1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 946. [cleanup] doc/misc/options is now machine-generated from the

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync configuration parser syntax tables, and therefore

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync more likely to be correct.

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 945. [func] Add the new view-specific options

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync "match-destinations" and "match-recursive-only".

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 944. [func] Check for expired signatures on load.

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 943. [bug] The server could crash when receiving a command

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync via rndc if the configuration file listed only

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync nonexistent keys in the controls statement. [RT #1530]

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync defined on some platforms.

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync 941. [bug] The configuration checker crashed if a slave

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync zone didn't contain a masters statement. [RT #1514]

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

8bf8c6b1914c9e7e60b1547888400668f1774497vboxsync 940. [bug] Double zone locking failure on error path. [RT #1510]

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

cb48b678483eed76053da41c3f0f2600eeeed5f4vboxsync --- 9.2.0b1 released ---

aa4abbae60064ecfe6d632a69db808feb27f9fe8vboxsync

36545c63b2aab948161e4a712913a4f2dce17d2fvboxsync 939. [port] Add the --disable-linux-caps option to configure for

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync systems that manage capabilities outside of named.

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync [RT #1503]

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync

85beaadc71c449082807e164ca79654766b9f00avboxsync 938. [placeholder]

346af0930020342df40a1ca8d13eb185ad48067evboxsync

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync 937. [bug] A race when shutting down a zone could trigger a

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync INSIST() failure. [RT #1034]

85beaadc71c449082807e164ca79654766b9f00avboxsync

85beaadc71c449082807e164ca79654766b9f00avboxsync 936. [func] Warn about IPv4 addresses that are not complete

36545c63b2aab948161e4a712913a4f2dce17d2fvboxsync dotted quads. [RT #1084]

36545c63b2aab948161e4a712913a4f2dce17d2fvboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 935. [bug] inet_pton failed to reject leading zeros.

e1ffd6bf06692ce47c4407230443e27cf5e23e4fvboxsync

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync 934. [port] Deal with systems where accept() spuriously returns

8b6d7e3d5672f9db05a27b3991948c7949f7bd57vboxsync ECONNRESET.

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

8b6d7e3d5672f9db05a27b3991948c7949f7bd57vboxsync 933. [bug] configure failed doing libbind on platforms not

8b6d7e3d5672f9db05a27b3991948c7949f7bd57vboxsync supported by BIND 8. [RT #1496]

e1ffd6bf06692ce47c4407230443e27cf5e23e4fvboxsync

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync --- 9.2.0a3 released ---

8b6d7e3d5672f9db05a27b3991948c7949f7bd57vboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,

8b6d7e3d5672f9db05a27b3991948c7949f7bd57vboxsync when installing isc-config.sh.

8b6d7e3d5672f9db05a27b3991948c7949f7bd57vboxsync [RT #198, #1466]

2cd11b9eb48274eb1e6fd5a6d348f7c508d97851vboxsync

ecefceaf288db07aa576745c298dca85e162aea2vboxsync 931. [bug] The controls statement only attempted to verify

ecefceaf288db07aa576745c298dca85e162aea2vboxsync messages using the first key in the key list.

e1ffd6bf06692ce47c4407230443e27cf5e23e4fvboxsync (9.2.0a1/a2 only).

ecefceaf288db07aa576745c298dca85e162aea2vboxsync

ecefceaf288db07aa576745c298dca85e162aea2vboxsync 930. [func] Query performance testing tool added as

e1ffd6bf06692ce47c4407230443e27cf5e23e4fvboxsync contrib/queryperf.

452fe6c0ad673fa5006fe2c24b76a1a54e4ff499vboxsync

ecefceaf288db07aa576745c298dca85e162aea2vboxsync 929. [placeholder]

ecefceaf288db07aa576745c298dca85e162aea2vboxsync

78100a023b3725c3611e76d104f41f2c2ccfa440vboxsync 928. [bug] nsupdate would send empty update packets if the

ecefceaf288db07aa576745c298dca85e162aea2vboxsync send (or empty line) command was run after

ecefceaf288db07aa576745c298dca85e162aea2vboxsync another send but before any new updates or

ecefceaf288db07aa576745c298dca85e162aea2vboxsync prerequisites were specified. It should simply

ecefceaf288db07aa576745c298dca85e162aea2vboxsync ignore this command.

e1ffd6bf06692ce47c4407230443e27cf5e23e4fvboxsync

e1ffd6bf06692ce47c4407230443e27cf5e23e4fvboxsync 927. [bug] Don't hold the zone lock for the entire dump to disk.

e1ffd6bf06692ce47c4407230443e27cf5e23e4fvboxsync [RT #1423]

2cd11b9eb48274eb1e6fd5a6d348f7c508d97851vboxsync

36545c63b2aab948161e4a712913a4f2dce17d2fvboxsync 926. [bug] The resolver could deadlock with the ADB when

2cd11b9eb48274eb1e6fd5a6d348f7c508d97851vboxsync shutting down (multithreaded builds only).

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync [RT #1324]

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync

cb48b678483eed76053da41c3f0f2600eeeed5f4vboxsync 925. [cleanup] Remove openssl from the distribution; require that

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync --with-openssl be specified if DNSSEC is needed.

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync

8b6d7e3d5672f9db05a27b3991948c7949f7bd57vboxsync 924. [port] Extend support for pre-RFC2133 IPv6 implementation.

8b6d7e3d5672f9db05a27b3991948c7949f7bd57vboxsync [RT #987]

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

67d8048258ab7e245a0b2b6b759df0175ffab9a0vboxsync 923. [bug] Multiline TSIG secrets (and other multiline strings)

67d8048258ab7e245a0b2b6b759df0175ffab9a0vboxsync were not accepted in named.conf. [RT #1469]

67d8048258ab7e245a0b2b6b759df0175ffab9a0vboxsync

9e82c3a964f83d08718511b68d7e27fd88fc816cvboxsync 922. [func] Added two new lwres_getrrsetbyname() result codes,

67d8048258ab7e245a0b2b6b759df0175ffab9a0vboxsync ERR_NONAME and ERR_NODATA.

9e82c3a964f83d08718511b68d7e27fd88fc816cvboxsync

9e82c3a964f83d08718511b68d7e27fd88fc816cvboxsync 921. [bug] lwres returned an incorrect error code if it received

9e82c3a964f83d08718511b68d7e27fd88fc816cvboxsync a truncated message.

67d8048258ab7e245a0b2b6b759df0175ffab9a0vboxsync

67d8048258ab7e245a0b2b6b759df0175ffab9a0vboxsync 920. [func] Increase the lwres receive buffer size to 16K.

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync [RT #1451]

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync 919. [placeholder]

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync 918. [func] In nsupdate, TSIG errors are no longer treated as

16afd2d976f255ed0b7b443770e4fa93fb4847d1vboxsync fatal errors.

16afd2d976f255ed0b7b443770e4fa93fb4847d1vboxsync

16afd2d976f255ed0b7b443770e4fa93fb4847d1vboxsync 917. [func] New nsupdate command 'key', allowing TSIG keys to

16afd2d976f255ed0b7b443770e4fa93fb4847d1vboxsync be specified in the nsupdate command stream rather

16afd2d976f255ed0b7b443770e4fa93fb4847d1vboxsync than the command line.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 916. [bug] Specifying type ixfr to dig without specifying

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync a serial number failed in unexpected ways.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 915. [func] The named-checkconf and named-checkzone programs

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync now have a '-v' option for printing their version.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync [RT #1151]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 914. [bug] Global 'server' statements were rejected when

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync using views, even though they were accepted

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync in 9.1. [RT #1368]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 913. [bug] Cache cleaning was not sufficiently aggressive.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync [RT #1441, #1444]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 912. [bug] Attempts to set the 'additional-from-cache' or

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 'additional-from-auth' option to 'no' in a

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync server with recursion enabled will now

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync be ignored and cause a warning message.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync [RT #1145]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 911. [placeholder]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 910. [port] Some pre-RFC2133 IPv6 implementations do not define

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync IN6ADDR_ANY_INIT. [RT #1416]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 908. [func] New program, rndc-confgen, to simplify setting up rndc.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 907. [func] The ability to get entropy from either the

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync random device, a user-provided file or from

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync the keyboard was migrated from the DNSSEC tools

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync to libisc as isc_entropy_usebestsource().

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync 906. [port] Separated the system independent portion of

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync lib/isc/unix/entropy.c into lib/isc/entropy.c

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync and added lib/isc/win32/entropy.c.

