CHANGES revision fa2cb8d61d8699709b9fc14ed4f47bb63507b2a5
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews2862. [bug] nsupdate didn't default to the parent zone when
3ad4e307b64bcf8baa984e10a4e7549dbeaea31dMark Andrews updating DS records. [RT #20896]
9ce4318edbab0b50f21df9ce28beb6fde71943ecMark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
9ce4318edbab0b50f21df9ce28beb6fde71943ecMark Andrews inactivation time. [RT #21039]
91c79af4755df2d892511512e0fc886639518a92Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
80c5a37ddcb42239f6b7d16b66ca0426ca6ffe2cMark Andrews2859. [bug] When cancelling validation it was possible to leak
2558e3f25d4972a028c99141bd26d3f3087630d5Mark Andrews memory. [RT #20800]
f464ad3b9f4745f831d54db7bb0dc2230eddddf0Mark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
0e4f7c9d4e1a4bb66f0702e9f9975c392a15918bMark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
dbc4666b1b153775001613af160541da986429b2Mark Andrews2856. [bug] The size of a memory allocation was not always properly
54a8b1e6ede781e9f4059512530046db8c4de1ddMark Andrews recorded. [RT #20927]
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews2855. [func] nsupdate will now preserve the entered case of domain
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews names in update requests it sends. [RT #20928]
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews2854. [func] dig: allow the final soa record in a axfr response to
f7e94169a9814c8e7d2ac8ac62bf0ccafb5a2cb6Mark Andrews be suppressed, dig +onesoa. [RT #20929]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
807d4a4c54ab9a328afeb5f69dc680ffbcb384c8Tatuya JINMEI 神明達哉2851. [doc] nslookup.1, removed <informalexample> from the docbook
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews source as it produced bad nroff. [RT #21007]
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews2850. [bug] If isc_heap_insert() failed due to memory shortage
6bd3b1fdb3915931ac158b2126fae35711bd0b26Mark Andrews the heap would have corrupted entries. [RT #20951]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews2849. [bug] Don't treat errors from the xml2 library as fatal.
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews README.rfc5011 into the ARM. [RT #20899]
ea40cebe2b51bd2b3c228ac6d08a3cfeca17960aMark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews2846. [bug] EOF on unix domain sockets was not being handled
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews correctly. [RT #20731]
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews been five (5) seconds.
b857ba993de91a3863de92db6462afdbec47d993Mark Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
b857ba993de91a3863de92db6462afdbec47d993Mark Andrews creating key files if there is a chance that the new
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews key ID will collide with an existing one after
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews either of the keys has been revoked. (To override
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews this in the case of dnssec-keyfromlabel, use the -y
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews option. dnssec-keygen will simply create a
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews different, non-colliding key, so an override is
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews not necessary.) [RT #20838]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews2842. [func] Added "smartsign" and improved "autosign" and
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews "dnssec" regression tests. [RT #20865]
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews2839. [bug] A KSK revoked by named could not be deleted.
94d1015e65882e0f0c527abb0e8f66a609f46cb8Mark Andrews2838. [placeholder]
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews2836. [bug] Keys that were scheduled to become active could
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews be delayed. [RT #20874]
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews2835. [bug] Key inactivity dates were inadvertently stored in
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews the private key file with the outdated tag
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews "Unpublish" rather than "Inactive". This has been
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews fixed; however, any existing keys that had Inactive
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews dates set will now need to have them reset, using
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews 'dnssec-settime -I'. [RT #20868]
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews2834. [bug] HMAC-SHA* keys that were longer than the algorithm
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews digest length were used incorrectly, leading to
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews interoperability problems with other DNS
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews implementations. This has been corrected.
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews (Note: If an oversize key is in use, and
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews compatibility is needed with an older release of
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews BIND, the new tool "isc-hmac-fixup" can convert
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews the key secret to a form that will work with all
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews versions.) [RT #20751]
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews to avoid redefinition in some OSes [RT 20831]
fb31e2890814be0ac3c343d91144f89ce5e05784Mark Andrews2831. [security] Do not attempt to validate or cache
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews out-of-bailiwick data returned with a secure
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews answer; it must be re-fetched from its original
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews source and validated in that context. [RT #20819]
f853c77478af94109291ea93f800444b949be558Mark Andrews2830. [bug] Changing the OPTOUT setting could take multiple
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews passes. [RT #20813]
6fd711065f5878c526f88f2825ab8024e2296644Mark Andrews2829. [bug] Fixed potential node inconsistency in rbtdb.c.
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews2828. [security] Cached CNAME or DNAME RR could be returned to clients
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews without DNSSEC validation. [RT #20737]
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
eabf7ff29a88c578619fdc0d307f9e0bad0d6ce8Mark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
8f2b99738760449de3431b191c0c9c0ea08fdc2eMark Andrews being released. [RT #20740]
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews was in the process of being created was not properly
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews recorded in the zone. [RT #20786]
881702c9c0079cd48a45054fd90d043f3a8b7e11Mark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2eb9c4150491acfb429d67de1fddd8722d83553eMark Andrews2822. [bug] rbtdb.c:loadnode() could return the wrong result.
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉2821. [doc] Add note that named-checkconf doesn't automatically
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉2820. [func] Handle read access failure of OpenSSL configuration
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉 file more user friendly (PKCS#11 engine patch).
668767dc6471dfed4741869c8dd20af8e9ace3cdTatuya JINMEI 神明達哉2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
634d053dfe806ee6a3d9ed5c2bda7f68ba410de4Tatuya JINMEI 神明達哉2818. [cleanup] rndc could return an incorrect error code
e724512f2be8d3de5f2982ebba0b2cdaf8325702Mark Andrews when a zone was not found. [RT #20767]
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews2816. [bug] previous_closest_nsec() could fail to return
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews data for NSEC3 nodes [RT #29730]
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews2814. [func] Provide a definitive error message when a master
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews zone is not loaded. [RT #20757]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews2812. [bug] Make sure updates can't result in a zone with
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews NSEC-only keys and NSEC3 records. [RT 20748]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
846f974d5737710588eb676b64ba138da27c45ddMark Andrews output. [RT #20733]
93d6dfaf66258337985427c86181f01fc51f0bb4Mark Andrews2810. [doc] Clarified the process of transitioning an NSEC3 zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to insecure. [RT #20746]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2809. [cleanup] Restored accidentally-deleted text in usage output
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in dnssec-settime and dnssec-revoke [RT #20739]
436fd79f52d39c64aff47d4993db39c1cd09723bMark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 atomic.h is correctly installed by the architecture
d3fc633c344e15179480d887aeecf4a6263baeabMark Andrews specific subdirectories. [RT #20722]
73d74334741756eab4a9afd8d3c4e7c08da9a844Mark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 keys. [RT #20720]
baee883e378402698eeb7326538a7d432c8350d1Mark Andrews --- 9.7.0rc1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews when it had changed. [RT #20703]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2805. [bug] Fixed namespace problems encountered when building
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 external programs using non-exported BIND9 libraries
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (i.e., built without --enable-exportlib). [RT #20679]
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or as a result of a scheduled key change. [RT #20700]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews and genrandom under windows. [RT #20670]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2801. [func] Detect and report records that are different according
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to DNSSEC but are sematically equal according to plain
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews DNS. Apply plain DNS comparisons rather than DNSSEC
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 comparisons when processing UPDATE requests.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-signzone now removes such semantically duplicate
20d90a37532b92b0471c56fb583d6b2ddc32caa6Mark Andrews records prior to signing the RRset.
fefe1106d96d3a89b21315f665b36a67cdea3840Mark Andrews named-checkzone -r {ignore|warn|fail} (default warn)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named-compilezone -r {ignore|warn|fail} (default warn)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named.conf: check-dup-records {ignore|warn|fail};
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2800. [func] Reject zones which have NS records which refer to
c528ef03d9cdfd7eed4fe6b93563dd599bbb25b0Mark Andrews CNAMEs, DNAMEs or don't have address record (class IN
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 only). Reject UPDATEs which would cause the zone
f58233ec6c8b5866083bbaf5083ac9ade6bebe3aMark Andrews to fail the above checks if committed. [RT #20678]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2799. [cleanup] Changed the "secure-to-insecure" option to
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
1b5a72829324a0d2fa327a270caea8fd02ae8779Mark Andrews2798. [bug] Addressed bugs in managed-keys initialization
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and rollover. [RT #20683]
5e9f6125246cec57771bcdeefed03153d41c23fdMark Andrews2797. [bug] Don't decrement the dispatch manager's maxbuffers.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2796. [bug] Missing dns_rdataset_disassociate() call in
3184ff5e45c8f821e5165ea60d674bfb87faf5b8Mark Andrews dns_nsec3_delnsec3sx(). [RT #20681]
1e107b3d7b54de5022c3328423164e533afcc15eMark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 log messages. [RT #18889]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2794. [bug] Install <isc/namespace.h>. [RT #20677]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2793. [func] Add "autosign" and "metadata" tests to the
17a14e451df80b3d82278e5c925682ade3263dbcMark Andrews automatic tests. [RT #19946]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2792. [func] "filter-aaaa-on-v4" can now be set in view
a4b3e51a8f1c9742c0f7d9f7d70f1ad926985145Mark Andrews options (if compiled in). [RT #20635]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2791. [bug] The installation of isc-config.sh was broken.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2790. [bug] Handle DS queries to stub zones. [RT #20440]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
4bb16c5856e5c6b05ac43c60f9f9376641bdcccfMark Andrews2788. [bug] dnssec-signzone could sign with keys that were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not requested [RT #20625]
c676c1b4978bfe2d00bdf5085fd44544067f9de4Mark Andrews2787. [bug] Spurious log message when zone keys were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dynamically reconfigured. [RT #20659]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2786. [bug] Additional could be promoted to answer. [RT #20663]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0b3 released ---
471e0563c7965c556c759775882cd3448dae78eaMark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews2784. [bug] TC was not always being set when required glue was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dropped. [RT #20655]
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 buffer size of 512 or less. [RT #20654]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2782. [port] win32: use getaddrinfo() for hostname lookups.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2781. [bug] Inactive keys could be used for signing. [RT #20649]
3ca4b8062f845489a9c7e33a4af63cf9c863c1d4Mark Andrews2780. [bug] dnssec-keygen -A none didn't properly unset the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 activation date in all cases. [RT #20648]
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews2779. [bug] Dynamic key revokation could fail. [RT #20644]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2778. [bug] dnssec-signzone could fail when a key was revoked
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 without deleting the unrevoked version. [RT #20638]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2776. [bug] Change #2762 was not correct. [RT #20647]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews in dnssec-keyfromlabel. [RT #20643]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2774. [bug] Existing cache DB wasn't being reused after
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reconfiguration. [RT #20629]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2773. [bug] In autosigned zones, the SOA could be signed
edfcbabd60f8479b72d91bcc2d2082a36ace4003Mark Andrews with the KSK. [RT #20628]
f95231835fdcd8d5f58486c9f9993602f27fe157Mark Andrews2772. [security] When validating, track whether pending data was from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the additional section or not and only return it if
21f1794606dce19928cf455029e173321f166380Mark Andrews validates as secure. [RT #20438]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2771. [bug] dnssec-signzone: DNSKEY records could be
0cb25226fba18befbe40156c93845f2fc9bf3524Mark Andrews corrupted when importing from key files [RT #20624]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2770. [cleanup] Add log messages to resolver.c to indicate events
2610933abd985bdea28801c35d740d2cab2f137aMark Andrews causing FORMERR responses. [RT #20526]
7a857bdb6828e75eec5a7080e4670ce199875922Mark Andrews2769. [cleanup] Change #2742 was incomplete. [RT #19589]
fc87397df60d3c5e5d9900ff5ac82da29fe1dbb7Mark Andrews2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
a22f967b7e3589dab640d2cc65fd202d077a9d90Mark Andrews2767. [bug] named could crash on startup if a zone was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 configured with auto-dnssec and there was no
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key-directory. [RT #20615]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2766. [bug] isc_socket_fdwatchpoke() should only update the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 socketmgr state if the socket is not pending on a
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews read or write. [RT #20603]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2765. [bug] Skip masters for which the TSIG key cannot be found.
f5af519ab547bc80c51387529103e4e852a1171eMark Andrews2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews2762. [bug] DLV validation failed with a local slave DLV zone.
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews2761. [cleanup] Enable internal symbol table for backtrace only for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 systems that are known to work. Currently, BSD
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 variants, Linux and Solaris are supported. [RT# 20202]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
163547c0c064251e97c74538c5ede3232b3f0ffaMark Andrews2759. [doc] Add information about .jbk/.jnw files to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the ARM. [RT #20303]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2758. [bug] win32: Added a workaround for a windows 2008 bug
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 that could cause the UDP client handler to shut
07a849ba02aba7e8e869bc82c360fcc4b27eb009Mark Andrews down. [RT #19176]
806c235ecf533b98d068b3f8df9d7abbe1e30cf9Mark Andrews2757. [bug] dig: assertion failure could occur in connect
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 timeout. [RT #20599]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews2755. [placeholder]
2fd63cf561135572339d4e2ff0c06695e3dcf1baMark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was signed with NSEC3. [RT #20587]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews2753. [bug] Removed an unnecessary warning that could appear when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 building an NSEC chain. [RT #20589]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2752. [bug] Locking violation. [RT #20587]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2750. [bug] dig: assertion failure could occur when a server
4cb69e7c919cc43b16852016588af714bc421da3Mark Andrews didn't have an address. [RT #20579]
ea6fe0d54f36754c195b3b8dac47c81f7993677eMark Andrews2749. [bug] ixfr-from-differences generated a non-minimal ixfr
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for NSEC3 signed zones. [RT #20452]
6bd8cee98332533a4fa705b82ca9ec1606738ba9Mark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as referrals. [RT #18884]
0c2509b0b9f9e455fa9d347d08f6ba9abd86d418Mark Andrews2747. [bug] Journal roll forwards failed to set the re-signing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 time of RRSIGs correctly. [RT #20541]
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews2746. [port] hpux: address signed/unsigned expansion mismatch of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2745. [bug] configure script didn't probe the return type of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 gai_strerror(3) correctly. [RT #20573]
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for a insecure delegation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0b2 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2742. [cleanup] Clarify some DNSSEC-related log messages in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2741. [func] Allow the dnssec-keygen progress messages to be
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews suppressed (dnssec-keygen -q). Automatically
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 suppress the progress messages when stdin is not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a tty. [RT #20474]
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews2740. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2739. [cleanup] Clean up API for initializing and clearing trust
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews anchors for a view. [RT #20211]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews test. [RT #20453]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2737. [func] UPDATE requests can leak existance information.
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews2736. [func] Improve the performance of NSEC signed zones with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 more than a normal amount of glue below a delegation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2735. [bug] dnssec-signzone could fail to read keys
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 that were specified on the command line with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 full paths, but weren't in the current
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews directory. [RT #20421]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2734. [port] cygwin: arpaname did not compile. [RT #20473]
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
463fc8f9d61e07613486e64b4b7b3f924ea2b25cMark Andrews2732. [func] Add optional filter-aaaa-on-v4 option, available
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if built with './configure --enable-filter-aaaa'.
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews Filters out AAAA answers to clients connecting
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 via IPv4. (This is NOT recommended for general
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 use.) [RT #20339]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2731. [func] Additional work on change 2709. The key parser
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 will now ignore unrecognized fields when the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 minor version number of the private key format
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 has been increased. It will reject any key with
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews the major version number increased. [RT #20310]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2730. [func] Have dnssec-keygen display a progress indication
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews a la 'openssl genrsa' on standard error. Note
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when the first '.' is followed by a long stop
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 one has the choice between slow generation vs.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 poor random quality, i.e., '-r /dev/urandom'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2729. [func] When constructing a CNAME from a DNAME use the DNAME
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews TTL. [RT #20451]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews dnssec-signzone now warn immediately if asked to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 write into a nonexistent directory. [RT #20278]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2727. [func] The 'key-directory' option can now specify a relative
c960dffe35970da729219b72f2e41350d3b64c35Mark Andrews path. [RT #20154]
5da49e379c79fbd597cf0d47e7697b65991f761fMark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RSASHA256 and RSASHA512. [RT #20023]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2725. [doc] Added information about the file "managed-keys.bind"
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews to the ARM. [RT #20235]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2724. [bug] Updates to a existing node in secure zone using NSEC
a207a2835e37de52e11d4c143c0425e749409c46Mark Andrews were failing. [RT #20448]
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 isc_base64_totext(), didn't always mark regions of
838d608e6f37038f2fb43980a7a9d6b6a490db36Mark Andrews memory as fully consumed after conversion. [RT #20445]
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews2722. [bug] Ensure that the memory associated with the name of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a node in a rbt tree is not altered during the life
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of the node. [RT #20431]
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews2721. [port] Have dst__entropy_status() prime the random number
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 generator. [RT #20369]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2720. [bug] RFC 5011 trust anchor updates could trigger an
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 incorrect. [RT #20394]
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the last private type record was removed as a result
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of completing the signing the zone with a key.
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0b1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2715. [bug] Require OpenSSL support to be explicitly disabled.
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2713. [bug] powerpc: atomic operations missing asm("ics") /
12ff7274fe2ea531ecca6a71fb9f7e1ae92da389Mark Andrews __isync() calls.
9d3ad53203f1ac49f9e876dbbcaca18656eb3e19Mark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to be fully automated in zones configured for
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews dynamic DNS. 'auto-dnssec allow;' permits a zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to be signed by creating keys for it in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key-directory and using 'rndc sign <zone>'.
8da0b50e8a8c74602eca97e261ce4ad457df5048Mark Andrews 'auto-dnssec maintain;' allows that too, plus it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 also keeps the zone's DNSSEC keys up to date
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 according to their timing metadata. [RT #19943]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2711. [port] win32: Add the bin/pkcs11 tools into the full
6388dcf8e661687c30a5d52f149d193ce86748a8Mark Andrews build. [RT #20372]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews zone option cause a zone to be signed with only KSKs
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signing the DNSKEY RRset, not ZSKs. This reduces
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the size of a DNSKEY answer. [RT #20340]
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews2709. [func] Added some data fields, currently unused, to the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 private key file format, to allow implementation
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of explicit key rollover in a future release
d92770e851ebbc1005b3bf121e3c9f13b67a3f42Mark Andrews without impairing backward or forward compatibility.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2708. [func] Insecure to secure and NSEC3 parameter changes via
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 update are now fully supported and no longer require
90295f915c883d1aeeda856f518584d4219a704aMark Andrews defines to enable. We now no longer overload the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NSEC3PARAM flag field, nor the NSEC OPT bit at the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 apex. Secure to insecure changes are controlled by
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews by the named.conf option 'secure-to-insecure'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Warning: If you had previously enabled support by
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews adding defines at compile time to BIND 9.6 you should
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ensure that all changes that are in progress have
99776003811a413457a2c35a808ad860df877d24Mark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is not backwards compatible.
