

cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence not available. [RT #695]

58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence

58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence 704. [port] RLIMIT_NOFILE is not available on all platforms.

58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence [RT #695]

7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence

7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence 703. [port] sys/select.h is needed on older platforms. [RT #695]

8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence

8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence 702. [func] If the address 0.0.0.0 is seen in resolv.conf,

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence use 127.0.0.1 instead. [RT #693]

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence 701. [func] Root hints are now fully optional. Class IN

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence views use compiled-in hints by default, as

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence before. Non-IN views with no root hints now

7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence provide authoritative service but not recursion.

32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington A warning is logged if a view has neither root

32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington hints nor authoritative data for the root. [RT #696]

f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence

f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence 700. [bug] $GENERATE range check was wrong. [RT #688]

f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence

77f372eed39827f5efef476602de7c0505f99b91David Lawrence 699. [bug] The lexer mishandled empty quoted strings. [RT #694]

77f372eed39827f5efef476602de7c0505f99b91David Lawrence

77f372eed39827f5efef476602de7c0505f99b91David Lawrence 698. [bug] Aborting nsupdate with ^C would lead to several

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence race conditions.

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence 697. [bug] nsupdate was not compatible with the undocumented

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence BIND 8 behavior of ignoring TTLs in "update delete"

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence commands. [RT #693]

8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence 696. [bug] lwresd would die with an assertion failure when passed

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence a zero-length name. [RT #692]

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence 695. [bug] If the resolver attempted to query a blackholed or

cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence bogus server, the resolution would fail immediately.

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence 694. [bug] $GENERATE did not produce the last entry.

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence [RT #682, #683]

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence 693. [bug] An empty lwres statement in named.conf caused

d111a46c88adda33a93839f4934e127b6147d87dBob Halley the server to crash while loading.

e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson

e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson 692. [bug] Deal with systems that have getaddrinfo() but not

e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson gai_strerror(). [RT #679]

e49a98d47fea220023c22bcc7204f13f7f0b07feBrian Wellington

6f17d90364f01c3e81073a9ffb40b0093878c8e2Brian Wellington 691. [bug] Configuring per-view forwarders caused an assertion

195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff failure. [RT #675, #734]

195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff

195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff 690. [func] $GENERATE now supports DNAME. [RT #654]

e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington

e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington 689. [doc] man pages are now installed. [RT #210]

e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington

d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson 688. [func] "make tags" now works on systems with the

d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson "Exuberant Ctags" etags.

d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson

d111a46c88adda33a93839f4934e127b6147d87dBob Halley 687. [bug] Only say we have IPv6, with sufficent functionality,

d111a46c88adda33a93839f4934e127b6147d87dBob Halley if it has actually been tested. [RT #586]

d111a46c88adda33a93839f4934e127b6147d87dBob Halley

d111a46c88adda33a93839f4934e127b6147d87dBob Halley 686. [bug] dig and nslookup can now be properly aborted during

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence blocking operations. [RT #568]

9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence 685. [bug] nslookup should use the search list/domain options

9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews from resolv.conf by default. [RT #405, #630]

585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence

2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson 684. [bug] Memory leak with view forwarders. [RT #656]

3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff

3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff 683. [bug] File descriptor leak in isc_lex_openfile().

3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff

c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff 682. [bug] nslookup displayed SOA records incorrectly. [RT #665]

c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington 681. [bug] $GENERATE specifying output format was broken. [RT #653]

15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley

15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley 680. [bug] dns_rdata_fromstruct() mishandled options bigger

15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley than 255 octets.

15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley

53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington 679. [bug] $INCLUDE could leak memory and file descriptors on

53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington reload. [RT #639]

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington 678. [bug] "transfer-format one-answer;" could trigger an assertion

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington failure. [RT #646]

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington 677. [bug] dnssec-signzone would occasionally use the wrong ttl

b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington for database operations and fail. [RT #643]

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson 676. [bug] Log messages about lame servers to category

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson 'lame-servers' rather than 'resolver', so as not

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson to be gratuitously incompatible with BIND 8.

3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson

b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews 675. [bug] TKEY queries could cause the server to leak

b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews memory.

b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews

4716e94840921878b26e493576f84afe4fe08752Mark Andrews 674. [func] Allow messages to be TSIG signed / verified using

4716e94840921878b26e493576f84afe4fe08752Mark Andrews a offset from the current time.

4716e94840921878b26e493576f84afe4fe08752Mark Andrews

622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence 673. [func] The server can now convert RFC1886-style recursive

622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence lookup requests into RFC2874-style lookups, when

622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence enabled using the new option "allow-v6-synthesis".

3db95284356cd54df84ed2425f189ad2b44e4992David Lawrence

3db95284356cd54df84ed2425f189ad2b44e4992David Lawrence 672. [bug] The wrong time was in the "time signed" field when

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley replying with BADTIME error.

0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley

0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley 671. [bug] The message code was failing to parse a message with

3886e748a4086b813e3453232a742903762fedadBob Halley no question section and a TSIG record. [RT #628]

3886e748a4086b813e3453232a742903762fedadBob Halley

3886e748a4086b813e3453232a742903762fedadBob Halley 670. [bug] The lwres replacements for getaddrinfo and

3886e748a4086b813e3453232a742903762fedadBob Halley getipnodebyname didn't properly check for the

3886e748a4086b813e3453232a742903762fedadBob Halley existence of the sockaddr sa_len field.

3886e748a4086b813e3453232a742903762fedadBob Halley

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley 669. [func] dnssec-keygen now makes the public key file

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley non-world-readable for symmetric keys. [RT #403]

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley 668. [func] named-checkzone now reports multiple errors in master

b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley files.

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 667. [bug] On Linux, running named with the -u option and a

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington non-world-readable configuration file didn't work.

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington [RT #626]

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 666. [bug] If a request sent by dig is longer than 512 bytes,

ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington use TCP.

b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson

b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson 665. [bug] Signed responses were not sent when the size of the

b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson TSIG + question exceeded the maximum message size.

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley [RT #628]

83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley 664. [bug] The t_tasks and t_timers module tests are now skipped

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley when building without threads, since they require

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley threads.

134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley

83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson 663. [func] Accept a size_spec, not just an integer, in the

8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson (unimplemented and ignored) max-ixfr-log-size option

8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson for compatibility with recent versions of BIND 8.

0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson [RT #613]

0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson

0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson 662. [bug] dns_rdata_fromtext() failed to log certain errors.

7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington

7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington 661. [bug] Certain UDP IXFR requests caused an assertion failure

a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson (mpctx->allocated == 0). [RT #355, #394, #623]

a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson

a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson 660. [port] Detect multiple CPUs on HP-UX and IRIX.

a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson

42712a426dd62518ca7c36982867e5622f7265e7Michael Graff 659. [performance] Rewrite the name compression code to be much faster.