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync 905. [bug] Configuring a forward "zone" for the root domain

6820bb9a394f88e9b631a05c046895d3554b2bc2vboxsync did not work. [RT #1418]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 904. [bug] The server would leak memory if attempting to use

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync an expired TSIG key. [RT #1406]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 903. [bug] dig should not crash when receiving a TCP packet

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync of length 0.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 902. [bug] The -d option was ignored if both -t and -g were also

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync specified.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 901. [placeholder]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 900. [bug] A config.guess update changed the system identification

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync string of FreeBSD systems; configure and

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync bin/tests/system/ifconfig.sh now recognize the new

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync string.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync --- 9.2.0a2 released ---

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 899. [bug] lib/dns/soa.c failed to compile on many platforms

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync due to inappropriate use of a void value.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync [RT #1372, #1373, #1386, #1387, #1395]

b3249da254ed58431673b83fdefc50e8f40efb9bvboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 898. [bug] "dig" failed to set a nonzero exit status

b3249da254ed58431673b83fdefc50e8f40efb9bvboxsync on UDP query timeout. [RT #1323]

b3249da254ed58431673b83fdefc50e8f40efb9bvboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 897. [bug] A config.guess update changed the system identification

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync string of UnixWare systems; configure now recognizes

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync the new string.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 896. [bug] If a configuration file is set on named's command line

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync and it has a relative pathname, the current directory

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync (after any possible jailing resulting from named -t)

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync will be prepended to it so that reloading works

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync properly even when a directory option is present.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 895. [func] New function, isc_dir_current(), akin to POSIX's

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync getcwd().

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

b3249da254ed58431673b83fdefc50e8f40efb9bvboxsync 894. [bug] When using the DNSSEC tools, a message intended to warn

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync when the keyboard was being used because of the lack

b3249da254ed58431673b83fdefc50e8f40efb9bvboxsync of a suitable random device was not being printed.

b3249da254ed58431673b83fdefc50e8f40efb9bvboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 893. [func] Removed isc_file_test() and added isc_file_exists()

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync for the basic functionality that was being added

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync with isc_file_test().

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 892. [placeholder]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 891. [bug] Return an error when a SIG(0) signed response to

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync an unsigned query is seen. This should actually

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync do the verification, but it's not currently

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync possible. [RT #1391]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 890. [cleanup] The man pages no longer require the mandoc macros

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync and should now format cleanly using most versions of

b3249da254ed58431673b83fdefc50e8f40efb9bvboxsync nroff, and HTML versions of the man pages have been

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync added. Both are generated from DocBook source.

b3249da254ed58431673b83fdefc50e8f40efb9bvboxsync

b3249da254ed58431673b83fdefc50e8f40efb9bvboxsync 889. [port] Eliminated blank lines before .TH in nroff man

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync pages since they cause problems with some versions

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync of nroff. [RT #1390]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 888. [bug] Don't die when using TKEY to delete a nonexistent

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync TSIG key. [RT #1392]

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync 887. [port] Detect broken compilers that can't call static

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync functions from inline functions. [RT #1212]

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync 866. [func] Close debug only file channels when debug is set to

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync zero. [RT #1246]

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync

5e501d9a99709f24f1acf642d70566cd204fc156vboxsync 865. [bug] The new configuration parser did not allow

5e501d9a99709f24f1acf642d70566cd204fc156vboxsync the optional debug level in a "severity debug"

5e501d9a99709f24f1acf642d70566cd204fc156vboxsync clause of a logging channel to be omitted.

5e501d9a99709f24f1acf642d70566cd204fc156vboxsync This is now allowed and treated as "severity

5e501d9a99709f24f1acf642d70566cd204fc156vboxsync debug 1;" like it does in BIND 8.2.4, not as

5e501d9a99709f24f1acf642d70566cd204fc156vboxsync "severity debug 0;" like it did in BIND 9.1.

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync [RT #1367]

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync 864. [cleanup] Multithreading is now enabled by default on

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.

5e501d9a99709f24f1acf642d70566cd204fc156vboxsync

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync 863. [bug] If an error occurred while an outgoing zone transfer

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync was starting up, the server could access a domain

74e03e3bff53d9ff9b266e0a8af97f59d54f4e23vboxsync name that had already been freed when logging a

c6a410393099cc69eadd1e299166c2020f3ed648vboxsync message saying that the transfer was starting.

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync [RT #1383]

c6a410393099cc69eadd1e299166c2020f3ed648vboxsync

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync 862. [bug] Use after realloc(), non portable pointer arithmetic in

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync grmerge().

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync 861. [port] Add support for Mac OS X, by making it equivalent

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync to Darwin. This was derived from the config.guess

30e185f304c70c0fc7538446c4f3b840e76e2590vboxsync file shipped with Mac OS X. [RT #1355]

c6a410393099cc69eadd1e299166c2020f3ed648vboxsync

c6a410393099cc69eadd1e299166c2020f3ed648vboxsync 860. [func] Drop cross class glue in zone transfers.

c6a410393099cc69eadd1e299166c2020f3ed648vboxsync

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync 859. [bug] Cache cleaning now won't swamp the CPU if there

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync is a persistent overlimit condition.

5e501d9a99709f24f1acf642d70566cd204fc156vboxsync

582fa31289b0d5e01ad0020b8cd1e640596a48e0vboxsync 858. [func] isc_mem_setwater() no longer requires that when the

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync callback function is non-NULL then its hi_water

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync argument must be greater than its lo_water argument

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync (they can now be equal) or that they be non-zero.

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync 857. [cleanup] Use ISC_MAGIC() to define all magic numbers for

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync structs, for our friends in EBCDIC-land.

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync 856. [func] Allow partial rdatasets to be returned in answer and

95d93b11104612f4dd9a9aefad24a1a7b7bf82b8vboxsync authority sections to help non-TCP capable clients

cbd1ed83d0cdb2ea0224838309642a9042a25e5fvboxsync recover from truncation. [RT #1301]

16ac7a7560ee6ba89cf330dd2a45436e58f099c8vboxsync

5e501d9a99709f24f1acf642d70566cd204fc156vboxsync 855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.

582fa31289b0d5e01ad0020b8cd1e640596a48e0vboxsync

16ac7a7560ee6ba89cf330dd2a45436e58f099c8vboxsync 854. [bug] The config parser didn't properly handle config

16ac7a7560ee6ba89cf330dd2a45436e58f099c8vboxsync options that were specified in units of time other

16ac7a7560ee6ba89cf330dd2a45436e58f099c8vboxsync than seconds. [RT #1372]

16ac7a7560ee6ba89cf330dd2a45436e58f099c8vboxsync

cbd1ed83d0cdb2ea0224838309642a9042a25e5fvboxsync 853. [bug] configure_view_acl() failed to detach existing acls.

16ac7a7560ee6ba89cf330dd2a45436e58f099c8vboxsync [RT #1374]

16ac7a7560ee6ba89cf330dd2a45436e58f099c8vboxsync

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync 852. [bug] Handle responses from servers which do not know

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync about IXFR.

e1ffd6bf06692ce47c4407230443e27cf5e23e4fvboxsync

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync 851. [cleanup] The obsolete support-ixfr option was not properly

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync ignored.

2c8b2975bc918ebdad3b05f48eb8ab6d81acdb16vboxsync

36545c63b2aab948161e4a712913a4f2dce17d2fvboxsync --- 9.2.0a1 released ---

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync 850. [bug] dns_rbt_findnode() would not find nodes that were

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync split on a bitstring label somewhere other than in

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync the last label of the node. [RT #1351]

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync 849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync 848. [func] A minimum max-cache-size of two megabytes is enforced

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync by the cache cleaner.

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync 847. [func] Added isc_file_test(), which currently only has

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync some very basic functionality to test for the

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync existence of a file, whether a pathname is absolute,

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync or whether a pathname is the fundamental representation

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync of the current directory. It is intended that this

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync function can be expanded to test other things a

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync programmer might want to know about a file.

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync 846. [func] A non-zero 'param' to dst_key_generate() when making an

2d78e2bd57565852e5f9c7d2c9cbf93b66a883edvboxsync hmac-md5 key means that good entropy is not required.

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync

2d78e2bd57565852e5f9c7d2c9cbf93b66a883edvboxsync 845. [bug] The access rights on the public file of a symmetric

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync key are now restricted as soon as the file is opened,

2d78e2bd57565852e5f9c7d2c9cbf93b66a883edvboxsync rather than after it has been written and closed.

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync 844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,

e009c4337a160bcb2a46d7ec828d0016bf5627c5vboxsync just as <lwres/net.h> does.

e009c4337a160bcb2a46d7ec828d0016bf5627c5vboxsync

e009c4337a160bcb2a46d7ec828d0016bf5627c5vboxsync 843. [func] If no controls statement is present in named.conf,

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync or if any inet phrase of a controls statement is

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync lacking a keys clause, then a key will be automatically

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync generated by named and an rndc.conf-style file

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync named named.key will be written that uses it. rndc

e009c4337a160bcb2a46d7ec828d0016bf5627c5vboxsync will use this file only if its normal configuration

e009c4337a160bcb2a46d7ec828d0016bf5627c5vboxsync file, or one provided on the command line, does not

e009c4337a160bcb2a46d7ec828d0016bf5627c5vboxsync exist.

35dc60b8bbc1a1a0ba91adc45086a48f36074eb9vboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 842. [func] 'rndc flush' now takes an optional view.