2ffb3eb384ae71ae9f8edbf5fa2219d965ff0552Mark Andrews2707. [func] dnssec-keyfromlabel no longer require engine name
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to be specified in the label if there is a default
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 engine or the -E option has been used. Also, it
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews now uses default algorithms as dnssec-keygen does
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 trigger an assert. [RT #20368]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2705. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2704. [bug] Serial of dynamic and stub zones could be inconsistent
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews with their SOA serial. [RT #19387]
b8fff4f0d70bb9c5e53023ad0dae0acda67b5cdaMark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for all binaries which can take benefit of
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉 crypto hardware. [RT #20230]
be0e075ac2c10ade3e80edef7fa14ac0fda92690Mark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2701. [doc] Correction to ARM: hmac-md5 is no longer the only
2a908588fbeacebc5f13b153b73c96e12dacaadcTatuya JINMEI 神明達哉 supported TSIG key algorithm. [RT #18046]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2700. [doc] The match-mapped-addresses option is discouraged.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2699. [bug] Missing lock in rbtdb.c. [RT #20037]
2945ac15af547df0268e449252902ead599e2451Mark Andrews2698. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉 S_IFREG are defined after including <isc/stat.h>.
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews2696. [bug] named failed to successfully process some valid
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 acl constructs. [RT #20308]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2695. [func] DHCP/DDNS - update fdwatch code for use by
8b0ee8448bec37bf1e771363dccce7c0e73eb1a7Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 callback funciton for isc_socket_fdwatchcreate)
aec2d57d5b9f5ca97763a1b49b76f0bcb5852e1aMark Andrews to include information about the direction (read
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or write) and add isc_socket_fdwatchpoke.
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2692. [port] win32: 32/64 bit cleanups. [RT #20335]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews chain when re-signing a previously-signed zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Use -u to modify NSEC3 parameters or switch
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 between NSEC and NSEC3. [RT #20304]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2689. [bug] Correctly handle snprintf result. [RT #20306]
550085fed1d0af54ba5b2f588898afec158195deMark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to decide to fetch the destination address. [RT #20305]
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Also, added warnings when revoking a ZSK, as this is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not defined by protocol (but is legal). [RT #19943]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2686. [bug] dnssec-signzone should clean the old NSEC chain when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signing with NSEC3 and vice versa. [RT #20301]
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2684. [cleanup] dig: formalize +ad and +cd as synonyms for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 +adflag and +cdflag. [RT #19305]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews the NSEC3 parameters used to sign the zone change.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2682. [bug] "configure --enable-symtable=all" failed to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 build. [RT #20282]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
39fe146f2ab82cb8e49caa319a3345174fa2d69aMark Andrews decoded. [RT #20269]
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 format. [RT #20031]
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was set. [RT #20258]
2434ccfde7efa30b6fedf4630e5036eeb5d647d0Mark Andrews2677. [func] Changes to key metadata behavior:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - Keys without "publish" or "active" dates set will
d8ec783e6dc0bd16a80b30d9888306b1faae6037Mark Andrews no longer be used for smart signing. However,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 those dates will be set to "now" by default when
5bd76af084edfdcd1cb4db9453ac781d32dde6f7Mark Andrews a key is created; to generate a key but not use
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 it yet, use dnssec-keygen -G.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - New "inactive" date (dnssec-keygen/settime -I)
8bcb0f297b50e80e3c7aab1a41b94d937acf4dc0Mark Andrews sets the time when a key is no longer used for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signing but is still published.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - The "unpublished" date (-U) is deprecated in
7f32428506d55083fe5ac9aa515294bdef7c6e27Mark Andrews favor of "deleted" (-D).
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews2676. [bug] --with-export-installdir should have been
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --with-export-includedir. [RT #20252]
a6211a2f234767a015a6a30b85d5da087fa907f1Mark Andrews2675. [bug] dnssec-signzone could crash if the key directory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 did not exist. [RT #20232]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0a3 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2674. [bug] "dnssec-lookaside auto;" crashed if named was built
e72d4d8929fec51153e4fd0d1cf632cd59335495Mark Andrews without openssl. [RT #20231]
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews2673. [bug] The managed-keys.bind zone file could fail to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 load due to a spurious result from sync_keyzone()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2672. [bug] Don't enable searching in 'host' when doing reverse
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews lookups. [RT #20218]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2671. [bug] Add support for PKCS#11 providers not returning
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the public exponent in RSA private keys
0ad5cb4782cd419b089bcab28d2fd9e140dbcc59Mark Andrews (OpenCryptoki for instance) in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-keyfromlabel. [RT #19294]
7c5d5a7932b8ac27281eeff64506dff8220bb3eaMark Andrews2670. [bug] Unexpected connect failures failed to log enough
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 information to be useful. [RT #20205]
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer2669. [func] Update PKCS#11 support to support Keyper HSM.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Update PKCS#11 patch to be against openssl-0.9.8i.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2668. [func] Several improvements to dnssec-* tools, including:
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews - dnssec-keygen and dnssec-settime can now set key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 metadata fields 0 (to unset a value, use "none")
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer - dnssec-revoke sets the revocation date in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 addition to the revoke bit
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews - dnssec-settime can now print individual metadata
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fields instead of always printing all of them,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and can print them in unix epoch time format for
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews use by scripts
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2667. [func] Add support for logging stack backtrace on assertion
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure (not available for all platforms). [RT #19780]
1431917c7cddbac7442cb910e83cb058fea59fb5Mark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (API change from 9.7.0a2). [RT #20196]
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ARM documentation about RFC 5011 support. [RT #19874]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2664. [bug] create_keydata() and minimal_update() in zone.c
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews didn't properly check return values for some
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 functions. [RT #19956]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2663. [func] win32: allow named to run as a service using
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "NT AUTHORITY\LocalService" as the account. [RT #19977]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews returned a misleading error code when lwresd was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 down. [RT #20028]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 creating lwres context. [RT #20029]
638fe804a524ee0c028863c0301b999c79de7651Mark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 applications. See README.libdns. [RT #19369]
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 name for DNSSEC keys. [RT #19938]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key file paths correctly. [RT #20078]
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 log level to debug 1. [RT #20058]
c54c1eaf26d5a7fc123c4af3712353156a766df1Mark Andrews2656. [func] win32: add a "tools only" check box to the installer
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 which causes it to only install dig, host, nslookup,
0d993c02babc1e00516272783b310e83bb292d5cMark Andrews nsupdate and relevant DLLs. [RT #19998]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2655. [doc] Document that key-directory does not affect
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews bind.keys, rndc.key or session.key. [RT #20155]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2654. [bug] Improve error reporting on duplicated names for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 deny-answer-xxx. [RT #20164]
86f6b92e35c7bdb5fc1fd1021af75b981863313eMark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not found rather than out of memory. [RT #18033]
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews2652. [func] Provide more detail about what record is being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 deleted. [RT #20061]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2651. [bug] Dates could print incorrectly in K*.key files on
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews 64-bit systems. [RT #20076]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2650. [bug] Assertion failure in dnssec-signzone when trying
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews to read keyset-* files. [RT #20075]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2649. [bug] Set the domain for forward only zones. [RT #19944]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2647. [bug] Remove unnecessary SOA updates when a new KSK is
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews added. [RT #19913]
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews which default to 64 bits. [RT #19927]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0a2 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2644. [bug] Change #2628 caused a regression on some systems;
020f7361a49c5b1cda91927cf8206c1283fc7496Mark Andrews named was unable to write the PID file and would
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fail on startup. [RT #20001]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2643. [bug] Stub zones interacted badly with NSEC3 support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2642. [bug] nsupdate could dump core on solaris when reading
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 improperly formatted key files. [RT #20015]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2641. [bug] Fixed an error in parsing update-policy syntax,
33c538015323f4576679e427088372eea614feebMark Andrews added a regression test to check it. [RT #20007]
ac65e45126dda424b5cc9d2865b353dc0ec23e1eMark Andrews2640. [security] A specially crafted update packet will cause named
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to exit. [RT #20000]
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews2638. [bug] Install arpaname. [RT #19957]
de4976142190ae84ed3e4099f3e0fc07781748a3Mark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2636. [func] Simplify zone signing and key maintenance with the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-* tools. Major changes:
0b09763c354ec91fb352b6b4cea383bd0195b2d8Mark Andrews - all dnssec-* tools now take a -K option to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specify a directory in which key files will be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - DNSSEC can now store metadata indicating when
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews they are scheduled to be published, activated,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 revoked or removed; these values can be set by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-keygen or overwritten by the new
93da96c1cfd5f3c47169855867dd18db00c8a386Mark Andrews dnssec-settime command
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - dnssec-signzone -S (for "smart") option reads key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 metadata and uses it to determine automatically
7d389c324cc032475f9d219a12ab84bacbd7fbaaMark Andrews which keys to publish to the zone, use for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signing, revoke, or remove from the zone
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
cc4928ec7116a064223f60639ca1a80f25ba350fMark Andrews2634. [port] win32: Add support for libxml2, enable
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 statschannel. [RT #19773]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2633. [bug] Handle 15 bit rand() functions. [RT #19783]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2632. [func] util/kit.sh: warn if documentation appears to be out of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 date. [RT #19922]
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2630. [func] Improved syntax for DDNS autoconfiguration: use
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews "update-policy local;" to switch on local DDNS in a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone. (The "ddns-autoconf" option has been removed.)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2629. [port] Check for seteuid()/setegid(), use setresuid()/
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 setresgid() if not present. [RT #19932]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2628. [port] linux: Allow /var/run/named/named.pid to be opened
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 at startup with reduced capabilities in operation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2627. [bug] Named aborted if the same key was included in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 trusted-keys more than once. [RT #19918]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2626. [bug] Multiple trusted-keys could trigger an assertion
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews failure. [RT #19914]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
c549b3a4d5fedba2ae960df667864e824acb1ef9Mark Andrews2624. [func] 'named-checkconf -p' will print out the parsed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 configuration. [RT #18871]
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2621. [doc] Made copyright boilterplate consistent. [RT #19833]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2620. [bug] Delay thawing the zone until the reload of it has
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 completed successfully. [RT #19750]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2619. [func] Add support for RFC 5011, automatic trust anchor
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 maintenance. The new "managed-keys" statement can
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 be used in place of "trusted-keys" for zones which
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews support this protocol. (Note: this syntax is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 expected to change prior to 9.7.0 final.) [RT #19248]
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 loop infinitely. [RT #19847]
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews2617. [bug] ifconfig.sh failed to emit an error message when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 run from the wrong location. [RT #19375]
a1edcd1b8d430650d85ec0962cd32efde76a71fbMark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when a explicit nameserver was specified. [RT #19852]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2615. [bug] "__attribute__((unused))" was in the wrong place
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews for ia64 gcc builds. [RT #19854]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2614. [port] win32: 'named -v' should automatically be executed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in the foreground. [RT #19844]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2613. [placeholder]
acc8b7ac3d16538bf223545bbf71899b9accaebbMark Andrews --- 9.7.0a1 released ---
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews2612. [func] Add default values for the arguments to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-keygen. Without arguments, it will now
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews generate a 1024-bit RSASHA1 zone-signing key,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or with the -f KSK option, a 2048-bit RSASHA1
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key-signing key. [RT #19300]
8e5893c36cdccc706f9632f51e0c8d390d2a8d06Mark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DLV records instead of DS records. [RT #19300]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2610. [port] sunos: Change #2363 was not complete. [RT #19796]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2609. [func] Simplify the configuration of dynamic zones:
3d822d111c00e70830dc163a5298196a1e7db29fMark Andrews - add ddns-confgen command to generate
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 configuration text for named.conf
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews - add zone option "ddns-autoconf yes;", which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causes named to generate a TSIG session key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and allow updates to the zone using that key
4c83dd7f22b19c75afdd311684f6ba0faa24e8d8Mark Andrews - add '-l' (localhost) option to nsupdate, which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causes nsupdate to connect to a locally-running
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named process using the session key generated
57e0f58b3fd4cb49a57200c8af9cb58d984d871aMark Andrews2608. [func] Perform post signing verification checks in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-signzone. These can be disabled with -P.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 The post sign verification test ensures that for each
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 algorithm in use there is at least one non revoked
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews self signed KSK key. That all revoked KSK keys are
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 self signed. That all records in the zone are signed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 by the algorithm. [RT #19653]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2607. [bug] named could incorrectly delete NSEC3 records for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 empty nodes when processing a update request.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2606. [bug] "delegation-only" was not being accepted in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 delegation-only type zones. [RT #19717]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2605. [bug] Accept DS responses from delegation only zones.
ddc592d128cdde85ada64efbda95981c10c4c03cMark Andrews [RT # 19296]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2604. [func] Add support for DNS rebinding attack prevention through
88c2b83cc548a217cc92a2bf75ca1ef1d4237d4fMark Andrews new options, deny-answer-addresses and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 deny-answer-aliases. Based on contributed code from
bd6ad47c3dbc52a54f240432878b6832bd6dd6e2Mark Andrews JD Nurmi, Google. [RT #18192]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2603. [port] win32: handle .exe extension of named-checkzone and
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews named-comilezone argv[0] names under windows.
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews2602. [port] win32: fix debugging command line build of libisccfg.
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews2601. [doc] Mention file creation mode mask in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named manual page.
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews2600. [doc] ARM: miscellaneous reformatting for different
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 page widths. [RT #19574]
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews2599. [bug] Address rapid memory growth when validation fails.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2598. [func] Reserve the -F flag. [RT #19657]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2597. [bug] Handle a validation failure with a insecure delegation
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from a NSEC3 signed master/slave zone. [RT #19464]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews long, leading to inefficient memory usage or rejecting
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 newer cache entries in the worst case. [RT #19563]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews2594. [func] Have rndc warn if using its default configuration
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 file when the key file also exists. [RT #19424]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews2591. [bug] named could die when processing a update in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 removed_orphaned_ds(). [RT #19507]
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews2590. [func] Report zone/class of "update with no effect".
c08a03a43116c21cf12dea7cbcb5465588f7955cMark Andrews2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2588. [bug] SO_REUSEADDR could be set unconditionally after failure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of bind(2) call. This should be rare and mostly
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews harmless, but may cause interference with other
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 processes that happen to use the same port. [RT #19642]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2587. [func] Improve logging by reporting serial numbers for
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews when zone serial has gone backwards or unchanged.
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or SDB. [RT #19577]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2585. [bug] Uninitialized socket name could be referenced via a
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews statistics channel, triggering an assertion failure in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 XML rendering. [RT #19427]
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2583. [port] netbsd: provide a control to not add the compile
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 date to the version string, -DNO_VERSION_DATE.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2582. [bug] Don't emit warning log message when we attempt to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 remove non-existent journal. [RT #19516]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Requires MySQL 5.0.19 or later. [RT #19084]
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews2580. [bug] UpdateRej statistics counter could be incremented twice
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for one rejection. [RT #19476]
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews2579. [bug] DNSSEC lookaside validation failed to handle unknown
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 algorithms. [RT #19479]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2578. [bug] Changed default sig-signing-type to 65534, because
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 65535 turns out to be reserved. [RT #19477]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2577. [doc] Clarified some statistics counters. [RT #19454]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2576. [bug] NSEC record were not being correctly signed when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a zone transitions from insecure to secure.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Handle such incorrectly signed zones. [RT #19114]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2575. [func] New functions dns_name_fromstring() and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_name_tostring(), to simplify conversion
c00a1eb423623442aff428336bb55590f79013bbMark Andrews of a string to a dns_name structure and vice
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 versa. [RT #19451]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2574. [doc] Document nsupdate -g and -o. [RT #19351]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2573. [bug] Replacing a non-CNAME record with a CNAME record in a
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington single transaction in a signed zone failed. [RT #19397]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2572. [func] Simplify DLV configuration, with a new option
cceca51fec3b4af660d28e2d3df7242823312eb6Brian Wellington "dnssec-lookaside auto;" This is the equivalent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of "dnssec-lookaside . trust-anchor dlv.isc.org;"
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews plus setting a trusted-key for dlv.isc.org.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note: The trusted key is hard-coded into named,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 but is also stored in (and can be overridden
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rolls over it can be kept up to date by replacing
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews the bind.keys file with a key downloaded from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 https://www.isc.org/solutions/dlv. [RT #18685]
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews2571. [func] Add a new tool "arpaname" which translates IP addresses
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2570. [func] Log the destination address the query was sent to.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2569. [func] Move journalprint, nsec3hash, and genrandom
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews "make install" will put them in $sbindir. [RT #19301]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2568. [bug] Report when the write to indicate a otherwise
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews successful start fails. [RT #19360]
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews2567. [bug] dst__privstruct_writefile() could miss write errors.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 write_public_key() could miss write errors.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-dsfromkey could miss write errors.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2566. [cleanup] Clarify logged message when an insecure DNSSEC
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews response arrives from a zone thought to be secure:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "insecurity proof failed" instead of "not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 insecure". [RT #19400]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2565. [func] Add support for HIP record. Includes new functions
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_rdata_hip_first(), dns_rdata_hip_next()
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews and dns_rdata_hip_current(). [RT #19384]
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews2564. [bug] Only take EDNS fallback steps when processing timeouts.
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to exit. [RT #19359]
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and some new content.
