CHANGES revision 28479307225582ad0b2e11441d85fcf5169551d0
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2708. [func] Insecure to secure and NSEC3 parameter changes via
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce update are now fully supported and no longer require
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce defines to enable. We now no longer overload the
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson NSEC3PARAM flag field, nor the NSEC OPT bit at the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce apex. Secure to insecure changes are controlled by
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce by the named.conf option 'secure-to-insecure'.
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson Warning: If you had previously enabled support by
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce adding defines at compile time to BIND 9.6 you should
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson ensure that all changes that are in progress have
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce completed prior to upgrading to BIND 9.7. BIND 9.7
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is not backwards compatible.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2707. [func] dnssec-keyfromlabel no longer require engine name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to be specified in the label if there is a default
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce engine or the -E option has been used. Also, it
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce now uses default algorithms as dnssec-keygen does
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2706. [bug] Loading a zone with a very large NSEC3 salt could
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce trigger an assert. [RT #20368]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2705. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2704. [bug] Serial of dynamic and stub zones could be inconsistent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce with their SOA serial. [RT #19387]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2703. [func] Introduce an OpenSSL "engine" argument with -E
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for all binaries which can take benefit of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce crypto hardware. [RT #20230]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2701. [doc] Correction to ARM: hmac-md5 is no longer the only
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson supported TSIG key algorithm. [RT #18046]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2700. [doc] The match-mapped-addresses option is discouraged.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2699. [bug] Missing lock in rbtdb.c. [RT #20037]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2698. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce S_IFREG are defined after including <isc/stat.h>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2696. [bug] named failed to successfully process some valid
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce acl constructs. [RT #20308]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2695. [func] DHCP/DDNS - update fdwatch code for use by
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce DHCP. Modify the api to isc_sockfdwatch_t (the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce callback funciton for isc_socket_fdwatchcreate)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to include information about the direction (read
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce or write) and add isc_socket_fdwatchpoke.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2693. [port] Add some noreturn attributes. [RT #20257]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2692. [port] win32: 32/64 bit cleanups. [RT #20335]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce chain when re-signing a previously-signed zone.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Use -u to modify NSEC3 parameters or switch
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce between NSEC and NSEC3. [RT #20304]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2689. [bug] Correctly handle snprintf result. [RT #20306]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to decide to fetch the destination address. [RT #20305]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Also, added warnings when revoking a ZSK, as this is
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson not defined by protocol (but is legal). [RT #19943]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2686. [bug] dnssec-signzone should clean the old NSEC chain when
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson signing with NSEC3 and vice versa. [RT #20301]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2684. [cleanup] dig: formalize +ad and +cd as synonyms for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce +adflag and +cdflag. [RT #19305]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the NSEC3 parameters used to sign the zone change.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2682. [bug] "configure --enable-symtable=all" failed to
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson build. [RT #20282]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce decoded. [RT #20269]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2679. [func] dig -k can now accept TSIG keys in named.conf
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce format. [RT #20031]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2678. [func] Treat DS queries as if "minimal-response yes;"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce was set. [RT #20258]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2677. [func] Changes to key metadata behavior:
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson - Keys without "publish" or "active" dates set will
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson no longer be used for smart signing. However,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce those dates will be set to "now" by default when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a key is created; to generate a key but not use
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce it yet, use dnssec-keygen -G.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson - New "inactive" date (dnssec-keygen/settime -I)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce sets the time when a key is no longer used for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce signing but is still published.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - The "unpublished" date (-U) is deprecated in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce favor of "deleted" (-D).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2676. [bug] --with-export-installdir should have been
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --with-export-includedir. [RT #20252]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2675. [bug] dnssec-signzone could crash if the key directory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce did not exist. [RT #20232]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.7.0a3 released ---
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2674. [bug] "dnssec-lookaside auto;" crashed if named was built
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce without openssl. [RT #20231]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2673. [bug] The managed-keys.bind zone file could fail to
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson load due to a spurious result from sync_keyzone()
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2672. [bug] Don't enable searching in 'host' when doing reverse
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson lookups. [RT #20218]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2671. [bug] Add support for PKCS#11 providers not returning
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson the public exponent in RSA private keys
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson (OpenCryptoki for instance) in
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson dnssec-keyfromlabel. [RT #19294]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2670. [bug] Unexpected connect failures failed to log enough
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson information to be useful. [RT #20205]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2669. [func] Update PKCS#11 support to support Keyper HSM.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson Update PKCS#11 patch to be against openssl-0.9.8i.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2668. [func] Several improvements to dnssec-* tools, including:
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson - dnssec-keygen and dnssec-settime can now set key
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson metadata fields 0 (to unset a value, use "none")
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson - dnssec-revoke sets the revocation date in
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson addition to the revoke bit
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson - dnssec-settime can now print individual metadata
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson fields instead of always printing all of them,
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson and can print them in unix epoch time format for
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson use by scripts
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2667. [func] Add support for logging stack backtrace on assertion
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson failure (not available for all platforms). [RT #19780]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2666. [func] Added an 'options' argument to dns_name_fromstring()
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson (API change from 9.7.0a2). [RT #20196]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2665. [func] Clarify syntax for managed-keys {} statement, add
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson ARM documentation about RFC 5011 support. [RT #19874]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2664. [bug] create_keydata() and minimal_update() in zone.c
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson didn't properly check return values for some
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson functions. [RT #19956]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2663. [func] win32: allow named to run as a service using
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson "NT AUTHORITY\LocalService" as the account. [RT #19977]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson returned a misleading error code when lwresd was
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson down. [RT #20028]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson creating lwres context. [RT #20029]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2660. [func] Add a new set of DNS libraries for non-BIND9
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson applications. See README.libdns. [RT #19369]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2659. [doc] Clarify dnssec-keygen doc: key name must match zone
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson name for DNSSEC keys. [RT #19938]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2658. [bug] dnssec-settime and dnssec-revoke didn't process
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce key file paths correctly. [RT #20078]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2657. [cleanup] Lower "journal file <path> does not exist, creating it"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce log level to debug 1. [RT #20058]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2656. [func] win32: add a "tools only" check box to the installer
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce which causes it to only install dig, host, nslookup,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce nsupdate and relevant DLLs. [RT #19998]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2655. [doc] Document that key-directory does not affect
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2654. [bug] Improve error reporting on duplicated names for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce deny-answer-xxx. [RT #20164]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2653. [bug] Treat ENGINE_load_private_key() failures as key
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson not found rather than out of memory. [RT #18033]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2652. [func] Provide more detail about what record is being
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson deleted. [RT #20061]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2651. [bug] Dates could print incorrectly in K*.key files on
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson 64-bit systems. [RT #20076]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2650. [bug] Assertion failure in dnssec-signzone when trying
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson to read keyset-* files. [RT #20075]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2649. [bug] Set the domain for forward only zones. [RT #19944]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2647. [bug] Remove unnecessary SOA updates when a new KSK is
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson added. [RT #19913]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson which default to 64 bits. [RT #19927]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson --- 9.7.0a2 released ---
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2644. [bug] Change #2628 caused a regression on some systems;
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson named was unable to write the PID file and would
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson fail on startup. [RT #20001]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2643. [bug] Stub zones interacted badly with NSEC3 support.