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync

3f73885da42823340af2ff7325a7784ef76fc2d6vboxsync 841. [bug] When sdb modules were not declared threadsafe, their

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync create and destroy functions were not serialized.

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

3f73885da42823340af2ff7325a7784ef76fc2d6vboxsync 840. [bug] The config file parser could print the wrong file

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync name if an error was detected after an included file

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync was parsed. [RT #1353]

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 839. [func] Dump packets for which there was no view or that the

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync class could not be determined to category "unmatched".

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync 838. [port] UnixWare 7.x.x is now suported by

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync bin/tests/system/ifconfig.sh.

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync

a49ccafde5d2acf9c0724d52d47f623f450ab16evboxsync 837. [cleanup] Multithreading is now enabled by default only on

4a7a0d68cae413e6f422d597644c16681f475bdavboxsync OSF1, Solaris 2.7 and newer, and AIX.

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync 836. [func] Upgraded libtool to 1.4.

1b7827da81c597b5724c3501db7a57383f7541ebvboxsync

967ea84c07a4d8a8d89fb846efc0dd5a523d5a85vboxsync 835. [bug] The dispatcher could enter a busy loop if

16afd2d976f255ed0b7b443770e4fa93fb4847d1vboxsync it got an I/O error receiving on a UDP socket.

35dc60b8bbc1a1a0ba91adc45086a48f36074eb9vboxsync [RT #1293]

1f18f40330c7443e780ac62583dcd634b21321b9vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 834. [func] Accept (but warn about) master files beginning with

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync an SOA record without an explicit TTL field and

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync lacking a $TTL directive, by using the SOA MINTTL

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync as a default TTL. This is for backwards compatibility

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync with old versions of BIND 8, which accepted such

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync files without warning although they are illegal

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync according to RFC1035.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync <dns/soa.h>, and extended them to support

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync all the integer-valued fields of the SOA RR.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 832. [bug] The default location for named.conf in named-checkconf

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync should depend on --sysconfdir like it does in named.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync [RT #1258]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 831. [placeholder]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 830. [func] Implement 'rndc status'.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 829. [bug] The DNS_R_ZONECUT result code should only be returned

1f18f40330c7443e780ac62583dcd634b21321b9vboxsync when an ANY query is made with DNS_DBFIND_GLUEOK set.

1f18f40330c7443e780ac62583dcd634b21321b9vboxsync In all other ANY query cases, returning the delegation

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync is better.

35dc60b8bbc1a1a0ba91adc45086a48f36074eb9vboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 828. [bug] The errno value from recvfrom() could be overwritten

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync by logging code. [RT #1293]

7b601f6c4b83b7e3a0f58a62b198352048c6f7c3vboxsync

7b601f6c4b83b7e3a0f58a62b198352048c6f7c3vboxsync 827. [bug] When an IXFR protocol error occurs, the slave

7b601f6c4b83b7e3a0f58a62b198352048c6f7c3vboxsync should retry with AXFR.

7b601f6c4b83b7e3a0f58a62b198352048c6f7c3vboxsync

7b601f6c4b83b7e3a0f58a62b198352048c6f7c3vboxsync 826. [bug] Some IXFR protocol errors were not detected.

878731e72e401b7e2a0434e5ab36ca633c7f2586vboxsync

878731e72e401b7e2a0434e5ab36ca633c7f2586vboxsync 825. [bug] zone.c:ns_query() detached from the wrong zone

878731e72e401b7e2a0434e5ab36ca633c7f2586vboxsync reference. [RT #1264]

7b601f6c4b83b7e3a0f58a62b198352048c6f7c3vboxsync

7b601f6c4b83b7e3a0f58a62b198352048c6f7c3vboxsync 824. [bug] Correct line numbers reported by dns_master_load().

6790bfa163a2b9f89bb950cefaab3e1d8fa4ddc2vboxsync [RT #1263]

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync 823. [func] The output of "dig -h" now goes to stdout so that it

35dc60b8bbc1a1a0ba91adc45086a48f36074eb9vboxsync can easily be piped through "more". [RT #1254]

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync 822. [bug] Sending nxrrset prerequisites would crash nsupdate.

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync [RT #1248]

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync 821. [bug] The program name used when logging to syslog should

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync be stripped of leading path components.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync [RT #1178, #1232]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 820. [bug] Name server address lookups failed to follow

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync A6 chains into the glue of local authoritative

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync zones.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 819. [bug] In certain cases, the resolver's attempts to

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync restart an address lookup at the root could cause

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync the fetch to deadlock (with itself) instead of

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync restarting. [RT #1225]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 818. [bug] Certain pathological responses to ANY queries could

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync cause an assertion failure. [RT #1218]

c58a0c1fbc7df7eb18e7dfb7a14b7272ac0e2735vboxsync

35dc60b8bbc1a1a0ba91adc45086a48f36074eb9vboxsync 817. [func] Adjust timeouts for dialup zone queries.

35dc60b8bbc1a1a0ba91adc45086a48f36074eb9vboxsync

85beaadc71c449082807e164ca79654766b9f00avboxsync 816. [bug] Report potential problems with log file accessibility

85beaadc71c449082807e164ca79654766b9f00avboxsync at configuration time, since such problems can't

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync reliably be reported at the time they actually occur.

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 815. [bug] If a log file was specified with a path separator

85beaadc71c449082807e164ca79654766b9f00avboxsync character (i.e. "/") in its name and the directory

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync did not exist, the log file's name was treated as

1910146bc46e3eee5b8668806da594107fe9aabfvboxsync though it were the directory name. [RT #1189]

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync 814. [bug] Socket objects left over from accept() failures

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync were incorrectly destroyed, causing corruption

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync of socket manager data structures.

2d78e2bd57565852e5f9c7d2c9cbf93b66a883edvboxsync

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync 813. [bug] File descriptors exceeding FD_SETSIZE were handled

2d78e2bd57565852e5f9c7d2c9cbf93b66a883edvboxsync badly. [RT #1192]

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync

2d78e2bd57565852e5f9c7d2c9cbf93b66a883edvboxsync 812. [bug] dig sometimes printed incomplete IXFR responses

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync due to an uninitialized variable. [RT #1188]

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync 811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync

c7769c4b7e84511fcc4a12a85a04dd7fbfd82b46vboxsync 810. [bug] The signer name in SIG records was not properly

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync downcased when signing/verifying records. [RT #1186]

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync 809. [bug] Configuring a non-local address as a transfer-source

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync could cause an assertion failure during load.

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync 808. [func] Add 'rndc flush' to flush the server's cache.

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync 807. [bug] When setting up TCP connections for incoming zone

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync transfers, the transfer-source port was not

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync ignored like it should be.

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync

e1ffd6bf06692ce47c4407230443e27cf5e23e4fvboxsync 806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up

2c8b2975bc918ebdad3b05f48eb8ab6d81acdb16vboxsync the calling stack to the zone maintence level, causing

36545c63b2aab948161e4a712913a4f2dce17d2fvboxsync zones to not reload when an included file was touched

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync but the top-level zone file was not.

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync

09b922eeb0ae1c4edae2d8f20748d498d5449c4fvboxsync 805. [bug] When using "forward only", missing root hints should

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync not cause queries to fail. [RT #1143]

636c1d4a4a3c99faa799d834c46ef21923302da6vboxsync

85beaadc71c449082807e164ca79654766b9f00avboxsync 804. [bug] Attempting to obtain entropy could fail in some

85beaadc71c449082807e164ca79654766b9f00avboxsync situations. This would be most common on systems

85beaadc71c449082807e164ca79654766b9f00avboxsync with user-space threads. [RT #1131]

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync 803. [bug] Treat all SIG queries as if they have the CD bit set,

415231e3d92803e456ccf833f1cf467e8cd5fe95vboxsync otherwise no data will be returned [RT #749]

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync 802. [bug] DNSSEC key tags were computed incorrectly in almost

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync all cases. [RT #1146]

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync 801. [bug] nsupdate should treat lines beginning with ';' as

85beaadc71c449082807e164ca79654766b9f00avboxsync comments. [RT #1139]

9f72be0517ae135bdd3e6ee140d3321b40aeb6e7vboxsync

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync 800. [bug] dnssec-signzone produced incorrect statistics for

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync large zones. [RT #1133]

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync 799. [bug] The ADB didn't find AAAA glue in a zone unless A6

1d0bea51095c7a2f93857174884b4484ea0fcac7vboxsync glue was also present.

85beaadc71c449082807e164ca79654766b9f00avboxsync

85beaadc71c449082807e164ca79654766b9f00avboxsync 798. [bug] nsupdate should be able to reject bad input lines

85beaadc71c449082807e164ca79654766b9f00avboxsync and continue. [RT #1130]

85beaadc71c449082807e164ca79654766b9f00avboxsync

85beaadc71c449082807e164ca79654766b9f00avboxsync 797. [func] Issue a warning if the 'directory' option contains

af62929dce3cc5e14c75438cd2b893f82ae6dbc8vboxsync a relative path. [RT #269]

796. [func] When a size limit is associated with a log file,

only roll it when the size is reached, not every

time the log file is opened. [RT #1096]

795. [func] Add the +multiline option to dig. [RT #1095]

794. [func] Implement the "port" and "default-port" statements

in rndc.conf.