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2559. [bug] dnssec-dsfromkey could compute bad DS records when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reading from a K* files. [RT #19357]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2558. [func] Set the ownership of missing directories created
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for pid-file if -u has been specified on the command
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews line. [RT #19328]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2557. [cleanup] PCI compliance:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 * new libisc log module file
986be654feec852eb9da0d15599f18d0035e569bMark Andrews * isc_dir_chroot() now also changes the working
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 directory to "/".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 * additional INSISTs
c26c65b7a0d036e78bfc73f3e7e0817adb0365c0Mark Andrews * additional logging when files can't be removed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews error checks in the correct order resulting in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 wrong error code sometimes being returned. [RT #19249]
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews2555. [func] dig: when emitting a hex dump also display the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 corresponding characters. [RT #19258]
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fail. [RT #19297]
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honoured.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2551. [bug] Potential Reference leak on return. [RT #19341]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2549. [port] linux: define NR_OPEN if not currently defined.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2548. [bug] Install iterated_hash.h. [RT #19335]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2547. [bug] openssl_link.c:mem_realloc() could reference an
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews out-of-range area of the source buffer. New public
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 function isc_mem_reallocate() was introduced to address
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 this bug. [RT #19313]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2546. [func] Add --enable-openssl-hash configure flag to use
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews OpenSSL (in place of internal routine) for hash
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 functions (MD5, SHA[12] and HMAC). [RT #18815]
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for SRV RDATA too. [RT #19304]
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington2542. [doc] Update the description of dig +adflag. [RT #19290]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2541. [bug] Conditionally update dispatch manager statistics.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
cde7dfea4c1267a2b526114f4ea80fe9db1fc557Brian Wellington2539. [security] Update the interaction between recursion, allow-query,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-query-cache and allow-recursion. [RT #19198]
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington2538. [bug] cache/ADB memory could grow over max-cache-size,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 especially with threads and smaller max-cache-size
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 values. [RT #19240]
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington2537. [func] Added more statistics counters including those on socket
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 I/O events and query RTT histograms. [RT #18802]
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington2536. [cleanup] Silence some warnings when -Werror=format-security is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified. [RT #19083]
683f10428e292811317df38fa324f242abbf7384Mark Andrews2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2534. [func] Check NAPTR records regular expressions and
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews replacement strings to ensure they are syntactically
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 valid and consistant. [RT #18168]
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews2533. [doc] ARM: document @ (at-sign). [RT #17144]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2532. [bug] dig: check the question section of the response to
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews see if it matches the asked question. [RT #18495]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2531. [bug] Change #2207 was incomplete. [RT #19098]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2530. [bug] named failed to reject insecure to secure transitions
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 via UPDATE. [RT #19101]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2529. [cleanup] Upgrade libtool to silence complaints from recent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 version of autoconf. [RT #18657]
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington2528. [cleanup] Silence spurious configure warning about
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --datarootdir [RT #19096]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2527. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2526. [func] New named option "attach-cache" that allows multiple
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews views to share a single cache to save memory and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 improve lookup efficiency. Based on contributed code
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from Barclay Osborn, Google. [RT #18905]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2525. [func] New logging category "query-errors" to provide detailed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 internal information about query failures, especially
49f62849e5f80add0ee36b0f9b42cdce8de9748aMark Andrews about server failures. [RT #19027]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews2523. [bug] Random type rdata freed by dns_nsec_typepresent().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2520. [bug] Update xml statistics version number to 2.0 as change
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews #2388 made the schema incompatible to the previous
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 version. [RT #19080]
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews2519. [bug] dig/host with -4 or -6 didn't work if more than two
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 nameserver addresses of the excluded address family
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 preceded in resolv.conf. [RT #19081]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2518. [func] Add support for the new CERT types from RFC 4398.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2517. [bug] dig +trace with -4 or -6 failed when it chose a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 nameserver address of the excluded address type.
77467267d97c781f3f3d050e229a874831e59c3dMark Andrews2516. [bug] glue sort for responses was performed even when not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 needed. [RT #19039]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews a nameserver of the excluded address family.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2513. [bug] Fix windows cli build. [RT #19062]
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews2512. [func] Print a summary of the cached records which make up
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the negative response. [RT #18885]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2509. [bug] Specifying a fixed query source port was broken.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2508. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2507. [func] Log the recursion quota values when killing the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 oldest query or refusing to recurse due to quota.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2506. [port] solaris: Check at configure time if
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson hack_shutup_pthreadonceinit is needed. [RT #19037]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2505. [port] Treat amd64 similarly to x86_64 when determining
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 atomic operation support. [RT #19031]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2504. [bug] Address race condition in the socket code. [RT #18899]
111e3433d289e8b4ea1260add39baa78c2a46891Mark Andrews2503. [port] linux: improve compatibility with Linux Standard
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Base. [RT #18793]
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews2502. [cleanup] isc_radix: Improve compliance with coding style,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 document function in <isc/radix.h>. [RT #18534]
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews2501. [func] $GENERATE now supports all rdata types. Multi-field
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rdata types need to be quoted. See the ARM for
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson details. [RT #18368]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 function. [RT #18582]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson --- 9.6.0rc1 released ---
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews2498. [bug] Removed a bogus function argument used with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ISC_SOCKET_USE_POLLWATCH: it could cause compiler
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews warning or crash named with the debug 1 level
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of logging. [RT #18917]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2496. [bug] Add sanity length checks to NSID option. [RT #18813]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 installed. [RT #18826]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2493. [bug] The linux capabilities code was not correctly cleaning
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 up after itself. [RT #18767]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2492. [func] Rndc status now reports the number of cpus discovered
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and the number of worker threads when running
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington multi-threaded. [RT #18273]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2491. [func] Attempt to re-use a local port if we are already using
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington the port. [RT #18548]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
b541c10d0442d9804d94567a97956cec3bd2912dBrian Wellington is cleared when IPV6_V6ONLY is set. [RT #18785]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2489. [port] solaris: Workaround Solaris's kernel bug about
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson Define ISC_SOCKET_USE_POLLWATCH at build time to enable
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 this workaround. [RT #18870]
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from keyset and .key files. [RT #18694]
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews2487. [bug] Give TCP connections longer to complete. [RT #18675]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2486. [func] The default locations for named.pid and lwresd.pid
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 This allows the owner of the containing directory
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson to be set, for "named -u" support, and allows there
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to be a permanent symbolic link in the path, for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "named -t" support. [RT #18306]
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews2485. [bug] Change update's the handling of obscured RRSIG
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 records. Not all orphaned DS records were being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 removed. [RT #18828]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2484. [bug] It was possible to trigger a REQUIRE failure when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 adding NSEC3 proofs to the response in
eb2c518a3871932e86268e7c6ddae2b2a00d72fdMark Andrews query_addwildcardproof(). [RT #18828]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2483. [port] win32: chroot() is not supported. [RT #18805]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2482. [port] libxml2: support versions 2.7.* in addition
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson to 2.6.*. [RT #18806]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.6.0b1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 collisions. [RT #18812]
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson2480. [bug] named could fail to emit all the required NSEC3
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 records. [RT #18812]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2478. [bug] 'addresses' could be used uninitialized in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 configure_forward(). [RT #18800]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2477. [bug] dig: the global option to print the command line is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 +cmd not print_cmd. Update the output to reflect
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson this. [RT #17008]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2476. [doc] ARM: improve documentation for max-journal-size and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ixfr-from-differences. [RT #15909] [RT #18541]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2475. [bug] LRU cache cleanup under overmem condition could purge
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 particular entries more aggressively. [RT #17628]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2474. [bug] ACL structures could be allocated with insufficient
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 space, causing an array overrun. [RT #18765]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2473. [port] linux: raise the limit on open files to the possible
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson maximum value before spawning threads; 'files'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified in named.conf doesn't seem to work with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 threads as expected. [RT #18784]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2472. [port] linux: check the number of available cpu's before
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 calling chroot as it depends on "/proc". [RT #16923]
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews2471. [bug] named-checkzone was not reporting missing mandatory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 glue when sibling checks were disabled. [RT #18768]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2470. [bug] Elements of the isc_radix_node_t could be incorrectly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 overwritten. [RT# 18719]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2469. [port] solaris: Work around Solaris's select() limitations.
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson2468. [bug] Resolver could try unreachable servers multiple times.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2465. [bug] Adb's handling of lame addresses was different
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews for IPv4 and IPv6. [RT #18738]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2464. [port] linux: check that a capability is present before
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 trying to set it. [RT #18135]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 API and glibc hides parts of the IPv6 Advanced Socket
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson API as a result. This is stupid as it breaks how the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 two halves (Basic and Advanced) of the IPv6 Socket API
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews were designed to be used but we have to live with it.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 API. [RT #18388]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2462. [doc] Document -m (enable memory usage debugging)
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson option for dig. [RT #18757]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2461. [port] sunos: Change #2363 was not complete. [RT #17513]
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews --- 9.6.0a1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2458. [doc] ARM: update and correction for max-cache-size.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2457. [tuning] max-cache-size is reverted to 0, the previous
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 default. It should be safe because expired cache
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 entries are also purged. [RT #18684]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 address, regardless of family. They now correctly
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews distinguish IPv4 from IPv6. [RT #18559]
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson2455. [bug] Stop metadata being transferred via axfr/ixfr.
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews2453. [bug] Remove NULL pointer dereference in dns_journal_print().
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews2452. [func] Improve bin/test/journalprint. [RT #18316]
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews2451. [port] solaris: handle runtime linking better. [RT #18356]
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews2450. [doc] Fix lwresd docbook problem for manual page.
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews2449. [placeholder]
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews2448. [func] Add NSEC3 support. [RT #15452]
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews2447. [cleanup] libbind has been split out as a separate product.
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews2446. [func] Add a new log message about build options on startup.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 A new command-line option '-V' for named is also
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 provided to show this information. [RT# 18645]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews2445. [doc] ARM out-of-date on empty reverse zones (list includes
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RFC1918 address, but these are not yet compiled in).
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (clear DF) for UDP responses and requests.
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews2443. [bug] win32: UDP connect() would not generate an event,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and so connected UDP sockets would never clean up.
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews Fix this by doing an immediate WSAConnect() rather
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 than an io completion port type for UDP.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2442. [bug] A lock could be destroyed twice. [RT# 18626]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2441. [bug] isc_radix_insert() could copy radix tree nodes
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews incompletely. [RT #18573]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2440. [bug] named-checkconf used an incorrect test to determine
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews if an ACL was set to none.
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2438. [bug] Timeouts could be logged incorrectly under win32.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2437. [bug] Sockets could be closed too early, leading to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 inconsistent states in the socket module. [RT #18298]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2435. [bug] Fixed an ACL memory leak affecting win32.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2434. [bug] Fixed a minor error-reporting bug in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2433. [tuning] Set initial timeout to 800ms.
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson2432. [bug] More Windows socket handling improvements. Stop
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 using I/O events and use IO Completion Ports
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 throughout. Rewrite the receive path logic to make
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 it easier to support multiple simultaneous
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson requesters in the future. Add stricter consistency
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 checking as a compile-time option (define
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2430. [bug] win32: isc_interval_set() could round down to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zero if the input was less than NS_INTERVAL
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews nanoseconds. Round up instead. [RT #18549]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2429. [doc] nsupdate should be in section 1 of the man pages.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2428. [bug] dns_iptable_merge() mishandled merges of negative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 tables. [RT #18409]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews was set. [RT #18528]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2426. [bug] libbind: inet_net_pton() can sometimes return the
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson wrong value if excessively large net masks are
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 supplied. [RT #18512]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson2425. [bug] named didn't detect unavailable query source addresses
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 at load time. [RT #18536]
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews2424. [port] configure now probes for a working epoll
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 implementation. Allow the use of kqueue,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 epoll and /dev/poll to be selected at compile
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson time. [RT #18277]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2423. [security] Randomize server selection on queries, so as to
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson make forgery a little more difficult. Instead of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 always preferring the server with the lowest RTT,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 pick a server with RTT within the same 128
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews millisecond band. [RT #18441]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2422. [bug] Handle the special return value of a empty node as
b19619260fbd447b0fe3e709b2cc8ae38f27ec3fMark Andrews if it was a NXRRSET in the validator. [RT #18447]
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson2421. [func] Add new command line option '-S' for named to specify
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the max number of sockets. [RT #18493]
1255d388f034dc556d235a002527101781dbeb29Mark Andrews Use caution: this option may not work for some
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 operating systems without rebuilding named.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2420. [bug] Windows socket handling cleanup. Let the io
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 completion event send out canceled read/write
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews done events, which keeps us from writing to memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 we no longer have ownership of. Add debugging
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 socket_log() function. Rework TCP socket handling
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews to not leak sockets.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews should not be used for isc_sockettype_fdwatch sockets.
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2417. [bug] Connecting UDP sockets for outgoing queries could
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson unexpectedly fail with an 'address already in use'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 error. [RT #18411]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2416. [func] Log file descriptors that cause exceeding the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 internal maximum. [RT #18460]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2415. [bug] 'rndc dumpdb' could trigger various assertion failures
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2414. [bug] A masterdump context held the database lock too long,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causing various troubles such as dead lock and
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews recursive lock acquisition. [RT #18311, #18456]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2412. [bug] win32: address a resource leak. [RT #18374]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 at compilation time. [RT #18433]
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson Note: with changes #2469 and #2421 above, there is no
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews2410. [bug] Correctly delete m_versionInfo. [RT #18432]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2409. [bug] Only log that we disabled EDNS processing if we were
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson subsequently successful. [RT #18029]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2408. [bug] A duplicate TCP dispatch event could be sent, which
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews could then trigger an assertion failure in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 resquery_response(). [RT #18275]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2406. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2405. [cleanup] The default value for dnssec-validation was changed to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "yes" in 9.5.0-P1 and all subsequent releases; this
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson was inadvertently omitted from CHANGES at the time.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2404. [port] hpux: files unlimited support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2403. [bug] TSIG context leak. [RT #18341]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2402. [port] Support Solaris 2.11 and over. [RT #18362]
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson2401. [bug] Expect to get E[MN]FILE errno internal_accept()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (from accept() or fcntl() system calls). [RT #18358]
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2399. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2398. [bug] Improve file descriptor management. New,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 temporary, named.conf option reserved-sockets,
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews default 512. [RT #18344]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2397. [bug] gssapi_functions had too many elements. [RT #18355]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2396. [bug] Don't set SO_REUSEADDR for randomized ports.
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson2395. [port] Avoid warning and no effect from "files unlimited"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 on Linux when running as root. [RT #18335]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2394. [bug] Default configuration options set the limit for
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson open files to 'unlimited' as described in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 documentation. [RT #18331]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson2393. [bug] nested acls containing keys could trigger an
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 assertion in acl.c. [RT #18166]
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson2392. [bug] remove 'grep -q' from acl test script, some platforms
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 don't support it. [RT #18253]
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson2391. [port] hpux: cover additional recvmsg() error codes.
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson2390. [bug] dispatch.c could make a false warning on 'odd socket'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2389. [bug] Move the "working directory writable" check to after
3fc4c1434d7ac377c720640e2e925a3af567cccbMark Andrews the ns_os_changeuser() call. [RT #18326]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2388. [bug] Avoid using tables for layout purposes in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 statistics XSL [RT #18159].
0aba41458d345ea901cf945d47162e5f23647de9Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 [RT #18147] [RT #18258]
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews2386. [func] Add warning about too small 'open files' limit.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2385. [bug] A condition variable in socket.c could leak in
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews rare error handling [RT #17968].
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2384. [security] Fully randomize UDP query ports to improve
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews forgery resilience. [RT #17949, #18098]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2383. [bug] named could double queries when they resulted in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 SERVFAIL due to overkilling EDNS0 failure detection.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2381. [port] dlz/mysql: support multiple install layouts for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 mysql. <prefix>/include/{,mysql/}mysql.h and
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson <prefix>/lib/{,mysql/}. [RT #18152]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 proofs which, in turn, caused validation failures
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson for insecure zones immediately below a secure zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the server was authoritative for. [RT #18112]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson TLDs and supported RRs with TTLs [RT #17972]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2376. [bug] Change #2144 was not complete.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2375. [placeholder]
40dd9cb8cc240c33d820fe79f176ed51e4c06a1aMark Andrews2374. [bug] "blackhole" ACLs could cause named to segfault due
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to some uninitialized memory. [RT #18095]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2373. [bug] Default values of zone ACLs were re-parsed each time a
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews new zone was configured, causing an overconsumption
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of memory. [RT #18092]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson2371. [doc] Add +nsid option to dig man page. [RT #18039]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2370. [bug] "rndc freeze" could trigger an assertion in named
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when called on a nonexistent zone. [RT #18050]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2369. [bug] libbind: Array bounds overrun on read in bitncmp().
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson2368. [port] Linux: use libcap for capability management if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 possible. [RT# 18026]
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson2367. [bug] Improve counting of dns_resstatscounter_retry
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington2366. [bug] Adb shutdown race. [RT #18021]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2365. [bug] Fix a bug that caused dns_acl_isany() to return
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson spurious results. [RT #18000]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2364. [bug] named could trigger a assertion when serving a
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson malformed signed zone. [RT #17828]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2362. [cleanup] Make "rrset-order fixed" a compile-time option.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 settable by "./configure --enable-fixed-rrset".
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson Disabled by default. [RT #17977]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2361. [bug] "recursion" statistics counter could be counted
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 multiple times for a single query. [RT #17990]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2360. [bug] Fix a condition where we release a database version
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson (which may acquire a lock) while holding the lock.
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson2359. [bug] Fix NSID bug. [RT #17942]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2358. [doc] Update host's default query description. [RT #17934]
0bd1b2fbfed4aa489e9d5fcbc7f48acb96ba7248Mark Andrews2357. [port] Don't use OpenSSL's engine support in versions before
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 OpenSSL 0.9.7f. [RT #17922]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2356. [bug] Built in mutex profiler was not scalable enough.
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson2355. [func] Extend the number statistics counters available.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2354. [bug] Failed to initialize some rdatasetheader_t elements.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2353. [func] Add support for Name Server ID (RFC 5001).
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson 'dig +nsid' requests NSID from server.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'request-nsid yes;' causes recursive server to send
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington NSID requests to upstream servers. Server responds
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to NSID requests with the string configured by
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews 'server-id' option. [RT #17091]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2352. [bug] Various GSS_API fixups. [RT #17729]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2350. [port] win32: IPv6 support. [RT #17797]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2349. [func] Provide incremental re-signing support for secure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dynamic zones. [RT #1091]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Documentation is in the new README.pkcs11 file.
