CHANGES revision 93143fd81acd86e594bac20c6c58b930dfe63a80
d7d05319a67229b250de910b8876bea0f6e9a0b1Tatuya JINMEI 神明達哉3273. [bug] AAAA responses could be returned in the additional
d7d05319a67229b250de910b8876bea0f6e9a0b1Tatuya JINMEI 神明達哉 section even when filter-aaaa-on-v4 was in use.
109580e7e5c92b98c641836ccb5949b4802ffcedMark Andrews3272. [func] New "rndc zonestatus" command prints information
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt about the specified zone. [RT #21671]
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt3271. [port] darwin: mksymtbl is not always stable, loop several
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt times before giving up. mksymtbl was using non
cfb1587eb9a6dc6d1d36ea0344e1b20068b81e88Evan Hunt portable perl to covert 64 bit hex strings. [RT #27653]
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews --- 9.9.0rc2 released ---
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
870332fb6d15e9fde8753399b00cb9e721c4d64fMark Andrews when inline-signing was in use. [RT #27650]
01dbc4fc00adc933af96e88bfce95c07ef1f3c39Mark Andrews3269. [port] darwin 11 and later now built threaded by default.
371642de8b1863b2fc6ec9a89416de4dca71bc47Mark Andrews3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
d8f118f4a06cae6ec6b4ae133882f0eee1478599Mark Andrews out the earliest expiry time. [RT #23311]
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews3267. [bug] Memory allocation failures could be mis-reported as
76110b31fe98564564693a7daf2e99c78ff39a05Mark Andrews unexpected error. New ISC_R_UNSET result code.
f7b683b054c4deb05f09d2f39da6ceb4ac838873Mark Andrews3266. [bug] The maximum number of NSEC3 iterations for a
95f999508b908a95d7ef7b0f891ac8b1a4f21abfTatuya JINMEI 神明達哉 DNSKEY RRset was not being properly computed.
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt3265. [bug] Corrected a problem with lock ordering in the
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt inline-signing code. [RT #27557]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt3264. [bug] Automatic regeneration of signatures in an
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt inline-signing zone could stall when the server
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt was restarted. [RT #27344]
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt3263. [bug] "rndc sync" did not affect the unsigned side of an
b272d38cc5d24f64c0647a9afb340c21c4b9aaf7Evan Hunt inline-signing zone. [RT #27337]
f4ea363e3acc321b24ffe95a64a583e8041d6fd5Mark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt3261. [func] RRset ordering now defaults to random. [RT #27174]
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt3260. [bug] "rrset-order cyclic" could appear not to rotate
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt for some query patterns. [RT #27170/27185]
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt --- 9.9.0rc1 released ---
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt3259. [bug] named-compilezone: Suppress "dump zone to <file>"
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt message when writing to stdout. [RT #27109]
351b62535d4c4f89883bfdba025999dd32490266Evan Hunt3258. [test] Add "forcing full sign with unreadable keys" test.
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews3257. [bug] Do not generate a error message when calling fsync()
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews in a pipe or socket. [RT #27109]
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews3255. [func] No longer require that a empty zones be explicitly
2534a73a5914470f7ffe00663b6bbaff5e411e57Mark Andrews enabled or that a empty zone is disabled for
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews RFC 1918 empty zones to be configured. [RT #27139]
f05a6b110fc93d9b04743ffc957242fa7f53de02Mark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
0bc3af9834214650b29710757da2ad41e416c4b5Mark Andrews too long. [RT #26956]
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews3252. [bug] When master zones using inline-signing were
5422cf284f2ad63aeb561aca57a59e0cffe9af64Mark Andrews updated while the server was offline, the source
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 zone could fall out of sync with the signed
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 copy. They can now resynchronize. [RT #26676]
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
40d0f115a64595aa83cfe0b760587d3d1efa0385Tatuya JINMEI 神明達哉 memory dns_sdlz_putrr() can allocate per record to
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews prevent run away memory consumption on ISC_R_NOSPACE.
fc7ecc628dcdc1cfceee6f2dd52bc7c433eb1b8bMark Andrews3250. [func] 'configure --enable-developer'; turn on various
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews configure options, normally off by default, that
7be633656564e109f57f01e1b18319ba019851f9Mark Andrews we want developers to build and test with. [RT #27103]
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed3249. [bug] Update log message when saving slave zones files for
5d924e398ed15c57c506315c7d11125dcc9cb098Jeremy Reed analysis after load failures. [RT #27087]
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed3248. [bug] Configure options --enable-fixed-rrset and
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed --enable-exportlib were incompatible with each
6c3c79e491635d868d5ec288dfa29226da898a2eJeremy Reed other. [RT #27087]
4c2ed3d14168cfe34d1c036eb4885019a8153e7cMark Andrews3247. [bug] 'raw' format zones failed to preserve load order
4c2ed3d14168cfe34d1c036eb4885019a8153e7cMark Andrews breaking 'fixed' sort order. [RT #27087]
ddac1a2b9822b00aa936ef24c6d971f4a1407532Francis Dupont3246. [bug] Named failed to start with a empty also-notify list.
e7eede965dbc67842cb32591a8c2ace2620e5359Mark Andrews3245. [bug] Don't report a error unchanged serials unless there
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉 were other changes when thawing a zone with
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉 ixfr-fromdifferences. [RT #26845]
5d7849ad7ffc6d08870dbfbc8d6bfffd90007488Tatuya JINMEI 神明達哉3244. [func] Added readline support to nslookup and nsupdate.
d302a620e0d49811874b9555ac2e4c6e05861a6bFrancis Dupont Also simplified nsupdate syntax to make "update"
d302a620e0d49811874b9555ac2e4c6e05861a6bFrancis Dupont and "prereq" optional. [RT #24659]
708ebf710e1c2c8f5bee6d5ba5376ec44d97aa71Jeremy Reed3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
4144efb39046963989ad002cf88a0c195401100aJeremy Reed being properly set.
cc620f9fdb69c13f1ea12bb1c90bc442f6dc0117Francis Dupont3242. [func] Extended the header of raw-format master files to
3836f447eeb437ae058dfecb8c321b48c50b7076Mark Andrews include the serial number of the zone from which
3836f447eeb437ae058dfecb8c321b48c50b7076Mark Andrews they were generated, if different (as in the case
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews of inline-signing zones). This is to be used in
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews inline-signing zones, to track changes between the
47323be2afd461c2b0d44400907f3ac020488080Mark Andrews unsigned and signed versions of the zone, which may
b770eae51e5d53730d3836b1548829f69ab15e66Mark Andrews have different serial numbers.
d2c115f9134acfefaaeb6b84036672bef93e7df8Mark Andrews (Note: raw zonefiles generated by this version of
f030c715007053e4ceb557c78ad5c8cfdedb4240Mark Andrews BIND are no longer compatble with prior versions.
f030c715007053e4ceb557c78ad5c8cfdedb4240Mark Andrews To generate a backward-compatible raw zonefile
f030c715007053e4ceb557c78ad5c8cfdedb4240Mark Andrews using dnssec-signzone or named-compilezone, specify
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉 output format "raw=0" instead of simply "raw".)
089f456eb39d614cb6904107d4a9580ed4f3f296Tatuya JINMEI 神明達哉3241. [bug] Address race conditions in the resolver code.
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed3240. [bug] DNSKEY state change events could be missed. [RT #26874]
f20f19de1995fb65f0b7184b2e596a0e9da9acb3Jeremy Reed3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
b1b0dca1464a11b8a63623e8567e744dccfbcb41Tatuya JINMEI 神明達哉 timestamp. [RT #26883]
b1b0dca1464a11b8a63623e8567e744dccfbcb41Tatuya JINMEI 神明達哉3238. [bug] keyrdata was not being reinitialized in
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉 lib/dns/rbtdb.c:iszonesecure. [RT#26913]
cda7c783c3e65ab022a8b5806cf63ce021abd33eTatuya JINMEI 神明達哉3237. [bug] dig -6 didn't work with +trace. [RT #26906]
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉3236. [bug] Backed out changes #3182 and #3202, related to
af2e2f5ed750530aaf479f5ab24e1fa8a8d0a482Tatuya JINMEI 神明達哉 EDNS(0) fallback behavior. [RT #26416]
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews the generated diff and optionally writes it to a
b9636a8e43f791e093baa0fcbd7797f4ad2979deMark Andrews journal. [RT #26386]
64e161a7f7f7f1692ccdf2400a81b471cf6ac508Mark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
9384dc16a1f2c3022f50f2e1ce18a28204baaef7Mark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉3232. [bug] Zero zone->curmaster before return in
3af7cd2661b84f1a27bfc78e55e2ab09d2133ac8Tatuya JINMEI 神明達哉 dns_zone_setmasterswithkeys(). [RT #26732]
72dbc7216aae3626a66e6154443be219f5edcaf0Mark Andrews3231. [bug] named could fail to send a uncompressable zone.
f2e6839b8afaf5ba545f1f978c770fba304bcd0aMark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
ca23cf7e28b9799436c9950ea269953e29dfde16Evan Hunt axfr with a serial of 0. [RT #26796]
a142972ea9697b4ecaa5587fb6d9057e821d5339Tatuya JINMEI 神明達哉3229. [bug] Fix local variable to struct var assignment
a142972ea9697b4ecaa5587fb6d9057e821d5339Tatuya JINMEI 神明達哉 found by CLANG warning.
56708c6fb441402e0568f8947cdf0ddda40532b1Mark Andrews3228. [tuning] Dynamically grow symbol table to improve zone
d0e7c8712f25fff65f10d70dba519e9cacc4cc8fMark Andrews loading performance. [RT #26523]
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt3227. [bug] Interim fix to make WKS's use of getprotobyname()
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt and getservbyname() self thread safe. [RT #26232]
3f8be559f0871022c78a229bad0eb09560b90909Evan Hunt3226. [bug] Address minor resource leakages. [RT #26624]
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
b98225ff8a5721a998ccb440df4d261488fef163Mark Andrews messages. [RT #26507]
e422b84c737d6bb4cf09657777992a30903e187aMark Andrews3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt3223. [bug] 'task_test privilege_drop' generated false positives.
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt3222. [cleanup] Replace dns_journal_{get,set}_bitws with
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt dns_journal_{get,set}_sourceserial. [RT #26634]
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt3221. [bug] Fixed a potential coredump on shutdown due to
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt referencing fetch context after it's been freed.
3a30493983df83a3184dd1ecd39cf31ccdac3badEvan Hunt --- 9.9.0b2 released ---
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews could fail to set the database version correctly,
620508359f9bb21cd5df7fdf2e6f4677903fb539Mark Andrews causing an assertion failure. [RT #26180]
d36ba0f0caa64111a9a3236944f730dfb3fe5245Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
d36ba0f0caa64111a9a3236944f730dfb3fe5245Mark Andrews3218. [security] Cache lookup could return RRSIG data associated with
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt nonexistent records, leading to an assertion
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt failure. [RT #26590]
ca42dcc0686fefd3db202edab80e5adb09d6add5Evan Hunt3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
b3ea72e4d1c78791b807f03ea5c26e1b762d701fMark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
98b2be76fc57a337534cda07a5ce20a41b8793adMark Andrews3214. [func] Add 'named -U' option to set the number of UDP
05c162292ff0db1cc65f6e5bd9052a65089ec5c3Mark Andrews listener threads per interface. [RT #26485]
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt list prior to adding a reference to it leading a
bfe0517fdcbe1dc62fee18e460ecf467dd491d9bEvan Hunt possible assertion failure. [RT #23219]
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
e4c6491bbf7ad131cf0a9ae839566b22e3632cddMark Andrews option prints in single-line-per-record format.
549e34bbf4f3c5df10a8ff5b648ac6b6dbe98a0fMark Andrews3210. [bug] Canceling the oldest query due to recursive-client
499fa72075c050391b4d051f593d295670d27983Mark Andrews overload could trigger an assertion failure. [RT #26463]
967a70944d6b1902d30919baa1c4f6faf77bbfaeMark Andrews3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
00c8156b24a3a80edf855190eabb8ac14ce9cc9cJeremy Reed3208. [bug] 'dig -y' handle unknown tsig alorithm better.
4bf9fe787e9cb3085391a0560c36726eda9ac2d1Mark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
4bf9fe787e9cb3085391a0560c36726eda9ac2d1Mark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews nameserver behaviour. Enable "dig +adflag" and
52dec6996a1f305200211ff44bddf4cbb2edbb46Mark Andrews "dig +edns=0" by default. Enable "+dnssec" when
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews running "dig +trace". [RT #23497]
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews3204. [bug] When a master server that has been marked as
8f196ee82b5465d2060de279f68535076ddbad64Mark Andrews unreachable sends a NOTIFY, mark it reachable
56907aff69cabc391e672d360c88cb1856a839efMark Andrews again. [RT #25960]
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews3203. [bug] Increase log level to 'info' for validation failures
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
e502b133d630bda0ee64c1e2ce6729d96750d8abMark Andrews3202. [bug] NOEDNS caching on timeout was too agressive.
598da901aba066208ab57ef5a44661f00f6c7dc6Mark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
598da901aba066208ab57ef5a44661f00f6c7dc6Mark Andrews instead of only being used as a toggle. [RT #18351]
56907aff69cabc391e672d360c88cb1856a839efMark Andrews3200. [doc] Some rndc functions were undocumented or were
cac4576405a48a84f3c4d5de0ffa28a865a13309Mark Andrews missing from 'rndc -h' output. [RT #25555]
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews3199. [func] When logging client information, include the name
7d211b458fed36326b9e125b9d74089f9dccc140Mark Andrews being queried. [RT #25944]
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
d2ef5b3c5c8e08694f8f755cf2f14f8ec2f248a6Mark Andrews permissions. [RT #24866]
45c3c12ed3415e5cce50d73a735034e32aed1f73Mark Andrews3197. [bug] Don't try to log the filename and line number when
45c3c12ed3415e5cce50d73a735034e32aed1f73Mark Andrews the config parser can't open a file. [RT #22263]
692ce6c31351481644ce6167cb66edaff68cd493Mark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews doesn't exist. [RT #25783]
0807f596b58e22dd123539d0a351ef061c5eaae4Mark Andrews3195. [cleanup] Silence "file not found" warnings when loading
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews managed-keys zone. [RT #26340]
6cf047f100e35ef9ea0dc1aed3f05cd3c4ee3c3dMark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
b663e99af61e032273bdffa2f8d26de539ae6930Mark Andrews documentation. [RT #25203]
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
77d90dc2b51e672111be97e7920862c97f446c4dTatuya JINMEI 神明達哉3192. [bug] A query structure could be used after being freed.
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont3191. [bug] Print NULL records using "unknown" format. [RT #26392]
7558bd3e3824fb2ae349b8ab80f73d17d3ef5a77Francis Dupont3190. [bug] Underflow in error handling in isc_mutexblock_init.
334a4fd338d36a8310560a4c193d7af52bc69ce4Jeremy Reed3189. [test] Added a summary report after system tests. [RT #25517]
5d0984f4fd3133c869b0736adb5291e6fca34a0cTatuya JINMEI 神明達哉3188. [bug] zone.c:zone_refreshkeys() could fail to detach
c349441d7e47a30e81726967b2398289225ebd45Mark Andrews references correctly when errors occurred, causing
c349441d7e47a30e81726967b2398289225ebd45Mark Andrews a hang on shutdown. [RT #26372]
70f292a50f9840fc25b3dbecfed71cdf835d4094Mark Andrews3187. [port] win32: support for Visual Studio 2008. [RT #26356]
f19e6ef1eb7d5abf547fc1af24e561bdc5d75b22Mark Andrews --- 9.9.0b1 released ---
53cd44e7168acb379b1c5c74b3ffc4336694779dMark Andrews3186. [bug] Version/db mis-match in rpz code. [RT #26180]
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews3185. [func] New 'rndc signing' option for auto-dnssec zones:
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews - 'rndc signing -list' displays the current
e80b69327290953b825c7778d8de9d314bed6198Mark Andrews state of signing operations
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 - 'rndc signing -clear' clears the signing state
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 records for keys that have fully signed the zone
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 - 'rndc signing -nsec3param' sets the NSEC3
c82bb6a709abe89c051485b49403ef5bad1b756cTatuya JINMEI 神明達哉 parameters for the zone
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 The 'rndc keydone' syntax is removed. [RT #23729]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3184. [bug] named had excessive cpu usage when a redirect zone was
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews configured. [RT #26013]
f148f53794956f491f6527430a93c2c8d884a212Mark Andrews3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
00f83773169d9020a3ddcdaf88b198a27f571ff8Mark Andrews3182. [bug] Auth servers behind firewalls which block packets
31b7a2fed64e388db772a74742a4adc95d1a21e6Mark Andrews greater than 512 bytes may cause other servers to
10e8f96abe072fcf4e0c938548f0970cd26f624cMark Andrews perform poorly. Now, adb retains edns information
31b7a2fed64e388db772a74742a4adc95d1a21e6Mark Andrews and caches noedns servers. [RT #23392/24964]
5567f54834089be35d0df6afe2ccfaa039ab2233Jeremy Reed3181. [func] Inline-signing is now supported for master zones.
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews3180. [func] Local copies of slave zones are now saved in raw
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews format by default, to improve startup performance.
13f4bdc9b4f7b438cf5c2a071f108211534fae3fMark Andrews 'masterfile-format text;' can be used to override
13f4bdc9b4f7b438cf5c2a071f108211534fae3fMark Andrews the default, if desired. [RT #25867]
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews3179. [port] kfreebsd: build issues. [RT #26273]
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews3178. [bug] A race condition introduced by change #3163 could
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews cause an assertion failure on shutdown. [RT #26271]
a8673c536b5827d87ef6c50a04afd34af2253fd9Evan Hunt3177. [func] 'rndc keydone', remove the indicator record that
a8673c536b5827d87ef6c50a04afd34af2253fd9Evan Hunt named has finished signing the zone with the
a8673c536b5827d87ef6c50a04afd34af2253fd9Evan Hunt corresponding key. [RT #26206]
616b4544d0228604b1c5169b0c9d742f67567232Tatuya JINMEI 神明達哉3176. [doc] Corrected example code and added a README to the
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 sample external DLZ module in contrib/dlz/example.
bc4bc3579b92f2e4c6a6a2c5284d1c792c70e264Tatuya JINMEI 神明達哉3175. [bug] Fix how DNSSEC positive wildcard responses from a
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 NSEC3 signed zone are validated. Stop sending a
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉 unnecessary NSEC3 record when generating such
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉 responses. [RT #26200]
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉3174. [bug] Always compute to revoked key tag from scratch.
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont3173. [port] Correctly validate root DS responses. [RT #25726]
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont3172. [port] darwin 10.* and freebsd [89] are now built threaded by
ddb35cf2f301ae1c3fa601792034f6d349efc8c5Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
ddb35cf2f301ae1c3fa601792034f6d349efc8c5Mark Andrews 'rndc addzone'. [RT #25600]
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉 --- 9.9.0a3 released ---
09d7358c48bb032566e5bb70703c2c3ea35a0cb2Mark Andrews3170. [func] RPZ update:
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 - fix precedence among competing rules
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 - improve ARM text including documenting rule precedence
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 - try to rewrite CNAME chains until first hit
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 - new "rpz" logging channel
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews - RDATA for CNAME rules can include wildcards
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews - replace "NO-OP" named.conf policy override with
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews "PASSTHRU" and add "DISABLED" override ("NO-OP"
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉 is still recognized)
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉3169. [func] Catch db/version mis-matches when calling dns_db_*().
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉3168. [bug] Nxdomain redirection could trigger an assert with
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews a ANY query. [RT #26017]
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews3167. [bug] Negative answers from forwarders were not being
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉 correctly tagged making them appear to not be cached.
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉3166. [bug] Upgrading a zone to support inline-signing failed.
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews3165. [bug] dnssec-signzone could generate new signatures when
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews resigning, even when valid signatures were already
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews present. [RT #26025]
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews3164. [func] Enable DLZ modules to retrieve client information,
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews so that responses can be changed depending on the
b06e03490604f5d9b590dad143e65d533918481bMark Andrews source address of the query. [RT #25768]
8684cd3a6f1437a3c1ff6ca852e1db6d40ce6303Mark Andrews3163. [bug] Use finer-grained locking in client.c to address
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews concurrency problems with large numbers of threads.
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉3162. [test] start.pl: modified to allow for "named.args" in
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 ns*/ subdirectory to override stock arguments to
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews named. Largely from RT#26044, but no separate ticket.
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews assertion failures. [RT #25880]
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews3160. [bug] When printing out a NSEC3 record in multiline form
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews the newline was not being printed causing type codes
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews to be run together. [RT #25873]
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews3159. [bug] On some platforms, named could assert on startup
d8fc8514b117e636b791bef429d64a7c7a75a4cfMark Andrews when running in a chrooted environment without
d8fc8514b117e636b791bef429d64a7c7a75a4cfMark Andrews /proc. [RT #25863]
9935447b51456f598b45246d0114b8006049244dMark Andrews3158. [bug] Recursive servers would prefer a particular UDP
9935447b51456f598b45246d0114b8006049244dMark Andrews socket instead of using all available sockets.
175a8bd2b798bbc568cd912b72c8a026cfca8527Mark Andrews3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews the config file before pausing the server. [RT #21373]
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews3156. [placeholder]
4e59e2e59b17c4e30eef801929bca91800be833eFrancis Dupont --- 9.9.0a2 released ---
47d9a2bec1fee2f6c7a9cee3ca922140840223eeMark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
9019569316e39087410336bb76c02bf185974fe3Mark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews an assert. [RT #25452]
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉3153. [func] Extend request-ixfr to zone level and remove the
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 side effect of forcing an AXFR. [RT #25156]
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉3152. [cleanup] Some versions of gcc and clang failed due to
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉 incorrect use of __builtin_expect. [RT #25183]
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews3151. [bug] Queries for type RRSIG or SIG could be handled
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews incorrectly. [RT #21050]
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews3150. [func] Improved startup and reconfiguration time by
50df1ec60af410fca6b7a85d5c85e8f31bb13bc3Mark Andrews enabling zones to load in multiple threads. [RT #25333]
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews3149. [placeholder]
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews3148. [bug] Processing of normal queries could be stalled when
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed forwarding a UPDATE message. [RT #24711]
ef4eed2a2a8897bd4e5b19dd94f638e0861ebda5Mark Andrews3147. [func] Initial inline signing support. [RT #23657]
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews --- 9.9.0a1 released ---
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews3145. [test] Capture output of ATF unit tests in "./atf.out" if
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews there were any errors while running them. [RT #25527]
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews3144. [bug] dns_dbiterator_seek() could trigger an assert when
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews used with a nonexistent database node. [RT #25358]
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉3143. [bug] Silence clang compiler warnings. [RT #25174]
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉3142. [bug] NAPTR is class agnostic. [RT #25429]
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉3141. [bug] Silence spurious "zone serial (0) unchanged" messages
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews associated with empty zones. [RT #25079]
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews3140. [func] New command "rndc flushtree <name>" clears the
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews specified name from the server cache along with
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews all names under it. [RT #19970]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews for the hashing algorithms (md5, sha1 - sha512, and
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews their hmac counterparts). [RT #25067]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews3138. [bug] Address memory leaks and out-of-order operations when
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews shutting named down. [RT #25210]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews3137. [func] Improve hardware scalability by allowing multiple
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews worker threads to process incoming UDP packets.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed This can significantly increase query throughput
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews on some systems. [RT #22992]
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews empty zones switched on by the 'empty-zones-enable'
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews option. [RT #24990]
7b1a7a098b51381f06277860a40bd7f062c8ec19Francis Dupont3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
7b1a7a098b51381f06277860a40bd7f062c8ec19Francis Dupont See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews3134. [bug] Improve the accuracy of dnssec-signzone's signing
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews statistics. [RT #16030]
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews3133. [bug] Change #3114 was incomplete. [RT #24577]
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews3132. [placeholder]
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews3131. [tuning] Improve scalability by allocating one zone task
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews per 100 zones at startup time, rather than using a
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed fixed-size task table. [RT #24406]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed3130. [func] Support alternate methods for managing a dynamic
d1ec77294eb543bbca128d8683bdf9680cbedb61Mark Andrews zone's serial number. Two methods are currently
9d02618ca6b4d2e1737ba441449f61c1f04be685Mark Andrews defined using serial-update-method, "increment"
9d02618ca6b4d2e1737ba441449f61c1f04be685Mark Andrews (default) and "unixtime". [RT #23849]
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews3129. [bug] Named could crash on 'rndc reconfig' when
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews allow-new-zones was set to yes and named ACLs
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed were used. [RT #22739]
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed3128. [func] Inserting an NSEC3PARAM via dynamic update in an
86ee7433b38bb023912a73d842bdcef3d4871a90Mark Andrews auto-dnssec zone that has not been signed yet
275b170cc47c897d25204fe23169dac810283f79Mark Andrews will cause it to be signed with the specified NSEC3
86ee7433b38bb023912a73d842bdcef3d4871a90Mark Andrews parameters when keys are activated. The
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt NSEC3PARAM record will not appear in the zone until
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt it is signed, but the parameters will be stored.
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews3127. [bug] 'rndc thaw' will now remove a zone's journal file
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews if the zone serial number has been changed and
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews ixfr-from-differences is not in use. [RT #24687]
7ca0cdd7ecff4c0396970ed957df7d5d8c639abfMark Andrews3126. [security] Using DNAME record to generate replacements caused
ee02a035c9dc50cac31424512e110ee16a45a693Mark Andrews RPZ to exit with a assertion failure. [RT #24766]
275b170cc47c897d25204fe23169dac810283f79Mark Andrews3125. [security] Using wildcard CNAME records as a replacement with
455ada05af05e39cdeb63297d60d36a0eca062e1Mark Andrews RPZ caused named to exit with a assertion failure.
ff30270d6ccc27a7ce45853eb5637b6d69d8a5ebMark Andrews3124. [bug] Use an rdataset attribute flag to indicate
0d444dc136a1a8df89a329d7ad43c74e1db8dfbeMark Andrews negative-cache records rather than using rrtype 0;
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews this will prevent problems when that rrtype is
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews used in actual DNS packets. [RT #24777]
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉3123. [security] Change #2912 exposed a latent flaw in
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉 dns_rdataset_totext() that could cause named to
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉 crash with an assertion failure. [RT #24777]
b05585dcfe270c40e309ff7304cf6b69d7390bdaTatuya JINMEI 神明達哉3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
1f030ca8a3df943d8016cac39bc3018f5952126aJeremy Reed3121. [security] An authoritative name server sending a negative
1f030ca8a3df943d8016cac39bc3018f5952126aJeremy Reed response containing a very large RRset could
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews trigger an off-by-one error in the ncache code
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews and crash named. [RT #24650]
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews that validated insecure without using DLV and had
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews DS records in the parent zone. [RT #24631]
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews record could be created and never marked complete.
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews3118. [bug] nsupdate could dump core on shutdown when using
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews SIG(0) keys. [RT #24604]
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed3117. [cleanup] Remove doc and parser references to the
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed never-implemented 'auto-dnssec create' option.
99a522dad7623549cd5e32a4968e6de8eca46ff1Mark Andrews3116. [func] New 'dnssec-update-mode' option controls updates
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews of DNSSEC records in signed dynamic zones. Set to
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews 'no-resign' to disable automatic RRSIG regeneration
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews while retaining the ability to sign new or changed
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews data. [RT #24533]
cd6555930b6829ebce8bbf2adc7ba05111edf595Mark Andrews3115. [bug] Named could fail to return requested data when
cd6555930b6829ebce8bbf2adc7ba05111edf595Mark Andrews following a CNAME that points into the same zone.
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉3114. [bug] Retain expired RRSIGs in dynamic zones if key is
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉 inactive and there is no replacement key. [RT #23136]
c5ead8c25b6c1f51180ec6899c421fc9d074e6cbTatuya JINMEI 神明達哉3113. [doc] Document the relationship between serial-query-rate
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉 and NOTIFY messages.
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt3112. [doc] Add missing descriptions of the update policy name
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt types "ms-self", "ms-subdomain", "krb5-self" and
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt "krb5-subdomain", which allow machines to update
275b170cc47c897d25204fe23169dac810283f79Mark Andrews their own records, to the BIND 9 ARM.
eab4a5c29ddda688d975ad59a55a965b16534432Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
21d493fc392d472086ad3c7c4563b7cadcb06788Mark Andrews dnssec-validation, added test cases to the
21d493fc392d472086ad3c7c4563b7cadcb06788Mark Andrews checkconf system test. [RT #24398]
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews when attempting to sign with no KSK. [RT #24369]
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews3109. [func] The also-notify option now uses the same syntax
19e4588ed76d6832be4de0813b6108a292ef413aMark Andrews as a zone's masters clause. This means it is
19e4588ed76d6832be4de0813b6108a292ef413aMark Andrews now possible to specify a TSIG key to use when
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed sending notifies to a given server, or to include
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed an explicit named masters list in an also-notfiy
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed statement. [RT #23508]
143852efc066b3e3cd16eeec679016adbd450474Mark Andrews3108. [cleanup] dnssec-signzone: Clarified some error and
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews code (use -P instead). [RT #20852]
11dbf2fc38eea8c5d3fe7123718bf197a8bb2e6bMark Andrews3107. [bug] dnssec-signzone: Report the correct number of ZSKs
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 when using -x. [RT #20852]
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉3106. [func] When logging client requests, include the name of
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 the TSIG key if any. [RT #23619]
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews3105. [bug] GOST support can be suppressed by "configure
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews --without-gost" [RT #24367]
ce688d65947a05561509aef48c8c240130d443eaMark Andrews3104. [bug] Better support for cross-compiling. [RT #24367]
c6c09f77f85860b6e084b0daad066ded08729b3eMark Andrews3103. [bug] Configuring 'dnssec-validation auto' in a view
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff instead of in the options statement could trigger
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff an assertion failure in named-checkconf. [RT #24382]
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff3102. [func] New 'dnssec-loadkeys-interval' option configures
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff how often, in minutes, to check the key repository
896f88361ec8a15a20688eb533a65977ee698974Mark Andrews for updates when using automatic key maintenance.
896f88361ec8a15a20688eb533a65977ee698974Mark Andrews Default is every 60 minutes (formerly hard-coded
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt to 12 hours). [RT #23744]
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt3101. [bug] Zones using automatic key maintenance could fail
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt to check the key repository for updates. [RT #23744]
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt3100. [security] Certain response policy zone configurations could
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt trigger an INSIST when receiving a query of type
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt RRSIG. [RT #24280]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews3099. [test] "dlz" system test now runs but gives R:SKIPPED if
8760bb9e0c48dad3765571b6e1ce193548fc5e37Evan Hunt not compiled with --with-dlz-filesystem. [RT #24146]
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt3098. [bug] DLZ zones were answering without setting the AA bit.
b247f77228f00e16dd43b4d570ad0fb15e88f3edMark Andrews3097. [test] Add a tool to test handling of malformed packets.
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews3096. [bug] Set KRB5_KTNAME before calling log_cred() in
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews dst_gssapi_acceptctx(). [RT #24004]
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews3095. [bug] Handle isolated reserved ports in the port range.
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews3094. [doc] Expand dns64 documentation.
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews3092. [bug] Signatures for records at the zone apex could go
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews stale due to an incorrect timer setting. [RT #23769]
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews3091. [bug] Fixed a bug in which zone keys that were published
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews and then subsequently activated could fail to trigger
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews automatic signing. [RT #22911]
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews3090. [func] Make --with-gssapi default [RT #23738]
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews standard input "dnssec-dsfromkey -f -". [RT# 20662]
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews and add setup.sh in order to resolve changing
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews named.conf issue. [RT #23687]
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews type "external" could cause a crash. [RT #23735]
275b170cc47c897d25204fe23169dac810283f79Mark Andrews3086. [bug] Running dnssec-settime -f on an old-style key will
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews now force an update to the new key format even if no
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews other change has been specified, using "-P now -A now"
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉 as default values. [RT #22474]
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉3085. [func] New '-R' option in dnssec-signzone forces removal
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews of signatures which have not yet expired but
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews were generated by a key that no longer exists.
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews3084. [func] A new command "rndc sync" dumps pending changes in
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt a dynamic zone to disk; "rndc sync -clean" also
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt removes the journal file after syncing. Also,
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt "rndc freeze" no longer removes journal files.
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt3083. [bug] NOTIFY messages were not being sent when generating
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt a NSEC3 chain incrementally. [RT #23702]
1bfe8851c0a2eb1d7e15556bfa21291cd62ee2bcMark Andrews3082. [port] strtok_r is threads only. [RT #23747]
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉3081. [bug] Failure of DNAME substitution did not return
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 YXDOMAIN. [RT #23591]
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
275b170cc47c897d25204fe23169dac810283f79Mark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews3078. [func] Added a new include file with function typedefs
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt for the DLZ "dlopen" driver. [RT #23629]
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews3077. [bug] zone.c:zone_refreshkeys() incorrectly called
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews dns_zone_attach(), use zone->irefs instead. [RT #23303]
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉 dnssec-keyfromlabel sets the default TTL of the
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉 key. When possible, automatic signing will use that
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 TTL when the key is published. [RT #23304]
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 timestamp when determining which keys are active.
cf225ed6cd51f9acc901a60520a9368e14224a4dTatuya JINMEI 神明達哉3074. [bug] Make the adb cache read through for zone data and
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉 glue learn for zone named is authoritative for.
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉3073. [bug] managed-keys changes were not properly being recorded.
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed3071. [bug] has_nsec could be used unintialised in
dc842cdcb946b3f89448f07a9f024497a50c216aMark Andrews update.c:next_active. [RT #20256]
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉3070. [bug] dnssec-signzone potential NULL pointer dereference.
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉3069. [cleanup] Silence warnings messages from clang static analysis.
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉3068. [bug] Named failed to build with a OpenSSL without engine
04115a59c176759177545c72376e844e10dc557cMark Andrews support. [RT #23473]
b1f7d25ee1792838aa5e5d81f4433b474d4565a2Mark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
4db36a15c5716050d40aa8e709e8c8e9475ea25bMark Andrews select the master/slave zones. [RT #23580]
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉3066. [func] The DLZ "dlopen" driver is now built by default,
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 no longer requiring a configure option. To
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 disable it, use "configure --without-dlopen".
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 Driver also supported on win32. [RT #23467]
146484aced3e6c1b9cc88db5e75b8cbfd166f701Mark Andrews3065. [bug] RRSIG could have time stamps too far in the future.
e43b095921450c34288cadc3406f49c84a0e4d46Evan Hunt3064. [bug] powerpc: add sync instructions to the end of atomic
e43b095921450c34288cadc3406f49c84a0e4d46Evan Hunt operations. [RT #23469]
e43b095921450c34288cadc3406f49c84a0e4d46Evan Hunt3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
7999db4215b9398d4598ac0156ff097cda40402bMark Andrews3062. [func] Made several changes to enhance human readability
481e9b573b8233f8678c1dd4549c8c949312e81dMark Andrews of DNSSEC data in dig output and in generated
cbb8a1b7cbab933795ddee4f05f4eb5074a68e6cFrancis Dupont - DNSKEY record comments are more verbose, no
cbb8a1b7cbab933795ddee4f05f4eb5074a68e6cFrancis Dupont longer used in multiline mode only
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont - multiline RRSIG records reformatted
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont - multiline output mode for NSEC3PARAM records
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont - "dig +norrcomments" suppresses DNSKEY comments
09477e188f874c8c43a90f050733b114385992dcTatuya JINMEI 神明達哉 - "dig +split=X" breaks hex/base64 records into
0cdb53f093f5814b40a68848025dd8d7e9ef2e9bTatuya JINMEI 神明達哉 fields of width X; "dig +nosplit" disables this.
