CHANGES revision 8d00c5ab2c16985457947ddb0376707ab7094b80
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering4312. [bug] dig's unknown dns and edns flags (MBZ value) logging
7c66aeba0f28cb82027d6015405ed71afa3b6059Kay Sievers was not consistent. [RT #41600]
c904f64d84db8c4eebedf210ba10893f19ba05edLennart Poettering4311. [bug] Prevent "rndc delzone" from being used on
c904f64d84db8c4eebedf210ba10893f19ba05edLennart Poettering response-policy zones. [RT #41593]
73090dc815390f4fca4e3ed8a7e1d3806605daaaLennart Poettering4310. [performance] Use __builtin_expect() where available to annotate
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering conditions with known behavior. [RT #41411]
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers4309. [cleanup] Remove the spurious "none" filename from log messages
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers when processing built-in configuration. [RT #41594]
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers4308. [func] Added operating system details to "named -V"
9a36607584bbd1d78775353e022a51794b4e27b1Lennart Poettering output. [RT #41452]
a40593a0d0d740efa387e35411e1e456a6c5aba7Lennart Poettering4307. [bug] "dig +subnet" and "mdig +subnet" could send
20ffc4c4a9226b0e45cc02ad9c0108981626c0bbKay Sievers incorrectly-formatted Client Subnet options
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering if the prefix length was not divisble by 8.
88f642c00b1708c5e0203c1753a9ef91d1de5442Kay Sievers Also fixed a memory leak in "mdig". [RT #45178]
20ffc4c4a9226b0e45cc02ad9c0108981626c0bbKay Sievers4306. [maint] Added a PKCS#11 openssl patch supporting
f25626edf4c39bb9409cb165e6ce9551dd130661Lennart Poettering version 1.0.2f [RT #38312]
25016cb67f22db15b6d2625177a5a2429dcaab66Lennart Poettering4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
c3175a7f40a2d2fabc3a2de63033a6810d45221aLennart Poettering from the zone's apex. [RT #41483]
5ba2dc259f3cdd8fddef68cfd28380a32534e49aKay Sievers4304. [port] xfer system test failed as 'tail -n +value' is not
5ba2dc259f3cdd8fddef68cfd28380a32534e49aKay Sievers portable. [RT #41315]
5ba2dc259f3cdd8fddef68cfd28380a32534e49aKay Sievers4303. [bug] "dig +subnet" was unable to send a prefix length of
20ffc4c4a9226b0e45cc02ad9c0108981626c0bbKay Sievers zero, as it was incorrectly changed to 32 for v4
b45f770f0049fbdf3f6c9db0ab11deeff4ccd86dKay Sievers prefixes or 128 for v6 prefixes. In addition to
b8217b7bd5fd171916a095b150fad4c3a37f5a41Kay Sievers fixing this, "dig +subnet=0" has been added as a
b45f770f0049fbdf3f6c9db0ab11deeff4ccd86dKay Sievers short form for 0.0.0.0/0. The same changes have
b45f770f0049fbdf3f6c9db0ab11deeff4ccd86dKay Sievers also been made in "mdig". [RT #41553]
b8217b7bd5fd171916a095b150fad4c3a37f5a41Kay Sievers4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
b8217b7bd5fd171916a095b150fad4c3a37f5a41Kay Sievers4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534]
b45f770f0049fbdf3f6c9db0ab11deeff4ccd86dKay Sievers4300. [bug] A flag could be set in the wrong field when setting
512dabcdc65eece0bcebb4f971ec34794be8d35dKay Sievers up nonrecursive queries; this could cause the
512dabcdc65eece0bcebb4f971ec34794be8d35dKay Sievers SERVFAIL cache to cache responses it shouldn't.