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews New tool, dnssec-keyfromlabel, which takes the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 label of a key pair in a HSM and constructs a DNS
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key pair for use by named and dnssec-signzone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2347. [bug] Delete now traverses the RB tree in the canonical
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews order. [RT #17451]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2346. [func] Memory statistics now cover all active memory contexts
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews in increased detail. [RT #17580]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2345. [bug] named-checkconf failed to detect when forwarders
56d69016f4fae2eda4d39c92fe13595251aaadd3Mark Andrews were set at both the options/view level and in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a root zone. [RT #17671]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2344. [bug] Improve "logging{ file ...; };" documentation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2343. [bug] (Seemingly) duplicate IPv6 entries could be
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews created in ADB. [RT #17837]
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson2341. [bug] libbind: add missing -I../include for off source
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 tree builds. [RT #17606]
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson2340. [port] openbsd: interface configuration. [RT #17700]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson2339. [port] tru64: support for libbind. [RT #17589]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2338. [bug] check_ds() could be called with a non DS rdataset.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews2336. [func] If "named -6" is specified then listen on all IPv6
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 interfaces if there are not listen-on-v6 clauses in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2335. [port] sunos: libbind and *printf() support for long long.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 bug in fromstruct_txt(). [RT #17609]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2333. [bug] Fix off by one error in isc_time_nowplusinterval().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2332. [contrib] query-loc-0.4.0. [RT #17602]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2331. [bug] Failure to regenerate any signatures was not being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reported nor being past back to the UPDATE client.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2330. [bug] Remove potential race condition when handling
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington over memory events. [RT #17572]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 WARNING: API CHANGE: over memory callback
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson function now needs to call isc_mem_waterack().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 See <isc/mem.h> for details.
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews2329. [bug] Clearer help text for dig's '-x' and '-i' options.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2327. [bug] It was possible to dereference a NULL pointer in
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews rbtdb.c. Implement dead node processing in zones as
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 we do for caches. [RT #17312]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2326. [bug] It was possible to trigger a INSIST in the acache
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2325. [port] Linux: use capset() function if available. [RT #17557]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2323. [port] tru64: namespace clash. [RT #17547]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2322. [port] MacOS: work around the limitation of setrlimit()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for RLIMIT_NOFILE. [RT #17526]
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews2321. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2320. [func] Make statistics counters thread-safe for platforms
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews that support certain atomic operations. [RT #17466]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson2319. [bug] Silence Coverity warnings in
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson2318. [port] sunos fixes for libbind. [RT #17514]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2315. [bug] Used incorrect address family for mapped IPv4
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 addresses in acl.c. [RT #17519]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2314. [bug] Uninitialized memory use on error path in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2313. [cleanup] Silence Coverity warnings. Handle private stacks.
89555ff443c8127a533f6c742316c9b1a713cfd5Mark Andrews [RT #17447] [RT #17478]
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2311. [bug] IPv6 addresses could match IPv4 ACL entries and
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews vice versa. [RT #17462]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2310. [bug] dig, host, nslookup: flush stdout before emitting
330b421487d7c3a5e699472fe889aa633772057fMark Andrews debug/fatal messages. [RT #17501]
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2306. [bug] Remove potential race from lib/dns/resolver.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2305. [security] inet_network() buffer overflow. CVE-2008-0122.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2304. [bug] Check returns from all dns_rdata_tostruct() calls.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2301. [bug] Remove resource leak and fix error messages in
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson bin/tests/system/lwresd/lwtest.c. [RT #17474]
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews2300. [bug] Fixed failure to close open file in
4e400cb7a2edd25af98ebc25fcbb5b36ca08f9a0Mark Andrews2299. [bug] Remove unnecessary NULL check in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2298. [bug] isc_mutex_lock() failure not caught in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2297. [bug] isc_entropy_createfilesource() failure not caught in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2296. [port] Allow docbook stylesheet location to be specified to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 configure. [RT #17457]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2294. [func] Allow the experimental statistics channels to have
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 multiple connections and ACL.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note: the stats-server and stats-server-v6 options
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson available in the previous beta releases are replaced
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with the generic statistics-channels statement.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2293. [func] Add ACL regression test. [RT #17375]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2292. [bug] Log if the working directory is not writable.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure to set PR_SET_DUMPABLE. [RT #17312]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2290. [bug] Let AD in the query signal that the client wants AD
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson set in the response. [RT #17301]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2289. [func] named-checkzone now reports the out-of-zone CNAME
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington found. [RT #17309]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2288. [port] win32: mark service as running when we have finished
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 loading. [RT #17441]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson2286. [func] Allow a TCP connection to be used as a weak
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 authentication method for reverse zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 New update-policy methods tcp-self and 6to4-self.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2285. [func] Test framework for client memory context management.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2284. [bug] Memory leak in UPDATE prerequisite processing.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2283. [bug] TSIG keys were not attaching to the memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 context. TSIG keys should use the rings
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews memory context rather than the clients memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 context. [RT #17377]
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2281. [bug] Attempts to use undefined acls were not being logged.
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson2280. [func] Allow the experimental http server to be reached
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 over IPv6 as well as IPv4. [RT #17332]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to protect applications from receiving spurious
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 SIGPIPE signals when using the resolver.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2278. [bug] win32: handle the case where Windows returns no
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson search list or DNS suffix. [RT #17354]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2277. [bug] Empty zone names were not correctly being caught at
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews in the post parse checks. [RT #17357]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2275. [func] Add support to dig to perform IXFR queries over UDP.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2274. [func] Log zone transfer statistics. [RT #17336]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2273. [bug] Adjust log level to WARNING when saving inconsistent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 stub/slave master and journal files. [RT# 17279]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2271. [bug] Fix a memory leak in http server code [RT #17100]
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington2270. [bug] dns_db_closeversion() version->writer could be reset
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 before it is tested. [RT #17290]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0b1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2267. [bug] Radix tree node_num value could be set incorrectly,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causing positive ACL matches to look like negative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ones. [RT #17311]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2266. [bug] client.c:get_clientmctx() returned the same mctx
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson once the pool of mctx's was filled. [RT #17218]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2265. [bug] Test that the memory context's basic_table is non NULL
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley before freeing. [RT #17265]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2264. [bug] Server prefix length was being ignored. [RT #17308]
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington2263. [bug] "named-checkconf -z" failed to set default value
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for "check-integrity". [RT #17306]
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington2262. [bug] Error status from all but the last view could be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 lost. [RT #17292]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2260. [bug] Reported wrong clients-per-query when increasing the
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson value. [RT #17236]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2259. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a7 released ---
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
debff476ad3512687a354499c25d2793e2009acdBrian Wellington2257. [bug] win32: Use the full path to vcredist_x86.exe when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 calling it. [RT #17222]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2256. [bug] win32: Correctly register the installation location of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2254. [bug] timer.c:dispatch() failed to lock timer->lock
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington when reading timer->idle allowing it to see
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 intermediate values as timer->idle was reset by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 isc_timer_touch(). [RT #17243]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2253. [func] "max-cache-size" defaults to 32M.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "max-acache-size" defaults to 16M.
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson2252. [bug] Fixed errors in sortlist code [RT #17216]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2251. [placeholder]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson2250. [func] New flag 'memstatistics' to state whether the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory statistics file should be written or not.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Additionally named's -m option will cause the
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson statistics file to be written. [RT #17113]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2249. [bug] Only set Authentic Data bit if client requested
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNSSEC, per RFC 3655 [RT #17175]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2247. [doc] Sort doc/misc/options. [RT #17067]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2246. [bug] Make the startup of test servers (ans.pl) more
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 robust. [RT #17147]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2245. [bug] Validating lack of DS records at trust anchors wasn't
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence working. [RT #17151]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence2244. [func] Allow the check of nameserver names against the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 SOA MNAME field to be disabled by specifying
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'notify-to-soa yes;'. [RT #17073]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2243. [func] Configuration files without a newline at the end now
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence parse without error. [RT #17120]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 library could require a source of random data.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a number of INSIST()s into plain fatal() errors
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington which report the triggering result code.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 The 'key' command wasn't disabling GSS-TSIG.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
ef8d97818f0d30a4e09db97af695f504b311372cMark Andrews2238. [bug] It was possible to trigger a REQUIRE when a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 validation was canceled. [RT #17106]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2236. [bug] dnssec-signzone failed to preserve the case of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of wildcard owner names. [RT #17085]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2233. [func] Add support for O(1) ACL processing, based on
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson radix tree code originally written by Kevin
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Brintnall. [RT #16288]
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence2232. [bug] dns_adb_findaddrinfo() could fail and return
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ISC_R_SUCCESS. [RT #17137]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2230. [bug] We could INSIST reading a corrupted journal.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2229. [bug] Null pointer dereference on query pool creation
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence failure. [RT #17133]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2228. [contrib] contrib: Change 2188 was incomplete.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2227. [cleanup] Tidied up the FAQ. [RT #17121]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2226. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2225. [bug] More support for systems with no IPv4 addresses.
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson2224. [bug] Defer journal compaction if a xfrin is in progress.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2223. [bug] Make a new journal when compacting. [RT #17119]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2222. [func] named-checkconf now checks server key references.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2221. [bug] Set the event result code to reflect the actual
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 record turned to caller when a cache update is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rejected due to a more credible answer existing.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2220. [bug] win32: Address a race condition in final shutdown of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the Windows socket code. [RT #17028]
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington2219. [bug] Apply zone consistency checks to additions, not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 removals, when updating. [RT #17049]
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2217. [func] Adjust update log levels. [RT #17092]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2216. [cleanup] Fix a number of errors reported by Coverity.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2214. [bug] Deregister OpenSSL lock callback when cleaning
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews up. Reorder OpenSSL cleanup so that RAND_cleanup()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is called before the locks are destroyed. [RT #17098]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2213. [bug] SIG0 diagnostic failure messages were looking at the
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews wrong status code. [RT #17101]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2212. [func] 'host -m' now causes memory statistics and active
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory to be printed at exit. [RT 17028]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2211. [func] Update "dynamic update temporarily disabled" message.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2210. [bug] Deleting class specific records via UPDATE could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fail. [RT #17074]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2209. [port] osx: linking against user supplied static OpenSSL
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews libraries failed as the system ones were still being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 found. [RT #17078]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2208. [port] win32: make sure both build methods produce the
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews same output. [RT #17058]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ai_canonname correctly. [RT #17061]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a6 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2206. [security] "allow-query-cache" and "allow-recursion" now
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews cross inherit from each other.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews If allow-query-cache is not set in named.conf then
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-recursion is used if set, otherwise allow-query
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson is used if set, otherwise the default (localnets;
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 localhost;) is used.
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson If allow-recursion is not set in named.conf then
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-query-cache is used if set, otherwise allow-query
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is used if set, otherwise the default (localnets;
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 localhost;) is used.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2204. [bug] "rndc flushanme name unknown-view" caused named
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to crash. [RT #16984]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2203. [security] Query id generation was cryptographically weak.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2202. [security] The default acls for allow-query-cache and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-recursion were not being applied. [RT #16960]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2201. [bug] The build failed in a separate object directory.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2200. [bug] The search for cached NSEC records was stopping to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 early leading to excessive DLV queries. [RT #16930]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2199. [bug] win32: don't call WSAStartup() while loading dlls.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2198. [bug] win32: RegCloseKey() could be called when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RegOpenKeyEx() failed. [RT #16911]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2197. [bug] Add INSIST to catch negative responses which are
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not setting the event result code appropriately.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2196. [port] win32: yield processor while waiting for once to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to complete. [RT #16958]
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews2195. [func] dnssec-keygen now defaults to nametype "ZONE"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when generating DNSKEYs. [RT #16954]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2194. [bug] Close journal before calling 'done' in xfrin.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a5 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2193. [port] win32: BINDInstall.exe is now linked statically.
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews2192. [port] win32: use vcredist_x86.exe to install Visual
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Studio's redistributable dlls if building with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Visual Stdio 2005 or later.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2191. [func] named-checkzone now allows dumping to stdout (-).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named-checkconf now has -h for help.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence named-checkzone now has -h for help.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rndc now has -h for help.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Better handling of '-?' for usage summaries.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2190. [func] Make fallback to plain DNS from EDNS due to timeouts
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 more visible. New logging category "edns-disabled".
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2189. [bug] Handle socket() returning EINTR. [RT #15949]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2188. [contrib] queryperf: autoconf changes to make the search for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 libresolv or libbind more robust. [RT #16299]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2187. [bug] query_addds(), query_addwildcardproof() and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 query_addnxrrsetnsec() should take a version
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 argument. [RT #16368]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2186. [port] cygwin: libbind: check for struct sockaddr_storage
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 independently of IPv6. [RT #16482]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2185. [port] sunos: libbind: check for ssize_t, memmove() and
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence memchr(). [RT #16463]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2184. [bug] bind9.xsl.h didn't build out of the source tree.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2183. [bug] dnssec-signzone didn't handle offline private keys
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 well. [RT #16832]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 could return ISC_R_SUCCESS when they ran out of
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence memory. [RT #16365]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2180. [cleanup] Remove bit test from 'compress_test' as they
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 are no longer needed. [RT #16497]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2179. [func] 'rndc command zone' will now find 'zone' if it is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 unique to all the views. [RT #16821]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2178. [bug] 'rndc reload' of a slave or stub zone resulted in
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington a reference leak. [RT #16867]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2177. [bug] Array bounds overrun on read (rcodetext) at
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington debug level 10+. [RT #16798]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2176. [contrib] dbus update to handle race condition during
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 initialization (Bugzilla 235809). [RT #16842]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2175. [bug] win32: windows broadcast condition variable support
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was broken. [RT #16592]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2174. [bug] I/O errors should always be fatal when reading
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 master files. [RT #16825]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2173. [port] win32: When compiling with MSVS 2005 SP1 we also
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a4 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2172. [bug] query_addsoa() was being called with a non zone db.
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson2171. [bug] Handle breaks in DNSSEC trust chains where the parent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 servers are not DS aware (DS queries to the parent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 return a referral to the child).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2170. [func] Add acache processing to test suite. [RT #16711]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2169. [bug] host, nslookup: when reporting NXDOMAIN report the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 given name and not the last name searched for.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2168. [bug] nsupdate: in non-interactive mode treat syntax errors
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as fatal errors. [RT #16785]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2167. [bug] When re-using a automatic zone named failed to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 attach it to the new view. [RT #16786]
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson --- 9.5.0a3 released ---
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington2166. [bug] When running in batch mode, dig could misinterpret
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a server address as a name to be looked up, causing
751aa24c98fea02215cad95a08411af547d70e41Bob Halley unexpected output. [RT #16743]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2165. [func] Allow the destination address of a query to determine
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if we will answer the query or recurse.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-query-on, allow-recursion-on and
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson allow-query-cache-on. [RT #16291]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2164. [bug] The code to determine how named-checkzone /
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson named-compilezone was called failed under windows.
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson2163. [bug] If only one of query-source and query-source-v6
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified a port the query pools code broke (change
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews 2129). [RT #16768]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2162. [func] Allow "rrset-order fixed" to be disabled at compile
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson time. [RT #16665]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2161. [bug] Fix which log messages are emitted for 'rndc flush'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington from getifaddrs(). [RT #16708]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a2 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2159. [bug] Array bounds overrun in acache processing. [RT #16710]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2158. [bug] ns_client_isself() failed to initialize key
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson leading to a REQUIRE failure. [RT #16688]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2157. [func] dns_db_transfernode() created. [RT #16685]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 resolver.c:validated() and resolver.c:cache_name().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Fix a memory leak in rbtdb.c:free_noqname().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Make lookup.c:lookup_find() robust against
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 event leaks. [RT #16685]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence matched in acls by omitting the scope. [RT #16599]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2153. [bug] nsupdate could leak memory. [RT #16691]
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence2152. [cleanup] Use sizeof(buf) instead of fixed number in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dighost.c:get_trusted_key(). [RT #16678]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2151. [bug] Missing newline in usage message for journalprint.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2150. [bug] 'rrset-order cyclic' uniformly distribute the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 starting point for the first response for a given
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RRset. [RT #16655]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2149. [bug] isc_mem_checkdestroyed() failed to abort on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if there were still active memory contexts.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2148. [func] Add positive logging for rndc commands. [RT #14623]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2147. [bug] libbind: remove potential buffer overflow from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington SO_BSDCOMPAT" message. [RT #16641]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2145. [bug] Check DS/DLV digest lengths for known digests.
2b7a77a68e27fc7991a857d403cb34b2ae90fc0bMark Andrews2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2143. [bug] We failed to restart the IPv6 client when the
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson kernel failed to return the destination the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 packet was sent to. [RT #16613]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2142. [bug] Handle master files with a modification time that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 matches the epoch. [RT# 16612]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 equivalent of LDH checks). [RT #16609]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2140. [bug] libbind: missing unlock on pthread_key_create()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failures. [RT #16654]
55ddb88e53838693370c213930beda1652b8a583Brian Wellington2139. [bug] dns_view_find() was being called with wrong type
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in adb.c. [RT #16670]
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington2138. [bug] Lock order reversal in resolver.c. [RT #16653]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2137. [port] Mips little endian and/or mips 64 bit are now
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington supported for atomic operations. [RT#16648]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2136. [bug] nslookup/host looped if there was no search list
70d08aea0a693c6ca62c2f7bb33bfddf9e427601Brian Wellington and the host didn't exist. [RT #16657]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2134. [func] Additional statistics support. [RT #16666]
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington2133. [port] powerpc: Support both IBM and MacOS Power PC
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 assembler syntaxes. [RT #16647]
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence2132. [bug] Missing unlock on out of memory in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_dispatchmgr_setudp().
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2130. [func] Log if CD or DO were set. [RT #16640]
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington2129. [func] Provide a pool of UDP sockets for queries to be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 made over. See use-queryport-pool, queryport-pool-ports
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington and queryport-pool-updateinterval. [RT #16415]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2126. [security] Serialize validation of type ANY responses. [RT #16555]
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was defined. [RT #16574]
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson2124. [security] It was possible to dereference a freed fetch
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 context. [RT #16584]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a1 released ---
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson2123. [func] Use Doxygen to generate internal documentation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2122. [func] Experimental http server and statistics support
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington for named via xml.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 second timeout. [RT #16553]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2120. [doc] Fix markup on nsupdate man page. [RT #16556]
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington2119. [compat] libbind: allow res_init() to succeed enough to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 return the default domain even if it was unable
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to allocate memory.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2118. [bug] Handle response with long chains of domain name
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 compression pointers which point to other compression
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson pointers. [RT #16427]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
b0390aab30438a13f533cccae9389945214b1421Brian Wellington which could lead to validation failures. named didn't
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 handle negative DS responses that were in the process
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of being validated. Check CNAME bit before accepting
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NODATA proof. To be able to ignore a child NSEC there
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington must be SOA (and NS) set in the bitmap. [RT #16399]
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson2116. [bug] 'rndc reload' could cause the cache to continually
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 be cleaned. [RT #16401]
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington2115. [bug] 'rndc reconfig' could trigger a INSIST if the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 number of masters for a zone was reduced. [RT #16444]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2114. [bug] dig/host/nslookup: searches for names with multiple
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson labels were failing. [RT #16447]
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson2113. [bug] nsupdate: if a zone is specified it should be used
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for server discover. [RT# 16455]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2112. [security] Warn if weak RSA exponent is used. [RT #16460]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2111. [bug] Fix a number of errors reported by Coverity.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson priming queries. [RT #16491]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2108. [func] DHCID support. [RT #16456]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2106. [func] 'rndc status' now reports named's version. [RT #16426]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2105. [func] GSS-TSIG support (RFC 3645).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2104. [port] Fix Solaris SMF error message.