05b8187cb3cf03fbd75af1afdacc4aefb373e37bTatuya JINMEI 神明達哉3061. [func] New option "dnssec-signzone -D", only write out
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews generated DNSSEC records. [RT #22896]
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews specification of a separate expiration date
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews3059. [test] Added a regression test for change #3023.
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews reload to fail, if a log file specified in the conf
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews file isn't a plain file. [RT #22771]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont3057. [bug] "rndc secroots" would abort after the first error
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont and so could miss some views. [RT #23488]
2ca30c1774245f3aa7e8a1f3781cb965152373d8Evan Hunt3056. [func] Added support for URI resource record. [RT #23386]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont3055. [placeholder]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont3054. [bug] Added elliptic curve support check in
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont GOST OpenSSL engine detection. [RT #23485]
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt3053. [bug] Under a sustained high query load with a finite
3d8b9b9956b64aba0d105f955ac0354fbcf5baa9Tatuya JINMEI 神明達哉 max-cache-size, it was possible for cache memory
3d8b9b9956b64aba0d105f955ac0354fbcf5baa9Tatuya JINMEI 神明達哉 to be exhausted and not recovered. [RT #23371]
2f76108082f11d4979048f1c22602391c5733c88Tatuya JINMEI 神明達哉3052. [test] Fixed last autosign test report. [RT #23256]
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt3051. [bug] NS records obsure DNAME records at the bottom of the
c6678b68efae57ecaec97f489f6d9104f85ed0a8Mark Andrews zone if both are present. [RT #23035]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3050. [bug] The autosign system test was timing dependent.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 Wait for the initial autosigning to complete
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 before running the rest of the test. [RT #23035]
d923262186a3111a6ac7aae5dcd9996e01115a44Mark Andrews3049. [bug] Save and restore the gid when creating creating
d923262186a3111a6ac7aae5dcd9996e01115a44Mark Andrews named.pid at startup. [RT #23290]
f92c897cb69fbb8b7400a5df93271b0743fe9adeTatuya JINMEI 神明達哉3048. [bug] Fully separate view key mangement. [RT #23419]
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉3047. [bug] DNSKEY NODATA responses not cached fixed in
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉 validator.c. Tests added to dnssec system test.
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉3046. [bug] Use RRSIG original TTL to compute validated RRset
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉 and RRSIG TTL. [RT #23332]
0f39ff74a85e16cbfd30354e24403b1ee50e1104Tatuya JINMEI 神明達哉3045. [removed] Replaced by change #3050.
0f39ff74a85e16cbfd30354e24403b1ee50e1104Tatuya JINMEI 神明達哉3044. [bug] Hold the socket manager lock while freeing the socket.
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews version 0.12) for development of future unit tests.
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews Use configure --with-atf to build ATF internally
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews or configure --with-atf=prefix to use an external
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews copy. [RT #23209]
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews3042. [bug] dig +trace could fail attempting to use IPv6
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews addresses on systems with only IPv4 connectivity.
250dcb4cf5c356bb492c849edff5fe3c81f61f77Tatuya JINMEI 神明達哉3041. [bug] dnssec-signzone failed to generate new signatures on
250dcb4cf5c356bb492c849edff5fe3c81f61f77Tatuya JINMEI 神明達哉 ttl changes. [RT #23330]
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉3040. [bug] Named failed to validate insecure zones where a node
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 with a CNAME existed between the trust anchor and the
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 top of the zone. [RT #23338]
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews3039. [func] Redirect on NXDOMAIN support. [RT #23146]
58253bddc4c33507ba28654b9c4a36ca1053730cMark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3037. [doc] Update COPYRIGHT to contain all the individual
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews copyright notices that cover various parts.
080a964a3f0622f2e343f114aa1cc066372c06caEvan Hunt3036. [bug] Check built-in zone arguments to see if the zone
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews is re-usable or not. [RT #21914]
5a17fe2916ce37793c12b243ab08c16095a59cf7Evan Hunt3035. [cleanup] Simplify by using strlcpy. [RT #22521]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
e1aeb1569a0ae08c97dd76acb00376e4246e59b8Mark Andrews3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3029. [bug] isc_netaddr_format() handle a zero sized buffer.
816496b22114ee7c2c15321c2c6cc4be77fdf822Mark Andrews3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
28ad0be64ee756013c0f6a474fc447ee613ee0d1Evan Hunt catch NULL pointer dereferences before they happen.
229442301442890aee044a0df54d3787acd68e65Mark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
8b56b8956fc1e6c70efacb4f71db28d0d1f0c577Mark Andrews after calling grow_headerspace() and if not
8b56b8956fc1e6c70efacb4f71db28d0d1f0c577Mark Andrews re-call grow_headerspace() until we do. [RT #22521]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews3025. [bug] Fixed a possible deadlock due to zone resigning.
2284b84d74cdfd62ecb962feb850de981bbc2196Evan Hunt3024. [func] RTT Banding removed due to minor security increase
bf64a0d5d9469c42622401bc5d55cf9888eeef44Tatuya JINMEI 神明達哉 but major impact on resolver latency. [RT #23310]
bf64a0d5d9469c42622401bc5d55cf9888eeef44Tatuya JINMEI 神明達哉3023. [bug] Named could be left in an inconsistent state when
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff receiving multiple AXFR response messages that were
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff not all TSIG-signed. [RT #23254]
375e2c913a21cb852310418785f359a6b21b851dMark Andrews3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
52cb865cf00db3437c33b57de0a17c807f9ba67eMark Andrews3021. [bug] Change #3010 was incomplete. [RT #22296]
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews3020. [bug] auto-dnssec failed to correctly update the zone when
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews changing the DNSKEY RRset. [RT #23232]
c4fadc88619959582ac89b841c489be0519ae79dTatuya JINMEI 神明達哉3019. [test] Test: check apex NSEC3 records after adding DNSKEY
c4fadc88619959582ac89b841c489be0519ae79dTatuya JINMEI 神明達哉 record via UPDATE. [RT #23229]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews if a zone may need to be re-signed. [RT #23120]
d904beeb3bf62d60e25f76e1ac9c4b78278c14edMark Andrews3017. [doc] dnssec-keyfromlabel -I was not properly documented.
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews3014. [placeholder]
887ef2682c6f66f9dcd6604c4ccf8f87894ef2a9Mark Andrews3013. [bug] The DNS64 ttl was not always being set as expected.
07555e64d9102eae058efd58f872b4a3b9ddff61Mark Andrews3012. [bug] Remove DNSKEY TTL change pairs before generating
07555e64d9102eae058efd58f872b4a3b9ddff61Mark Andrews signing records for any remaining DNSKEY changes.
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews3011. [func] Change the default query timeout from 30 seconds
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont to 10. Allow setting this in named.conf using the new
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont 'resolver-query-timeout' option, which specifies a max
8d460bed78e2684fbb0cb150bbf800dcc4d29c54Mark Andrews time in seconds. 0 means 'default' and anything longer
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews than 30 will be silently set to 30. [RT #22852]
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont for refreshing managed-keys. [RT #22296]
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont3009. [bug] clients-per-query code didn't work as expected with
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont particular query patterns. [RT #22972]
cffe96e26744abcf33494837b234219046a631d8Mark Andrews --- 9.8.0b1 released ---
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews3008. [func] Response policy zones (RPZ) support. [RT #21726]
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews3007. [bug] Named failed to preserve the case of domain names in
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews rdata which is not compressible when writing master
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews files. [RT #22863]
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews3006. [func] Allow dynamically generated TSIG keys to be preserved
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉 across restarts of named. Initially this is for
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉 TSIG keys generated using GSSAPI. [RT #22639]
ea8564f68adbacd904e55e47668fe1bbf65ddd1dMark Andrews3005. [port] Solaris: Work around the lack of
ea8564f68adbacd904e55e47668fe1bbf65ddd1dMark Andrews gsskrb5_register_acceptor_identity() by setting
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews the KRB5_KTNAME environment variable to the
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews contents of tkey-gssapi-keytab. Also fixed
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews test errors on MacOSX. [RT #22853]
d9936b218d9d0fd7c6a1a418e5b91b356190ea12Mark Andrews3004. [func] DNS64 reverse support. [RT #22769]
4074b8e7342618ff38ffe3773a2699ee1734f1adMark Andrews3003. [experimental] Added update-policy match type "external",
0283e511317cae3785a9d48e236289a234a25368Mark Andrews enabling named to defer the decision of whether to
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews allow a dynamic update to an external daemon.
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews (Contributed by Andrew Tridgell.) [RT #22758]
016c4317500eb565b82b27d00ba6b621c6e29110Mark Andrews3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews3001. [func] Added a default trust anchor for the root zone, which
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews can be switched on by setting "dnssec-validation auto;"
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews in the named.conf options. [RT #21727]
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews3000. [bug] More TKEY/GSS fixes:
0e30609d7b3e31e3ff249d185041b9140b5410baMark Andrews - nsupdate can now get the default realm from
0e30609d7b3e31e3ff249d185041b9140b5410baMark Andrews the user's Kerberos principal
0e30609d7b3e31e3ff249d185041b9140b5410baMark Andrews - corrected gsstest compilation flags
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews - improved documentation
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews - fixed some NULL dereferences
3cff31d890bf0815b6b2c7603d1e5c37dc3f26b7Mark Andrews2999. [func] Add GOST support (RFC 5933). [RT #20639]
aef875b27e94586a1f3644d53705e6f5ea4b5dafMark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
aef875b27e94586a1f3644d53705e6f5ea4b5dafMark Andrews to the task api. [RT #22776]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews2997. [func] named -V now reports the OpenSSL and libxml2 verions
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews it was compiled against. [RT #22687]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews2996. [security] Temporarily disable SO_ACCEPTFILTER support.
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews2995. [bug] The Kerberos realm was not being correctly extracted
4a5b30c24ca7ceefec4ca142069b886f3d4ab9f9Mark Andrews from the signer's identity. [RT #22770]
c368f28dad471c70213b41f7a0ad1b4ef4d8c543Mark Andrews2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews do not use threads on earlier versions. Also kill
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews the unproven-pthreads, mit-pthreads, and ptl2 support.
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews2993. [func] Dynamically grow adb hash tables. [RT #21186]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
7adca0ea2fcd44641861523b718d6980c0666103Mark Andrews for looking at a secure delegation. [RT #22059]
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews dynamic zones. [RT #22365]
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews2990. [bug] 'dnssec-settime -S' no longer tests prepublication
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews interval validity when the interval is set to 0.
7539c231d47677250008737b0691f9518111f3f5Mark Andrews2989. [func] Added support for writable DLZ zones. (Contributed
7539c231d47677250008737b0691f9518111f3f5Mark Andrews by Andrew Tridgell of the Samba project.) [RT #22629]
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉 of external DLZ drivers that can be loaded as
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews shared objects at runtime rather than linked with
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews named. Currently this is switched on via a
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews compile-time option, "configure --with-dlz-dlopen".
1c3ed2a83d176d9023b51b60dfc96c133f678362Tatuya JINMEI 神明達哉 Note: the syntax for configuring DLZ zones
1c3ed2a83d176d9023b51b60dfc96c133f678362Tatuya JINMEI 神明達哉 is likely to be refined in future releases.
e951a79d901cc9b72a4882c38f02b568eed6bf24Mark Andrews (Contributed by Andrew Tridgell of the Samba
fc53f564caa9d40f4b73a2808260b1dc07e86fddEvan Hunt project.) [RT #22629]
9a727082a0f4959d4ad5ee91c171c2fad92ac996Mark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
a59640bf27db16e02e01484297e36b7456e163bbMark Andrews adding a "tkey-gssapi-keytab" option. If set,
4462e590791925b6a5efceacbff054a6b5fe35edMark Andrews updates will be allowed with any key matching
4462e590791925b6a5efceacbff054a6b5fe35edMark Andrews a principal in the specified keytab file.
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews "tkey-gssapi-credential" is no longer required
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews and is expected to be deprecated. (Contributed
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews by Andrew Tridgell of the Samba project.)
fc7043d7d1294478c9988c10af9a7fb8fd810338Evan Hunt2986. [func] Add new zone type "static-stub". It's like a stub
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews zone, but the nameserver names and/or their IP
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews addresses are statically configured. [RT #21474]
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews2985. [bug] Add a regression test for change #2896. [RT #21324]
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews2984. [bug] Don't run MX checks when the target of the MX record
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews is ".". [RT #22645]
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
262c39b2366bf79062f7f86b218947523dd1cbacEvan Hunt --- 9.8.0a1 released ---
1ff207c2fa4182156932f3f5c982170385a19225Mark Andrews2982. [bug] Reference count dst keys. dst_key_attach() can be used
b1e32169ac5cf21fca540fa122a546db71090491Mark Andrews increment the reference count.
1aba9fe67899522364a9dbc3ee5a14da081f0314Evan Hunt Note: dns_tsigkey_createfromkey() callers should now
1aba9fe67899522364a9dbc3ee5a14da081f0314Evan Hunt always call dst_key_free() rather than setting it
1aba9fe67899522364a9dbc3ee5a14da081f0314Evan Hunt to NULL on success. [RT #22672]
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
6c7f722d31d12cf83964c8132f0a59ef70e34cb5Mark Andrews2980. [bug] named didn't properly handle UPDATES that changed the
6c7f722d31d12cf83964c8132f0a59ef70e34cb5Mark Andrews TTL of the NSEC3PARAM RRset. [RT #22363]
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews2979. [bug] named could deadlock during shutdown if two
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews "rndc stop" commands were issued at the same
fcdafc1e30dd4d10184b56201ea2fc3bab711e5eMark Andrews time. [RT #22108]
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
efb3fa669f00ccfd9aada997b426616b6b0ce044Mark Andrews key. [RT #22573]
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews wrong lock which could lead to server deadlock.
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews consistency check examining the existing version
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews of the zone rather than the new version resulting
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews from the UPDATE. [RT #22413]
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews at the end of configure resulting in build failures
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews where there is very old version of perl installed.
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews Move it to "make maintainer-clean". [RT #22230]
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews2971. [bug] Fixed a bug that caused journal files not to be
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews compacted on Windows systems as a result of
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews non-POSIX-compliant rename() semantics. [RT #22434]
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews2970. [security] Adding a NO DATA negative cache entry failed to clear
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 any matching RRSIG records. A subsequent lookup of
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 of NO DATA cache entry could trigger a INSIST when the
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 unexpected RRSIG was also returned with the NO DATA
20837e74f5e68a8108c25bb341a3ef1c1ca22711Tatuya JINMEI 神明達哉 CVE-2010-3613, VU#706148. [RT #22288]
1c9f629c181dfd14bb429a6699d22c3c023aa218Mark Andrews2969. [security] Fix acl type processing so that allow-query works
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews in options and view statements. Also add a new
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews set of tests to verify proper functioning.
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews CVE-2010-3615, VU#510208. [RT #22418]
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews2968. [security] Named could fail to prove a data set was insecure
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews before marking it as insecure. One set of conditions
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews that can trigger this occurs naturally when rolling
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews DNSKEY algorithms.
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews CVE-2010-3614, VU#837744. [RT #22309]
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews2967. [bug] 'host -D' now turns on debugging messages earlier.
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews2966. [bug] isc_print_vsnprintf() failed to check if there was
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews space available in the buffer when adding a left
92f60809e854ccf5f115883c6347e370da048848Mark Andrews justified character with a non zero width,
92f60809e854ccf5f115883c6347e370da048848Mark Andrews (e.g. "%-1c"). [RT #22270]
92f60809e854ccf5f115883c6347e370da048848Mark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
92f60809e854ccf5f115883c6347e370da048848Mark Andrews RFC 4634. [RT #21702]
f5d0f495847eb4eb9f0058e73051f855800bee0bMark Andrews2964. [placeholder]
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews2963. [security] The allow-query acl was being applied instead of the
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews allow-query-cache acl to cache lookups. [RT #22114]
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews2961. [bug] Be still more selective about the non-authoritative
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews answers we apply change 2748 to. [RT #22074]
604419a812b491cd35fb6fad129c3c39da7200a1Mark Andrews2960. [func] Check that named accepts non-authoritative answers.
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews2959. [func] Check that named starts with a missing masterfile.
8c850a29eda020642c84038e449d60f124c6123bMark Andrews2958. [bug] named failed to start with a missing master file.
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews respectively. [RT #21962]
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
301f6ffbbeabcbf765f8163f4ffb7f6f0146b926Mark Andrews2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
301f6ffbbeabcbf765f8163f4ffb7f6f0146b926Mark Andrews build_sqldbinstance failure. [RT #21623]
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews exact match" message when returning a wildcard
28c49640dcb25102e5040b8d957edd905ddf82f8Mark Andrews no data response. [RT #21744]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
541b9722d8031485922ab11221c2e747c0262cf5Mark Andrews to initialise winsock. [RT #21932]
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews2951. [bug] named failed to generate a correct signed response
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews in a optout, delegation only zone with no secure
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews delegations. [RT #22007]
a6f7fdcc039de75e9a20da90044caa814f0357a3Michael Graff2950. [bug] named failed to perform a SOA up to date check when
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews falling back to TCP on UDP timeouts when
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews ixfr-from-differences was set. [RT #21595]
7e8214191899dc8043babdfbe9235ba14c825005Mark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
7e8214191899dc8043babdfbe9235ba14c825005Mark Andrews it was called multiple times. [RT #21942]
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews2948. [port] MacOS: provide a mechanism to configure the test
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews interfaces at reboot. See bin/tests/system/README
9429f5a8318bd2142280c949d4af05998ca348a2Evan Hunt for details.
0899d16ebd6a70bb027e7899c53e7f542ebc987bEvan Hunt2947. [placeholder]
0899d16ebd6a70bb027e7899c53e7f542ebc987bEvan Hunt2946. [doc] Document the default values for the minimum and maximum
0899d16ebd6a70bb027e7899c53e7f542ebc987bEvan Hunt zone refresh and retry values in the ARM. [RT #21886]
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
544d0efa38490d67e458aa9c23a7dac2a9d546bfMark Andrews2943. [func] Add support to load new keys into managed zones
544d0efa38490d67e458aa9c23a7dac2a9d546bfMark Andrews without signing immediately with "rndc loadkeys".
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews Add support to link keys with "dnssec-keygen -S"
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews and "dnssec-settime -S". [RT #21351]
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
b6d496d53851e5ab5ba82e800062a431b05310cbEvan Hunt2941. [bug] sdb and sdlz (dlz's zone database) failed to support
b6d496d53851e5ab5ba82e800062a431b05310cbEvan Hunt DNAME at the zone apex. [RT #21610]
d55494b8e9887e7ff7cdf1ec96a9dc5e8afe3c94Shane Kerr2940. [port] Remove connection aborted error message on
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews Windows. [RT #21549]
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr2939. [func] Check that named successfully skips NSEC3 records
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews that fail to match the NSEC3PARAM record currently
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews in use. [RT# 21868]
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews2938. [bug] When generating signed responses, from a signed zone
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews that uses NSEC3, named would use a uninitialised
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews pointer if it needed to skip a NSEC3 record because
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews it didn't match the selected NSEC3PARAM record for
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews zone. [RT# 21868]
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews2937. [bug] Worked around an apparent race condition in over
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews memory conditions. Without this fix a DNS cache DB or
c368f28dad471c70213b41f7a0ad1b4ef4d8c543Mark Andrews ADB could incorrectly stay in an over memory state,
03745451370778a867e46fdbe315eb958745a391Mark Andrews effectively refusing further caching, which
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews subsequently made a BIND 9 caching server unworkable.
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews This fix prevents this problem from happening by
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews polling the state of the memory context, rather than
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews making a copy of the state, which appeared to cause
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews a race. This is a "workaround" in that it doesn't
e9908a145e763591bb407a4cd3d2062c7bc94cd8Mark Andrews solve the possible race per se, but several experiments
71f4918fd8a5ec4f0a05aac657b614fdf2467bebMark Andrews proved this change solves the symptom. Also, the
71f4918fd8a5ec4f0a05aac657b614fdf2467bebMark Andrews polling overhead hasn't been reported to be an issue.
873a2046fb73aee49934d7978efe3da6509faed3Evan Hunt This bug should only affect a caching server that
dabe7f50bb61d75841b535b91edb8f323f82f826Evan Hunt specifies a finite max-cache-size. It's also quite
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews likely that the bug happens only when enabling threads,
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews but it's not confirmed yet. [RT #21818]
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews2936. [func] Improved configuration syntax and multiple-view
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews support for addzone/delzone feature (see change
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews #2930). Removed "new-zone-file" option, replaced
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews with "allow-new-zones (yes|no)". The new-zone-file
05d2776f6fa8e3628555463b06cb43288c9ee68eEvan Hunt for each view is now created automatically, with
05d2776f6fa8e3628555463b06cb43288c9ee68eEvan Hunt a filename generated from a hash of the view name.
05d2776f6fa8e3628555463b06cb43288c9ee68eEvan Hunt It is no longer necessary to "include" the
8327cdb88fdbf306eb4c37fe00a29aac4c2f55c5Evan Hunt new-zone-file in named.conf; this happens
8327cdb88fdbf306eb4c37fe00a29aac4c2f55c5Evan Hunt automatically. Zones that were not added via
f2d8c4a4c3dfa212ddcf5b86d4c5fced4965e52eMark Andrews "rndc addzone" can no longer be removed with
f2d8c4a4c3dfa212ddcf5b86d4c5fced4965e52eMark Andrews "rndc delzone". [RT #19447]
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews scope. This could potentially result in a unknown,
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews potentially malformed, EDNS option being sent instead
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr of the desired NSID option. [RT #21781]
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr2932. [cleanup] Corrected a numbering error in the "dnssec" test.
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews2931. [bug] Temporarily and partially disable change 2864
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews because it would cause infinite attempts of RRSIG
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews queries. This is an urgent care fix; we'll
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews revisit the issue and complete the fix later.
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews2930. [experimental] New "rndc addzone" and "rndc delzone" commads
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews allow dynamic addition and deletion of zones.
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews To enable this feature, specify a "new-zone-file"
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews option at the view or options level in named.conf.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews Zone configuration information for the new zones
65391557db5d7dc725ed3f2b759248fea31a2445Mark Andrews will be written into that file. To make the new
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews zones persist after a restart, "include" the file
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews into named.conf in the appropriate view. (Note:
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews This feature is not yet documented, and its syntax
a7b7a4ebc38ec7460e95da6d3d70ffe7b59573b8Mark Andrews is expected to change.) [RT #19447]
1ca168b58e02fda534cad741a248e549e0f98d4dMark Andrews2929. [bug] Improved handling of GSS security contexts:
6f1b09965f26ab0d6c38dec4a38f67bb34ebddceMark Andrews - added LRU expiration for generated TSIGs
23450c23fd19138cfad95b6c7728e2965abfc154Mark Andrews - added the ability to use a non-default realm
de05f7d061abfe0ce555e0d0f2089f1261b031b6Mark Andrews - added new "realm" keyword in nsupdate
de05f7d061abfe0ce555e0d0f2089f1261b031b6Mark Andrews - limited lifetime of generated keys to 1 hour
d468b1b7b2ccfdf132df15f600be48dccf447eb1Evan Hunt or the lifetime of the context (whichever is
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2928. [bug] Be more selective about the non-authoritative
c7e266b7e5675e12d1ca3cc929f24b3e86d41f8eEvan Hunt answer we apply change 2748 to. [RT #21594]
85db2b5fb360ccd2aeec1e6e22336b3d654bb39aMark Andrews2927. [placeholder]
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews2926. [placeholder]
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews2925. [bug] Named failed to accept uncachable negative responses
709220567fb820cf7e7625925449dadf86317629Mark Andrews from insecure zones. [RT# 21555]
709220567fb820cf7e7625925449dadf86317629Mark Andrews2924. [func] 'rndc secroots' dump a combined summary of the
fe6b6eebd74f7c5c20088f67081ae690228f9744Mark Andrews current managed keys combined with trusted keys.
31a2f82193a91e24f31454ff18e0b7723c066a74Mark Andrews2923. [bug] 'dig +trace' could drop core after "connection
45deeddf4cf1ea57b8b493dcd2410f2332a36128Mark Andrews timeout". [RT #21514]
8731a2bd2f5483f50d82cf28e315090b7ceeed54Mark Andrews2922. [contrib] Update zkt to version 1.0.
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews2921. [bug] The resolver could attempt to destroy a fetch context
8a45eeebb8bdd4633bccfd9d77d9b50c1d337d54Mark Andrews too soon. [RT #19878]
8a45eeebb8bdd4633bccfd9d77d9b50c1d337d54Mark Andrews2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews to IPv4 clients. New acl 'filter-aaaa' (default any).
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews2917. [func] Virtual time test framework. [RT #20801]
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews2916. [func] Add framework to use IPv6 in tests.
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
f568dad6c7ddaa732e6562a4b89fd2ac922d263bMark Andrews2915. [cleanup] Be smarter about which objects we attempt to compile
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews based on configure options. [RT #21444]
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews2914. [bug] Make the "autosign" system test more portable.
d91df50b670d92d0ab784b741e2ee9af7f2dc4a1Mark Andrews2913. [func] Add pkcs#11 system tests. [RT #20784]
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews2912. [func] Windows clients don't like UPDATE responses that clear
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews the zone section. [RT #20986]
c5adbd722da0908f91be4fb710c082b4b68ec782Mark Andrews2911. [bug] dnssec-signzone didn't handle out of zone records well.
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews2910. [func] Sanity check Kerberos credentials. [RT #20986]
c60eaaf9b3c6bb4d693cdb5f68acdfacf076e1fdMark Andrews2909. [bug] named-checkconf -p could die if "update-policy local;"
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews was specified in named.conf. [RT #21416]
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews2908. [bug] It was possible for re-signing to stop after removing
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews a DNSKEY. [RT #21384]
c0720b90ed6e673264b17eb752d873a89cbd6db5Mark Andrews2907. [bug] The export version of libdns had undefined references.
c06cb907737eb7ce128c92dd729c73798733f37aMark Andrews2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews2905. [port] aix: set use_atomic=yes with native compiler.
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews2904. [bug] When using DLV, sub-zones of the zones in the DLV,
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews could be incorrectly marked as insecure instead of
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews secure leading to negative proofs failing. This was
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews a unintended outcome from change 2890. [RT# 21392]
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews2903. [bug] managed-keys-directory missing from namedconf.c.
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews2902. [func] Add regression test for change 2897. [RT #21040]
f408773d47b25594d1302525a4db6efb84b1843cMark Andrews2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews2900. [bug] The placeholder negative caching element was not
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews properly constructed triggering a INSIST in
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews dns_ncache_towire(). [RT #21346]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews2899. [port] win32: Support linking against OpenSSL 1.0.0.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews2898. [bug] nslookup leaked memory when -domain=value was
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews specified. [RT #21301]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews2897. [bug] NSEC3 chains could be left behind when transitioning
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews to insecure. [RT #21040]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews2896. [bug] "rndc sign" failed to properly update the zone
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews when adding a DNSKEY for publication only. [RT #21045]
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews2895. [func] genrandom: add support for the generation of multiple
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews files. [RT #20917]
5888f62c204a99da60d7854fe01eda4960fb3b36Mark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
57668dc1bb0eb063e9037ff07ddbfd520e0d7186Mark Andrews2893. [bug] Improve managed keys support. New named.conf option
fd23bc509d5fddb91247a2a1ca52d432969067e5Mark Andrews managed-keys-directory. [RT #20924]
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews2892. [bug] Handle REVOKED keys better. [RT #20961]
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews2891. [maint] Update empty-zones list to match
afd002e89aadf30181155566544480349e70339dMark Andrews draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
afd002e89aadf30181155566544480349e70339dMark Andrews2890. [bug] Handle the introduction of new trusted-keys and
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews DS, DLV RRsets better. [RT #21097]
ba5d2a97ee0cd2cc9d4b9e7e344ae8f607cc2994Mark Andrews2889. [bug] Elements of the grammar where not properly reported.
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews2888. [bug] Only the first EDNS option was displayed. [RT #21273]
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews2887. [bug] Report the keytag times in UTC in the .key file,
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews local time is presented as a comment within the
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews comment. [RT #21223]
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews2886. [bug] ctime() is not thread safe. [RT #21223]
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews2885. [bug] Improve -fno-strict-aliasing support probing in
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews configure. [RT #21080]
f05a4bf2bfac3aaff0462560b2793cd99a85a297Mark Andrews2884. [bug] Insufficient validation in dns_name_getlabelsequence().
bf45f72ed319628eebce60c368177320943d001fMark Andrews2883. [bug] 'dig +short' failed to handle really large datasets.
e078f002c06b6b26e2d7749a4f9e3907f3e85de3Mark Andrews2882. [bug] Remove memory context from list of active contexts
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews before clearing 'magic'. [RT #21274]
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews is held when closing a version. [RT #21198]
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews consistent. [RT #21078]
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews2878. [func] Incrementally write the master file after performing
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews a AXFR. [RT #21010]
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews2877. [bug] The validator failed to skip obviously mismatching
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews RRSIGs. [RT #21138]
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews2876. [bug] Named could return SERVFAIL for negative responses
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews from unsigned zones. [RT #21131]
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
68df4d65c624a9ca06e94fc67ef915adf2ec97beMark Andrews2874. [bug] Cache lack of EDNS support only after the server
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews successfully responds to the query using plain DNS.
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews2873. [bug] Cancelling a dynamic update via the dns/client module
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews could trigger an assertion failure. [RT #21133]
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews2872. [bug] Modify dns/client.c:dns_client_createx() to only
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews require one of IPv4 or IPv6 rather than both.
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews2871. [bug] Type mismatch in mem_api.c between the definition and
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews the header file, causing build failure with
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews --enable-exportlib. [RT #21138]
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews any changes made by configure are integrated.
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews Use --with-make-clean=no to disable. [RT #20994]
63aaac8137bd1d86aab8c950fb066bb522a26e5bMark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews don't like it. [RT #20986]
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews2866. [bug] Windows does not like the TSIG name being compressed.
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews2865. [bug] memset to zero event.data. [RT #20986]
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
c58821f7100821e1d4e4bbace727b988bb3e0623Mark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2862. [bug] nsupdate didn't default to the parent zone when
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews updating DS records. [RT #20896]
a5d7c242b564cbd3cebc0dd27c19d9093d38b3abMark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
a5d7c242b564cbd3cebc0dd27c19d9093d38b3abMark Andrews inactivation time. [RT #21039]
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
7a253b705ccbc30821253e7a124658623f10c499Mark Andrews2859. [bug] When cancelling validation it was possible to leak
7a253b705ccbc30821253e7a124658623f10c499Mark Andrews memory. [RT #20800]
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews2856. [bug] The size of a memory allocation was not always properly
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews recorded. [RT #20927]
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews2855. [func] nsupdate will now preserve the entered case of domain
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews names in update requests it sends. [RT #20928]
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews2854. [func] dig: allow the final soa record in a axfr response to
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews be suppressed, dig +onesoa. [RT #20929]
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
c1297b6025bf8ccdc832b7bca705da1d4cf2944eMark Andrews2851. [doc] nslookup.1, removed <informalexample> from the docbook
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt source as it produced bad nroff. [RT #21007]
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt2850. [bug] If isc_heap_insert() failed due to memory shortage
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt the heap would have corrupted entries. [RT #20951]
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt2849. [bug] Don't treat errors from the xml2 library as fatal.
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews README.rfc5011 into the ARM. [RT #20899]
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews2846. [bug] EOF on unix domain sockets was not being handled
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews correctly. [RT #20731]
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews been five (5) seconds.
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews creating key files if there is a chance that the new
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews key ID will collide with an existing one after
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews either of the keys has been revoked. (To override
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews this in the case of dnssec-keyfromlabel, use the -y
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews option. dnssec-keygen will simply create a
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews different, non-colliding key, so an override is
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews not necessary.) [RT #20838]
b130bf8b4ebdabd5c94eb5c6522a9971997b6ac9Mark Andrews2842. [func] Added "smartsign" and improved "autosign" and
072eaf055b7fa0d8abe96146fbb9152b14946c84Mark Andrews "dnssec" regression tests. [RT #20865]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
7a3c2d189e811933c48aace1900a868dffd42f5fMark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews2839. [bug] A KSK revoked by named could not be deleted.
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews2838. [placeholder]
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews2836. [bug] Keys that were scheduled to become active could
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews be delayed. [RT #20874]
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews2835. [bug] Key inactivity dates were inadvertently stored in
8c731c1219f1698f15bf5b1fcf6bc301cfd9bc42Mark Andrews the private key file with the outdated tag
8c731c1219f1698f15bf5b1fcf6bc301cfd9bc42Mark Andrews "Unpublish" rather than "Inactive". This has been
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews fixed; however, any existing keys that had Inactive
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews dates set will now need to have them reset, using
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews 'dnssec-settime -I'. [RT #20868]
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews2834. [bug] HMAC-SHA* keys that were longer than the algorithm
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews digest length were used incorrectly, leading to
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews interoperability problems with other DNS
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews implementations. This has been corrected.
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews (Note: If an oversize key is in use, and
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews compatibility is needed with an older release of
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews BIND, the new tool "isc-hmac-fixup" can convert
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews the key secret to a form that will work with all
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews versions.) [RT #20751]
bde20a0436dff13e2299cfd4230ddec54d396d02Mark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews to avoid redefinition in some OSs [RT 20831]
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews2831. [security] Do not attempt to validate or cache
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews out-of-bailiwick data returned with a secure
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews answer; it must be re-fetched from its original
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews source and validated in that context. [RT #20819]
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews2830. [bug] Changing the OPTOUT setting could take multiple
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews passes. [RT #20813]
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews2829. [bug] Fixed potential node inconsistency in rbtdb.c.
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews2828. [security] Cached CNAME or DNAME RR could be returned to clients
57eb7efe13b67455e8c6a08cf080afb3de2ac622Mark Andrews without DNSSEC validation. [RT #20737]
7228a4d9ca1f1b868e257a28de86c6a1f21e9ffeMark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews being released. [RT #20740]
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews was in the process of being created was not properly
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews recorded in the zone. [RT #20786]
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews2822. [bug] rbtdb.c:loadnode() could return the wrong result.
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews2820. [func] Handle read access failure of OpenSSL configuration
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews file more user friendly (PKCS#11 engine patch).
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews2818. [cleanup] rndc could return an incorrect error code
3d697a7eddf375586435f8fb6e1440fb3ce9058dMark Andrews when a zone was not found. [RT #20767]
8943ff626fa337419cbffad6a4a910c7d99509f4Mark Andrews2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews2816. [bug] previous_closest_nsec() could fail to return
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews data for NSEC3 nodes [RT #29730]
5cd4555ad444fd391002ae32450572054369fd42Rob Austein2815. [bug] Exclusively lock the task when freezing a zone.