42712a426dd62518ca7c36982867e5622f7265e7Michael Graff

e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence 658. [cleanup] Remove all vestiges of 16 bit global compression.

e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence

e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence 657. [bug] When a listen-on statement in an lwres block does not

e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence specify a port, use 921, not 53. Also update the

11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson listen-on documentation. [RT #616]

11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson

5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence 656. [func] Treat an unescaped newline in a quoted string as

5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence an error. This means that TXT records with missing

b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence close quotes should have meaningful errors printed.

b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence

b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence 655. [bug] Improve error reporting on unexpected eof when loading

0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence zones. [RT #611]

0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 654. [bug] Origin was being forgotten in TCP retries in dig.

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister [RT #574]

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 653. [bug] +defname option in dig was reversed in sense.

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister [RT #549]

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 652. [bug] zone_saveunique() did not report the new name.

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 651. [func] The AD bit in responses now has the meaning

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister specified in <draft-ietf-dnsext-ad-is-secure>.

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 650. [bug] SIG(0) records were being generated and verified

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister incorrectly. [RT #606]

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 649. [bug] It was possible to join to an already running fctx

ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister after it had "cloned" its events, but before it sent

7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence them. In this case, the event of the newly joined

7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence fetch would not contain the answer, and would

7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence trigger the INSIST() in fctx_sendevents(). In

7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence BIND 9.0, this bug did not trigger an INSIST(), but

9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister caused the fetch to fail with a SERVFAIL result.

9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister [RT #588, #597, #605, #607]

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson 648. [port] Add support for pre-RFC2133 IPv6 implementations.

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson 647. [bug] Resolver queries sent after following multiple

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson referrals had excessively long retransmission

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson timeouts due to incorrectly counting the referrals

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson as "restarts".

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson

bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson 646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h

404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington didn't _cleanly_ fix the problem it was trying to fix.

404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington

404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington 645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence 644. [bug] #622 needed more work. [RT #562]

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence 643. [bug] xfrin error messages made more verbose, added class

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence of the zone. [RT# 599]

5b84a24a3bf571adae57c1bc006a0bce0f9f2befDavid Lawrence

d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley 642. [bug] Break the exit_check() race in the zone module.

7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington [RT #598]

7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington

7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington --- 9.1.0b2 released ---

d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley

d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley 641. [bug] $GENERATE caused a uninitialized link to be used.

d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley [RT #595]

9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence

9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence 640. [bug] Memory leak in error path could cause

9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence "mpctx->allocated == 0" failure. [RT #584]

a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister

a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister 639. [bug] Reading entropy from the keyboard would sometimes fail.

a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister [RT #591]

a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister

be768c2e952c34438025999125f984995a2c675fBob Halley 638. [port] lib/isc/random.c needed to explicitly include time.h

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley to get a prototype for time() when pthreads was not

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley being used. [RT #592]

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley 637. [port] Use isc_u?int64_t instead of (unsigned) long long in

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley lib/isc/print.c. Also allow lib/isc/print.c to

da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley be compiled even if the platform does not need it.

be768c2e952c34438025999125f984995a2c675fBob Halley [RT #592]

be768c2e952c34438025999125f984995a2c675fBob Halley

be768c2e952c34438025999125f984995a2c675fBob Halley 636. [port] Shut up MSVC++ about a possible loss of precision

f00e30e9322fb2170ad3e21c3336c5b81be964c2James Brister in the ISC__BUFFER_PUTUINT*() macros. [RT #592]

01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley

19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley 635. [bug] Reloading a server with a configured blackhole list

19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley would cause an assertion. [RT #590]

19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley

19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley 634. [bug] A log file will completely stop being written when

9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence it reaches the maximum size in all cases, not just

01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley when versioning is also enabled. [RT #570]

01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley

01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley 633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]

dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister

dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister 632. [bug] The index array of the journal file was

dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister corrupted as it was written to disk.

d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson

d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson 631. [port] Build without thread support on systems without

d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson pthreads.

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister 630. [bug] Locking failure in zone code. [RT #582]

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister 629. [bug] 9.1.0b1 dereferenced a null pointer and crashed

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister when responding to a UDP IXFR request.

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister 628. [bug] If the root hints contained only AAAA addresses,

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister named would be unable to perform resolution.

3f46e84f9ff264cac8c07c2136a507827afb2760James Brister

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley 627. [bug] The EDNS0 blackhole detection code of change 324

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley waited for three retransmissions to each server,

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley which takes much too long when a domain has many

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley name servers and all of them drop EDNS0 queries.

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley Now we retry without EDNS0 after three consecutive

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley timeouts, even if they are all from different

fdb12d38d325efba64581bdee7fac188466fff55Bob Halley servers. [RT #143]

43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington

43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington 626. [bug] The lightweight resolver daemon no longer crashes

43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington when asked for a SIG rrset. [RT #558]

c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington

c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington 625. [func] Zones now inherit their class from the enclosing view.

c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley 624. [bug] The zone object could get timer events after it had

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley been destroyed, causing a server crash. [RT #571]

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley 623. [func] Added "named-checkconf" and "named-checkzone" program

99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley for syntax checking named.conf files and zone files,

a5a5371b756f3bbbe33dac1dde196fbd6c063640Bob Halley respectively.

622. [bug] A canceled request could be destroyed before

dns_request_destroy() was called. [RT #562]

621. [port] Disable IPv6 at runtime if IPv6 sockets are unusable.

This mostly affects Red Hat Linux 7.0, which has

conflicts between libc and the kernel.

620. [bug] dns_master_load*inc() now require 'task' and 'load'

to be non-null. Also 'done' will not be called if

dns_master_load*inc() fails immediately. [RT #565]

618. [bug] Queries to a signed zone could sometimes cause

an assertion failure.

617. [bug] When using dynamic update to add a new RR to an

existing RRset with a different TTL, the journal

entries generated from the update did not include

explicit deletions and re-additions of the existing

RRs to update their TTL to the new value.

616. [func] dnssec-signzone -t output now includes performance

statistics.

615. [bug] dnssec-signzone did not like child keysets signed

by multiple keys.

614. [bug] Checks for uninitialized link fields were prone

to false positives, causing assertion failures.

The checks are now disabled by default and may

be re-enabled by defining ISC_LIST_CHECKINIT.

613. [bug] "rndc reload zone" now reloads primary zones.

It previously only updated slave and stub zones,

if an SOA query indicated an out of date serial.

612. [cleanup] Shutup a ridiculously noisy HP-UX compiler that

complains relentlessly about how its treatment

of 'const' has changed as well as how casting

sometimes tightens alignment constraints.