793. [cleanup] The DNSSEC tools could create filenames that were

illegal or contained shell metacharacters. They

now use a different text encoding of names that

doesn't have these problems. [RT #1101]

792. [cleanup] Replace the OMAPI command channel protocol with a

simpler one.

791. [bug] The command channel now works over IPv6.

790. [bug] Wildcards created using dynamic update or IXFR

could fail to match. [RT #1111]

789. [bug] The "localhost" and "localnets" ACLs did not match

when used as the second element of a two-element

sortlist item.

788. [func] Add the "match-mapped-addresses" option, which

causes IPv6 v4mapped addresses to be treated as

IPv4 addresses for the purpose of acl matching.

787. [bug] The DNSSEC tools failed to downcase domain

names when mapping them into file names.

786. [bug] When DNSSEC signing/verifying data, owner names were

not properly downcased.

785. [bug] A race condition in the resolver could cause

an assertion failure. [RT #673, #872, #1048]

784. [bug] nsupdate and other programs would not quit properly

if some signals were blocked by the caller. [RT #1081]

783. [bug] Following CNAMEs could cause an assertion failure

when either using an sdb database or under very

rare conditions.

782. [func] Implement the "serial-query-rate" option.

781. [func] Avoid error packet loops by dropping duplicate FORMERR

responses. [RT #1006]

780. [bug] Error handling code dealing with out of memory or

other rare errors could lead to assertion failures

by calling functions on unitialized names. [RT #1065]

779. [func] Added the "minimal-responses" option.

778. [bug] When starting cache cleaning, cleaning_timer_action()

returned without first pausing the iterator, which

could cause deadlock. [RT #998]

777. [bug] An empty forwarders list in a zone failed to override

global forwarders. [RT #995]

776. [func] Improved error reporting in denied messages. [RT #252]

775. [placeholder]

774. [func] max-cache-size is implemented.

773. [func] Added isc_rwlock_trylock() to attempt to lock without

blocking.

772. [bug] Owner names could be incorrectly omitted from cache

dumps in the presence of negative caching entries.

[RT #991]

771. [cleanup] TSIG errors related to unsynchronized clocks

are logged better. [RT #919]

770. [func] Add the "edns yes_or_no" statement to the server

clause. [RT #524]

769. [func] Improved error reporting when parsing rdata. [RT #740]

768. [bug] The server did not emit an SOA when a CNAME

or DNAME chain ended in NXDOMAIN in an

authoritative zone.

767. [placeholder]

766. [bug] A few cases in query_find() could leak fname.

This would trigger the mpctx->allocated == 0

assertion when the server exited.

[RT #739, #776, #798, #812, #818, #821, #845,

#892, #935, #966]

765. [func] ACL names are once again case insensitive, like

in BIND 8. [RT #252]

764. [func] Configuration files now allow "include" directives

in more places, such as inside the "view" statement.

[RT #377, #728, #860]

763. [func] Configuration files no longer have reserved words.

[RT #731, #753]

762. [cleanup] The named.conf and rndc.conf file parsers have

been completely rewritten.

761. [bug] _REENTRANT was still defined when building with

--disable-threads.

760. [contrib] Significant enhancements to the pgsql sdb driver.

759. [bug] The resolver didn't turn off "avoid fetches" mode

when restarting, possibly causing resolution

to fail when it should not. This bug only affected

platforms which support both IPv4 and IPv6. [RT #927]

758. [bug] The "avoid fetches" code did not treat negative

cache entries correctly, causing fetches that would

be useful to be avoided. This bug only affected

platforms which support both IPv4 and IPv6. [RT #927]

757. [func] Log zone transfers.

756. [bug] dns_zone_load() could "return" success when no master

file was configured.

755. [bug] Fix incorrectly formatted log messages in zone.c.

754. [bug] Certain failure conditions sending UDP packets

could cause the server to retry the transmission

indefinitely. [RT #902]

753. [bug] dig, host, and nslookup would fail to contact a

remote server if getaddrinfo() returned an IPv6

address on a system that doesn't support IPv6.

[RT #917]

752. [func] Correct bad tv_usec elements returned by

gettimeofday().

751. [func] Log successful zone loads / transfers. [RT #898]

750. [bug] A query should not match a DNAME whose trust level

is pending. [RT #916]

749. [bug] When a query matched a DNAME in a secure zone, the

server did not return the signature of the DNAME.

[RT #915]

748. [doc] List supported RFCs in doc/misc/rfc-compliance.

[RT #781]

747. [bug] The code to determine whether an IXFR was possible

did not properly check for a database that could

not have a journal. [RT #865, #908]

746. [bug] The sdb didn't clone rdatasets properly, causing

a crash when the server followed delegations. [RT #905]

745. [func] Report the owner name of records that fail

semantic checks while loading.

744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the

result of an ANY or SIG query, the resolver failed

to setup the return event's rdatasets, causing an

assertion failure in the query code. [RT #881]

743. [bug] Receiving a large number of certain malformed

answers could cause named to stop responding.

[RT #861]

742. [placeholder]

741. [port] Support openssl-engine. [RT #709]

740. [port] Handle openssl library mismatches slightly better.

739. [port] Look for /dev/random in configure, rather than

assuming it will be there for only a predefined

set of OSes.

738. [bug] If a non-threadsafe sdb driver supported AXFR and

received an AXFR request, it would deadlock or die

with an assertion failure. [RT #852]

737. [port] stdtime.c failed to compile on certain platforms.

736. [func] New functions isc_task_{begin,end}exclusive().

735. [doc] Add BIND 4 migration notes.

734. [bug] An attempt to re-lock the zone lock could occur if

the server was shutdown during a zone tranfer.

[RT #830]

733. [bug] Reference counts of dns_acl_t objects need to be

locked but were not. [RT #801, #821]

732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]

731. [bug] Certain zone errors could cause named-checkzone to

fail ungracefully. [RT #819]

730. [bug] lwres_getaddrinfo() returns the correct result when

it fails to contact a server. [RT #768]

729. [port] pthread_setconcurrency() needs to be called on Solaris.

728. [bug] Fix comment processing on master file directives.

[RT# 757]

727. [port] Work around OS bug where accept() succeeds but

fails to fill in the peer address of the accepted

connection, by treating it as an error rather than

an assertion failure. [RT #809]

726. [func] Implement the "trace" and "notrace" commands in rndc.

725. [bug] Installing man pages could fail.

724. [func] New libisc functions isc_netaddr_any(),

isc_netaddr_any6().

723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver

to return DNS_R_SERVFAIL. [RT #783]

722. [func] Allow incremental loads to be canceled.

721. [cleanup] Load manager and dns_master_loadfilequota() are no

more.

720. [bug] Server could enter infinite loop in

dispatch.c:do_cancel(). [RT #733]

719. [bug] Rapid reloads could trigger an assertion failure.

[RT #743, #763]

718. [cleanup] "internal" is no longer a reserved word in named.conf.

[RT #753, #731]

717. [bug] Certain TKEY processing failure modes could

reference an uninitialized variable, causing the

server to crash. [RT #750]

716. [bug] The first line of a $INCLUDE master file was lost if

an origin was specified. [RT #744]

715. [bug] Resolving some A6 chains could cause an assertion

failure in adb.c. [RT #738]

714. [bug] Preserve interval timers across reloads unless changed.

[RT# 729]

713. [func] named-checkconf takes '-t directory' similar to named.

[RT #726]

712. [bug] Sending a large signed update message caused an

assertion failure. [RT #718]

711. [bug] The libisc and liblwres implementations of

inet_ntop contained an off by one error.

710. [func] The forwarders statement now takes an optional

port. [RT #418]

709. [bug] ANY or SIG queries for data with a TTL of 0

would return SERVFAIL. [RT #620]

708. [bug] When building with --with-openssl, the openssl headers

included with BIND 9 should not be used. [RT #702]

707. [func] The "filename" argument to named-checkzone is no

longer optional, to reduce confusion. [RT #612]

706. [bug] Zones with an explicit "allow-update { none; };"

were considered dynamic and therefore not reloaded

on SIGHUP or "rndc reload".

705. [port] Work out resource limit type for use where rlim_t is

not available. [RT #695]

704. [port] RLIMIT_NOFILE is not available on all platforms.

[RT #695]

703. [port] sys/select.h is needed on older platforms. [RT #695]

702. [func] If the address 0.0.0.0 is seen in resolv.conf,

use 127.0.0.1 instead. [RT #693]

701. [func] Root hints are now fully optional. Class IN

views use compiled-in hints by default, as

before. Non-IN views with no root hints now

provide authoritative service but not recursion.

A warning is logged if a view has neither root

hints nor authoritative data for the root. [RT #696]

700. [bug] $GENERATE range check was wrong. [RT #688]

699. [bug] The lexer mishandled empty quoted strings. [RT #694]

698. [bug] Aborting nsupdate with ^C would lead to several

race conditions.

