CHANGES revision b5f6271f4daf1e54501af2cb7dd278d7e8003d65
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3744. [experimental] SIT: send and process Source Identity Tokens
8664a1bd40814ed0b42eacfc5eb354b598dfd6dfTinderbox User (which are similar to DNS Cookies by Donald Eastlake)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and are designed to help clients detect off path
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews spoofed responses and for servers to detect legitimate
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 SIT use a experimental EDNS option code (65001).
9eae5f2a7a189353bd4fcbb939c2b61094b3bfe9Tatuya JINMEI 神明達哉 SIT can be enabled via --enable-developer or
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --enable-sit. It is on by default in Windows.
5b02fc32d693bb811199308a40143df0adf818c1Mark Andrews RRL processing as been updated to know about SIT with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 legitimate clients not being rate limited. [RT #35389]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3743. [bug] delegation-only flag wasn't working in forward zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 declarations despite being documented. This is
420a43c8d8028992a4e9c170022f97bfac689025Evan Hunt needed to support turning off forwarding and turning
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 on delegation only at the same name. [RT #35392]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3742. [port] linux: libcap support: declare curval at start of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 block. [RT #35387]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3741. [func] "delve" (domain entity lookup and validation engine):
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 A new tool with dig-like semantics for performing DNS
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 lookups, with internal DNSSEC validation, using the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 same resolver and validator logic as named. This
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 allows easy validation of DNSSEC data in environments
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 with untrustworthy resolvers, and assists with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 troubleshooting of DNSSEC problems. (Note: not yet
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 available on win32.) [RT #32406]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3740. [contrib] Minor fixes to configure --with-dlz-bdb,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3739. [func] Added per-zone stats counters to track TCP and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 UDP queries. [RT #35375]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3737. [bug] 'rndc retransfer' could trigger a assertion failure
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 with inline zones. [RT #35353]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3736. [bug] nsupdate: When specifying a server by name,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 fall back to alternate addresses if the first
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 address for that name is not reachable. [RT #25784]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3735. [cleanup] Merged the libiscpk11 library into libisc
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to simplify dependencies. [RT #35205]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3734. [bug] Improve building with libtool. [RT #35314]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3733. [func] Improve interface scanning support. Interface
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 information will be automatically updated if the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 OS supports routing sockets (MacOS, *BSD, Linux).
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Use "automatic-interface-scan no;" to disable.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Add "rndc scan" to trigger a scan. [RT #23027]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 driver to dump core on 64-bit systems. [RT #35324]
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt3731. [func] Added a "no-case-compress" ACL, which causes
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt named to use case-insensitive compression
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt (disabling change #3645) for specified
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt clients. (This is useful when dealing
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt with broken client implementations that
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt use case-sensitive name comparisons,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 rejecting responses that fail to match the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 capitalization of the query that was sent.)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3730. [cleanup] Added "never" as a synonym for "none" when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 configuring key event dates in the dnssec tools.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3729. [bug] dnssec-keygen could set the publication date
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 incorrectly when only the activation date was
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 specified on the command line. [RT #35278]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3728. [doc] Expanded native-PKCS#11 documentation,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 specifically pkcs11: URI labels. [RT #35287]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3727. [func] The isc_bitstring API is no longer used and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 has been removed from libisc. [RT #35284]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3726. [cleanup] Clarified the error message when attempting
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to configure more than 32 response-policy zones.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3725. [contrib] Updated zkt and nslint to newest versions,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 cleaned up and rearranged the contrib
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 directory, and added a README.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.10.0a2 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3724. [bug] win32: Fixed a bug that prevented dig and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 host from exiting properly after completing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a UDP query. [RT #35288]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3723. [cleanup] Imported keys are now handled the same way
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 regardless of DNSSEC algorithm. [RT #35215]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3722. [bug] Using geoip ACLs in a blackhole statement
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 could cause a segfault. [RT #35272]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3721. [doc] Improved documentation of the EDNS processing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 enhancements introduced in change #3593. [RT #35275]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3720. [bug] Address compiler warnings. [RT #35261]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3719. [bug] Address memory leak in in peer.c. [RT #35255]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 probing to see if it is possible to set dscp values
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 on a per packet basis. [RT #35252]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3716. [bug] The dns_request code was setting dcsp values when not
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 requested. [RT #35252]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3715. [bug] The region and city databases could fail to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 initialize when using some versions of libGeoIP,
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt causing assertion failures when named was
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt configured to use them. [RT #35427]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3714. [test] System tests that need to test for cryptography
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 support before running can now use a common
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "testcrypto.sh" script to do so. [RT #35213]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3713. [bug] Save memory by not storing "also-notify" addresses
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in zone objects that are configured not to send
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 notify requests. [RT #35195]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3712. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3711. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3710. [bug] Address double dns_zone_detach when switching to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 using automatic empty zones from regular zones.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3709. [port] Use built-in versions of strptime() and timegm()
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 on all platforms to avoid portability issues.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3708. [bug] Address a portentry locking issue in dispatch.c.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 on a missing resolv.conf file and initializes the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 structure as if it had been configured with:
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 nameserver ::1
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 nameserver 127.0.0.1
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Note: Callers will need to be updated to treat
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ISC_R_FILENOTFOUND as a qualified success or else
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 they will leak memory. The following code fragment
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 will work with both old and new versions without
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 changing the behaviour of the existing code.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 resconf = NULL;
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 result = irs_resconf_load(mctx, "/etc/resolv.conf",
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 if (result != ISC_SUCCESS) {
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 if (resconf != NULL)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 irs_resconf_destroy(&resconf);
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3706. [contrib] queryperf: Fixed a possible integer overflow when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 printing results. [RT #35182]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3705. [func] "configure --enable-native-pkcs11" enables BIND
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to use the PKCS#11 API for all cryptographic
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 functions, so that it can drive a hardware service
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 module directly without the need to use a modified
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 OpenSSL as intermediary (so long as the HSM's vendor
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 provides a complete-enough implementation of the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 PKCS#11 interface). This has been tested successfully
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 with the Thales nShield HSM and with SoftHSMv2 from
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the OpenDNSSEC project. [RT #29031]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3703. [func] To improve recursive resolver performance, cache
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 records which are still being requested by clients
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 can now be automatically refreshed from the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 authoritative server before they expire, reducing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 or eliminating the time window in which no answer
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 is available in the cache. See the "prefetch" option
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 for more details. [RT #35041]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3702. [func] 'dnssec-coverage -l' option specifies a length
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of time to check for coverage; events further into
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the future are ignored. 'dnssec-coverage -z'
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 checks only ZSK events, and 'dnssec-coverage -k'
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 checks only KSK events. (Thanks to Peter Palfrader.)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3701. [func] named-checkconf can now obscure shared secrets
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when printing by specifying '-x'. [RT #34465]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3700. [func] Allow access to subgroups of XML statistics via
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 special URLs http://<server>:<port>/xml/v3/server,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 /zones, /net, /tasks, /mem, and /status. [RT #35115]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3699. [bug] Improvements to statistics channel XSL stylesheet:
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the stylesheet can now be cached by the browser;
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 section headers are omitted from the stats display
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when there is no data in those sections to be
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 displayed; counters are now right-justified for
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 easier readability. [RT #35117]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3698. [cleanup] Replaced all uses of memcpy() with memmove().
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3697. [bug] Handle "." as a search list element when IDN support
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 is enabled. [RT #35133]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3696. [bug] dig failed to handle AXFR style IXFR responses which
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 span multiple messages. [RT #35137]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3695. [bug] Address a possible race in dispatch.c. [RT #35107]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3694. [bug] Warn when a key-directory is configured for a zone,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 but does not exist or is not a directory. [RT #35108]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3693. [security] memcpy was incorrectly called with overlapping
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ranges resulting in malformed names being generated
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 on some platforms. This could cause INSIST failures
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when serving NSEC3 signed zones (CVE-2014-0591).
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 was no data at the node. [RT #35080]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3691. [contrib] Address null pointer dereference in LDAP and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 MySQL DLZ modules.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3690. [bug] Iterative responses could be missed when the source
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 port for an upstream query was the same as the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 listener port (53). [RT #34925]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3689. [bug] Fixed a bug causing an insecure delegation from one
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 static-stub zone to another to fail with a broken
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 trust chain. [RT #35081]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3688. [bug] loadnode could return a freed node on out of memory.
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3687. [bug] Address null pointer dereference in zone_xfrdone.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3686. [func] "dnssec-signzone -Q" drops signatures from keys
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 that are still published but no longer active.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3685. [bug] "rndc refresh" didn't work correctly with slave
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zones using inline-signing. [RT #35105]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3684. [bug] The list of included files would grow on reload.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3683. [cleanup] Add a more detailed "not found" message to rndc
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 commands which specify a zone name. [RT #35059]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3682. [bug] Correct the behavior of rndc retransfer to allow
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 inline-signing slave zones to retain NSEC3 parameters
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 instead of reverting to NSEC. [RT #34745]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3681. [port] Update the Windows build system to support feature
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 selection and WIN64 builds. This is a work in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 progress. [RT #34160]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3680. [bug] Ensure buffer space is available in "rndc zonestatus".
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3679. [bug] dig could fail to clean up TCP sockets still
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt waiting on connect(). [RT #35074]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3678. [port] Update config.guess and config.sub. [RT #35060]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 times. [RT #35073]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3676. [bug] "named-checkconf -z" now checks zones of type
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 hint and redirect as well as master. [RT #35046]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3675. [misc] Provide a place for third parties to add version
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt information for their extensions in the version
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 file by setting the EXTENSIONS variable.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.10.0a1 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3673. [func] New "in-view" zone option allows direct sharing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of zones between views. [RT #32968]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3672. [func] Local address can now be specified when using
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt dns_client API. [RT #34811]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3671. [bug] Don't allow dnssec-importkey overwrite a existing
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt non-imported private key.
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3670. [bug] Address read after free in server side of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 lwres_getrrsetbyname. [RT #29075]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
0984eeca5b41a8678def4433bd6de51888ce0b04Tatuya JINMEI 神明達哉3667. [test] dig: add support to keep the TCP socket open between
0984eeca5b41a8678def4433bd6de51888ce0b04Tatuya JINMEI 神明達哉 successive queries (+[no]keepopen). [RT #34918]
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt3666. [func] Add a tool, named-rrchecker, for checking the syntax
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt of individual resource records. This tool is intended
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt to be called by provisioning systems so that the front
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt end does not need to be upgraded to support new DNS
0984eeca5b41a8678def4433bd6de51888ce0b04Tatuya JINMEI 神明達哉 record types. [RT #34778]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3665. [bug] Failure to release lock on error in receive_secure_db.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 locking and other bugs. [RT #34855]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3663. [bug] Address bugs in dns_rdata_fromstruct and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3661. [bug] Address lock order reversal deadlock with inline zones.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3659. [port] solaris: don't add explict dependencies/rules for
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 python programs as make won't use the implicit rules.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3658. [port] linux: Address platform specific compilation issue
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when libcap-devel is installed. [RT #34838]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3657. [port] Some readline clones don't accept NULL pointers when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 calling add_history. [RT #34842]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3656. [security] Treat an all zero netmask as invalid when generating
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the localnets acl. (The prior behavior could
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 allow unexpected matches when using some versions
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of Winsock: CVE-2013-6320.) [RT #34687]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3655. [cleanup] Simplify TCP message processing when requesting a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone transfer. [RT #34825]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3654. [bug] Address race condition with manual notify requests.
8013077aa7ed5d6e1daddc973ddb3c7cc7d28df1Mark Andrews3653. [func] Create delegations for all "children" of empty zones
8013077aa7ed5d6e1daddc973ddb3c7cc7d28df1Mark Andrews except "forward first". [RT #34826]
8013077aa7ed5d6e1daddc973ddb3c7cc7d28df1Mark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3651. [tuning] Adjust when a master server is deemed unreachable.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3650. [tuning] Use separate rate limiting queues for refresh and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 notify requests. [RT #30589]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3649. [cleanup] Include a comment in .nzf files, giving the name of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the associated view. [RT #34765]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3648. [test] Updated the ATF test framework to version 0.17.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3647. [bug] Address a race condition when shutting down a zone.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3646. [bug] Journal filename string could be set incorrectly,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 causing garbage in log messages. [RT #34738]
8013077aa7ed5d6e1daddc973ddb3c7cc7d28df1Mark Andrews3645. [protocol] Use case sensitive compression when responding to
f9adb48aeade1ce6a815cf7fba57acac14861723Tinderbox User queries. [RT #34737]
8013077aa7ed5d6e1daddc973ddb3c7cc7d28df1Mark Andrews3644. [protocol] Check that EDNS subnet client options are well formed.
f9adb48aeade1ce6a815cf7fba57acac14861723Tinderbox User3643. [doc] Clarify RRL "slip" documentation.