512dabcdc65eece0bcebb4f971ec34794be8d35dKay Sievers New querytrace logging has been added which
b8217b7bd5fd171916a095b150fad4c3a37f5a41Kay Sievers identified this error. [RT #41155]
08f23fd29c9df9c8b4e874933eb39711f069754bLennart Poettering4299. [bug] Check that exactly totallen bytes are read when
3cc588803dba3530cd39000d299353a31e4c068bLennart Poettering reading a RRset from raw files in both single read
3cc588803dba3530cd39000d299353a31e4c068bLennart Poettering and incremental modes. [RT #41402]
3cc588803dba3530cd39000d299353a31e4c068bLennart Poettering4298. [bug] dns_rpz_add errors in loadzone were not being
18b754d345ecb0b15e369978aaffa72e9814b86aKay Sievers propogated up the call stack. [RT #41425]
b070e7f3c9ed680c821bd89d42506695f2438506Lennart Poettering4297. [test] Ensure delegations in RPZ zones fail robustly.
231931ffba1bca9d8759bbd6f797e56f8c6971faLennart Poettering4296. [bug] TCP packet sizes were calculated incorrectly in the
169c4f65131fbc7bcb51e7d5487a715cdcd0e0ebLennart Poettering stats channel; they could be counted in the wrong
169c4f65131fbc7bcb51e7d5487a715cdcd0e0ebLennart Poettering histogram bucket. [RT #40587]
6ba383fa49e01302dfeae1f5083bb942b055628bLennart Poettering4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
bd08f2422491169e92dc0899d5ba848fcae4c15cLennart Poettering could allow incorrect text formatting of EDNS EXPIRE
bd08f2422491169e92dc0899d5ba848fcae4c15cLennart Poettering options. [RT #41437]
bd08f2422491169e92dc0899d5ba848fcae4c15cLennart Poettering4294. [bug] Fixed a regression in which "rndc stop -p" failed
71100051c5d351daac20610f3a4b8c14901088d8Lennart Poettering to print the PID. [RT #41513]
71100051c5d351daac20610f3a4b8c14901088d8Lennart Poettering4293. [bug] Address memory leak on priming query creation failure.
18da49531e4c6b31bd2439b4d738dc1bb9660af1Lennart Poettering4292. [placeholder]
8af0fcdb909b87ef4dcef34d50df814656acec81Lennart Poettering4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
9586cdfab6a2638078702b7fea7e16b3a71899e2Lennart Poettering4290. [func] The timers returned by the statistics channel
9586cdfab6a2638078702b7fea7e16b3a71899e2Lennart Poettering (indicating current time, server boot time, and
9586cdfab6a2638078702b7fea7e16b3a71899e2Lennart Poettering most recent reconfiguration time) are now reported
9586cdfab6a2638078702b7fea7e16b3a71899e2Lennart Poettering with millisecond accuracy. [RT #40082]
6b80b9b8ee6d372e00ece51e6a11c6d31899aaecLennart Poettering4289. [bug] The server could crash due to memory being used
7f110ff9b8828b477e87de7b28c708cf69a3d008Lennart Poettering after it was freed if a zone transfer timed out.
7f110ff9b8828b477e87de7b28c708cf69a3d008Lennart Poettering4288. [bug] Fixed a regression in resolver.c:possibly_mark()
7d900eb6f58ca76a0f742c6e1823aa7317d4471fLennart Poettering which caused known-bogus servers to be queried
7d900eb6f58ca76a0f742c6e1823aa7317d4471fLennart Poettering anyway. [RT #41321]
101f077676e9fbe1a66c8b2dc4864a8d7a94c372Lennart Poettering4287. [bug] Silence an overly noisy log message when message
f7f964eb3625e4cca7f16377fa12aa7a760243e7Lennart Poettering parsing fails. [RT #41374]
d0e5a33374cee92962af33dfc03873e470b014f6Lennart Poettering4286. [security] render_ecs errors were mishandled when printing out
d0e5a33374cee92962af33dfc03873e470b014f6Lennart Poettering a OPT record resulting in a assertion failure.
d0e5a33374cee92962af33dfc03873e470b014f6Lennart Poettering (CVE-2015-8705) [RT #41397]
d0e5a33374cee92962af33dfc03873e470b014f6Lennart Poettering4285. [security] Specific APL data could trigger a INSIST.