8eb4eca37538183edb36db88580b5232f15931b0Mark Andrews2814. [func] Provide a definitive error message when a master
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews zone is not loaded. [RT #20757]
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
fa3d0b9991ea0d8344881c5dd4609d9c33314b9bMark Andrews2812. [bug] Make sure updates can't result in a zone with
e3f66e1617f9fca7313e4005b8c3c611551906d1Mark Andrews NSEC-only keys and NSEC3 records. [RT #20748]
ed954ce73b1c712b24eab945190028871433f803Mark Andrews2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
ed954ce73b1c712b24eab945190028871433f803Mark Andrews output. [RT #20733]
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews2810. [doc] Clarified the process of transitioning an NSEC3 zone
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews to insecure. [RT #20746]
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews2809. [cleanup] Restored accidentally-deleted text in usage output
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews in dnssec-settime and dnssec-revoke [RT #20739]
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews atomic.h is correctly installed by the architecture
8d709e3ee443222cd35e44eadc9a4c0a8d92fec2Rob Austein specific subdirectories. [RT #20722]
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews keys. [RT #20720]
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews --- 9.7.0rc1 released ---
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews when it had changed. [RT #20703]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews2805. [bug] Fixed namespace problems encountered when building
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews external programs using non-exported BIND9 libraries
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews (i.e., built without --enable-exportlib). [RT #20679]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews or as a result of a scheduled key change. [RT #20700]
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews and genrandom under windows. [RT #20670]
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews2801. [func] Detect and report records that are different according
824cb6567555af556d0963d961798483d252eb5fMark Andrews to DNSSEC but are semantically equal according to plain
895ae38da194143331d667289affd3b43c5bfc14Mark Andrews DNS. Apply plain DNS comparisons rather than DNSSEC
824cb6567555af556d0963d961798483d252eb5fMark Andrews comparisons when processing UPDATE requests.
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews dnssec-signzone now removes such semantically duplicate
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews records prior to signing the RRset.
58ea8fb1dfc8c055a7d4ad74d65e345436ede790Mark Andrews named-checkzone -r {ignore|warn|fail} (default warn)
58ea8fb1dfc8c055a7d4ad74d65e345436ede790Mark Andrews named-compilezone -r {ignore|warn|fail} (default warn)
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews named.conf: check-dup-records {ignore|warn|fail};
6769ce7c7b38ae31887203aa1770692b3be92705Tatuya JINMEI 神明達哉2800. [func] Reject zones which have NS records which refer to
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews CNAMEs, DNAMEs or don't have address record (class IN
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews only). Reject UPDATEs which would cause the zone
f041bef2c60a092ab4dcae475451729a5345830fMark Andrews to fail the above checks if committed. [RT #20678]
a7dd5f21e996b01262a3d564dae9561cb3f8e717Mark Andrews2799. [cleanup] Changed the "secure-to-insecure" option to
a7dd5f21e996b01262a3d564dae9561cb3f8e717Mark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
92d23165938a5e595f80b2e3fb5d8cb918ac7dacMark Andrews to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews2798. [bug] Addressed bugs in managed-keys initialization
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews and rollover. [RT #20683]
289ae548d52bc8f982d9823af64cafda7bd92232Mark Andrews2797. [bug] Don't decrement the dispatch manager's maxbuffers.
4cf228853d658a742a826393f341e2486c629f7bMark Andrews2796. [bug] Missing dns_rdataset_disassociate() call in
4cf228853d658a742a826393f341e2486c629f7bMark Andrews dns_nsec3_delnsec3sx(). [RT #20681]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
1672cc63c190e073706a742ebaabc20ac4d2c916Mark Andrews log messages. [RT #18889]
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews2794. [bug] Install <isc/namespace.h>. [RT #20677]
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews2793. [func] Add "autosign" and "metadata" tests to the
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews automatic tests. [RT #19946]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2792. [func] "filter-aaaa-on-v4" can now be set in view
5de1ad63735deb0ea86b2d0a9366eddf5fbeddc1Mark Andrews options (if compiled in). [RT #20635]
a1210da03636eca13c70502a2b132ead22481b70Mark Andrews2791. [bug] The installation of isc-config.sh was broken.
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews2790. [bug] Handle DS queries to stub zones. [RT #20440]
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews2788. [bug] dnssec-signzone could sign with keys that were
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews not requested [RT #20625]
7c0946e74be897d02aaaf980ac146bcb500c2c8cMark Andrews2787. [bug] Spurious log message when zone keys were
7c0946e74be897d02aaaf980ac146bcb500c2c8cMark Andrews dynamically reconfigured. [RT #20659]
09cbf84907de2bd088b4ce8bd1307938bf0e81baMark Andrews2786. [bug] Additional could be promoted to answer. [RT #20663]
9e2789fd70b954df426b80301b62388497692481Mark Andrews --- 9.7.0b3 released ---
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews2784. [bug] TC was not always being set when required glue was
8af4bf165e9a6aa111e0b6bfcbcc7f4a741a8ae5Mark Andrews dropped. [RT #20655]
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews buffer size of 512 or less. [RT #20654]
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews2782. [port] win32: use getaddrinfo() for hostname lookups.
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews2781. [bug] Inactive keys could be used for signing. [RT #20649]
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews2780. [bug] dnssec-keygen -A none didn't properly unset the
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews activation date in all cases. [RT #20648]
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews2779. [bug] Dynamic key revocation could fail. [RT #20644]
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews2778. [bug] dnssec-signzone could fail when a key was revoked
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews without deleting the unrevoked version. [RT #20638]
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
e3582ce43119a95448ccc06ea2586f6547c92967Mark Andrews2776. [bug] Change #2762 was not correct. [RT #20647]
2952abf7cbbba6c6f821ee18579ca29d87549574Mark Andrews2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
efb82ed87e916c82b481bee4aa6651f2dbd4cedaMark Andrews in dnssec-keyfromlabel. [RT #20643]
7c693bfdbe488ca8fa4f0831c71f5809972f6cc7Mark Andrews2774. [bug] Existing cache DB wasn't being reused after
7c693bfdbe488ca8fa4f0831c71f5809972f6cc7Mark Andrews reconfiguration. [RT #20629]
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews2773. [bug] In autosigned zones, the SOA could be signed
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews with the KSK. [RT #20628]
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews2772. [security] When validating, track whether pending data was from
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews the additional section or not and only return it if
2113dfd6e20a9ca16000ed226517b4660087c1f2Mark Andrews validates as secure. [RT #20438]
2113dfd6e20a9ca16000ed226517b4660087c1f2Mark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews corrupted when importing from key files [RT #20624]
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews2770. [cleanup] Add log messages to resolver.c to indicate events
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews causing FORMERR responses. [RT #20526]
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews2769. [cleanup] Change #2742 was incomplete. [RT #19589]
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews2767. [bug] named could crash on startup if a zone was
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews configured with auto-dnssec and there was no
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews key-directory. [RT #20615]
240e57ab983296e6d52031a594d3345728191b48Mark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
240e57ab983296e6d52031a594d3345728191b48Mark Andrews socketmgr state if the socket is not pending on a
240e57ab983296e6d52031a594d3345728191b48Mark Andrews read or write. [RT #20603]
cdb674387ca19dc8550553d90d8f9731befb6f1fMark Andrews2765. [bug] Skip masters for which the TSIG key cannot be found.
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews2762. [bug] DLV validation failed with a local slave DLV zone.
d4f5efb4d63e2e17081a49a3457f05fe06fbb5abMark Andrews2761. [cleanup] Enable internal symbol table for backtrace only for
e560f615b2592deea69c49bfc74acbb56f4fd913Mark Andrews systems that are known to work. Currently, BSD
e560f615b2592deea69c49bfc74acbb56f4fd913Mark Andrews variants, Linux and Solaris are supported. [RT# 20202]
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews2759. [doc] Add information about .jbk/.jnw files to
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews the ARM. [RT #20303]
f34249bb28093d6589196cd00ca040f503a65e2bMark Andrews2758. [bug] win32: Added a workaround for a windows 2008 bug
dbfc2232ef5b6e5572480070ab87a4d67c18aa39Mark Andrews that could cause the UDP client handler to shut
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews down. [RT #19176]
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews2757. [bug] dig: assertion failure could occur in connect
393e4679cf4dd8bafb031d8a61ece95af61fbedcMark Andrews timeout. [RT #20599]
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews2755. [placeholder]
431fd1b0b5c3c049f9397ed4be8915715ead9cdbMark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
431fd1b0b5c3c049f9397ed4be8915715ead9cdbMark Andrews was signed with NSEC3. [RT #20587]
cc7d91bd5c6b9be5a3c67a99112b885602c24873Mark Andrews2753. [bug] Removed an unnecessary warning that could appear when
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews building an NSEC chain. [RT #20589]
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews2752. [bug] Locking violation. [RT #20587]
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
3b572928731d3595990fe360c80977a2d043eb02Tatuya JINMEI 神明達哉2750. [bug] dig: assertion failure could occur when a server
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews didn't have an address. [RT #20579]
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews2749. [bug] ixfr-from-differences generated a non-minimal ixfr
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews for NSEC3 signed zones. [RT #20452]
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews as referrals. [RT #18884]
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews2747. [bug] Journal roll forwards failed to set the re-signing
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews time of RRSIGs correctly. [RT #20541]
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews2746. [port] hpux: address signed/unsigned expansion mismatch of
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews2745. [bug] configure script didn't probe the return type of
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews gai_strerror(3) correctly. [RT #20573]
0b5d8941bb41edbe1296619485c16df536ecc05fMark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews for a insecure delegation.
a34d19803a206febe10866394393ec1c09b28984Mark Andrews --- 9.7.0b2 released ---
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews2742. [cleanup] Clarify some DNSSEC-related log messages in
2db8db63992d081c75d664340866e2a21913705dMark Andrews2741. [func] Allow the dnssec-keygen progress messages to be
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews suppressed (dnssec-keygen -q). Automatically
2db8db63992d081c75d664340866e2a21913705dMark Andrews suppress the progress messages when stdin is not
2db8db63992d081c75d664340866e2a21913705dMark Andrews a tty. [RT #20474]
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews2740. [placeholder]
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews2739. [cleanup] Clean up API for initializing and clearing trust
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews anchors for a view. [RT #20211]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
8626c376a038da969de1ee6c158957dfe638daacMark Andrews test. [RT #20453]
c6ee5082db1e40ab64e08a540620da79996efa9cTatuya JINMEI 神明達哉2737. [func] UPDATE requests can leak existence information.
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews2736. [func] Improve the performance of NSEC signed zones with
9a6522317c97e5487cea816173f63a0e5b4e428aTatuya JINMEI 神明達哉 more than a normal amount of glue below a delegation.
78ff0e94eae96f2cf8bf94454d8ff01ba280d30dMark Andrews2735. [bug] dnssec-signzone could fail to read keys
5a9efbf6bf951267e0844990f5b2cb69f5d5f01fTatuya JINMEI 神明達哉 that were specified on the command line with
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews full paths, but weren't in the current
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews directory. [RT #20421]
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews2734. [port] cygwin: arpaname did not compile. [RT #20473]
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews2732. [func] Add optional filter-aaaa-on-v4 option, available
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews if built with './configure --enable-filter-aaaa'.
d79296d147cd4c35784dd3efd7ed7f09d976ee61Mark Andrews Filters out AAAA answers to clients connecting
d79296d147cd4c35784dd3efd7ed7f09d976ee61Mark Andrews via IPv4. (This is NOT recommended for general
4f5a43c5f084290054ddf212add7b4c2abe6edc5Tatuya JINMEI 神明達哉 use.) [RT #20339]
46390a96dd5f15c9a0b3663bdb7791bdecec3052Mark Andrews2731. [func] Additional work on change 2709. The key parser
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews will now ignore unrecognized fields when the
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews minor version number of the private key format
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews has been increased. It will reject any key with
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews the major version number increased. [RT #20310]
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews2730. [func] Have dnssec-keygen display a progress indication
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews a la 'openssl genrsa' on standard error. Note
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews when the first '.' is followed by a long stop
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews one has the choice between slow generation vs.
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews TTL. [RT #20451]
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
15bda409010cbf2d3e43baf10f28bae5f7b1abefMark Andrews dnssec-signzone now warn immediately if asked to
15bda409010cbf2d3e43baf10f28bae5f7b1abefMark Andrews write into a nonexistent directory. [RT #20278]
b5205d860b1672c405c57004e6823af873799b42Mark Andrews2727. [func] The 'key-directory' option can now specify a relative
b5205d860b1672c405c57004e6823af873799b42Mark Andrews path. [RT #20154]
9a1e8f1baf3e5c53d6b6bfa97d7f60cb3358e404Mark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews RSASHA256 and RSASHA512. [RT #20023]
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews2725. [doc] Added information about the file "managed-keys.bind"
12b1bf8b14ac3b6ec4de9cae6fea10f389b5e5dbMark Andrews to the ARM. [RT #20235]
12b1bf8b14ac3b6ec4de9cae6fea10f389b5e5dbMark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews were failing. [RT #20448]
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews isc_base64_totext(), didn't always mark regions of
529035492ea0a427cc8d007cd743934d4494d9d3Mark Andrews memory as fully consumed after conversion. [RT #20445]
ff6bd86d5778de50cb1b4e93591e22354062ee17Mark Andrews2722. [bug] Ensure that the memory associated with the name of
11e43ff752bab2983d9328b6624bbcef613a93e1Mark Andrews a node in a rbt tree is not altered during the life
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews of the node. [RT #20431]
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews2721. [port] Have dst__entropy_status() prime the random number
cd6d8d61b076eea02826596334a105b918393627Mark Andrews generator. [RT #20369]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2720. [bug] RFC 5011 trust anchor updates could trigger an
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews incorrect. [RT #20394]
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews the last private type record was removed as a result
5c45d30402af6860e1f66f5aa7d78dff58373b27Mark Andrews of completing the signing the zone with a key.
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews --- 9.7.0b1 released ---
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews2715. [bug] Require OpenSSL support to be explicitly disabled.
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews2713. [bug] powerpc: atomic operations missing asm("ics") /
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews __isync() calls.
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews to be fully automated in zones configured for
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews dynamic DNS. 'auto-dnssec allow;' permits a zone
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews to be signed by creating keys for it in the
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr key-directory and using 'rndc sign <zone>'.
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr 'auto-dnssec maintain;' allows that too, plus it
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr also keeps the zone's DNSSEC keys up to date
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews according to their timing metadata. [RT #19943]
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews build. [RT #20372]
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins zone option cause a zone to be signed with only KSKs
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins signing the DNSKEY RRset, not ZSKs. This reduces
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins the size of a DNSKEY answer. [RT #20340]
f19353d73186913a6e0f0f766c1f72e5f4c5e9e1Tatuya JINMEI 神明達哉2709. [func] Added some data fields, currently unused, to the
f19353d73186913a6e0f0f766c1f72e5f4c5e9e1Tatuya JINMEI 神明達哉 private key file format, to allow implementation
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews of explicit key rollover in a future release
84910d09ee8244027c7031e03999bc60a3d63adbMark Andrews without impairing backward or forward compatibility.
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews update are now fully supported and no longer require
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews defines to enable. We now no longer overload the
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews apex. Secure to insecure changes are controlled by
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews by the named.conf option 'secure-to-insecure'.
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews Warning: If you had previously enabled support by
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews adding defines at compile time to BIND 9.6 you should
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews ensure that all changes that are in progress have
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews is not backwards compatible.
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews2707. [func] dnssec-keyfromlabel no longer require engine name
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews to be specified in the label if there is a default
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews engine or the -E option has been used. Also, it
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews now uses default algorithms as dnssec-keygen does
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews trigger an assert. [RT #20368]
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews2705. [placeholder]
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews2704. [bug] Serial of dynamic and stub zones could be inconsistent
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews with their SOA serial. [RT #19387]
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews for all binaries which can take benefit of
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews crypto hardware. [RT #20230]
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
daba3af103617ce4dd49bfdd0d9e07df7f22d08dMark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews supported TSIG key algorithm. [RT #18046]
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews2699. [bug] Missing lock in rbtdb.c. [RT #20037]
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews2698. [placeholder]
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews S_IFREG are defined after including <isc/stat.h>.
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews2696. [bug] named failed to successfully process some valid
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews acl constructs. [RT #20308]
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews callback functon for isc_socket_fdwatchcreate)
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews to include information about the direction (read
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews or write) and add isc_socket_fdwatchpoke.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
7042126e8a10315255144989f7723f0510558928Mark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
2c4ae1d331c98beba03a337a58e9b44aec98d663Mark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews chain when re-signing a previously-signed zone.
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews Use -u to modify NSEC3 parameters or switch
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews between NSEC and NSEC3. [RT #20304]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews2689. [bug] Correctly handle snprintf result. [RT #20306]
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews to decide to fetch the destination address. [RT #20305]
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews Also, added warnings when revoking a ZSK, as this is
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews not defined by protocol (but is legal). [RT #19943]
d00e58d4814b45c13434721b5771782e485dcb73Mark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews signing with NSEC3 and vice versa. [RT #20301]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews +adflag and +cdflag. [RT #19305]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews the NSEC3 parameters used to sign the zone change.
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews2682. [bug] "configure --enable-symtable=all" failed to
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews build. [RT #20282]
6e373c502584f9292e964378411d296c8259026bMark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
6e373c502584f9292e964378411d296c8259026bMark Andrews decoded. [RT #20269]
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews format. [RT #20031]
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews was set. [RT #20258]
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews2677. [func] Changes to key metadata behavior:
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews - Keys without "publish" or "active" dates set will
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews no longer be used for smart signing. However,
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews those dates will be set to "now" by default when
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews a key is created; to generate a key but not use
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews it yet, use dnssec-keygen -G.
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews sets the time when a key is no longer used for
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews signing but is still published.
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews - The "unpublished" date (-U) is deprecated in
d140ae28347065500e7efb1ebe884f1606f9ac7bMark Andrews favour of "deleted" (-D).
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews2676. [bug] --with-export-installdir should have been
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews --with-export-includedir. [RT #20252]
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews2675. [bug] dnssec-signzone could crash if the key directory
cf029c9369548e598379490a039cfbc2b83527eeMark Andrews did not exist. [RT #20232]
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews --- 9.7.0a3 released ---
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2674. [bug] "dnssec-lookaside auto;" crashed if named was built
c9eaf357a31ea5eaeeed24f2f4e800a6ef9512e0Mark Andrews without openssl. [RT #20231]
3fc7753efdc33559978ce61785961b1305944077Mark Andrews2673. [bug] The managed-keys.bind zone file could fail to
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews load due to a spurious result from sync_keyzone()
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews2672. [bug] Don't enable searching in 'host' when doing reverse
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews lookups. [RT #20218]
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews2671. [bug] Add support for PKCS#11 providers not returning
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews the public exponent in RSA private keys
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews (OpenCryptoki for instance) in
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews dnssec-keyfromlabel. [RT #19294]
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews2670. [bug] Unexpected connect failures failed to log enough
a957b9ccdccf519018e06213a27e1b70b8dc4640Mark Andrews information to be useful. [RT #20205]
4ff0e3c8afbbbc30473701c47d75e1d7829bae3eMark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed Update PKCS#11 patch to be against openssl-0.9.8i.
9a33e2d135b0de7d2e2d768f2b9c45b2627fe4e6Mark Andrews2668. [func] Several improvements to dnssec-* tools, including:
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews - dnssec-keygen and dnssec-settime can now set key
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews metadata fields 0 (to unset a value, use "none")
94b58e01ae98764a045e18581d7aaf05d2889e60Mark Andrews - dnssec-revoke sets the revocation date in
94b58e01ae98764a045e18581d7aaf05d2889e60Mark Andrews addition to the revoke bit
94b58e01ae98764a045e18581d7aaf05d2889e60Mark Andrews - dnssec-settime can now print individual metadata
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews fields instead of always printing all of them,
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews and can print them in unix epoch time format for
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews use by scripts
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews2667. [func] Add support for logging stack backtrace on assertion
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews failure (not available for all platforms). [RT #19780]
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews (API change from 9.7.0a2). [RT #20196]
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews ARM documentation about RFC 5011 support. [RT #19874]
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews2664. [bug] create_keydata() and minimal_update() in zone.c
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews didn't properly check return values for some
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews functions. [RT #19956]
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews2663. [func] win32: allow named to run as a service using
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews returned a misleading error code when lwresd was
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews down. [RT #20028]
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews creating lwres context. [RT #20029]
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews applications. See README.libdns. [RT #19369]
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews name for DNSSEC keys. [RT #19938]
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews key file paths correctly. [RT #20078]
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews log level to debug 1. [RT #20058]
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews2656. [func] win32: add a "tools only" check box to the installer
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews which causes it to only install dig, host, nslookup,
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews nsupdate and relevant DLLs. [RT #19998]
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews2655. [doc] Document that key-directory does not affect
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews bind.keys, rndc.key or session.key. [RT #20155]
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews2654. [bug] Improve error reporting on duplicated names for
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews deny-answer-xxx. [RT #20164]
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews not found rather than out of memory. [RT #18033]
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews2652. [func] Provide more detail about what record is being
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews deleted. [RT #20061]
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews2651. [bug] Dates could print incorrectly in K*.key files on
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews 64-bit systems. [RT #20076]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2650. [bug] Assertion failure in dnssec-signzone when trying
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews to read keyset-* files. [RT #20075]
2a90390deeff6ba07125bfb2c81ab4b582eb2777Mark Andrews2649. [bug] Set the domain for forward only zones. [RT #19944]
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
01db0feafa67200a07ff8f81dde9029f675bbb5cMark Andrews2647. [bug] Remove unnecessary SOA updates when a new KSK is
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews added. [RT #19913]
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews which default to 64 bits. [RT #19927]
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews --- 9.7.0a2 released ---
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews2644. [bug] Change #2628 caused a regression on some systems;
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews named was unable to write the PID file and would
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews fail on startup. [RT #20001]
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews2642. [bug] nsupdate could dump core on solaris when reading
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews improperly formatted key files. [RT #20015]
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews added a regression test to check it. [RT #20007]
7d116211ec7b063891130f191e3ed437b45dba70Mark Andrews2640. [security] A specially crafted update packet will cause named
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews to exit. [RT #20000]
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews2638. [bug] Install arpaname. [RT #19957]
eba8a27e55258ee4470d7c3caa6bb3a335b9731eMark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
8af4e7aa4e2a6fe84bf4ebe09ca1d4ef1d8ab593Mark Andrews2636. [func] Simplify zone signing and key maintenance with the
d08c5dfcd4d1f69004c1382ffc00cc1848dcd1a3Mark Andrews dnssec-* tools. Major changes:
d08c5dfcd4d1f69004c1382ffc00cc1848dcd1a3Mark Andrews - all dnssec-* tools now take a -K option to
982a2cfef37a39842ff53dc2e00b947c554fa78eTatuya JINMEI 神明達哉 specify a directory in which key files will be
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews - DNSSEC can now store metadata indicating when
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews they are scheduled to be published, activated,
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews revoked or removed; these values can be set by
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews dnssec-keygen or overwritten by the new
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews dnssec-settime command
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews - dnssec-signzone -S (for "smart") option reads key
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews metadata and uses it to determine automatically
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews which keys to publish to the zone, use for
e24089c5c33f31a39cea0123765165fa31308343Tatuya JINMEI 神明達哉 signing, revoke, or remove from the zone
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews2634. [port] win32: Add support for libxml2, enable
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews statschannel. [RT #19773]
7c61d798f54f7c19f87d46a0df775e0e58fe7d30Mark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
e23932d3c8c154cff3fea0ecff64e26c6ac6f5d8Mark Andrews2632. [func] util/kit.sh: warn if documentation appears to be out of
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews date. [RT #19922]
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
885e60828681cecd17bccbe5ceff8f4e75ef4c5cMark Andrews [RT #19926 ]
8ec056723666c71a499880ffa415661f37ffd08eMark Andrews2630. [func] Improved syntax for DDNS autoconfiguration: use
037b732f88edc943f3141e0342dc993156e3abf3Mark Andrews "update-policy local;" to switch on local DDNS in a
80a609bf44ee09766aeb9ae02cfbf7f9fe86dd83Mark Andrews zone. (The "ddns-autoconf" option has been removed.)
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉2629. [port] Check for seteuid()/setegid(), use setresuid()/
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 setresgid() if not present. [RT #19932]
bd5c8a564b21781fe6b608fe6a75c2e7152200acTatuya JINMEI 神明達哉2628. [port] linux: Allow /var/run/named/named.pid to be opened
85708f9aabbfe31fc648c90258ae18ce0edc3488Mark Andrews at startup with reduced capabilities in operation.
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews2627. [bug] Named aborted if the same key was included in
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews trusted-keys more than once. [RT #19918]
cae2cb086244dfb883739edbe79e34756079f70eMark Andrews2626. [bug] Multiple trusted-keys could trigger an assertion
cf0bcc2c80ca99f1e6e53dcdd0eba03fe70723dfMark Andrews failure. [RT #19914]
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2624. [func] 'named-checkconf -p' will print out the parsed
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews configuration. [RT #18871]
03e200df5dc283f24a6a349f0b31d3eab26da893Mark Andrews2623. [bug] Named started searches for DS non-optimally. [RT #19915]
6672b3524c2305d8c66d8189c774f549be352ac0Mark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
74f261bd2b7846d8e730ca3a1b28d6503de5c74aMark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews2620. [bug] Delay thawing the zone until the reload of it has
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews completed successfully. [RT #19750]
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews maintenance. The new "managed-keys" statement can
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews be used in place of "trusted-keys" for zones which
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews support this protocol. (Note: this syntax is
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews loop infinitely. [RT #19847]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2617. [bug] ifconfig.sh failed to emit an error message when
a268fec7f54a89a0772a91da0511c8eae09e6157Mark Andrews run from the wrong location. [RT #19375]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews when a explicit nameserver was specified. [RT #19852]
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews2615. [bug] "__attribute__((unused))" was in the wrong place
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews for ia64 gcc builds. [RT #19854]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews2614. [port] win32: 'named -v' should automatically be executed
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews in the foreground. [RT #19844]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews2613. [placeholder]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews --- 9.7.0a1 released ---
74a14c4eb8518a9cc31cb5a918547a93d0c0e838Mark Andrews2612. [func] Add default values for the arguments to
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews dnssec-keygen. Without arguments, it will now
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews generate a 1024-bit RSASHA1 zone-signing key,
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews or with the -f KSK option, a 2048-bit RSASHA1
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews key-signing key. [RT #19300]
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews DLV records instead of DS records. [RT #19300]
7c678cfe0bd477ded2995b9490d72edf7bc76a84Mark Andrews2610. [port] sunos: Change #2363 was not complete. [RT #19796]
a20e888bde4b307050d76e09266b2fb49f03bc30Mark Andrews2609. [func] Simplify the configuration of dynamic zones:
a20e888bde4b307050d76e09266b2fb49f03bc30Mark Andrews - add ddns-confgen command to generate
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews configuration text for named.conf
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews - add zone option "ddns-autoconf yes;", which
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews causes named to generate a TSIG session key
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews and allow updates to the zone using that key
611ec5dd43d31fd6385f1a94c2f0865375f452b4Mark Andrews - add '-l' (localhost) option to nsupdate, which
611ec5dd43d31fd6385f1a94c2f0865375f452b4Mark Andrews causes nsupdate to connect to a locally-running
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews named process using the session key generated
8abe06b25d245ab2955d81525bfe6bd29b80908eMark Andrews2608. [func] Perform post signing verification checks in
8abe06b25d245ab2955d81525bfe6bd29b80908eMark Andrews dnssec-signzone. These can be disabled with -P.
7755f5932a3e59d0c6a2506cc94519de92b91ca6Mark Andrews The post sign verification test ensures that for each
7755f5932a3e59d0c6a2506cc94519de92b91ca6Mark Andrews algorithm in use there is at least one non revoked
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews self signed KSK key. That all revoked KSK keys are
b5ad6dfea4cc3e7d1d322ac99f1e5a31096837c4Mark Andrews self signed. That all records in the zone are signed
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews by the algorithm. [RT #19653]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2607. [bug] named could incorrectly delete NSEC3 records for
aa0f0779d1ea7150991c3e6eec1cc532086c13fdMark Andrews empty nodes when processing a update request.
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews2606. [bug] "delegation-only" was not being accepted in
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews delegation-only type zones. [RT #19717]
0563d476dea35a60a59857cc8bd26ef276d78799Mark Andrews2605. [bug] Accept DS responses from delegation only zones.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews [RT # 19296]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2604. [func] Add support for DNS rebinding attack prevention through
0bb7c66ef8e3e8740cbac4a4de607060dfc4d6c8Mark Andrews new options, deny-answer-addresses and
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews deny-answer-aliases. Based on contributed code from
2b3e34f03675d6c71a654fe2094f3b9c063a70eaMark Andrews JD Nurmi, Google. [RT #18192]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2603. [port] win32: handle .exe extension of named-checkzone and
7216566bd596f8fbc98eafd5e9359ec7fa92c8b8Mark Andrews named-comilezone argv[0] names under windows.
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews2602. [port] win32: fix debugging command line build of libisccfg.
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews2601. [doc] Mention file creation mode mask in the
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews named manual page.
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews2600. [doc] ARM: miscellaneous reformatting for different
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews page widths. [RT #19574]
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews2599. [bug] Address rapid memory growth when validation fails.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2598. [func] Reserve the -F flag. [RT #19657]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2597. [bug] Handle a validation failure with a insecure delegation
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews from a NSEC3 signed master/slave zone. [RT #19464]
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews long, leading to inefficient memory usage or rejecting
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews newer cache entries in the worst case. [RT #19563]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews2594. [func] Have rndc warn if using its default configuration
9b80f3a7c739a99b498a37a711a51b6a88df3a78Mark Andrews file when the key file also exists. [RT #19424]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
1425217e5c3a2cbab7f8344e600e0c16047289ffMark Andrews2591. [bug] named could die when processing a update in
d4d68515d23668cfe804ab2a174a7e427decedd8Mark Andrews removed_orphaned_ds(). [RT #19507]
e8e62bb7829e88fc56360f7edc021dc8493a8704Mark Andrews2590. [func] Report zone/class of "update with no effect".
e7fb847ed570dd8c1bcdacabb3d69bd81feb79aeMark Andrews2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews2588. [bug] SO_REUSEADDR could be set unconditionally after failure
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews of bind(2) call. This should be rare and mostly
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews harmless, but may cause interference with other
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews processes that happen to use the same port. [RT #19642]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews2587. [func] Improve logging by reporting serial numbers for
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews when zone serial has gone backwards or unchanged.
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews or SDB. [RT #19577]
1c153afce556ff3c687986fb7c4a0b0a7f5e7cd8Mark Andrews2585. [bug] Uninitialized socket name could be referenced via a
81bdad57bd2c0c4b9a0684fe6e222ba95da625ecMark Andrews statistics channel, triggering an assertion failure in
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews XML rendering. [RT #19427]
a5768d889b4e139e78f2b1d9433f3e9f8d225ff4Mark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews2583. [port] netbsd: provide a control to not add the compile
3d247992c4a500caa7703edaee68612e545af602Mark Andrews date to the version string, -DNO_VERSION_DATE.
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews2582. [bug] Don't emit warning log message when we attempt to
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews remove non-existent journal. [RT #19516]
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
cd5f6549b33bf2481538b77934d69313f452ff4bMark Andrews Requires MySQL 5.0.19 or later. [RT #19084]
05331ce161276d879711342fadbc6144af7f5ba6Mark Andrews2580. [bug] UpdateRej statistics counter could be incremented twice
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews for one rejection. [RT #19476]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews2579. [bug] DNSSEC lookaside validation failed to handle unknown
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews algorithms. [RT #19479]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews 65535 turns out to be reserved. [RT #19477]
2fa0485e9e969dd42dd10339354d7949db46111aMark Andrews2577. [doc] Clarified some statistics counters. [RT #19454]
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews2576. [bug] NSEC record were not being correctly signed when
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews a zone transitions from insecure to secure.
437404e8313481329baa5897eeda8c45bf748553Mark Andrews Handle such incorrectly signed zones. [RT #19114]
841fc0fd70881499b62f15e35980dd14b905ba45Mark Andrews2575. [func] New functions dns_name_fromstring() and
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews dns_name_tostring(), to simplify conversion
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews of a string to a dns_name structure and vice
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews versa. [RT #19451]
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews2574. [doc] Document nsupdate -g and -o. [RT #19351]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2573. [bug] Replacing a non-CNAME record with a CNAME record in a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein single transaction in a signed zone failed. [RT #19397]
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews2572. [func] Simplify DLV configuration, with a new option
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews "dnssec-lookaside auto;" This is the equivalent
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews of "dnssec-lookaside . trust-anchor dlv.isc.org;"
2941824604f9c5aa70f216d1f2941b3c59aa37dcMark Andrews plus setting a trusted-key for dlv.isc.org.
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews Note: The trusted key is hard-coded into named,
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews but is also stored in (and can be overridden
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews rolls over it can be kept up to date by replacing
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews the bind.keys file with a key downloaded from
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein2571. [func] Add a new tool "arpaname" which translates IP addresses
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews2570. [func] Log the destination address the query was sent to.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews "make install" will put them in $sbindir. [RT #19301]
40a547174fb7d14f74bc375f076c8c390498f68eMark Andrews2568. [bug] Report when the write to indicate a otherwise
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews successful start fails. [RT #19360]
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews2567. [bug] dst__privstruct_writefile() could miss write errors.
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews write_public_key() could miss write errors.
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews dnssec-dsfromkey could miss write errors.
d73541ea2eebe01cafc5ff1b2ba4b9a8f75237b1Mark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
46cb442c5c53f16ece23bfe7f7f7bf44f78b0e46Mark Andrews response arrives from a zone thought to be secure:
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews "insecurity proof failed" instead of "not
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews insecure". [RT #19400]
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews2565. [func] Add support for HIP record. Includes new functions
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews and dns_rdata_hip_current(). [RT #19384]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews2564. [bug] Only take EDNS fallback steps when processing timeouts.
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews to exit. [RT #19359]
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews and some new content.
d9ec2891475b8ed894a524a83370cfce30328569Mark Andrews2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
6e8a8077faf96d8da0b6cf738913f5f1f86e4008Mark Andrews2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews2559. [bug] dnssec-dsfromkey could compute bad DS records when
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews reading from a K* files. [RT #19357]
5a6874e4ed544186ccb8519765be8c3a1804e033Mark Andrews2558. [func] Set the ownership of missing directories created
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews for pid-file if -u has been specified on the command
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews line. [RT #19328]
c553b3308e34edfaddbec57b3308bbbe362ef715Mark Andrews2557. [cleanup] PCI compliance:
c553b3308e34edfaddbec57b3308bbbe362ef715Mark Andrews * new libisc log module file
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews * isc_dir_chroot() now also changes the working
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews directory to "/".
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews * additional INSISTs
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews * additional logging when files can't be removed.
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews error checks in the correct order resulting in the
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews wrong error code sometimes being returned. [RT #19249]
cb2d565b507027f9e5664fa7e167bb24faa7c8fbMark Andrews2555. [func] dig: when emitting a hex dump also display the
cb2d565b507027f9e5664fa7e167bb24faa7c8fbMark Andrews corresponding characters. [RT #19258]
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
1439214380abcc123e27a42d43a23ba441209ebeMark Andrews fail. [RT #19297]
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honoured.