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2642. [bug] nsupdate could dump core on solaris when reading
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson improperly formatted key files. [RT #20015]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2641. [bug] Fixed an error in parsing update-policy syntax,
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson added a regression test to check it. [RT #20007]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2640. [security] A specially crafted update packet will cause named
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson to exit. [RT #20000]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2638. [bug] Install arpaname. [RT #19957]
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson2636. [func] Simplify zone signing and key maintenance with the
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson dnssec-* tools. Major changes:
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson - all dnssec-* tools now take a -K option to
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson specify a directory in which key files will be
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson - DNSSEC can now store metadata indicating when
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson they are scheduled to be published, activated,
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson revoked or removed; these values can be set by
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson dnssec-keygen or overwritten by the new
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson dnssec-settime command
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson - dnssec-signzone -S (for "smart") option reads key
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson metadata and uses it to determine automatically
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson which keys to publish to the zone, use for
21163ca842b7969eade26710b4eae72ab0a99c0cAndreas Gustafsson signing, revoke, or remove from the zone
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson2634. [port] win32: Add support for libxml2, enable
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson statschannel. [RT #19773]
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson2633. [bug] Handle 15 bit rand() functions. [RT #19783]
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson2632. [func] util/kit.sh: warn if documentation appears to be out of
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson date. [RT #19922]
eadfcf9cf79376eaae5e3010882ba4f41a7c9b89Andreas Gustafsson2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
f37eb9482057adf62de35e634bfd574e59676950Andreas Gustafsson2630. [func] Improved syntax for DDNS autoconfiguration: use
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "update-policy local;" to switch on local DDNS in a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zone. (The "ddns-autoconf" option has been removed.)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2629. [port] Check for seteuid()/setegid(), use setresuid()/
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce setresgid() if not present. [RT #19932]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2628. [port] linux: Allow /var/run/named/named.pid to be opened
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce at startup with reduced capabilities in operation.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2627. [bug] Named aborted if the same key was included in
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson trusted-keys more than once. [RT #19918]
fcc9f7f86c2fa2ceb8a5c16dc934fea7fa6887f2Andreas Gustafsson2626. [bug] Multiple trusted-keys could trigger an assertion
116dd27475e0521a033139ad5ac2355cf4b3e29bBrian Wellington failure. [RT #19914]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2624. [func] 'named-checkconf -p' will print out the parsed
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson configuration. [RT #18871]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson2621. [doc] Made copyright boilterplate consistent. [RT #19833]
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson2620. [bug] Delay thawing the zone until the reload of it has
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson completed successfully. [RT #19750]
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson2619. [func] Add support for RFC 5011, automatic trust anchor
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson maintenance. The new "managed-keys" statement can
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson be used in place of "trusted-keys" for zones which
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson support this protocol. (Note: this syntax is
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson expected to change prior to 9.7.0 final.) [RT #19248]
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson2618. [bug] The sdb and sdlz db_interator_seek() methods could
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce loop infinitely. [RT #19847]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2617. [bug] ifconfig.sh failed to emit an error message when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce run from the wrong location. [RT #19375]
7fca810d8735063703afff4208c8e92cf6b5ca6aAndreas Gustafsson2616. [bug] 'host' used the nameservers from resolv.conf even
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce when a explicit nameserver was specified. [RT #19852]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2615. [bug] "__attribute__((unused))" was in the wrong place
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for ia64 gcc builds. [RT #19854]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2614. [port] win32: 'named -v' should automatically be executed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce in the foreground. [RT #19844]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2613. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.7.0a1 released ---
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2612. [func] Add default values for the arguments to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-keygen. Without arguments, it will now
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce generate a 1024-bit RSASHA1 zone-signing key,
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson or with the -f KSK option, a 2048-bit RSASHA1
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson key-signing key. [RT #19300]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2611. [func] Add -l option to dnssec-dsfromkey to generate
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson DLV records instead of DS records. [RT #19300]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2610. [port] sunos: Change #2363 was not complete. [RT #19796]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2609. [func] Simplify the configuration of dynamic zones:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - add ddns-confgen command to generate
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce configuration text for named.conf
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - add zone option "ddns-autoconf yes;", which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce causes named to generate a TSIG session key
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and allow updates to the zone using that key
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - add '-l' (localhost) option to nsupdate, which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce causes nsupdate to connect to a locally-running
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce named process using the session key generated
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2608. [func] Perform post signing verification checks in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-signzone. These can be disabled with -P.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The post sign verification test ensures that for each
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce algorithm in use there is at least one non revoked
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce self signed KSK key. That all revoked KSK keys are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce self signed. That all records in the zone are signed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce by the algorithm. [RT #19653]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2607. [bug] named could incorrectly delete NSEC3 records for
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson empty nodes when processing a update request.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2606. [bug] "delegation-only" was not being accepted in
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson delegation-only type zones. [RT #19717]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2605. [bug] Accept DS responses from delegation only zones.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [RT # 19296]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2604. [func] Add support for DNS rebinding attack prevention through
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce new options, deny-answer-addresses and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce deny-answer-aliases. Based on contributed code from
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce JD Nurmi, Google. [RT #18192]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2603. [port] win32: handle .exe extension of named-checkzone and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce named-comilezone argv[0] names under windows.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2602. [port] win32: fix debugging command line build of libisccfg.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2601. [doc] Mention file creation mode mask in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce named manual page.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2600. [doc] ARM: miscellaneous reformatting for different
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce page widths. [RT #19574]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2599. [bug] Address rapid memory growth when validation fails.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2598. [func] Reserve the -F flag. [RT #19657]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2597. [bug] Handle a validation failure with a insecure delegation
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce from a NSEC3 signed master/slave zone. [RT #19464]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce long, leading to inefficient memory usage or rejecting
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce newer cache entries in the worst case. [RT #19563]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2594. [func] Have rndc warn if using its default configuration
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce file when the key file also exists. [RT #19424]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2591. [bug] named could die when processing a update in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce removed_orphaned_ds(). [RT #19507]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2590. [func] Report zone/class of "update with no effect".