8013077aa7ed5d6e1daddc973ddb3c7cc7d28df1Mark Andrews3642. [func] Allow externally generated DNSKEY to be imported
8013077aa7ed5d6e1daddc973ddb3c7cc7d28df1Mark Andrews into the DNSKEY management framework. A new tool
f9adb48aeade1ce6a815cf7fba57acac14861723Tinderbox User dnssec-importkey is used to do this. [RT #34698]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3641. [bug] Handle changes to sig-validity-interval settings
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 better. [RT #34625]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3640. [bug] ndots was not being checked when searching. Only
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 continue searching on NXDOMAIN responses. Add the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ability to specify ndots to nslookup. [RT #34711]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in a key zone. [RT #34238]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 encountered. [RT #34668]
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier3637. [bug] 'allow-query-on' was checking the source address
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier rather than the destination address. [RT #34590]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3636. [bug] Automatic empty zones now behave better with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 forward only "zones" beneath them. [RT #34583]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3635. [bug] Signatures were not being removed from a zone with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 only KSK keys for a algorithm. [RT #34439]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3634. [func] Report build-id in rndc status. Report build-id
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when building from a git repository. [RT #20422]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3633. [cleanup] Refactor OPT processing in named to make it easier
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to support new EDNS options. [RT #34414]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3632. [bug] Signature from newly inactive keys were not being
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 removed. [RT #32178]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3631. [bug] Remove spurious warning about missing signatures when
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt qtype is SIG. [RT #34600]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3629. [func] Allow the printing of cryptographic fields in DNSSEC
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt records by dig to be suppressed (dig +nocrypto).
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3628. [func] Report DNSKEY key id's when dumping the cache.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3626. [func] dig: NSID output now easier to read. [RT #21160]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3625. [bug] Don't send notify messages to machines outside of the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3624. [bug] Look for 'json_object_new_int64' when looking for a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the json library. [RT #34449]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3623. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3622. [tuning] Eliminate an unnecessary lock when incrementing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 cache statistics. [RT #34339]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3621. [security] Incorrect bounds checking on private type 'keydata'
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 can lead to a remotely triggerable REQUIRE failure
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (CVE-2013-4854). [RT #34238]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3620. [func] Added "rpz-client-ip" policy triggers, enabling
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 RPZ responses to be configured on the basis of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the client IP address; this can be used, for
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 example, to blacklist misbehaving recursive
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 or stub resolvers. [RT #33605]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3618. [func] "rndc reload" now checks modification times of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 include files as well as master files to determine
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 whether to skip reloading a zone. [RT #33936]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3617. [bug] Named was failing to answer queries during
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "rndc reload" [RT #34098]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3616. [bug] Change #3613 was incomplete. [RT #34177]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3615. [cleanup] "configure" now finishes by printing a summary
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of optional BIND features and whether they are
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt active or inactive. ("configure --enable-full-report"
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt increases the verbosity of the summary.) [RT #31777]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3614. [port] Check for <linux/types.h>. [RT #34162]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3613. [bug] named could crash when deleting inline-signing
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt zones with "rndc delzone". [RT #34066]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3611. [bug] Improved resistance to a theoretical authentication
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt attack based on differential timing. [RT #33939]
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier3610. [cleanup] win32: Some executables had been omitted from the
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt installer. [RT #34116]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3609. [bug] Corrected a possible deadlock in applications using
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt the export version of the isc_app API. [RT #33967]
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt3608. [port] win32: added todos.pl script to ensure all text files
0618287859d99c2fc69790df28500fb37324d43dEvan Hunt the win32 build depends on are converted to DOS
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier newline format. [RT #22067]
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier message. [RT #34045]
7dc38ccd52efe59c8fef8e73f9313080652a1c4aShawn Routhier3606. [func] "rndc flushtree" now flushes matching
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 records in the address database and bad cache
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 as well as the DNS cache. (Previously only the
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt DNS cache was flushed.) [RT #33970]
6a3fa181d1253db5191139e20231512eebaddeebEvan Hunt3605. [port] win32: Addressed several compatibility issues
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 with newer versions of Visual Studio. [RT #33916]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3604. [bug] Fixed a compile-time error when building with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 JSON but not XML. [RT #33959]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3603. [bug] Install <isc/stat.h>. [RT #33956]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 integrate with named and serve DNS data.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (Contributed by John Eaglesham of Yahoo.)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3601. [bug] Added to PKCS#11 openssl patches a value len
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 attribute in DH derive key. [RT #33928]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3600. [cleanup] dig: Fixed a typo in the warning output when receiving
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 an oversized response. [RT #33910]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3599. [tuning] Check for pointer equivalence in name comparisons.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3598. [cleanup] Improved portability of map file code. [RT #33820]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3597. [bug] Ensure automatic-resigning heaps are reconstructed
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when loading zones in map format. [RT #33381]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3596. [port] Updated win32 build documentation, added
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dnssec-verify. [RT #22067]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3595. [port] win32: Fix build problems introduced by change #3550.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3594. [maint] Update config.guess and config.sub. [RT #33816]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3593. [func] Update EDNS processing to better track remote server
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 capabilities. [RT #30655]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3592. [doc] Moved documentation of rndc command options to the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 rndc man page. [RT #33506]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3591. [func] Use CRC-64 to detect map file corruption at load
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 time. [RT #33746]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3590. [bug] When using RRL on recursive servers, defer
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 rate-limiting until after recursion is complete;
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 also, use correct rcode for slipped NXDOMAIN
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 responses. [RT #33604]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3589. [func] Report serial numbers in when starting zone transfers.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Report accepted NOTIFY requests including serial.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3588. [bug] dig: addressed a memory leak in the sigchase code
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 that could cause a shutdown crash. [RT #33733]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3587. [func] 'named -g' now checks the logging configuration but
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 does not use it. [RT #33473]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3585. [func] "rndc delzone -clean" option removes zone files
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when deleting a zone. [RT #33570]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3584. [security] Caching data from an incompletely signed zone could
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 trigger an assertion failure in resolver.c
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (CVE-2013-3919). [RT #33690]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3583. [bug] Address memory leak in GSS-API processing [RT #33574]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3582. [bug] Silence false positive warning regarding missing file
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 directive for inline slave zones. [RT #33662]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3580. [bug] Addressed a possible race in acache.c [RT #33602]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3579. [maint] Updates to PKCS#11 openssl patches, supporting
d7201de09b85929a86b157f4b2d91667c68c6b52Automatic Updater versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3577. [bug] Handle zero TTL values better. [RT #33411]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3576. [bug] Address a shutdown race when validating. [RT #33573]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3575. [func] Changed the logging category for RRL events from
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 'queries' to 'query-errors'. [RT #33540]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3574. [doc] The 'hostname' keyword was missing from server-id
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 description in the named.conf man page. [RT #33476]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone names containing punctuation marks and other
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 nonstandard characters. [RT #33419]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3572. [func] Threads are now enabled by default on most
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 operating systems. [RT #25483]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3571. [bug] Address race condition in dns_client_startresolve().
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3570. [bug] Check internal pointers are valid when loading map
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 files. [RT #33403]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 module, and added multithread support. [RT #33394]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3568. [cleanup] Add a product description line to the version file,
bfde61d5194a534d800f3b90008d1f52261922c5Mark Andrews to be reported by named -v/-V. [RT #33366]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3567. [bug] Silence clang static analyzer warnings. [RT #33365]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3566. [func] Log when forwarding updates to master. [RT #33240]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3565. [placeholder]
bfde61d5194a534d800f3b90008d1f52261922c5Mark Andrews3564. [bug] Improved handling of corrupted map files. [RT #33380]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3562. [func] Update map file header format to include a SHA-1 hash
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of the database content, so that corrupted map files
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 can be rejected at load time. [RT #32459]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 or NOTIMP. Adjust usage message. [RT #33363]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3560. [bug] isc-config.sh did not honor includedir and libdir
bfde61d5194a534d800f3b90008d1f52261922c5Mark Andrews when set via configure. [RT #33345]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3559. [func] Check that both forms of Sender Policy Framework
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 records exist or do not exist. [RT #33355]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3557. [bug] Reloading redirect zones was broken. [RT #33292]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3555. [bug] Address theoretical race conditions in acache.c
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (change #3553 was incomplete). [RT #33252]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3554. [bug] RRL failed to correctly rate-limit upward
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 referrals and failed to count dropped error
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 responses in the statistics. [RT #33225]
bfde61d5194a534d800f3b90008d1f52261922c5Mark Andrews3553. [bug] Address suspected double free in acache. [RT #33252]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3552. [bug] Wrong getopt option string for 'nsupdate -r'.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3550. [func] Unified the internal and export versions of the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 BIND libraries, allowing external clients to use
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the same libraries as BIND. [RT #33131]
bfde61d5194a534d800f3b90008d1f52261922c5Mark Andrews3549. [doc] Documentation for "request-nsid" was missing.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3548. [bug] The NSID request code in resolver.c was broken
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 resulting in invalid EDNS options being sent.
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3547. [bug] Some malformed unknown rdata records were not properly
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt detected and rejected. [RT #33129]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3546. [func] Add EUI48 and EUI64 types. [RT #33082]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3545. [bug] RRL slip behavior was incorrect when set to 1.
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3544. [contrib] check5011.pl: Script to report the status of
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt managed keys as recorded in managed-keys.bind.
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt Contributed by Tony Finch <dot@dotat.at>
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3543. [bug] Update socket structure before attaching to socket
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt manager after accept. [RT #33084]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3542. [placeholder]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3541. [bug] Parts of libdns were not properly initialized when
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt built in libexport mode. [RT #33028]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3540. [test] libt_api: t_info and t_assert were not thread safe.
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3539. [port] win32: timestamp format didn't match other platforms.