611. [func] allow-notify can be used to permit processing of

notify messages from hosts other than a slave's

masters.

610. [func] rndc dumpdb is now supported.

609. [bug] getrrsetbyname() would crash lwresd if the server

found more SIGs than answers. [RT #554]

608. [func] dnssec-signzone now adds a comment to the zone

with the time the file was signed.

607. [bug] nsupdate would fail if it encountered a CNAME or

DNAME in a response to an SOA query. [RT #515]

606. [bug] Compiling with --disable-threads failed due

to isc_thread_self() being incorrectly defined

as an integer rather than a function.

605. [func] New function isc_lex_getlasttokentext().

604. [bug] The named.conf parser could print incorrect line

numbers when long comments were present.

603. [bug] Make dig handle multiple types or classes on the same

query more correctly.

602. [func] Cope automatically with UnixWare's broken

IN6_IS_ADDR_* macros. [RT #539]

601. [func] Return a non-zero exit code if an update fails

in nsupdate.

600. [bug] Reverse lookups sometimes failed in dig, etc...

599. [func] Added four new functions to the libisc log API to

support i18n messages. isc_log_iwrite(),

isc_log_ivwrite(), isc_log_iwrite1() and

isc_log_ivwrite1() were added.

598. [bug] An update-policy statement would cause the server

to assert while loading. [RT #536]

597. [func] dnssec-signzone is now multithreaded.

596. [bug] DNS_RDATASLAB_FORCE and DNS_RDATASLAB_EXACT are

not mutually exclusive.

595. [port] On Linux 2.2, socket() returns EINVAL when it

should return EAFNOSUPPORT. Work around this.

[RT #531]

594. [func] sdb drivers are now assumed to not be thread-safe

unless the DNS_SDBFLAG_THREADSAFE flag is supplied.

593. [bug] If a secure zone was missing all its NXTs and

a dynamic update was attempted, the server entered

an infinite loop.

592. [bug] The sig-validity-interval option now specifies a

number of days, not seconds. This matches the

documentation. [RT #529]

--- 9.1.0b1 released ---

591. [bug] Work around non-reentrancy in openssl by disabling

precomputation in keys.

590. [doc] There are now man pages for the lwres library in

doc/man/lwres.

589. [bug] The server could deadlock if a zone was updated

while being transferred out.

588. [bug] ctx->in_use was not being correctly initalised when

when pushing a file for $INCLUDE. [RT #523]

587. [func] A warning is now printed if the "allow-update"

option allows updates based on the source IP

address, to alert users to the fact that this

is insecure and becoming increasingly so as

servers capable of update forwarding are being

deployed.

586. [bug] multiple views with the same name were fatal. [RT #516]

585. [func] dns_db_addrdataset() and and dns_rdataslab_merge()

now support 'exact' additions in a similar manner to

dns_db_subtractrdataset() and dns_rdataslab_subtract().

584. [func] You can now say 'notify explicit'; to suppress

notification of the servers listed in NS records

and notify only those servers listed in the

'also-notify' option.

583. [func] "rndc querylog" will now toggle logging of

queries, like "ndc querylog" in BIND 8.

582. [bug] dns_zone_idetach() failed to lock the zone.

[RT #199, #463]

581. [bug] log severity was not being correctly processed.

[RT #485]

580. [func] Ignore trailing garbage on incoming DNS packets,

for interoperability with broken server

implementations. [RT #491]

579. [bug] nsupdate did not take a filename to read update from.

[RT #492]

578. [func] New config option "notify-source", to specify the

source address for notify messages.

577. [func] Log illegal RDATA combinations. e.g. multiple

singlton types, cname and other data.

576. [doc] isc_log_create() description did not match reality.

575. [bug] isc_log_create() was not setting internal state

correctly to reflect the default channels created.

574. [bug] TSIG signed queries sent by the resolver would fail to

have their responses validated and would leak memory.

573. [bug] The journal files of IXFRed slave zones were

inadvertantly discarded on server reload, causing

"journal out of sync with zone" errors on subsequent

reloads. [RT #482]

572. [bug] Quoted strings were not accepted as key names in

address match lists.

571. [bug] It was possible to create an rdataset of singleton

type which had more than one rdata. [RT #154]

[RT #279]

570. [bug] rbtdb.c allowed zones containing nodes which had

both a CNAME and "other data". [RT #154]

569. [func] The DNSSEC AD bit will not be set on queries which

have not requested a DNSSEC response.

568. [func] Add sample simple database drivers in contrib/sdb.

567. [bug] Setting the zone transfer timeout to zero caused an

assertion failure. [RT #302]

566. [func] New public function dns_timer_setidle().

565. [func] Log queries more like BIND 8: query logging is now

done to category "queries", level "info". [RT #169]

564. [func] Add sortlist support to lwresd.

563. [func] New public functions dns_rdatatype_format() and

dns_rdataclass_format(), for convenient formatting

of rdata type/class mnemonics in log messages.

562. [cleanup] Moved lib/dns/*conf.c to bin/named where they belong.

561. [func] The 'datasize', 'stacksize', 'coresize' and 'files'

clauses of the options{} statement are now implemented.

560. [bug] dns_name_split did not properly the resulting prefix

when a maximal length bitstring label was split which

was preceded by another bitstring label. [RT #429]

559. [bug] dns_name_split did not properly create the suffix

when splitting within a maximal length bitstring label.

558. [func] New functions, isc_resource_getlimit and

isc_resource_setlimit.

557. [func] Symbolic constants for libisc integral types.

556. [func] The DNSSEC OK bit in the EDNS extended flags

is now implemented. Responses to queries without

this bit set will not contain any DNSSEC records.

555. [bug] A slave server attempting a zone transfer could

crash with an assertion failure on certain

malformed responses from the master. [RT #457]

554. [bug] In some cases, not all of the dnssec tools were

properly installed.

553. [bug] Incoming zone transfers deferred due to quota

were not started when quota was increased but

only when a transfer in progress finished. [RT #456]

552. [bug] We were not correctly detecting the end of all c-style

comments. [RT #455]

551. [func] Implemented the 'sortlist' option.

550. [func] Support unknown rdata types and classes.

549. [bug] "make" did not immediately abort the build when a

subdirectory make failed [RT #450].

548. [func] The lexer now ungets tokens more correctly.

546. [func] Option 'lame-ttl' is now implemented.

545. [func] Name limit and counting options removed from dig;

they didn't work properly, and cannot be correctly

implemented without significant changes.

544. [func] Add statistics option, enable statistics-file option,

add RNDC option "dump-statistics" to write out a

query statistics file.

543. [doc] The 'port' option is now documented.

542. [func] Add support for update forwarding as required for

full compliance with RFC2136. It is turned off

by default and can be enabled using the

'allow-update-forwarding' option.

541. [func] Add bogus server support.

540. [func] Add dialup support.

539. [func] Support the blackhole option.