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer2588. [bug] SO_REUSEADDR could be set unconditionally after failure
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of bind(2) call. This should be rare and mostly
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer harmless, but may cause interference with other
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer processes that happen to use the same port. [RT #19642]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2587. [func] Improve logging by reporting serial numbers for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce when zone serial has gone backwards or unchanged.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce or SDB. [RT #19577]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2585. [bug] Uninitialized socket name could be referenced via a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statistics channel, triggering an assertion failure in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce XML rendering. [RT #19427]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2584. [bug] alpha: gcc optimization could break atomic operations.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2583. [port] netbsd: provide a control to not add the compile
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce date to the version string, -DNO_VERSION_DATE.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2582. [bug] Don't emit warning log message when we attempt to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce remove non-existant journal. [RT #19516]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Requires MySQL 5.0.19 or later. [RT #19084]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2580. [bug] UpdateRej statistics counter could be incremented twice
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for one rejection. [RT #19476]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2579. [bug] DNSSEC lookaside validation failed to handle unknown
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce algorithms. [RT #19479]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2578. [bug] Changed default sig-signing-type to 65534, because
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 65535 turns out to be reserved. [RT #19477]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2577. [doc] Clarified some statistics counters. [RT #19454]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2576. [bug] NSEC record were not being correctly signed when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a zone transitions from insecure to secure.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Handle such incorrectly signed zones. [RT #19114]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2575. [func] New functions dns_name_fromstring() and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dns_name_tostring(), to simplify conversion
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of a string to a dns_name structure and vice
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce versa. [RT #19451]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2574. [doc] Document nsupdate -g and -o. [RT #19351]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2573. [bug] Replacing a non-CNAME record with a CNAME record in a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce single transaction in a signed zone failed. [RT #19397]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2572. [func] Simplify DLV configuration, with a new option
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "dnssec-lookaside auto;" This is the equivalent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of "dnssec-lookaside . trust-anchor dlv.isc.org;"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce plus setting a trusted-key for dlv.isc.org.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Note: The trusted key is hard-coded into named,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce but is also stored in (and can be overridden
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce by) $sysconfdir/bind.keys. As the ISC DLV key
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson rolls over it can be kept up to date by replacing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the bind.keys file with a key downloaded from
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2571. [func] Add a new tool "arpaname" which translates IP addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2570. [func] Log the destination address the query was sent to.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2569. [func] Move journalprint, nsec3hash, and genrandom
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "make install" will put them in $sbindir. [RT #19301]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2568. [bug] Report when the write to indicate a otherwise
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce successful start fails. [RT #19360]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2567. [bug] dst__privstruct_writefile() could miss write errors.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce write_public_key() could miss write errors.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dnssec-dsfromkey could miss write errors.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2566. [cleanup] Clarify logged message when an insecure DNSSEC
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson response arrives from a zone thought to be secure:
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson "insecurity proof failed" instead of "not
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson insecure". [RT #19400]
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2565. [func] Add support for HIP record. Includes new functions
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson dns_rdata_hip_first(), dns_rdata_hip_next()
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson and dns_rdata_hip_current(). [RT #19384]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2564. [bug] Only take EDNS fallback steps when processing timeouts.
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2563. [bug] Dig could leak a socket causing it to wait forever
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson to exit. [RT #19359]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2562. [doc] ARM: miscellaneous improvements, reorganization,
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson and some new content.
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2559. [bug] dnssec-dsfromkey could compute bad DS records when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce reading from a K* files. [RT #19357]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2558. [func] Set the ownership of missing directories created
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for pid-file if -u has been specified on the command
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce line. [RT #19328]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2557. [cleanup] PCI compliance:
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce * new libisc log module file
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce * isc_dir_chroot() now also changes the working
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce directory to "/".
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce * additional INSISTs
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce * additional logging when files can't be removed.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson error checks in the correct order resulting in the
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson wrong error code sometimes being returned. [RT #19249]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2555. [func] dig: when emitting a hex dump also display the
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson corresponding characters. [RT #19258]
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2554. [bug] Validation of uppercase queries from NSEC3 zones could
56f1285ca5d97d3205b74c32dc4de1ea7b69fea1Michael Sawyer fail. [RT #19297]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2552. [bug] zero-no-soa-ttl-cache was not being honoured.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2551. [bug] Potential Reference leak on return. [RT #19341]
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2549. [port] linux: define NR_OPEN if not currently defined.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2548. [bug] Install iterated_hash.h. [RT #19335]
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce2547. [bug] openssl_link.c:mem_realloc() could reference an
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce out-of-range area of the source buffer. New public
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce function isc_mem_reallocate() was introduced to address
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce this bug. [RT #19313]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2546. [func] Add --enable-openssl-hash configure flag to use
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce OpenSSL (in place of internal routine) for hash
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce functions (MD5, SHA[12] and HMAC). [RT #18815]
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce2545. [doc] ARM: Legal hostname checking (check-names) is
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce for SRV RDATA too. [RT #19304]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2542. [doc] Update the description of dig +adflag. [RT #19290]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2541. [bug] Conditionally update dispatch manager statistics.