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3538. [test] Running "make test" now requires loopback interfaces
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt to be set up. [RT #32452]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3537. [tuning] Slave zones, when updated, now send NOTIFY messages
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt to peers before being dumped to disk rather than
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt after. [RT #27242]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3536. [func] Add support for setting Differentiated Services Code
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt Point (DSCP) values in named. Most configuration
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt options which take a "port" option (e.g.,
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt listen-on, forwarders, also-notify, masters,
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt notify-source, etc) can now also take a "dscp"
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt option specifying a code point for use with
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt outgoing traffic, if supported by the underlying
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt OS. [RT #27596]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3535. [bug] Minor win32 cleanups. [RT #32962]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3534. [bug] Extra text after an embedded NULL was ignored when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 parsing zone files. [RT #32699]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3531. [bug] win32: A uninitialized value could be returned on out
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of memory. [RT #32960]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3529. [func] Named now listens on both IPv4 and IPv6 interfaces
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 by default. Named previously only listened on IPv4
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 interfaces by default unless named was running in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 IPv6 only mode. [RT #32945]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3528. [func] New "dnssec-coverage" command scans the timing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 metadata for a set of DNSSEC keys and reports if a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 lapse in signing coverage has been scheduled
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 inadvertently. (Note: This tool depends on python;
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 it will not be built or installed on systems that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 do not have a python interpreter.) [RT #28098]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3527. [compat] Add a URI to allow applications to explicitly
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 request a particular XML schema from the statistics
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 channel, returning 404 if not supported. [RT #32481]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3526. [cleanup] Set up dependencies for unit tests correctly during
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 build. [RT #32803]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3525. [func] Support for additional signing algorithms in rndc:
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 The -A option to rndc-confgen can be used to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 select the algorithm for the generated key.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (The default is still hmac-md5; this may
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 change in a future release.) [RT #20363]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3524. [func] Added an alternate statistics channel in JSON format,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when the server is built with the json-c library:
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 http://[address]:[port]/json. [RT #32630]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3523. [contrib] Ported filesystem and ldap DLZ drivers to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dynamically-loadable modules, and added the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "wildcard" module based on a contribution from
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3522. [bug] DLZ lookups could fail to return SERVFAIL when
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt they ought to. [RT #32685]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3520. [bug] 'mctx' was not being referenced counted in some places
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 where it should have been. [RT #32794]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3519. [func] Full replay protection via four-way handshake is
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt now mandatory for rndc clients. Very old versions
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt of rndc will no longer work. [RT #32798]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt so that all dns_rrl_rtype_t enum values fit regardless
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt of whether it is teated as signed or unsigned by
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt the compiler. [RT #32792]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3516. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3515. [port] '%T' is not portable in strftime(). [RT #32763]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3514. [bug] The ranges for valid key sizes in ddns-confgen and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 rndc-confgen were too constrained. Keys up to 512
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 bits are now allowed for most algorithms, and up
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to 1024 bits for hmac-sha384 and hmac-sha512.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3513. [func] "dig -u" prints times in microseconds rather than
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 milliseconds. [RT #32704]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3512. [func] "rndc validation check" reports the current status
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of DNSSEC validation. [RT #21397]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3511. [doc] Improve documentation of redirect zones. [RT #32756]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3510. [func] "rndc status" and XML statistics channel now report
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 server start and reconfiguration times. [RT #21048]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3509. [cleanup] Added a product line to version file to allow for
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 easy naming of different products (BIND
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 vs BIND ESV, for example). [RT #32755]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3508. [contrib] queryperf was incorrectly rejecting the -T option.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3507. [bug] Statistics channel XSL had a glitch when attempting
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to chart query data before any queries had been
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 received. [RT #32620]
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews3506. [func] When setting "max-cache-size" and "max-acache-size",
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the keyword "unlimited" is no longer defined as equal
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to 4 gigabytes (except on 32-bit platforms); it
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 means literally unlimited. [RT #32358]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3505. [bug] When setting "max-cache-size" and "max-acache-size",
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 larger values than 4 gigabytes could not be set
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 explicitly, though larger sizes were available
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when setting cache size to 0. This has been
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 corrected; the full range is now available.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3504. [func] Add support for ACLs based on geographic location,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 using MaxMind GeoIP databases. Based on code
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 contributed by Ken Brownfield <kb@slide.com>.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3503. [doc] Clarify size_spec syntax. [RT #32449]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3502. [func] zone-statistics: "no" is now a synonym for "none",
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 instead of "terse". [RT #29165]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3501. [func] zone-statistics now takes three options: full,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 terse, and none. "yes" and "no" are retained as
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 synonyms for full and terse, respectively. [RT #29165]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3500. [security] Support NAPTR regular expression validation on
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 all platforms without using libregex, which
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 can be vulnerable to memory exhaustion attack
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (CVE-2013-2266). [RT #32688]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3499. [doc] Corrected ARM documentation of built-in zones.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3498. [bug] zone statistics for zones which matched a potential
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 empty zone could have their zone-statistics setting
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3497. [func] When deleting a slave/stub zone using 'rndc delzone'
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 report the files that were being used so they can
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 be cleaned up if desired. [RT #27899]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3496. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3495. [func] Support multiple response-policy zones (up to 32),
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 while improving RPZ performance. "response-policy"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 syntax now includes a "min-ns-dots" clause, with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 default 1, to exclude top-level domains from
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 NSIP and NSDNAME checking. --enable-rpz-nsip and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --enable-rpz-nsdname are now the default. [RT #32251]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3494. [func] DNS RRL: Blunt the impact of DNS reflection and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 amplification attacks by rate-limiting substantially-
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 identical responses. [RT #28130]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 contributed by Mark Goldfinch. [RT #32549]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3492. [bug] Fixed a regression in zone loading performance
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 due to lock contention. [RT #30399]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3491. [bug] Slave zones using inline-signing must specify a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 file name. [RT #31946]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3490. [bug] When logging RDATA during update, truncate if it's
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 too long. [RT #32365]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dns_dlzcreate() failed to properly initialize
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dlzdb.link. When cloning a rdataset do not copy
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the link contents. [RT #32651]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3488. [bug] Use after free error with DH generated keys. [RT #32649]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3487. [bug] Change 3444 was not complete. There was a additional
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 place where the NOQNAME proof needed to be saved.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3486. [bug] named could crash when using TKEY-negotiated keys
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 that had been deleted and then recreated. [RT #32506]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3484. [bug] Some statistics were incorrectly rendered in XML.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3483. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3482. [func] dig +nssearch now prints name servers that don't
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 have address records (missing AAAA or A, or the name
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 doesn't exist). [RT #29348]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3481. [cleanup] Removed use of const const in atf.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3480. [bug] Silence logging noise when setting up zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 statistics. [RT #32525]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3479. [bug] Address potential memory leaks in gssapi support
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 code. [RT #32405]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3478. [port] Fix a build failure in strict C99 environments
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3477. [func] Expand logging when adding records via DDNS update
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3476. [bug] "rndc zonestatus" could report a spurious "not
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 found" error on inline-signing zones. [RT #29226]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3475. [cleanup] Changed name of 'map' zone file format (previously
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 'fast'). [RT #32458]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3474. [bug] nsupdate could assert when the local and remote
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 address families didn't match. [RT #22897]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3473. [bug] dnssec-signzone/verify could incorrectly report
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 an error condition due to an empty node above an
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 opt-out delegation lacking an NSEC3. [RT #32072]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3472. [bug] The active-connections counter in the socket
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 statistics could underflow. [RT #31747]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3471. [bug] The number of UDP dispatches now defaults to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the number of CPUs even if -n has been set to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a higher value. [RT #30964]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3470. [bug] Slave zones could fail to dump when successfully
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 refreshing after an initial failure. [RT #31276]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3469. [bug] Handle DLZ lookup failures more gracefully. Improve
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 backward compatibility between versions of DLZ dlopen
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 API. [RT #32275]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3468. [security] RPZ rules to generate A records (but not AAAA records)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 could trigger an assertion failure when used in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 conjunction with DNS64 (CVE-2012-5689). [RT #32141]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3467. [bug] Added checks in dnssec-keygen and dnssec-settime
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to check for delete date < inactive date. [RT #31719]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in DLZ example driver. [RT #32275]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3465. [bug] Handle isolated reserved ports. [RT #31778]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3464. [maint] Updates to PKCS#11 openssl patches, supporting
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3462. [doc] Clarify server selection behavior of dig when using
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 -4 or -6 options. [RT #32181]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3461. [bug] Negative responses could incorrectly have AD=1
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 set. [RT #32237]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3460. [bug] Only link against readline where needed. [RT #29810]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3459. [func] Added -J option to named-checkzone/named-compilezone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to specify the path to the journal file. [RT #30958]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3458. [bug] Return FORMERR when presented with a overly long
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 domain named in a request. [RT #29682]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3456. [port] g++47: ATF failed to compile. [RT #32012]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3455. [contrib] queryperf: fix getopt option list. [RT #32338]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3454. [port] sparc64: improve atomic support. [RT #25182]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 failed. [RT #31960]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3452. [bug] Accept duplicate singleton records. [RT #32329]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3451. [port] Increase per thread stack size from 64K to 1M.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3450. [bug] Stop logfileconfig system test spam system logs.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3449. [bug] gen.c: use the pre-processor to construct format
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 strings so that compiler can perform sanity checks;
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 check the snprintf results. [RT #17576]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3448. [bug] The allow-query-on ACL was not processed correctly.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3447. [port] Add support for libxml2-2.9.x [RT #32231]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3446. [port] win32: Add source ID (see change #3400) to build.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3445. [bug] Warn about zone files with blank owner names
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 immediately after $ORIGIN directives. [RT #31848]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3444. [bug] The NOQNAME proof was not being returned from cached
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 insecure responses. [RT #21409]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 rejected when generating keys. [RT #31927]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3442. [port] Net::DNS 0.69 introduced a non backwards compatible
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 change. [RT #32216]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3440. [bug] Reorder get_key_struct to not trigger a assertion when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 cleaning up due to out of memory error. [RT #32131]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3439. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 buffers with constant data. [RT #32064]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3436. [bug] Check malloc/calloc return values. [RT #32088]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3435. [bug] Cross compilation support in configure was broken.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3434. [bug] Pass client info to the DLZ findzone() entry
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 point in addition to lookup(). This makes it
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 possible for a database to answer differently
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 whether it's authoritative for a name depending
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 on the address of the client. [RT #31775]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3433. [bug] dlz_findzone() did not correctly handle
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ISC_R_NOMORE. [RT #31172]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3432. [func] Multiple DLZ databases can now be configured.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 DLZ databases are searched in the order configured,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 unless set to "search no", in which case a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone can be configured to be retrieved from a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 particular DLZ database by using a "dlz <name>"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 option in the zone statement. DLZ databases can
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 support type "master" and "redirect" zones.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3431. [bug] ddns-confgen: Some valid key algorithms were
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 not accepted. [RT #31927]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3430. [bug] win32: isc_time_formatISO8601 was missing the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 'T' between the date and time. [RT #32044]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3429. [bug] dns_zone_getserial2 could a return success without
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 returning a valid serial. [RT #32007]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3428. [cleanup] dig: Add timezone to date output. [RT #2269]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3427. [bug] dig +trace incorrectly displayed name server
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 addresses instead of names. [RT #31641]
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews3426. [bug] dnssec-checkds: Clearer output when records are not
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 found. [RT #31968]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3425. [bug] "acacheentry" reference counting was broken resulting
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in use after free. [RT #31908]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3424. [func] dnssec-dsfromkey now emits the hash without spaces.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3423. [bug] "rndc signing -nsec3param" didn't accept the full
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 range of possible values. Address portability issues.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3422. [bug] Added a clear error message for when the SOA does not
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 match the referral. [RT #31281]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3421. [bug] Named loops when re-signing if all keys are offline.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3420. [bug] Address VPATH compilation issues. [RT #31879]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3419. [bug] Memory leak on validation cancel. [RT #31869]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3418. [func] New XML schema (version 3.0) for the statistics channel
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 adds query type statistics at the zone level, and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 flattens the XML tree and uses compressed format to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 optimize parsing. Includes new XSL that permits
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 charting via the Google Charts API on browsers that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 support javascript in XSL. The old XML schema has been
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 deprecated. [RT #30023]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3417. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3416. [bug] Named could die on shutdown if running with 128 UDP
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dispatches per interface. [RT #31743]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3415. [bug] named could die with a REQUIRE failure if a validation
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 was canceled. [RT #31804]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3414. [bug] Address locking issues found by Coverity. [RT #31626]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3413. [func] Record the number of DNS64 AAAA RRsets that have been
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 synthesized. [RT #27636]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3412. [bug] Copy timeval structure from control message data.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to UDP. [RT #31690]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3410. [bug] Addressed Coverity warnings. [RT #31626]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 from X.509 certificates, for use with DANE
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (DNS-based Authentication of Named Entities).
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3408. [bug] Some DNSSEC-related options (update-check-ksk,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 are now legal in slave zones as long as
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 inline-signing is in use. [RT #31078]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3407. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3406. [bug] mem.c: Fix compilation errors when building with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3405. [bug] Handle time going backwards in acache. [RT #31253]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3404. [bug] dnssec-signzone: When re-signing a zone, remove
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 RRSIG and NSEC records from nodes that used to be
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in-zone but are now below a zone cut. [RT #31556]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3402. [test] The IPv6 interface numbers used for system
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 tests were incorrect on some platforms. [RT #25085]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3401. [bug] Addressed Coverity warnings. [RT #31484]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3400. [cleanup] "named -V" can now report a source ID string, defined
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in the "srcid" file in the build tree and normally set
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to the most recent git hash. [RT #31494]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3399. [port] netbsd: rename 'bool' parameter to avoid namespace
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 clash. [RT #31515]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3398. [bug] SOA parameters were not being updated with inline
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 signed zones if the zone was modified while the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 server was offline. [RT #29272]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3396. [bug] OPT records were incorrectly removed from signed,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 truncated responses. [RT #31439]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews3394. [bug] Adjust 'successfully validated after lower casing
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews signer' log level and category. [RT #31414]
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews3393. [bug] 'host -C' could core dump if REFUSED was received.