538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().

536. [func] Use transfer-source{-v6} when sending refresh queries.

Transfer-source{-v6} now take a optional port

parameter for setting the UDP source port. The port

parameter is ignored for TCP.

535. [func] Use transfer-source{-v6} when forwarding update

requests.

534. [func] Ancestors have been removed from RBT chains. Ancestor

information can be discerned via node parent pointers.

533. [func] Incorporated name hashing into the RBT database to

improve search speed.

532. [func] Implement DNS UPDATE pseudo records using

DNS_RDATA_UPDATE flag.

531. [func] Rdata really should be initalized before being assigned

to (dns_rdata_fromwire(), dns_rdata_fromtext(),

dns_rdata_clone(), dns_rdata_fromregion()),

check that it is.

530. [func] New function dns_rdata_invalidate().

529. [bug] 521 contained a bug which caused zones to always

reload. [RT #410]

528. [func] The ISC_LIST_XXXX macros now perform sanity checks

on their arguements. ISC_LIST_XXXXUNSAFE can be use

to skip the checks however use with caution.

527. [func] New function dns_rdata_clone().

526. [bug] nsupdate incorrectly refused to add RRs with a TTL

of 0.

525. [func] New arguments 'options' for dns_db_subtractrdataset(),

and 'flags' for dns_rdataslab_subtract() allowing you

to request that the RR's must exist prior to deletion.

DNS_R_NOTEXACT is returned if the condition is not met.

524. [func] The 'forward' and 'forwarders' statement in

non-forward zones should work now.

523. [doc] The source to the Administrator Reference Manual is

now an XML file using the DocBook DTD, and is included

in the distribution. The plain text version of the

ARM is temporarily unavailable while we figure out

how to generate readable plain text from the XML.

522. [func] The lightweight resolver daemon can now use

a real configuration file, and its functionality

can be provided by a name server. Also, the -p and -P

options to lwresd have been reversed.

521. [bug] Detect master files which contain $INCLUDE and always

reload. [RT #196]

520. [bug] Upgraded libtool to 1.3.5, which makes shared

library builds almost work on AIX (and possibly

others).

519. [bug] dns_name_split() would improperly split some bitstring

labels, zeroing a few of the least signficant bits in

the prefix part. When such an improperly created

prefix was returned to the RBT database, the bogus

label was dutifully stored, corrupting the tree.

[RT #369]

518. [bug] The resolver did not realize that a DNAME which was

"the answer" to the client's query was "the answer",

and such queries would fail. [RT #399]

517. [bug] The resolver's DNAME code would trigger an assertion

if there was more than one DNAME in the chain.

[RT #399]

516. [bug] Cache lookups which had a NULL node pointer, e.g.

those by dns_view_find(), and which would match a

DNAME, would trigger an INSIST(!search.need_cleanup)

assertion. [RT #399]

515. [bug] The ssu table was not being attached / detached

by dns_zone_[sg]etssutable. [RT#397]

514. [func] Retry refresh and notify queries if they timeout.

[RT #388]

513. [func] New functionality added to rdnc and server to allow

individual zones to be refreshed or reloaded.

512. [bug] The zone transfer code could throw an execption with

an invalid IXFR stream.

511. [bug] The message code could throw an assertion on an

out of memory failure. [RT #392]

510. [bug] Remove spurious view notify warning. [RT #376]

509. [func] Add support for write of zone files on shutdown.

508. [func] dns_message_parse() can now do a best-effort

attempt, which should allow dig to print more invalid

messages.

507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()

and dns_view_flushanddetach().

506. [func] Do not fail to start on errors in zone files.

505. [bug] nsupdate was printing "unknown result code". [RT #373]

504. [bug] The zone was not being marked as dirty when updated via

IXFR.

503. [bug] dumptime was not being set along with

DNS_ZONEFLG_NEEDDUMP.

502. [func] On a SERVFAIL reply, DiG will now try the next server

in the list, unless the +fail option is specified.

501. [bug] Incorrect port numbers were being displayed by

nslookup. [RT #352]

500. [func] Nearly useless +details option removed from DiG.

499. [func] In DiG, specifying a class with -c or type with -t

changes command-line parsing so that classes and

types are only recognized if following -c or -t.

This allows hosts with the same name as a class or

type to be looked up.

498. [doc] There is now a man page for "dig"

in doc/man/bin/dig.1.

497. [bug] The error messages printed when an IP match list

contained a network address with a nonzero host

part where not sufficiently detailed. [RT #365]

496. [bug] named didn't sanity check numeric parameters. [RT #361]

495. [bug] nsupdate was unable to handle large records. [RT #368]

494. [func] Do not cache NXDOMAIN responses for SOA queries.

493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses

for SOA queries. This makes it easier to locate

the containing zone without polluting intermediate

caches.

492. [bug] attempting to reload a zone caused the server fail

to shutdown cleanly. [RT #360]

491. [bug] nsupdate would segfault when sending certain

prerequisites with empty RDATA. [RT #356]

490. [func] When a slave/stub zone has not yet successfully

obtained an SOA containing the zone's configured

retry time, perform the SOA query retries using

exponential backoff. [RT #337]

489. [func] The zone manager now has a "i/o" queue.

488. [bug] Locks weren't properly destroyed in some cases.

487. [port] flockfile() is not defined on all systems.

486. [bug] nslookup: "set all" and "server" commands showed

the incorrect port number if a port other than 53

was specified. [RT #352]

485. [func] When dig had more than one server to query, it would

send all of the messages at the same time. Add

rate limiting of the transmitted messages.

484. [bug] When the server was reloaded after removing addresses

from the named.conf "listen-on" statement, sockets

were still listening on the removed addresses due

to reference count loops. [RT #325]

483. [bug] nslookup: "set all" showed a "search" option but it

was not settable.

482. [bug] nslookup: a plain "server" or "lserver" should be

treated as a lookup.

481. [bug] nslookup:get_next_command() stack size could exceed

per thread limit.

480. [bug] strtok() is not thread safe. [RT #349]

479. [func] The test suite can now be run by typing "make check"

or "make test" at the top level.

478. [bug] "make install" failed if the directory specified with

--prefix did not already exist.

477. [bug] The the isc-config.sh script could be installed before

its directory was created. [RT #324]

476. [bug] A zone could expire while a zone transfer was in

progress triggering a INSIST failure. [RT #329]

475. [bug] query_getzonedb() sometimes returned a non-null version

on failure. This caused assertion failures when

generating query responses where names subject to

additional section processing pointed to a zone

to which access had been denied by means of the

allow-query option. [RT #336]

474. [bug] The mnemonic of the CHAOS class is CH according to

RFC1035, but it was printed and read only as CHAOS.

We now accept both forms as input, and print it

as CH. [RT #305]

473. [bug] nsupdate overran the end of the list of name servers

when no servers could be reached, typically causing

it to print the error message "dns_request_create:

not implemented".