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington2103. [port] Add /usr/sfw to list of locations for OpenSSL
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 under Solaris.
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews2102. [port] Silence Solaris 10 warnings.
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley2101. [bug] OpenSSL version checks were not quite right.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2100. [port] win32: copy libeay32.dll to Build\Debug.
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley Copy Debug\named-checkzone to Debug\named-compilezone.
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley2099. [port] win32: more manifest issues.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2098. [bug] Race in rbtdb.c:no_references(), which occasionally
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 triggered an INSIST failure about the node lock
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reference. [RT #16411]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2097. [bug] named could reference a destroyed memory context
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 after being reloaded / reconfigured. [RT #16428]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2096. [bug] libbind: handle applications that fail to detect
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 res_init() failures better.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson net_cidr_ntop_ipv6(). [RT #16388]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2094. [contrib] Update named-bootconf. [RT# 16404]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2093. [bug] named-checkzone -s was broken.
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley2092. [bug] win32: dig, host, nslookup. Use registry config
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if resolv.conf does not exist or no nameservers
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 listed. [RT #15877]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2091. [port] dighost.c: race condition on cleanup. [RT #16417]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2090. [port] win32: Visual C++ 2005 command line manifest support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2089. [security] Raise the minimum safe OpenSSL versions to
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 prior to these have known security flaws which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 are (potentially) exploitable in named. [RT #16391]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2088. [security] Change the default RSA exponent from 3 to 65537.
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson2086. [port] libbind: FreeBSD now has get*by*_r() functions.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2085. [doc] win32: added index.html and README to zip. [RT #16201]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2084. [contrib] dbus update for 9.3.3rc2.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2083. [port] win32: Visual C++ 2005 support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2082. [doc] Document 'cache-file' as a test only option.
df0f58959ed82a2a43ca8d816ce9592541df9f2fMark Andrews2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews2080. [port] libbind: res_init.c did not compile on older versions
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of Solaris. [RT #16363]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2079. [bug] The lame cache was not handling multiple types
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 correctly. [RT #16361]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2078. [bug] dnssec-checkzone output style "default" was badly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named. It is now called "relative". [RT #16326]
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 complete signed zone. [RT #16326]
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington2076. [bug] Several files were missing #include <config.h>
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causing build failures on OSF. [RT #16341]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2075. [bug] The spillat timer event hander could leak memory.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson dns_request_createraw2() and dns_request_createraw3()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failed to send multiple UDP requests. [RT #16349]
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley2073. [bug] Incorrect semantics check for update policy "wildcard".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2072. [bug] We were not generating valid HMAC SHA digests.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2071. [port] Test whether gcc accepts -fno-strict-aliasing.
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington2070. [bug] The remote address was not always displayed when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reporting dispatch failures. [RT #16315]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2069. [bug] Cross compiling was not working. [RT #16330]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2068. [cleanup] Lower incremental tuning message to debug 1.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2067. [bug] 'rndc' could close the socket too early triggering
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a INSIST under Windows. [RT #16317]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2066. [security] Handle SIG queries gracefully. [RT #16300]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2065. [bug] libbind: probe for HPUX prototypes for
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson endprotoent_r() and endservent_r(). [RT 16313]
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews2063. [bug] Change #1955 introduced a bug which caused the first
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'rndc flush' call to not free memory. [RT #16244]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2062. [bug] 'dig +nssearch' was reusing a buffer before it had
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 been returned by the socket code. [RT #16307]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2061. [bug] Accept expired wildcard message reversed. [RT #16296]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2060. [bug] Enabling DLZ support could leave views partially
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley configured. [RT #16295]
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington2059. [bug] Search into cache rbtdb could trigger an INSIST
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure while cleaning up a stale rdataset.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2058. [bug] Adjust how we calculate rtt estimates in the presence
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of authoritative servers that drop EDNS and/or CD
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington requests. Also fallback to EDNS/512 and plain DNS
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 faster for zones with less than 3 servers. [RT #16187]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2057. [bug] Make setting "ra" dependent on both allow-query-cache
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and allow-recursion. [RT #16290]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2056. [bug] dig: ixfr= was not being treated case insensitively
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 at all times. [RT #15955]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2055. [bug] Missing goto after dropping multicast query.
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington2054. [port] freebsd: do not explicitly link against -lpthread.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley2052. [bug] 'rndc' improve connect failed message to report
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the failing address. [RT #15978]
8e68489885e744ab48907414b4199c36858c27ddMark Andrews2051. [port] More strtol() fixes. [RT #16249]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson2050. [bug] Parsing of NSAP records was not case insensitive.
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson2049. [bug] Restore SOA before AXFR when falling back from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a attempted IXFR when transferring in a zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Allow a initial SOA query before attempting
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson a AXFR to be requested. [RT #16156]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2048. [bug] It was possible to loop forever when using
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson avoid-v4-udp-ports / avoid-v6-udp-ports when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the OS always returned the same local port.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2047. [bug] Failed to initialize the interface flags to zero.
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 cleanup [RT #16247].
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson2045. [func] Use lock buckets for acache entries to limit memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 consumption. [RT #16183]
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews2044. [port] Add support for atomic operations for Itanium.
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson2043. [port] nsupdate/nslookup: Force the flushing of the prompt
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for interactive sessions. [RT#16148]
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington2042. [bug] named-checkconf was incorrectly rejecting the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 logging category "config". [RT #16117]
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 set of libraries to be linked. [RT #16129]
a12d9cfa59b5981c52e1aaafedf652d5128f3448Brian Wellington2040. [bug] rbtdb no_references() could trigger an INSIST
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure with --enable-atomic. [RT #16022]
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington2039. [func] Check that all buffers passed to the socket code
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 have been retrieved when the socket event is freed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2038. [bug] dig/nslookup/host was unlinking from wrong list
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when handling errors. [RT #16122]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2037. [func] When unlinking the first or last element in a list
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 check that the list head points to the element to
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson be unlinked. [RT #15959]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2035. [func] Make falling back to TCP on UDP refresh failure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 optional. Default "try-tcp-refresh yes;" for BIND 8
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews compatibility. [RT #16123]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2033. [bug] We weren't creating multiple client memory contexts
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington on demand as expected. [RT #16095]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2031. [bug] Emit a error message when "rndc refresh" is called on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a non slave/stub zone. [RT # 16073]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2030. [bug] We were being overly conservative when disabling
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 openssl engine support. [RT #16030]
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson2029. [bug] host printed out the server multiple times when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified on the command line. [RT #15992]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2028. [port] linux: socket.c compatibility for old systems.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2027. [port] libbind: Solaris x86 support. [RT #16020]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2026. [bug] Rate limit the two recursive client exceeded messages.
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington2025. [func] Update "zone serial unchanged" message. [RT #16026]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2024. [bug] named emitted spurious "zone serial unchanged"
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington messages on reload. [RT #16027]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2023. [bug] "make install" should create ${localstatedir}/run and
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson ${sysconfdir} if they do not exist. [RT #16033]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2022. [bug] If dnssec validation is disabled only assert CD if
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington CD was requested. [RT #16037]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson2019. [tuning] Reduce the amount of work performed per quantum
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when cleaning the cache. [RT #15986]
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews2018. [bug] Checking if the HMAC MD5 private file was broken.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2017. [bug] allow-query default was not correct. [RT #15946]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2016. [bug] Return a partial answer if recursion is not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allowed but requested and we had the answer
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson to the original qname. [RT #15945]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2015. [cleanup] use-additional-cache is now acache-enable for
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington consistency. Default acache-enable off in BIND 9.4
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as it requires memory usage to be configured.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 It may be enabled by default in BIND 9.5 once we
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington have more experience with it.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2014. [func] Statistics about acache now recorded and sent
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews to log. [RT #15976]
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 responses more gracefully. [RT #15941]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2012. [func] Don't insert new acache entries if acache is full.
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews2011. [func] dnssec-signzone can now update the SOA record of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the signed zone, either as an increment or as the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 system time(). [RT #15633]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2010. [placeholder] rt15958
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2009. [bug] libbind: Coverity fixes. [RT #15808]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2008. [func] It is now possible to enable/disable DNSSEC
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington validation from rndc. This is useful for the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 mobile hosts where the current connection point
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 breaks DNSSEC (firewall/proxy). [RT #15592]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rndc validation newstate [view]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2007. [func] It is now possible to explicitly enable DNSSEC
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington validation. default dnssec-validation no; to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 be changed to yes in 9.5.0. [RT #15674]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson2006. [security] Allow-query-cache and allow-recursion now default
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to the built in acls "localnets" and "localhost".
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson This is being done to make caching servers less
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 attractive as reflective amplifying targets for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 spoofed traffic. This still leave authoritative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 servers exposed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 The best fix is for full BCP 38 deployment to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 remove spoofed traffic.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2005. [bug] libbind: Retransmission timeouts should be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 based on which attempt it is to the nameserver
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington and not the nameserver itself. [RT #13548]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2004. [bug] dns_tsig_sign() could pass a NULL pointer to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dst_context_destroy() when cleaning up after a
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington error. [RT #15835]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2003. [bug] libbind: The DNS name/address lookup functions could
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews occasionally follow a random pointer due to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 structures not being completely zeroed. [RT #15806]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington2002. [bug] libbind: tighten the constraints on when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 struct addrinfo._ai_pad exists. [RT #15783]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2001. [func] Check the KSK flag when updating a secure dynamic zone.
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington New zone option "update-check-ksk yes;". [RT #15817]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1999. [func] Implement "rrset-order fixed". [RT #13662]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1998. [bug] Restrict handling of fifos as sockets to just SunOS.
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson This allows named to connect to entropy gathering
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 daemons that use fifos instead of sockets. [RT #15840]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1997. [bug] Named was failing to replace negative cache entries
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson when a positive one for the type was learnt.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1996. [bug] nsupdate: if a zone has been specified it should
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 appear in the output of 'show'. [RT #15797]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1995. [bug] 'host' was reporting multiple "is an alias" messages.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1994. [port] OpenSSL 0.9.8 support. [RT #15694]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1993. [bug] Log messages, via syslog, were missing the space
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington after the timestamp if "print-time yes" was specified.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1992. [bug] Not all incoming zone transfer messages included the
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington view. [RT #15825]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1991. [cleanup] The configuration data, once read, should be treated
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as read only. Expand the use of const to enforce this
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington at compile time. [RT #15813]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1990. [bug] libbind: isc's override of broken gettimeofday()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 implementations was not always effective.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1989. [bug] win32: don't check the service password when
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer re-installing. [RT #15882]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1988. [bug] Remove a bus error from the SHA256/SHA512 support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1986. [func] Report when a zone is removed. [RT #15849]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1985. [protocol] DLV has now been assigned a official type code of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 32769. [RT #15807]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note: care should be taken to ensure you upgrade
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 both named and dnssec-signzone at the same time for
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley zones with DLV records where named is the master
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 server for the zone. Also any zones that contain
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DLV records should be removed when upgrading a slave
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone. You do not however have to upgrade all
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 servers for a zone with DLV records simultaneously.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1984. [func] dig, nslookup and host now advertise a 4096 byte
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 EDNS UDP buffer size by default. [RT #15855]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence1983. [func] Two new update policies. "selfsub" and "selfwild".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1982. [bug] DNSKEY was being accepted on the parent side of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a delegation. KEY is still accepted there for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RFC 3007 validated updates. [RT #15620]
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence1981. [bug] win32: condition.c:wait() could fail to reattain
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the mutex lock.
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence1980. [func] dnssec-signzone: output the SOA record as the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 first record in the signed zone. [RT #15758]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1979. [port] linux: allow named to drop core after changing
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews user ids. [RT #15753]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1978. [port] Handle systems which have a broken recvmsg().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1977. [bug] Silence noisy log message. [RT #15704]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1975. [bug] libbind: isc_gethexstring() could misparse multi-line
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 hex strings with comments. [RT #15814]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1974. [doc] List each of the zone types and associated zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 options separately in the ARM.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 HMACSHA512 support. [RT #13606]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1972. [contrib] DBUS dynamic forwarders integration from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Jason Vas Dias <jvdias@redhat.com>.
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence1971. [port] linux: make detection of missing IF_NAMESIZE more
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 robust. [RT #15443]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1970. [bug] nsupdate: adjust UDP timeout when falling back to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 unsigned SOA query. [RT #15775]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1969. [bug] win32: the socket code was freeing the socket
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 structure too early. [RT #15776]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1966. [bug] Don't set CD when we have fallen back to plain DNS.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1965. [func] Suppress spurious "recursion requested but not
8dc3d2006f679d0a291f7a20612c37e2a7146096Brian Wellington available" warning with 'dig +qr'. [RT #15780].
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1963. [port] Tru64 4.0E doesn't support send() and recv().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1962. [bug] Named failed to clear old update-policy when it
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson was removed. [RT #15491]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1961. [bug] Check the port and address of responses forwarded
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington to dispatch. [RT #15474]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1959. [func] Control the zeroing of the negative response TTL to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a soa query. Defaults "zero-no-soa-ttl yes;" and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "zero-no-soa-ttl-cache no;". [RT #15460]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1958. [bug] Named failed to update the zone's secure state
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 until the zone was reloaded. [RT #15412]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1957. [bug] Dig mishandled responses to class ANY queries.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1956. [bug] Improve cross compile support, 'gen' is now built
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson by native compiler. See README for additional
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 cross compile support information. [RT #15148]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1954. [func] Named now falls back to advertising EDNS with a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 512 byte receive buffer if the initial EDNS queries
f53848e17123569387b279578f0100dca5407da5Mark Andrews fail. [RT #14852]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1953. [func] The maximum EDNS UDP response named will send can
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington now be set in named.conf (max-udp-size). This is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 independent of the advertised receive buffer
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (edns-udp-size). [RT #14852]
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson1952. [port] hpux: tell the linker to build a runtime link
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 path "-Wl,+b:". [RT #14816].
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1951. [security] Drop queries from particular well known ports.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews Don't return FORMERR to queries from particular
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 well known ports. [RT #15636]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a TCP socket. This prevents the source address being
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson set for TCP connections. [RT #15628]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1949. [func] Addition memory leakage checks. [RT #15544]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1948. [bug] If was possible to trigger a REQUIRE failure in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 xfrin.c:maybe_free() if named ran out of memory.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1947. [func] It is now possible to configure named to accept
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson expired RRSIGs. Default "dnssec-accept-expired no;".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Setting "dnssec-accept-expired yes;" leaves named
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 vulnerable to replay attacks. [RT #14685]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1946. [bug] resume_dslookup() could trigger a REQUIRE failure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when using forwarders. [RT #15549]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence To generate a RSAMD5 key you must explicitly request
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RSAMD5. [RT #13780]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1944. [cleanup] isc_hash_create() does not need a read/write lock.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1943. [bug] Set the loadtime after rolling forward the journal.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence1942. [bug] If the name of a DNSKEY match that of one in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 trusted-keys do not attempt to validate the DNSKEY
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 using the parents DS RRset. [RT #15649]
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington1941. [bug] ncache_adderesult() should set eresult even if no
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rdataset is passed to it. [RT #15642]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1940. [bug] Fixed a number of error conditions reported by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1939. [bug] The resolver could dereference a null pointer after
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 validation if all the queries have timed out.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1938. [bug] The validator was not correctly handling unsecure
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson negative responses at or below a SEP. [RT #15528]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson1936. [bug] The validator could leak memory. [RT #15544]
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington1935. [bug] 'acache' was DO sensitive. [RT #15430]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1934. [func] Validate pending NS RRsets, in the authority section,
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer prior to returning them if it can be done without
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 requiring DNSKEYs to be fetched. [RT #15430]
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1931. [bug] Per-client mctx could require a huge amount of memory,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 particularly for a busy caching server. [RT #15519]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1930. [port] HPUX: ia64 support. [RT #15473]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington1927. [bug] Access to soanode or nsnode in rbtdb violated the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 lock order rule and could cause a dead lock.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1926. [bug] The Windows installer did not check for empty
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington passwords. BINDinstall was being installed in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the wrong place. [RT #15483]
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington1925. [port] All outer level AC_TRY_RUNs need cross compiling
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 defaults. [RT #15469]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1924. [port] libbind: hpux ia64 support. [RT #15473]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1923. [bug] ns_client_detach() called too early. [RT #15499]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson1922. [bug] check-tool.c:setup_logging() missing call to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_log_setcontext().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1921. [bug] Client memory contexts were not using internal
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson malloc. [RT# 15434]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1920. [bug] The cache rbtdb lock array was too small to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 have the desired performance characteristics.
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington1919. [contrib] queryperf: a set of new features: collecting/printing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 response delays, printing intermediate results, and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 adjusting query rate for the "target" qps.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1918. [bug] Memory leak when checking acls. [RT #15391]
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when generating man pages. [RT #15385]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1915. [bug] dig +ndots was broken. [RT #15215]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1914. [protocol] DS is required to accept mnemonic algorithms
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (RFC 4034). Still emit numeric algorithms for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 compatibility with RFC 3658. [RT #15354]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1913. [func] Integrate contributed DLZ code into named. [RT #11382]
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews1912. [port] aix: atomic locking for powerpc. [RT #15020]
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson1911. [bug] Update windows socket code. [RT #14965]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1910. [bug] dig's +sigchase code overhauled. [RT #14933]
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson1909. [bug] The DLV code has been re-worked to make no longer
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 query order sensitive. [RT #14933]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1908. [func] dig now warns if 'RA' is not set in the answer when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'RD' was set in the query. host/nslookup skip servers
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson that fail to set 'RA' when 'RD' is set unless a server
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is explicitly set. [RT #15005]
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
59e1a928bc4253b91ead0f7c46be7d3984cb3016Bob Halley1906. [func] dig now has a '-q queryname' and '+showsearch' options.