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2539. [security] Update the interaction between recursion, allow-query,
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce allow-query-cache and allow-recursion. [RT #19198]
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2538. [bug] cache/ADB memory could grow over max-cache-size,
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson especially with threads and smaller max-cache-size
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson values. [RT #19240]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2537. [func] Added more statistics counters including those on socket
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce I/O events and query RTT histograms. [RT #18802]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2536. [cleanup] Silence some warnings when -Werror=format-security is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified. [RT #19083]
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2534. [func] Check NAPTR records regular expressions and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce replacement strings to ensure they are syntactically
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce valid and consistant. [RT #18168]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2533. [doc] ARM: document @ (at-sign). [RT #17144]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2532. [bug] dig: check the question section of the response to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce see if it matches the asked question. [RT #18495]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2531. [bug] Change #2207 was incomplete. [RT #19098]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2530. [bug] named failed to reject insecure to secure transitions
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce via UPDATE. [RT #19101]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2529. [cleanup] Upgrade libtool to silence complaints from recent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce version of autoconf. [RT #18657]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2528. [cleanup] Silence spurious configure warning about
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --datarootdir [RT #19096]
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce2527. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2526. [func] New named option "attach-cache" that allows multiple
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce views to share a single cache to save memory and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce improve lookup efficiency. Based on contributed code
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce from Barclay Osborn, Google. [RT #18905]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2525. [func] New logging category "query-errors" to provide detailed
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce internal information about query failures, especially
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce about server failures. [RT #19027]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2523. [bug] Random type rdata freed by dns_nsec_typepresent().
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2521. [bug] Improve epoll cross compilation support. [RT #19047]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2520. [bug] Update xml statistics version number to 2.0 as change
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson #2388 made the schema incompatible to the previous
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson version. [RT #19080]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2519. [bug] dig/host with -4 or -6 didn't work if more than two
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce nameserver addresses of the excluded address family
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce preceded in resolv.conf. [RT #19081]
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2518. [func] Add support for the new CERT types from RFC 4398.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2517. [bug] dig +trace with -4 or -6 failed when it chose a
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce nameserver address of the excluded address type.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2516. [bug] glue sort for responses was performed even when not
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce needed. [RT #19039]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a nameserver of the excluded address family.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2513. [bug] Fix windows cli build. [RT #19062]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2512. [func] Print a summary of the cached records which make up
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the negative response. [RT #18885]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2509. [bug] Specifying a fixed query source port was broken.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2508. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2507. [func] Log the recursion quota values when killing the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce oldest query or refusing to recurse due to quota.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2506. [port] solaris: Check at configure time if
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce hack_shutup_pthreadonceinit is needed. [RT #19037]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2505. [port] Treat amd64 similarly to x86_64 when determining
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce atomic operation support. [RT #19031]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2504. [bug] Address race condition in the socket code. [RT #18899]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2503. [port] linux: improve compatibility with Linux Standard
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Base. [RT #18793]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2502. [cleanup] isc_radix: Improve compliance with coding style,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce document function in <isc/radix.h>. [RT #18534]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2501. [func] $GENERATE now supports all rdata types. Multi-field
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce rdata types need to be quoted. See the ARM for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce details. [RT #18368]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce function. [RT #18582]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.6.0rc1 released ---
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2498. [bug] Removed a bogus function argument used with
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson ISC_SOCKET_USE_POLLWATCH: it could cause compiler
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson warning or crash named with the debug 1 level
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of logging. [RT #18917]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2496. [bug] Add sanity length checks to NSID option. [RT #18813]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2495. [bug] Tighten RRSIG checks. [RT #18795]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce installed. [RT #18826]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2493. [bug] The linux capabilities code was not correctly cleaning
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce up after itself. [RT #18767]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2492. [func] Rndc status now reports the number of cpus discovered
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson and the number of worker threads when running
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson multi-threaded. [RT #18273]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2491. [func] Attempt to re-use a local port if we are already using
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the port. [RT #18548]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is cleared when IPV6_V6ONLY is set. [RT #18785]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2489. [port] solaris: Workaround Solaris's kernel bug about
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Define ISC_SOCKET_USE_POLLWATCH at build time to enable
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce this workaround. [RT #18870]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce from keyset and .key files. [RT #18694]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2487. [bug] Give TCP connections longer to complete. [RT #18675]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2486. [func] The default locations for named.pid and lwresd.pid
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce This allows the owner of the containing directory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to be set, for "named -u" support, and allows there
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to be a permanent symbolic link in the path, for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "named -t" support. [RT #18306]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2485. [bug] Change update's the handling of obscured RRSIG
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce records. Not all orphaned DS records were being
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce removed. [RT #18828]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2484. [bug] It was possible to trigger a REQUIRE failure when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce adding NSEC3 proofs to the response in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce query_addwildcardproof(). [RT #18828]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2483. [port] win32: chroot() is not supported. [RT #18805]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2482. [port] libxml2: support versions 2.7.* in addition
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to 2.6.*. [RT #18806]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.6.0b1 released ---
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce collisions. [RT #18812]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2480. [bug] named could fail to emit all the required NSEC3
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce records. [RT #18812]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2478. [bug] 'addresses' could be used uninitialized in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce configure_forward(). [RT #18800]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2477. [bug] dig: the global option to print the command line is
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce +cmd not print_cmd. Update the output to reflect
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce this. [RT #17008]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2476. [doc] ARM: improve documentation for max-journal-size and
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson ixfr-from-differences. [RT #15909] [RT #18541]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2475. [bug] LRU cache cleanup under overmem condition could purge
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce particular entries more aggressively. [RT #17628]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2474. [bug] ACL structures could be allocated with insufficient
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce space, causing an array overrun. [RT #18765]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2473. [port] linux: raise the limit on open files to the possible
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce maximum value before spawning threads; 'files'
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified in named.conf doesn't seem to work with