52188225731669cd571984c45a1407a55c74ee78Mark Andrews2551. [bug] Potential Reference leak on return. [RT #19341]
52188225731669cd571984c45a1407a55c74ee78Mark Andrews2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
3cbc87c31f76262980d54ddbcdda7875be37b684Mark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews2548. [bug] Install iterated_hash.h. [RT #19335]
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews2547. [bug] openssl_link.c:mem_realloc() could reference an
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews out-of-range area of the source buffer. New public
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews function isc_mem_reallocate() was introduced to address
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews this bug. [RT #19313]
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews2546. [func] Add --enable-openssl-hash configure flag to use
d5af5bb38b9b2626b97626569adde258c8f6b808Mark Andrews OpenSSL (in place of internal routine) for hash
6d7007e807241ae0a32de8db8d3bf434626026eaMark Andrews functions (MD5, SHA[12] and HMAC). [RT #18815]
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews for SRV RDATA too. [RT #19304]
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews2542. [doc] Update the description of dig +adflag. [RT #19290]
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews2541. [bug] Conditionally update dispatch manager statistics.
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews2539. [security] Update the interaction between recursion, allow-query,
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews allow-query-cache and allow-recursion. [RT #19198]
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews especially with threads and smaller max-cache-size
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews values. [RT #19240]
4423c99613db1399dbb5c51e86ef0d351a1418c2Mark Andrews2537. [func] Added more statistics counters including those on socket
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews I/O events and query RTT histograms. [RT #18802]
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉2536. [cleanup] Silence some warnings when -Werror=format-security is
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 specified. [RT #19083]
6be278a81c24c6729aeaae4ba3a7ddd5030d8451Tatuya JINMEI 神明達哉2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
5cf023372424c1a59fda4a994e3c85c08c26e2f1Tatuya JINMEI 神明達哉2534. [func] Check NAPTR records regular expressions and
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews replacement strings to ensure they are syntactically
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews valid and consistant. [RT #18168]
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews2533. [doc] ARM: document @ (at-sign). [RT #17144]
073dfc245fd921958b1ccd869ed3471f828cf283Mark Andrews2532. [bug] dig: check the question section of the response to
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews see if it matches the asked question. [RT #18495]
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews2531. [bug] Change #2207 was incomplete. [RT #19098]
e9aca33f362d017fe0d5f7b729bce646038cf1eeMark Andrews2530. [bug] named failed to reject insecure to secure transitions
e9aca33f362d017fe0d5f7b729bce646038cf1eeMark Andrews via UPDATE. [RT #19101]
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews2529. [cleanup] Upgrade libtool to silence complaints from recent
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews version of autoconf. [RT #18657]
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews2528. [cleanup] Silence spurious configure warning about
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews --datarootdir [RT #19096]
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews2527. [placeholder]
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews2526. [func] New named option "attach-cache" that allows multiple
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews views to share a single cache to save memory and
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews improve lookup efficiency. Based on contributed code
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews from Barclay Osborn, Google. [RT #18905]
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews2525. [func] New logging category "query-errors" to provide detailed
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews internal information about query failures, especially
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews about server failures. [RT #19027]
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
28b65e6d0a03704f4faee88ebf5105addfa57968Mark Andrews2523. [bug] Random type rdata freed by dns_nsec_typepresent().
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
14a97c343bc3adb840b13d515a8298c18f15be52Mark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews2520. [bug] Update xml statistics version number to 2.0 as change
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews #2388 made the schema incompatible to the previous
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews version. [RT #19080]
7087b3dc9298e85909df7a10f83bbd0588310f0cMark Andrews2519. [bug] dig/host with -4 or -6 didn't work if more than two
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews nameserver addresses of the excluded address family
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews preceded in resolv.conf. [RT #19081]
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews2518. [func] Add support for the new CERT types from RFC 4398.
7502c6600645f120434d84d0ce3df7c3585cfe43Mark Andrews2517. [bug] dig +trace with -4 or -6 failed when it chose a
82572925f8942b599667bf47f22403f5dfd79ab9Mark Andrews nameserver address of the excluded address type.
c0a1ebb1adecc5da1f1ad6f9b06a2b4356d2b135Mark Andrews2516. [bug] glue sort for responses was performed even when not
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews needed. [RT #19039]
4834c6a7f0054b8f4a8a267d60ef78204521e39eMark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews a nameserver of the excluded address family.
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews2513. [bug] Fix windows cli build. [RT #19062]
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews2512. [func] Print a summary of the cached records which make up
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews the negative response. [RT #18885]
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews2509. [bug] Specifying a fixed query source port was broken.
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews2508. [placeholder]
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews2507. [func] Log the recursion quota values when killing the
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews oldest query or refusing to recurse due to quota.
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews2506. [port] solaris: Check at configure time if
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews hack_shutup_pthreadonceinit is needed. [RT #19037]
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews atomic operation support. [RT #19031]
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews2504. [bug] Address race condition in the socket code. [RT #18899]
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews2503. [port] linux: improve compatibility with Linux Standard
b68fe6c0fbfee1dc0659661993de5c6727b66c76Mark Andrews Base. [RT #18793]
136e739d0d7267a8ce72468233fa795359db62faMark Andrews2502. [cleanup] isc_radix: Improve compliance with coding style,
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews document function in <isc/radix.h>. [RT #18534]
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews2501. [func] $GENERATE now supports all rdata types. Multi-field
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews rdata types need to be quoted. See the ARM for
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews details. [RT #18368]
85bba08193debe026883d2d6bebbb0f7a01d7ba7Mark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews function. [RT #18582]
4091f8dfb71b78b53acd1b25f74e26c384750c03Mark Andrews2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
74ff5f080abdffa7823ff93da74969cd9fa25308Mark Andrews --- 9.6.0rc1 released ---
a10ae596379471b0dc76ebd8025d91bf2b90bafcMark Andrews2498. [bug] Removed a bogus function argument used with
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews ISC_SOCKET_USE_POLLWATCH: it could cause compiler
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews warning or crash named with the debug 1 level
d5f13fecca944fc7229dac3215581cebec3ac314Mark Andrews of logging. [RT #18917]
d844741f5516bce45f8897435342731edb2307cbMark Andrews2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews2496. [bug] Add sanity length checks to NSID option. [RT #18813]
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews installed. [RT #18826]
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews2493. [bug] The linux capabilities code was not correctly cleaning
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews up after itself. [RT #18767]
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews2492. [func] Rndc status now reports the number of cpus discovered
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews and the number of worker threads when running
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews multi-threaded. [RT #18273]
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews2491. [func] Attempt to re-use a local port if we are already using
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews the port. [RT #18548]
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews is cleared when IPV6_V6ONLY is set. [RT #18785]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2489. [port] solaris: Workaround Solaris's kernel bug about
4c8df3b2e8858e97debfe3fb771fe03f22b04d1eMark Andrews http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
6c52944ef2281095d1c317a45ea013b8f3cfa135Mark Andrews Define ISC_SOCKET_USE_POLLWATCH at build time to enable
6c52944ef2281095d1c317a45ea013b8f3cfa135Mark Andrews this workaround. [RT #18870]
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews from keyset and .key files. [RT #18694]
dd95acdbce0e2a2775391709cdfca0a9eda7e8f7Mark Andrews2487. [bug] Give TCP connections longer to complete. [RT #18675]
c5eebaf6f1311662f8120a8b560e2dbbfd5c92e8Mark Andrews2486. [func] The default locations for named.pid and lwresd.pid
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews This allows the owner of the containing directory
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews to be set, for "named -u" support, and allows there
af4b677e0de9c4ce67a5187039681a58f73b86eaMark Andrews to be a permanent symbolic link in the path, for
3aca8e5bf3740bbcc3bb13dde242d7cc369abb27Mark Andrews "named -t" support. [RT #18306]
4d86cda3d7eb31578c9088c51a26643d43799533Mark Andrews2485. [bug] Change update's the handling of obscured RRSIG
cbfce73e8e020c1d08c7be7b48a849d8333eb9bfMark Andrews records. Not all orphaned DS records were being
84a5b69f0029952e33c96695f0a7d26c2bb8f7ccMark Andrews removed. [RT #18828]
e9e869569a92c4b1d5339d3bfb22232e5b401db1Mark Andrews2484. [bug] It was possible to trigger a REQUIRE failure when
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews adding NSEC3 proofs to the response in
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews query_addwildcardproof(). [RT #18828]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2483. [port] win32: chroot() is not supported. [RT #18805]
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews2482. [port] libxml2: support versions 2.7.* in addition
783707ee556191b974e951f04accf09f443f5fdfMark Andrews to 2.6.*. [RT #18806]
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews --- 9.6.0b1 released ---
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews collisions. [RT #18812]
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews2480. [bug] named could fail to emit all the required NSEC3
fed3d5c2fc3fa8e1547e8b5c28c01f1095e17e5fMark Andrews records. [RT #18812]
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews2478. [bug] 'addresses' could be used uninitialized in
21094b43a2dc4e1f569a9ed894f5369470cd1a7fMark Andrews configure_forward(). [RT #18800]
b03a31d98f1cf42414d321c742c9fc04be75b32bMark Andrews2477. [bug] dig: the global option to print the command line is
81e6a5849d61c2e710d628cf9a7b7282eaa88c46Mark Andrews +cmd not print_cmd. Update the output to reflect
81e6a5849d61c2e710d628cf9a7b7282eaa88c46Mark Andrews this. [RT #17008]
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews2476. [doc] ARM: improve documentation for max-journal-size and
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
ad98a8699371c9c449982fbbd8ceda91ad745f2aMark Andrews2475. [bug] LRU cache cleanup under overmem condition could purge
ad98a8699371c9c449982fbbd8ceda91ad745f2aMark Andrews particular entries more aggressively. [RT #17628]
c1807114ce574896694e3f449c73b098fe91730fMark Andrews2474. [bug] ACL structures could be allocated with insufficient
c1807114ce574896694e3f449c73b098fe91730fMark Andrews space, causing an array overrun. [RT #18765]
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews2473. [port] linux: raise the limit on open files to the possible
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews maximum value before spawning threads; 'files'
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews specified in named.conf doesn't seem to work with
055597532db52233e80f617b8b015e8caadcb577Mark Andrews threads as expected. [RT #18784]
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews2472. [port] linux: check the number of available cpu's before
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews calling chroot as it depends on "/proc". [RT #16923]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews2471. [bug] named-checkzone was not reporting missing mandatory
055597532db52233e80f617b8b015e8caadcb577Mark Andrews glue when sibling checks were disabled. [RT #18768]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews2470. [bug] Elements of the isc_radix_node_t could be incorrectly
055597532db52233e80f617b8b015e8caadcb577Mark Andrews overwritten. [RT# 18719]
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews2469. [port] solaris: Work around Solaris's select() limitations.
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews2468. [bug] Resolver could try unreachable servers multiple times.
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
9076b18608d8e5cfff8fac54ef82853371fdd0d6Mark Andrews2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews2465. [bug] Adb's handling of lame addresses was different
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews for IPv4 and IPv6. [RT #18738]
411c61d6fbf5a27c78650b9a1b3c69ac2640c929Mark Andrews2464. [port] linux: check that a capability is present before
3c20ae76389dd7bd2fbbb5145f51fe7f72f97f14Mark Andrews trying to set it. [RT #18135]
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews API and glibc hides parts of the IPv6 Advanced Socket
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews API as a result. This is stupid as it breaks how the
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews two halves (Basic and Advanced) of the IPv6 Socket API
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews were designed to be used but we have to live with it.
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews API. [RT #18388]
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews2462. [doc] Document -m (enable memory usage debugging)
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews option for dig. [RT #18757]
5ec95dc3cbba160d03be874941930bdf3e515bbdMark Andrews2461. [port] sunos: Change #2363 was not complete. [RT #17513]
31affb2ca39c483670ba71042ce4c984ac257232Mark Andrews --- 9.6.0a1 released ---
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews2458. [doc] ARM: update and correction for max-cache-size.
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews2457. [tuning] max-cache-size is reverted to 0, the previous
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews default. It should be safe because expired cache
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews entries are also purged. [RT #18684]
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
fb827ed6df9a473770fb69a75a455b4ad0d14f52Mark Andrews address, regardless of family. They now correctly
ca155b13211202a6195b5a0f085aff06075c4300Mark Andrews distinguish IPv4 from IPv6. [RT #18559]
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews2455. [bug] Stop metadata being transferred via axfr/ixfr.
110fbe3a1315b38f1491546d82937a01c40f5fdbMark Andrews2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews2453. [bug] Remove NULL pointer dereference in dns_journal_print().
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews2452. [func] Improve bin/test/journalprint. [RT #18316]
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews2451. [port] solaris: handle runtime linking better. [RT #18356]
bce2d35b4879d7878e339a9c60db9364508e38fdMark Andrews2450. [doc] Fix lwresd docbook problem for manual page.
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews2449. [placeholder]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews2448. [func] Add NSEC3 support. [RT #15452]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews2447. [cleanup] libbind has been split out as a separate product.
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews2446. [func] Add a new log message about build options on startup.
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews A new command-line option '-V' for named is also
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews provided to show this information. [RT# 18645]
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews2445. [doc] ARM out-of-date on empty reverse zones (list includes
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews RFC1918 address, but these are not yet compiled in).
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews (clear DF) for UDP responses and requests.
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews2443. [bug] win32: UDP connect() would not generate an event,
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews and so connected UDP sockets would never clean up.
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews Fix this by doing an immediate WSAConnect() rather
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews than an io completion port type for UDP.
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews2442. [bug] A lock could be destroyed twice. [RT# 18626]
4f32995bf6af48ab410b6d14b160348f5ffe0556Mark Andrews2441. [bug] isc_radix_insert() could copy radix tree nodes
a4743d3d26c4dde69b80fd69bca83e0c28063425Mark Andrews incompletely. [RT #18573]
817a7fb62d05222fb287bbcde910ab3669f6d237Mark Andrews2440. [bug] named-checkconf used an incorrect test to determine
ac86cff0d7ff2108cd7ace66697e2de104735496Mark Andrews if an ACL was set to none.
2a71a21346ce6a098b7daf98358d5bdced8e6eb6Mark Andrews2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
a90cf89180ae8d9dfd281288cdc75940e46bfdd0Mark Andrews2438. [bug] Timeouts could be logged incorrectly under win32.
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews2437. [bug] Sockets could be closed too early, leading to
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews inconsistent states in the socket module. [RT #18298]
fa901545edc8bb62969121e14199d533a40d0b61Tatuya JINMEI 神明達哉2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
9cc53f2a0819301c2de7ab93197eee11e8a365e7Mark Andrews2435. [bug] Fixed an ACL memory leak affecting win32.
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews2434. [bug] Fixed a minor error-reporting bug in
3bb3c75ebcf3a798d33a5c439b997e1f37910501Mark Andrews2433. [tuning] Set initial timeout to 800ms.
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews2432. [bug] More Windows socket handling improvements. Stop
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews using I/O events and use IO Completion Ports
a1ed9109a60911df561628e49c5c29e3b0506801Mark Andrews throughout. Rewrite the receive path logic to make
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews it easier to support multiple simultaneous
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews requesters in the future. Add stricter consistency
825fccf631aa71cfbb8bfcf4e2009ca21de28f36Mark Andrews checking as a compile-time option (define
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
d0deea590e6e175c77f9b5f972fea3fc7a63577aMark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
689023771c563d8660e45d439a207e06e96de28fMark Andrews2430. [bug] win32: isc_interval_set() could round down to
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews zero if the input was less than NS_INTERVAL
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews nanoseconds. Round up instead. [RT #18549]
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews2429. [doc] nsupdate should be in section 1 of the man pages.
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews2428. [bug] dns_iptable_merge() mishandled merges of negative
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews tables. [RT #18409]
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉 was set. [RT #18528]
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews2426. [bug] libbind: inet_net_pton() can sometimes return the
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews wrong value if excessively large net masks are
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews supplied. [RT #18512]
7f2a6b0ef762b4cef9b0b2b59e7f44e4d2d4d32dMark Andrews2425. [bug] named didn't detect unavailable query source addresses
7f2a6b0ef762b4cef9b0b2b59e7f44e4d2d4d32dMark Andrews at load time. [RT #18536]
b712879fcb6d584bb16b3f39ec1fb6ee176e4a03Mark Andrews2424. [port] configure now probes for a working epoll
b712879fcb6d584bb16b3f39ec1fb6ee176e4a03Mark Andrews implementation. Allow the use of kqueue,
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews epoll and /dev/poll to be selected at compile
f697150aefb5d64e5bed4111aa2596a268ee8848Mark Andrews time. [RT #18277]
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews2423. [security] Randomize server selection on queries, so as to
9baab4b1a8a5a54c04e47742c7b48311d5575a87Mark Andrews make forgery a little more difficult. Instead of
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews always preferring the server with the lowest RTT,
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews pick a server with RTT within the same 128
c0d2891f6e08fcf5379dfb9a1bf8fbbb63f1952aMark Andrews millisecond band. [RT #18441]
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews2422. [bug] Handle the special return value of a empty node as
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews if it was a NXRRSET in the validator. [RT #18447]
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews2421. [func] Add new command line option '-S' for named to specify
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews the max number of sockets. [RT #18493]
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews Use caution: this option may not work for some
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews operating systems without rebuilding named.
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews2420. [bug] Windows socket handling cleanup. Let the io
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews completion event send out canceled read/write
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews done events, which keeps us from writing to memory
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews we no longer have ownership of. Add debugging
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews socket_log() function. Rework TCP socket handling
351696ef9e44e31e200afc0b019f24af6b597471Rob Austein to not leak sockets.
1672cff96d0b02badab6f94524e10285dde851fcMark Andrews2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
1672cff96d0b02badab6f94524e10285dde851fcMark Andrews should not be used for isc_sockettype_fdwatch sockets.
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
c5a84548b24ffac37d0154d8f2f4fea36a3aeb23Mark Andrews2417. [bug] Connecting UDP sockets for outgoing queries could
9aa7706900e2451fcd6e44ffe4a45b042ec34cf3Mark Andrews unexpectedly fail with an 'address already in use'
9aa7706900e2451fcd6e44ffe4a45b042ec34cf3Mark Andrews error. [RT #18411]
c4f9e613e12f03795bee18cf2ca8e6a9d39d6468Mark Andrews2416. [func] Log file descriptors that cause exceeding the
3b2032121d6e8ae1f4ad24b31a69e1a4b33c91a0Mark Andrews internal maximum. [RT #18460]
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews2415. [bug] 'rndc dumpdb' could trigger various assertion failures
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews in rbtdb.c. [RT #18455]
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews2414. [bug] A masterdump context held the database lock too long,
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews causing various troubles such as dead lock and
7de69feda2f66658ce66a8700d64ffb88d47bb6aMark Andrews recursive lock acquisition. [RT #18311, #18456]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews2412. [bug] win32: address a resource leak. [RT #18374]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
bb3e43000807197e776407fd8d524a87dcc17a10Mark Andrews at compilation time. [RT #18433]
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews Note: with changes #2469 and #2421 above, there is no
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews2410. [bug] Correctly delete m_versionInfo. [RT #18432]
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews2409. [bug] Only log that we disabled EDNS processing if we were
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews subsequently successful. [RT #18029]
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews2408. [bug] A duplicate TCP dispatch event could be sent, which
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews could then trigger an assertion failure in
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews resquery_response(). [RT #18275]
1bf8f4b77df1e1f8c1ce8326679ab02bac235c09Mark Andrews2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews2406. [placeholder]
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews2405. [cleanup] The default value for dnssec-validation was changed to
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews "yes" in 9.5.0-P1 and all subsequent releases; this
32c7aa3dd18d57979990574ddb008437b59c2428Rob Austein was inadvertently omitted from CHANGES at the time.
358043e40fd0c1fe312e25c28a771aafc3bd7b79Mark Andrews2404. [port] hpux: files unlimited support.
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews2403. [bug] TSIG context leak. [RT #18341]
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews2402. [port] Support Solaris 2.11 and over. [RT #18362]
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews2401. [bug] Expect to get E[MN]FILE errno internal_accept()
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews (from accept() or fcntl() system calls). [RT #18358]
a5e055b9d8bc42b0e29d88960ed2a5c531fa5acbRob Austein2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews2399. [placeholder]
5f059eef4360bc6c35a38241deb2561884dd9001Mark Andrews2398. [bug] Improve file descriptor management. New,
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews temporary, named.conf option reserved-sockets,
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews default 512. [RT #18344]
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews2397. [bug] gssapi_functions had too many elements. [RT #18355]
d1ef96c5fb81b1edbede4228480848b58e48799eMark Andrews2396. [bug] Don't set SO_REUSEADDR for randomized ports.
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews2395. [port] Avoid warning and no effect from "files unlimited"
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews on Linux when running as root. [RT #18335]
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews2394. [bug] Default configuration options set the limit for
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews open files to 'unlimited' as described in the
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews documentation. [RT #18331]
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews2393. [bug] nested acls containing keys could trigger an
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews assertion in acl.c. [RT #18166]
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews2392. [bug] remove 'grep -q' from acl test script, some platforms
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews don't support it. [RT #18253]
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews2391. [port] hpux: cover additional recvmsg() error codes.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews2390. [bug] dispatch.c could make a false warning on 'odd socket'.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews [RT #18301].
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews2389. [bug] Move the "working directory writable" check to after
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews the ns_os_changeuser() call. [RT #18326]
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews2388. [bug] Avoid using tables for layout purposes in
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews statistics XSL [RT #18159].
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
1c52f228e9e2d8784273b7af76794031e480e5e8Mark Andrews [RT #18147] [RT #18258]
ea0b0c283be744d8b5810927b9981a9afe2f900dMark Andrews2386. [func] Add warning about too small 'open files' limit.
c315e5cfead876251ee4ff5600ee67303b2729a4Mark Andrews2385. [bug] A condition variable in socket.c could leak in
c956fbfbbd536407a2f0ef8f138c27729d31744dMark Andrews rare error handling [RT #17968].
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews2384. [security] Fully randomize UDP query ports to improve
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews forgery resilience. [RT #17949, #18098]
f66cd386cf4d0cc65b28cbaeaf540353406393a8Mark Andrews2383. [bug] named could double queries when they resulted in
f66cd386cf4d0cc65b28cbaeaf540353406393a8Mark Andrews SERVFAIL due to overkilling EDNS0 failure detection.
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2381. [port] dlz/mysql: support multiple install layouts for
738bffe2ee7dd6f3efeae8e2cca9017acc9c5f94Mark Andrews mysql. <prefix>/include/{,mysql/}mysql.h and
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews <prefix>/lib/{,mysql/}. [RT #18152]
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews proofs which, in turn, caused validation failures
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews for insecure zones immediately below a secure zone
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews the server was authoritative for. [RT #18112]
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews TLDs and supported RRs with TTLs [RT #17972]
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews2376. [bug] Change #2144 was not complete.
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews2375. [placeholder]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2374. [bug] "blackhole" ACLs could cause named to segfault due
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews to some uninitialized memory. [RT #18095]
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews2373. [bug] Default values of zone ACLs were re-parsed each time a
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews new zone was configured, causing an overconsumption
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews of memory. [RT #18092]
1195e2e1f2853df56d7ec69d2e01a99d44e4d61dMark Andrews2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
74def1c9c1880480bb62eb881e8a7ce28f9f7a20Mark Andrews2370. [bug] "rndc freeze" could trigger an assertion in named
5efa612be0471cc4e133b795db3dd3addf18ba6cMark Andrews when called on a nonexistent zone. [RT #18050]
da059d6dd4035c1f4736e7978065c4d51893b136Mark Andrews2369. [bug] libbind: Array bounds overrun on read in bitncmp().
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews2368. [port] Linux: use libcap for capability management if
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 possible. [RT# 18026]
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉2367. [bug] Improve counting of dns_resstatscounter_retry
71839e2a424a904a60429a380ee7685464022e4bMark Andrews2366. [bug] Adb shutdown race. [RT #18021]
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews2365. [bug] Fix a bug that caused dns_acl_isany() to return
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews spurious results. [RT #18000]
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews2364. [bug] named could trigger a assertion when serving a
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews malformed signed zone. [RT #17828]
38e8022ace865803bdd609c9763cd7d7ba2818dcMark Andrews2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews2362. [cleanup] Make "rrset-order fixed" a compile-time option.
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews settable by "./configure --enable-fixed-rrset".
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews Disabled by default. [RT #17977]
b9625d9be5d89015b75cc7c25088a8d1a3bb7655Mark Andrews2361. [bug] "recursion" statistics counter could be counted
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews multiple times for a single query. [RT #17990]
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉2360. [bug] Fix a condition where we release a database version
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews (which may acquire a lock) while holding the lock.
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉2359. [bug] Fix NSID bug. [RT #17942]
c5076a76f6562b5aa48e6a1c680c343b53846157Mark Andrews2358. [doc] Update host's default query description. [RT #17934]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews2357. [port] Don't use OpenSSL's engine support in versions before
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews OpenSSL 0.9.7f. [RT #17922]
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews2356. [bug] Built in mutex profiler was not scalable enough.
5ed76fa7ea83d3ce7a33d365aa3b84410c3b8773Mark Andrews2355. [func] Extend the number statistics counters available.
ad3b537a241f40bbb3fdc4de252881c42645021bMark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews2353. [func] Add support for Name Server ID (RFC 5001).
ea38808b7dc1b2e760f18f2cc3ae07deaf15ba1aMark Andrews 'dig +nsid' requests NSID from server.
de6ceebf98bedee0b1e1e81d078befbd728b801cMark Andrews 'request-nsid yes;' causes recursive server to send
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews NSID requests to upstream servers. Server responds
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews to NSID requests with the string configured by
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews 'server-id' option. [RT #17091]
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews2352. [bug] Various GSS_API fixups. [RT #17729]
c3c72c1033b9d085b1a1fe74a9e3efb6db724ce2Mark Andrews2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews2350. [port] win32: IPv6 support. [RT #17797]
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews2349. [func] Provide incremental re-signing support for secure
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews dynamic zones. [RT #1091]
46ed893dd0c8096d2bcbf31e6dcf79b2786e7b7fMark Andrews2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews Documentation is in the new README.pkcs11 file.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews New tool, dnssec-keyfromlabel, which takes the
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews label of a key pair in a HSM and constructs a DNS
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews key pair for use by named and dnssec-signzone.
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews2347. [bug] Delete now traverses the RB tree in the canonical
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews order. [RT #17451]
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews2346. [func] Memory statistics now cover all active memory contexts
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews in increased detail. [RT #17580]
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews2345. [bug] named-checkconf failed to detect when forwarders
7952b2b43e880b18e63613805f71fd3e8624bb44Mark Andrews were set at both the options/view level and in
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews a root zone. [RT #17671]
e1f638a7141a4c1364e4ca45025241c9e2fecf74Mark Andrews2344. [bug] Improve "logging{ file ...; };" documentation.
fb827ed6df9a473770fb69a75a455b4ad0d14f52Mark Andrews2343. [bug] (Seemingly) duplicate IPv6 entries could be
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews created in ADB. [RT #17837]
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews2341. [bug] libbind: add missing -I../include for off source
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews tree builds. [RT #17606]
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews2340. [port] openbsd: interface configuration. [RT #17700]
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews2339. [port] tru64: support for libbind. [RT #17589]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews2338. [bug] check_ds() could be called with a non DS rdataset.
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews2336. [func] If "named -6" is specified then listen on all IPv6
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews interfaces if there are not listen-on-v6 clauses in
7d4a465de03b26bf9f5ef131d03253b8f6afc169Mark Andrews2335. [port] sunos: libbind and *printf() support for long long.
0b9af9eb37f624033652f6cc463262474ee13344Mark Andrews2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
85315eb5361d92ba034cecc26c3526e121392386Mark Andrews bug in fromstruct_txt(). [RT #17609]
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews2333. [bug] Fix off by one error in isc_time_nowplusinterval().
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews2331. [bug] Failure to regenerate any signatures was not being
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews reported nor being past back to the UPDATE client.
a3a09ca2497e925a9f0ba76f1525c6c60e5d5094Mark Andrews2330. [bug] Remove potential race condition when handling
7f5a3cea4e93ad683b13ebef8a6589afd97fb762Mark Andrews over memory events. [RT #17572]
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews WARNING: API CHANGE: over memory callback
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews function now needs to call isc_mem_waterack().
50105afc551903541608b11851d73278b23579a3Mark Andrews See <isc/mem.h> for details.
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews2329. [bug] Clearer help text for dig's '-x' and '-i' options.
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
8c5d451ea2898586c00932efeb5123b41afc9650Mark Andrews2327. [bug] It was possible to dereference a NULL pointer in
9c8fb5f756d99a4ecba95df9a00757384f3b71b7Mark Andrews rbtdb.c. Implement dead node processing in zones as
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews we do for caches. [RT #17312]
d81018ac98b287438248cd0e3a1c230eb40b0b55Mark Andrews2326. [bug] It was possible to trigger a INSIST in the acache
7436bb66c610c039ca3dec12aac5024037898910Mark Andrews2325. [port] Linux: use capset() function if available. [RT #17557]
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews2323. [port] tru64: namespace clash. [RT #17547]
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews2322. [port] MacOS: work around the limitation of setrlimit()
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews for RLIMIT_NOFILE. [RT #17526]
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews2321. [placeholder]
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews2320. [func] Make statistics counters thread-safe for platforms
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews that support certain atomic operations. [RT #17466]
3ad4e307b64bcf8baa984e10a4e7549dbeaea31dMark Andrews2319. [bug] Silence Coverity warnings in
9ce4318edbab0b50f21df9ce28beb6fde71943ecMark Andrews2318. [port] sunos fixes for libbind. [RT #17514]
91c79af4755df2d892511512e0fc886639518a92Mark Andrews2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
80c5a37ddcb42239f6b7d16b66ca0426ca6ffe2cMark Andrews2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews2315. [bug] Used incorrect address family for mapped IPv4
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews addresses in acl.c. [RT #17519]
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews2314. [bug] Uninitialized memory use on error path in
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews2313. [cleanup] Silence Coverity warnings. Handle private stacks.
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews [RT #17447] [RT #17478]
7554feaef6057f5ea2926076900ac7634b911456Mark Andrews2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews2311. [bug] IPv6 addresses could match IPv4 ACL entries and
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews vice versa. [RT #17462]
54a8b1e6ede781e9f4059512530046db8c4de1ddMark Andrews2310. [bug] dig, host, nslookup: flush stdout before emitting
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews debug/fatal messages. [RT #17501]
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews2306. [bug] Remove potential race from lib/dns/resolver.c.
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews2305. [security] inet_network() buffer overflow. CVE-2008-0122.
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews2304. [bug] Check returns from all dns_rdata_tostruct() calls.
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews2301. [bug] Remove resource leak and fix error messages in
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews2300. [bug] Fixed failure to close open file in
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews2299. [bug] Remove unnecessary NULL check in
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews2298. [bug] isc_mutex_lock() failure not caught in
b857ba993de91a3863de92db6462afdbec47d993Mark Andrews2297. [bug] isc_entropy_createfilesource() failure not caught in
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews2296. [port] Allow docbook stylesheet location to be specified to
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews configure. [RT #17457]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews2294. [func] Allow the experimental statistics channels to have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multiple connections and ACL.
029a79c8807a5378a31f0f92e9c600bd46be17c9Mark Andrews Note: the stats-server and stats-server-v6 options
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews available in the previous beta releases are replaced
6ec7bd9c691cf7b7a1d4f507e89f2b7cb22a12dcMark Andrews with the generic statistics-channels statement.
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews2293. [func] Add ACL regression test. [RT #17375]
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews2292. [bug] Log if the working directory is not writable.
94d1015e65882e0f0c527abb0e8f66a609f46cb8Mark Andrews2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews failure to set PR_SET_DUMPABLE. [RT #17312]
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews2290. [bug] Let AD in the query signal that the client wants AD
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews set in the response. [RT #17301]
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews2289. [func] named-checkzone now reports the out-of-zone CNAME
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews found. [RT #17309]
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews2288. [port] win32: mark service as running when we have finished
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews loading. [RT #17441]
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews2286. [func] Allow a TCP connection to be used as a weak
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews authentication method for reverse zones.
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews New update-policy methods tcp-self and 6to4-self.
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews2285. [func] Test framework for client memory context management.
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews2284. [bug] Memory leak in UPDATE prerequisite processing.
7052e191ce63fdf063a977695718ff426a27628eMark Andrews2283. [bug] TSIG keys were not attaching to the memory
7052e191ce63fdf063a977695718ff426a27628eMark Andrews context. TSIG keys should use the rings
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory context rather than the clients memory
7052e191ce63fdf063a977695718ff426a27628eMark Andrews context. [RT #17377]
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
185fd227381269568e193147a98f292210a16f2cMark Andrews2281. [bug] Attempts to use undefined acls were not being logged.
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews2280. [func] Allow the experimental http server to be reached
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews over IPv6 as well as IPv4. [RT #17332]
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
f853c77478af94109291ea93f800444b949be558Mark Andrews to protect applications from receiving spurious
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews SIGPIPE signals when using the resolver.
7ad4d54f29c315cbcb241ca5fc12ba1e0744358bMark Andrews2278. [bug] win32: handle the case where Windows returns no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews search list or DNS suffix. [RT #17354]
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews2277. [bug] Empty zone names were not correctly being caught at
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews in the post parse checks. [RT #17357]
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
37225662b64e44a3c59f92dd6156db37b52ca7a3Mark Andrews2275. [func] Add support to dig to perform IXFR queries over UDP.