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews3392. [func] Keep statistics on REFUSED responses. [RT #31412]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3390. [bug] Silence clang compiler warnings. [RT #30417]
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3388. [bug] Fixed several Coverity warnings.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Note: This change includes a fix for a bug that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 was subsequently determined to be an exploitable
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 security vulnerability, CVE-2012-5688: named could
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 die on specific queries with dns64 enabled.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3387. [func] DS digest can be disabled at runtime with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 disable-ds-digests. [RT #21581]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3386. [bug] Address locking violation when generating new NSEC /
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 NSEC3 chains. [RT #31224]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3385. [bug] named-checkconf didn't detect missing master lists
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in also-notify clauses. [RT #30810]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3384. [bug] Improved logging of crypto errors. [RT #30963]
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews3383. [security] A certain combination of records in the RBT could
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews cause named to hang while populating the additional
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews section of a response. [RT #31090]
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews3382. [bug] SOA query from slave used use-v6-udp-ports range,
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews if set, regardless of the address family in use.
62f016d5d301713c72a59e83d3ab41170a77f674Mark Andrews3381. [contrib] Update queryperf to support more RR types.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3380. [bug] named could die if a nonexistent master list was
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 referenced in a also-notify. [RT #31004]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3379. [bug] isc_interval_zero and isc_time_epoch should be
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "const (type)* const". [RT #31069]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3378. [bug] Handle missing 'managed-keys-directory' better.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3377. [bug] Removed spurious newline from NSEC3 multiline
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 output. [RT #31044]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3376. [bug] Lack of EDNS support was being recorded without a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 successful response. [RT #30811]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3374. [bug] isc_parse_uint32 failed to return a range error on
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 systems with 64 bit longs. [RT #30232]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3373. [bug] win32: open raw files in binary mode. [RT #30944]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3372. [bug] Silence spurious "deleted from unreachable cache"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 messages. [RT #30501]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3371. [bug] AD=1 should behave like DO=1 when deciding whether to
d7201de09b85929a86b157f4b2d91667c68c6b52Automatic Updater add NS RRsets to the additional section or not.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3370. [bug] Address use after free while shutting down. [RT #30241]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3369. [bug] nsupdate terminated unexpectedly in interactive mode
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 if built with readline support. [RT #29550]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 were not C++ safe.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3367. [bug] dns_dnsseckey_create() result was not being checked.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3366. [bug] Fixed Read-After-Write dependency violation for IA64
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 atomic operations. [RT #25181]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3365. [bug] Removed spurious newlines from log messages in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3364. [security] Named could die on specially crafted record.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3363. [bug] Need to allow "forward" and "fowarders" options
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in static-stub zones; this had been overlooked.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3362. [bug] Setting some option values to 0 in named.conf
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 could trigger an assertion failure on startup.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3361. [bug] "rndc signing -nsec3param" didn't work correctly
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when salt was set to '-' (no salt). [RT #30099]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3360. [bug] 'host -w' could die. [RT #18723]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3359. [bug] An improperly-formed TSIG secret could cause a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 memory leak. [RT #30607]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3358. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3357. [port] Add support for libxml2-2.8.x [RT #30440]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
d7201de09b85929a86b157f4b2d91667c68c6b52Automatic Updater approaching their expiry, so they don't remain
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in caches after expiry. [RT #26429]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3355. [port] Use more portable awk in verify system test.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3354. [func] Improve OpenSSL error logging. [RT #29932]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3353. [bug] Use a single task for task exclusive operations.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3352. [bug] Ensure that learned server attributes timeout of the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 adb cache. [RT #29856]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 memory debugging flags are set. [RT #30243]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3350. [bug] Memory read overrun in isc___mem_reallocate if
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ISC_MEM_DEBUGCTX memory debugging flag is set.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3349. [bug] Change #3345 was incomplete. [RT #30233]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3348. [bug] Prevent RRSIG data from being cached if a negative
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 record matching the covering type exists at a higher
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 trust level. Such data already can't be retrieved from
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the cache since change 3218 -- this prevents it
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 being inserted into the cache as well. [RT #26809]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3347. [bug] dnssec-settime: Issue a warning when writing a new
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 private key file would cause a change in the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 permissions of the existing file. [RT #27724]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3346. [security] Bad-cache data could be used before it was
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 initialized, causing an assert. [RT #30025]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3345. [bug] Addressed race condition when removing the last item
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 or inserting the first item in an ISC_QUEUE.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3344. [func] New "dnssec-checkds" command checks a zone to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 determine which DS records should be published
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in the parent zone, or which DLV records should be
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 published in a DLV zone, and queries the DNS to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ensure that it exists. (Note: This tool depends
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 on python; it will not be built or installed on
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 systems that do not have a python interpreter.)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3343. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3342. [bug] Change #3314 broke saving of stub zones to disk
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 resulting in excessive cpu usage in some cases.
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt3341. [func] New "dnssec-verify" command checks a signed zone
1d761cb453c76353deb8423c78e98d00c5f86ffaEvan Hunt to ensure correctness of signatures and of NSEC/NSEC3
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt chains. [RT #23673]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3340. [func] Added new 'map' zone file format, which is an image
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of a zone database that can be loaded directly into
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 memory via mmap(), allowing much faster zone loading.
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews (Note: Because of pointer sizes and other
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews considerations, this file format is platform-dependent;
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 'map' zone files cannot always be transferred from one
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews server to another.) [RT #25419]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3339. [func] Allow the maximum supported rsa exponent size to be
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 specified: "max-rsa-exponent-size <value>;" [RT #29228]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3338. [bug] Address race condition in units tests: asyncload_zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and asyncload_zt. [RT #26100]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3337. [bug] Change #3294 broke support for the multiple keys
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in controls. [RT #29694]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3336. [func] Maintain statistics for RRsets tagged as "stale".
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3335. [func] nslookup: return a nonzero exit code when unable
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to get an answer. [RT #29492]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3334. [bug] Hold a zone table reference while performing a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 asynchronous load of a zone. [RT #28326]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3333. [bug] Setting resolver-query-timeout too low can cause
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 named to not recover if it loses connectivity.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3331. [security] dns_rdataslab_fromrdataset could produce bad
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 rdataslabs. [RT #29644]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3330. [func] Fix missing signatures on NOERROR results despite
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 RPZ rewriting. Also
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - add optional "recursive-only yes|no" to the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 response-policy statement
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - add optional "max-policy-ttl" to the response-policy
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 statement to limit the false data that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "recursive-only no" can introduce into
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 resolvers' caches
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - add a RPZ performance test to bin/tests/system/rpz
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when queryperf is available.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - the encoding of PASSTHRU action to "rpz-passthru".
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (The old encoding is still accepted.)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3329. [bug] Handle RRSIG signer-name case consistently: We
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 generate RRSIG records with the signer-name in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 lower case. We accept them with any case, but if
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 they fail to validate, we try again in lower case.
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3328. [bug] Fixed inconsistent data checking in dst_parse.c.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to 'filter-aaaa-on-v4' but applies to IPv6
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 connections. (Use "configure --enable-filter-aaaa"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to enable this option.) [RT #27308]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3326. [func] Added task list statistics: task model, worker
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 threads, quantum, tasks running, tasks ready.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3325. [func] Report cache statistics: memory use, number of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 nodes, number of hash buckets, hit and miss counts.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3324. [test] Add better tests for ADB stats [RT #27057]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3323. [func] Report the number of buckets the resolver is using.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3322. [func] Monitor the number of active TCP and UDP dispatches.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3321. [func] Monitor the number of recursive fetches and the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 number of open sockets, and report these values in
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews the statistics channel. [RT #27054]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3320. [func] Added support for monitoring of recursing client
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 count. [RT #27009]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3319. [func] Added support for monitoring of ADB entry count and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 hash size. [RT #27057]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3318. [tuning] Reduce the amount of work performed while holding a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 bucket lock when finished with a fetch context.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3316. [tuning] Improved locking performance when recursing.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3315. [tuning] Use multiple dispatch objects for sending upstream
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 queries; this can improve performance on busy
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 multiprocessor systems by reducing lock contention.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3314. [bug] The masters list could be updated while stub_callback
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 or refresh_callback were using it. [RT #26732]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3313. [protocol] Add TLSA record type. [RT #28989]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3311. [bug] Abort the zone dump if zone->db is NULL in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone.c:zone_gotwritehandle. [RT #29028]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3310. [test] Increase table size for mutex profiling. [RT #28809]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3309. [bug] resolver.c:fctx_finddone() was not thread safe.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3308. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3305. [func] Add wire format lookup method to sdb. [RT #28563]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3303. [bug] named could die when reloading. [RT #28606]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3302. [bug] dns_dnssec_findmatchingkeys could fail to find
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 keys if the zone name contained character that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 required special mappings. [RT #28600]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3301. [contrib] Update queryperf to build on darwin. Add -R flag
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 for non-recursive queries. [RT #28565]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3300. [bug] Named could die if gssapi was enabled in named.conf
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 but was not compiled in. [RT #28338]
8a0b6b3901b34530a850d78758fe4e5b6218d193Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
8a0b6b3901b34530a850d78758fe4e5b6218d193Mark Andrews3298. [bug] Named could dereference a NULL pointer in
8a0b6b3901b34530a850d78758fe4e5b6218d193Mark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3297. [bug] Named could die on a malformed master file. [RT #28467]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3296. [bug] Named could die with a INSIST failure in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 client.c:exit_check. [RT #28346]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3295. [bug] Adjust isc_time_secondsastimet range check to be more
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 portable. [RT # 26542]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 error. [RT #28265]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3293. [func] nsupdate: list supported type. [RT #28261]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3292. [func] Log messages in the axfr stream at debug 10.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3291. [port] Fixed a build error on systems without ENOTSUP.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3288. [bug] dlz_destroy() function wasn't correctly registered
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 by the DLZ dlopen driver. [RT #28056]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3286. [bug] Managed key maintenance timer could fail to start
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 after 'rndc reconfig'. [RT #26786]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3285. [bug] val-frdataset was incorrectly disassociated in
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt proveunsecure after calling startfinddlvsep.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3284. [bug] Address race conditions with the handling of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3283. [bug] Raw zones with with more than 512 records in a RRset
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 failed to load. [RT #27863]
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt3282. [bug] Restrict the TTL of NS RRset to no more than that
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt of the old NS RRset when replacing it.