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson1905. [bug] Strings returned from cfg_obj_asstring() should be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 treated as read-only. The prototype for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 cfg_obj_asstring() has been updated to reflect this.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 friends. Note: RFC 1918 zones are not yet covered by
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews this but are likely to be in a future release.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 New options: empty-server, empty-contact,
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews empty-zones-enable and disable-empty-zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1903. [func] ISC string copy API.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1902. [func] Attempt to make the amount of work performed in a
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson iteration self tuning. The covers nodes clean from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the cache per iteration, nodes written to disk when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rewriting a master file and nodes destroyed per
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington iteration when destroying a zone or a cache.
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson1901. [cleanup] Don't add DNSKEY records to the additional section.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1900. [bug] ixfr-from-differences failed to ensure that the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 serial number increased. [RT #15036]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson1899. [func] named-checkconf now validates update-policy entries.
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ISC_NETADDR_FORMATSIZE to allow for scope details.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1897. [func] x86 and x86_64 now have separate atomic locking
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley implementations.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1896. [bug] Recursive clients soft quota support wasn't working
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley as expected. [RT #15103]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1895. [bug] A escaped character is, potentially, converted to
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson the output character set too early. [RT #14666]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson1894. [doc] Review ARM for BIND 9.4.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1893. [port] Use uintptr_t if available. [RT #14606]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1892. [func] Support for SPF rdata type. [RT #15033]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1891. [port] freebsd: pthread_mutex_init can fail if it runs out
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of memory. [RT #14995]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1890. [func] Raise the UDP receive buffer size to 32k if it is
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson less than 32k. [RT #14953]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1889. [port] sunos: non blocking i/o support. [RT #14951]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson1888. [func] Support for IPSECKEY rdata type. [RT #14967]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence1887. [bug] The cache could delete expired records too fast for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 clients with a virtual time in the past. [RT #14991]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence1886. [bug] fctx_create() could return success even though it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failed. [RT #14993]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1885. [func] dig: report the number of extra bytes still left in
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence the packet after processing all the records.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 levels. [RT #14962]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1882. [func] Limit the number of recursive clients that can be
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington waiting for a single query (<qname,qtype,qclass>) to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 resolve. New options clients-per-query and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 max-clients-per-query.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson1881. [func] Add a system test for named-checkconf. [RT #14931]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1880. [func] The lame cache is now done on a <qname,qclass,qtype>
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 basis as some servers only appear to be lame for
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington certain query types. [RT #14916]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1878. [func] Detect duplicates of UDP queries we are recursing on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and drop them. New stats category "duplicate".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1877. [bug] Fix unreasonably low quantum on call to
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson dns_rbt_destroy2(). Remove unnecessary unhash_node()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 call. [RT #14919]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1876. [func] Additional memory debugging support to track size
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson and mctx arguments. [RT #14814]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1875. [bug] process_dhtkey() was using the wrong memory context
dffdc24ffd76ef3d8c8141671e89fb39428fef06Brian Wellington to free some memory. [RT #14890]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1874. [port] sunos: portability fixes. [RT #14814]
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews1873. [port] win32: isc__errno2result() now reports its caller.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1871. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1870. [func] Added framework for handling multiple EDNS versions.
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson1869. [func] dig can now specify the EDNS version when making
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a query. [RT #14873]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1868. [func] edns-udp-size can now be overridden on a per
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 server basis. [RT #14851]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1867. [bug] It was possible to trigger a INSIST in
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington dlv_validatezonekey(). [RT #14846]
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews1866. [bug] resolv.conf parse errors were being ignored by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews bad addresses. [RT #14841]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1864. [bug] Don't try the alternative transfer source if you
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 got a answer / transfer with the main source
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews address. [RT #14802]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1863. [bug] rrset-order "fixed" error messages not complete.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1862. [func] Add additional zone data constancy checks.
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews named-checkzone has extended checking of NS, MX and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 SRV record and the hosts they reference.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named has extended post zone load checks.
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence New zone options: check-mx and integrity-check.
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence1861. [bug] dig could trigger a INSIST on certain malformed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 responses. [RT #14801]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 incorrectly set. [RT #14775]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews1859. [func] Add support for CH A record. [RT #14695]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1858. [bug] The flush-zones-on-shutdown option wasn't being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 parsed. [RT #14686]
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews1857. [bug] named could trigger a INSIST() if reconfigured /
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reloaded too fast. [RT #14673]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1855. [bug] ixfr-from-differences was failing to detect changes
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of ttl due to dns_diff_subtract() was ignoring the ttl
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of records. [RT #14616]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1854. [bug] lwres also needs to know the print format for
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington (long long). [RT #13754]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1853. [bug] Rework how DLV interacts with proveunsecure().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1852. [cleanup] Remove last vestiges of dnssec-signkey and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-makekeyset (removed from Makefile years ago).
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington1851. [doc] Doxygen comment markup. [RT #11398]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1849. [doc] All forms of the man pages (docbook, man, html) should
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 have consistent copyright dates.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1848. [bug] Improve SMF integration. [RT #13238]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington1847. [bug] isc_ondestroy_init() is called too late in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_rbtdb_create()/dns_rbtdb64_create().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews <bortzmeyer@nic.fr>.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1845. [bug] Improve error reporting to distinguish between
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington accept()/fcntl() and socket()/fcntl() errors.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence for each 16 bit piece of the IPv6 address. The text
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 representation of a IPv6 address has been tightened
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when CFLAGS contains "-I /usr/local/include"
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley resulting in old header files being used.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1842. [port] cmsg_len() could produce incorrect results on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 some platform. [RT #13744]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1841. [bug] "dig +nssearch" now makes a recursive query to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 find the list of nameservers to query. [RT #13694]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley1840. [func] dnssec-signzone can now randomize signature end times
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (dnssec-signzone -j jitter). [RT #13609]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1839. [bug] <isc/hash.h> was not being installed.
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews1838. [cleanup] Don't allow Linux capabilities to be inherited.
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews1837. [bug] Compile time option ISC_FACILITY was not effective
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for 'named -u <user>'. [RT #13714]
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer1836. [cleanup] Silence compiler warnings in hash_test.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1834. [bug] Bad memset in rdata_test.c. [RT #13658]
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews1831. [doc] Update named-checkzone documentation. [RT#13604]
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1829. [bug] win32: "pid-file none;" broken. [RT #13563]
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews1828. [bug] isc_rwlock_init() failed to properly cleanup if it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 encountered a error. [RT #13549]
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews1827. [bug] host: update usage message for '-a'. [RT #37116]
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of memory error. [RT #13537]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1825. [bug] Missing UNLOCK() on out of memory error from in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rbtdb.c:subtractrdataset(). [RT #13519]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1824. [bug] Memory leak on dns_zone_setdbtype() failure.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1823. [bug] Wrong macro used to check for point to point interface.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1822. [bug] check-names test for RT was reversed. [RT #13382]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer1821. [placeholder]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer1820. [bug] Gracefully handle acl loops. [RT #13659]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1819. [bug] The validator needed to check both the algorithm and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 digest types of the DS to determine if it could be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 used to introduce a secure zone. [RT #13593]
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1817. [func] Add support for additional zone file formats for
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson improving loading performance. The masterfile-format
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 option in named.conf can be used to specify a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 non-default format. A separate command
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named-compilezone was provided to generate zone files
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington in the new format. Additionally, the -I and -O options
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for dnssec-signzone specify the input and output
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1815. [bug] nsupdate triggered a REQUIRE if the server was set
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 without also setting the zone and it encountered
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a CNAME and was using TSIG. [RT #13086]
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson1814. [func] UNIX domain controls are now supported.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1813. [func] Restructured the data locking framework using
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson architecture dependent atomic operations (when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 available), improving response performance on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 multi-processor machines significantly.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson x86, x86_64, alpha, powerpc, and mips are currently
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1811. [func] Preserve the case of domain names in rdata during
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington zone transfers. [RT #13547]
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington1810. [bug] configure, lib/bind/configure make different default
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 decisions about whether to do a threaded build.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1809. [bug] "make distclean" failed for libbind if the platform
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is not supported.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1808. [bug] zone.c:notify_zone() contained a race condition,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone->db could change underneath it. [RT #13511]
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson1807. [bug] When forwarding (forward only) set the active domain
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from the forward zone name. [RT #13526]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1806. [bug] The resolver returned the wrong result when a CNAME /
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNAME was encountered when fetching glue from a
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews secure namespace. [RT #13501]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1805. [bug] Pending status was not being cleared when DLV was
e412ae947df6de858883564b8676a9650df70d9aMark Andrews active. [RT #13501]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1804. [bug] Ensure that if we are queried for glue that it fits
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews in the additional section or TC is set to tell the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 client to retry using TCP. [RT #10114]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews1803. [bug] dnssec-signzone sometimes failed to remove old
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RRSIGs. [RT #13483]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1802. [bug] Handle connection resets better. [RT #11280]
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson1801. [func] Report differences between hints and real NS rrset
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and associated address records.
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson1800. [bug] Changes #1719 allowed a INSIST to be triggered.
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson1799. [bug] 'rndc flushname' failed to flush negative cache
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 entries. [RT #13438]
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson1798. [func] The server syntax has been extended to support a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 range of servers. [RT #11132]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1797. [func] named-checkconf now check acls to verify that they
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 only refer to existing acls. [RT #13101]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1795. [bug] "rndc dumpdb" was not fully documented. Minor
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 formating issues with "rndc dumpdb -all". [RT #13396]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1794. [func] Named and named-checkzone can now both check for
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson non-terminal wildcard records.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1793. [func] Extend adjusting TTL warning messages. [RT #13378]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1792. [func] New zone option "notify-delay". Specify a minimum
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson delay between sets of NOTIFY messages.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1791. [bug] 'host -t a' still printed out AAAA and MX records.
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow parallel make to succeed.
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews1789. [bug] Prerequisite test for tkey and dnssec could fail
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with "configure --with-libtool".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1788. [bug] libbind9.la/libbind9.so needs to link against
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews1786. [port] AIX: libt_api needs to be taught to look for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 T_testlist in the main executable (--with-libtool).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1785. [bug] libbind9.la/libbind9.so needs to link against
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer1784. [cleanup] "libtool -allow-undefined" is the default.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Leave hooks in configure to allow it to be set
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if needed in the future.
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1782. [port] OSX: --with-libtool + --enable-libbind broke on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 __evOptMonoTime. [RT #13219]
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer1780. [bug] Update libtool to 1.5.10.
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer IN6ADDR_LOOPBACK_INIT macros.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 IN6ADDR_LOOPBACK_INIT macros.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 IN6ADDR_LOOPBACK_INIT macros.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews1774. [port] Aix: Silence compiler warnings / build failures.
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews1773. [bug] Fast retry on host / net unreachable. [RT #13153]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1772. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1771. [placeholder]
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson1770. [bug] named-checkconf failed to report missing a missing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 file clause for rbt{64} master/hint zones. [RT#13009]
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews1769. [port] win32: change compiler flags /MTd ==> /MDd,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley rdataset. [RT #12907]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 support for (struct in6_pktinfo) failed. [RT #13077]
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer1766. [bug] Update the master file timestamp on successful refresh
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as well as the journal's timestamp. [RT# 13062]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1765. [bug] configure --with-openssl=auto failed. [RT #12937]
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews1764. [bug] dns_zone_replacedb failed to emit a error message
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if there was no SOA record in the replacement db.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1763. [func] Perform sanity checks on NS records which refer to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'in zone' names. [RT #13002]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 even when it failed. [RT #12995]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1760. [bug] Host / net unreachable was not penalising rtt
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 estimates. [RT #12970]
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson1759. [bug] Named failed to startup if the OS supported IPv6
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 but had no IPv6 interfaces configured. [RT #12942]
ba43c53451d5c38765f376eeede457178b36951aBob Halley1758. [func] Don't send notify messages to self. [RT #12933]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1757. [func] host now can turn on memory debugging flags with '-m'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1756. [func] named-checkconf now checks the logging configuration.
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews1755. [func] allow-update is now settable at the options / view
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 level. [RT #6636]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1754. [bug] We weren't always attempting to query the parent
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson server for the DS records at the zone cut.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1753. [bug] Don't serve a slave zone which has no NS records.
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson1752. [port] Move isc_app_start() to after ns_os_daemonise()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as some fork() implementations unblock the signals
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 that are blocked by isc_app_start(). [RT #12810]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1749. [bug] 'check-names response ignore;' failed to ignore.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1748. [func] dig now returns the byte count for axfr/ixfr.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1747. [bug] BIND 8 compatibility: named/named-checkconf failed
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff to parse "host-statistics-max" in named.conf.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1746. [func] Make public the function to read a key file,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dst_key_read_public(). [RT #12450]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1745. [bug] Dig/host/nslookup accept replies from link locals
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 regardless of scope if no scope was specified when
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff query was sent. [RT #12745]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1744. [bug] If tuple2msgname() failed to convert a tuple to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a name a REQUIRE could be triggered. [RT #12796]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1743. [bug] If isc_taskmgr_create() was not able to create the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 requested number of worker threads then destruction
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of the manager would trigger an INSIST() failure.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1742. [bug] Deleting all records at a node then adding a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 previously existing record, in a single UPDATE
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 transaction, failed to leave / regenerate the
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington associated RRSIG records. [RT #12788]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1741. [bug] Deleting all records at a node in a secure zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 using a update-policy grant failed. [RT #12787]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1740. [bug] Replace rbt's hash algorithm as it performed badly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with certain zones. [RT #12729]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NOTE: a hash context now needs to be established
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 via isc_hash_create() if the application was not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 already doing this.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1739. [bug] dns_rbt_deletetree() could incorrectly return
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ISC_R_QUOTA. [RT #12695]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1738. [bug] Enable overrun checking by default. [RT #12695]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1737. [bug] named failed if more than 16 masters were specified.
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff1736. [bug] dst_key_fromnamedfile() could fail to read a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 public key. [RT #12687]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1733. [bug] Return non-zero exit status on initial load failure.
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1731. [port] darwin: relax version test in ifconfig.sh.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1730. [port] Determine the length type used by the socket API.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1729. [func] Improve check-names error messages.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1728. [doc] Update check-names documentation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1727. [bug] named-checkzone: check-names support didn't match
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson documentation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1726. [port] aix5: add support for aix5.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1725. [port] linux: update error message on interaction of threads,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 capabilities and setuid support (named -u). [RT #12541]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1724. [bug] Look for DNSKEY records with "dig +sigtrace".
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1722. [bug] Don't commit the journal on malformed ixfr streams.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1721. [bug] Error message from the journal processing were not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 always identifying the relevant journal. [RT #12519]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 negative response. [RT #12506]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1719. [bug] named was not correctly caching a RFC 2308 Type 1
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 negative response. [RT #12506]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 responses when looking for the zone / master server.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1717. [port] solaris: ifconfig.sh did not support Solaris 10.
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington "ifconfig.sh down" didn't work for Solaris 9.
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson1716. [doc] named.conf(5) was being installed in the wrong
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 location. [RT# 12441]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1715. [func] 'dig +trace' now randomly selects the next servers
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to try. Report if there is a bad delegation.
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington1714. [bug] dig/host/nslookup were only trying the first
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 address when a nameserver was specified by name.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1713. [port] linux: extend capset failure message to say:
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson please ensure that the capset kernel module is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 loaded. see insmod(8)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson messages for the specified zone. [RT #9479]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1709. [port] solaris: add SMF support from Sun.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for conformance to the name space convention. Binary
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson backward compatibility to the old function name is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 provided. [RT #12376]
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson1707. [contrib] sdb/ldap updated to version 1.0-beta.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1706. [bug] 'rndc stop' failed to cause zones to be flushed
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews sometimes. [RT #12328]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews1705. [func] Allow the journal's name to be changed via named.conf.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1704. [port] lwres needed a snprintf() implementation for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 platforms without snprintf(). Add missing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "#include <isc/print.h>". [RT #12321]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1703. [bug] named would loop sending NOTIFY messages when it
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews failed to receive a response. [RT #12322]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1702. [bug] also-notify should not be applied to built in zones.
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson1701. [doc] A minimal named.conf man page.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1700. [func] nslookup is no longer to be treated as deprecated.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Remove "deprecated" warning message. Add man page.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1699. [bug] dnssec-signzone can generate "not exact" errors
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson when resigning. [RT #12281]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1698. [doc] Use reserved IPv6 documentation prefix.
6d3f954c572db02159deedd444373161fda47a88Brian Wellington1697. [bug] xxx-source{,-v6} was not effective when it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified one of listening addresses and a
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington different port than the listening port. [RT #12257]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1696. [bug] dnssec-signzone failed to clean out nodes that
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson consisted of only NSEC and RRSIG records.
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson1695. [bug] DS records when forwarding require special handling.
886b96ebfd555cfeaf37ae46fc08421a41c61392Andreas Gustafsson1694. [bug] Report if the builtin views of "_default" / "_bind"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 are defined in named.conf. [RT #12023]
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington1693. [bug] max-journal-size was not effective for master zones
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with ixfr-from-differences set. [RT# 12024]
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1691. [bug] sdb's attachversion was not complete. [RT #11990]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1690. [bug] Delay detaching view from the client until UPDATE
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 processing completes when shutting down. [RT #11714]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson contained gratuitous semicolons. [RT #11707]
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews1688. [bug] LDFLAGS was not supported.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1687. [bug] Race condition in dispatch. [RT #10272]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1686. [bug] Named sent a extraneous NOTIFY when it received a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 redundant UPDATE request. [RT #11943]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington1685. [bug] Change #1679 loop tests weren't quite right.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1684. [func] ixfr-from-differences now takes master and slave in
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson addition to yes and no at the options and view levels.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1683. [bug] dig +sigchase could leak memory. [RT #11445]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson1682. [port] Update configure test for (long long) printf format.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1681. [bug] Only set SO_REUSEADDR when a port is specified in
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson isc_socket_bind(). [RT #11742]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1680. [func] rndc: the source address can now be specified.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1679. [bug] When there was a single nameserver with multiple
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 addresses for a zone not all addresses were tried.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
385a9cb48a70b329e507c39d043fa9a44c659913James Brister1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1676. [func] New option "allow-query-cache". This lets
385a9cb48a70b329e507c39d043fa9a44c659913James Brister allow-query be used to specify the default zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 access level rather than having to have every
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone override the global value. allow-query-cache
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington can be set at both the options and view levels.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 If allow-query-cache is not set allow-query applies.