697. [bug] nsupdate was not compatible with the undocumented

BIND 8 behavior of ignoring TTLs in "update delete"

commands. [RT #693]

696. [bug] lwresd would die with an assertion failure when passed

a zero-length name. [RT #692]

695. [bug] If the resolver attempted to query a blackholed or

bogus server, the resolution would fail immediately.

694. [bug] $GENERATE did not produce the last entry.

[RT #682, #683]

693. [bug] An empty lwres statement in named.conf caused

the server to crash while loading.

692. [bug] Deal with systems that have getaddrinfo() but not

gai_strerror(). [RT #679]

691. [bug] Configuring per-view forwarders caused an assertion

failure. [RT #675, #734]

690. [func] $GENERATE now supports DNAME. [RT #654]

689. [doc] man pages are now installed. [RT #210]

688. [func] "make tags" now works on systems with the

"Exuberant Ctags" etags.

687. [bug] Only say we have IPv6, with sufficent functionality,

if it has actually been tested. [RT #586]

686. [bug] dig and nslookup can now be properly aborted during

blocking operations. [RT #568]

685. [bug] nslookup should use the search list/domain options

from resolv.conf by default. [RT #405, #630]

684. [bug] Memory leak with view forwarders. [RT #656]

683. [bug] File descriptor leak in isc_lex_openfile().

682. [bug] nslookup displayed SOA records incorrectly. [RT #665]

681. [bug] $GENERATE specifying output format was broken. [RT #653]

680. [bug] dns_rdata_fromstruct() mishandled options bigger

than 255 octets.

679. [bug] $INCLUDE could leak memory and file descriptors on

reload. [RT #639]

678. [bug] "transfer-format one-answer;" could trigger an assertion

failure. [RT #646]

677. [bug] dnssec-signzone would occasionally use the wrong ttl

for database operations and fail. [RT #643]

676. [bug] Log messages about lame servers to category

'lame-servers' rather than 'resolver', so as not

to be gratuitously incompatible with BIND 8.

675. [bug] TKEY queries could cause the server to leak

memory.

674. [func] Allow messages to be TSIG signed / verified using

a offset from the current time.

673. [func] The server can now convert RFC1886-style recursive

lookup requests into RFC2874-style lookups, when

enabled using the new option "allow-v6-synthesis".

672. [bug] The wrong time was in the "time signed" field when

replying with BADTIME error.

671. [bug] The message code was failing to parse a message with

no question section and a TSIG record. [RT #628]

670. [bug] The lwres replacements for getaddrinfo and

getipnodebyname didn't properly check for the

existence of the sockaddr sa_len field.

669. [bug] dnssec-keygen now makes the public key file

non-world-readable for symmetric keys. [RT #403]

668. [func] named-checkzone now reports multiple errors in master

files.

667. [bug] On Linux, running named with the -u option and a

non-world-readable configuration file didn't work.

[RT #626]

666. [bug] If a request sent by dig is longer than 512 bytes,

use TCP.

665. [bug] Signed responses were not sent when the size of the

TSIG + question exceeded the maximum message size.

[RT #628]

664. [bug] The t_tasks and t_timers module tests are now skipped

when building without threads, since they require

threads.

663. [func] Accept a size_spec, not just an integer, in the

(unimplemented and ignored) max-ixfr-log-size option

for compatibility with recent versions of BIND 8.

[RT #613]

662. [bug] dns_rdata_fromtext() failed to log certain errors.

661. [bug] Certain UDP IXFR requests caused an assertion failure

(mpctx->allocated == 0). [RT #355, #394, #623]

660. [port] Detect multiple CPUs on HP-UX and IRIX.

659. [performance] Rewrite the name compression code to be much faster.

658. [cleanup] Remove all vestiges of 16 bit global compression.

657. [bug] When a listen-on statement in an lwres block does not

specify a port, use 921, not 53. Also update the

listen-on documentation. [RT #616]

656. [func] Treat an unescaped newline in a quoted string as

an error. This means that TXT records with missing

close quotes should have meaningful errors printed.

655. [bug] Improve error reporting on unexpected eof when loading

zones. [RT #611]

654. [bug] Origin was being forgotten in TCP retries in dig.

[RT #574]

653. [bug] +defname option in dig was reversed in sense.

[RT #549]

652. [bug] zone_saveunique() did not report the new name.

651. [func] The AD bit in responses now has the meaning

specified in <draft-ietf-dnsext-ad-is-secure>.

650. [bug] SIG(0) records were being generated and verified

incorrectly. [RT #606]

649. [bug] It was possible to join to an already running fctx

after it had "cloned" its events, but before it sent

them. In this case, the event of the newly joined

fetch would not contain the answer, and would

trigger the INSIST() in fctx_sendevents(). In

BIND 9.0, this bug did not trigger an INSIST(), but

caused the fetch to fail with a SERVFAIL result.

[RT #588, #597, #605, #607]

648. [port] Add support for pre-RFC2133 IPv6 implementations.

647. [bug] Resolver queries sent after following multiple

referrals had excessively long retransmission

timeouts due to incorrectly counting the referrals

as "restarts".

646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h

didn't _cleanly_ fix the problem it was trying to fix.

645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]

644. [bug] #622 needed more work. [RT #562]

643. [bug] xfrin error messages made more verbose, added class

of the zone. [RT# 599]

642. [bug] Break the exit_check() race in the zone module.

[RT #598]

--- 9.1.0b2 released ---

641. [bug] $GENERATE caused a uninitialized link to be used.

[RT #595]

640. [bug] Memory leak in error path could cause

"mpctx->allocated == 0" failure. [RT #584]

639. [bug] Reading entropy from the keyboard would sometimes fail.

[RT #591]

638. [port] lib/isc/random.c needed to explicitly include time.h

to get a prototype for time() when pthreads was not

being used. [RT #592]

637. [port] Use isc_u?int64_t instead of (unsigned) long long in

lib/isc/print.c. Also allow lib/isc/print.c to

be compiled even if the platform does not need it.

[RT #592]

636. [port] Shut up MSVC++ about a possible loss of precision

in the ISC__BUFFER_PUTUINT*() macros. [RT #592]

635. [bug] Reloading a server with a configured blackhole list

would cause an assertion. [RT #590]

634. [bug] A log file will completely stop being written when

it reaches the maximum size in all cases, not just

when versioning is also enabled. [RT #570]

633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]

632. [bug] The index array of the journal file was

corrupted as it was written to disk.

631. [port] Build without thread support on systems without

pthreads.

630. [bug] Locking failure in zone code. [RT #582]

629. [bug] 9.1.0b1 dereferenced a null pointer and crashed

when responding to a UDP IXFR request.

628. [bug] If the root hints contained only AAAA addresses,

named would be unable to perform resolution.

627. [bug] The EDNS0 blackhole detection code of change 324

waited for three retransmissions to each server,

which takes much too long when a domain has many

name servers and all of them drop EDNS0 queries.

Now we retry without EDNS0 after three consecutive

timeouts, even if they are all from different

servers. [RT #143]

626. [bug] The lightweight resolver daemon no longer crashes

when asked for a SIG rrset. [RT #558]

625. [func] Zones now inherit their class from the enclosing view.

624. [bug] The zone object could get timer events after it had

been destroyed, causing a server crash. [RT #571]

623. [func] Added "named-checkconf" and "named-checkzone" program

for syntax checking named.conf files and zone files,

respectively.

622. [bug] A canceled request could be destroyed before

dns_request_destroy() was called. [RT #562]

621. [port] Disable IPv6 at runtime if IPv6 sockets are unusable.

This mostly affects Red Hat Linux 7.0, which has

conflicts between libc and the kernel.

620. [bug] dns_master_load*inc() now require 'task' and 'load'

to be non-null. Also 'done' will not be called if

dns_master_load*inc() fails immediately. [RT #565]

618. [bug] Queries to a signed zone could sometimes cause

an assertion failure.

617. [bug] When using dynamic update to add a new RR to an

existing RRset with a different TTL, the journal

entries generated from the update did not include

explicit deletions and re-additions of the existing

RRs to update their TTL to the new value.

616. [func] dnssec-signzone -t output now includes performance

statistics.

615. [bug] dnssec-signzone did not like child keysets signed

by multiple keys.

614. [bug] Checks for uninitialized link fields were prone

to false positives, causing assertion failures.

The checks are now disabled by default and may

be re-enabled by defining ISC_LIST_CHECKINIT.

613. [bug] "rndc reload zone" now reloads primary zones.

It previously only updated slave and stub zones,

if an SOA query indicated an out of date serial.

612. [cleanup] Shutup a ridiculously noisy HP-UX compiler that

complains relentlessly about how its treatment

of 'const' has changed as well as how casting

sometimes tightens alignment constraints.

611. [func] allow-notify can be used to permit processing of

notify messages from hosts other than a slave's

masters.

610. [func] rndc dumpdb is now supported.

609. [bug] getrrsetbyname() would crash lwresd if the server

found more SIGs than answers. [RT #554]

608. [func] dnssec-signzone now adds a comment to the zone

with the time the file was signed.