472. [bug] Off-by-one error caused isc_time_add() to sometimes

produce invalid time values.

471. [bug] nsupdate didn't compile on HP/UX 10.20

470. [func] $GENERATE is now supported. See also

doc/misc/migration.

469. [bug] "query-source address * port 53;" now works.

468. [bug] dns_master_load*() failed to report file and line

number in certain error conditions.

467. [bug] dns_master_load*() failed to log an error if

pushfile() failed.

466. [bug] dns_master_load*() could return success when it failed.

465. [cleanup] Allow 0 to be set as an omapi_value_t value by

omapi_value_storeint().

464. [cleanup] Build with openssl's RSA code instead of dnssafe.

463. [bug] nsupdate sent malformed SOA queries to the second

and subsequent name servers in resolv.conf if the

query sent to the first one failed.

462. [bug] --disable-ipv6 should work now.

461. [bug] Specifying an unknown key in the "keys" clause of the

"controls" statement caused a NULL pointer dereference.

[RT #316]

460. [bug] Much of the DNSSEC code only worked with class IN.

459. [bug] Nslookup processed the "set" command incorrectly.

458. [bug] Nslookup didn't properly check class and type values.

[RT #305]

457. [bug] Dig/host/hslookup didn't properly handle connect

timeouts in certain situations, causing an

unnecessary warning message to be printed.

456. [bug] Stub zones were not resetting the refresh and expire

counters, loadtime or clearing the DNS_ZONE_REFRESH

(refresh in progress) flag upon successful update.

This disabled further refreshing of the stub zone,

causing it to eventually expire. [RT #300]

455. [doc] Document IPv4 prefix notation does not require a

dotted decimal quad but may be just dotted decimal.

454. [bug] Enforce dotted decimal and dotted decimal quad where

documented as such in named.conf. [RT #304, RT #311]

453. [bug] Warn if the obsolete option "maintain-ixfr-base"

is specified in named.conf. [RT #306]

452. [bug] Warn if the unimplemented option "statistics-file"

is specified in named.conf. [RT #301]

451. [func] Update forwarding implememted.

450. [func] New function ns_client_sendraw().

449. [bug] isc_bitstring_copy() only works correctly if the

two bitstrings have the same lsb0 value, but this

requirement was not documented, nor was there a

REQUIRE for it.

448. [bug] Host output formatting change, to match v8. [RT #255]

447. [bug] Dig didn't properly retry in TCP mode after

a truncated reply. [RT #277]

446. [bug] Confusing notify log message. [RT #298]

445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0

bitstring triggered a REQUIRE statement. The REQUIRE

statement was incorrect. [RT #297]

444. [func] "recursion denied" messages are always logged at

debug level 1, now, rather than sometimes at ERROR.

This silences these warnings in the usual case, where

some clients set the RD bit in all queries.

443. [bug] When loading a master file failed because of an

unrecognized RR type name, the error message

did not include the file name and line number.

[RT #285]

442. [bug] TSIG signed messages that did not match any view

crashed the server. [RT #290]

441. [bug] Nodes obscured by a DNAME were inaccessible even

when DNS_DBFIND_GLUEOK was set.

440. [func] New function dns_zone_forwardupdate().

439. [func] New function dns_request_createraw().

438. [func] New function dns_message_getrawmessage().

437. [func] Log NOTIFY activity to the notify channel.

436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,

which sometimes happens on Linux, named would enter

a busy loop. Also, unexpected socket errors were

not logged at a high enough logging level to be

useful in diagnosing this situation. [RT #275]

435. [bug] dns_zone_dump() overwrote existing zone files

rather than writing to a temporary file and

renaming. This could lead to empty or partial

zone files being left around in certain error

conditions involving the initial transfer of a

slave zone, interfering with subsequent server

startup. [RT #282]

434. [func] New function isc_file_isabsolute().

433. [func] isc_base64_decodestring() now accepts newlines

within the base64 data. This makes it possible

to break up the key data in a "trusted-keys"

statement into multiple lines. [RT #284]

432. [func] Added refresh/retry jitter. The actual refresh/

retry time is now a random value between 75% and

100% of the configured value.

431. [func] Log at ISC_LOG_INFO when a zone is successfully

loaded.

430. [bug] Rewrote the lightweight resolver client management

code to handle shutdown correctly and general

cleanup.

429. [bug] The space reserved for a TSIG record in a response

was 2 bytes too short, leading to message

generation failures.

428. [bug] rbtdb.c:find_closest_nxt() erroneously returned

DNS_R_BADDB for nodes which had neither NXT nor SIG NXT

(e.g. glue). This could cause SERVFAILs when

generating negative responses in a secure zone.

427. [bug] Avoid going into an infinite loop when the validator

gets a negative response to a key query where the

records are signed by the missing key.

426. [bug] Attempting to generate an oversized RSA key could

cause dnssec-keygen to dump core.

425. [bug] Warn about the auth-nxdomain default value change

if there is no auth-nxdomain statement in the

config file. [RT #287]

424. [bug] notify_createmessage() could trigger an assertion

failure when creating the notify message failed,

e.g. due to corrupt zones with multiple SOA records.

[RT #279]

423. [bug] When responding to a recusive query, errors that occur

after following a CNAME should cause the query to fail.

[RT #274]

422. [func] get rid of isc_random_t, and make isc_random_get()

and isc_random_jitter() use rand() internally

instead of local state. Note that isc_random_*()

functions are only for weak, non-critical "randomness"

such as timing jitter and such.

421. [bug] nslookup would exit when given a blank line as input.

420. [bug] nslookup failed to implement the "exit" command.

419. [bug] The certificate type PKIX was misspelled as SKIX.

418. [bug] At debug levels >= 10, getting an unexpected

socket receive error would crash the server

while trying to log the error message.

417. [func] Add isc_app_block() and isc_app_unblock(), which

allow an application to handle signals while

blocking.

416. [bug] Slave zones with no master file tried to use a

NULL pointer for a journal file name when they

received an IXFR. [RT #273]

415. [bug] The logging code leaked file descriptors.

414. [bug] Server did not shut down until all incoming zone

transfers were finished.

413. [bug] Notify could attempt to use the zone database after

it had been unloaded. [RT#267]

412. [bug] named -v didn't print the version.

411. [bug] A typo in the HS A code caused an assertion failure.

410. [bug] lwres_gethostbyname() and company set lwres_h_errno

to a random value on success.

409. [bug] If named was shut down early in the startup

process, ns_omapi_shutdown() would attempt to lock

an unintialized mutex. [RT #262]

408. [bug] stub zones could leak memory and reference counts if

all the masters were unreachable.

407. [bug] isc_rwlock_lock() would needlessly block

readers when it reached the read quota even

if no writers were waiting.

406. [bug] Log messages were occasionally lost or corrupted

due to a race condition in isc_log_doit().

405. [func] Add support for selective forwarding (forward zones)

404. [bug] The request library didn't completely work with IPv6.