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer1675. [bug] named would sometimes add extra NSEC records to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the authority section.
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer1674. [port] linux: increase buffer size used to scan
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1673. [port] linux: issue a error messages if IPv6 interface
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1672. [cleanup] Tests which only function in a threaded build
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 now return R:THREADONLY (rather than R:UNTESTED)
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence in a non-threaded build.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1671. [contrib] queryperf: add NAPTR to the list of known types.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1670. [func] Log UPDATE requests to slave zones without an acl as
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "disabled" at debug level 3. [RT# 11657]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1669. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1667. [port] linux: not all versions have IF_NAMESIZE.
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington1666. [bug] The optional port on hostnames in dual-stack-servers
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was being ignored.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1665. [func] rndc now allows addresses to be set in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 server clauses.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington1663. [func] Look for OpenSSL by default.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1662. [bug] Change #1658 failed to change one use of 'type'
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence to 'keytype'.
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson1661. [bug] Restore dns_name_concatenate() call in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 adb.c:set_target(). [RT #11582]
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington1660. [bug] win32: connection_reset_fix() was being called
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 unconditionally. [RT #11595]
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson1659. [cleanup] Cleanup some messages that were referring to KEY vs
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNSKEY, NXT vs NSEC and SIG vs RRSIG.
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and DH. Tighten which options apply to KEY and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNSKEY records.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1657. [doc] ARM: document query log output.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington DNSKEY and RRSIG. [RT #11542]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1655. [bug] Logging multiple versions w/o a size was broken.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1654. [bug] isc_result_totext() contained array bounds read
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1653. [func] Add key type checking to dst_key_fromfilename(),
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer DST_TYPE_KEY should be used to read TSIG, TKEY and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1652. [bug] TKEY still uses KEY.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1651. [bug] dig: process multiple dash options.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1650. [bug] dig, nslookup: flush standard out after each command.
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson1649. [bug] Silence "unexpected non-minimal diff" message.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1648. [func] Update dnssec-lookaside named.conf syntax to support
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson multiple dnssec-lookaside namespaces (not yet
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1647. [bug] It was possible trigger a INSIST when chasing a DS
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 record that required walking back over a empty node.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1646. [bug] win32: logging file versions didn't work with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 non-UNC filenames. [RT#11486]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1645. [bug] named could trigger a REQUIRE failure if multiple
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 masters with keys are specified.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1644. [bug] Update the journal modification time after a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 successful refresh query. [RT #11436]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1643. [bug] dns_db_closeversion() could leak memory / node
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson references. [RT #11163]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1642. [port] Support OpenSSL implementations which don't have
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson DSA support. [RT #11360]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1641. [bug] Update the check-names description in ARM. [RT #11389]
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 incorrectly closing the socket. [RT #11291]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1639. [func] Initial dlv system test.
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson1638. [bug] "ixfr-from-differences" could generate a REQUIRE
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure if the journal open failed. [RT #11347]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1637. [bug] Node reference leak on error in addnoqname().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a error had occurred. The database version no longer
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington matched the version of the database that was dumped.
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson1635. [bug] Memory leak on error in query_addds().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1634. [bug] named didn't supply a useful error message when it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 detected duplicate views. [RT #11208]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1633. [bug] named should return NOTIMP to update requests to a
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews slaves without a allow-update-forwarding acl specified.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1632. [bug] nsupdate failed to send prerequisite only UPDATE
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 messages. [RT #11288]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence1631. [bug] dns_journal_compact() could sometimes corrupt the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 journal. [RT #11124]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1630. [contrib] queryperf: add support for IPv6 transport.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1629. [func] dig now supports IPv6 scoped addresses with the
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister extended format in the local-server part. [RT #8753]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1627. [bug] win32: sockets were not being closed when the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 last external reference was removed. [RT# 11179]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1626. [bug] --enable-getifaddrs was broken. [RT#11259]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1625. [bug] named failed to load/transfer RFC2535 signed zones
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 which contained CNAMES. [RT# 11237]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1623. [bug] A serial number of zero was being displayed in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "sending notifies" log message when also-notify was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 used. [RT #11177]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 available, and suppress wildcard binding if not.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1621. [bug] match-destinations did not work for IPv6 TCP queries.
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson1620. [func] When loading a zone report if it is signed. [RT #11149]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson1618. [bug] Fencepost errors in dns_name_ishostname() and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_name_ismailbox() could trigger a INSIST().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1617. [port] win32: VC++ 6.0 support.
5096958739769958dd7a6b69356bf41260033873David Lawrence1616. [compat] Ensure that named's version is visible in the core
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dump. [RT #11127]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 it is defined.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1614. [port] win32: silence resource limit messages. [RT# 11101]
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence1613. [bug] Builds would fail on machines w/o a if_nametoindex().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1612. [bug] check-names at the option/view level could trigger
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 an INSIST. [RT# 11116]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews1611. [bug] solaris: IPv6 interface scanning failed to cope with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 no active IPv6 interfaces.
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews1610. [bug] On dual stack machines "dig -b" failed to set the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 address type to be looked up with "@server".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1609. [func] dig now has support to chase DNSSEC signature chains.
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNSSEC validation code in dig coded by Olivier Courtay
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (olivier.courtay@irisa.fr) for the IDsA project
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1608. [func] dig and host now accept -4/-6 to select IP transport
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to use when making queries.
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington1607. [bug] dig, host and nslookup were still using random()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to generate query ids. [RT# 11013]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister1606. [bug] DLV insecurity proof was failing.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1604. [bug] A xfrout_ctx_create() failure would result in
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister xfrout_ctx_destroy() being called with a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 partially initialized structure.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1603. [bug] nsupdate: set interactive based on isatty().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1602. [bug] Logging to a file failed unless a size was specified.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1601. [bug] Silence spurious warning 'both "recursion no;" and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "allow-recursion" active' warning from view "_bind".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1600. [bug] Duplicate zone pre-load checks were not case
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1599. [bug] Fix memory leak on error path when checking named.conf.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1598. [func] Specify that certain parts of the namespace must
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 be secure (dnssec-must-be-secure).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1597. [func] Allow notify-source and query-source to be specified
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 on a per server basis similar to transfer-source.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1596. [func] Accept 'notify-source' style syntax for query-source.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1595. [func] New notify type 'master-only'. Enable notify for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 master zones only.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1594. [bug] 'rndc dumpdb' could prevent named from answering
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 queries while the dump was in progress. [RT #10565]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1593. [bug] rndc should return "unknown command" to unknown
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 commands. [RT# 10642]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1592. [bug] configure_view() could leak a dispatch. [RT# 10675]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1591. [bug] libbind: updated to BIND 8.4.5.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1590. [port] netbsd: update thread support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1589. [func] DNSSEC lookaside validation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1587. [bug] dns_message_settsigkey() failed to clear existing key.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1586. [func] "check-names" is now implemented.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1585. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1584. [bug] "make test" failed with a read only source tree.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1583. [bug] Records add via UPDATE failed to get the correct trust
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 level. [RT #10452]
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson1582. [bug] rrset-order failed to work on RRsets with more
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 than 32 elements. [RT #10381]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1581. [func] Disable DNSSEC support by default. To enable
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson DNSSEC specify "dnssec-enable yes;" in named.conf.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1580. [bug] Zone destruction on final detach takes a long time.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1579. [bug] Multiple task managers could not be created.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 workaround code. [RT #10331]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1576. [bug] Race condition in dns_dispatch_addresponse().
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1574. [bug] Don't attempt to open the controls socket(s) when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 running tests. [RT #9091]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1573. [port] linux: update to libtool 1.5.2 so that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "make install DESTDIR=/xx" works with
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson "configure --with-libtool". [RT #9941]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1572. [bug] nsupdate: sign the soa query to find the enclosing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone if the server is specified. [RT #10148]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1571. [bug] rbt:hash_node() could fail leaving the hash table
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in an inconsistent state. [RT #10208]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1570. [bug] nsupdate failed to handle classes other than IN.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 New keyword 'class' which sets the default class.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1569. [func] nsupdate new command 'answer' which displays the
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence complete answer message to the last update.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1568. [bug] nsupdate now reports that the update failed in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 interactive mode. [RT# 10236]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1566. [port] Support for the cmsg framework on Solaris and HP/UX.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 This also solved the problem that match-destinations
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for IPv6 addresses did not work on these systems.
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson1565. [bug] CD flag should be copied to outgoing queries unless
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the query is under a secure entry point in which case
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 CD should be set.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1564. [func] Attempt to provide a fallback entropy source to be
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence used if named is running chrooted and named is unable
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to open entropy source within the chroot area.
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson1563. [bug] Gracefully fail when unable to obtain neither an IPv4
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 nor an IPv6 dispatch. [RT #10230]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1562. [bug] isc_socket_create() and isc_socket_accept() could
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson leak memory under error conditions. [RT #10230]
8775909be9fc67180fc480115716f88174e74471James Brister1561. [bug] It was possible to release the same name twice if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named ran out of memory. [RT #10197]
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and EAI_NONAME to the same value.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1559. [port] named should ignore SIGFSZ.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence child zones for which we don't have a supported
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 algorithm. Such child zones are treated as unsigned.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1557. [func] Implement missing DNSSEC tests for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 * NOQNAME proof with wildcard answers.
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence * NOWILDARD proof with NXDOMAIN.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Cache and return NOQNAME with wildcard answers.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1556. [bug] nsupdate now treats all names as fully qualified.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1555. [func] 'rrset-order cyclic' no longer has a random starting
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 point per query. [RT #7572]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1554. [bug] dig, host, nslookup failed when no nameservers
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 were specified in /etc/resolv.conf. [RT #8232]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1553. [bug] The windows socket code could stop accepting
57b3597444bc8716459f0fb3022b2c12f4eee2aeAndreas Gustafsson connections. [RT#10115]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1552. [bug] Accept NOTIFY requests from mapped masters if
99524919752c9b9abe1814007732b86592011cc1Brian Wellington matched-mapped is set. [RT #10049]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1551. [port] Open "/dev/null" before calling chroot().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1550. [port] Call tzset(), if available, before calling chroot().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1549. [func] named-checkzone can now write out the zone contents
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in a easily parsable format (-D and -o).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1548. [bug] When parsing APL records it was possible to silently
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 accept out of range ADDRESSFAMILY values. [RT# 9979]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1547. [bug] Named wasted memory recording duplicate lame zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 entries. [RT #9341]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1546. [bug] We were rejecting valid secure CNAME to negative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1545. [bug] It was possible to leak memory if named was unable to
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson bind to the specified transfer source and TSIG was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 being used. [RT #10120]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1544. [bug] Named would logged a single entry to a file despite it
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson being over the specified size limit.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1543. [bug] Logging using "versions unlimited" did not work.
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer1542. [placeholder]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews1541. [func] NSEC now uses new bitmap format.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1539. [bug] Open UDP sockets for notify-source and transfer-source
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 that use reserved ports at startup. [RT #9475]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1538. [placeholder] rt9997
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister1537. [func] New option "querylog". If set specify whether query
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 logging is to be enabled or disabled at startup.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1536. [bug] Windows socket code failed to log a error description
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when returning ISC_R_UNEXPECTED. [RT #9998]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1535. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1534. [bug] Race condition when priming cache. [RT# 9940]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1533. [func] Warn if both "recursion no;" and "allow-recursion"
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington are active. [RT# 4389]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1532. [port] netbsd: the configure test for <sys/sysctl.h>
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1531. [port] AIX more libtool fixes.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1530. [bug] It was possible to trigger a INSIST() failure if a
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister slave master file was removed at just the correct
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 moment. [RT #9462]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1529. [bug] "notify explicit;" failed to log that NOTIFY messages
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 were being sent for the zone. [RT# 9442]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1528. [cleanup] Simplify some dns_name_ functions based on the
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson deprecation of bitstring labels.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1527. [cleanup] Reduce the number of gettimeofday() calls without
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 losing necessary timer granularity.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1526. [func] Implemented "additional section caching (or acache)",
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews an internal cache framework for additional section
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 content to improve response performance. Several
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 configuration options were provided to control the
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister1525. [bug] dns_cache_create() could trigger a REQUIRE
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure in isc_mem_put() during error cleanup.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1524. [port] AIX needs to be able to resolve all symbols when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 creating shared libraries (--with-libtool).
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson1523. [bug] Fix race condition in rbtdb. [RT# 9189]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister1522. [bug] dns_db_findnode() relax the requirements on 'name'.
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister1521. [bug] dns_view_createresolver() failed to check the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 result from isc_mem_create(). [RT# 9294]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister1520. [protocol] Add SSHFP (SSH Finger Print) type.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
47c196192afa37b2dea728e52579779f190bf07fJames Brister length of the new bitmap.
adf82221858138f295bce732e86dcac34645692eJames Brister1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 contained a off-by-one error when working out the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 number of octets in the bitmap.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1517. [port] Support for IPv6 interface scanning on HP/UX and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1515. [func] Allow transfer source to be set in a server statement.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1514. [bug] named: isc_hash_destroy() was being called too early.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1513. [doc] Add "US" to root-delegation-only exclude list.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1512. [bug] Extend the delegation-only logging to return query
0380c44d0238a88e167526954d630d071739ed28Mark Andrews type, class and responding nameserver.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1511. [bug] delegation-only was generating false positives
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews on negative answers from sub-zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1510. [func] New view option "root-delegation-only". Apply
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington delegation-only check to all TLDs and root.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note there are some TLDs that are NOT delegation
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 only (e.g. DE, LV, US and MUSEUM) these can be excluded
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from the checks by using exclude.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 root-delegation-only exclude {
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "DE"; "LV"; "US"; "MUSEUM";
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1509. [bug] Hint zones should accept delegation-only. Forward
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone should not accept delegation-only.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1508. [bug] Don't apply delegation-only checks to answers from
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister1507. [bug] Handle BIND 8 style returns to NS queries to parents
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when making delegation-only checks.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1506. [bug] Wrong return type for dns_view_isdelegationonly().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1504. [func] New zone type "delegation-only".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1503. [port] win32: install libeay32.dll outside of system32.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews1501. [func] Allow TCP queue length to be specified via
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named.conf, tcp-listen-queue.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1500. [bug] host failed to lookup MX records. Also look up
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1499. [bug] isc_random need to be seeded better if arc4random()
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister1498. [port] bsdos: 5.x support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1497. [placeholder]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister1496. [port] test for pthread_attr_setstacksize().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1495. [cleanup] Replace hash functions with universal hash.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1494. [security] Turn on RSA BLINDING as a precaution.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1493. [placeholder]
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson1492. [cleanup] Preserve rwlock quota context when upgrading /
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 downgrading. [RT #5599]
0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 lines. [RT #6206]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1490. [bug] Accept reading state as well as working state in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ns_client_next(). [RT #6813]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1489. [compat] Treat 'allow-update' on slave zones as a warning.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1488. [bug] Don't override trust levels for glue addresses.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1487. [bug] A REQUIRE() failure could be triggered if a zone was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 queued for transfer and the zone was then removed.
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson1486. [bug] isc_print_snprintf() '%%' consumed one too many format
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 characters. [RT# 8230]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1485. [bug] gen failed to handle high type values. [RT #6225]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1484. [bug] The number of records reported after a AXFR was wrong.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1483. [bug] dig axfr failed if the message id in the answer failed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to match that in the request. Only the id in the first
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington message is required to match. [RT #8138]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1482. [bug] named could fail to start if the kernel supports
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington IPv6 but no interfaces are configured. Similarly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for IPv4. [RT #6229]
f34984369fbc87f6cc5c5d1059303377a1724d79James Brister1481. [bug] Refresh and stub queries failed to use masters keys
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if specified. [RT #7391]
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson1480. [bug] Provide replay protection for rndc commands. Full
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 replay protection requires both rndc and named to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 be updated. Partial replay protection (limited
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson exposure after restart) is provided if just named
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1479. [bug] cfg_create_tuple() failed to handle out of
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson memory cleanup. parse_list() would leak memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 on syntax errors.
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington1478. [port] ifconfig.sh didn't account for other virtual
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 interfaces. It now takes a optional argument
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to specify the first interface number. [RT #3907]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1477. [bug] memory leak using stub zones and TSIG.
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson1476. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1475. [port] Probe for old sprintf().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1474. [port] Provide strtoul() and memmove() for platforms
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson1473. [bug] create_map() and create_string() failed to handle out
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of memory cleanup. [RT #6813]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington1471. [bug] libbind: updated to BIND 8.4.0.
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington1470. [bug] Incorrect length passed to snprintf. [RT #5966]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1469. [func] Log end of outgoing zone transfer at same level
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence as the start of transfer is logged. [RT #4441]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1468. [func] Internal zones are no longer counted for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'rndc status'. [RT #4706]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1467. [func] $GENERATES now supports optional class and ttl.
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence1466. [bug] lwresd configuration errors resulted in memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and lock leaks. [RT #5228]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington failed to check that trailing bits were zero allowing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 some invalid base64 strings to be accepted. [RT #5397]
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence1464. [bug] Preserve "out of zone" data for outgoing zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 transfers. [RT #5192]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson NXT bit maps. [RT #5577]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1462. [bug] parse_sizeval() failed to check the token type.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1460. [bug] inet_pton() failed to reject certain malformed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 IPv6 literals.
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson1459. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1458. [cleanup] sprintf() -> snprintf().
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff1457. [port] Provide strlcat() and strlcpy() for platforms without
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff1455. [bug] <netaddr> missing from server grammar in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1454. [port] Use getifaddrs() if available for interface scanning.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff --disable-getifaddrs to override. Glibc currently
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 has a getifaddrs() that does not support IPv6.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Use --enable-getifaddrs=glibc to force the use of
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson this version under linux machines.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson1452. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1451. [bug] rndc-confgen didn't exit with a error code for all
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failures. [RT #5209]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1450. [bug] Fetching expired glue failed under certain
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister circumstances. [RT #5124]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1449. [bug] query_addbestns() didn't handle running out of memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1448. [bug] Handle empty wildcards labels.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1447. [bug] We were casting (unsigned int) to and from (void *).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rdataset->private4 is now rdataset->privateuint4
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to reflect a type change.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1446. [func] Implemented undocumented alternate transfer sources
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from BIND 8. See use-alt-transfer-source,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 alt-transfer-source and alt-transfer-source-v6.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 SECURITY: use-alt-transfer-source is ENABLED unless
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson you are using views. This may cause a security risk
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 resulting in accidental disclosure of wrong zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 content if the master supplying different source
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 content based on IP address. If you are not certain
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ISC recommends setting use-alt-transfer-source no;
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 been replaced with DNS_ADBFIND_STARTATZONE which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causes the search to start using the closest zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1444. [func] dns_view_findzonecut2() allows you to specify if the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 cache should be searched for zone cuts.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1443. [func] Masters lists can now be specified and referenced
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in zone masters clauses and other masters lists.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1442. [func] New functions for manipulating port lists:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_portlist_create(), dns_portlist_add(),
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson dns_portlist_remove(), dns_portlist_match(),
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_portlist_attach() and dns_portlist_detach().