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce threads as expected. [RT #18784]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2472. [port] linux: check the number of available cpu's before
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce calling chroot as it depends on "/proc". [RT #16923]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2471. [bug] named-checkzone was not reporting missing mandatory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce glue when sibling checks were disabled. [RT #18768]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2470. [bug] Elements of the isc_radix_node_t could be incorrectly
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce overwritten. [RT# 18719]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2469. [port] solaris: Work around Solaris's select() limitations.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2468. [bug] Resolver could try unreachable servers multiple times.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2465. [bug] Adb's handling of lame addresses was different
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson for IPv4 and IPv6. [RT #18738]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2464. [port] linux: check that a capability is present before
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce trying to set it. [RT #18135]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce API and glibc hides parts of the IPv6 Advanced Socket
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce API as a result. This is stupid as it breaks how the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce two halves (Basic and Advanced) of the IPv6 Socket API
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce were designed to be used but we have to live with it.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce API. [RT #18388]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2462. [doc] Document -m (enable memory usage debugging)
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce option for dig. [RT #18757]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2461. [port] sunos: Change #2363 was not complete. [RT #17513]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.6.0a1 released ---
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2458. [doc] ARM: update and correction for max-cache-size.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2457. [tuning] max-cache-size is reverted to 0, the previous
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce default. It should be safe because expired cache
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce entries are also purged. [RT #18684]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce address, regardless of family. They now correctly
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce distinguish IPv4 from IPv6. [RT #18559]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2455. [bug] Stop metadata being transferred via axfr/ixfr.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2453. [bug] Remove NULL pointer dereference in dns_journal_print().
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2452. [func] Improve bin/test/journalprint. [RT #18316]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2451. [port] solaris: handle runtime linking better. [RT #18356]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2450. [doc] Fix lwresd docbook problem for manual page.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2449. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2448. [func] Add NSEC3 support. [RT #15452]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2447. [cleanup] libbind has been split out as a separate product.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2446. [func] Add a new log message about build options on startup.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce A new command-line option '-V' for named is also
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce provided to show this information. [RT# 18645]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2445. [doc] ARM out-of-date on empty reverse zones (list includes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce RFC1918 address, but these are not yet compiled in).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (clear DF) for UDP responses and requests.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2443. [bug] win32: UDP connect() would not generate an event,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce and so connected UDP sockets would never clean up.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Fix this by doing an immediate WSAConnect() rather
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce than an io completion port type for UDP.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2442. [bug] A lock could be destroyed twice. [RT# 18626]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2441. [bug] isc_radix_insert() could copy radix tree nodes
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce incompletely. [RT #18573]
78d65c654251b02c41628914986723cbec93a7a1Andreas Gustafsson2440. [bug] named-checkconf used an incorrect test to determine
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce if an ACL was set to none.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2438. [bug] Timeouts could be logged incorrectly under win32.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2437. [bug] Sockets could be closed too early, leading to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce inconsistent states in the socket module. [RT #18298]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2435. [bug] Fixed an ACL memory leak affecting win32.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2434. [bug] Fixed a minor error-reporting bug in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2433. [tuning] Set initial timeout to 800ms.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2432. [bug] More Windows socket handling improvements. Stop
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce using I/O events and use IO Completion Ports
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce throughout. Rewrite the receive path logic to make
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce it easier to support multiple simultaneous
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce requesters in the future. Add stricter consistency
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce checking as a compile-time option (define
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2431. [bug] Acl processing could leak memory. [RT #18323]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2430. [bug] win32: isc_interval_set() could round down to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce zero if the input was less than NS_INTERVAL
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce nanoseconds. Round up instead. [RT #18549]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2429. [doc] nsupdate should be in section 1 of the man pages.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2428. [bug] dns_iptable_merge() mishandled merges of negative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce tables. [RT #18409]
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
5f09ce124cad9712a9675f17f83ddc915e734909Andreas Gustafsson was set. [RT #18528]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2426. [bug] libbind: inet_net_pton() can sometimes return the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce wrong value if excessively large net masks are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce supplied. [RT #18512]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2425. [bug] named didn't detect unavailable query source addresses
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce at load time. [RT #18536]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2424. [port] configure now probes for a working epoll
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce implementation. Allow the use of kqueue,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce epoll and /dev/poll to be selected at compile
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce time. [RT #18277]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2423. [security] Randomize server selection on queries, so as to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce make forgery a little more difficult. Instead of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce always preferring the server with the lowest RTT,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce pick a server with RTT within the same 128
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce millisecond band. [RT #18441]
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce2422. [bug] Handle the special return value of a empty node as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce if it was a NXRRSET in the validator. [RT #18447]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2421. [func] Add new command line option '-S' for named to specify
c71787bd6356c92e9c7d0a174cd63ab17fcf34c6Eric Luce the max number of sockets. [RT #18493]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Use caution: this option may not work for some
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson operating systems without rebuilding named.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2420. [bug] Windows socket handling cleanup. Let the io
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce completion event send out canceled read/write
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce done events, which keeps us from writing to memory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce we no longer have ownership of. Add debugging
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce socket_log() function. Rework TCP socket handling
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to not leak sockets.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce should not be used for isc_sockettype_fdwatch sockets.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2417. [bug] Connecting UDP sockets for outgoing queries could
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce unexpectedly fail with an 'address already in use'
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce error. [RT #18411]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2416. [func] Log file descriptors that cause exceeding the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce internal maximum. [RT #18460]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2415. [bug] 'rndc dumpdb' could trigger various assertion failures
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce in rbtdb.c. [RT #18455]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2414. [bug] A masterdump context held the database lock too long,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce causing various troubles such as dead lock and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce recursive lock acquisition. [RT #18311, #18456]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2412. [bug] win32: address a resource leak. [RT #18374]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce at compilation time. [RT #18433]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson Note: with changes #2469 and #2421 above, there is no
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2410. [bug] Correctly delete m_versionInfo. [RT #18432]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2409. [bug] Only log that we disabled EDNS processing if we were
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce subsequently successful. [RT #18029]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2408. [bug] A duplicate TCP dispatch event could be sent, which