30b89a5ad95b5775abf6cce8ecc84a061babf76dMark Andrews2274. [func] Log zone transfer statistics. [RT #17336]
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews2273. [bug] Adjust log level to WARNING when saving inconsistent
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews stub/slave master and journal files. [RT# 17279]
5caf500beeb91b96a2bb2fd55080141569aead97Mark Andrews2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
012dedf87438043ff00d4deec8b488eec2be2a1cMark Andrews2271. [bug] Fix a memory leak in http server code [RT #17100]
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews2270. [bug] dns_db_closeversion() version->writer could be reset
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews before it is tested. [RT #17290]
1edbf336252ea6a94d58f3f1a135567e2956e8caMark Andrews2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉 --- 9.5.0b1 released ---
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉2267. [bug] Radix tree node_num value could be set incorrectly,
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 causing positive ACL matches to look like negative
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 ones. [RT #17311]
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉2266. [bug] client.c:get_clientmctx() returned the same mctx
668767dc6471dfed4741869c8dd20af8e9ace3cdTatuya JINMEI 神明達哉 once the pool of mctx's was filled. [RT #17218]
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews2265. [bug] Test that the memory context's basic_table is non NULL
634d053dfe806ee6a3d9ed5c2bda7f68ba410de4Tatuya JINMEI 神明達哉 before freeing. [RT #17265]
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews2264. [bug] Server prefix length was being ignored. [RT #17308]
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews2263. [bug] "named-checkconf -z" failed to set default value
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews for "check-integrity". [RT #17306]
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews2262. [bug] Error status from all but the last view could be
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews lost. [RT #17292]
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews2260. [bug] Reported wrong clients-per-query when increasing the
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews value. [RT #17236]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews2259. [placeholder]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews --- 9.5.0a7 released ---
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2257. [bug] win32: Use the full path to vcredist_x86.exe when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling it. [RT #17222]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2256. [bug] win32: Correctly register the installation location of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2254. [bug] timer.c:dispatch() failed to lock timer->lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when reading timer->idle allowing it to see
d3fc633c344e15179480d887aeecf4a6263baeabMark Andrews intermediate values as timer->idle was reset by
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews isc_timer_touch(). [RT #17243]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2253. [func] "max-cache-size" defaults to 32M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "max-acache-size" defaults to 16M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2252. [bug] Fixed errors in sortlist code [RT #17216]
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews2251. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2250. [func] New flag 'memstatistics' to state whether the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory statistics file should be written or not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Additionally named's -m option will cause the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics file to be written. [RT #17113]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2249. [bug] Only set Authentic Data bit if client requested
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSSEC, per RFC 3655 [RT #17175]
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2247. [doc] Sort doc/misc/options. [RT #17067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2246. [bug] Make the startup of test servers (ans.pl) more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews robust. [RT #17147]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2245. [bug] Validating lack of DS records at trust anchors wasn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews working. [RT #17151]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2244. [func] Allow the check of nameserver names against the
fefe1106d96d3a89b21315f665b36a67cdea3840Mark Andrews SOA MNAME field to be disabled by specifying
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews 'notify-to-soa yes;'. [RT #17073]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2243. [func] Configuration files without a newline at the end now
2f025ec6fe68421d942330afaf1980b7a4976e30Mark Andrews parse without error. [RT #17120]
c528ef03d9cdfd7eed4fe6b93563dd599bbb25b0Mark Andrews2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews library could require a source of random data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a number of INSIST()s into plain fatal() errors
1b5a72829324a0d2fa327a270caea8fd02ae8779Mark Andrews which report the triggering result code.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The 'key' command wasn't disabling GSS-TSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2238. [bug] It was possible to trigger a REQUIRE when a
3184ff5e45c8f821e5165ea60d674bfb87faf5b8Mark Andrews validation was canceled. [RT #17106]
1e107b3d7b54de5022c3328423164e533afcc15eMark Andrews2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
cc6271e46c775592f39a1e8b4e2cb1ff457e2f89Mark Andrews2236. [bug] dnssec-signzone failed to preserve the case of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of wildcard owner names. [RT #17085]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
a4b3e51a8f1c9742c0f7d9f7d70f1ad926985145Mark Andrews2233. [func] Add support for O(1) ACL processing, based on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews radix tree code originally written by Kevin
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Brintnall. [RT #16288]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2232. [bug] dns_adb_findaddrinfo() could fail and return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_SUCCESS. [RT #17137]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2230. [bug] We could INSIST reading a corrupted journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2229. [bug] Null pointer dereference on query pool creation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #17133]
ffdfae8e4188c143297393f80f22134503372452Mark Andrews2228. [contrib] contrib: Change 2188 was incomplete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2227. [cleanup] Tidied up the FAQ. [RT #17121]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2226. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2225. [bug] More support for systems with no IPv4 addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2224. [bug] Defer journal compaction if a xfrin is in progress.
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews2223. [bug] Make a new journal when compacting. [RT #17119]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2222. [func] named-checkconf now checks server key references.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2221. [bug] Set the event result code to reflect the actual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record turned to caller when a cache update is
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews rejected due to a more credible answer existing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2220. [bug] win32: Address a race condition in final shutdown of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the Windows socket code. [RT #17028]
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews2219. [bug] Apply zone consistency checks to additions, not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removals, when updating. [RT #17049]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2217. [func] Adjust update log levels. [RT #17092]
9c1eb2279d715188bf631d98d103f6f81a3c76fbMark Andrews2216. [cleanup] Fix a number of errors reported by Coverity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2214. [bug] Deregister OpenSSL lock callback when cleaning
21f1794606dce19928cf455029e173321f166380Mark Andrews up. Reorder OpenSSL cleanup so that RAND_cleanup()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is called before the locks are destroyed. [RT #17098]
0cb25226fba18befbe40156c93845f2fc9bf3524Mark Andrews2213. [bug] SIG0 diagnostic failure messages were looking at the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong status code. [RT #17101]
2610933abd985bdea28801c35d740d2cab2f137aMark Andrews2212. [func] 'host -m' now causes memory statistics and active
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory to be printed at exit. [RT 17028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2211. [func] Update "dynamic update temporarily disabled" message.
a22f967b7e3589dab640d2cc65fd202d077a9d90Mark Andrews2210. [bug] Deleting class specific records via UPDATE could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail. [RT #17074]
1a4d687359d89ff3b3e4e3f7acc4b6b8d8c982e9Mark Andrews2209. [port] osx: linking against user supplied static OpenSSL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews libraries failed as the system ones were still being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found. [RT #17078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2208. [port] win32: make sure both build methods produce the
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews same output. [RT #17058]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
f5af519ab547bc80c51387529103e4e852a1171eMark Andrews ai_canonname correctly. [RT #17061]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a6 released ---
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews2206. [security] "allow-query-cache" and "allow-recursion" now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cross inherit from each other.
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews If allow-query-cache is not set in named.conf then
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-recursion is used if set, otherwise allow-query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is used if set, otherwise the default (localnets;
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews localhost;) is used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If allow-recursion is not set in named.conf then
163547c0c064251e97c74538c5ede3232b3f0ffaMark Andrews allow-query-cache is used if set, otherwise allow-query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is used if set, otherwise the default (localnets;
8ff31bab2f51b171a8eab3a0b8415c64529e116eMark Andrews localhost;) is used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2204. [bug] "rndc flushanme name unknown-view" caused named
935000aa6e2b9d08f363b2e698a258a458a5a7cfMark Andrews to crash. [RT #16984]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2203. [security] Query id generation was cryptographically weak.
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews [RT # 16915]
2fd63cf561135572339d4e2ff0c06695e3dcf1baMark Andrews2202. [security] The default acls for allow-query-cache and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-recursion were not being applied. [RT #16960]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews2201. [bug] The build failed in a separate object directory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2200. [bug] The search for cached NSEC records was stopping to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews early leading to excessive DLV queries. [RT #16930]
7ec0f55f1542d8bb9475bbe93e911d7520f043caMark Andrews2199. [bug] win32: don't call WSAStartup() while loading dlls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2198. [bug] win32: RegCloseKey() could be called when
ea6fe0d54f36754c195b3b8dac47c81f7993677eMark Andrews RegOpenKeyEx() failed. [RT #16911]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2197. [bug] Add INSIST to catch negative responses which are
6bd8cee98332533a4fa705b82ca9ec1606738ba9Mark Andrews not setting the event result code appropriately.
0c2509b0b9f9e455fa9d347d08f6ba9abd86d418Mark Andrews2196. [port] win32: yield processor while waiting for once to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to complete. [RT #16958]
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews2195. [func] dnssec-keygen now defaults to nametype "ZONE"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when generating DNSKEYs. [RT #16954]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2194. [bug] Close journal before calling 'done' in xfrin.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a5 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2193. [port] win32: BINDInstall.exe is now linked statically.
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews2192. [port] win32: use vcredist_x86.exe to install Visual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Studio's redistributable dlls if building with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Visual Stdio 2005 or later.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2191. [func] named-checkzone now allows dumping to stdout (-).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkconf now has -h for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkzone now has -h for help.
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews rndc now has -h for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Better handling of '-?' for usage summaries.
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews2190. [func] Make fallback to plain DNS from EDNS due to timeouts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more visible. New logging category "edns-disabled".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2189. [bug] Handle socket() returning EINTR. [RT #15949]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews2188. [contrib] queryperf: autoconf changes to make the search for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews libresolv or libbind more robust. [RT #16299]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2187. [bug] query_addds(), query_addwildcardproof() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query_addnxrrsetnsec() should take a version
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews argument. [RT #16368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2186. [port] cygwin: libbind: check for struct sockaddr_storage
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews independently of IPv6. [RT #16482]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2185. [port] sunos: libbind: check for ssize_t, memmove() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memchr(). [RT #16463]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2184. [bug] bind9.xsl.h didn't build out of the source tree.
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews2183. [bug] dnssec-signzone didn't handle offline private keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews well. [RT #16832]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews could return ISC_R_SUCCESS when they ran out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #16365]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2180. [cleanup] Remove bit test from 'compress_test' as they
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are no longer needed. [RT #16497]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews2179. [func] 'rndc command zone' will now find 'zone' if it is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unique to all the views. [RT #16821]
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews2178. [bug] 'rndc reload' of a slave or stub zone resulted in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a reference leak. [RT #16867]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2177. [bug] Array bounds overrun on read (rcodetext) at
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews debug level 10+. [RT #16798]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2176. [contrib] dbus update to handle race condition during
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews initialization (Bugzilla 235809). [RT #16842]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2175. [bug] win32: windows broadcast condition variable support
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews was broken. [RT #16592]
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews2174. [bug] I/O errors should always be fatal when reading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews master files. [RT #16825]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2173. [port] win32: When compiling with MSVS 2005 SP1 we also
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews --- 9.5.0a4 released ---
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews2172. [bug] query_addsoa() was being called with a non zone db.
a207a2835e37de52e11d4c143c0425e749409c46Mark Andrews2171. [bug] Handle breaks in DNSSEC trust chains where the parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers are not DS aware (DS queries to the parent
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews return a referral to the child).
838d608e6f37038f2fb43980a7a9d6b6a490db36Mark Andrews2170. [func] Add acache processing to test suite. [RT #16711]
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews2169. [bug] host, nslookup: when reporting NXDOMAIN report the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews given name and not the last name searched for.
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews2168. [bug] nsupdate: in non-interactive mode treat syntax errors
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews as fatal errors. [RT #16785]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2167. [bug] When re-using a automatic zone named failed to
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews attach it to the new view. [RT #16786]
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews --- 9.5.0a3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2166. [bug] When running in batch mode, dig could misinterpret
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews a server address as a name to be looked up, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unexpected output. [RT #16743]
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews2165. [func] Allow the destination address of a query to determine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if we will answer the query or recurse.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-on, allow-recursion-on and
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews allow-query-cache-on. [RT #16291]
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews2164. [bug] The code to determine how named-checkzone /
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews named-compilezone was called failed under windows.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2163. [bug] If only one of query-source and query-source-v6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified a port the query pools code broke (change
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 2129). [RT #16768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2162. [func] Allow "rrset-order fixed" to be disabled at compile
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews time. [RT #16665]
12ff7274fe2ea531ecca6a71fb9f7e1ae92da389Mark Andrews2161. [bug] Fix which log messages are emitted for 'rndc flush'.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews from getifaddrs(). [RT #16708]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a2 released ---
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2159. [bug] Array bounds overrun in acache processing. [RT #16710]
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews2158. [bug] ns_client_isself() failed to initialize key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews leading to a REQUIRE failure. [RT #16688]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2157. [func] dns_db_transfernode() created. [RT #16685]
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolver.c:validated() and resolver.c:cache_name().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Fix a memory leak in rbtdb.c:free_noqname().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Make lookup.c:lookup_find() robust against
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews event leaks. [RT #16685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched in acls by omitting the scope. [RT #16599]
90295f915c883d1aeeda856f518584d4219a704aMark Andrews2153. [bug] nsupdate could leak memory. [RT #16691]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2152. [cleanup] Use sizeof(buf) instead of fixed number in
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews dighost.c:get_trusted_key(). [RT #16678]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2151. [bug] Missing newline in usage message for journalprint.
99776003811a413457a2c35a808ad860df877d24Mark Andrews2150. [bug] 'rrset-order cyclic' uniformly distribute the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews starting point for the first response for a given
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RRset. [RT #16655]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2149. [bug] isc_mem_checkdestroyed() failed to abort on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if there were still active memory contexts.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2148. [func] Add positive logging for rndc commands. [RT #14623]
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews2147. [bug] libbind: remove potential buffer overflow from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
52fc1457e44c476a81ec9dee6a664958cb64b8e2Mark Andrews SO_BSDCOMPAT" message. [RT #16641]
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews2145. [bug] Check DS/DLV digest lengths for known digests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
be0e075ac2c10ade3e80edef7fa14ac0fda92690Mark Andrews2143. [bug] We failed to restart the IPv6 client when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews kernel failed to return the destination the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews packet was sent to. [RT #16613]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2142. [bug] Handle master files with a modification time that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matches the epoch. [RT# 16612]
af2be1a46813e228cb9d71230d3f41222fdb69baTatuya JINMEI 神明達哉2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews equivalent of LDH checks). [RT #16609]
2945ac15af547df0268e449252902ead599e2451Mark Andrews2140. [bug] libbind: missing unlock on pthread_key_create()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failures. [RT #16654]
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉2139. [bug] dns_view_find() was being called with wrong type
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in adb.c. [RT #16670]
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews2138. [bug] Lock order reversal in resolver.c. [RT #16653]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2137. [port] Mips little endian and/or mips 64 bit are now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported for atomic operations. [RT#16648]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2136. [bug] nslookup/host looped if there was no search list
aec2d57d5b9f5ca97763a1b49b76f0bcb5852e1aMark Andrews and the host didn't exist. [RT #16657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews2134. [func] Additional statistics support. [RT #16666]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2133. [port] powerpc: Support both IBM and MacOS Power PC
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews assembler syntaxes. [RT #16647]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2132. [bug] Missing unlock on out of memory in
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews dns_dispatchmgr_setudp().
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2130. [func] Log if CD or DO were set. [RT #16640]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2129. [func] Provide a pool of UDP sockets for queries to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews made over. See use-queryport-pool, queryport-pool-ports
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews and queryport-pool-updateinterval. [RT #16415]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews2126. [security] Serialize validation of type ANY responses. [RT #16555]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉 was defined. [RT #16574]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2124. [security] It was possible to dereference a freed fetch
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews context. [RT #16584]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2123. [func] Use Doxygen to generate internal documentation.
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews2122. [func] Experimental http server and statistics support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for named via xml.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews second timeout. [RT #16553]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2120. [doc] Fix markup on nsupdate man page. [RT #16556]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2119. [compat] libbind: allow res_init() to succeed enough to
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews return the default domain even if it was unable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to allocate memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2118. [bug] Handle response with long chains of domain name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compression pointers which point to other compression
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews pointers. [RT #16427]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
2434ccfde7efa30b6fedf4630e5036eeb5d647d0Mark Andrews which could lead to validation failures. named didn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews handle negative DS responses that were in the process
d8ec783e6dc0bd16a80b30d9888306b1faae6037Mark Andrews of being validated. Check CNAME bit before accepting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NODATA proof. To be able to ignore a child NSEC there
5bd76af084edfdcd1cb4db9453ac781d32dde6f7Mark Andrews must be SOA (and NS) set in the bitmap. [RT #16399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2116. [bug] 'rndc reload' could cause the cache to continually
8bcb0f297b50e80e3c7aab1a41b94d937acf4dc0Mark Andrews be cleaned. [RT #16401]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2115. [bug] 'rndc reconfig' could trigger a INSIST if the
7f32428506d55083fe5ac9aa515294bdef7c6e27Mark Andrews number of masters for a zone was reduced. [RT #16444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2114. [bug] dig/host/nslookup: searches for names with multiple
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews labels were failing. [RT #16447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2113. [bug] nsupdate: if a zone is specified it should be used
a6211a2f234767a015a6a30b85d5da087fa907f1Mark Andrews for server discover. [RT# 16455]
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews2112. [security] Warn if weak RSA exponent is used. [RT #16460]
4c342614f80d867bba23e63795ec6ee79dd6395dMark Andrews2111. [bug] Fix a number of errors reported by Coverity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews priming queries. [RT #16491]
6c6673405c7e29c1d91d07b326d0fe1d7b52e478Mark Andrews2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2108. [func] DHCID support. [RT #16456]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2106. [func] 'rndc status' now reports named's version. [RT #16426]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2105. [func] GSS-TSIG support (RFC 3645).
7c5d5a7932b8ac27281eeff64506dff8220bb3eaMark Andrews2104. [port] Fix Solaris SMF error message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2103. [port] Add /usr/sfw to list of locations for OpenSSL
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer under Solaris.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2102. [port] Silence Solaris 10 warnings.
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews2101. [bug] OpenSSL version checks were not quite right.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2100. [port] win32: copy libeay32.dll to Build\Debug.
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews Copy Debug\named-checkzone to Debug\named-compilezone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2099. [port] win32: more manifest issues.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2098. [bug] Race in rbtdb.c:no_references(), which occasionally
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews triggered an INSIST failure about the node lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reference. [RT #16411]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2097. [bug] named could reference a destroyed memory context
1431917c7cddbac7442cb910e83cb058fea59fb5Mark Andrews after being reloaded / reconfigured. [RT #16428]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2096. [bug] libbind: handle applications that fail to detect
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews res_init() failures better.
012a2b979e011b13ba0d291c279dc65a167c039eMark Andrews2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews net_cidr_ntop_ipv6(). [RT #16388]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2094. [contrib] Update named-bootconf. [RT# 16404]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2093. [bug] named-checkzone -s was broken.
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews2092. [bug] win32: dig, host, nslookup. Use registry config
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if resolv.conf does not exist or no nameservers
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews listed. [RT #15877]
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews2091. [port] dighost.c: race condition on cleanup. [RT #16417]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2090. [port] win32: Visual C++ 2005 command line manifest support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2089. [security] Raise the minimum safe OpenSSL versions to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews prior to these have known security flaws which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are (potentially) exploitable in named. [RT #16391]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2088. [security] Change the default RSA exponent from 3 to 65537.
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
c54c1eaf26d5a7fc123c4af3712353156a766df1Mark Andrews2086. [port] libbind: FreeBSD now has get*by*_r() functions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2085. [doc] win32: added index.html and README to zip. [RT #16201]
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews2084. [contrib] dbus update for 9.3.3rc2.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2083. [port] win32: Visual C++ 2005 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2082. [doc] Document 'cache-file' as a test only option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2080. [port] libbind: res_init.c did not compile on older versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of Solaris. [RT #16363]
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews2079. [bug] The lame cache was not handling multiple types
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly. [RT #16361]
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews2078. [bug] dnssec-checkzone output style "default" was badly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named. It is now called "relative". [RT #16326]
5af560664daaa984f98cec6925518a3e06c4ab4fMark Andrews2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews complete signed zone. [RT #16326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2076. [bug] Several files were missing #include <config.h>
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews causing build failures on OSF. [RT #16341]
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews2075. [bug] The spillat timer event hander could leak memory.
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_request_createraw2() and dns_request_createraw3()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to send multiple UDP requests. [RT #16349]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2073. [bug] Incorrect semantics check for update policy "wildcard".
1c0927d8a091effcf9b2dc5baa533927c113bd5cMark Andrews2072. [bug] We were not generating valid HMAC SHA digests.
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews2071. [port] Test whether gcc accepts -fno-strict-aliasing.
70f8c70cdd3ca68edcf9d448eb508abf3697719aMark Andrews2070. [bug] The remote address was not always displayed when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reporting dispatch failures. [RT #16315]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2069. [bug] Cross compiling was not working. [RT #16330]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2068. [cleanup] Lower incremental tuning message to debug 1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2067. [bug] 'rndc' could close the socket too early triggering
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews a INSIST under Windows. [RT #16317]
de4976142190ae84ed3e4099f3e0fc07781748a3Mark Andrews2066. [security] Handle SIG queries gracefully. [RT #16300]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2065. [bug] libbind: probe for HPUX prototypes for
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews endprotoent_r() and endservent_r(). [RT 16313]
0b09763c354ec91fb352b6b4cea383bd0195b2d8Mark Andrews2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
6a3c86ff436452d062912bd91ecd289541869d42Mark Andrews2063. [bug] Change #1955 introduced a bug which caused the first
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'rndc flush' call to not free memory. [RT #16244]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2062. [bug] 'dig +nssearch' was reusing a buffer before it had
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been returned by the socket code. [RT #16307]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2061. [bug] Accept expired wildcard message reversed. [RT #16296]
7d389c324cc032475f9d219a12ab84bacbd7fbaaMark Andrews2060. [bug] Enabling DLZ support could leave views partially
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured. [RT #16295]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2059. [bug] Search into cache rbtdb could trigger an INSIST
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews failure while cleaning up a stale rdataset.
cc4928ec7116a064223f60639ca1a80f25ba350fMark Andrews2058. [bug] Adjust how we calculate rtt estimates in the presence
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of authoritative servers that drop EDNS and/or CD
e2cf63c5df79eb7c8b86b6278289883fa760cda5Mark Andrews requests. Also fallback to EDNS/512 and plain DNS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews faster for zones with less than 3 servers. [RT #16187]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2057. [bug] Make setting "ra" dependent on both allow-query-cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and allow-recursion. [RT #16290]
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews2056. [bug] dig: ixfr= was not being treated case insensitively
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at all times. [RT #15955]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2055. [bug] Missing goto after dropping multicast query.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2054. [port] freebsd: do not explicitly link against -lpthread.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2052. [bug] 'rndc' improve connect failed message to report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the failing address. [RT #15978]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2051. [port] More strtol() fixes. [RT #16249]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2050. [bug] Parsing of NSAP records was not case insensitive.
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews2049. [bug] Restore SOA before AXFR when falling back from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a attempted IXFR when transferring in a zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Allow a initial SOA query before attempting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a AXFR to be requested. [RT #16156]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2048. [bug] It was possible to loop forever when using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews avoid-v4-udp-ports / avoid-v6-udp-ports when
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews the OS always returned the same local port.
d73de275987d29627dc11d5bd4a22874a29f7874Mark Andrews2047. [bug] Failed to initialize the interface flags to zero.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cleanup [RT #16247].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2045. [func] Use lock buckets for acache entries to limit memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consumption. [RT #16183]
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews2044. [port] Add support for atomic operations for Itanium.
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews2043. [port] nsupdate/nslookup: Force the flushing of the prompt
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for interactive sessions. [RT#16148]
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews2042. [bug] named-checkconf was incorrectly rejecting the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews logging category "config". [RT #16117]
a1edcd1b8d430650d85ec0962cd32efde76a71fbMark Andrews2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set of libraries to be linked. [RT #16129]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2040. [bug] rbtdb no_references() could trigger an INSIST
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews failure with --enable-atomic. [RT #16022]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2039. [func] Check that all buffers passed to the socket code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have been retrieved when the socket event is freed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2038. [bug] dig/nslookup/host was unlinking from wrong list
acc8b7ac3d16538bf223545bbf71899b9accaebbMark Andrews when handling errors. [RT #16122]
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews2037. [func] When unlinking the first or last element in a list
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews check that the list head points to the element to
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews be unlinked. [RT #15959]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2035. [func] Make falling back to TCP on UDP refresh failure
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews optional. Default "try-tcp-refresh yes;" for BIND 8
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compatibility. [RT #16123]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2033. [bug] We weren't creating multiple client memory contexts
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews on demand as expected. [RT #16095]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2031. [bug] Emit a error message when "rndc refresh" is called on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a non slave/stub zone. [RT # 16073]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2030. [bug] We were being overly conservative when disabling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews openssl engine support. [RT #16030]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2029. [bug] host printed out the server multiple times when
26cf4737b3e84c3a686a5eacebf22ac39e57d4caMark Andrews specified on the command line. [RT #15992]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2028. [port] linux: socket.c compatibility for old systems.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2027. [port] libbind: Solaris x86 support. [RT #16020]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2026. [bug] Rate limit the two recursive client exceeded messages.
93649589d470624e9e1c34403ad076b3a1a4c5c3Mark Andrews2025. [func] Update "zone serial unchanged" message. [RT #16026]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2024. [bug] named emitted spurious "zone serial unchanged"
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews messages on reload. [RT #16027]
ddc592d128cdde85ada64efbda95981c10c4c03cMark Andrews2023. [bug] "make install" should create ${localstatedir}/run and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ${sysconfdir} if they do not exist. [RT #16033]
88c2b83cc548a217cc92a2bf75ca1ef1d4237d4fMark Andrews2022. [bug] If dnssec validation is disabled only assert CD if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CD was requested. [RT #16037]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2019. [tuning] Reduce the amount of work performed per quantum
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews when cleaning the cache. [RT #15986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2018. [bug] Checking if the HMAC MD5 private file was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2017. [bug] allow-query default was not correct. [RT #15946]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2016. [bug] Return a partial answer if recursion is not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allowed but requested and we had the answer
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews to the original qname. [RT #15945]
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews2015. [cleanup] use-additional-cache is now acache-enable for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consistency. Default acache-enable off in BIND 9.4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as it requires memory usage to be configured.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews It may be enabled by default in BIND 9.5 once we
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have more experience with it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2014. [func] Statistics about acache now recorded and sent
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews to log. [RT #15976]
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses more gracefully. [RT #15941]
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews2012. [func] Don't insert new acache entries if acache is full.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2011. [func] dnssec-signzone can now update the SOA record of
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews the signed zone, either as an increment or as the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews system time(). [RT #15633]
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews2010. [placeholder] rt15958
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2009. [bug] libbind: Coverity fixes. [RT #15808]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2008. [func] It is now possible to enable/disable DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation from rndc. This is useful for the
c08a03a43116c21cf12dea7cbcb5465588f7955cMark Andrews mobile hosts where the current connection point
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews breaks DNSSEC (firewall/proxy). [RT #15592]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc validation newstate [view]
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews2007. [func] It is now possible to explicitly enable DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation. default dnssec-validation no; to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be changed to yes in 9.5.0. [RT #15674]
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews2006. [security] Allow-query-cache and allow-recursion now default
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the built in acls "localnets" and "localhost".
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews This is being done to make caching servers less
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attractive as reflective amplifying targets for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews spoofed traffic. This still leave authoritative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers exposed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The best fix is for full BCP 38 deployment to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews remove spoofed traffic.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2005. [bug] libbind: Retransmission timeouts should be
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews based on which attempt it is to the nameserver
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and not the nameserver itself. [RT #13548]
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews2004. [bug] dns_tsig_sign() could pass a NULL pointer to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dst_context_destroy() when cleaning up after a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #15835]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2003. [bug] libbind: The DNS name/address lookup functions could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews occasionally follow a random pointer due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews structures not being completely zeroed. [RT #15806]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2002. [bug] libbind: tighten the constraints on when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews struct addrinfo._ai_pad exists. [RT #15783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2001. [func] Check the KSK flag when updating a secure dynamic zone.
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews New zone option "update-check-ksk yes;". [RT #15817]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1999. [func] Implement "rrset-order fixed". [RT #13662]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1998. [bug] Restrict handling of fifos as sockets to just SunOS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This allows named to connect to entropy gathering
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews daemons that use fifos instead of sockets. [RT #15840]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1997. [bug] Named was failing to replace negative cache entries
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a positive one for the type was learnt.
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews1996. [bug] nsupdate: if a zone has been specified it should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews appear in the output of 'show'. [RT #15797]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1995. [bug] 'host' was reporting multiple "is an alias" messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1994. [port] OpenSSL 0.9.8 support. [RT #15694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1993. [bug] Log messages, via syslog, were missing the space
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews after the timestamp if "print-time yes" was specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1992. [bug] Not all incoming zone transfer messages included the
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews view. [RT #15825]
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews1991. [cleanup] The configuration data, once read, should be treated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as read only. Expand the use of const to enforce this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at compile time. [RT #15813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1990. [bug] libbind: isc's override of broken gettimeofday()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementations was not always effective.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1989. [bug] win32: don't check the service password when
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews re-installing. [RT #15882]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1988. [bug] Remove a bus error from the SHA256/SHA512 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1986. [func] Report when a zone is removed. [RT #15849]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1985. [protocol] DLV has now been assigned a official type code of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 32769. [RT #15807]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: care should be taken to ensure you upgrade
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews both named and dnssec-signzone at the same time for
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews zones with DLV records where named is the master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server for the zone. Also any zones that contain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DLV records should be removed when upgrading a slave
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews zone. You do not however have to upgrade all
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers for a zone with DLV records simultaneously.
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews1984. [func] dig, nslookup and host now advertise a 4096 byte
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EDNS UDP buffer size by default. [RT #15855]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1983. [func] Two new update policies. "selfsub" and "selfwild".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1982. [bug] DNSKEY was being accepted on the parent side of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a delegation. KEY is still accepted there for
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews RFC 3007 validated updates. [RT #15620]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1981. [bug] win32: condition.c:wait() could fail to reattain
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews the mutex lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1980. [func] dnssec-signzone: output the SOA record as the
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews first record in the signed zone. [RT #15758]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1979. [port] linux: allow named to drop core after changing
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews user ids. [RT #15753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1978. [port] Handle systems which have a broken recvmsg().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1977. [bug] Silence noisy log message. [RT #15704]
986be654feec852eb9da0d15599f18d0035e569bMark Andrews1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1975. [bug] libbind: isc_gethexstring() could misparse multi-line
c26c65b7a0d036e78bfc73f3e7e0817adb0365c0Mark Andrews hex strings with comments. [RT #15814]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1974. [doc] List each of the zone types and associated zone
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews options separately in the ARM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews HMACSHA512 support. [RT #13606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1972. [contrib] DBUS dynamic forwarders integration from
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews Jason Vas Dias <jvdias@redhat.com>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1971. [port] linux: make detection of missing IF_NAMESIZE more
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews robust. [RT #15443]
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews1970. [bug] nsupdate: adjust UDP timeout when falling back to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unsigned SOA query. [RT #15775]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1969. [bug] win32: the socket code was freeing the socket
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews structure too early. [RT #15776]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews1966. [bug] Don't set CD when we have fallen back to plain DNS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1965. [func] Suppress spurious "recursion requested but not
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews available" warning with 'dig +qr'. [RT #15780].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1963. [port] Tru64 4.0E doesn't support send() and recv().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1962. [bug] Named failed to clear old update-policy when it
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews was removed. [RT #15491]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1961. [bug] Check the port and address of responses forwarded
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews to dispatch. [RT #15474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1959. [func] Control the zeroing of the negative response TTL to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a soa query. Defaults "zero-no-soa-ttl yes;" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "zero-no-soa-ttl-cache no;". [RT #15460]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1958. [bug] Named failed to update the zone's secure state
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews until the zone was reloaded. [RT #15412]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1957. [bug] Dig mishandled responses to class ANY queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1956. [bug] Improve cross compile support, 'gen' is now built
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by native compiler. See README for additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cross compile support information. [RT #15148]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington1954. [func] Named now falls back to advertising EDNS with a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 512 byte receive buffer if the initial EDNS queries
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail. [RT #14852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1953. [func] The maximum EDNS UDP response named will send can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now be set in named.conf (max-udp-size). This is
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews independent of the advertised receive buffer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (edns-udp-size). [RT #14852]
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews1952. [port] hpux: tell the linker to build a runtime link
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews path "-Wl,+b:". [RT #14816].
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews1951. [security] Drop queries from particular well known ports.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Don't return FORMERR to queries from particular
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews well known ports. [RT #15636]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a TCP socket. This prevents the source address being
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington set for TCP connections. [RT #15628]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1949. [func] Addition memory leakage checks. [RT #15544]
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington1948. [bug] If was possible to trigger a REQUIRE failure in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews xfrin.c:maybe_free() if named ran out of memory.
97527fc03cdb061759e2c9529c670ac1c190ef84Brian Wellington1947. [func] It is now possible to configure named to accept
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews expired RRSIGs. Default "dnssec-accept-expired no;".
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews Setting "dnssec-accept-expired yes;" leaves named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews vulnerable to replay attacks. [RT #14685]
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews1946. [bug] resume_dslookup() could trigger a REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when using forwarders. [RT #15549]
49f62849e5f80add0ee36b0f9b42cdce8de9748aMark Andrews1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews To generate a RSAMD5 key you must explicitly request
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RSAMD5. [RT #13780]
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews1944. [cleanup] isc_hash_create() does not need a read/write lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1943. [bug] Set the loadtime after rolling forward the journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1942. [bug] If the name of a DNSKEY match that of one in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trusted-keys do not attempt to validate the DNSKEY
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews using the parents DS RRset. [RT #15649]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1941. [bug] ncache_adderesult() should set eresult even if no
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews rdataset is passed to it. [RT #15642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1940. [bug] Fixed a number of error conditions reported by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1939. [bug] The resolver could dereference a null pointer after
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews validation if all the queries have timed out.
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews1938. [bug] The validator was not correctly handling unsecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative responses at or below a SEP. [RT #15528]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1936. [bug] The validator could leak memory. [RT #15544]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1935. [bug] 'acache' was DO sensitive. [RT #15430]
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews1934. [func] Validate pending NS RRsets, in the authority section,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prior to returning them if it can be done without
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews requiring DNSKEYs to be fetched. [RT #15430]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1931. [bug] Per-client mctx could require a huge amount of memory,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particularly for a busy caching server. [RT #15519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1930. [port] HPUX: ia64 support. [RT #15473]
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1927. [bug] Access to soanode or nsnode in rbtdb violated the
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews lock order rule and could cause a dead lock.
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews1926. [bug] The Windows installer did not check for empty
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews passwords. BINDinstall was being installed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the wrong place. [RT #15483]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1925. [port] All outer level AC_TRY_RUNs need cross compiling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defaults. [RT #15469]
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews1924. [port] libbind: hpux ia64 support. [RT #15473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1923. [bug] ns_client_detach() called too early. [RT #15499]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1922. [bug] check-tool.c:setup_logging() missing call to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_log_setcontext().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1921. [bug] Client memory contexts were not using internal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews malloc. [RT# 15434]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1920. [bug] The cache rbtdb lock array was too small to
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson have the desired performance characteristics.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1919. [contrib] queryperf: a set of new features: collecting/printing
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson response delays, printing intermediate results, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adjusting query rate for the "target" qps.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1918. [bug] Memory leak when checking acls. [RT #15391]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews when generating man pages. [RT #15385]
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1915. [bug] dig +ndots was broken. [RT #15215]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1914. [protocol] DS is required to accept mnemonic algorithms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (RFC 4034). Still emit numeric algorithms for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compatibility with RFC 3658. [RT #15354]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews1913. [func] Integrate contributed DLZ code into named. [RT #11382]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1912. [port] aix: atomic locking for powerpc. [RT #15020]
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson1911. [bug] Update windows socket code. [RT #14965]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1910. [bug] dig's +sigchase code overhauled. [RT #14933]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1909. [bug] The DLV code has been re-worked to make no longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query order sensitive. [RT #14933]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1908. [func] dig now warns if 'RA' is not set in the answer when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'RD' was set in the query. host/nslookup skip servers
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington that fail to set 'RA' when 'RD' is set unless a server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is explicitly set. [RT #15005]
b541c10d0442d9804d94567a97956cec3bd2912dBrian Wellington1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1906. [func] dig now has a '-q queryname' and '+showsearch' options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1905. [bug] Strings returned from cfg_obj_asstring() should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews treated as read-only. The prototype for
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews cfg_obj_asstring() has been updated to reflect this.
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews friends. Note: RFC 1918 zones are not yet covered by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this but are likely to be in a future release.
1e4bfff1855795853648f507422b96fc8fecbff1Mark Andrews New options: empty-server, empty-contact,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews empty-zones-enable and disable-empty-zone.