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews1441. [func] It is now possible to tell dig to bind to a specific
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews1440. [func] It is now possible to tell named to avoid using
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 certain source ports (avoid-v4-udp-ports,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 avoid-v6-udp-ports).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1439. [bug] Named could return NOERROR with certain NOTIFY
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failures. Return NOTAUTH if the NOTIFY zone is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not being served.
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence1438. [func] Log TSIG (if any) when logging NOTIFY requests.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1437. [bug] Leave space for stdio to work in. [RT #5033]
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence1436. [func] dns_zonemgr_resumexfrs() can be used to restart
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 stalled transfers.
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington1435. [bug] zmgr_resume_xfrs() was being called read locked
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rather than write locked. zmgr_resume_xfrs()
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington was not being called if the zone was being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1434. [bug] "rndc reconfig" failed to initiate the initial
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister zone transfer of new slave zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1433. [bug] named could trigger a REQUIRE failure if it could
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister not get a file descriptor when attempting to write
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a master file. [RT #4347]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1432. [func] The advertised EDNS UDP buffer size can now be set
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 via named.conf (edns-udp-size).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1431. [bug] isc_print_snprintf() "%s" with precision could walk off
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister end of argument. [RT #5191]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1430. [port] linux: IPv6 interface scanning support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1429. [bug] Prevent the cache getting locked to old servers.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1428. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1427. [bug] Race condition in adb with threaded build.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1426. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1425. [port] linux/libbind: define __USE_MISC when testing *_r()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 function prototypes in netdb.h. [RT #4921]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1424. [bug] EDNS version not being correctly printed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1423. [contrib] queryperf: added A6 and SRV.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1422. [func] Log name/type/class when denying a query. [RT #4663]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1421. [func] Differentiate updates that don't succeed due to
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson prerequisites (unsuccessful) vs other reasons
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1420. [port] solaris: work around gcc optimizer bug.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1419. [port] openbsd: use /dev/arandom. [RT #4950]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews1418. [bug] 'rndc reconfig' did not cause new slaves to load.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1417. [func] ID.SERVER/CHAOS is now a built in zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 See "server-id" for how to configure.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews from SOA MINIMUM.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson1414. [func] Support for KSK flag.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1413. [func] Explicitly request the (re-)generation of DS records
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from keysets (dnssec-signzone -g).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1412. [func] You can now specify servers to be tried if a nameserver
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson has IPv6 address and you only support IPv4 or the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reverse. See dual-stack-servers.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1410. [func] Handle records that live in the parent zone, e.g. DS.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson1408. [bug] "make distclean" was not complete. [RT #4700]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1407. [bug] lfsr incorrectly implements the shift register.
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson1406. [bug] dispatch initializes one of the LFSR's with a incorrect
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 polynomial. [RT #4617]
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence1405. [func] Use arc4random() if available.
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-signkey now report their version in the
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister usage message.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1402. [cleanup] A6 has been moved to experimental and is no longer
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister fully supported.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1401. [bug] adb wasn't clearing state when the timer expired.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1400. [bug] Block the addition of wildcard NS records by IXFR
e411a986b94276c28e6a971f9c3b61d45c635456James Brister or UPDATE. [RT #3502]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister1399. [bug] Use serial number arithmetic when testing SIG
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 timestamps. [RT #4268]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1398. [doc] ARM: notify-also should have been also-notify.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1396. [func] dnssec-signzone: adjust the default signing time by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 1 hour to allow for clock skew.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 have a working implementation. [RT #4079]
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson1394. [func] It is now possible to check if a particular element is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in a acl. Remove duplicate entries from the localnets
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is not available in the kernel to prevent accidently
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister listening on IPv4 interfaces.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1392. [bug] named-checkzone: update usage.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister1391. [func] Add support for IPv6 scoped addresses in named.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1390. [func] host now supports ixfr.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1389. [bug] named could fail to rotate long log files. [RT #3666]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 defining HAVE_IFLIST_SYSCTL. [RT #3770]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1387. [bug] named could crash due to an access to invalid memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 space (which caused an assertion failure) in
36357e4304862fb47e9fae03c704cb6720310c45James Brister incremental cleaning. [RT #3588]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1386. [bug] named-checkzone -z stopped on errors in a zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1385. [bug] Setting serial-query-rate to 10 would trigger a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 REQUIRE failure.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1384. [bug] host was incompatible with BIND 8 in its exit code and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in the output with the -l option. [RT #3536]
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence1383. [func] Track the serial number in a IXFR response and log if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a mismatch occurs. This is a more specific error than
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "not exact". [RT #3445]
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence1382. [bug] make install failed with --enable-libbind. [RT #3656]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1381. [bug] named failed to correctly process answers that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 contained DNAME records where the resulting CNAME
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson resulted in a negative answer.
b99d080717fdd741961d736581270d37bad8bec0David Lawrence1380. [func] 'rndc recursing' dump recursing queries to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'recursing-file = "named.recursing";'.
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson1379. [func] 'rndc status' now reports tcp and recursion quota
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence1377. [func] dns_zone_load{new}() now reports if the zone was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 loaded, queued for loading to up to date.
358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence1376. [func] New function dns_zone_logc() to log to specified
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1374. [func] dns_adb_dump() now logs the lame zones associated
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with each server.
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence1373. [bug] Recovery from expired glue failed under certain
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 circumstances.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1372. [bug] named crashes with an assertion failure on exit when
a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence sharing the same port for listening and querying, and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 changing listening addresses several times. [RT# 3509]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1371. [bug] notify-source-v6, transfer-source-v6 and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 query-source-v6 with explicit addresses and using the
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence same ports as named was listening on could interfere
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with named's ability to answer queries sent to those
eefea43215016bce437ab4a7441b2851fd182960David Lawrence1370. [bug] dig '+[no]recurse' was incorrectly documented.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1369. [bug] Adding an NS record as the lexicographically last
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence record in a secure zone didn't work.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1368. [func] remove support for bitstring labels.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1367. [func] Use response times to select forwarders.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1365. [func] "localhost" and "localnets" acls now include IPv6
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 addresses / prefixes.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1364. [func] Log file name when unable to open memory statistics
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and dump database files. [RT# 3437]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1363. [func] Listen-on-v6 now supports specific addresses.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1362. [bug] remove IFF_RUNNING test when scanning interfaces.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1361. [func] log the reason for rejecting a server when resolving
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence1360. [bug] --enable-libbind would fail when not built in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 source tree for certain OS's.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1359. [security] Support patches OpenSSL libraries.
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington http://www.cert.org/advisories/CA-2002-23.html
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1358. [bug] It was possible to trigger a INSIST when debugging
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 large dynamic updates. [RT #3390]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1357. [bug] nsupdate was extremely wasteful of memory.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1356. [tuning] Reduce the number of events / quantum for zone tasks.
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1354. [doc] lwres man pages had illegal nroff.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1353. [contrib] sdb/ldap to version 0.9.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1352. [bug] dig, host, nslookup when falling back to TCP use the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 current search entry (if any). [RT #3374]
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews1351. [bug] lwres_getipnodebyname() returned the wrong name
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1350. [bug] dns_name_fromtext() failed to handle too many labels
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 http://www.cert.org/advisories/CA-2002-23.html
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1348. [port] win32: Rewrote code to use I/O Completion Ports
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in socket.c and eliminating a host of socket
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence errors. Performance is enhanced.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1347. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1346. [placeholder]
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence1345. [port] Use a explicit -Wformat with gcc. Not all versions
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 include it in -Wall.
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer1344. [func] Log if the serial number on the master has gone
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence If you have multiple machines specified in the masters
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 clause you may want to set 'multi-master yes;' to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence suppress this warning.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1343. [func] Log successful notifies received (info). Adjust log
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence level for failed notifies to notice.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1342. [func] Log remote address with TCP dispatch failures.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1341. [func] Allow a rate limiter to be stalled.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1340. [bug] Delay and spread out the startup refresh load.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 lookups. Bit string lookups are no longer attempted.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1338. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1337. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1336. [func] Nibble lookups under IP6.ARPA are now supported by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_byaddr_create(). dns_byaddr_createptrname() is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 deprecated, use dns_byaddr_createptrname2() instead.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1335. [bug] When performing a nonexistence proof, the validator
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 should discard parent NXTs from higher in the DNS.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1334. [bug] When signing/verifying rdatasets, duplicate rdatas
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 need to be suppressed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1333. [contrib] queryperf now reports a summary of returned
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rcodes (-c), rcodes are printed in mnemonic form (-v).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1332. [func] Report the current serial with periodic commits when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rolling forward the journal.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1331. [func] Generate DNSSEC wildcard proofs.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1330. [bug] When processing events (non-threaded) only allow
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the task one chance to use to use its quantum.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1329. [func] named-checkzone will now check if nameservers that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 appear to be IP addresses. Available modes "fail",
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "warn" (default) and "ignore" the results of the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1328. [bug] The validator could incorrectly verify an invalid
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 negative proof.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1327. [bug] The validator would incorrectly mark data as insecure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when seeing a bogus signature before a correct
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1326. [bug] DNAME/CNAME signatures were not being cached when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence validation was not being performed. [RT #3284]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1325. [bug] If the tcpquota was exhausted it was possible to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to trigger a INSIST() failure.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1324. [port] darwin: ifconfig.sh now supports darwin.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1322. [bug] dnssec-signzone usage message was misleading.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence would incorrectly duplicate its output and sign it.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1320. [doc] query-source-v6 was missing from options section.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1319. [func] libbind: log attempts to exploit #1318.
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence1318. [bug] libbind: Remote buffer overrun.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence element name.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1316. [bug] libbind: gethostans() could get out of sync parsing
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence the response if there was a very long CNAME chain.
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence1315. [bug] Options should apply to the internal _bind view.
cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson1314. [port] Handle ECONNRESET from sendmsg() [unix].
b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence1313. [func] Query log now says if the query was signed (S) or
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if EDNS was used (E).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1312. [func] Log TSIG key used w/ outgoing zone transfers.
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1310. [bug] 'rndc stop' failed to cause zones to be flushed
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson sometimes. [RT #3157]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1309. [func] Log that a zone transfer was covered by a TSIG.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1308. [func] DS (delegation signer) support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1307. [bug] nsupdate: allow white space base64 key data.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1306. [bug] Badly encoded LOC record when the size, horizontal
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence precision or vertical precision was 0.1m.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1305. [bug] Document that internal zones are included in the
5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence rndc status results.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1304. [func] New function: dns_zone_name().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1302. [func] Extended rndc dumpdb to support dumping of zones and
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley view selection: 'dumpdb [-all|-zones|-cache] [view]'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1301. [func] New category 'update-security'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1300. [port] Compaq Trucluster support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1299. [bug] Set AI_ADDRCONFIG when looking up addresses
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 via getaddrinfo() (affects dig, host, nslookup, rndc
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and nsupdate).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence could be left with a trailing "\" after configure
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence1297. [port] linux: make handling EINVAL from socket() no longer
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 conditional on #ifdef LINUX.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1296. [bug] isc_log_closefilelogs() needed to lock the log
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1295. [bug] isc_log_setdebuglevel() needed to lock the log
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1294. [func] libbind: no longer attempts bit string labels for
32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington IPv6 reverse resolution. Try IP6.ARPA then IP6.INT
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for nibble style resolution.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
77f372eed39827f5efef476602de7c0505f99b91David Lawrence1292. [func] Enable IPv6 support when using ioctl style interface
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 scanning and OS supports SIOCGLIFADDR using struct
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1291. [func] Enable IPv6 support when using sysctl style interface
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1290. [func] "dig axfr" now reports the number of messages
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as well as the number of records.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reflect written requirements.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a rdataset to a zone db in the rbtdb implementation of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1286. [bug] dns_name_downcase() enforce requirement that
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson target != NULL or name->buffer != NULL.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1285. [func] lwres: probe the system to see what address families
6f17d90364f01c3e81073a9ffb40b0093878c8e2Brian Wellington are currently in use.
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff1284. [bug] The RTT estimate on unused servers was not aged.
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington1283. [func] Use "dataready" accept filter if available.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1282. [port] libbind: hpux 11.11 interface scanning.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1281. [func] Log zone when unable to get private keys to update
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone. Log zone when NXT records are missing from
d111a46c88adda33a93839f4934e127b6147d87dBob Halley secure zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1280. [bug] libbind: escape '(' and ')' when converting to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 presentation form.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1278. [func] dig: now supports +[no]cl +[no]ttlid.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1277. [func] You can now create your own customized printing
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff styles: dns_master_stylecreate() and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_master_styledestroy().
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1276. [bug] libbind: const pointer conflicts in res_debug.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1274. [bug] Memory leak in lwres_gnbarequest_parse().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1273. [port] libbind: solaris: 64 bit binary compatibility.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1272. [contrib] Berkeley DB 4.0 sdb implementation from
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1271. [bug] "recursion available: {denied,approved}" was too
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1270. [bug] Check that system inet_pton() and inet_ntop() support
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1269. [port] Openserver: ifconfig.sh support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1268. [port] Openserver: the value FD_SETSIZE depends on whether
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews <sys/param.h> is included or not. Be consistent.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1267. [func] isc_file_openunique() now creates file using mode
4716e94840921878b26e493576f84afe4fe08752Mark Andrews 0666 rather than 0600.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 are not C++ compatible, use *_TYPE versions instead.
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley1264. [placeholder]
3886e748a4086b813e3453232a742903762fedadBob Halley1263. [bug] Reference after free error if dns_dispatchmgr_create()
3886e748a4086b813e3453232a742903762fedadBob Halley1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley support for compressed TSIG owner names.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1260. [func] libbind: res_update can now update IPv6 servers,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 new function res_findzonecut2().
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1258. [bug] libbind: res_nametotype() and res_nametoclass() were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1257. [bug] Failure to write pid-file should not be fatal on
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley reload. [RT #2861]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley1255. [bug] When verifying that an NXT proves nonexistence, check
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the rcode of the message and only do the matching NXT
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 check. That is, for NXDOMAIN responses, check that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the name is in the range between the NXT owner and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 next name, and for NOERROR NODATA responses, check
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson that the type is not present in the NXT bitmap.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1254. [func] preferred-glue option from BIND 8.3.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1253. [bug] The dnssec system test failed to remove the correct
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1252. [bug] Dig, host and nslookup were not checking the address
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson the answer was coming from against the address it was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 sent to. [RT# 2692]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1251. [port] win32: a make file contained absolute version specific
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence1250. [func] Nsupdate will report the address the update was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1249. [bug] Missing masters clause was not handled gracefully.
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence1248. [bug] DESTDIR was not being propagated between makes.
b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence1247. [bug] Don't reset the interface index for link/site local
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 addresses. [RT #2576]
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence1246. [func] New functions isc_sockaddr_issitelocal(),
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister and isc_netaddr_islinklocal().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister1244. [bug] Receiving a TCP message from a blackhole address would
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 prevent further messages being received over that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1243. [bug] It was possible to trigger a REQUIRE() in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_message_findtype(). [RT #2659]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1241. [bug] Drop received UDP messages with a zero source port
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as these are invariably forged. [RT #2621]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1240. [bug] It was possible to leak zone references by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specifying an incorrect zone to rndc.
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister1239. [bug] Under certain circumstances named could continue to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 use a name after it had been freed triggering
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson INSIST() failures. [RT #2614]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1238. [bug] It is possible to lockup the server when shutting down
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson if notifies were being processed. [RT #2591]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1237. [bug] nslookup: "set q=type" failed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NULL terminated text regions. [RT #2588]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1235. [func] Report 'out of memory' errors from openssl.
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley1234. [bug] contrib/sdb: 'zonetodb' failed to call
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_result_register(). DNS_R_SEENINCLUDE should not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1233. [bug] The flags field of a KEY record can be expressed in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 hex as well as decimal.
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence1229. [bug] named would crash if it received a TSIG signed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 query as part of an AXFR response. [RT #2570]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
be768c2e952c34438025999125f984995a2c675fBob Halley1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if a number was expected and some other token was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 found. [RT#2532]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1226. [func] Use EDNS for zone refresh queries. [RT #2551]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley1225. [func] dns_message_setopt() no longer requires that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_message_renderbegin() to have been called.
be768c2e952c34438025999125f984995a2c675fBob Halley1224. [bug] 'rrset-order' and 'sortlist' should be additive
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not exclusive.
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 are supported.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1222. [bug] Specifying 'port *' did not always result in a system
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 selected (non-reserved) port being used. [RT #2537]
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 compared case insensitively. [RT #2542]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1220. [func] Support for APL rdata type.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1219. [func] Named now reports the TSIG extended error code when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signature verification fails. [RT #1651]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1218. [bug] Named incorrectly returned SERVFAIL rather than
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1217. [func] Report locations of previous key definition when a
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister duplicate is detected.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1216. [bug] Multiple server clauses for the same server were not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reported. [RT #2514]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1214. [bug] Win32: isc_file_renameunique() could leave zero length
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley files behind.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1213. [func] Report view associated with client if it is not a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 standard view (_default or _bind).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1212. [port] libbind: 64k answer buffers were causing stack space
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington to be exceeded for certain OS. Use heap space instead.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1211. [bug] dns_name_fromtext() incorrectly handled certain
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington valid octal bitlabels. [RT #2483]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley compatible addresses. [RT #2461]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1209. [bug] Dig, host, nslookup were not checking the message ids
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 on the responses. [RT #2454]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉1208. [bug] dns_master_load*() failed to log a error message if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 an error was detected when parsing the ownername of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a record. [RT #2448]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence an invalid pointer.
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which