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt [RT #27792] [RT #27884]
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt3281. [bug] SOA refresh queries could be treated as cancelled
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 despite succeeding over the loopback interface.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3280. [bug] Potential double free of a rdataset on out of memory
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt with DNS64. [RT #27762]
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt3279. [bug] Hold a internal reference to the zone while performing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a asynchronous load. Address potential memory leak
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt if the asynchronous is cancelled. [RT #27750]
cc830844413f2e99ee7fd848d41c2bb3add21710Mark Andrews3278. [bug] Make sure automatic key maintenance is started
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt when "auto-dnssec maintain" is turned on during
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt "rndc reconfig". [RT #26805]
95f2377b4f180a564d35343c8d150e8f03c98a52Evan Hunt3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3276. [bug] win32: ns_os_openfile failed to return NULL on
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 safe_open failure. [RT #27696]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 option had been misspelled as '-clear'. (To avoid
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 future confusion, both options now work.) [RT #27173]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3274. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3273. [bug] AAAA responses could be returned in the additional
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 section even when filter-aaaa-on-v4 was in use.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3272. [func] New "rndc zonestatus" command prints information
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 about the specified zone. [RT #21671]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3271. [port] darwin: mksymtbl is not always stable, loop several
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 times before giving up. mksymtbl was using non
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 portable perl to covert 64 bit hex strings. [RT #27653]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.9.0rc2 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3270. [bug] "rndc reload" didn't reuse existing zones correctly
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when inline-signing was in use. [RT #27650]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3269. [port] darwin 11 and later now built threaded by default.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 out the earliest expiry time. [RT #23311]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3267. [bug] Memory allocation failures could be mis-reported as
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 unexpected error. New ISC_R_UNSET result code.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3266. [bug] The maximum number of NSEC3 iterations for a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 DNSKEY RRset was not being properly computed.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3265. [bug] Corrected a problem with lock ordering in the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 inline-signing code. [RT #27557]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3264. [bug] Automatic regeneration of signatures in an
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 inline-signing zone could stall when the server
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 was restarted. [RT #27344]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3263. [bug] "rndc sync" did not affect the unsigned side of an
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 inline-signing zone. [RT #27337]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3262. [bug] Signed responses were handled incorrectly by RPZ.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3261. [func] RRset ordering now defaults to random. [RT #27174]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3260. [bug] "rrset-order cyclic" could appear not to rotate
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 for some query patterns. [RT #27170/27185]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.9.0rc1 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3259. [bug] named-compilezone: Suppress "dump zone to <file>"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 message when writing to stdout. [RT #27109]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3258. [test] Add "forcing full sign with unreadable keys" test.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3257. [bug] Do not generate a error message when calling fsync()
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in a pipe or socket. [RT #27109]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3255. [func] No longer require that a empty zones be explicitly
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 enabled or that a empty zone is disabled for
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 RFC 1918 empty zones to be configured. [RT #27139]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 too long. [RT #26956]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3252. [bug] When master zones using inline-signing were
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 updated while the server was offline, the source
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone could fall out of sync with the signed
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 copy. They can now resynchronize. [RT #26676]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 memory dns_sdlz_putrr() can allocate per record to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 prevent run away memory consumption on ISC_R_NOSPACE.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3250. [func] 'configure --enable-developer'; turn on various
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 configure options, normally off by default, that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 we want developers to build and test with. [RT #27103]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3249. [bug] Update log message when saving slave zones files for
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 analysis after load failures. [RT #27087]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3248. [bug] Configure options --enable-fixed-rrset and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --enable-exportlib were incompatible with each
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 other. [RT #27087]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3247. [bug] 'raw' format zones failed to preserve load order
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 breaking 'fixed' sort order. [RT #27087]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3246. [bug] Named failed to start with a empty also-notify list.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3245. [bug] Don't report a error unchanged serials unless there
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 were other changes when thawing a zone with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ixfr-fromdifferences. [RT #26845]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3244. [func] Added readline support to nslookup and nsupdate.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Also simplified nsupdate syntax to make "update"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and "prereq" optional. [RT #24659]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 being properly set.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3242. [func] Extended the header of raw-format master files to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 include the serial number of the zone from which
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 they were generated, if different (as in the case
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of inline-signing zones). This is to be used in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 inline-signing zones, to track changes between the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 unsigned and signed versions of the zone, which may
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 have different serial numbers.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (Note: raw zonefiles generated by this version of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 BIND are no longer compatible with prior versions.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 To generate a backward-compatible raw zonefile
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 using dnssec-signzone or named-compilezone, specify
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 output format "raw=0" instead of simply "raw".)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3241. [bug] Address race conditions in the resolver code.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3240. [bug] DNSKEY state change events could be missed. [RT #26874]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 timestamp. [RT #26883]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3238. [bug] keyrdata was not being reinitialized in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 lib/dns/rbtdb.c:iszonesecure. [RT#26913]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3237. [bug] dig -6 didn't work with +trace. [RT #26906]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3236. [bug] Backed out changes #3182 and #3202, related to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 EDNS(0) fallback behavior. [RT #26416]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3235. [func] dns_db_diffx, a extended dns_db_diff which returns
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the generated diff and optionally writes it to a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 journal. [RT #26386]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3232. [bug] Zero zone->curmaster before return in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dns_zone_setmasterswithkeys(). [RT #26732]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3231. [bug] named could fail to send a incompressible zone.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3230. [bug] 'dig axfr' failed to properly handle a multi-message
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 axfr with a serial of 0. [RT #26796]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3229. [bug] Fix local variable to struct var assignment
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 found by CLANG warning.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3228. [tuning] Dynamically grow symbol table to improve zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 loading performance. [RT #26523]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3227. [bug] Interim fix to make WKS's use of getprotobyname()
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and getservbyname() self thread safe. [RT #26232]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3226. [bug] Address minor resource leakages. [RT #26624]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 messages. [RT #26507]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3223. [bug] 'task_test privilege_drop' generated false positives.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3222. [cleanup] Replace dns_journal_{get,set}_bitws with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dns_journal_{get,set}_sourceserial. [RT #26634]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3221. [bug] Fixed a potential core dump on shutdown due to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 referencing fetch context after it's been freed.
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt --- 9.9.0b2 released ---
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt could fail to set the database version correctly,
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews causing an assertion failure. [RT #26180]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3219. [bug] Disable NOEDNS caching following a timeout.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3218. [security] Cache lookup could return RRSIG data associated with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 nonexistent records, leading to an assertion
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 failure. [RT #26590]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3214. [func] Add 'named -U' option to set the number of UDP
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 listener threads per interface. [RT #26485]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 list prior to adding a reference to it leading a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 possible assertion failure. [RT #23219]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 option prints in single-line-per-record format.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3210. [bug] Canceling the oldest query due to recursive-client
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 overload could trigger an assertion failure. [RT #26463]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3208. [bug] 'dig -y' handle unknown tsig algorithm better.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3206. [cleanup] Add ISC information to log at start time. [RT #25484]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3205. [func] Upgrade dig's defaults to better reflect modern
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 nameserver behavior. Enable "dig +adflag" and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "dig +edns=0" by default. Enable "+dnssec" when
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt running "dig +trace". [RT #23497]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3204. [bug] When a master server that has been marked as
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 unreachable sends a NOTIFY, mark it reachable
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 again. [RT #25960]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3203. [bug] Increase log level to 'info' for validation failures
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 from expired or not-yet-valid RRSIGs. [RT #21796]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3202. [bug] NOEDNS caching on timeout was too aggressive.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3201. [func] 'rndc querylog' can now be given an on/off parameter
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 instead of only being used as a toggle. [RT #18351]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3200. [doc] Some rndc functions were undocumented or were
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 missing from 'rndc -h' output. [RT #25555]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3199. [func] When logging client information, include the name
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 being queried. [RT #25944]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3198. [doc] Clarified that dnssec-settime can alter keyfile
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 permissions. [RT #24866]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3197. [bug] Don't try to log the filename and line number when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the config parser can't open a file. [RT #22263]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3196. [bug] nsupdate: return nonzero exit code when target zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 doesn't exist. [RT #25783]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3195. [cleanup] Silence "file not found" warnings when loading
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 managed-keys zone. [RT #26340]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3194. [doc] Updated RFC references in the 'empty-zones-enable'
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 documentation. [RT #25203]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3192. [bug] A query structure could be used after being freed.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3191. [bug] Print NULL records using "unknown" format. [RT #26392]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3190. [bug] Underflow in error handling in isc_mutexblock_init.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3189. [test] Added a summary report after system tests. [RT #25517]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3188. [bug] zone.c:zone_refreshkeys() could fail to detach
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 references correctly when errors occurred, causing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a hang on shutdown. [RT #26372]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3187. [port] win32: support for Visual Studio 2008. [RT #26356]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.9.0b1 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3186. [bug] Version/db mis-match in rpz code. [RT #26180]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3185. [func] New 'rndc signing' option for auto-dnssec zones:
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - 'rndc signing -list' displays the current
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 state of signing operations
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - 'rndc signing -clear' clears the signing state
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 records for keys that have fully signed the zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - 'rndc signing -nsec3param' sets the NSEC3
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 parameters for the zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 The 'rndc keydone' syntax is removed. [RT #23729]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3184. [bug] named had excessive cpu usage when a redirect zone was
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 configured. [RT #26013]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3182. [bug] Auth servers behind firewalls which block packets
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 greater than 512 bytes may cause other servers to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 perform poorly. Now, adb retains edns information
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and caches noedns servers. [RT #23392/24964]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3181. [func] Inline-signing is now supported for master zones.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3180. [func] Local copies of slave zones are now saved in raw
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 format by default, to improve startup performance.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 'masterfile-format text;' can be used to override
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the default, if desired. [RT #25867]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3179. [port] kfreebsd: build issues. [RT #26273]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3178. [bug] A race condition introduced by change #3163 could
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 cause an assertion failure on shutdown. [RT #26271]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3177. [func] 'rndc keydone', remove the indicator record that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 named has finished signing the zone with the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 corresponding key. [RT #26206]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3176. [doc] Corrected example code and added a README to the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 sample external DLZ module in contrib/dlz/example.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3175. [bug] Fix how DNSSEC positive wildcard responses from a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 NSEC3 signed zone are validated. Stop sending a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 unnecessary NSEC3 record when generating such
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 responses. [RT #26200]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3174. [bug] Always compute to revoked key tag from scratch.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3173. [port] Correctly validate root DS responses. [RT #25726]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3172. [port] darwin 10.* and freebsd [89] are now built threaded by
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3171. [bug] Exclusively lock the task when adding a zone using
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 'rndc addzone'. [RT #25600]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.9.0a3 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3170. [func] RPZ update:
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - fix precedence among competing rules
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - improve ARM text including documenting rule precedence
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - try to rewrite CNAME chains until first hit
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - new "rpz" logging channel
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - RDATA for CNAME rules can include wildcards
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - replace "NO-OP" named.conf policy override with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "PASSTHRU" and add "DISABLED" override ("NO-OP"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 is still recognized)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3169. [func] Catch db/version mis-matches when calling dns_db_*().