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson1903. [func] ISC string copy API.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1902. [func] Attempt to make the amount of work performed in a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews iteration self tuning. The covers nodes clean from
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews the cache per iteration, nodes written to disk when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rewriting a master file and nodes destroyed per
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews iteration when destroying a zone or a cache.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1901. [cleanup] Don't add DNSKEY records to the additional section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1900. [bug] ixfr-from-differences failed to ensure that the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews serial number increased. [RT #15036]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews1899. [func] named-checkconf now validates update-policy entries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
d1abb8bb020aacd1ce0da65c2d5d8f7c96ebd52aMark Andrews ISC_NETADDR_FORMATSIZE to allow for scope details.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1897. [func] x86 and x86_64 now have separate atomic locking
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1896. [bug] Recursive clients soft quota support wasn't working
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as expected. [RT #15103]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1895. [bug] A escaped character is, potentially, converted to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the output character set too early. [RT #14666]
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington1894. [doc] Review ARM for BIND 9.4.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1893. [port] Use uintptr_t if available. [RT #14606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1892. [func] Support for SPF rdata type. [RT #15033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1891. [port] freebsd: pthread_mutex_init can fail if it runs out
6d6529b5e5ab7223fa2560ebe144bcb82517cef3Mark Andrews of memory. [RT #14995]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1890. [func] Raise the UDP receive buffer size to 32k if it is
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews less than 32k. [RT #14953]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1889. [port] sunos: non blocking i/o support. [RT #14951]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1888. [func] Support for IPSECKEY rdata type. [RT #14967]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1887. [bug] The cache could delete expired records too fast for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clients with a virtual time in the past. [RT #14991]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1886. [bug] fctx_create() could return success even though it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed. [RT #14993]
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews1885. [func] dig: report the number of extra bytes still left in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the packet after processing all the records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews levels. [RT #14962]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1882. [func] Limit the number of recursive clients that can be
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson waiting for a single query (<qname,qtype,qclass>) to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolve. New options clients-per-query and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-clients-per-query.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1881. [func] Add a system test for named-checkconf. [RT #14931]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1880. [func] The lame cache is now done on a <qname,qclass,qtype>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews basis as some servers only appear to be lame for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews certain query types. [RT #14916]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1878. [func] Detect duplicates of UDP queries we are recursing on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and drop them. New stats category "duplicate".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1877. [bug] Fix unreasonably low quantum on call to
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews dns_rbt_destroy2(). Remove unnecessary unhash_node()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews call. [RT #14919]
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer1876. [func] Additional memory debugging support to track size
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and mctx arguments. [RT #14814]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1875. [bug] process_dhtkey() was using the wrong memory context
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to free some memory. [RT #14890]
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews1874. [port] sunos: portability fixes. [RT #14814]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1873. [port] win32: isc__errno2result() now reports its caller.
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1871. [placeholder]
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson1870. [func] Added framework for handling multiple EDNS versions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1869. [func] dig can now specify the EDNS version when making
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington a query. [RT #14873]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1868. [func] edns-udp-size can now be overridden on a per
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews server basis. [RT #14851]
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson1867. [bug] It was possible to trigger a INSIST in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dlv_validatezonekey(). [RT #14846]
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews1866. [bug] resolv.conf parse errors were being ignored by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bad addresses. [RT #14841]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1864. [bug] Don't try the alternative transfer source if you
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews got a answer / transfer with the main source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address. [RT #14802]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1863. [bug] rrset-order "fixed" error messages not complete.
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews1862. [func] Add additional zone data constancy checks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkzone has extended checking of NS, MX and
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews SRV record and the hosts they reference.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named has extended post zone load checks.
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews New zone options: check-mx and integrity-check.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1861. [bug] dig could trigger a INSIST on certain malformed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses. [RT #14801]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrectly set. [RT #14775]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1859. [func] Add support for CH A record. [RT #14695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1858. [bug] The flush-zones-on-shutdown option wasn't being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parsed. [RT #14686]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1857. [bug] named could trigger a INSIST() if reconfigured /
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews reloaded too fast. [RT #14673]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1855. [bug] ixfr-from-differences was failing to detect changes
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews of ttl due to dns_diff_subtract() was ignoring the ttl
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of records. [RT #14616]
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews1854. [bug] lwres also needs to know the print format for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (long long). [RT #13754]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1853. [bug] Rework how DLV interacts with proveunsecure().
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews1852. [cleanup] Remove last vestiges of dnssec-signkey and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-makekeyset (removed from Makefile years ago).
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews1851. [doc] Doxygen comment markup. [RT #11398]
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1849. [doc] All forms of the man pages (docbook, man, html) should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have consistent copyright dates.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1848. [bug] Improve SMF integration. [RT #13238]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1847. [bug] isc_ondestroy_init() is called too late in
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson dns_rbtdb_create()/dns_rbtdb64_create().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson <bortzmeyer@nic.fr>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1845. [bug] Improve error reporting to distinguish between
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews accept()/fcntl() and socket()/fcntl() errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for each 16 bit piece of the IPv6 address. The text
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews representation of a IPv6 address has been tightened
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when CFLAGS contains "-I /usr/local/include"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in old header files being used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1842. [port] cmsg_len() could produce incorrect results on
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews some platform. [RT #13744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1841. [bug] "dig +nssearch" now makes a recursive query to
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson find the list of nameservers to query. [RT #13694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1840. [func] dnssec-signzone can now randomize signature end times
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson (dnssec-signzone -j jitter). [RT #13609]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1839. [bug] <isc/hash.h> was not being installed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1838. [cleanup] Don't allow Linux capabilities to be inherited.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1837. [bug] Compile time option ISC_FACILITY was not effective
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for 'named -u <user>'. [RT #13714]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1836. [cleanup] Silence compiler warnings in hash_test.c.
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1834. [bug] Bad memset in rdata_test.c. [RT #13658]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews1831. [doc] Update named-checkzone documentation. [RT#13604]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1829. [bug] win32: "pid-file none;" broken. [RT #13563]
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews1828. [bug] isc_rwlock_init() failed to properly cleanup if it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews encountered a error. [RT #13549]
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews1827. [bug] host: update usage message for '-a'. [RT #37116]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson of memory error. [RT #13537]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1825. [bug] Missing UNLOCK() on out of memory error from in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rbtdb.c:subtractrdataset(). [RT #13519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1824. [bug] Memory leak on dns_zone_setdbtype() failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1823. [bug] Wrong macro used to check for point to point interface.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1822. [bug] check-names test for RT was reversed. [RT #13382]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1821. [placeholder]
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews1820. [bug] Gracefully handle acl loops. [RT #13659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1819. [bug] The validator needed to check both the algorithm and
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson digest types of the DS to determine if it could be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used to introduce a secure zone. [RT #13593]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1817. [func] Add support for additional zone file formats for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews improving loading performance. The masterfile-format
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson option in named.conf can be used to specify a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-default format. A separate command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-compilezone was provided to generate zone files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the new format. Additionally, the -I and -O options
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews for dnssec-signzone specify the input and output
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews1815. [bug] nsupdate triggered a REQUIRE if the server was set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without also setting the zone and it encountered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a CNAME and was using TSIG. [RT #13086]
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson1814. [func] UNIX domain controls are now supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1813. [func] Restructured the data locking framework using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews architecture dependent atomic operations (when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews available), improving response performance on
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson multi-processor machines significantly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews x86, x86_64, alpha, powerpc, and mips are currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1811. [func] Preserve the case of domain names in rdata during
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson zone transfers. [RT #13547]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1810. [bug] configure, lib/bind/configure make different default
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson decisions about whether to do a threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1809. [bug] "make distclean" failed for libbind if the platform
61d5bfc06be978ea962b1c64309894ac80351771Mark Andrews is not supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1808. [bug] zone.c:notify_zone() contained a race condition,
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews zone->db could change underneath it. [RT #13511]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1807. [bug] When forwarding (forward only) set the active domain
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson from the forward zone name. [RT #13526]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1806. [bug] The resolver returned the wrong result when a CNAME /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNAME was encountered when fetching glue from a
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson secure namespace. [RT #13501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1805. [bug] Pending status was not being cleared when DLV was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews active. [RT #13501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1804. [bug] Ensure that if we are queried for glue that it fits
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the additional section or TC is set to tell the
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson client to retry using TCP. [RT #10114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1803. [bug] dnssec-signzone sometimes failed to remove old
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson RRSIGs. [RT #13483]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1802. [bug] Handle connection resets better. [RT #11280]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1801. [func] Report differences between hints and real NS rrset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and associated address records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1800. [bug] Changes #1719 allowed a INSIST to be triggered.
3fc4c1434d7ac377c720640e2e925a3af567cccbMark Andrews1799. [bug] 'rndc flushname' failed to flush negative cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews entries. [RT #13438]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1798. [func] The server syntax has been extended to support a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews range of servers. [RT #11132]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1797. [func] named-checkconf now check acls to verify that they
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only refer to existing acls. [RT #13101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1795. [bug] "rndc dumpdb" was not fully documented. Minor
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews formating issues with "rndc dumpdb -all". [RT #13396]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1794. [func] Named and named-checkzone can now both check for
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews non-terminal wildcard records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1793. [func] Extend adjusting TTL warning messages. [RT #13378]
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews1792. [func] New zone option "notify-delay". Specify a minimum
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delay between sets of NOTIFY messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1791. [bug] 'host -t a' still printed out AAAA and MX records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson allow parallel make to succeed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1789. [bug] Prerequisite test for tkey and dnssec could fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with "configure --with-libtool".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1788. [bug] libbind9.la/libbind9.so needs to link against
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1786. [port] AIX: libt_api needs to be taught to look for
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson T_testlist in the main executable (--with-libtool).
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson1785. [bug] libbind9.la/libbind9.so needs to link against
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1784. [cleanup] "libtool -allow-undefined" is the default.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Leave hooks in configure to allow it to be set
40dd9cb8cc240c33d820fe79f176ed51e4c06a1aMark Andrews if needed in the future.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source tree.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1782. [port] OSX: --with-libtool + --enable-libbind broke on
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews __evOptMonoTime. [RT #13219]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1780. [bug] Update libtool to 1.5.10.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1774. [port] Aix: Silence compiler warnings / build failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1773. [bug] Fast retry on host / net unreachable. [RT #13153]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1772. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1771. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1770. [bug] named-checkconf failed to report missing a missing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file clause for rbt{64} master/hint zones. [RT#13009]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1769. [port] win32: change compiler flags /MTd ==> /MDd,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews /MT ==> /MD.
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataset. [RT #12907]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson support for (struct in6_pktinfo) failed. [RT #13077]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1766. [bug] Update the master file timestamp on successful refresh
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as well as the journal's timestamp. [RT# 13062]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1765. [bug] configure --with-openssl=auto failed. [RT #12937]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1764. [bug] dns_zone_replacedb failed to emit a error message
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson if there was no SOA record in the replacement db.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1763. [func] Perform sanity checks on NS records which refer to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'in zone' names. [RT #13002]
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews even when it failed. [RT #12995]
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1760. [bug] Host / net unreachable was not penalising rtt
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews estimates. [RT #12970]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1759. [bug] Named failed to startup if the OS supported IPv6
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer but had no IPv6 interfaces configured. [RT #12942]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1758. [func] Don't send notify messages to self. [RT #12933]
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews1757. [func] host now can turn on memory debugging flags with '-m'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1756. [func] named-checkconf now checks the logging configuration.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1755. [func] allow-update is now settable at the options / view
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews level. [RT #6636]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1754. [bug] We weren't always attempting to query the parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server for the DS records at the zone cut.
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews1753. [bug] Don't serve a slave zone which has no NS records.
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews1752. [port] Move isc_app_start() to after ns_os_daemonise()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as some fork() implementations unblock the signals
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that are blocked by isc_app_start(). [RT #12810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1749. [bug] 'check-names response ignore;' failed to ignore.
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson1748. [func] dig now returns the byte count for axfr/ixfr.
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson1747. [bug] BIND 8 compatibility: named/named-checkconf failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to parse "host-statistics-max" in named.conf.
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson1746. [func] Make public the function to read a key file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dst_key_read_public(). [RT #12450]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1745. [bug] Dig/host/nslookup accept replies from link locals
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews regardless of scope if no scope was specified when
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson query was sent. [RT #12745]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1744. [bug] If tuple2msgname() failed to convert a tuple to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a name a REQUIRE could be triggered. [RT #12796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1743. [bug] If isc_taskmgr_create() was not able to create the
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson requested number of worker threads then destruction
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the manager would trigger an INSIST() failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1742. [bug] Deleting all records at a node then adding a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews previously existing record, in a single UPDATE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transaction, failed to leave / regenerate the
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson associated RRSIG records. [RT #12788]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1741. [bug] Deleting all records at a node in a secure zone
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson using a update-policy grant failed. [RT #12787]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1740. [bug] Replace rbt's hash algorithm as it performed badly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with certain zones. [RT #12729]
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson NOTE: a hash context now needs to be established
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via isc_hash_create() if the application was not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews already doing this.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1739. [bug] dns_rbt_deletetree() could incorrectly return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_QUOTA. [RT #12695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1738. [bug] Enable overrun checking by default. [RT #12695]
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews1737. [bug] named failed if more than 16 masters were specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1736. [bug] dst_key_fromnamedfile() could fail to read a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews public key. [RT #12687]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1733. [bug] Return non-zero exit status on initial load failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1731. [port] darwin: relax version test in ifconfig.sh.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1730. [port] Determine the length type used by the socket API.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1729. [func] Improve check-names error messages.
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews1728. [doc] Update check-names documentation.
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson1727. [bug] named-checkzone: check-names support didn't match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documentation.
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson1726. [port] aix5: add support for aix5.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1725. [port] linux: update error message on interaction of threads,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews capabilities and setuid support (named -u). [RT #12541]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1724. [bug] Look for DNSKEY records with "dig +sigtrace".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1722. [bug] Don't commit the journal on malformed ixfr streams.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1721. [bug] Error message from the journal processing were not
89555ff443c8127a533f6c742316c9b1a713cfd5Mark Andrews always identifying the relevant journal. [RT #12519]
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative response. [RT #12506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1719. [bug] named was not correctly caching a RFC 2308 Type 1
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews negative response. [RT #12506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
330b421487d7c3a5e699472fe889aa633772057fMark Andrews responses when looking for the zone / master server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1717. [port] solaris: ifconfig.sh did not support Solaris 10.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed "ifconfig.sh down" didn't work for Solaris 9.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1716. [doc] named.conf(5) was being installed in the wrong
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews location. [RT# 12441]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1715. [func] 'dig +trace' now randomly selects the next servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to try. Report if there is a bad delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1714. [bug] dig/host/nslookup were only trying the first
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address when a nameserver was specified by name.
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews1713. [port] linux: extend capset failure message to say:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews please ensure that the capset kernel module is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loaded. see insmod(8)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages for the specified zone. [RT #9479]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1709. [port] solaris: add SMF support from Sun.
4e400cb7a2edd25af98ebc25fcbb5b36ca08f9a0Mark Andrews1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for conformance to the name space convention. Binary
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews backward compatibility to the old function name is
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews provided. [RT #12376]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1707. [contrib] sdb/ldap updated to version 1.0-beta.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1706. [bug] 'rndc stop' failed to cause zones to be flushed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sometimes. [RT #12328]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1705. [func] Allow the journal's name to be changed via named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1704. [port] lwres needed a snprintf() implementation for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews platforms without snprintf(). Add missing
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson "#include <isc/print.h>". [RT #12321]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1703. [bug] named would loop sending NOTIFY messages when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to receive a response. [RT #12322]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1702. [bug] also-notify should not be applied to built in zones.
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson1701. [doc] A minimal named.conf man page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1700. [func] nslookup is no longer to be treated as deprecated.
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson Remove "deprecated" warning message. Add man page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1699. [bug] dnssec-signzone can generate "not exact" errors
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson when resigning. [RT #12281]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson1698. [doc] Use reserved IPv6 documentation prefix.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1697. [bug] xxx-source{,-v6} was not effective when it
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington specified one of listening addresses and a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews different port than the listening port. [RT #12257]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1696. [bug] dnssec-signzone failed to clean out nodes that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consisted of only NSEC and RRSIG records.
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson1695. [bug] DS records when forwarding require special handling.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1694. [bug] Report if the builtin views of "_default" / "_bind"
ee3ab6063dd13b5947d3fbe88b9ce8f38d65df9dBrian Wellington are defined in named.conf. [RT #12023]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1693. [bug] max-journal-size was not effective for master zones
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington with ixfr-from-differences set. [RT# 12024]
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1691. [bug] sdb's attachversion was not complete. [RT #11990]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1690. [bug] Delay detaching view from the client until UPDATE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews processing completes when shutting down. [RT #11714]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contained gratuitous semicolons. [RT #11707]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1688. [bug] LDFLAGS was not supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1687. [bug] Race condition in dispatch. [RT #10272]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1686. [bug] Named sent a extraneous NOTIFY when it received a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews redundant UPDATE request. [RT #11943]
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews1685. [bug] Change #1679 loop tests weren't quite right.
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson1684. [func] ixfr-from-differences now takes master and slave in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addition to yes and no at the options and view levels.
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews1683. [bug] dig +sigchase could leak memory. [RT #11445]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1682. [port] Update configure test for (long long) printf format.
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson1681. [bug] Only set SO_REUSEADDR when a port is specified in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_socket_bind(). [RT #11742]
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson1680. [func] rndc: the source address can now be specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1679. [bug] When there was a single nameserver with multiple
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson addresses for a zone not all addresses were tried.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1676. [func] New option "allow-query-cache". This lets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query be used to specify the default zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews access level rather than having to have every
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson zone override the global value. allow-query-cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be set at both the options and view levels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If allow-query-cache is not set allow-query applies.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1675. [bug] named would sometimes add extra NSEC records to
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington the authority section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1674. [port] linux: increase buffer size used to scan
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1673. [port] linux: issue a error messages if IPv6 interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1672. [cleanup] Tests which only function in a threaded build
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley now return R:THREADONLY (rather than R:UNTESTED)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a non-threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1671. [contrib] queryperf: add NAPTR to the list of known types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1670. [func] Log UPDATE requests to slave zones without an acl as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "disabled" at debug level 3. [RT# 11657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1669. [placeholder]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1667. [port] linux: not all versions have IF_NAMESIZE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1666. [bug] The optional port on hostnames in dual-stack-servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was being ignored.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1665. [func] rndc now allows addresses to be set in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server clauses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
debff476ad3512687a354499c25d2793e2009acdBrian Wellington1663. [func] Look for OpenSSL by default.
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson1662. [bug] Change #1658 failed to change one use of 'type'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 'keytype'.
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson1661. [bug] Restore dns_name_concatenate() call in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adb.c:set_target(). [RT #11582]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1660. [bug] win32: connection_reset_fix() was being called
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington unconditionally. [RT #11595]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1659. [cleanup] Cleanup some messages that were referring to KEY vs
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson DNSKEY, NXT vs NSEC and SIG vs RRSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and DH. Tighten which options apply to KEY and
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson DNSKEY records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1657. [doc] ARM: document query log output.
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSKEY and RRSIG. [RT #11542]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson1655. [bug] Logging multiple versions w/o a size was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1654. [bug] isc_result_totext() contained array bounds read
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews1653. [func] Add key type checking to dst_key_fromfilename(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DST_TYPE_KEY should be used to read TSIG, TKEY and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1652. [bug] TKEY still uses KEY.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1651. [bug] dig: process multiple dash options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1650. [bug] dig, nslookup: flush standard out after each command.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1649. [bug] Silence "unexpected non-minimal diff" message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1648. [func] Update dnssec-lookaside named.conf syntax to support
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence multiple dnssec-lookaside namespaces (not yet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implemented).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1647. [bug] It was possible trigger a INSIST when chasing a DS
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson record that required walking back over a empty node.
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington1646. [bug] win32: logging file versions didn't work with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-UNC filenames. [RT#11486]
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington1645. [bug] named could trigger a REQUIRE failure if multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews masters with keys are specified.
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson1644. [bug] Update the journal modification time after a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews successful refresh query. [RT #11436]
ef8d97818f0d30a4e09db97af695f504b311372cMark Andrews1643. [bug] dns_db_closeversion() could leak memory / node
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews references. [RT #11163]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1642. [port] Support OpenSSL implementations which don't have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DSA support. [RT #11360]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1641. [bug] Update the check-names description in ARM. [RT #11389]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson incorrectly closing the socket. [RT #11291]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1639. [func] Initial dlv system test.
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson1638. [bug] "ixfr-from-differences" could generate a REQUIRE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure if the journal open failed. [RT #11347]
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence1637. [bug] Node reference leak on error in addnoqname().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a error had occurred. The database version no longer
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence matched the version of the database that was dumped.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1635. [bug] Memory leak on error in query_addds().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1634. [bug] named didn't supply a useful error message when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews detected duplicate views. [RT #11208]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1633. [bug] named should return NOTIMP to update requests to a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews slaves without a allow-update-forwarding acl specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1632. [bug] nsupdate failed to send prerequisite only UPDATE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages. [RT #11288]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1631. [bug] dns_journal_compact() could sometimes corrupt the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews journal. [RT #11124]
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson1630. [contrib] queryperf: add support for IPv6 transport.
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson1629. [func] dig now supports IPv6 scoped addresses with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews extended format in the local-server part. [RT #8753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson1627. [bug] win32: sockets were not being closed when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews last external reference was removed. [RT# 11179]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1626. [bug] --enable-getifaddrs was broken. [RT#11259]
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson1625. [bug] named failed to load/transfer RFC2535 signed zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which contained CNAMES. [RT# 11237]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1623. [bug] A serial number of zero was being displayed in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "sending notifies" log message when also-notify was
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews used. [RT #11177]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews available, and suppress wildcard binding if not.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1621. [bug] match-destinations did not work for IPv6 TCP queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1620. [func] When loading a zone report if it is signed. [RT #11149]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1618. [bug] Fencepost errors in dns_name_ishostname() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_ismailbox() could trigger a INSIST().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1617. [port] win32: VC++ 6.0 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1616. [compat] Ensure that named's version is visible in the core
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews dump. [RT #11127]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it is defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1614. [port] win32: silence resource limit messages. [RT# 11101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1613. [bug] Builds would fail on machines w/o a if_nametoindex().
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1612. [bug] check-names at the option/view level could trigger
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews an INSIST. [RT# 11116]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1611. [bug] solaris: IPv6 interface scanning failed to cope with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no active IPv6 interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1610. [bug] On dual stack machines "dig -b" failed to set the
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews address type to be looked up with "@server".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1609. [func] dig now has support to chase DNSSEC signature chains.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson DNSSEC validation code in dig coded by Olivier Courtay
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (olivier.courtay@irisa.fr) for the IDsA project
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1608. [func] dig and host now accept -4/-6 to select IP transport
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to use when making queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1607. [bug] dig, host and nslookup were still using random()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to generate query ids. [RT# 11013]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1606. [bug] DLV insecurity proof was failing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson1604. [bug] A xfrout_ctx_create() failure would result in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews xfrout_ctx_destroy() being called with a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews partially initialized structure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1603. [bug] nsupdate: set interactive based on isatty().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1602. [bug] Logging to a file failed unless a size was specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1601. [bug] Silence spurious warning 'both "recursion no;" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "allow-recursion" active' warning from view "_bind".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1600. [bug] Duplicate zone pre-load checks were not case
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1599. [bug] Fix memory leak on error path when checking named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1598. [func] Specify that certain parts of the namespace must
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be secure (dnssec-must-be-secure).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1597. [func] Allow notify-source and query-source to be specified
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence on a per server basis similar to transfer-source.
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews1596. [func] Accept 'notify-source' style syntax for query-source.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1595. [func] New notify type 'master-only'. Enable notify for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews master zones only.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1594. [bug] 'rndc dumpdb' could prevent named from answering
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington queries while the dump was in progress. [RT #10565]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1593. [bug] rndc should return "unknown command" to unknown
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews commands. [RT# 10642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1592. [bug] configure_view() could leak a dispatch. [RT# 10675]
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews1591. [bug] libbind: updated to BIND 8.4.5.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1590. [port] netbsd: update thread support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1589. [func] DNSSEC lookaside validation.
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence1587. [bug] dns_message_settsigkey() failed to clear existing key.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1586. [func] "check-names" is now implemented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1585. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1584. [bug] "make test" failed with a read only source tree.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1583. [bug] Records add via UPDATE failed to get the correct trust
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews level. [RT #10452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1582. [bug] rrset-order failed to work on RRsets with more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than 32 elements. [RT #10381]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1581. [func] Disable DNSSEC support by default. To enable
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence DNSSEC specify "dnssec-enable yes;" in named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1580. [bug] Zone destruction on final detach takes a long time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1579. [bug] Multiple task managers could not be created.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews workaround code. [RT #10331]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1576. [bug] Race condition in dns_dispatch_addresponse().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1574. [bug] Don't attempt to open the controls socket(s) when
5455f30a7532738d750252c00e649890c694ee30Brian Wellington running tests. [RT #9091]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington1573. [port] linux: update to libtool 1.5.2 so that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "make install DESTDIR=/xx" works with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "configure --with-libtool". [RT #9941]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1572. [bug] nsupdate: sign the soa query to find the enclosing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone if the server is specified. [RT #10148]
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews1571. [bug] rbt:hash_node() could fail leaving the hash table
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in an inconsistent state. [RT #10208]
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson1570. [bug] nsupdate failed to handle classes other than IN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New keyword 'class' which sets the default class.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1569. [func] nsupdate new command 'answer' which displays the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews complete answer message to the last update.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1568. [bug] nsupdate now reports that the update failed in
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson interactive mode. [RT# 10236]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson1566. [port] Support for the cmsg framework on Solaris and HP/UX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This also solved the problem that match-destinations
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for IPv6 addresses did not work on these systems.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1565. [bug] CD flag should be copied to outgoing queries unless
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the query is under a secure entry point in which case
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CD should be set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1564. [func] Attempt to provide a fallback entropy source to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used if named is running chrooted and named is unable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to open entropy source within the chroot area.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1563. [bug] Gracefully fail when unable to obtain neither an IPv4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nor an IPv6 dispatch. [RT #10230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1562. [bug] isc_socket_create() and isc_socket_accept() could
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington leak memory under error conditions. [RT #10230]
751aa24c98fea02215cad95a08411af547d70e41Bob Halley1561. [bug] It was possible to release the same name twice if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named ran out of memory. [RT #10197]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and EAI_NONAME to the same value.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1559. [port] named should ignore SIGFSZ.
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews child zones for which we don't have a supported
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithm. Such child zones are treated as unsigned.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1557. [func] Implement missing DNSSEC tests for
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews * NOQNAME proof with wildcard answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * NOWILDARD proof with NXDOMAIN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Cache and return NOQNAME with wildcard answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1556. [bug] nsupdate now treats all names as fully qualified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1555. [func] 'rrset-order cyclic' no longer has a random starting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews point per query. [RT #7572]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1554. [bug] dig, host, nslookup failed when no nameservers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were specified in /etc/resolv.conf. [RT #8232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1553. [bug] The windows socket code could stop accepting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connections. [RT#10115]
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson1552. [bug] Accept NOTIFY requests from mapped masters if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched-mapped is set. [RT #10049]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1551. [port] Open "/dev/null" before calling chroot().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1550. [port] Call tzset(), if available, before calling chroot().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1549. [func] named-checkzone can now write out the zone contents
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a easily parsable format (-D and -o).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1548. [bug] When parsing APL records it was possible to silently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews accept out of range ADDRESSFAMILY values. [RT# 9979]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1547. [bug] Named wasted memory recording duplicate lame zone
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence entries. [RT #9341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1546. [bug] We were rejecting valid secure CNAME to negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1545. [bug] It was possible to leak memory if named was unable to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bind to the specified transfer source and TSIG was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being used. [RT #10120]
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson1544. [bug] Named would logged a single entry to a file despite it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being over the specified size limit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1543. [bug] Logging using "versions unlimited" did not work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1542. [placeholder]
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson1541. [func] NSEC now uses new bitmap format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington1539. [bug] Open UDP sockets for notify-source and transfer-source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that use reserved ports at startup. [RT #9475]
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington1538. [placeholder] rt9997
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1537. [func] New option "querylog". If set specify whether query
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington logging is to be enabled or disabled at startup.
2b7a77a68e27fc7991a857d403cb34b2ae90fc0bMark Andrews1536. [bug] Windows socket code failed to log a error description
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when returning ISC_R_UNEXPECTED. [RT #9998]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1535. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1534. [bug] Race condition when priming cache. [RT# 9940]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1533. [func] Warn if both "recursion no;" and "allow-recursion"
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews are active. [RT# 4389]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1532. [port] netbsd: the configure test for <sys/sysctl.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1531. [port] AIX more libtool fixes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1530. [bug] It was possible to trigger a INSIST() failure if a
55ddb88e53838693370c213930beda1652b8a583Brian Wellington slave master file was removed at just the correct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews moment. [RT #9462]
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington1529. [bug] "notify explicit;" failed to log that NOTIFY messages
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were being sent for the zone. [RT# 9442]
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington1528. [cleanup] Simplify some dns_name_ functions based on the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deprecation of bitstring labels.
70d08aea0a693c6ca62c2f7bb33bfddf9e427601Brian Wellington1527. [cleanup] Reduce the number of gettimeofday() calls without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews losing necessary timer granularity.
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley1526. [func] Implemented "additional section caching (or acache)",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an internal cache framework for additional section
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews content to improve response performance. Several
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington configuration options were provided to control the
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence1525. [bug] dns_cache_create() could trigger a REQUIRE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure in isc_mem_put() during error cleanup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1524. [port] AIX needs to be able to resolve all symbols when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews creating shared libraries (--with-libtool).
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington1523. [bug] Fix race condition in rbtdb. [RT# 9189]
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington1522. [bug] dns_db_findnode() relax the requirements on 'name'.
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington1521. [bug] dns_view_createresolver() failed to check the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result from isc_mem_create(). [RT# 9294]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1520. [protocol] Add SSHFP (SSH Finger Print) type.
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews length of the new bitmap.
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contained a off-by-one error when working out the
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson number of octets in the bitmap.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1517. [port] Support for IPv6 interface scanning on HP/UX and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington1515. [func] Allow transfer source to be set in a server statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1514. [bug] named: isc_hash_destroy() was being called too early.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1513. [doc] Add "US" to root-delegation-only exclude list.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1512. [bug] Extend the delegation-only logging to return query
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews type, class and responding nameserver.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1511. [bug] delegation-only was generating false positives
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on negative answers from sub-zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1510. [func] New view option "root-delegation-only". Apply
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delegation-only check to all TLDs and root.
b0390aab30438a13f533cccae9389945214b1421Brian Wellington Note there are some TLDs that are NOT delegation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only (e.g. DE, LV, US and MUSEUM) these can be excluded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the checks by using exclude.
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington root-delegation-only exclude {
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "DE"; "LV"; "US"; "MUSEUM";
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1509. [bug] Hint zones should accept delegation-only. Forward
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington zone should not accept delegation-only.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1508. [bug] Don't apply delegation-only checks to answers from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1507. [bug] Handle BIND 8 style returns to NS queries to parents
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson when making delegation-only checks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1506. [bug] Wrong return type for dns_view_isdelegationonly().
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1504. [func] New zone type "delegation-only".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1503. [port] win32: install libeay32.dll outside of system32.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1501. [func] Allow TCP queue length to be specified via
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence named.conf, tcp-listen-queue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1500. [bug] host failed to lookup MX records. Also look up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1499. [bug] isc_random need to be seeded better if arc4random()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is not used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1498. [port] bsdos: 5.x support.
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington1497. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1496. [port] test for pthread_attr_setstacksize().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1495. [cleanup] Replace hash functions with universal hash.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1494. [security] Turn on RSA BLINDING as a precaution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1493. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1492. [cleanup] Preserve rwlock quota context when upgrading /
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley downgrading. [RT #5599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lines. [RT #6206]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1490. [bug] Accept reading state as well as working state in
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson ns_client_next(). [RT #6813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1489. [compat] Treat 'allow-update' on slave zones as a warning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1488. [bug] Don't override trust levels for glue addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1487. [bug] A REQUIRE() failure could be triggered if a zone was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queued for transfer and the zone was then removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1486. [bug] isc_print_snprintf() '%%' consumed one too many format
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley characters. [RT# 8230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1485. [bug] gen failed to handle high type values. [RT #6225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1484. [bug] The number of records reported after a AXFR was wrong.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1483. [bug] dig axfr failed if the message id in the answer failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to match that in the request. Only the id in the first
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews message is required to match. [RT #8138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1482. [bug] named could fail to start if the kernel supports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 but no interfaces are configured. Similarly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for IPv4. [RT #6229]
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews1481. [bug] Refresh and stub queries failed to use masters keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if specified. [RT #7391]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1480. [bug] Provide replay protection for rndc commands. Full
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replay protection requires both rndc and named to
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson be updated. Partial replay protection (limited
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exposure after restart) is provided if just named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1479. [bug] cfg_create_tuple() failed to handle out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory cleanup. parse_list() would leak memory
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington on syntax errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1478. [port] ifconfig.sh didn't account for other virtual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces. It now takes a optional argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to specify the first interface number. [RT #3907]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1477. [bug] memory leak using stub zones and TSIG.
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews1476. [placeholder]
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley1475. [port] Probe for old sprintf().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1474. [port] Provide strtoul() and memmove() for platforms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1473. [bug] create_map() and create_string() failed to handle out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory cleanup. [RT #6813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington1471. [bug] libbind: updated to BIND 8.4.0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1470. [bug] Incorrect length passed to snprintf. [RT #5966]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington1469. [func] Log end of outgoing zone transfer at same level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as the start of transfer is logged. [RT #4441]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson1468. [func] Internal zones are no longer counted for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'rndc status'. [RT #4706]
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley1467. [func] $GENERATES now supports optional class and ttl.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1466. [bug] lwresd configuration errors resulted in memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and lock leaks. [RT #5228]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to check that trailing bits were zero allowing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews some invalid base64 strings to be accepted. [RT #5397]
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington1464. [bug] Preserve "out of zone" data for outgoing zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfers. [RT #5192]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington NXT bit maps. [RT #5577]
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington1462. [bug] parse_sizeval() failed to check the token type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1460. [bug] inet_pton() failed to reject certain malformed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 literals.
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson1459. [placeholder]
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson1458. [cleanup] sprintf() -> snprintf().
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews1457. [port] Provide strlcat() and strlcpy() for platforms without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1455. [bug] <netaddr> missing from server grammar in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1454. [port] Use getifaddrs() if available for interface scanning.
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley --disable-getifaddrs to override. Glibc currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has a getifaddrs() that does not support IPv6.
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington Use --enable-getifaddrs=glibc to force the use of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this version under linux machines.
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1452. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1451. [bug] rndc-confgen didn't exit with a error code for all
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson failures. [RT #5209]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1450. [bug] Fetching expired glue failed under certain
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson circumstances. [RT #5124]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1449. [bug] query_addbestns() didn't handle running out of memory
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington1448. [bug] Handle empty wildcards labels.
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington1447. [bug] We were casting (unsigned int) to and from (void *).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataset->private4 is now rdataset->privateuint4
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson to reflect a type change.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1446. [func] Implemented undocumented alternate transfer sources
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley from BIND 8. See use-alt-transfer-source,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews alt-transfer-source and alt-transfer-source-v6.
8e68489885e744ab48907414b4199c36858c27ddMark Andrews SECURITY: use-alt-transfer-source is ENABLED unless
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews you are using views. This may cause a security risk
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson resulting in accidental disclosure of wrong zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews content if the master supplying different source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews content based on IP address. If you are not certain
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson ISC recommends setting use-alt-transfer-source no;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson been replaced with DNS_ADBFIND_STARTATZONE which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causes the search to start using the closest zone.
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson1444. [func] dns_view_findzonecut2() allows you to specify if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache should be searched for zone cuts.