d0e5a33374cee92962af33dfc03873e470b014f6Lennart Poettering (CVE-2015-8704) [RT #41396]
6edd7ca1624f89c9a36067b721a0280e748acb17Kay Sievers4284. [bug] Some GeoIP options were incorrectly documented
6edd7ca1624f89c9a36067b721a0280e748acb17Kay Sievers using abbreviated forms which were not accepted by
15e9fbd851c15ecaad4888932584f37dcd26111aLennart Poettering named. The code has been updated to allow both
15e9fbd851c15ecaad4888932584f37dcd26111aLennart Poettering long and abbreviated forms. [RT #41381]
53ed2eeb2e709a6c0d152d7bdf2d9a4b9f997a16Lennart Poettering4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
353e12c2f4a9e96a47eb80b80d2ffb7bc1d44a1bLennart Poettering4282. [func] 'dig +[no]mapped' determine whether the use of mapped
680a1dbc354b2f437b4e06e27d4c43217977efdfLennart Poettering IPv4 addresses over IPv6 is permitted or not. The
680a1dbc354b2f437b4e06e27d4c43217977efdfLennart Poettering default is +mapped. [RT #41307]
7e64c73a93cdcc7068280f3e3ba8adbd6c6f8f84Lennart Poettering4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
7e64c73a93cdcc7068280f3e3ba8adbd6c6f8f84Lennart Poettering4280. [performance] Use optimal message sizes to improve compression
36e43bddd0a4526e77cdae2c922bb29f67bd74adLennart Poettering in AXFRs. This reduces network traffic. [RT #40996]
b61c90514e134dc781617d172961f25e7352f53bLennart Poettering4279. [test] Don't use fixed ports when unit testing. [RT #41194]
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering4277. [performance] Improve performance of the RBT, the central zone
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering datastructure: The aux hashtable was improved,
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering hash function was updated to perform more
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering uniform mapping, uppernode was added to
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering dns_rbtnode, and other cleanups and performance
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering improvements were made. [RT #41165]
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering4276. [protocol] Add support for SMIMEA. [RT #40513]
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering4275. [performance] Lazily initialize dns_compress->table only when
a558d00381291afd6a81f7df07269fe76eeae556Lennart Poettering compression is enabled. [RT #41189]
05aa9edde0f9f4077b8120389c93cb0134eda9c5Lennart Poettering4274. [performance] Speed up typemap processing from text. [RT #41196]
31ed59c51126fce7d958c188772a397e2a1ed010Lennart Poettering4273. [bug] Only call dns_test_begin() and dns_test_end() once each
62f21ec91ad8e7e24079962f4df066b0094fe68dLennart Poettering in nsec3_test as it fails with GOST if called multiple
62f21ec91ad8e7e24079962f4df066b0094fe68dLennart Poettering4272. [bug] dig: the +norrcomments option didn't work with +multi.
62f21ec91ad8e7e24079962f4df066b0094fe68dLennart Poettering4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
87a8baa35d6d65ac3b58ae8e26e338e67f8ae8edLennart Poettering4270. [security] Update allowed OpenSSL versions as named is
87a8baa35d6d65ac3b58ae8e26e338e67f8ae8edLennart Poettering potentially vulnerable to CVE-2015-3193.
0716c60e37d2083325cd5316caf4310f0acc9a89Lennart Poettering4269. [bug] Zones using "map" format master files currently
87a8baa35d6d65ac3b58ae8e26e338e67f8ae8edLennart Poettering don't work as policy zones. This limitation has
5ba081b0fb02380cee4c2ff5bc7e05f869eb8415Lennart Poettering now been documented; attempting to use such zones
5ba081b0fb02380cee4c2ff5bc7e05f869eb8415Lennart Poettering in "response-policy" statements is now a
b3fa47e0819b08ea32e69e19e6d88ce2daca069dLennart Poettering configuration error. [RT #38321]
aaf53376aaac326b700fd3f8e28bbd842f0a9ed1Lennart Poettering4268. [func] "rndc status" now reports the path to the
aaf53376aaac326b700fd3f8e28bbd842f0a9ed1Lennart Poettering configuration file. [RT #36470]
7f3e62571a63ac90de6ac5eefeeb8d3e9aa6f49eLennart Poettering4267. [test] Check sdlz error handling. [RT #41142]
7f3e62571a63ac90de6ac5eefeeb8d3e9aa6f49eLennart Poettering4266. [placeholder]
4cbd9ecf45f64c3a9acc99d473fbf3be3687ae24Lennart Poettering4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
25d6283acfeb87730c2c0c4c2ef76a66fa397e87Lennart Poettering4264. [bug] Check const of strchr/strrchr assignments match
a6eb9147a820d1c08b315867373a21bd0ece2f05Lennart Poettering argument's const status. [RT #41150]
b011116d1829bde044a638cbabfb070a7e0e8fa7Kay Sievers4263. [contrib] Address compiler warnings in mysqldyn module.