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce could then trigger an assertion failure in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce resquery_response(). [RT #18275]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2406. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2405. [cleanup] The default value for dnssec-validation was changed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "yes" in 9.5.0-P1 and all subsequent releases; this
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce was inadvertently omitted from CHANGES at the time.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2404. [port] hpux: files unlimited support.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2403. [bug] TSIG context leak. [RT #18341]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2402. [port] Support Solaris 2.11 and over. [RT #18362]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2401. [bug] Expect to get E[MN]FILE errno internal_accept()
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (from accept() or fcntl() system calls). [RT #18358]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2399. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2398. [bug] Improve file descriptor management. New,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce temporary, named.conf option reserved-sockets,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce default 512. [RT #18344]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2397. [bug] gssapi_functions had too many elements. [RT #18355]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2396. [bug] Don't set SO_REUSEADDR for randomized ports.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2395. [port] Avoid warning and no effect from "files unlimited"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce on Linux when running as root. [RT #18335]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2394. [bug] Default configuration options set the limit for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce open files to 'unlimited' as described in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce documentation. [RT #18331]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2393. [bug] nested acls containing keys could trigger an
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce assertion in acl.c. [RT #18166]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2392. [bug] remove 'grep -q' from acl test script, some platforms
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce don't support it. [RT #18253]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2391. [port] hpux: cover additional recvmsg() error codes.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2390. [bug] dispatch.c could make a false warning on 'odd socket'.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [RT #18301].
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2389. [bug] Move the "working directory writable" check to after
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the ns_os_changeuser() call. [RT #18326]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2388. [bug] Avoid using tables for layout purposes in
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson statistics XSL [RT #18159].
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2387. [bug] Silence compiler warnings in lib/isc/radix.c.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [RT #18147] [RT #18258]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2386. [func] Add warning about too small 'open files' limit.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2385. [bug] A condition variable in socket.c could leak in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce rare error handling [RT #17968].
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2384. [security] Fully randomize UDP query ports to improve
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce forgery resilience. [RT #17949, #18098]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2383. [bug] named could double queries when they resulted in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce SERVFAIL due to overkilling EDNS0 failure detection.
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2381. [port] dlz/mysql: support multiple install layouts for
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce mysql. <prefix>/include/{,mysql/}mysql.h and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce <prefix>/lib/{,mysql/}. [RT #18152]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce proofs which, in turn, caused validation failures
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for insecure zones immediately below a secure zone
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the server was authoritative for. [RT #18112]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson TLDs and supported RRs with TTLs [RT #17972]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2376. [bug] Change #2144 was not complete.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2375. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2374. [bug] "blackhole" ACLs could cause named to segfault due
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to some uninitialized memory. [RT #18095]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2373. [bug] Default values of zone ACLs were re-parsed each time a
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson new zone was configured, causing an overconsumption
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson of memory. [RT #18092]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2371. [doc] Add +nsid option to dig man page. [RT #18039]
027e89d47af308db4b41761ca9f847c026b63ec8Andreas Gustafsson2370. [bug] "rndc freeze" could trigger an assertion in named
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson when called on a nonexistent zone. [RT #18050]
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson2369. [bug] libbind: Array bounds overrun on read in bitncmp().
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2368. [port] Linux: use libcap for capability management if
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce possible. [RT# 18026]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2367. [bug] Improve counting of dns_resstatscounter_retry
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2366. [bug] Adb shutdown race. [RT #18021]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2365. [bug] Fix a bug that caused dns_acl_isany() to return
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce spurious results. [RT #18000]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2364. [bug] named could trigger a assertion when serving a
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson malformed signed zone. [RT #17828]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2362. [cleanup] Make "rrset-order fixed" a compile-time option.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce settable by "./configure --enable-fixed-rrset".
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Disabled by default. [RT #17977]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2361. [bug] "recursion" statistics counter could be counted
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce multiple times for a single query. [RT #17990]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2360. [bug] Fix a condition where we release a database version
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce (which may acquire a lock) while holding the lock.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2359. [bug] Fix NSID bug. [RT #17942]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2358. [doc] Update host's default query description. [RT #17934]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2357. [port] Don't use OpenSSL's engine support in versions before
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson OpenSSL 0.9.7f. [RT #17922]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2356. [bug] Built in mutex profiler was not scalable enough.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2355. [func] Extend the number statistics counters available.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2354. [bug] Failed to initialize some rdatasetheader_t elements.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2353. [func] Add support for Name Server ID (RFC 5001).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 'dig +nsid' requests NSID from server.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 'request-nsid yes;' causes recursive server to send
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce NSID requests to upstream servers. Server responds
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to NSID requests with the string configured by
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 'server-id' option. [RT #17091]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2352. [bug] Various GSS_API fixups. [RT #17729]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2350. [port] win32: IPv6 support. [RT #17797]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2349. [func] Provide incremental re-signing support for secure
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce dynamic zones. [RT #1091]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Documentation is in the new README.pkcs11 file.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson New tool, dnssec-keyfromlabel, which takes the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce label of a key pair in a HSM and constructs a DNS
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce key pair for use by named and dnssec-signzone.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2347. [bug] Delete now traverses the RB tree in the canonical
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce order. [RT #17451]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2346. [func] Memory statistics now cover all active memory contexts
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce in increased detail. [RT #17580]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2345. [bug] named-checkconf failed to detect when forwarders
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce were set at both the options/view level and in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a root zone. [RT #17671]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2344. [bug] Improve "logging{ file ...; };" documentation.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2343. [bug] (Seemingly) duplicate IPv6 entries could be
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson created in ADB. [RT #17837]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2341. [bug] libbind: add missing -I../include for off source
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson tree builds. [RT #17606]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2340. [port] openbsd: interface configuration. [RT #17700]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2339. [port] tru64: support for libbind. [RT #17589]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2338. [bug] check_ds() could be called with a non DS rdataset.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2336. [func] If "named -6" is specified then listen on all IPv6
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce interfaces if there are not listen-on-v6 clauses in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2335. [port] sunos: libbind and *printf() support for long long.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce bug in fromstruct_txt(). [RT #17609]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2333. [bug] Fix off by one error in isc_time_nowplusinterval().