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3168. [bug] Nxdomain redirection could trigger an assert with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a ANY query. [RT #26017]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3167. [bug] Negative answers from forwarders were not being
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 correctly tagged making them appear to not be cached.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3166. [bug] Upgrading a zone to support inline-signing failed.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3165. [bug] dnssec-signzone could generate new signatures when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 resigning, even when valid signatures were already
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 present. [RT #26025]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3164. [func] Enable DLZ modules to retrieve client information,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 so that responses can be changed depending on the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 source address of the query. [RT #25768]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3163. [bug] Use finer-grained locking in client.c to address
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 concurrency problems with large numbers of threads.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3162. [test] start.pl: modified to allow for "named.args" in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ns*/ subdirectory to override stock arguments to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 named. Largely from RT#26044, but no separate ticket.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3161. [bug] zone.c:del_sigs failed to always reset rdata leading
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 assertion failures. [RT #25880]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3160. [bug] When printing out a NSEC3 record in multiline form
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the newline was not being printed causing type codes
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to be run together. [RT #25873]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3159. [bug] On some platforms, named could assert on startup
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when running in a chrooted environment without
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 /proc. [RT #25863]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3158. [bug] Recursive servers would prefer a particular UDP
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 socket instead of using all available sockets.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the config file before pausing the server. [RT #21373]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3156. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.9.0a2 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3155. [bug] Fixed a build failure when using contrib DLZ
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 drivers (e.g., mysql, postgresql, etc). [RT #25710]
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews an assert. [RT #25452]
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews3153. [func] Extend request-ixfr to zone level and remove the
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews side effect of forcing an AXFR. [RT #25156]
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews incorrect use of __builtin_expect. [RT #25183]
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews3151. [bug] Queries for type RRSIG or SIG could be handled
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews incorrectly. [RT #21050]
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews3150. [func] Improved startup and reconfiguration time by
45f206e6c1521c710947e9d5e734c32c6b286b13Mark Andrews enabling zones to load in multiple threads. [RT #25333]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3149. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3148. [bug] Processing of normal queries could be stalled when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 forwarding a UPDATE message. [RT #24711]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3147. [func] Initial inline signing support. [RT #23657]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt --- 9.9.0a1 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3145. [test] Capture output of ATF unit tests in "./atf.out" if
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt there were any errors while running them. [RT #25527]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3144. [bug] dns_dbiterator_seek() could trigger an assert when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 used with a nonexistent database node. [RT #25358]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3143. [bug] Silence clang compiler warnings. [RT #25174]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3142. [bug] NAPTR is class agnostic. [RT #25429]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3141. [bug] Silence spurious "zone serial (0) unchanged" messages
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 associated with empty zones. [RT #25079]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3140. [func] New command "rndc flushtree <name>" clears the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 specified name from the server cache along with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 all names under it. [RT #19970]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 for the hashing algorithms (md5, sha1 - sha512, and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 their hmac counterparts). [RT #25067]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3138. [bug] Address memory leaks and out-of-order operations when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 shutting named down. [RT #25210]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3137. [func] Improve hardware scalability by allowing multiple
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 worker threads to process incoming UDP packets.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 This can significantly increase query throughput
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 on some systems. [RT #22992]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3136. [func] Add RFC 1918 reverse zones to the list of built-in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 empty zones switched on by the 'empty-zones-enable'
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 option. [RT #24990]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3134. [bug] Improve the accuracy of dnssec-signzone's signing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 statistics. [RT #16030]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3133. [bug] Change #3114 was incomplete. [RT #24577]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3132. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3131. [tuning] Improve scalability by allocating one zone task
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 per 100 zones at startup time, rather than using a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 fixed-size task table. [RT #24406]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3130. [func] Support alternate methods for managing a dynamic
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone's serial number. Two methods are currently
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 defined using serial-update-method, "increment"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (default) and "unixtime". [RT #23849]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3129. [bug] Named could crash on 'rndc reconfig' when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 allow-new-zones was set to yes and named ACLs
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 were used. [RT #22739]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3128. [func] Inserting an NSEC3PARAM via dynamic update in an
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt auto-dnssec zone that has not been signed yet
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 will cause it to be signed with the specified NSEC3
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 parameters when keys are activated. The
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt NSEC3PARAM record will not appear in the zone until
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt it is signed, but the parameters will be stored.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3127. [bug] 'rndc thaw' will now remove a zone's journal file
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 if the zone serial number has been changed and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ixfr-from-differences is not in use. [RT #24687]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3126. [security] Using DNAME record to generate replacements caused
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 RPZ to exit with a assertion failure. [RT #24766]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3125. [security] Using wildcard CNAME records as a replacement with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 RPZ caused named to exit with a assertion failure.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3124. [bug] Use an rdataset attribute flag to indicate
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 negative-cache records rather than using rrtype 0;
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 this will prevent problems when that rrtype is
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 used in actual DNS packets. [RT #24777]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3123. [security] Change #2912 exposed a latent flaw in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dns_rdataset_totext() that could cause named to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 crash with an assertion failure. [RT #24777]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3121. [security] An authoritative name server sending a negative
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 response containing a very large RRset could
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 trigger an off-by-one error in the ncache code
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and crash named. [RT #24650]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3120. [bug] Named could fail to validate zones listed in a DLV
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 that validated insecure without using DLV and had
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 DS records in the parent zone. [RT #24631]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3119. [bug] When rolling to a new DNSSEC key, a private-type
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 record could be created and never marked complete.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3118. [bug] nsupdate could dump core on shutdown when using
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 SIG(0) keys. [RT #24604]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3117. [cleanup] Remove doc and parser references to the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 never-implemented 'auto-dnssec create' option.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3116. [func] New 'dnssec-update-mode' option controls updates
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of DNSSEC records in signed dynamic zones. Set to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 'no-resign' to disable automatic RRSIG regeneration
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 while retaining the ability to sign new or changed
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 data. [RT #24533]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3115. [bug] Named could fail to return requested data when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 following a CNAME that points into the same zone.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3114. [bug] Retain expired RRSIGs in dynamic zones if key is
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 inactive and there is no replacement key. [RT #23136]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3113. [doc] Document the relationship between serial-query-rate
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and NOTIFY messages.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3112. [doc] Add missing descriptions of the update policy name
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 types "ms-self", "ms-subdomain", "krb5-self" and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "krb5-subdomain", which allow machines to update
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 their own records, to the BIND 9 ARM.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3111. [bug] Improved consistency checks for dnssec-enable and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dnssec-validation, added test cases to the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 checkconf system test. [RT #24398]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3110. [bug] dnssec-signzone: Wrong error message could appear
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when attempting to sign with no KSK. [RT #24369]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3109. [func] The also-notify option now uses the same syntax
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 as a zone's masters clause. This means it is
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 now possible to specify a TSIG key to use when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 sending notifies to a given server, or to include
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 an explicit named masters list in an also-notfiy
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 statement. [RT #23508]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3108. [cleanup] dnssec-signzone: Clarified some error and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
45b727f651aba2cbd2f9db51ccfb4b541520a5deMark Andrews code (use -P instead). [RT #20852]
45b727f651aba2cbd2f9db51ccfb4b541520a5deMark Andrews3107. [bug] dnssec-signzone: Report the correct number of ZSKs
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when using -x. [RT #20852]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3106. [func] When logging client requests, include the name of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the TSIG key if any. [RT #23619]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3105. [bug] GOST support can be suppressed by "configure
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --without-gost" [RT #24367]
08df939613d7f20bdac132a93efc537bb457ccfaTinderbox User3104. [bug] Better support for cross-compiling. [RT #24367]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3103. [bug] Configuring 'dnssec-validation auto' in a view
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 instead of in the options statement could trigger
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 an assertion failure in named-checkconf. [RT #24382]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3102. [func] New 'dnssec-loadkeys-interval' option configures
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 how often, in minutes, to check the key repository
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 for updates when using automatic key maintenance.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Default is every 60 minutes (formerly hard-coded
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to 12 hours). [RT #23744]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3101. [bug] Zones using automatic key maintenance could fail
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to check the key repository for updates. [RT #23744]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3100. [security] Certain response policy zone configurations could
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 trigger an INSIST when receiving a query of type
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 RRSIG. [RT #24280]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3099. [test] "dlz" system test now runs but gives R:SKIPPED if
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 not compiled with --with-dlz-filesystem. [RT #24146]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3098. [bug] DLZ zones were answering without setting the AA bit.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3097. [test] Add a tool to test handling of malformed packets.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3096. [bug] Set KRB5_KTNAME before calling log_cred() in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dst_gssapi_acceptctx(). [RT #24004]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3095. [bug] Handle isolated reserved ports in the port range.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3094. [doc] Expand dns64 documentation.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3092. [bug] Signatures for records at the zone apex could go
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 stale due to an incorrect timer setting. [RT #23769]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3091. [bug] Fixed a bug in which zone keys that were published
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and then subsequently activated could fail to trigger
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 automatic signing. [RT #22911]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3090. [func] Make --with-gssapi default [RT #23738]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3089. [func] dnssec-dsfromkey now supports reading keys from
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 standard input "dnssec-dsfromkey -f -". [RT# 20662]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and add setup.sh in order to resolve changing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 named.conf issue. [RT #23687]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3087. [bug] DDNS updates using SIG(0) with update-policy match
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 type "external" could cause a crash. [RT #23735]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3086. [bug] Running dnssec-settime -f on an old-style key will
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 now force an update to the new key format even if no
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 other change has been specified, using "-P now -A now"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 as default values. [RT #22474]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3085. [func] New '-R' option in dnssec-signzone forces removal
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of signatures which have not yet expired but
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 were generated by a key that no longer exists.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3084. [func] A new command "rndc sync" dumps pending changes in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a dynamic zone to disk; "rndc sync -clean" also
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 removes the journal file after syncing. Also,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "rndc freeze" no longer removes journal files.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3083. [bug] NOTIFY messages were not being sent when generating
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt a NSEC3 chain incrementally. [RT #23702]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3082. [port] strtok_r is threads only. [RT #23747]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3081. [bug] Failure of DNAME substitution did not return
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 YXDOMAIN. [RT #23591]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3079. [bug] Handle isc_event_allocate failures in t_tasks.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3078. [func] Added a new include file with function typedefs
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 for the DLZ "dlopen" driver. [RT #23629]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3077. [bug] zone.c:zone_refreshkeys() incorrectly called
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt dns_zone_attach(), use zone->irefs instead. [RT #23303]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dnssec-keyfromlabel sets the default TTL of the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 key. When possible, automatic signing will use that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 TTL when the key is published. [RT #23304]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 timestamp when determining which keys are active.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3074. [bug] Make the adb cache read through for zone data and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 glue learn for zone named is authoritative for.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3073. [bug] managed-keys changes were not properly being recorded.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3071. [bug] has_nsec could be used uninitialized in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 update.c:next_active. [RT #20256]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3070. [bug] dnssec-signzone potential NULL pointer dereference.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3069. [cleanup] Silence warnings messages from clang static analysis.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3068. [bug] Named failed to build with a OpenSSL without engine
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt support. [RT #23473]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3067. [bug] ixfr-from-differences {master|slave}; failed to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 select the master/slave zones. [RT #23580]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3066. [func] The DLZ "dlopen" driver is now built by default,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 no longer requiring a configure option. To
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 disable it, use "configure --without-dlopen".
0874abad14e3e9ecfc3dc1a1a2b9969f2f027724Mark Andrews Driver also supported on win32. [RT #23467]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3065. [bug] RRSIG could have time stamps too far in the future.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3064. [bug] powerpc: add sync instructions to the end of atomic
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 operations. [RT #23469]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3062. [func] Made several changes to enhance human readability
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of DNSSEC data in dig output and in generated
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - DNSKEY record comments are more verbose, no
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 longer used in multiline mode only
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - multiline RRSIG records reformatted
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - multiline output mode for NSEC3PARAM records
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - "dig +norrcomments" suppresses DNSKEY comments
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - "dig +split=X" breaks hex/base64 records into
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 fields of width X; "dig +nosplit" disables this.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3061. [func] New option "dnssec-signzone -D", only write out
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 generated DNSSEC records. [RT #22896]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3060. [func] New option "dnssec-signzone -X <date>" allows
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 specification of a separate expiration date
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3059. [test] Added a regression test for change #3023.