65c0cf7108ae3537a357c74b4586a783baba82f9Lennart Poettering4262. [bug] Fixed a bug in epoll socket code that caused
65c0cf7108ae3537a357c74b4586a783baba82f9Lennart Poettering sockets to not be registered for ready
7ef5875d142f01ab4fe8d35412d48c10723ae2d4Lennart Poettering notification in some cases, causing named to not
7ef5875d142f01ab4fe8d35412d48c10723ae2d4Lennart Poettering read from or write to them, resulting in what
f957632b960a0a42999b38ded7089fa602b41745Kay Sievers appear to the user as blocked connections.
a2f5666d06fe8233025738047115bb9e3959df3eLennart Poettering4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
ad740100d108282d0244d5739d4dcc86fe4c5fdeLennart Poettering4260. [security] Insufficient testing when parsing a message allowed
c821bd28c2ecce8d35248d61949fe1c0c3030b6cLennart Poettering records with an incorrect class to be be accepted,
c821bd28c2ecce8d35248d61949fe1c0c3030b6cLennart Poettering triggering a REQUIRE failure when those records
de6c78f8795743894431a099d26ec562a8acf3dfLennart Poettering were subsequently cached. (CVE-2015-8000) [RT #40987]
14e639ae7a1dbf156273ce697d30fbc6c6594209Lennart Poettering4259. [func] Add an option for non-destructive control channel
14e639ae7a1dbf156273ce697d30fbc6c6594209Lennart Poettering access using a "read-only" clause. In such
ff01d048b4c1455241c894cf7982662c9d28fd34Lennart Poettering cases, a restricted set of rndc commands are
ff01d048b4c1455241c894cf7982662c9d28fd34Lennart Poettering allowed for querying information from named.
1d6702e8d3877c0bebf3ac817dc45ff72f5ecfa9Lennart Poettering4258. [bug] Limit rndc query message sizes to 32 KiB. This should
1d6702e8d3877c0bebf3ac817dc45ff72f5ecfa9Lennart Poettering not break any legitimate rndc commands, but will
1d6702e8d3877c0bebf3ac817dc45ff72f5ecfa9Lennart Poettering prevent a rogue rndc query from allocating too
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering much memory. [RT #41073]
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
97f73ffb04947acf0a5854e3a7bdbb7a0105f6faLennart Poettering4256. [bug] Allow rndc command arguments to be quoted so as
97f73ffb04947acf0a5854e3a7bdbb7a0105f6faLennart Poettering to allow spaces. [RT #36665]
85f248b26653f5322c26735661d63d4e8460c30eLennart Poettering4255. [performance] Add 'message-compression' option to disable DNS
1258097cd3cdbc5dd3d264850119e553a29c5068Lennart Poettering compression in responses. [RT #40726]
1258097cd3cdbc5dd3d264850119e553a29c5068Lennart Poettering4254. [bug] Address missing lock when getting zone's serial.
d3fc81bd6a5a046b22600ac1204df220c93d2c15Lennart Poettering4253. [security] Address fetch context reference count handling error
d3fc81bd6a5a046b22600ac1204df220c93d2c15Lennart Poettering on socket error. (CVE-2015-8461) [RT#40945]
d3fc81bd6a5a046b22600ac1204df220c93d2c15Lennart Poettering4252. [func] Add support for automating the generation CDS and
7c697168102cb64c5cb65a542959684014da99c7Lennart Poettering CDNSKEY rrsets to named and dnssec-signzone.