403. [bug] "host" did not use the search list.

402. [bug] Treat undefined acls as errors, rather than

warning and then later throwing an assertion.

[RT #252]

401. [func] Added simple database API.

400. [bug] SIG(0) signing and verifying was done incorrectly.

[RT #249]

399. [bug] When reloading the server with a config file

containing a syntax error, it could catch an

assertion failure trying to perform zone

maintenance on, or sending notifies from,

tentatively created zones whose views were

never fully configured and lacked an address

database and request manager.

398. [bug] "dig" sometimes caught an assertion failure when

using TSIG, depending on the key length.

397. [func] Added utility functions dns_view_gettsig() and

dns_view_getpeertsig().

396. [doc] There is now a man page for "nsupdate"

in doc/man/bin/nsupdate.8.

395. [bug] nslookup printed incorrect RR type mnemonics

for RRs of type >= 21 [RT #237].

394. [bug] Current name was not propagated via $INCLUDE.

393. [func] Initial answer while loading (awl) support.

Entry points: dns_master_loadfileinc(),

dns_master_loadstreaminc(), dns_master_loadbufferinc().

Note: calls to dns_master_load*inc() should be rate

be rate limited so as to not use up all file

descriptors.

392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does

not support the given address family requested.

391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.

390. [func] The function dns_zone_setdbtype() now takes

an argc/argv style vector of words and sets

both the zone database type and its arguments,

making the functions dns_zone_adddbarg()

and dns_zone_cleardbargs() unnecessary.

389. [bug] Attempting to send a reqeust over IPv6 using

dns_request_create() on a system without IPv6

support caused an assertion failure [RT #235].

388. [func] dig and host can now do reverse ipv6 lookups.

387. [func] Add dns_byaddr_createptrname(), which converts

an address into the name used by a PTR query.

386. [bug] Missing strdup() of ACL name caused random

ACL matching failures [RT #228].

385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),

and dns_zt_print().

384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead

of 2147483647.

383. [func] When writing a master file, print the SOA and NS

records (and their SIGs) before other records.

382. [bug] named -u failed on many Linux systems where the

libc provided kernel headers do not match

the current kernel.

381. [bug] Check for IPV6_RECVPKTINFO and use it instead of

IPV6_PKTINFO if found. [RT #229]

380. [bug] nsupdate didn't work with IPv6.

379. [func] New library function isc_sockaddr_anyofpf().

378. [func] named and lwresd will log the command line arguments

they were started with in the "starting ..." message.

377. [bug] When additional data lookups were refused due to

"allow-query", the databases were still being

attached causing reference leaks.

376. [bug] The server should always use good entropy when

performing cryptographic functions needing entropy.

375. [bug] Per-zone "allow-query" did not properly override the

view/global one for CNAME targets and additional

data [RT #220].

374. [bug] SOA in authoritative negative responses had wrong TTL.

373. [func] nslookup is now installed by "make install".

372. [bug] Deal with Microsoft DNS servers appending two bytes of

garbage to zone transfer requests.

371. [bug] At high debug levels, doing an outgoing zone transfer

of a very large RRset could cause an assertion failure

during logging.

370. [bug] The error messages for rollforward failures were

overly terse.

369. [func] Support new named.conf options, view and zone

statements:

max-retry-time, min-retry-time,

max-refresh-time, min-refresh-time.

368. [func] Restructure the internal ".bind" view so that more

zones can be added to it.

367. [bug] Allow proper selection of server on nslookup command

line.

366. [func] Allow use of '-' batch file in dig for stdin.

365. [bug] nsupdate -k leaked memory.

364. [func] Added additional-from-{cache,auth}

362. [bug] rndc no longer aborts if the configuration file is

missing an options statement. [RT #209]

361. [func] When the RBT find or chain functions set the name and

origin for a node that stores the root label

the name is now set to an empty name, instead of ".",

to simplify later use of the name and origin by

dns_name_concatenate(), dns_name_totext() or

dns_name_format().

360. [func] dns_name_totext() and dns_name_format() now allow

an empty name to be passed, which is formatted as "@".

359. [bug] dnssec-signzone occasionally signed glue records.

358. [cleanup] Rename the intermediate files used by the dnssec

programs.

357. [bug] The zone file parser crashed if the argument

to $INCLUDE was a quoted string.

356. [cleanup] isc_task_send no longer requires event->sender to

be non-null.

355. [func] Added isc_dir_createunique(), similar to mkdtemp().

354. [doc] Man pages for the dnssec tools are now included in

the distribution, in doc/man/dnssec.

353. [bug] double increment in lwres/gethost.c:copytobuf().

[RT# 187]

352. [bug] Race condition in dns_client_t startup could cause

an assertion failure.

351. [bug] Constructing a response with rcode SERVFAIL to a TSIG

signed query could crash the server.

350. [bug] Also-notify lists specified in the global options

block were not correctly reference counted, causing

a memory leak.

349. [bug] Processing a query with the CD bit set now works

as expected.

348. [func] New boolean named.conf options 'additional-from-auth'

and 'additional-from-cache' now supported in view and

global options statement.

347. [bug] Don't crash if an argument is left off options in dig.

346. [func] Add support for .digrc config file, in the

user's current directory

345. [bug] Large-scale changes/cleanups to dig:

* Significantly improve structure handling

* Don't pre-load entire batch files

* Add name/rr counting/limiting

* Fix SIGINT handling

* Shorten timeouts to match v8's behavior

344. [bug] When shutting down, lwresd sometimes tried

to shut down its client tasks twice,

triggering an assertion.

343. [bug] Although zone maintenance SOA queries and

notify requests were signed with TSIG keys

when configured for the server in case,

the TSIG was not verified on the response.

342. [bug] The wrong name was being passed to

dns_name_dup() when generating a TSIG

key using TKEY.

341. [func] Support 'key' clause in named.conf zone masters

statement to allow authentication via TSIG keys:

masters {

10.0.0.1 port 5353 key "foo";

10.0.0.2 ;

};

340. [bug] The top-level COPYRIGHT file was missing from

the distribution.

339. [bug] DNSSEC validation of the response to an ANY

query at a name with a CNAME RR in a secure

zone triggered an assertion failure.

338. [bug] lwresd logged to syslog as named, not lwresd.

337. [bug] "dig" did not recognize "nsap-ptr" as an RR type

on the command line.

336. [bug] "dig -f" used 64 k of memory for each line in

the file. It now uses much less, though still

proportionally to the file size.

335. [bug] named would occasionally attempt recursion when

it was disallowed or undesired.

334. [func] Added hmac-md5 to libisc.

333. [bug] The resolver incorrectly accepted referrals to

domains that were not parents of the query name,

causing assertion failures.

332. [func] New function dns_name_reset().

331. [bug] Only log "recursion denied" if RD is set. [RT #178]

330. [bug] Many debugging messages were partially formatted

even when debugging was turned off, causing a

significant decrease in query performance.