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3058. [bug] Cause named to terminate at startup or rndc reconfig/
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt reload to fail, if a log file specified in the conf
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 file isn't a plain file. [RT #22771]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3057. [bug] "rndc secroots" would abort after the first error
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and so could miss some views. [RT #23488]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3056. [func] Added support for URI resource record. [RT #23386]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3055. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3054. [bug] Added elliptic curve support check in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 GOST OpenSSL engine detection. [RT #23485]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3053. [bug] Under a sustained high query load with a finite
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 max-cache-size, it was possible for cache memory
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to be exhausted and not recovered. [RT #23371]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3052. [test] Fixed last autosign test report. [RT #23256]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3051. [bug] NS records obscure DNAME records at the bottom of the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone if both are present. [RT #23035]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3050. [bug] The autosign system test was timing dependent.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Wait for the initial autosigning to complete
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 before running the rest of the test. [RT #23035]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3049. [bug] Save and restore the gid when creating creating
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 named.pid at startup. [RT #23290]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3048. [bug] Fully separate view key management. [RT #23419]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3047. [bug] DNSKEY NODATA responses not cached fixed in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 validator.c. Tests added to dnssec system test.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3046. [bug] Use RRSIG original TTL to compute validated RRset
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and RRSIG TTL. [RT #23332]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3045. [removed] Replaced by change #3050.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3044. [bug] Hold the socket manager lock while freeing the socket.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3043. [test] Merged in the NetBSD ATF test framework (currently
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 version 0.12) for development of future unit tests.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Use configure --with-atf to build ATF internally
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 or configure --with-atf=prefix to use an external
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 copy. [RT #23209]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3042. [bug] dig +trace could fail attempting to use IPv6
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 addresses on systems with only IPv4 connectivity.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3041. [bug] dnssec-signzone failed to generate new signatures on
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ttl changes. [RT #23330]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3040. [bug] Named failed to validate insecure zones where a node
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 with a CNAME existed between the trust anchor and the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 top of the zone. [RT #23338]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3039. [func] Redirect on NXDOMAIN support. [RT #23146]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3038. [bug] Install <dns/rpz.h>. [RT #23342]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3037. [doc] Update COPYRIGHT to contain all the individual
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 copyright notices that cover various parts.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3036. [bug] Check built-in zone arguments to see if the zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 is re-usable or not. [RT #21914]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3035. [cleanup] Simplify by using strlcpy. [RT #22521]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3029. [bug] isc_netaddr_format() handle a zero sized buffer.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 catch NULL pointer dereferences before they happen.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3026. [bug] lib/isc/httpd.c: check that we have enough space
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 after calling grow_headerspace() and if not
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 re-call grow_headerspace() until we do. [RT #22521]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt3025. [bug] Fixed a possible deadlock due to zone resigning.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3024. [func] RTT Banding removed due to minor security increase
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt but major impact on resolver latency. [RT #23310]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3023. [bug] Named could be left in an inconsistent state when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 receiving multiple AXFR response messages that were
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 not all TSIG-signed. [RT #23254]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3021. [bug] Change #3010 was incomplete. [RT #22296]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3020. [bug] auto-dnssec failed to correctly update the zone when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 changing the DNSKEY RRset. [RT #23232]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3019. [test] Test: check apex NSEC3 records after adding DNSKEY
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 record via UPDATE. [RT #23229]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3018. [bug] Named failed to check for the "none;" acl when deciding
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 if a zone may need to be re-signed. [RT #23120]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3017. [doc] dnssec-keyfromlabel -I was not properly documented.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3016. [bug] rndc usage missing '-b'. [RT #22937]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3014. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3013. [bug] The DNS64 ttl was not always being set as expected.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3012. [bug] Remove DNSKEY TTL change pairs before generating
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 signing records for any remaining DNSKEY changes.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3011. [func] Change the default query timeout from 30 seconds
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to 10. Allow setting this in named.conf using the new
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 'resolver-query-timeout' option, which specifies a max
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 time in seconds. 0 means 'default' and anything longer
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 than 30 will be silently set to 30. [RT #22852]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 for refreshing managed-keys. [RT #22296]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3009. [bug] clients-per-query code didn't work as expected with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 particular query patterns. [RT #22972]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.8.0b1 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3008. [func] Response policy zones (RPZ) support. [RT #21726]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3007. [bug] Named failed to preserve the case of domain names in
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt rdata which is not compressible when writing master
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt files. [RT #22863]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3006. [func] Allow dynamically generated TSIG keys to be preserved
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 across restarts of named. Initially this is for
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt TSIG keys generated using GSSAPI. [RT #22639]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3005. [port] Solaris: Work around the lack of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 gsskrb5_register_acceptor_identity() by setting
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the KRB5_KTNAME environment variable to the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 contents of tkey-gssapi-keytab. Also fixed
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 test errors on MacOSX. [RT #22853]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3004. [func] DNS64 reverse support. [RT #22769]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3003. [experimental] Added update-policy match type "external",
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 enabling named to defer the decision of whether to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 allow a dynamic update to an external daemon.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (Contributed by Andrew Tridgell.) [RT #22758]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3001. [func] Added a default trust anchor for the root zone, which
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 can be switched on by setting "dnssec-validation auto;"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in the named.conf options. [RT #21727]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉3000. [bug] More TKEY/GSS fixes:
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - nsupdate can now get the default realm from
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the user's Kerberos principal
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - corrected gsstest compilation flags
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - improved documentation
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 - fixed some NULL dereferences
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt2999. [func] Add GOST support (RFC 5933). [RT #20639]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to the task api. [RT #22776]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2997. [func] named -V now reports the OpenSSL and libxml2 verions
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 it was compiled against. [RT #22687]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2996. [security] Temporarily disable SO_ACCEPTFILTER support.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2995. [bug] The Kerberos realm was not being correctly extracted
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 from the signer's identity. [RT #22770]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 do not use threads on earlier versions. Also kill
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the unproven-pthreads, mit-pthreads, and ptl2 support.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2993. [func] Dynamically grow adb hash tables. [RT #21186]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 for looking at a secure delegation. [RT #22059]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dynamic zones. [RT #22365]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2990. [bug] 'dnssec-settime -S' no longer tests prepublication
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 interval validity when the interval is set to 0.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2989. [func] Added support for writable DLZ zones. (Contributed
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 by Andrew Tridgell of the Samba project.) [RT #22629]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of external DLZ drivers that can be loaded as
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 shared objects at runtime rather than linked with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 named. Currently this is switched on via a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 compile-time option, "configure --with-dlz-dlopen".
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Note: the syntax for configuring DLZ zones
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 is likely to be refined in future releases.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (Contributed by Andrew Tridgell of the Samba
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt project.) [RT #22629]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt2987. [func] Improve ease of configuring TKEY/GSS updates by
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 adding a "tkey-gssapi-keytab" option. If set,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 updates will be allowed with any key matching
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a principal in the specified keytab file.
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt "tkey-gssapi-credential" is no longer required
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt and is expected to be deprecated. (Contributed
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 by Andrew Tridgell of the Samba project.)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2986. [func] Add new zone type "static-stub". It's like a stub
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone, but the nameserver names and/or their IP
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 addresses are statically configured. [RT #21474]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2985. [bug] Add a regression test for change #2896. [RT #21324]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2984. [bug] Don't run MX checks when the target of the MX record
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 is ".". [RT #22645]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.8.0a1 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2982. [bug] Reference count dst keys. dst_key_attach() can be used
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 increment the reference count.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Note: dns_tsigkey_createfromkey() callers should now
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 always call dst_key_free() rather than setting it
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to NULL on success. [RT #22672]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2980. [bug] named didn't properly handle UPDATES that changed the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 TTL of the NSEC3PARAM RRset. [RT #22363]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2979. [bug] named could deadlock during shutdown if two
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "rndc stop" commands were issued at the same
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 time. [RT #22108]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2978. [port] hpux: look for <devpoll.h> [RT #21919]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2977. [bug] 'nsupdate -l' report if the session key is missing.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2976. [bug] named could die on exit after negotiating a GSS-TSIG
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 key. [RT #22573]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 wrong lock which could lead to server deadlock.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2974. [bug] Some valid UPDATE requests could fail due to a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 consistency check examining the existing version
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of the zone rather than the new version resulting
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 from the UPDATE. [RT #22413]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2973. [bug] bind.keys.h was being removed by the "make clean"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 at the end of configure resulting in build failures
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 where there is very old version of perl installed.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Move it to "make maintainer-clean". [RT #22230]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2972. [bug] win32: address windows socket errors. [RT #21906]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2971. [bug] Fixed a bug that caused journal files not to be
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 compacted on Windows systems as a result of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 non-POSIX-compliant rename() semantics. [RT #22434]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2970. [security] Adding a NO DATA negative cache entry failed to clear
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 any matching RRSIG records. A subsequent lookup of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 of NO DATA cache entry could trigger a INSIST when the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 unexpected RRSIG was also returned with the NO DATA
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 CVE-2010-3613, VU#706148. [RT #22288]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2969. [security] Fix acl type processing so that allow-query works
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in options and view statements. Also add a new
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 set of tests to verify proper functioning.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 CVE-2010-3615, VU#510208. [RT #22418]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2968. [security] Named could fail to prove a data set was insecure
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 before marking it as insecure. One set of conditions
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 that can trigger this occurs naturally when rolling
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 DNSKEY algorithms.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 CVE-2010-3614, VU#837744. [RT #22309]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2967. [bug] 'host -D' now turns on debugging messages earlier.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2966. [bug] isc_print_vsnprintf() failed to check if there was
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 space available in the buffer when adding a left
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 justified character with a non zero width,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (e.g. "%-1c"). [RT #22270]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2965. [func] Test HMAC functions using test data from RFC 2104 and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 RFC 4634. [RT #21702]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2964. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2963. [security] The allow-query acl was being applied instead of the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 allow-query-cache acl to cache lookups. [RT #22114]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2962. [port] win32: add more dependencies to BINDBuild.dsw.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2961. [bug] Be still more selective about the non-authoritative
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 answers we apply change 2748 to. [RT #22074]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2960. [func] Check that named accepts non-authoritative answers.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2959. [func] Check that named starts with a missing masterfile.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2958. [bug] named failed to start with a missing master file.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2957. [bug] entropy_get() and entropy_getpseudo() failed to match
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the API for RAND_bytes() and RAND_pseudo_bytes()
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 respectively. [RT #21962]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2955. [func] Provide more detail in the recursing log. [RT #22043]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 build_sqldbinstance failure. [RT #21623]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2953. [bug] Silence spurious "expected covering NSEC3, got an
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 exact match" message when returning a wildcard
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 no data response. [RT #21744]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2952. [port] win32: named-checkzone and named-checkconf failed
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to initialize winsock. [RT #21932]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2951. [bug] named failed to generate a correct signed response
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in a optout, delegation only zone with no secure
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 delegations. [RT #22007]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2950. [bug] named failed to perform a SOA up to date check when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 falling back to TCP on UDP timeouts when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ixfr-from-differences was set. [RT #21595]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2949. [bug] dns_view_setnewzones() contained a memory leak if
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 it was called multiple times. [RT #21942]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2948. [port] MacOS: provide a mechanism to configure the test
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt interfaces at reboot. See bin/tests/system/README
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2947. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2946. [doc] Document the default values for the minimum and maximum
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone refresh and retry values in the ARM. [RT #21886]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2945. [doc] Update empty-zones list in ARM. [RT #21772]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2944. [maint] Remove ORCHID prefix from built in empty zones.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2943. [func] Add support to load new keys into managed zones
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 without signing immediately with "rndc loadkeys".
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Add support to link keys with "dnssec-keygen -S"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and "dnssec-settime -S". [RT #21351]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2942. [contrib] zone2sqlite failed to setup the entropy sources.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2941. [bug] sdb and sdlz (dlz's zone database) failed to support
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 DNAME at the zone apex. [RT #21610]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2940. [port] Remove connection aborted error message on
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 Windows. [RT #21549]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2939. [func] Check that named successfully skips NSEC3 records
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 that fail to match the NSEC3PARAM record currently
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in use. [RT# 21868]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2938. [bug] When generating signed responses, from a signed zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 that uses NSEC3, named would use a uninitialized
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 pointer if it needed to skip a NSEC3 record because
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 it didn't match the selected NSEC3PARAM record for
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone. [RT# 21868]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2937. [bug] Worked around an apparent race condition in over
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 memory conditions. Without this fix a DNS cache DB or
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 ADB could incorrectly stay in an over memory state,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 effectively refusing further caching, which
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 subsequently made a BIND 9 caching server unworkable.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 This fix prevents this problem from happening by
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 polling the state of the memory context, rather than
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 making a copy of the state, which appeared to cause
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a race. This is a "workaround" in that it doesn't
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 solve the possible race per se, but several experiments
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 proved this change solves the symptom. Also, the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 polling overhead hasn't been reported to be an issue.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 This bug should only affect a caching server that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 specifies a finite max-cache-size. It's also quite
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 likely that the bug happens only when enabling threads,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 but it's not confirmed yet. [RT #21818]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2936. [func] Improved configuration syntax and multiple-view
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 support for addzone/delzone feature (see change
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 #2930). Removed "new-zone-file" option, replaced
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 with "allow-new-zones (yes|no)". The new-zone-file
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 for each view is now created automatically, with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a filename generated from a hash of the view name.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 It is no longer necessary to "include" the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 new-zone-file in named.conf; this happens
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 automatically. Zones that were not added via
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "rndc addzone" can no longer be removed with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "rndc delzone". [RT #19447]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2935. [bug] nsupdate: improve 'file not found' error message.
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews scope. This could potentially result in a unknown,
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews potentially malformed, EDNS option being sent instead
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews of the desired NSID option. [RT #21781]
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2931. [bug] Temporarily and partially disable change 2864
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews because it would cause infinite attempts of RRSIG
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews queries. This is an urgent care fix; we'll
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews revisit the issue and complete the fix later.
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2930. [experimental] New "rndc addzone" and "rndc delzone" commands
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews allow dynamic addition and deletion of zones.
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews To enable this feature, specify a "new-zone-file"
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews option at the view or options level in named.conf.