607. [bug] nsupdate would fail if it encountered a CNAME or

DNAME in a response to an SOA query. [RT #515]

606. [bug] Compiling with --disable-threads failed due

to isc_thread_self() being incorrectly defined

as an integer rather than a function.

605. [func] New function isc_lex_getlasttokentext().

604. [bug] The named.conf parser could print incorrect line

numbers when long comments were present.

603. [bug] Make dig handle multiple types or classes on the same

query more correctly.

602. [func] Cope automatically with UnixWare's broken

IN6_IS_ADDR_* macros. [RT #539]

601. [func] Return a non-zero exit code if an update fails

in nsupdate.

600. [bug] Reverse lookups sometimes failed in dig, etc...

599. [func] Added four new functions to the libisc log API to

support i18n messages. isc_log_iwrite(),

isc_log_ivwrite(), isc_log_iwrite1() and

isc_log_ivwrite1() were added.

598. [bug] An update-policy statement would cause the server

to assert while loading. [RT #536]

597. [func] dnssec-signzone is now multithreaded.

596. [bug] DNS_RDATASLAB_FORCE and DNS_RDATASLAB_EXACT are

not mutually exclusive.

595. [port] On Linux 2.2, socket() returns EINVAL when it

should return EAFNOSUPPORT. Work around this.

[RT #531]

594. [func] sdb drivers are now assumed to not be thread-safe

unless the DNS_SDBFLAG_THREADSAFE flag is supplied.

593. [bug] If a secure zone was missing all its NXTs and

a dynamic update was attempted, the server entered

an infinite loop.

592. [bug] The sig-validity-interval option now specifies a

number of days, not seconds. This matches the

documentation. [RT #529]

--- 9.1.0b1 released ---

591. [bug] Work around non-reentrancy in openssl by disabling

precomputation in keys.

590. [doc] There are now man pages for the lwres library in

doc/man/lwres.

589. [bug] The server could deadlock if a zone was updated

while being transferred out.

588. [bug] ctx->in_use was not being correctly initalised when

when pushing a file for $INCLUDE. [RT #523]

587. [func] A warning is now printed if the "allow-update"

option allows updates based on the source IP

address, to alert users to the fact that this

is insecure and becoming increasingly so as

servers capable of update forwarding are being

deployed.

586. [bug] multiple views with the same name were fatal. [RT #516]

585. [func] dns_db_addrdataset() and and dns_rdataslab_merge()

now support 'exact' additions in a similar manner to

dns_db_subtractrdataset() and dns_rdataslab_subtract().

584. [func] You can now say 'notify explicit'; to suppress

notification of the servers listed in NS records

and notify only those servers listed in the

'also-notify' option.

583. [func] "rndc querylog" will now toggle logging of

queries, like "ndc querylog" in BIND 8.

582. [bug] dns_zone_idetach() failed to lock the zone.

[RT #199, #463]

581. [bug] log severity was not being correctly processed.

[RT #485]

580. [func] Ignore trailing garbage on incoming DNS packets,

for interoperability with broken server

implementations. [RT #491]

579. [bug] nsupdate did not take a filename to read update from.

[RT #492]

578. [func] New config option "notify-source", to specify the

source address for notify messages.

577. [func] Log illegal RDATA combinations. e.g. multiple

singlton types, cname and other data.

576. [doc] isc_log_create() description did not match reality.

575. [bug] isc_log_create() was not setting internal state

correctly to reflect the default channels created.

574. [bug] TSIG signed queries sent by the resolver would fail to

have their responses validated and would leak memory.

573. [bug] The journal files of IXFRed slave zones were

inadvertantly discarded on server reload, causing

"journal out of sync with zone" errors on subsequent

reloads. [RT #482]

572. [bug] Quoted strings were not accepted as key names in

address match lists.

571. [bug] It was possible to create an rdataset of singleton

type which had more than one rdata. [RT #154]

[RT #279]

570. [bug] rbtdb.c allowed zones containing nodes which had

both a CNAME and "other data". [RT #154]

569. [func] The DNSSEC AD bit will not be set on queries which

have not requested a DNSSEC response.

568. [func] Add sample simple database drivers in contrib/sdb.

567. [bug] Setting the zone transfer timeout to zero caused an

assertion failure. [RT #302]

566. [func] New public function dns_timer_setidle().

565. [func] Log queries more like BIND 8: query logging is now

done to category "queries", level "info". [RT #169]

564. [func] Add sortlist support to lwresd.

563. [func] New public functions dns_rdatatype_format() and

dns_rdataclass_format(), for convenient formatting

of rdata type/class mnemonics in log messages.

562. [cleanup] Moved lib/dns/*conf.c to bin/named where they belong.

561. [func] The 'datasize', 'stacksize', 'coresize' and 'files'

clauses of the options{} statement are now implemented.

560. [bug] dns_name_split did not properly the resulting prefix

when a maximal length bitstring label was split which

was preceded by another bitstring label. [RT #429]

559. [bug] dns_name_split did not properly create the suffix

when splitting within a maximal length bitstring label.

558. [func] New functions, isc_resource_getlimit and

isc_resource_setlimit.

557. [func] Symbolic constants for libisc integral types.

556. [func] The DNSSEC OK bit in the EDNS extended flags

is now implemented. Responses to queries without

this bit set will not contain any DNSSEC records.

555. [bug] A slave server attempting a zone transfer could

crash with an assertion failure on certain

malformed responses from the master. [RT #457]

554. [bug] In some cases, not all of the dnssec tools were

properly installed.

553. [bug] Incoming zone transfers deferred due to quota

were not started when quota was increased but

only when a transfer in progress finished. [RT #456]

552. [bug] We were not correctly detecting the end of all c-style

comments. [RT #455]

551. [func] Implemented the 'sortlist' option.

550. [func] Support unknown rdata types and classes.

549. [bug] "make" did not immediately abort the build when a

subdirectory make failed [RT #450].

548. [func] The lexer now ungets tokens more correctly.

546. [func] Option 'lame-ttl' is now implemented.

545. [func] Name limit and counting options removed from dig;

they didn't work properly, and cannot be correctly

implemented without significant changes.

544. [func] Add statistics option, enable statistics-file option,

add RNDC option "dump-statistics" to write out a

query statistics file.

543. [doc] The 'port' option is now documented.

542. [func] Add support for update forwarding as required for

full compliance with RFC2136. It is turned off

by default and can be enabled using the

'allow-update-forwarding' option.

541. [func] Add bogus server support.

540. [func] Add dialup support.

539. [func] Support the blackhole option.

538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().

536. [func] Use transfer-source{-v6} when sending refresh queries.

Transfer-source{-v6} now take a optional port

parameter for setting the UDP source port. The port

parameter is ignored for TCP.

535. [func] Use transfer-source{-v6} when forwarding update

requests.

534. [func] Ancestors have been removed from RBT chains. Ancestor

information can be discerned via node parent pointers.

533. [func] Incorporated name hashing into the RBT database to

improve search speed.

532. [func] Implement DNS UPDATE pseudo records using

DNS_RDATA_UPDATE flag.

531. [func] Rdata really should be initalized before being assigned

to (dns_rdata_fromwire(), dns_rdata_fromtext(),

dns_rdata_clone(), dns_rdata_fromregion()),

check that it is.

530. [func] New function dns_rdata_invalidate().

529. [bug] 521 contained a bug which caused zones to always

reload. [RT #410]

528. [func] The ISC_LIST_XXXX macros now perform sanity checks

on their arguements. ISC_LIST_XXXXUNSAFE can be use

to skip the checks however use with caution.

527. [func] New function dns_rdata_clone().

526. [bug] nsupdate incorrectly refused to add RRs with a TTL

of 0.

525. [func] New arguments 'options' for dns_db_subtractrdataset(),

and 'flags' for dns_rdataslab_subtract() allowing you

to request that the RR's must exist prior to deletion.

DNS_R_NOTEXACT is returned if the condition is not met.

524. [func] The 'forward' and 'forwarders' statement in

non-forward zones should work now.

523. [doc] The source to the Administrator Reference Manual is

now an XML file using the DocBook DTD, and is included

in the distribution. The plain text version of the

ARM is temporarily unavailable while we figure out

how to generate readable plain text from the XML.

522. [func] The lightweight resolver daemon can now use

a real configuration file, and its functionality

can be provided by a name server. Also, the -p and -P

options to lwresd have been reversed.

521. [bug] Detect master files which contain $INCLUDE and always

reload. [RT #196]

520. [bug] Upgraded libtool to 1.3.5, which makes shared

library builds almost work on AIX (and possibly

others).

519. [bug] dns_name_split() would improperly split some bitstring

labels, zeroing a few of the least signficant bits in

the prefix part. When such an improperly created

prefix was returned to the RBT database, the bogus

label was dutifully stored, corrupting the tree.

[RT #369]

518. [bug] The resolver did not realize that a DNAME which was

"the answer" to the client's query was "the answer",

and such queries would fail. [RT #399]

517. [bug] The resolver's DNAME code would trigger an assertion

if there was more than one DNAME in the chain.