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2332. [contrib] query-loc-0.4.0. [RT #17602]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2331. [bug] Failure to regenerate any signatures was not being
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce reported nor being past back to the UPDATE client.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2330. [bug] Remove potential race condition when handling
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce over memory events. [RT #17572]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce WARNING: API CHANGE: over memory callback
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce function now needs to call isc_mem_waterack().
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce See <isc/mem.h> for details.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2329. [bug] Clearer help text for dig's '-x' and '-i' options.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2327. [bug] It was possible to dereference a NULL pointer in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce rbtdb.c. Implement dead node processing in zones as
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce we do for caches. [RT #17312]
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson2326. [bug] It was possible to trigger a INSIST in the acache
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2325. [port] Linux: use capset() function if available. [RT #17557]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2323. [port] tru64: namespace clash. [RT #17547]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2322. [port] MacOS: work around the limitation of setrlimit()
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for RLIMIT_NOFILE. [RT #17526]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2321. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2320. [func] Make statistics counters thread-safe for platforms
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce that support certain atomic operations. [RT #17466]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2319. [bug] Silence Coverity warnings in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2318. [port] sunos fixes for libbind. [RT #17514]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2315. [bug] Used incorrect address family for mapped IPv4
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce addresses in acl.c. [RT #17519]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2314. [bug] Uninitialized memory use on error path in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2313. [cleanup] Silence Coverity warnings. Handle private stacks.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [RT #17447] [RT #17478]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2311. [bug] IPv6 addresses could match IPv4 ACL entries and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce vice versa. [RT #17462]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2310. [bug] dig, host, nslookup: flush stdout before emitting
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce debug/fatal messages. [RT #17501]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
dcebbac4f62ffa1a8c907095c85c4bea110216ffAndreas Gustafsson2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2306. [bug] Remove potential race from lib/dns/resolver.c.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2305. [security] inet_network() buffer overflow. CVE-2008-0122.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2304. [bug] Check returns from all dns_rdata_tostruct() calls.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2301. [bug] Remove resource leak and fix error messages in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2300. [bug] Fixed failure to close open file in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2299. [bug] Remove unnecessary NULL check in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2298. [bug] isc_mutex_lock() failure not caught in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2297. [bug] isc_entropy_createfilesource() failure not caught in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2296. [port] Allow docbook stylesheet location to be specified to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce configure. [RT #17457]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2294. [func] Allow the experimental statistics channels to have
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce multiple connections and ACL.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Note: the stats-server and stats-server-v6 options
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce available in the previous beta releases are replaced
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce with the generic statistics-channels statement.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2293. [func] Add ACL regression test. [RT #17375]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2292. [bug] Log if the working directory is not writable.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce failure to set PR_SET_DUMPABLE. [RT #17312]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2290. [bug] Let AD in the query signal that the client wants AD
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce set in the response. [RT #17301]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2289. [func] named-checkzone now reports the out-of-zone CNAME
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce found. [RT #17309]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2288. [port] win32: mark service as running when we have finished
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce loading. [RT #17441]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2286. [func] Allow a TCP connection to be used as a weak
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce authentication method for reverse zones.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce New update-policy methods tcp-self and 6to4-self.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2285. [func] Test framework for client memory context management.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2284. [bug] Memory leak in UPDATE prerequisite processing.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2283. [bug] TSIG keys were not attaching to the memory
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson context. TSIG keys should use the rings
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson memory context rather than the clients memory
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce context. [RT #17377]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2281. [bug] Attempts to use undefined acls were not being logged.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2280. [func] Allow the experimental http server to be reached
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce over IPv6 as well as IPv4. [RT #17332]
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafsson2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafsson to protect applications from receiving spurious
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce SIGPIPE signals when using the resolver.