7427490a67b9547242b57c255254f7e146127c48Bob Halley1443. [func] Masters lists can now be specified and referenced
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in zone masters clauses and other masters lists.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1442. [func] New functions for manipulating port lists:
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson dns_portlist_create(), dns_portlist_add(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_portlist_remove(), dns_portlist_match(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_portlist_attach() and dns_portlist_detach().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1441. [func] It is now possible to tell dig to bind to a specific
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source port.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1440. [func] It is now possible to tell named to avoid using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews certain source ports (avoid-v4-udp-ports,
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson avoid-v6-udp-ports).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1439. [bug] Named could return NOERROR with certain NOTIFY
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington failures. Return NOTAUTH if the NOTIFY zone is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not being served.
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington1438. [func] Log TSIG (if any) when logging NOTIFY requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1437. [bug] Leave space for stdio to work in. [RT #5033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1436. [func] dns_zonemgr_resumexfrs() can be used to restart
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stalled transfers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1435. [bug] zmgr_resume_xfrs() was being called read locked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than write locked. zmgr_resume_xfrs()
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington was not being called if the zone was being
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson1434. [bug] "rndc reconfig" failed to initiate the initial
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone transfer of new slave zones.
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson1433. [bug] named could trigger a REQUIRE failure if it could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not get a file descriptor when attempting to write
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a master file. [RT #4347]
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews1432. [func] The advertised EDNS UDP buffer size can now be set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via named.conf (edns-udp-size).
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews1431. [bug] isc_print_snprintf() "%s" with precision could walk off
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews end of argument. [RT #5191]
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson1430. [port] linux: IPv6 interface scanning support.
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington1429. [bug] Prevent the cache getting locked to old servers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1428. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1427. [bug] Race condition in adb with threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1426. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1425. [port] linux/libbind: define __USE_MISC when testing *_r()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function prototypes in netdb.h. [RT #4921]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1424. [bug] EDNS version not being correctly printed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1423. [contrib] queryperf: added A6 and SRV.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1422. [func] Log name/type/class when denying a query. [RT #4663]
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington1421. [func] Differentiate updates that don't succeed due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prerequisites (unsuccessful) vs other reasons
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington1420. [port] solaris: work around gcc optimizer bug.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1419. [port] openbsd: use /dev/arandom. [RT #4950]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1418. [bug] 'rndc reconfig' did not cause new slaves to load.
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson1417. [func] ID.SERVER/CHAOS is now a built in zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews See "server-id" for how to configure.
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from SOA MINIMUM.
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson1414. [func] Support for KSK flag.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1413. [func] Explicitly request the (re-)generation of DS records
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews from keysets (dnssec-signzone -g).
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington1412. [func] You can now specify servers to be tried if a nameserver
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has IPv6 address and you only support IPv4 or the
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson reverse. See dual-stack-servers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1410. [func] Handle records that live in the parent zone, e.g. DS.
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1408. [bug] "make distclean" was not complete. [RT #4700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1407. [bug] lfsr incorrectly implements the shift register.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1406. [bug] dispatch initializes one of the LFSR's with a incorrect
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews polynomial. [RT #4617]
be387fd057ee54ae5d84904e69587d6e29bd3950Mark Andrews1405. [func] Use arc4random() if available.
d72269740049af28b091ba81d68a067c88f53547Mark Andrews1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signkey now report their version in the
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews usage message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1402. [cleanup] A6 has been moved to experimental and is no longer
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson fully supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1401. [bug] adb wasn't clearing state when the timer expired.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1400. [bug] Block the addition of wildcard NS records by IXFR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or UPDATE. [RT #3502]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1399. [bug] Use serial number arithmetic when testing SIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timestamps. [RT #4268]
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington1398. [doc] ARM: notify-also should have been also-notify.
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1396. [func] dnssec-signzone: adjust the default signing time by
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson 1 hour to allow for clock skew.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have a working implementation. [RT #4079]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1394. [func] It is now possible to check if a particular element is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a acl. Remove duplicate entries from the localnets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington is not available in the kernel to prevent accidently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listening on IPv4 interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1392. [bug] named-checkzone: update usage.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1391. [func] Add support for IPv6 scoped addresses in named.
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews1390. [func] host now supports ixfr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1389. [bug] named could fail to rotate long log files. [RT #3666]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defining HAVE_IFLIST_SYSCTL. [RT #3770]
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington1387. [bug] named could crash due to an access to invalid memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews space (which caused an assertion failure) in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incremental cleaning. [RT #3588]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1386. [bug] named-checkzone -z stopped on errors in a zone.
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson1385. [bug] Setting serial-query-rate to 10 would trigger a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews REQUIRE failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1384. [bug] host was incompatible with BIND 8 in its exit code and
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson in the output with the -l option. [RT #3536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1383. [func] Track the serial number in a IXFR response and log if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a mismatch occurs. This is a more specific error than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "not exact". [RT #3445]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1382. [bug] make install failed with --enable-libbind. [RT #3656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1381. [bug] named failed to correctly process answers that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contained DNAME records where the resulting CNAME
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington resulted in a negative answer.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington1380. [func] 'rndc recursing' dump recursing queries to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'recursing-file = "named.recursing";'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1379. [func] 'rndc status' now reports tcp and recursion quota
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington1377. [func] dns_zone_load{new}() now reports if the zone was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loaded, queued for loading to up to date.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1376. [func] New function dns_zone_logc() to log to specified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1374. [func] dns_adb_dump() now logs the lame zones associated
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer with each server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1373. [bug] Recovery from expired glue failed under certain
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews circumstances.
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington1372. [bug] named crashes with an assertion failure on exit when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sharing the same port for listening and querying, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews changing listening addresses several times. [RT# 3509]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1371. [bug] notify-source-v6, transfer-source-v6 and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query-source-v6 with explicit addresses and using the
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley same ports as named was listening on could interfere
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with named's ability to answer queries sent to those
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1370. [bug] dig '+[no]recurse' was incorrectly documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1369. [bug] Adding an NS record as the lexicographically last
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record in a secure zone didn't work.
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence1368. [func] remove support for bitstring labels.
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson1367. [func] Use response times to select forwarders.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1365. [func] "localhost" and "localnets" acls now include IPv6
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence addresses / prefixes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1364. [func] Log file name when unable to open memory statistics
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence and dump database files. [RT# 3437]
046a9aca49bdc25bd57d75fd0dd34c021722f095Mark Andrews1363. [func] Listen-on-v6 now supports specific addresses.
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews1362. [bug] remove IFF_RUNNING test when scanning interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1361. [func] log the reason for rejecting a server when resolving
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1360. [bug] --enable-libbind would fail when not built in the
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson source tree for certain OS's.
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson1359. [security] Support patches OpenSSL libraries.
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson1358. [bug] It was possible to trigger a INSIST when debugging
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews large dynamic updates. [RT #3390]
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington1357. [bug] nsupdate was extremely wasteful of memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1356. [tuning] Reduce the number of events / quantum for zone tasks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1354. [doc] lwres man pages had illegal nroff.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1353. [contrib] sdb/ldap to version 0.9.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1352. [bug] dig, host, nslookup when falling back to TCP use the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews current search entry (if any). [RT #3374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1351. [bug] lwres_getipnodebyname() returned the wrong name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1350. [bug] dns_name_fromtext() failed to handle too many labels
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1348. [port] win32: Rewrote code to use I/O Completion Ports
8dc3d2006f679d0a291f7a20612c37e2a7146096Brian Wellington in socket.c and eliminating a host of socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews errors. Performance is enhanced.
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson1347. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1346. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1345. [port] Use a explicit -Wformat with gcc. Not all versions
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson include it in -Wall.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1344. [func] Log if the serial number on the master has gone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If you have multiple machines specified in the masters
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clause you may want to set 'multi-master yes;' to
7d33e8996948523e0180bc7e28a93d534d878dccAndreas Gustafsson suppress this warning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1343. [func] Log successful notifies received (info). Adjust log
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews level for failed notifies to notice.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1342. [func] Log remote address with TCP dispatch failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1341. [func] Allow a rate limiter to be stalled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1340. [bug] Delay and spread out the startup refresh load.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lookups. Bit string lookups are no longer attempted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1338. [placeholder]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson1337. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1336. [func] Nibble lookups under IP6.ARPA are now supported by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_byaddr_create(). dns_byaddr_createptrname() is
f53848e17123569387b279578f0100dca5407da5Mark Andrews deprecated, use dns_byaddr_createptrname2() instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1335. [bug] When performing a nonexistence proof, the validator
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington should discard parent NXTs from higher in the DNS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1334. [bug] When signing/verifying rdatasets, duplicate rdatas
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews need to be suppressed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1333. [contrib] queryperf now reports a summary of returned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rcodes (-c), rcodes are printed in mnemonic form (-v).
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews1332. [func] Report the current serial with periodic commits when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rolling forward the journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1331. [func] Generate DNSSEC wildcard proofs.
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson1330. [bug] When processing events (non-threaded) only allow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the task one chance to use to use its quantum.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1329. [func] named-checkzone will now check if nameservers that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews appear to be IP addresses. Available modes "fail",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "warn" (default) and "ignore" the results of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1328. [bug] The validator could incorrectly verify an invalid
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson negative proof.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1327. [bug] The validator would incorrectly mark data as insecure
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson when seeing a bogus signature before a correct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1326. [bug] DNAME/CNAME signatures were not being cached when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation was not being performed. [RT #3284]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1325. [bug] If the tcpquota was exhausted it was possible to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to trigger a INSIST() failure.
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence1324. [port] darwin: ifconfig.sh now supports darwin.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1322. [bug] dnssec-signzone usage message was misleading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would incorrectly duplicate its output and sign it.
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington1320. [doc] query-source-v6 was missing from options section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1319. [func] libbind: log attempts to exploit #1318.
253f774e358dba38742a484426a4cadf4f248817Brian Wellington1318. [bug] libbind: Remote buffer overrun.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington element name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1316. [bug] libbind: gethostans() could get out of sync parsing
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson the response if there was a very long CNAME chain.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1315. [bug] Options should apply to the internal _bind view.
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson1314. [port] Handle ECONNRESET from sendmsg() [unix].
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington1313. [func] Query log now says if the query was signed (S) or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if EDNS was used (E).
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer1312. [func] Log TSIG key used w/ outgoing zone transfers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1310. [bug] 'rndc stop' failed to cause zones to be flushed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sometimes. [RT #3157]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1309. [func] Log that a zone transfer was covered by a TSIG.
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer1308. [func] DS (delegation signer) support.
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson1307. [bug] nsupdate: allow white space base64 key data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1306. [bug] Badly encoded LOC record when the size, horizontal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews precision or vertical precision was 0.1m.
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington1305. [bug] Document that internal zones are included in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc status results.
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington1304. [func] New function: dns_zone_name().
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1302. [func] Extended rndc dumpdb to support dumping of zones and
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington view selection: 'dumpdb [-all|-zones|-cache] [view]'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1301. [func] New category 'update-security'.
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington1300. [port] Compaq Trucluster support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1299. [bug] Set AI_ADDRCONFIG when looking up addresses
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson via getaddrinfo() (affects dig, host, nslookup, rndc
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and nsupdate).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson could be left with a trailing "\" after configure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been run.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1297. [port] linux: make handling EINVAL from socket() no longer
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson conditional on #ifdef LINUX.
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington1296. [bug] isc_log_closefilelogs() needed to lock the log
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson1295. [bug] isc_log_setdebuglevel() needed to lock the log
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson1294. [func] libbind: no longer attempts bit string labels for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 reverse resolution. Try IP6.ARPA then IP6.INT
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for nibble style resolution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson1292. [func] Enable IPv6 support when using ioctl style interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews scanning and OS supports SIOCGLIFADDR using struct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if_laddrreq.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1291. [func] Enable IPv6 support when using sysctl style interface
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews1290. [func] "dig axfr" now reports the number of messages
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as well as the number of records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson reflect written requirements.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a rdataset to a zone db in the rbtdb implementation of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addrdataset.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1286. [bug] dns_name_downcase() enforce requirement that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews target != NULL or name->buffer != NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1285. [func] lwres: probe the system to see what address families
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are currently in use.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1284. [bug] The RTT estimate on unused servers was not aged.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1283. [func] Use "dataready" accept filter if available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1282. [port] libbind: hpux 11.11 interface scanning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1281. [func] Log zone when unable to get private keys to update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone. Log zone when NXT records are missing from
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews secure zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1280. [bug] libbind: escape '(' and ')' when converting to
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews presentation form.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1278. [func] dig: now supports +[no]cl +[no]ttlid.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1277. [func] You can now create your own customized printing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews styles: dns_master_stylecreate() and
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington dns_master_styledestroy().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1276. [bug] libbind: const pointer conflicts in res_debug.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1274. [bug] Memory leak in lwres_gnbarequest_parse().
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson1273. [port] libbind: solaris: 64 bit binary compatibility.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1272. [contrib] Berkeley DB 4.0 sdb implementation from
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1271. [bug] "recursion available: {denied,approved}" was too
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1270. [bug] Check that system inet_pton() and inet_ntop() support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1269. [port] Openserver: ifconfig.sh support.
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson1268. [port] Openserver: the value FD_SETSIZE depends on whether
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <sys/param.h> is included or not. Be consistent.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1267. [func] isc_file_openunique() now creates file using mode
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 0666 rather than 0600.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are not C++ compatible, use *_TYPE versions instead.
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1264. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1263. [bug] Reference after free error if dns_dispatchmgr_create()
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence support for compressed TSIG owner names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1260. [func] libbind: res_update can now update IPv6 servers,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new function res_findzonecut2().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1258. [bug] libbind: res_nametotype() and res_nametoclass() were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1257. [bug] Failure to write pid-file should not be fatal on
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington reload. [RT #2861]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson1255. [bug] When verifying that an NXT proves nonexistence, check
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the rcode of the message and only do the matching NXT
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews check. That is, for NXDOMAIN responses, check that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the name is in the range between the NXT owner and
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington next name, and for NOERROR NODATA responses, check
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that the type is not present in the NXT bitmap.
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson1254. [func] preferred-glue option from BIND 8.3.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1253. [bug] The dnssec system test failed to remove the correct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1252. [bug] Dig, host and nslookup were not checking the address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the answer was coming from against the address it was
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson sent to. [RT# 2692]
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington1251. [port] win32: a make file contained absolute version specific
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1250. [func] Nsupdate will report the address the update was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1249. [bug] Missing masters clause was not handled gracefully.
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews1248. [bug] DESTDIR was not being propagated between makes.
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer1247. [bug] Don't reset the interface index for link/site local
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses. [RT #2576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1246. [func] New functions isc_sockaddr_issitelocal(),
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and isc_netaddr_islinklocal().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
4ec1a96d90784f70380bdec66f8a0bd6718a5b71Mark Andrews1244. [bug] Receiving a TCP message from a blackhole address would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prevent further messages being received over that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1243. [bug] It was possible to trigger a REQUIRE() in
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington dns_message_findtype(). [RT #2659]
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington1241. [bug] Drop received UDP messages with a zero source port
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as these are invariably forged. [RT #2621]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1240. [bug] It was possible to leak zone references by
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews specifying an incorrect zone to rndc.
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews1239. [bug] Under certain circumstances named could continue to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use a name after it had been freed triggering
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews INSIST() failures. [RT #2614]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1238. [bug] It is possible to lockup the server when shutting down
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews if notifies were being processed. [RT #2591]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1237. [bug] nslookup: "set q=type" failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NULL terminated text regions. [RT #2588]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1235. [func] Report 'out of memory' errors from openssl.
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews1234. [bug] contrib/sdb: 'zonetodb' failed to call
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_result_register(). DNS_R_SEENINCLUDE should not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1233. [bug] The flags field of a KEY record can be expressed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hex as well as decimal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews1229. [bug] named would crash if it received a TSIG signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query as part of an AXFR response. [RT #2570]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington if a number was expected and some other token was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found. [RT#2532]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson1226. [func] Use EDNS for zone refresh queries. [RT #2551]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1225. [func] dns_message_setopt() no longer requires that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_message_renderbegin() to have been called.
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington1224. [bug] 'rrset-order' and 'sortlist' should be additive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not exclusive.
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1222. [bug] Specifying 'port *' did not always result in a system
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews selected (non-reserved) port being used. [RT #2537]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compared case insensitively. [RT #2542]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1220. [func] Support for APL rdata type.
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews1219. [func] Named now reports the TSIG extended error code when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signature verification fails. [RT #1651]
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington1218. [bug] Named incorrectly returned SERVFAIL rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1217. [func] Report locations of previous key definition when a
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence duplicate is detected.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1216. [bug] Multiple server clauses for the same server were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reported. [RT #2514]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley1214. [bug] Win32: isc_file_renameunique() could leave zero length
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files behind.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1213. [func] Report view associated with client if it is not a
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley standard view (_default or _bind).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1212. [port] libbind: 64k answer buffers were causing stack space
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be exceeded for certain OS. Use heap space instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1211. [bug] dns_name_fromtext() incorrectly handled certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews valid octal bitlabels. [RT #2483]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews compatible addresses. [RT #2461]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1209. [bug] Dig, host, nslookup were not checking the message ids
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews on the responses. [RT #2454]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1208. [bug] dns_master_load*() failed to log a error message if
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer an error was detected when parsing the ownername of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a record. [RT #2448]
588b63e1a86fb707172830e14897da624ed380edMark Andrews1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews an invalid pointer.
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger a non-EDNS retry.
452d75b18f9d050086964fa39c326cf388517396Mark Andrews1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the message. [RT #2449]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1204. [bug] libbind: res_nupdate() failed to update the name
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington server addresses before sending the update.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1203. [func] Report locations of previous acl and zone definitions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a duplicate is detected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1202. [func] New functions: cfg_obj_line() and cfg_obj_file().
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews1201. [bug] Require that if 'callbacks' is passed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_fromtext(), callbacks->error and
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington callbacks->warn are initialized.
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews1200. [bug] Log 'errno' that we are unable to convert to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_result_t. [RT #2404]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer1198. [bug] OPT printing style was not consistent with the way the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews header fields are printed. The DO bit was not reported
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if set. Report if any of the MBZ bits are set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1197. [bug] Attempts to define the same acl multiple times were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1196. [contrib] update mdnkit to 2.2.3.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1195. [bug] Attempts to redefine builtin acls should be caught.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1194. [bug] Not all duplicate zone definitions were being detected
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at the named.conf checking stage. [RT #2431]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1193. [bug] dig +besteffort parsing didn't handle packet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews truncation. dns_message_parse() has new flag
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson DNS_MESSAGE_IGNORETRUNCATION.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1192. [bug] The seconds fields in LOC records were restricted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to three decimal places. More decimal places should
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington be allowed but warned about.
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington1191. [bug] A dynamic update removing the last non-apex name in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a secure zone would fail. [RT #2399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1189. [bug] On some systems, malloc(0) returns NULL, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause the caller to report an out of memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #2398]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1188. [bug] Dynamic updates of a signed zone would fail if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews some of the zone private keys were unavailable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1187. [bug] named was incorrectly returning DNSSEC records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in negative responses when the DO bit was not set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EOL token when reading to end of line.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews unless RES_INIT is set when calling res_*init().
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when res_*init() is called.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1183. [bug] Handle ENOSR error when writing to the internal
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer control pipe. [RT #2395]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1182. [bug] The server could throw an assertion failure when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews constructing a negative response packet.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1181. [func] Add the "key-directory" configuration statement,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which allows the server to look for online signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews keys in alternate directories.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1180. [func] dnssec-keygen should always generate keys with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews protocol 3 (DNSSEC), since it's less confusing
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews1179. [func] Add SIG(0) support to nsupdate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1178. [bug] Follow and cache (if appropriate) A6 and other
e412ae947df6de858883564b8676a9650df70d9aMark Andrews data chains to completion in the additional section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1177. [func] Report view when loading zones if it is not a
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews standard view (_default or _bind). [RT #2270]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1176. [doc] Document that allow-v6-synthesis is only performed
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews for clients that are supplied recursive service.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1175. [bug] named-checkzone and named-checkconf failed to call
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_result_register() at startup which could
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson result in runtime exceptions when printing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "out of memory" errors. [RT #2335]
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson1174. [bug] Win32: add WSAECONNRESET to the expected errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from connect(). [RT #2308]
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson1173. [bug] Potential memory leaks in isc_log_create() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_log_settag(). [RT #2336]
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews table of RR types in ARM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1171. [func] Added function isc_region_compare(), updated files in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lib/dns to use this function instead of local one.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1170. [bug] Don't attempt to print the token when a I/O error
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson occurs when parsing named.conf. [RT #2275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1169. [func] Identify recursive queries in the query log.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1167. [contrib] nslint-2.1a3 (from author).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1166. [bug] "Not Implemented" should be reported as NOTIMP,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not NOTIMPL. [RT #2281]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington1164. [bug] Empty masters clauses in slave / stub zones were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews handled gracefully. [RT #2262]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1163. [func] isc_time_formattimestamp() now includes the year.
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews1162. [bug] The allow-notify option was not accepted in slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone statements.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1161. [bug] named-checkzone looped on unbalanced brackets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1160. [bug] Generating Diffie-Hellman keys longer than 1024
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bits could fail. [RT #2241]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1159. [bug] MD and MF are not permitted to be loaded by RFC1123.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1158. [func] Report the client's address when logging notify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1157. [func] match-clients and match-destinations now accept
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer keys. [RT #2045]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1156. [port] The configure test for strsep() incorrectly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews succeeded on certain patched versions of
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington AIX 4.3.3. [RT #2190]
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence1155. [func] Recover from master files being removed from under
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1154. [bug] Don't attempt to obtain the netmask of a interface
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington if there is no address configured. [RT #2176]
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer1153. [func] 'rndc {stop|halt} -p' now reports the process id
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the instance of named being shutdown.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1152. [bug] libbind: read buffer overflows.
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer1151. [bug] nslookup failed to check that the arguments to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the port, timeout, and retry options were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews valid integers and in range. [RT #2099]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews1150. [bug] named incorrectly accepted TTL values
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews containing plus or minus signs, such as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1149. [func] New function isc_parse_uint32().
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews1148. [func] 'rndc-confgen -a' now provides positive feedback.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews the OS. listen-on-v6 { any; }; should no longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result in IPv4 queries be accepted. Similarly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews control { inet :: ... }; should no longer result
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson in IPv4 connections being accepted. This can be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overridden at compile time by defining
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_ALLOW_MAPPED=1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported by the OS by a new function
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews isc_socket_ipv6only().
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews1145. [func] "host" no longer reports a NOERROR/NODATA response
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by printing nothing. [RT #2065]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1144. [bug] rndc-confgen would crash if both the -a and -t
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options were specified. [RT #2159]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1143. [bug] When a trusted-keys statement was present and named
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer was built without crypto support, it would leak memory.
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer1142. [bug] dnssec-signzone would fail to delete temporary files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in some failure cases. [RT #2144]
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews1141. [bug] When named rejected a control message, it would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews leak a file descriptor and memory. It would also
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley fail to respond, causing rndc to hang.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #2139, #2164]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff to the -s option. [RT #2138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1139. [func] It is now possible to flush a given name from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache(s) via 'rndc flushname name [view]'. [RT #2051]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson1138. [func] It is now possible to flush a given name from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache by calling the new function
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_cache_flushname().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1137. [func] It is now possible to flush a given name from the
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson ADB by calling the new function dns_adb_flushname().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1136. [bug] CNAME records synthesized from DNAMEs did not
ba43c53451d5c38765f376eeede457178b36951aBob Halley have a TTL of zero as required by RFC2672.
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews1135. [func] You can now override the default syslog() facility for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named/lwresd at compile time. [RT #1982]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1134. [bug] Multi-threaded servers could deadlock in ferror()
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews when reloading zone files. [RT #1951, #1998]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1132. [func] Improve UPDATE prerequisite failure diagnostic messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1131. [bug] The match-destinations view option did not work with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 destinations. [RT #2073, #2074]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson1130. [bug] Log messages reporting an out-of-range serial number
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not include the out-of-range number but the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews following token. [RT #2076]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1129. [bug] Multi-threaded servers could crash under heavy
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolution load due to a race condition. [RT #2018]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1128. [func] sdb drivers can now provide RR data in either text
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson or wire format, the latter using the new functions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_sdb_putrdata() and dns_sdb_putnamedrdata().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1127. [func] rndc: If the server to contact has multiple addresses,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews try all of them.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1126. [bug] The server could access a freed event if shut
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff down while a client start event was pending
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delivery. [RT #2061]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1125. [bug] rndc: -k option was missing from usage message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff are now documented. [RT #2052]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1123. [bug] dig +[no]fail did not match description. [RT #2052]
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington1122. [tuning] Resolution timeout reduced from 90 to 30 seconds.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1121. [bug] The server could attempt to access a NULL zone
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley table if shut down while resolving.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1587, #2054]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1120. [bug] Errors in options were not fatal. [RT #2002]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington1119. [func] Added support in Win32 for NTFS file/directory ACL's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for access control.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1118. [bug] On multi-threaded servers, a race condition
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson could cause an assertion failure in resolver.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews during resolver shutdown. [RT #2029]
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson1117. [port] The configure check for in6addr_loopback incorrectly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews succeeded on AIX 4.3 when compiling with -O2
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews because the test code was optimized away.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1116. [bug] Setting transfers in a server clause, transfers-in,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or transfers-per-ns to a value greater than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 2147483647 disabled transfers. [RT #2002]
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson1115. [func] Set maximum values for cleaning-interval,
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews heartbeat-interval, interface-interval,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-transfer-idle-in, max-transfer-idle-out,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-transfer-time-in, max-transfer-time-out,
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff statistics-interval of 28 days and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sig-validity-interval of 3660 days. [RT #2002]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1114. [port] Ignore more accept() errors. [RT #2021]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1113. [bug] The allow-update-forwarding option was ignored
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson when specified in a view. [RT #2014]
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson1112. [placeholder]
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson1111. [bug] Multi-threaded servers could deadlock processing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recursive queries due to a locking hierarchy
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson violation in adb.c. [RT #2017]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1110. [bug] dig should only accept valid abbreviations of +options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1109. [bug] nsupdate accepted illegal ttl values.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1108. [bug] On Win32, rndc was hanging when named was not running
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson due to failure to select for exceptional conditions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in select(). [RT #1870]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1107. [bug] nsupdate could catch an assertion failure if an
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington invalid domain name was given as the argument to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the "zone" command.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1106. [bug] After seeing an out of range TTL, nsupdate would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews treat all TTLs as out of range. [RT #2001]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1105. [port] OpenUNIX 8 enable threads by default. [RT #1970]
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington1104. [bug] Invalid arguments to the transfer-format option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause an assertion failure. [RT #1995]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1102. [doc] Note that query logging is enabled by directing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries category to a channel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1101. [bug] Array bounds read error in lwres_gai_strerror.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1100. [bug] libbind: DNSSEC key ids were computed incorrectly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compile time errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1097. [func] libbind: RES_PRF_TRUNC for dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1096. [func] libbind: "DNSSEC OK" (DO) support.
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington1095. [func] libbind: resolver option: no-tld-query. disables
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trying unqualified as a tld. no_tld_query is also
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington supported for FreeBSD compatibility.
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson1094. [func] libbind: add support gcc's format string checking.
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson1093. [doc] libbind: miscellaneous nroff fixes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1092. [bug] libbind: get*by*() failed to check if res_init() had
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been called.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1091. [bug] libbind: misplaced va_end().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the amount of memory consumed resulting in garbage
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson address being returned. Alignment calculations were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wasting space. We weren't suppressing duplicate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1089. [func] libbind: inet_{cidr,net}_{pton,ntop}() now have IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1088. [port] libbind: MPE/iX C.70 (incomplete)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1087. [bug] libbind: struct __res_state too large on 64 bit arch.
c05eb51a1b9ebd156b9fec957d60c2579c968468Mark Andrews1086. [port] libbind: sunos: old sprintf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1085. [port] libbind: solaris: sys_nerr and sys_errlist do not
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson exist when compiling in 64 bit mode.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1084. [cleanup] libbind: gai_strerror() rewritten.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1083. [bug] The default control channel listened on the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wildcard address, not the loopback as documented.
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews1082. [bug] The -g option to named incorrectly caused logging
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be sent to syslog in addition to stderr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1081. [bug] Multicast queries were incorrectly identified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews based on the source address, not the destination
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1080. [bug] BIND 8 compatibility: accept bare IP prefixes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as the second element of a two-element top level
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews sort list statement. [RT #1964]
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson1079. [bug] BIND 8 compatibility: accept bare elements at top
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews level of sort list treating them as if they were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a single element list. [RT #1963]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1078. [bug] We failed to correct bad tv_usec values in one case.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1077. [func] Do not accept further recursive clients when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the total number of recursive lookups being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews processed exceeds max-recursive-clients, even
6d3f954c572db02159deedd444373161fda47a88Brian Wellington if some of the lookups are internally generated.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1915, #1938]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1076. [bug] A badly defined global key could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on load/reload if views were used. [RT #1947]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1075. [bug] Out-of-range network prefix lengths were not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reported. [RT #1954]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1074. [bug] Running out of memory in dump_rdataset() could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause an assertion failure. [RT #1946]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1073. [bug] The ADB cache cleaning should also be space driven.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1915, #1938]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1072. [bug] The TCP client quota could be exceeded when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recursion occurred. [RT #1937]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1071. [bug] Sockets listening for TCP DNS connections
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified an excessive listen backlog. [RT #1937]
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington1070. [bug] Copy DNSSEC OK (DO) to response as specified by
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington1069. [placeholder]
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson1068. [bug] errno could be overwritten by catgets(). [RT #1921]
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews1067. [func] Allow quotas to be soft, isc_quota_soft().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1066. [bug] Provide a thread safe wrapper for strerror().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1065. [func] Runtime support to select new / old style interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews scanning using ioctls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1064. [bug] Do not shut down active network interfaces if we
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are unable to scan the interface list. [RT #1921]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1063. [bug] libbind: "make install" was failing on IRIX.
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson1062. [bug] If the control channel listener socket was shut
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down before server exit, the listener object could
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson be freed twice. [RT #1916]
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson1061. [bug] If periodic cache cleaning happened to start
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while cleaning due to reaching the configured
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews maximum cache size was in progress, the server
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson could catch an assertion failure. [RT #1912]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1060. [func] Move refresh, stub and notify UDP retry processing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews into dns_request.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews1059. [func] dns_request now support will now retry UDP queries,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_request_createvia2() and dns_request_createraw2().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1058. [func] Limited lifetime ticker timers are now available,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_timertype_limited.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1057. [bug] Reloading the server after adding a "file" clause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to a zone statement could cause the server to
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington crash due to a typo in change 1016.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1056. [bug] Rndc could catch an assertion failure on SIGINT due
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer to an uninitialized variable. [RT #1908]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1055. [func] Version and hostname queries can now be disabled
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer using "version none;" and "hostname none;",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews respectively.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1054. [bug] On Win32, cfg_categories and cfg_modules need to be
47ddde42728034854444cf17e278cebaea06f666Michael Graff exported from the libisccfg DLL.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1053. [bug] Dig did not increase its timeout when receiving
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews AXFRs unless the +time option was used. [RT #1904]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1052. [bug] Journals were not being created in binary mode
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in "journal format not recognized" error
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence under Win32. [RT #1889]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1051. [bug] Do not ignore a network interface completely just
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews because it has a noncontiguous netmask. Instead,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews omit it from the localnets ACL and issue a warning.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence1050. [bug] Log messages reporting malformed IP addresses in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address lists such as that of the forwarders option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to include the correct error code, file
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington name, and line number. [RT #1890]
529a6b5224d751504027293a766a4c8b81241869Brian Wellington1049. [func] "pid-file none;" will disable writing a pid file.
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington1048. [bug] Servers built with -DISC_MEM_USE_INTERNAL_MALLOC=1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews didn't work.
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington1047. [bug] named was incorrectly refusing all requests signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with a TSIG key derived from an unsigned TKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negotiation with a NOERROR response. [RT #1886]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1046. [bug] The help message for the --with-openssl configure
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson option was inaccurate. [RT #1880]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1045. [bug] It was possible to skip saving glue for a nameserver
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington for a stub zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1044. [bug] Specifying allow-transfer, notify-source, or
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson notify-source-v6 in a stub zone was not treated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as an error.
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington1043. [bug] Specifying a transfer-source or transfer-source-v6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option in the zone statement for a master zone was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not treated as an error. [RT #1876]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1042. [bug] The "config" logging category did not work properly.
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington1041. [bug] Dig/host/nslookup could catch an assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on SIGINT due to an uninitialized variable. [RT #1867]
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister1040. [bug] Multiple listen-on-v6 options with different ports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were not accepted. [RT #1875]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1039. [bug] Negative responses with CNAMEs in the answer section
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer were cached incorrectly. [RT #1862]
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer1038. [bug] In servers configured with a tkey-domain option,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TKEY queries with an owner name other than the root
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson could cause an assertion failure. [RT #1866, #1869]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1037. [bug] Negative responses whose authority section contain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SOA or NS records whose owner names are not equal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews equal to or parents of the query name should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rejected. [RT #1862]
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson1036. [func] Silently drop requests received via multicast as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews long as there is no final multicast DNS standard.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1035. [bug] If we respond to multicast queries (which we
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson currently do not), respond from a unicast address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as specified in RFC 1123. [RT #137]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1034. [bug] Ignore the RD bit on multicast queries as specified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in RFC 1123. [RT #137]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1033. [bug] Always respond to requests with an unsupported opcode
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with NOTIMP, even if we don't have a matching view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or cannot determine the class.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1032. [func] hostname.bind/txt/chaos now returns the name of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the machine hosting the nameserver. This is useful
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence in diagnosing problems with anycast servers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson1030. [bug] On systems with no resolv.conf file, nsupdate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exited with an error rather than defaulting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to using the loopback address. [RT #1836]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1029. [bug] Some named.conf errors did not cause the loading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the configuration file to return a failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews status even though they were logged. [RT #1847]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1028. [bug] On Win32, dig/host/nslookup looked for resolv.conf
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson in the wrong directory. [RT #1833]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1027. [bug] RRs having the reserved type 0 should be rejected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1026. [placeholder]
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington1025. [bug] Don't use multicast addresses to resolve iterative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries. [RT #101]
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington1024. [port] Compilation failed on HP-UX 11.11 due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incompatible use of the SIOCGLIFCONF macro
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson name. [RT #1831]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1023. [func] Accept hints without TTLs.
da527e4ff6a013364826637963e7ac372e024f33David Lawrence1022. [bug] Don't report empty root hints as "extra data".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1021. [bug] On Win32, log message timestamps were one month
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson later than they should have been, and the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would exhibit unspecified behavior in December.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1020. [bug] IXFR log messages did not distinguish between
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence true IXFRs, AXFR-style IXFRs, and mere version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews polls. [RT #1811]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1019. [bug] The value of the lame-ttl option was limited to 18000
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence seconds, not 1800 seconds as documented. [RT #1803]
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister1018. [bug] The default log channel was not always initialized
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews correctly. [RT #1813]
adade77942b069127a7094df419b3ad39dafb385James Brister1017. [bug] When specifying TSIG keys to dig and nsupdate using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the -k option, they must be HMAC-MD5 keys. [RT #1810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1016. [bug] Slave zones with no backup file were re-transferred
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on every server reload.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1015. [bug] Log channels that had a "versions" option but no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "size" option failed to create numbered log
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson files. [RT #1783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1014. [bug] Some queries would cause statistics counters to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews increment more than once or not at all. [RT #1321]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1013. [bug] It was possible to cancel a query twice when marking
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a server as bogus or by having a blackhole acl.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1012. [bug] The -p option to named did not behave as documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1011. [cleanup] Removed isc_dir_current().