329. [func] omapi_auth_register() now takes a size_t argument for

the length of a key's secret data. Previously

OMAPI only stored secrets up to the first NUL byte.

328. [func] Added isc_base64_decodestring().

327. [bug] rndc.conf parser wasn't correctly recognising an IP

address where a host specification was required.

326. [func] 'keys' in an 'inet' control statement is now

required and must have at least one item in it.

A "not supported" warning is now issued if a 'unix'

control channel is defined.

325. [bug] isc_lex_gettoken was processing octal strings when

ISC_LEXOPT_CNUMBER was not set.

324. [func] In the resolver, turn EDNS0 off if there is no

response after a number of retransmissions.

This is to allow queries some chance of succeeding

even if all the authoritative servers of a zone

silently discard EDNS0 requests instead of

sending an error response like they ought to.

323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.

Because of this, servers authoritative for a parent

and grandchild zone but not authoritative for the

intervening child zone did not correctly issue

referrals to the servers of the child zone.

322. [bug] Queries for KEY RRs are now sent to the parent

server before the authoritative one, making

DNSSEC insecurity proofs work in many cases

where they previously didn't.

321. [bug] When synthesizing a CNAME RR for a DNAME

response, query_addcname() failed to intitialize

the type and class of the CNAME dns_rdata_t,

causing random failures.

320. [func] Multiple rndc changes: parses an rndc.conf file,

uses authentication to talk to named, command

line syntax changed. This will all be described

in the ARM.

319. [func] The named.conf "controls" statement is now used

to configure the OMAPI command channel.

318. [func] dns_c_ndcctx_destroy() could never return anything

except ISC_R_SUCCESS; made it have void return instead.

317. [func] Use callbacks from libomapi to determine if a

new connection is valid, and if a key requested

to be used with that connection is valid.

316. [bug] Generate a warning if we detect an unexpected <eof>

but treat as <eol><eof>.

315. [bug] Handle non-empty blanks lines. [RT #163]

314. [func] The named.conf controls statement can now have

more than one key specified for the inet clause.

313. [bug] When parsing resolv.conf, don't terminate on an

error. Instead, parse as much as possible, but

still return an error if one was found.

312. [bug] Increase the number of allowed elements in the

resolv.conf search path from 6 to 8. If there

are more than this, ignore the remainder rather

than returning a failure in lwres_conf_parse.

311. [bug] lwres_conf_parse failed when the first line of

resolv.conf was empty or a comment.

310. [func] Changes to named.conf "controls" statement (inet

subtype only)

- support "keys" clause

controls {

inet * port 1024

allow { any; } keys { "foo"; }

}

- allow "port xxx" to be left out of statement,

in which case it defaults to omapi's default port

of 953.

309. [bug] When sending a referral, the server did not look

for name server addresses as glue in the zone

holding the NS RRset in the case where this zone

was not the same as the one where it looked for

name server addresses as authoritative data.

308. [bug] Treat a SOA record not at top of zone as an error

when loading a zone. [RT #154]

307. [bug] When canceling a query, the resolver didn't check for

isc_socket_sendto() calls that did not yet have their

completion events posted, so it could (rarely) end up

destroying the query context and then want to use

it again when the send event posted, triggering an

assertion as it tried to cancel an already-canceled

query. [RT #77]

306. [bug] Reading HMAC-MD5 private key files didn't work.

305. [bug] When reloading the server with a config file

containing a syntax error, it could catch an

assertion failure trying to perform zone

maintenance on tentatively created zones whose

views were never fully configured and lacked

an address database.

304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers

are listed in resolv.conf, silently ignore them

instead of returning failure.

303. [bug] Add additional sanity checks to differentiate a AXFR

response vs a IXFR response. [RT #157]

302. [bug] In dig, host, and nslookup, MXNAME should be large

enough to hold any legal domain name in presentation

format + terminating NULL.

301. [bug] Uninitalised pointer in host:printmessage(). [RT #159]

300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work

on platforms lacking IPv6 because each included their

own ipv6 header file for the missing definitions. Now

each library's ipv6.h defines the wrapper symbol of

the other (ISC_IPV6_H and LWRES_IPV6_H).

299. [cleanup] Get the user and group information before changing the

root directory, so the administrator does not need to

keep a copy of the user and group databases in the

chroot'ed environment. Suggested by Hakan Olsson.

298. [bug] A mutex deadlock occurred during shutdown of the

interface manager under certain conditions.

Digital Unix systems were the most affected.

297. [bug] Specifying a key name that wasn't fully qualified

in certain parts of the config file could cause

an assertion failure.

296. [bug] "make install" from a separate build directory

failed unless configure had been run in the source

directory, too.

295. [bug] When invoked with type==CNAME and a message

not constructed by dns_message_parse(),

dns_message_findname() failed to find anything

due to checking for attribute bits that are set

only in dns_message_parse(). This caused an

infinite loop when constructing the response to

an ANY query at a CNAME in a secure zone.

294. [bug] If we run out of space in while processing glue

when reading a master file and commit "current name"

reverts to "name_current" instead of staying as

"name_glue".

293. [port] Add support for FreeBSD 4.0 system tests.

292. [bug] Due to problems with the way some operating systems

handle simultaneous listening on IPv4 and IPv6

addresses, the server no longer listens on IPv6

addresses by default. To revert to the previous

behavior, specify "listen-on-v6 { any; };" in

the config file.

291. [func] Caching servers no longer send outgoing queries

over TCP just because the incoming recursive query

was a TCP one.

290. [cleanup] +twiddle option to dig (for testing only) removed.

289. [cleanup] dig is now installed in $bindir instead of $sbindir.

host is now installed in $bindir. (Be sure to remove

any $sbindir/dig from a previous release.)

288. [func] rndc is now installed by "make install" into $sbindir.

287. [bug] rndc now works again as "rndc 127.1 reload" (for

only that task). Parsing its configuration file and

using digital signatures for authentication has been

disabled until named supports the "controls" statement,

post-9.0.0.

286. [bug] On Solaris 2, when named inherited a signal state

where SIGHUP had the SIG_IGN action, SIGHUP would

be ignored rather than causing the server to reload

its configuration.

285. [bug] A change made to the dst API for beta4 inadvertently

broke OMAPI's creation of a dst key from an incoming

message, causing an assertion to be triggered. Fixed.

284. [func] The DNSSEC key generation and signing tools now

generate randomness from keyboard input on systems

that lack /dev/random.

283. [cleanup] The 'lwresd' program is now a link to 'named'.

282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is

too big for an unsigned long.

281. [bug] Fixed list of recognized config file category names.

280. [func] Add isc-config.sh, which can be used to more

easily build applications that link with

our libraries.

279. [bug] Private omapi function symbols shared between

two or more files in libomapi.a were not namespace

protected using the ISC convention of starting with

the library name and two underscores ("omapi__"...)