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews Zone configuration information for the new zones
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews will be written into that file. To make the new
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews zones persist after a restart, "include" the file
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews into named.conf in the appropriate view. (Note:
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews This feature is not yet documented, and its syntax
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews is expected to change.) [RT #19447]
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2929. [bug] Improved handling of GSS security contexts:
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews - added LRU expiration for generated TSIGs
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews - added the ability to use a non-default realm
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews - added new "realm" keyword in nsupdate
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews - limited lifetime of generated keys to 1 hour
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews or the lifetime of the context (whichever is
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2928. [bug] Be more selective about the non-authoritative
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews answer we apply change 2748 to. [RT #21594]
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2927. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2926. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2925. [bug] Named failed to accept uncachable negative responses
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 from insecure zones. [RT# 21555]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2924. [func] 'rndc secroots' dump a combined summary of the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 current managed keys combined with trusted keys.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2923. [bug] 'dig +trace' could drop core after "connection
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 timeout". [RT #21514]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2922. [contrib] Update zkt to version 1.0.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2921. [bug] The resolver could attempt to destroy a fetch context
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt too soon. [RT #19878]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to IPv4 clients. New acl 'filter-aaaa' (default any).
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2917. [func] Virtual time test framework. [RT #20801]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2916. [func] Add framework to use IPv6 in tests.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2915. [cleanup] Be smarter about which objects we attempt to compile
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 based on configure options. [RT #21444]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2914. [bug] Make the "autosign" system test more portable.
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2913. [func] Add pkcs#11 system tests. [RT #20784]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2912. [func] Windows clients don't like UPDATE responses that clear
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews the zone section. [RT #20986]
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2911. [bug] dnssec-signzone didn't handle out of zone records well.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2910. [func] Sanity check Kerberos credentials. [RT #20986]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2909. [bug] named-checkconf -p could die if "update-policy local;"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 was specified in named.conf. [RT #21416]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2908. [bug] It was possible for re-signing to stop after removing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a DNSKEY. [RT #21384]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2907. [bug] The export version of libdns had undefined references.
458e816ed08044cfe82c89fecd38bce540b23ff0Mark Andrews2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews2905. [port] aix: set use_atomic=yes with native compiler.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2904. [bug] When using DLV, sub-zones of the zones in the DLV,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 could be incorrectly marked as insecure instead of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 secure leading to negative proofs failing. This was
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a unintended outcome from change 2890. [RT# 21392]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2903. [bug] managed-keys-directory missing from namedconf.c.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2902. [func] Add regression test for change 2897. [RT #21040]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2900. [bug] The placeholder negative caching element was not
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 properly constructed triggering a INSIST in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dns_ncache_towire(). [RT #21346]
92384667ff3bc059237849b3afd4c715c9164435Evan Hunt2899. [port] win32: Support linking against OpenSSL 1.0.0.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2898. [bug] nslookup leaked memory when -domain=value was
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 specified. [RT #21301]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2897. [bug] NSEC3 chains could be left behind when transitioning
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to insecure. [RT #21040]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2896. [bug] "rndc sign" failed to properly update the zone
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews when adding a DNSKEY for publication only. [RT #21045]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2895. [func] genrandom: add support for the generation of multiple
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 files. [RT #20917]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2893. [bug] Improve managed keys support. New named.conf option
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 managed-keys-directory. [RT #20924]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2892. [bug] Handle REVOKED keys better. [RT #20961]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2891. [maint] Update empty-zones list to match
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2890. [bug] Handle the introduction of new trusted-keys and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 DS, DLV RRsets better. [RT #21097]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2889. [bug] Elements of the grammar where not properly reported.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2888. [bug] Only the first EDNS option was displayed. [RT #21273]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2887. [bug] Report the keytag times in UTC in the .key file,
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 local time is presented as a comment within the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 comment. [RT #21223]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2886. [bug] ctime() is not thread safe. [RT #21223]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2885. [bug] Improve -fno-strict-aliasing support probing in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 configure. [RT #21080]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2884. [bug] Insufficient validation in dns_name_getlabelsequence().
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2883. [bug] 'dig +short' failed to handle really large datasets.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2882. [bug] Remove memory context from list of active contexts
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 before clearing 'magic'. [RT #21274]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2881. [bug] Reduce the amount of time the rbtdb write lock
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 is held when closing a version. [RT #21198]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 consistent. [RT #21078]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2878. [func] Incrementally write the master file after performing
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 a AXFR. [RT #21010]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2877. [bug] The validator failed to skip obviously mismatching
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 RRSIGs. [RT #21138]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2876. [bug] Named could return SERVFAIL for negative responses
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 from unsigned zones. [RT #21131]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2875. [bug] dns_time64_fromtext() could accept non digits.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2874. [bug] Cache lack of EDNS support only after the server
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 successfully responds to the query using plain DNS.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2873. [bug] Canceling a dynamic update via the dns/client module
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 could trigger an assertion failure. [RT #21133]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2872. [bug] Modify dns/client.c:dns_client_createx() to only
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 require one of IPv4 or IPv6 rather than both.
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews2871. [bug] Type mismatch in mem_api.c between the definition and
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews the header file, causing build failure with
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews --enable-exportlib. [RT #21138]
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews any changes made by configure are integrated.
032d2134a4c1808696688db9bf6f20253e5d05b5Mark Andrews Use --with-make-clean=no to disable. [RT #20994]
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
6b45fd062bbcf2986078bf25b2b617b844a9fde4Mark Andrews don't like it. [RT #20986]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2866. [bug] Windows does not like the TSIG name being compressed.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2865. [bug] memset to zero event.data. [RT #20986]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2862. [bug] nsupdate didn't default to the parent zone when
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 updating DS records. [RT #20896]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2861. [doc] dnssec-settime man pages didn't correctly document the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 inactivation time. [RT #21039]
cccfafa31131844c3b82e4c92f87f243d7ca3287Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2859. [bug] When canceling validation it was possible to leak
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 memory. [RT #20800]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2858. [bug] RTT estimates were not being adjusted on ICMP errors.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2857. [bug] named-checkconf did not fail on a bad trusted key.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2856. [bug] The size of a memory allocation was not always properly
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 recorded. [RT #20927]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2855. [func] nsupdate will now preserve the entered case of domain
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 names in update requests it sends. [RT #20928]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2854. [func] dig: allow the final soa record in a axfr response to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 be suppressed, dig +onesoa. [RT #20929]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2851. [doc] nslookup.1, removed <informalexample> from the docbook
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 source as it produced bad nroff. [RT #21007]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2850. [bug] If isc_heap_insert() failed due to memory shortage
c45d848e2a5898975a14a6311a406f45028a45b0Tatuya JINMEI 神明達哉 the heap would have corrupted entries. [RT #20951]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2849. [bug] Don't treat errors from the xml2 library as fatal.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 README.rfc5011 into the ARM. [RT #20899]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2846. [bug] EOF on unix domain sockets was not being handled
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 correctly. [RT #20731]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2844. [doc] notify-delay default in ARM was wrong. It should have
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 been five (5) seconds.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 creating key files if there is a chance that the new
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 key ID will collide with an existing one after
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 either of the keys has been revoked. (To override
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 this in the case of dnssec-keyfromlabel, use the -y
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 option. dnssec-keygen will simply create a
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 different, non-colliding key, so an override is
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 not necessary.) [RT #20838]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2842. [func] Added "smartsign" and improved "autosign" and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "dnssec" regression tests. [RT #20865]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2841. [bug] Change 2836 was not complete. [RT #20883]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2840. [bug] Temporary fixed pkcs11-destroy usage check.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2839. [bug] A KSK revoked by named could not be deleted.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2838. [placeholder]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2837. [port] Prevent Linux spurious warnings about fwrite().
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2836. [bug] Keys that were scheduled to become active could
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 be delayed. [RT #20874]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2835. [bug] Key inactivity dates were inadvertently stored in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the private key file with the outdated tag
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "Unpublish" rather than "Inactive". This has been
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 fixed; however, any existing keys that had Inactive
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dates set will now need to have them reset, using
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 'dnssec-settime -I'. [RT #20868]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2834. [bug] HMAC-SHA* keys that were longer than the algorithm
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 digest length were used incorrectly, leading to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 interoperability problems with other DNS
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 implementations. This has been corrected.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (Note: If an oversize key is in use, and
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 compatibility is needed with an older release of
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 BIND, the new tool "isc-hmac-fixup" can convert
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 the key secret to a form that will work with all
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 versions.) [RT #20751]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to avoid redefinition in some OSs [RT 20831]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2831. [security] Do not attempt to validate or cache
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 out-of-bailiwick data returned with a secure
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 answer; it must be re-fetched from its original
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 source and validated in that context. [RT #20819]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2830. [bug] Changing the OPTOUT setting could take multiple
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 passes. [RT #20813]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2829. [bug] Fixed potential node inconsistency in rbtdb.c.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2828. [security] Cached CNAME or DNAME RR could be returned to clients
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 without DNSSEC validation. [RT #20737]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
d7201de09b85929a86b157f4b2d91667c68c6b52Automatic Updater2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 being released. [RT #20740]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 was in the process of being created was not properly
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 recorded in the zone. [RT #20786]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2824. [bug] "rndc sign" was not being run by the correct task.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2822. [bug] rbtdb.c:loadnode() could return the wrong result.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2821. [doc] Add note that named-checkconf doesn't automatically
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2820. [func] Handle read access failure of OpenSSL configuration
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 file more user friendly (PKCS#11 engine patch).
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2818. [cleanup] rndc could return an incorrect error code
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt when a zone was not found. [RT #20767]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2816. [bug] previous_closest_nsec() could fail to return
5b02fc32d693bb811199308a40143df0adf818c1Mark Andrews data for NSEC3 nodes [RT #29730]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2815. [bug] Exclusively lock the task when freezing a zone.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2814. [func] Provide a definitive error message when a master
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 zone is not loaded. [RT #20757]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2813. [bug] Better handling of unreadable DNSSEC key files.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2812. [bug] Make sure updates can't result in a zone with
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 NSEC-only keys and NSEC3 records. [RT #20748]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 output. [RT #20733]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2810. [doc] Clarified the process of transitioning an NSEC3 zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to insecure. [RT #20746]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2809. [cleanup] Restored accidentally-deleted text in usage output
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 in dnssec-settime and dnssec-revoke [RT #20739]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2808. [bug] Remove the attempt to install atomic.h from lib/isc.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 atomic.h is correctly installed by the architecture
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 specific subdirectories. [RT #20722]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2807. [bug] Fixed a possible ASSERT when reconfiguring zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 keys. [RT #20720]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 --- 9.7.0rc1 released ---
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 when it had changed. [RT #20703]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2805. [bug] Fixed namespace problems encountered when building
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 external programs using non-exported BIND9 libraries
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 (i.e., built without --enable-exportlib). [RT #20679]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2804. [bug] Send notifies when a zone is signed with "rndc sign"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 or as a result of a scheduled key change. [RT #20700]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
5b02fc32d693bb811199308a40143df0adf818c1Mark Andrews and genrandom under windows. [RT #20670]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2801. [func] Detect and report records that are different according
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to DNSSEC but are semantically equal according to plain
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 DNS. Apply plain DNS comparisons rather than DNSSEC
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 comparisons when processing UPDATE requests.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dnssec-signzone now removes such semantically duplicate
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 records prior to signing the RRset.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 named-checkzone -r {ignore|warn|fail} (default warn)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 named-compilezone -r {ignore|warn|fail} (default warn)
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 named.conf: check-dup-records {ignore|warn|fail};
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2800. [func] Reject zones which have NS records which refer to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 CNAMEs, DNAMEs or don't have address record (class IN
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 only). Reject UPDATEs which would cause the zone
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to fail the above checks if committed. [RT #20678]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2799. [cleanup] Changed the "secure-to-insecure" option to
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 "dnssec-secure-to-insecure", and "dnskey-ksk-only"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2798. [bug] Addressed bugs in managed-keys initialization
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 and rollover. [RT #20683]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2797. [bug] Don't decrement the dispatch manager's maxbuffers.
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2796. [bug] Missing dns_rdataset_disassociate() call in
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 dns_nsec3_delnsec3sx(). [RT #20681]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2795. [cleanup] Add text to differentiate "update with no effect"
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 log messages. [RT #18889]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2794. [bug] Install <isc/namespace.h>. [RT #20677]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2793. [func] Add "autosign" and "metadata" tests to the
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 automatic tests. [RT #19946]
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉2792. [func] "filter-aaaa-on-v4" can now be set in view
307d2084502eddc7ce921e5ce439aec3531d90e0Tatuya JINMEI 神明達哉 options (if compiled in). [RT #20635]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which