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson1010. [bug] The server could attempt to execute a command channel
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews command after initiating server shutdown, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure. [RT #1766]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1009. [port] OpenUNIX 8 support. [RT #1728]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1008. [port] libtool.m4, ltmain.sh from libtool-1.4.2.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1007. [port] config.guess, config.sub from autoconf-2.52.
5096958739769958dd7a6b69356bf41260033873David Lawrence1006. [bug] If a KEY RR was found missing during DNSSEC validation,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure could subsequently be triggered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the resolver. [RT #1763]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1005. [bug] Don't copy nonzero RCODEs from request to response.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1004. [port] Deal with recvfrom() returning EHOSTDOWN. [RT #1770]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1003. [func] Add the +retry option to dig.
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence1002. [bug] When reporting an unknown class name in named.conf,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews including the file name and line number. [RT #1759]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1001. [bug] win32 socket code doio_recv was not catching a
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews WSACONNRESET error when a client was timing out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the request and closing its socket. [RT #1745]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews1000. [bug] BIND 8 compatibility: accept "HESIOD" as an alias
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for class "HS". [RT #1759]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 999. [func] "rndc retransfer zone [class [view]]" added.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 998. [func] named-checkzone now has arguments to specify the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews chroot directory (-t) and working directory (-w).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 997. [func] Add support for RSA-SHA1 keys (RFC3110).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 996. [func] Issue warning if the configuration filename contains
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the chroot path.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 995. [bug] dig, host, nslookup: using a raw IPv6 address as a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews target address should be fatal on a IPv4 only system.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 994. [func] Treat non-authoritative responses to queries for type
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NS as referrals even if the NS records are in the
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister answer section, because BIND 8 servers incorrectly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews send them that way. This is necessary for DNSSEC
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister validation of the NS records of a secure zone to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews succeed when the parent is a BIND 8 server. [RT #1706]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 993. [func] dig: -v now reports the version.
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence 992. [doc] dig: ~/.digrc is now documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 991. [func] Lower UDP refresh timeout messages to level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 990. [bug] The rndc-confgen man page was not installed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 989. [bug] Report filename if $INCLUDE fails for file related
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews errors. [RT #1736]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 988. [bug] 'additional-from-auth no;' did not work reliably
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the case of queries answered from the cache.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 987. [bug] "dig -help" didn't show "+[no]stats".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 986. [bug] "dig +noall" failed to clear stats and command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 985. [func] Consider network interfaces to be up iff they have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a nonzero IP address rather than based on the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IFF_UP flag. [RT #1160]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 984. [bug] Multi-threading should be enabled by default on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Solaris 2.7 and newer, but it wasn't.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 983. [func] The server now supports generating IXFR difference
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sequences for non-dynamic zones by comparing zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versions, when enabled using the new config
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option "ixfr-from-differences". [RT #1727]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 982. [func] If "memstatistics-file" is set in options the memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics will be written to it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 981. [func] The dnssec tools can now take multiple '-r randomfile'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 980. [bug] Incoming zone transfers restarting after an error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could trigger an assertion failure. [RT #1692]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 979. [func] Incremental master file dumping. dns_master_dumpinc(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_master_dumptostreaminc(), dns_dumpctx_attach(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_dumpctx_detach(), dns_dumpctx_cancel(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_dumpctx_db() and dns_dumpctx_version().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 978. [bug] dns_db_attachversion() had an invalid REQUIRE()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 977. [bug] Improve "not at top of zone" error message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 976. [func] named-checkconf can now test load master zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (named-checkconf -z). [RT #1468]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 975. [bug] "max-cache-size default;" as a view option
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson caused an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 974. [bug] "max-cache-size unlimited;" as a global option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was not accepted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 973. [bug] Failed to log the question name when logging:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "bad zone transfer request: non-authoritative zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 972. [bug] The file modification time code in zone.c was using the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong epoch. [RT #1667]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson 971. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 970. [func] 'max-journal-size' can now be used to set a target
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews size for a journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 969. [func] dig now supports the undocumented dig 8 feature
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of allowing arbitrary labels, not just dotted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews decimal quads, with the -x option. This can be
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews used to conveniently look up RFC2317 names as in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 968. [bug] On win32, the isc_time_now() function was unnecessarily
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling strtime(). [RT #1671]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 967. [bug] On win32, the link for bindevt was not including the
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson required resource file to enable the event viewer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to interpret the error messages in the event log,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 966. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 965. [bug] Including data other than root server NS and A
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson records in the root hint file could cause a rbtdb
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews node reference leak. [RT #1581, #1618]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 964. [func] Warn if data other than root server NS and A records
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer are found in the root hint file. [RT #1581, #1618]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence 963. [bug] Bad ISC_LANG_ENDDECLS. [RT #1645]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 962. [bug] libbind: bad "#undef", don't attempt to install
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-existent nlist.h. [RT #1640]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 961. [bug] Tried to use a IPV6 feature when ISC_PLATFORM_HAVEIPV6
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence was not defined. [RT #1482]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 960. [port] liblwres failed to build on systems with support for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews getrrsetbyname() in the OS. [RT #1592]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 959. [port] On FreeBSD, determine the number of CPUs by calling
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson sysctlbyname(). [RT #1584]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 958. [port] ssize_t is not available on all platforms. [RT #1607]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 957. [bug] sys/select.h inclusion was broken on older platforms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 956. [bug] ns_g_autorndcfile changed to ns_g_keyfile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in named/win32/os.c due to code changes in
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson change #953. win32 .make file for rndc-confgen
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updated to add include path for os.h header.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.2.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 955. [bug] When using views, the zone's class was not being
8775909be9fc67180fc480115716f88174e74471James Brister inherited from the view's class. [RT #1583]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 954. [bug] When requesting AXFRs or IXFRs using dig, host, or
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister nslookup, the RD bit should not be set as zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfers are inherently non-recursive. [RT #1575]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 953. [func] The /var/run/named.key file from change #843
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been replaced by /etc/rndc.key. Both
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named and rndc will look for this file and use
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence it to configure a default control channel key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if not already configured using a different
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews method (rndc.conf / controls). Unlike
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named.key, rndc.key is not created automatically;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it must be created by manually running
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence "rndc-confgen -a".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 952. [bug] The server required manual intervention to serve the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews affected zones if it died between creating a journal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and committing the first change to it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 951. [bug] CFLAGS was not passed to the linker when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews linking some of the test programs under
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 950. [bug] Explicit TTLs did not properly override $TTL
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews due to a bug in change 834. [RT #1558]
57b3597444bc8716459f0fb3022b2c12f4eee2aeAndreas Gustafsson 949. [bug] host was unable to print records larger than 512
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bytes. [RT #1557]
99524919752c9b9abe1814007732b86592011cc1Brian Wellington --- 9.2.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 948. [port] Integrated support for building on Windows NT /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 947. [bug] dns_rdata_soa_t had a badly named element "mname" which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was really the RNAME field from RFC1035. To avoid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews confusion and silent errors that would occur it the
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson "origin" and "mname" elements were given their correct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews names "mname" and "rname" respectively, the "mname"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews element is renamed to "contact".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 946. [cleanup] doc/misc/options is now machine-generated from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration parser syntax tables, and therefore
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington more likely to be correct.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 945. [func] Add the new view-specific options
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews "match-destinations" and "match-recursive-only".
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson 944. [func] Check for expired signatures on load.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 943. [bug] The server could crash when receiving a command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via rndc if the configuration file listed only
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson nonexistent keys in the controls statement. [RT #1530]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defined on some platforms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 941. [bug] The configuration checker crashed if a slave
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews zone didn't contain a masters statement. [RT #1514]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews 940. [bug] Double zone locking failure on error path. [RT #1510]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews --- 9.2.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 939. [port] Add the --disable-linux-caps option to configure for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews systems that manage capabilities outside of named.
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister 938. [placeholder]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister 937. [bug] A race when shutting down a zone could trigger a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews INSIST() failure. [RT #1034]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 936. [func] Warn about IPv4 addresses that are not complete
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dotted quads. [RT #1084]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 935. [bug] inet_pton failed to reject leading zeros.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 934. [port] Deal with systems where accept() spuriously returns
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 933. [bug] configure failed doing libbind on platforms not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported by BIND 8. [RT #1496]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.2.0a3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister when installing isc-config.sh.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #198, #1466]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 931. [bug] The controls statement only attempted to verify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages using the first key in the key list.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (9.2.0a1/a2 only).
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson 930. [func] Query performance testing tool added as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 929. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 928. [bug] nsupdate would send empty update packets if the
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews send (or empty line) command was run after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews another send but before any new updates or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prerequisites were specified. It should simply
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson ignore this command.
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister 927. [bug] Don't hold the zone lock for the entire dump to disk.
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister 926. [bug] The resolver could deadlock with the ADB when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews shutting down (multi-threaded builds only).
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson 925. [cleanup] Remove openssl from the distribution; require that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-openssl be specified if DNSSEC is needed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 924. [port] Extend support for pre-RFC2133 IPv6 implementation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 923. [bug] Multiline TSIG secrets (and other multiline strings)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were not accepted in named.conf. [RT #1469]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 922. [func] Added two new lwres_getrrsetbyname() result codes,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ERR_NONAME and ERR_NODATA.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 921. [bug] lwres returned an incorrect error code if it received
adf82221858138f295bce732e86dcac34645692eJames Brister a truncated message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 920. [func] Increase the lwres receive buffer size to 16K.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 919. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 918. [func] In nsupdate, TSIG errors are no longer treated as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fatal errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 917. [func] New nsupdate command 'key', allowing TSIG keys to
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister be specified in the nsupdate command stream rather
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than the command line.
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister 916. [bug] Specifying type ixfr to dig without specifying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a serial number failed in unexpected ways.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 915. [func] The named-checkconf and named-checkzone programs
0380c44d0238a88e167526954d630d071739ed28Mark Andrews now have a '-v' option for printing their version.
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews 914. [bug] Global 'server' statements were rejected when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using views, even though they were accepted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in 9.1. [RT #1368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 913. [bug] Cache cleaning was not sufficiently aggressive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1441, #1444]
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence 912. [bug] Attempts to set the 'additional-from-cache' or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'additional-from-auth' option to 'no' in a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server with recursion enabled will now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be ignored and cause a warning message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 911. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 910. [port] Some pre-RFC2133 IPv6 implementations do not define
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_ANY_INIT. [RT #1416]
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister 909. [placeholder]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence 908. [func] New program, rndc-confgen, to simplify setting up rndc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 907. [func] The ability to get entropy from either the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews random device, a user-provided file or from
d5399cc351a549db957185993b320a3bffa40e41James Brister the keyboard was migrated from the DNSSEC tools
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to libisc as isc_entropy_usebestsource().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 906. [port] Separated the system independent portion of
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews 905. [bug] Configuring a forward "zone" for the root domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not work. [RT #1418]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 904. [bug] The server would leak memory if attempting to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an expired TSIG key. [RT #1406]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 903. [bug] dig should not crash when receiving a TCP packet
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister 902. [bug] The -d option was ignored if both -t and -g were also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 901. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 900. [bug] A config.guess update changed the system identification
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews string of FreeBSD systems; configure and
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence bin/tests/system/ifconfig.sh now recognize the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.2.0a2 released ---
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson 899. [bug] lib/dns/soa.c failed to compile on many platforms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to inappropriate use of a void value.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #1372, #1373, #1386, #1387, #1395]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 898. [bug] "dig" failed to set a nonzero exit status
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on UDP query timeout. [RT #1323]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 897. [bug] A config.guess update changed the system identification
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence string of UnixWare systems; configure now recognizes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the new string.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 896. [bug] If a configuration file is set on named's command line
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and it has a relative pathname, the current directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (after any possible jailing resulting from named -t)
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence will be prepended to it so that reloading works
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews properly even when a directory option is present.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 895. [func] New function, isc_dir_current(), akin to POSIX's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 894. [bug] When using the DNSSEC tools, a message intended to warn
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson when the keyboard was being used because of the lack
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of a suitable random device was not being printed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 893. [func] Removed isc_file_test() and added isc_file_exists()
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff for the basic functionality that was being added
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with isc_file_test().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 892. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 891. [bug] Return an error when a SIG(0) signed response to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an unsigned query is seen. This should actually
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington do the verification, but it's not currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews possible. [RT #1391]
f34984369fbc87f6cc5c5d1059303377a1724d79James Brister 890. [cleanup] The man pages no longer require the mandoc macros
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and should now format cleanly using most versions of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nroff, and HTML versions of the man pages have been
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson added. Both are generated from DocBook source.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 889. [port] Eliminated blank lines before .TH in nroff man
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson pages since they cause problems with some versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of nroff. [RT #1390]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 888. [bug] Don't die when using TKEY to delete a nonexistent
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson TSIG key. [RT #1392]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 887. [port] Detect broken compilers that can't call static
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington functions from inline functions. [RT #1212]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 886. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 885. [placeholder]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson 884. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 883. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 882. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 881. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 880. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 879. [placeholder]
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington 878. [placeholder]
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington 877. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 876. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 875. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 874. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 873. [placeholder]
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence 872. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 871. [placeholder]
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington 870. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 869. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 868. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 867. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 866. [func] Close debug only file channels when debug is set to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zero. [RT #1246]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 865. [bug] The new configuration parser did not allow
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson the optional debug level in a "severity debug"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clause of a logging channel to be omitted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This is now allowed and treated as "severity
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews debug 1;" like it does in BIND 8.2.4, not as
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson "severity debug 0;" like it did in BIND 9.1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 864. [cleanup] Multi-threading is now enabled by default on
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 863. [bug] If an error occurred while an outgoing zone transfer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was starting up, the server could access a domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name that had already been freed when logging a
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff message saying that the transfer was starting.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 862. [bug] Use after realloc(), non portable pointer arithmetic in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 861. [port] Add support for Mac OS X, by making it equivalent
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson to Darwin. This was derived from the config.guess
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file shipped with Mac OS X. [RT #1355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 860. [func] Drop cross class glue in zone transfers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 859. [bug] Cache cleaning now won't swamp the CPU if there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is a persistent over limit condition.
c50936eb40263b65ebf6afe4e6556e2dc67c10e4Brian Wellington 858. [func] isc_mem_setwater() no longer requires that when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews callback function is non-NULL then its hi_water
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister argument must be greater than its lo_water argument
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (they can now be equal) or that they be non-zero.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 857. [cleanup] Use ISC_MAGIC() to define all magic numbers for
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence structs, for our friends in EBCDIC-land.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 856. [func] Allow partial rdatasets to be returned in answer and
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson authority sections to help non-TCP capable clients
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recover from truncation. [RT #1301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 854. [bug] The config parser didn't properly handle config
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options that were specified in units of time other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than seconds. [RT #1372]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson 853. [bug] configure_view_acl() failed to detach existing acls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 852. [bug] Handle responses from servers which do not know
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence 851. [cleanup] The obsolete support-ixfr option was not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.2.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 850. [bug] dns_rbt_findnode() would not find nodes that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews split on a bitstring label somewhere other than in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the last label of the node. [RT #1351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 848. [func] A minimum max-cache-size of two megabytes is enforced
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson by the cache cleaner.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 847. [func] Added isc_file_test(), which currently only has
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews some very basic functionality to test for the
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed existence of a file, whether a pathname is absolute,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or whether a pathname is the fundamental representation
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews of the current directory. It is intended that this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function can be expanded to test other things a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews programmer might want to know about a file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 846. [func] A non-zero 'param' to dst_key_generate() when making an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hmac-md5 key means that good entropy is not required.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 845. [bug] The access rights on the public file of a symmetric
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence key are now restricted as soon as the file is opened,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than after it has been written and closed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence just as <lwres/net.h> does.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 843. [func] If no controls statement is present in named.conf,
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington or if any inet phrase of a controls statement is
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews lacking a keys clause, then a key will be automatically
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington generated by named and an rndc.conf-style file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named named.key will be written that uses it. rndc
34b394b43e2207e8f8f3703f0402422121455638David Lawrence will use this file only if its normal configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file, or one provided on the command line, does not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 842. [func] 'rndc flush' now takes an optional view.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 841. [bug] When sdb modules were not declared threadsafe, their
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews create and destroy functions were not serialized.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 840. [bug] The config file parser could print the wrong file
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister name if an error was detected after an included file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was parsed. [RT #1353]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 839. [func] Dump packets for which there was no view or that the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews class could not be determined to category "unmatched".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 838. [port] UnixWare 7.x.x is now suported by
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister 837. [cleanup] Multi-threading is now enabled by default only on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OSF1, Solaris 2.7 and newer, and AIX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 836. [func] Upgraded libtool to 1.4.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 835. [bug] The dispatcher could enter a busy loop if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it got an I/O error receiving on a UDP socket.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 834. [func] Accept (but warn about) master files beginning with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an SOA record without an explicit TTL field and
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson lacking a $TTL directive, by using the SOA MINTTL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as a default TTL. This is for backwards compatibility
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with old versions of BIND 8, which accepted such
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files without warning although they are illegal
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson according to RFC1035.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <dns/soa.h>, and extended them to support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all the integer-valued fields of the SOA RR.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 832. [bug] The default location for named.conf in named-checkconf
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews should depend on --sysconfdir like it does in named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 831. [placeholder]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews 830. [func] Implement 'rndc status'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 829. [bug] The DNS_R_ZONECUT result code should only be returned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when an ANY query is made with DNS_DBFIND_GLUEOK set.
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews In all other ANY query cases, returning the delegation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 828. [bug] The errno value from recvfrom() could be overwritten
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by logging code. [RT #1293]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews 827. [bug] When an IXFR protocol error occurs, the slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should retry with AXFR.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 826. [bug] Some IXFR protocol errors were not detected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 825. [bug] zone.c:ns_query() detached from the wrong zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reference. [RT #1264]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson 824. [bug] Correct line numbers reported by dns_master_load().
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson 823. [func] The output of "dig -h" now goes to stdout so that it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can easily be piped through "more". [RT #1254]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 822. [bug] Sending nxrrset prerequisites would crash nsupdate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 821. [bug] The program name used when logging to syslog should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be stripped of leading path components.
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence [RT #1178, #1232]
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister 820. [bug] Name server address lookups failed to follow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A6 chains into the glue of local authoritative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 819. [bug] In certain cases, the resolver's attempts to
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister restart an address lookup at the root could cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the fetch to deadlock (with itself) instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews restarting. [RT #1225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 818. [bug] Certain pathological responses to ANY queries could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause an assertion failure. [RT #1218]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 817. [func] Adjust timeouts for dialup zone queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 816. [bug] Report potential problems with log file accessibility
e411a986b94276c28e6a971f9c3b61d45c635456James Brister at configuration time, since such problems can't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reliably be reported at the time they actually occur.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 815. [bug] If a log file was specified with a path separator
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson character (i.e. "/") in its name and the directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not exist, the log file's name was treated as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews though it were the directory name. [RT #1189]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 814. [bug] Socket objects left over from accept() failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were incorrectly destroyed, causing corruption
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of socket manager data structures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 813. [bug] File descriptors exceeding FD_SETSIZE were handled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews badly. [RT #1192]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 812. [bug] dig sometimes printed incomplete IXFR responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to an uninitialized variable. [RT #1188]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister 810. [bug] The signer name in SIG records was not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down-cased when signing/verifying records. [RT #1186]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 809. [bug] Configuring a non-local address as a transfer-source
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister could cause an assertion failure during load.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 808. [func] Add 'rndc flush' to flush the server's cache.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 807. [bug] When setting up TCP connections for incoming zone
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister transfers, the transfer-source port was not
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed ignored like it should be.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister 806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the calling stack to the zone maintenance level,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing zones to not reload when an included file was
36357e4304862fb47e9fae03c704cb6720310c45James Brister touched but the top-level zone file was not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 805. [bug] When using "forward only", missing root hints should
9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence not cause queries to fail. [RT #1143]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 804. [bug] Attempting to obtain entropy could fail in some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews situations. This would be most common on systems
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with user-space threads. [RT #1131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 803. [bug] Treat all SIG queries as if they have the CD bit set,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews otherwise no data will be returned [RT #749]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 802. [bug] DNSSEC key tags were computed incorrectly in almost
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all cases. [RT #1146]
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence 801. [bug] nsupdate should treat lines beginning with ';' as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comments. [RT #1139]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 800. [bug] dnssec-signzone produced incorrect statistics for
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson large zones. [RT #1133]
b99d080717fdd741961d736581270d37bad8bec0David Lawrence 799. [bug] The ADB didn't find AAAA glue in a zone unless A6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews glue was also present.
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson 798. [bug] nsupdate should be able to reject bad input lines
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and continue. [RT #1130]
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence 797. [func] Issue a warning if the 'directory' option contains
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a relative path. [RT #269]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 796. [func] When a size limit is associated with a log file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only roll it when the size is reached, not every
358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence time the log file is opened. [RT #1096]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 795. [func] Add the +multiline option to dig. [RT #1095]
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence 794. [func] Implement the "port" and "default-port" statements
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 793. [cleanup] The DNSSEC tools could create filenames that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews illegal or contained shell meta-characters. They
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence now use a different text encoding of names that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews doesn't have these problems. [RT #1101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 792. [cleanup] Replace the OMAPI command channel protocol with a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 791. [bug] The command channel now works over IPv6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 790. [bug] Wildcards created using dynamic update or IXFR
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence could fail to match. [RT #1111]
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence 789. [bug] The "localhost" and "localnets" ACLs did not match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when used as the second element of a two-element
eefea43215016bce437ab4a7441b2851fd182960David Lawrence sortlist item.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 788. [func] Add the "match-mapped-addresses" option, which
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence causes IPv6 v4mapped addresses to be treated as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv4 addresses for the purpose of acl matching.
c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence 787. [bug] The DNSSEC tools failed to downcase domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews names when mapping them into file names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 786. [bug] When DNSSEC signing/verifying data, owner names were
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson not properly down-cased.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 785. [bug] A race condition in the resolver could cause
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence an assertion failure. [RT #673, #872, #1048]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 784. [bug] nsupdate and other programs would not quit properly
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley if some signals were blocked by the caller. [RT #1081]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 783. [bug] Following CNAMEs could cause an assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when either using an sdb database or under very
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rare conditions.
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence 782. [func] Implement the "serial-query-rate" option.
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence 781. [func] Avoid error packet loops by dropping duplicate FORMERR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses. [RT #1006]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 780. [bug] Error handling code dealing with out of memory or
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington other rare errors could lead to assertion failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by calling functions on uninitialized names. [RT #1065]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 779. [func] Added the "minimal-responses" option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 778. [bug] When starting cache cleaning, cleaning_timer_action()
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence returned without first pausing the iterator, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause deadlock. [RT #998]
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence 777. [bug] An empty forwarders list in a zone failed to override
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews global forwarders. [RT #995]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 776. [func] Improved error reporting in denied messages. [RT #252]
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence 775. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 774. [func] max-cache-size is implemented.
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews 773. [func] Added isc_rwlock_trylock() to attempt to lock without
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff 772. [bug] Owner names could be incorrectly omitted from cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dumps in the presence of negative caching entries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 771. [cleanup] TSIG errors related to unsynchronized clocks
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are logged better. [RT #919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 770. [func] Add the "edns yes_or_no" statement to the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clause. [RT #524]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 769. [func] Improved error reporting when parsing rdata. [RT #740]
8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence 768. [bug] The server did not emit an SOA when a CNAME
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or DNAME chain ended in NXDOMAIN in an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews authoritative zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 767. [placeholder]
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer 766. [bug] A few cases in query_find() could leak fname.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This would trigger the mpctx->allocated == 0
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence assertion when the server exited.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #739, #776, #798, #812, #818, #821, #845,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence #892, #935, #966]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 765. [func] ACL names are once again case insensitive, like
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in BIND 8. [RT #252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 764. [func] Configuration files now allow "include" directives
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in more places, such as inside the "view" statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #377, #728, #860]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 763. [func] Configuration files no longer have reserved words.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #731, #753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 762. [cleanup] The named.conf and rndc.conf file parsers have
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence been completely rewritten.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 761. [bug] _REENTRANT was still defined when building with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --disable-threads.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 760. [contrib] Significant enhancements to the pgsql sdb driver.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 759. [bug] The resolver didn't turn off "avoid fetches" mode
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when restarting, possibly causing resolution
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to fail when it should not. This bug only affected
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews platforms which support both IPv4 and IPv6. [RT #927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 758. [bug] The "avoid fetches" code did not treat negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache entries correctly, causing fetches that would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be useful to be avoided. This bug only affected
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews platforms which support both IPv4 and IPv6. [RT #927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 757. [func] Log zone transfers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 756. [bug] dns_zone_load() could "return" success when no master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file was configured.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 755. [bug] Fix incorrectly formatted log messages in zone.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 754. [bug] Certain failure conditions sending UDP packets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause the server to retry the transmission
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews indefinitely. [RT #902]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 753. [bug] dig, host, and nslookup would fail to contact a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews remote server if getaddrinfo() returned an IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address on a system that doesn't support IPv6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 752. [func] Correct bad tv_usec elements returned by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gettimeofday().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 751. [func] Log successful zone loads / transfers. [RT #898]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 750. [bug] A query should not match a DNAME whose trust level
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence is pending. [RT #916]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 749. [bug] When a query matched a DNAME in a secure zone, the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server did not return the signature of the DNAME.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 748. [doc] List supported RFCs in doc/misc/rfc-compliance.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 747. [bug] The code to determine whether an IXFR was possible
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence did not properly check for a database that could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not have a journal. [RT #865, #908]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 746. [bug] The sdb didn't clone rdatasets properly, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a crash when the server followed delegations. [RT #905]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 745. [func] Report the owner name of records that fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews semantic checks while loading.
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence 744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result of an ANY or SIG query, the resolver failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to setup the return event's rdatasets, causing an
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence assertion failure in the query code. [RT #881]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 743. [bug] Receiving a large number of certain malformed
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence answers could cause named to stop responding.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 742. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 741. [port] Support openssl-engine. [RT #709]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 740. [port] Handle openssl library mismatches slightly better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 739. [port] Look for /dev/random in configure, rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assuming it will be there for only a predefined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 738. [bug] If a non-threadsafe sdb driver supported AXFR and
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson received an AXFR request, it would deadlock or die
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with an assertion failure. [RT #852]
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence 737. [port] stdtime.c failed to compile on certain platforms.
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence 736. [func] New functions isc_task_{begin,end}exclusive().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 735. [doc] Add BIND 4 migration notes.
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence 734. [bug] An attempt to re-lock the zone lock could occur if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the server was shutdown during a zone transfer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 733. [bug] Reference counts of dns_acl_t objects need to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews locked but were not. [RT #801, #821]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 731. [bug] Certain zone errors could cause named-checkzone to
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley fail ungracefully. [RT #819]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 730. [bug] lwres_getaddrinfo() returns the correct result when
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley it fails to contact a server. [RT #768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 729. [port] pthread_setconcurrency() needs to be called on Solaris.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 728. [bug] Fix comment processing on master file directives.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 727. [port] Work around OS bug where accept() succeeds but
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence fails to fill in the peer address of the accepted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connection, by treating it as an error rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure. [RT #809]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 726. [func] Implement the "trace" and "notrace" commands in rndc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 725. [bug] Installing man pages could fail.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 724. [func] New libisc functions isc_netaddr_any(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_netaddr_any6().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to return DNS_R_SERVFAIL. [RT #783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 722. [func] Allow incremental loads to be canceled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 721. [cleanup] Load manager and dns_master_loadfilequota() are no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 720. [bug] Server could enter infinite loop in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dispatch.c:do_cancel(). [RT #733]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 719. [bug] Rapid reloads could trigger an assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #743, #763]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 718. [cleanup] "internal" is no longer a reserved word in named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #753, #731]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 717. [bug] Certain TKEY processing failure modes could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reference an uninitialized variable, causing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server to crash. [RT #750]
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence 716. [bug] The first line of a $INCLUDE master file was lost if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an origin was specified. [RT #744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 715. [bug] Resolving some A6 chains could cause an assertion
d111a46c88adda33a93839f4934e127b6147d87dBob Halley failure in adb.c. [RT #738]
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson 714. [bug] Preserve interval timers across reloads unless changed.
6f17d90364f01c3e81073a9ffb40b0093878c8e2Brian Wellington 713. [func] named-checkconf takes '-t directory' similar to named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 712. [bug] Sending a large signed update message caused an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure. [RT #718]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 711. [bug] The libisc and liblwres implementations of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inet_ntop contained an off by one error.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 710. [func] The forwarders statement now takes an optional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews port. [RT #418]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 709. [bug] ANY or SIG queries for data with a TTL of 0
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews would return SERVFAIL. [RT #620]
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews 708. [bug] When building with --with-openssl, the openssl headers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews included with BIND 9 should not be used. [RT #702]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 707. [func] The "filename" argument to named-checkzone is no
2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson longer optional, to reduce confusion. [RT #612]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff 706. [bug] Zones with an explicit "allow-update { none; };"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were considered dynamic and therefore not reloaded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on SIGHUP or "rndc reload".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 705. [port] Work out resource limit type for use where rlim_t is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not available. [RT #695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 704. [port] RLIMIT_NOFILE is not available on all platforms.
53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington 703. [port] sys/select.h is needed on older platforms. [RT #695]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington 702. [func] If the address 0.0.0.0 is seen in resolv.conf,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use 127.0.0.1 instead. [RT #693]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington 701. [func] Root hints are now fully optional. Class IN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews views use compiled-in hints by default, as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before. Non-IN views with no root hints now
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson provide authoritative service but not recursion.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A warning is logged if a view has neither root
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hints nor authoritative data for the root. [RT #696]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 700. [bug] $GENERATE range check was wrong. [RT #688]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 699. [bug] The lexer mishandled empty quoted strings. [RT #694]
4716e94840921878b26e493576f84afe4fe08752Mark Andrews 698. [bug] Aborting nsupdate with ^C would lead to several
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews race conditions.
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence 697. [bug] nsupdate was not compatible with the undocumented
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND 8 behavior of ignoring TTLs in "update delete"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews commands. [RT #693]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 696. [bug] lwresd would die with an assertion failure when passed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a zero-length name. [RT #692]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 695. [bug] If the resolver attempted to query a blackholed or
3886e748a4086b813e3453232a742903762fedadBob Halley bogus server, the resolution would fail immediately.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 694. [bug] $GENERATE did not produce the last entry.
3886e748a4086b813e3453232a742903762fedadBob Halley [RT #682, #683]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 693. [bug] An empty lwres statement in named.conf caused
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley the server to crash while loading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 692. [bug] Deal with systems that have getaddrinfo() but not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gai_strerror(). [RT #679]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 691. [bug] Configuring per-view forwarders caused an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #675, #734]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 690. [func] $GENERATE now supports DNAME. [RT #654]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington 689. [doc] man pages are now installed. [RT #210]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley 688. [func] "make tags" now works on systems with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "Exuberant Ctags" etags.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 687. [bug] Only say we have IPv6, with sufficient functionality,
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley if it has actually been tested. [RT #586]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 686. [bug] dig and nslookup can now be properly aborted during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews blocking operations. [RT #568]
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson 685. [bug] nslookup should use the search list/domain options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from resolv.conf by default. [RT #405, #630]
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson 684. [bug] Memory leak with view forwarders. [RT #656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 683. [bug] File descriptor leak in isc_lex_openfile().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 682. [bug] nslookup displayed SOA records incorrectly. [RT #665]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 681. [bug] $GENERATE specifying output format was broken. [RT #653]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 680. [bug] dns_rdata_fromstruct() mishandled options bigger
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff than 255 octets.
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence 679. [bug] $INCLUDE could leak memory and file descriptors on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reload. [RT #639]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 678. [bug] "transfer-format one-answer;" could trigger an assertion
11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson failure. [RT #646]
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence 677. [bug] dnssec-signzone would occasionally use the wrong ttl
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for database operations and fail. [RT #643]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 676. [bug] Log messages about lame servers to category
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'lame-servers' rather than 'resolver', so as not
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence to be gratuitously incompatible with BIND 8.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 675. [bug] TKEY queries could cause the server to leak
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister 674. [func] Allow messages to be TSIG signed / verified using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a offset from the current time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 673. [func] The server can now convert RFC1886-style recursive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lookup requests into RFC2874-style lookups, when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabled using the new option "allow-v6-synthesis".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 672. [bug] The wrong time was in the "time signed" field when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replying with BADTIME error.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence 671. [bug] The message code was failing to parse a message with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no question section and a TSIG record. [RT #628]
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence 670. [bug] The lwres replacements for getaddrinfo and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews getipnodebyname didn't properly check for the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews existence of the sockaddr sa_len field.
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister 669. [bug] dnssec-keygen now makes the public key file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-world-readable for symmetric keys. [RT #403]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 668. [func] named-checkzone now reports multiple errors in master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 667. [bug] On Linux, running named with the -u option and a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-world-readable configuration file didn't work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 666. [bug] If a request sent by dig is longer than 512 bytes,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 665. [bug] Signed responses were not sent when the size of the
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley TSIG + question exceeded the maximum message size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 664. [bug] The t_tasks and t_timers module tests are now skipped
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when building without threads, since they require
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington 663. [func] Accept a size_spec, not just an integer, in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (unimplemented and ignored) max-ixfr-log-size option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for compatibility with recent versions of BIND 8.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 662. [bug] dns_rdata_fromtext() failed to log certain errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 661. [bug] Certain UDP IXFR requests caused an assertion failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (mpctx->allocated == 0). [RT #355, #394, #623]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 660. [port] Detect multiple CPUs on HP-UX and IRIX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 659. [performance] Rewrite the name compression code to be much faster.
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley 658. [cleanup] Remove all vestiges of 16 bit global compression.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 657. [bug] When a listen-on statement in an lwres block does not
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley specify a port, use 921, not 53. Also update the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listen-on documentation. [RT #616]
be768c2e952c34438025999125f984995a2c675fBob Halley 656. [func] Treat an unescaped newline in a quoted string as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an error. This means that TXT records with missing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews close quotes should have meaningful errors printed.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews 655. [bug] Improve error reporting on unexpected eof when loading
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley zones. [RT #611]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 654. [bug] Origin was being forgotten in TCP retries in dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 653. [bug] +defname option in dig was reversed in sense.
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister 652. [bug] zone_saveunique() did not report the new name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 651. [func] The AD bit in responses now has the meaning
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson specified in <draft-ietf-dnsext-ad-is-secure>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 650. [bug] SIG(0) records were being generated and verified
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister incorrectly. [RT #606]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister 649. [bug] It was possible to join to an already running fctx
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after it had "cloned" its events, but before it sent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews them. In this case, the event of the newly joined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fetch would not contain the answer, and would
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley trigger the INSIST() in fctx_sendevents(). In
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND 9.0, this bug did not trigger an INSIST(), but
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews caused the fetch to fail with a SERVFAIL result.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #588, #597, #605, #607]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 648. [port] Add support for pre-RFC2133 IPv6 implementations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 647. [bug] Resolver queries sent after following multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referrals had excessively long retransmission
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeouts due to incorrectly counting the referrals
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington as "restarts".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington didn't _cleanly_ fix the problem it was trying to fix.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 644. [bug] #622 needed more work. [RT #562]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 643. [bug] xfrin error messages made more verbose, added class
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the zone. [RT# 599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 642. [bug] Break the exit_check() race in the zone module.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence --- 9.1.0b2 released ---
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 641. [bug] $GENERATE caused a uninitialized link to be used.
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which