278. [bug] bin/named/logconf.c:category_fromconf() didn't take

note of when isc_log_categorybyname() wasn't able

to find the category name and would then apply the

channel list of the unknown category to all categories.

277. [bug] isc_log_categorybyname() and isc_log_modulebyname()

would fail to find the first member of any category

or module array apart from the internal defaults.

Thus, for example, the "notify" category was improperly

configured by named.

276. [bug] dig now supports maximum sized TCP messages.

275. [bug] The definition of lwres_gai_strerror() was missing

the lwres_ prefix.

274. [bug] TSIG AXFR verify failed when talking to a BIND 8

server.

273. [func] The default for the 'transfer-format' option is

now 'many-answers'. This will break zone transfers

to BIND 4.9.5 and older unless there is an explicit

'one-answer' configuration.

272. [bug] The sending of large TCP responses was canceled

in mid-transmission due to a race condition

caused by the failure to set the client object's

"newstate" variable correctly when transitioning

to the "working" state.

271. [func] Attempt to probe the number of cpus in named

if unspecified rather than defaulting to 1.

270. [func] Allow maximum sized TCP answers.

269. [bug] Failed DNSSEC validations could cause an assertion

failure by causing clone_results() to be called with

with hevent->node == NULL.

268. [doc] A plain text version of the Administrator

Reference Manual is now included in the distribution,

as doc/arm/Bv9ARM.txt.

267. [func] Nsupdate is now provided in the distribution.

266. [bug] zone.c:save_nsrrset() node was not initalized.

265. [bug] dns_request_create() now works for TCP.

264. [func] Dispatch can not take TCP sockets in connecting

state. Set DNS_DISPATCHATTR_CONNECTED when calling

dns_dispatch_createtcp() for connected TCP sockets

or call dns_dispatch_starttcp() when the socket is

connected.

263. [func] New logging channel type 'stderr'

channel some-name {

stderr;

severity error;

}

262. [bug] 'master' was not initalized in zone.c:stub_callback().

261. [func] Add dns_zone_markdirty().

260. [bug] Running named as a non-root user failed on Linux

kernels new enough to support retaining capabilities

after setuid().

259. [func] New random-device and random-seed-file statements

for global options block of named.conf. Both accept

a single string argument.

258. [bug] Fixed printing of lwres_addr_t.address field.

257. [bug] The server detached the last zone manager reference

too early, while it could still be in use by queries.

This manifested itself as assertion failures during the

shutdown process for busy name servers [RT #133].

256. [func] isc_ratelimiter_t now has attach/detach semantics, and

isc_ratelimiter_shutdown guarantees that the rate

limiter is detached from its task.

255. [func] New function dns_zonemgr_attach().

254. [bug] Suppress "query denied" messages on additional data

lookups.

--- 9.0.0b4 released ---

253. [func] resolv.conf parser now recognises ';' and '#' as

comments (anywhere in line, not just as the beginning).

252. [bug] resolv.conf parser mishandled masks on sortlists.

It also aborted when an unrecognized keyword was seen,

now it silently ignores the entire line.

251. [bug] lwresd caught an assertion failure on startup.

250. [bug] fixed handling of size+unit when value would be too

large for internal representation.

249. [cleanup] max-cache-size config option now takes a size-spec

like 'datasize', except 'default' is not allowed.

248. [bug] global lame-ttl option was not being printed when

config structures were written out.

247. [cleanup] Rename cache-size config option to max-cache-size.

246. [func] Rename global option cachesize to cache-size and

add corresponding option to view statement.

245. [bug] If an uncompressed name will take more than 255

bytes and the buffer is sufficiently long,

dns_name_fromwire should return DNS_R_FORMERR,

not ISC_R_NOSPACE. This bug caused cause the

server to catch an assertion failure when it

received a query for a name longer than 255

bytes.

244. [bug] empty named.conf file and empty options statement are

now parsed properly.

243. [func] new cachesize option for named.conf

242. [cleanup] fixed incorrect warning about auth-nxdomain usage.

241. [cleanup] nscount and soacount have been removed from the

dns_master_*() arguement lists.

240. [func] databases now come in three flavours: zone, cache

and stub.

239. [func] If ISC_MEM_DEBUG is enabled, the variable

isc_mem_debugging controls whether messages

are printed or not.

238. [cleanup] A few more compilation warnings have been quieted:

+ missing sigwait prototype on BSD/OS 4.0/4.0.1.

+ PTHREAD_ONCE_INIT unbraced initializer warnings on

Solaris 2.8.

+ IN6ADDR_ANY_INIT unbraced initializer warnings on

BSD/OS 4.*, Linux and Solaris 2.8.

237. [bug] If connect() returned ENOBUFS when the resolver was

initiating a TCP query, the socket didn't get

destroyed, and the server did not shut down cleanly.

236. [func] Added new listen-on-v6 config file statement.

235. [func] Consider it a config file error if a listen-on

statement has an IPv6 address in it, or a

listen-on-v6 statement has an IPv4 address in it.

234. [bug] Allow a trusted-key's first field (domain-name) be

either a quoted or an unquoted string, instead of

requiring a quoted string.

233. [cleanup] Convert all config structure integer values to unsigned

integer (isc_uint32_t) to match grammer.

232. [bug] Allow slave zones to not have a file.

231. [func] Support new 'port' clause in config file options

section. Causes 'listen-on', 'masters' and

'also-notify' statements to use its value instead of

default (53).

230. [func] Replace the dst sign/verify API with a cleaner one.

229. [func] Support config file sig-validity-interval statement

in options, views and zone statements (master

zones only).

228. [cleanup] Logging messages in config module stripped of

trailing period.

227. [cleanup] The enumerated identifiers dns_rdataclass_*,

dns_rcode_*, dns_opcode_*, and dns_trust_* are

also now cast to their appropriate types, as with

dns_rdatatype_* in item number 225 below.

226. [func] dns_name_totext() now always prints the root name as

'.', even when omit_final_dot is true.

225. [cleanup] The enumerated dns_rdatatype_* identifiers are now

cast to dns_rdatatype_t via macros of their same name

so that they are of the proper integral type wherever

a dns_rdatatype_t is needed.

224. [cleanup] The entire project builds cleanly with gcc's

-Wcast-qual and -Wwrite-strings warnings enabled,

which is now the default when using gcc. (Warnings

from confparser.c, because of yacc's code, are

unfortunately to be expected.)

223. [func] Several functions were reprototyped to qualify one

or more of their arguments with "const". Similarly,

several functions that return pointers now have

those pointers qualified with const.

222. [bug] The global 'also-notify' option was ignored.

221. [bug] An uninitialized variable was sometimes passed to

dns_rdata_freestruct() when loading a zone, causing

an assertion failure.

220. [cleanup] Set the default outgoing port in the view, and

set it in sockaddrs returned from the ADB.

[31-May-2000 explorer]