[RT #399]

516. [bug] Cache lookups which had a NULL node pointer, e.g.

those by dns_view_find(), and which would match a

DNAME, would trigger an INSIST(!search.need_cleanup)

assertion. [RT #399]

515. [bug] The ssu table was not being attached / detached

by dns_zone_[sg]etssutable. [RT#397]

514. [func] Retry refresh and notify queries if they timeout.

[RT #388]

513. [func] New functionality added to rdnc and server to allow

individual zones to be refreshed or reloaded.

512. [bug] The zone transfer code could throw an execption with

an invalid IXFR stream.

511. [bug] The message code could throw an assertion on an

out of memory failure. [RT #392]

510. [bug] Remove spurious view notify warning. [RT #376]

509. [func] Add support for write of zone files on shutdown.

508. [func] dns_message_parse() can now do a best-effort

attempt, which should allow dig to print more invalid

messages.

507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()

and dns_view_flushanddetach().

506. [func] Do not fail to start on errors in zone files.

505. [bug] nsupdate was printing "unknown result code". [RT #373]

504. [bug] The zone was not being marked as dirty when updated via

IXFR.

503. [bug] dumptime was not being set along with

DNS_ZONEFLG_NEEDDUMP.

502. [func] On a SERVFAIL reply, DiG will now try the next server

in the list, unless the +fail option is specified.

501. [bug] Incorrect port numbers were being displayed by

nslookup. [RT #352]

500. [func] Nearly useless +details option removed from DiG.

499. [func] In DiG, specifying a class with -c or type with -t

changes command-line parsing so that classes and

types are only recognized if following -c or -t.

This allows hosts with the same name as a class or

type to be looked up.

498. [doc] There is now a man page for "dig"

in doc/man/bin/dig.1.

497. [bug] The error messages printed when an IP match list

contained a network address with a nonzero host

part where not sufficiently detailed. [RT #365]

496. [bug] named didn't sanity check numeric parameters. [RT #361]

495. [bug] nsupdate was unable to handle large records. [RT #368]

494. [func] Do not cache NXDOMAIN responses for SOA queries.

493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses

for SOA queries. This makes it easier to locate

the containing zone without polluting intermediate

caches.

492. [bug] attempting to reload a zone caused the server fail

to shutdown cleanly. [RT #360]

491. [bug] nsupdate would segfault when sending certain

prerequisites with empty RDATA. [RT #356]

490. [func] When a slave/stub zone has not yet successfully

obtained an SOA containing the zone's configured

retry time, perform the SOA query retries using

exponential backoff. [RT #337]

489. [func] The zone manager now has a "i/o" queue.

488. [bug] Locks weren't properly destroyed in some cases.

487. [port] flockfile() is not defined on all systems.

486. [bug] nslookup: "set all" and "server" commands showed

the incorrect port number if a port other than 53

was specified. [RT #352]

485. [func] When dig had more than one server to query, it would

send all of the messages at the same time. Add

rate limiting of the transmitted messages.

484. [bug] When the server was reloaded after removing addresses

from the named.conf "listen-on" statement, sockets

were still listening on the removed addresses due

to reference count loops. [RT #325]

483. [bug] nslookup: "set all" showed a "search" option but it

was not settable.

482. [bug] nslookup: a plain "server" or "lserver" should be

treated as a lookup.

481. [bug] nslookup:get_next_command() stack size could exceed

per thread limit.

480. [bug] strtok() is not thread safe. [RT #349]

479. [func] The test suite can now be run by typing "make check"

or "make test" at the top level.

478. [bug] "make install" failed if the directory specified with

--prefix did not already exist.

477. [bug] The the isc-config.sh script could be installed before

its directory was created. [RT #324]

476. [bug] A zone could expire while a zone transfer was in

progress triggering a INSIST failure. [RT #329]

475. [bug] query_getzonedb() sometimes returned a non-null version

on failure. This caused assertion failures when

generating query responses where names subject to

additional section processing pointed to a zone

to which access had been denied by means of the

allow-query option. [RT #336]

474. [bug] The mnemonic of the CHAOS class is CH according to

RFC1035, but it was printed and read only as CHAOS.

We now accept both forms as input, and print it

as CH. [RT #305]

473. [bug] nsupdate overran the end of the list of name servers

when no servers could be reached, typically causing

it to print the error message "dns_request_create:

not implemented".

472. [bug] Off-by-one error caused isc_time_add() to sometimes

produce invalid time values.

471. [bug] nsupdate didn't compile on HP/UX 10.20

470. [func] $GENERATE is now supported. See also

doc/misc/migration.

469. [bug] "query-source address * port 53;" now works.

468. [bug] dns_master_load*() failed to report file and line

number in certain error conditions.

467. [bug] dns_master_load*() failed to log an error if

pushfile() failed.

466. [bug] dns_master_load*() could return success when it failed.

465. [cleanup] Allow 0 to be set as an omapi_value_t value by

omapi_value_storeint().

464. [cleanup] Build with openssl's RSA code instead of dnssafe.

463. [bug] nsupdate sent malformed SOA queries to the second

and subsequent name servers in resolv.conf if the

query sent to the first one failed.

462. [bug] --disable-ipv6 should work now.

461. [bug] Specifying an unknown key in the "keys" clause of the

"controls" statement caused a NULL pointer dereference.

[RT #316]

460. [bug] Much of the DNSSEC code only worked with class IN.

459. [bug] Nslookup processed the "set" command incorrectly.

458. [bug] Nslookup didn't properly check class and type values.

[RT #305]

457. [bug] Dig/host/hslookup didn't properly handle connect

timeouts in certain situations, causing an

unnecessary warning message to be printed.

456. [bug] Stub zones were not resetting the refresh and expire

counters, loadtime or clearing the DNS_ZONE_REFRESH

(refresh in progress) flag upon successful update.

This disabled further refreshing of the stub zone,

causing it to eventually expire. [RT #300]

455. [doc] Document IPv4 prefix notation does not require a

dotted decimal quad but may be just dotted decimal.

454. [bug] Enforce dotted decimal and dotted decimal quad where

documented as such in named.conf. [RT #304, RT #311]

453. [bug] Warn if the obsolete option "maintain-ixfr-base"

is specified in named.conf. [RT #306]

452. [bug] Warn if the unimplemented option "statistics-file"

is specified in named.conf. [RT #301]

451. [func] Update forwarding implememted.

450. [func] New function ns_client_sendraw().

449. [bug] isc_bitstring_copy() only works correctly if the

two bitstrings have the same lsb0 value, but this

requirement was not documented, nor was there a

REQUIRE for it.

448. [bug] Host output formatting change, to match v8. [RT #255]

447. [bug] Dig didn't properly retry in TCP mode after

a truncated reply. [RT #277]

446. [bug] Confusing notify log message. [RT #298]

445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0

bitstring triggered a REQUIRE statement. The REQUIRE

statement was incorrect. [RT #297]

444. [func] "recursion denied" messages are always logged at

debug level 1, now, rather than sometimes at ERROR.

This silences these warnings in the usual case, where

some clients set the RD bit in all queries.

443. [bug] When loading a master file failed because of an

unrecognized RR type name, the error message

did not include the file name and line number.

[RT #285]

442. [bug] TSIG signed messages that did not match any view

crashed the server. [RT #290]

441. [bug] Nodes obscured by a DNAME were inaccessible even

when DNS_DBFIND_GLUEOK was set.

440. [func] New function dns_zone_forwardupdate().

439. [func] New function dns_request_createraw().

438. [func] New function dns_message_getrawmessage().

437. [func] Log NOTIFY activity to the notify channel.

436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,

which sometimes happens on Linux, named would enter

a busy loop. Also, unexpected socket errors were

not logged at a high enough logging level to be

useful in diagnosing this situation. [RT #275]

435. [bug] dns_zone_dump() overwrote existing zone files

rather than writing to a temporary file and

renaming. This could lead to empty or partial

zone files being left around in certain error

conditions involving the initial transfer of a

slave zone, interfering with subsequent server

startup. [RT #282]

434. [func] New function isc_file_isabsolute().

433. [func] isc_base64_decodestring() now accepts newlines

within the base64 data. This makes it possible

to break up the key data in a "trusted-keys"

statement into multiple lines. [RT #284]

432. [func] Added refresh/retry jitter. The actual refresh/

retry time is now a random value between 75% and

100% of the configured value.

431. [func] Log at ISC_LOG_INFO when a zone is successfully

loaded.

430. [bug] Rewrote the lightweight resolver client management

code to handle shutdown correctly and general

cleanup.

429. [bug] The space reserved for a TSIG record in a response

was 2 bytes too short, leading to message

generation failures.

428. [bug] rbtdb.c:find_closest_nxt() erroneously returned

DNS_R_BADDB for nodes which had neither NXT nor SIG NXT

(e.g. glue). This could cause SERVFAILs when

generating negative responses in a secure zone.

427. [bug] Avoid going into an infinite loop when the validator

gets a negative response to a key query where the

records are signed by the missing key.

426. [bug] Attempting to generate an oversized RSA key could

cause dnssec-keygen to dump core.