8d0e38a2b966799af884e78a54fd6a2dffa44788Lennart Poettering4251. [bug] NTAs were deleted when the server was reconfigured
f28f1daf754a9a07de90e6fc4ada581bf5de677dLennart Poettering or reloaded. [RT #41058]
f28f1daf754a9a07de90e6fc4ada581bf5de677dLennart Poettering4250. [func] Log the TSIG key in use during inbound zone
f28f1daf754a9a07de90e6fc4ada581bf5de677dLennart Poettering transfers. [RT #41075]
88a07670cfa974a605c7c7b520b8a3135fce37f9Lennart Poettering4249. [func] Improve error reporting of TSIG / SIG(0) records in
88a07670cfa974a605c7c7b520b8a3135fce37f9Lennart Poettering the wrong location. [RT #41030]
916abb21d0a6653e0187b91591e492026886b0a4Lennart Poettering4248. [performance] Add an isc_atomic_storeq() function, use it in
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering stats counters to improve performance.
916abb21d0a6653e0187b91591e492026886b0a4Lennart Poettering [RT #39972] [RT #39979]
b23de6af893c11da4286bc416455cd0926d1532eLennart Poettering4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
71092d70af35567dd154d3de2ce04ce62e157a7cLennart Poettering defined to report json library version. [RT #41045]
21bdae12e11ae20460715475d8a0c991f15464acLennart Poettering4246. [test] Ensure the statschannel system test runs when BIND
21bdae12e11ae20460715475d8a0c991f15464acLennart Poettering is not built with libjson. [RT #40944]
9534ce54858c67363b841cdbdc315140437bfdb4Lennart Poettering4245. [placeholder]
c798c40ec957a35cd4b7d04a196a9e58880c6ff3Lennart Poettering4244. [bug] The parser was not reporting that use-ixfr is obsolete.
68c7d001f4117f0c3d0a4582e32cbb03ae5fac57Lennart Poettering4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
253ee27a0c7a410d27d490bb79ea97caed6a2b68Lennart Poettering4242. [bug] Replace the client if not already replaced when
5d0fcd7c8d29340ac9425c309e8ac436a9af699cLennart Poettering prefetching. [RT #41001]
acb14d318b84bda00d1e666d7dab6794d5bbeb3fLennart Poettering4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
73090dc815390f4fca4e3ed8a7e1d3806605daaaLennart Poettering the ARM. [RT #40955]
3d57c6ab801f4437f12948e29589e3d00c3ad9dbLennart Poettering4240. [port] Fix LibreSSL compatibility. [RT #40977]
b9a2a36b519ccd79c4198e7dda4e657d597a14adLennart Poettering4239. [func] Changed default servfail-ttl value to 1 second from 10.
ba1a55152c50dfbcd3d4a64353b95f4a2f37985eLennart Poettering Also, the maximum value is now 30 instead of 300.
3f7a8c4e9f1d3ce48919e24eb2c9d56dd6fd88d8Kay Sievers4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
260abb780a135e4cae8c10715c7e85675efc345aLennart Poettering4237. [doc] Upgraded documentation toolchain to use DocBook 5
260abb780a135e4cae8c10715c7e85675efc345aLennart Poettering and dblatex. [RT #40766]
2791a8f8dc8764a9247cdba3562bd4c04010f144Lennart Poettering4236. [performance] On machines with 2 or more processors (CPU), the
a8f11321c209830a35edd0357e8def5d4437d854Lennart Poettering default value for the number of UDP listeners
a8f11321c209830a35edd0357e8def5d4437d854Lennart Poettering has been changed to the number of detected
21bdae12e11ae20460715475d8a0c991f15464acLennart Poettering processors minus one. [RT #40761]
c32e0c40f7e706e3ebcd101187d5ced96f083491Lennart Poettering4235. [func] Added support in named for "dnstap", a fast method of
c32e0c40f7e706e3ebcd101187d5ced96f083491Lennart Poettering capturing and logging DNS traffic, and a new command
35f10fccb06a0c7b4f26a28746db387aac376cb3Lennart Poettering "dnstap-read" to read a dnstap log file. Use