425. [bug] Warn about the auth-nxdomain default value change

if there is no auth-nxdomain statement in the

config file. [RT #287]

424. [bug] notify_createmessage() could trigger an assertion

failure when creating the notify message failed,

e.g. due to corrupt zones with multiple SOA records.

[RT #279]

423. [bug] When responding to a recusive query, errors that occur

after following a CNAME should cause the query to fail.

[RT #274]

422. [func] get rid of isc_random_t, and make isc_random_get()

and isc_random_jitter() use rand() internally

instead of local state. Note that isc_random_*()

functions are only for weak, non-critical "randomness"

such as timing jitter and such.

421. [bug] nslookup would exit when given a blank line as input.

420. [bug] nslookup failed to implement the "exit" command.

419. [bug] The certificate type PKIX was misspelled as SKIX.

418. [bug] At debug levels >= 10, getting an unexpected

socket receive error would crash the server

while trying to log the error message.

417. [func] Add isc_app_block() and isc_app_unblock(), which

allow an application to handle signals while

blocking.

416. [bug] Slave zones with no master file tried to use a

NULL pointer for a journal file name when they

received an IXFR. [RT #273]

415. [bug] The logging code leaked file descriptors.

414. [bug] Server did not shut down until all incoming zone

transfers were finished.

413. [bug] Notify could attempt to use the zone database after

it had been unloaded. [RT#267]

412. [bug] named -v didn't print the version.

411. [bug] A typo in the HS A code caused an assertion failure.

410. [bug] lwres_gethostbyname() and company set lwres_h_errno

to a random value on success.

409. [bug] If named was shut down early in the startup

process, ns_omapi_shutdown() would attempt to lock

an unintialized mutex. [RT #262]

408. [bug] stub zones could leak memory and reference counts if

all the masters were unreachable.

407. [bug] isc_rwlock_lock() would needlessly block

readers when it reached the read quota even

if no writers were waiting.

406. [bug] Log messages were occasionally lost or corrupted

due to a race condition in isc_log_doit().

405. [func] Add support for selective forwarding (forward zones)

404. [bug] The request library didn't completely work with IPv6.

403. [bug] "host" did not use the search list.

402. [bug] Treat undefined acls as errors, rather than

warning and then later throwing an assertion.

[RT #252]

401. [func] Added simple database API.

400. [bug] SIG(0) signing and verifying was done incorrectly.

[RT #249]

399. [bug] When reloading the server with a config file

containing a syntax error, it could catch an

assertion failure trying to perform zone

maintenance on, or sending notifies from,

tentatively created zones whose views were

never fully configured and lacked an address

database and request manager.

398. [bug] "dig" sometimes caught an assertion failure when

using TSIG, depending on the key length.

397. [func] Added utility functions dns_view_gettsig() and

dns_view_getpeertsig().

396. [doc] There is now a man page for "nsupdate"

in doc/man/bin/nsupdate.8.

395. [bug] nslookup printed incorrect RR type mnemonics

for RRs of type >= 21 [RT #237].

394. [bug] Current name was not propagated via $INCLUDE.

393. [func] Initial answer while loading (awl) support.

Entry points: dns_master_loadfileinc(),

dns_master_loadstreaminc(), dns_master_loadbufferinc().

Note: calls to dns_master_load*inc() should be rate

be rate limited so as to not use up all file

descriptors.

392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does

not support the given address family requested.

391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.

390. [func] The function dns_zone_setdbtype() now takes

an argc/argv style vector of words and sets

both the zone database type and its arguments,

making the functions dns_zone_adddbarg()

and dns_zone_cleardbargs() unnecessary.

389. [bug] Attempting to send a reqeust over IPv6 using

dns_request_create() on a system without IPv6

support caused an assertion failure [RT #235].

388. [func] dig and host can now do reverse ipv6 lookups.

387. [func] Add dns_byaddr_createptrname(), which converts

an address into the name used by a PTR query.

386. [bug] Missing strdup() of ACL name caused random

ACL matching failures [RT #228].

385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),

and dns_zt_print().

384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead

of 2147483647.

383. [func] When writing a master file, print the SOA and NS

records (and their SIGs) before other records.

382. [bug] named -u failed on many Linux systems where the

libc provided kernel headers do not match

the current kernel.

381. [bug] Check for IPV6_RECVPKTINFO and use it instead of

IPV6_PKTINFO if found. [RT #229]

380. [bug] nsupdate didn't work with IPv6.

379. [func] New library function isc_sockaddr_anyofpf().

378. [func] named and lwresd will log the command line arguments

they were started with in the "starting ..." message.

377. [bug] When additional data lookups were refused due to

"allow-query", the databases were still being

attached causing reference leaks.

376. [bug] The server should always use good entropy when

performing cryptographic functions needing entropy.

375. [bug] Per-zone "allow-query" did not properly override the

view/global one for CNAME targets and additional

data [RT #220].

374. [bug] SOA in authoritative negative responses had wrong TTL.

373. [func] nslookup is now installed by "make install".

372. [bug] Deal with Microsoft DNS servers appending two bytes of

garbage to zone transfer requests.

371. [bug] At high debug levels, doing an outgoing zone transfer

of a very large RRset could cause an assertion failure

during logging.

370. [bug] The error messages for rollforward failures were

overly terse.

369. [func] Support new named.conf options, view and zone

statements:

max-retry-time, min-retry-time,

max-refresh-time, min-refresh-time.

368. [func] Restructure the internal ".bind" view so that more

zones can be added to it.

367. [bug] Allow proper selection of server on nslookup command

line.

366. [func] Allow use of '-' batch file in dig for stdin.

365. [bug] nsupdate -k leaked memory.

364. [func] Added additional-from-{cache,auth}

362. [bug] rndc no longer aborts if the configuration file is

missing an options statement. [RT #209]

361. [func] When the RBT find or chain functions set the name and

origin for a node that stores the root label

the name is now set to an empty name, instead of ".",

to simplify later use of the name and origin by

dns_name_concatenate(), dns_name_totext() or

dns_name_format().

360. [func] dns_name_totext() and dns_name_format() now allow

an empty name to be passed, which is formatted as "@".

359. [bug] dnssec-signzone occasionally signed glue records.

358. [cleanup] Rename the intermediate files used by the dnssec

programs.

357. [bug] The zone file parser crashed if the argument

to $INCLUDE was a quoted string.

356. [cleanup] isc_task_send no longer requires event->sender to

be non-null.

355. [func] Added isc_dir_createunique(), similar to mkdtemp().

354. [doc] Man pages for the dnssec tools are now included in

the distribution, in doc/man/dnssec.

353. [bug] double increment in lwres/gethost.c:copytobuf().

[RT# 187]

352. [bug] Race condition in dns_client_t startup could cause

an assertion failure.

351. [bug] Constructing a response with rcode SERVFAIL to a TSIG

signed query could crash the server.

350. [bug] Also-notify lists specified in the global options

block were not correctly reference counted, causing

a memory leak.

349. [bug] Processing a query with the CD bit set now works

as expected.

348. [func] New boolean named.conf options 'additional-from-auth'

and 'additional-from-cache' now supported in view and

global options statement.

347. [bug] Don't crash if an argument is left off options in dig.

346. [func] Add support for .digrc config file, in the

user's current directory

345. [bug] Large-scale changes/cleanups to dig:

* Significantly improve structure handling

* Don't pre-load entire batch files

* Add name/rr counting/limiting

* Fix SIGINT handling

* Shorten timeouts to match v8's behavior

344. [bug] When shutting down, lwresd sometimes tried

to shut down its client tasks twice,

triggering an assertion.

343. [bug] Although zone maintenance SOA queries and

notify requests were signed with TSIG keys

when configured for the server in case,

the TSIG was not verified on the response.

342. [bug] The wrong name was being passed to

dns_name_dup() when generating a TSIG

key using TKEY.

341. [func] Support 'key' clause in named.conf zone masters

statement to allow authentication via TSIG keys:

masters {

10.0.0.1 port 5353 key "foo";

10.0.0.2 ;

};

340. [bug] The top-level COPYRIGHT file was missing from

the distribution.

339. [bug] DNSSEC validation of the response to an ANY

query at a name with a CNAME RR in a secure

zone triggered an assertion failure.

338. [bug] lwresd logged to syslog as named, not lwresd.

337. [bug] "dig" did not recognize "nsap-ptr" as an RR type

on the command line.

336. [bug] "dig -f" used 64 k of memory for each line in

the file. It now uses much less, though still

proportionally to the file size.

335. [bug] named would occasionally attempt recursion when

it was disallowed or undesired.

334. [func] Added hmac-md5 to libisc.

333. [bug] The resolver incorrectly accepted referrals to

domains that were not parents of the query name,

causing assertion failures.

332. [func] New function dns_name_reset().

331. [bug] Only log "recursion denied" if RD is set. [RT #178]

330. [bug] Many debugging messages were partially formatted

even when debugging was turned off, causing a

significant decrease in query performance.

329. [func] omapi_auth_register() now takes a size_t argument for

the length of a key's secret data. Previously

OMAPI only stored secrets up to the first NUL byte.

328. [func] Added isc_base64_decodestring().

327. [bug] rndc.conf parser wasn't correctly recognising an IP

address where a host specification was required.