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafsson2278. [bug] win32: handle the case where Windows returns no
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce search list or DNS suffix. [RT #17354]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2277. [bug] Empty zone names were not correctly being caught at
ff5760e233f6ab75e33783b6dd48f961ce04d933Andreas Gustafsson in the post parse checks. [RT #17357]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2275. [func] Add support to dig to perform IXFR queries over UDP.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2274. [func] Log zone transfer statistics. [RT #17336]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2273. [bug] Adjust log level to WARNING when saving inconsistent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce stub/slave master and journal files. [RT# 17279]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2271. [bug] Fix a memory leak in http server code [RT #17100]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2270. [bug] dns_db_closeversion() version->writer could be reset
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce before it is tested. [RT #17290]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.5.0b1 released ---
ea91cb523112b44b4d2799ac7eb5e878721f2a59Eric Luce2267. [bug] Radix tree node_num value could be set incorrectly,
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce causing positive ACL matches to look like negative
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ones. [RT #17311]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2266. [bug] client.c:get_clientmctx() returned the same mctx
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce once the pool of mctx's was filled. [RT #17218]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2265. [bug] Test that the memory context's basic_table is non NULL
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce before freeing. [RT #17265]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2264. [bug] Server prefix length was being ignored. [RT #17308]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2263. [bug] "named-checkconf -z" failed to set default value
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce for "check-integrity". [RT #17306]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2262. [bug] Error status from all but the last view could be
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce lost. [RT #17292]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2260. [bug] Reported wrong clients-per-query when increasing the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce value. [RT #17236]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2259. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.5.0a7 released ---
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2257. [bug] win32: Use the full path to vcredist_x86.exe when
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson calling it. [RT #17222]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2256. [bug] win32: Correctly register the installation location of
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
035cd7b5bd983b3845da08680ac311c754809403Andreas Gustafsson2254. [bug] timer.c:dispatch() failed to lock timer->lock
035cd7b5bd983b3845da08680ac311c754809403Andreas Gustafsson when reading timer->idle allowing it to see
035cd7b5bd983b3845da08680ac311c754809403Andreas Gustafsson intermediate values as timer->idle was reset by
38ba66e41bc93315422380d6c7ab41053963ed47Andreas Gustafsson isc_timer_touch(). [RT #17243]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2253. [func] "max-cache-size" defaults to 32M.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "max-acache-size" defaults to 16M.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2252. [bug] Fixed errors in sortlist code [RT #17216]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2251. [placeholder]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2250. [func] New flag 'memstatistics' to state whether the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce memory statistics file should be written or not.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Additionally named's -m option will cause the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce statistics file to be written. [RT #17113]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2249. [bug] Only set Authentic Data bit if client requested
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce DNSSEC, per RFC 3655 [RT #17175]
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2247. [doc] Sort doc/misc/options. [RT #17067]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2246. [bug] Make the startup of test servers (ans.pl) more
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce robust. [RT #17147]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2245. [bug] Validating lack of DS records at trust anchors wasn't
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce working. [RT #17151]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2244. [func] Allow the check of nameserver names against the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce SOA MNAME field to be disabled by specifying
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson 'notify-to-soa yes;'. [RT #17073]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2243. [func] Configuration files without a newline at the end now
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce parse without error. [RT #17120]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce library could require a source of random data.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a number of INSIST()s into plain fatal() errors
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson which report the triggering result code.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The 'key' command wasn't disabling GSS-TSIG.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2238. [bug] It was possible to trigger a REQUIRE when a
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson validation was canceled. [RT #17106]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2236. [bug] dnssec-signzone failed to preserve the case of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce of wildcard owner names. [RT #17085]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2233. [func] Add support for O(1) ACL processing, based on
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce radix tree code originally written by Kevin
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Brintnall. [RT #16288]
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2232. [bug] dns_adb_findaddrinfo() could fail and return
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson ISC_R_SUCCESS. [RT #17137]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2230. [bug] We could INSIST reading a corrupted journal.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2229. [bug] Null pointer dereference on query pool creation
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce failure. [RT #17133]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2228. [contrib] contrib: Change 2188 was incomplete.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2227. [cleanup] Tidied up the FAQ. [RT #17121]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2226. [placeholder]
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2225. [bug] More support for systems with no IPv4 addresses.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2224. [bug] Defer journal compaction if a xfrin is in progress.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2223. [bug] Make a new journal when compacting. [RT #17119]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2222. [func] named-checkconf now checks server key references.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2221. [bug] Set the event result code to reflect the actual
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce record turned to caller when a cache update is
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson rejected due to a more credible answer existing.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2220. [bug] win32: Address a race condition in final shutdown of
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce the Windows socket code. [RT #17028]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2219. [bug] Apply zone consistency checks to additions, not
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce removals, when updating. [RT #17049]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2217. [func] Adjust update log levels. [RT #17092]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2216. [cleanup] Fix a number of errors reported by Coverity.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2214. [bug] Deregister OpenSSL lock callback when cleaning
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce up. Reorder OpenSSL cleanup so that RAND_cleanup()
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is called before the locks are destroyed. [RT #17098]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2213. [bug] SIG0 diagnostic failure messages were looking at the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce wrong status code. [RT #17101]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2212. [func] 'host -m' now causes memory statistics and active
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce memory to be printed at exit. [RT 17028]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2211. [func] Update "dynamic update temporarily disabled" message.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2210. [bug] Deleting class specific records via UPDATE could
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce fail. [RT #17074]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2209. [port] osx: linking against user supplied static OpenSSL
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce libraries failed as the system ones were still being
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce found. [RT #17078]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2208. [port] win32: make sure both build methods produce the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce same output. [RT #17058]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2207. [port] Some implementations of getaddrinfo() fail to set
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce ai_canonname correctly. [RT #17061]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.5.0a6 released ---
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2206. [security] "allow-query-cache" and "allow-recursion" now
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce cross inherit from each other.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce If allow-query-cache is not set in named.conf then
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-recursion is used if set, otherwise allow-query
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is used if set, otherwise the default (localnets;
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson localhost;) is used.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce If allow-recursion is not set in named.conf then
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-cache is used if set, otherwise allow-query
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce is used if set, otherwise the default (localnets;
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce localhost;) is used.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2204. [bug] "rndc flushanme name unknown-view" caused named
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson to crash. [RT #16984]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2203. [security] Query id generation was cryptographically weak.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce [RT # 16915]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2202. [security] The default acls for allow-query-cache and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-recursion were not being applied. [RT #16960]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2201. [bug] The build failed in a separate object directory.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2200. [bug] The search for cached NSEC records was stopping to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce early leading to excessive DLV queries. [RT #16930]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2199. [bug] win32: don't call WSAStartup() while loading dlls.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2198. [bug] win32: RegCloseKey() could be called when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce RegOpenKeyEx() failed. [RT #16911]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2197. [bug] Add INSIST to catch negative responses which are
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce not setting the event result code appropriately.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2196. [port] win32: yield processor while waiting for once to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to complete. [RT #16958]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson2195. [func] dnssec-keygen now defaults to nametype "ZONE"
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce when generating DNSKEYs. [RT #16954]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2194. [bug] Close journal before calling 'done' in xfrin.c.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.5.0a5 released ---
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2193. [port] win32: BINDInstall.exe is now linked statically.
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2192. [port] win32: use vcredist_x86.exe to install Visual
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson Studio's redistributable dlls if building with
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson Visual Stdio 2005 or later.
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2191. [func] named-checkzone now allows dumping to stdout (-).
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson named-checkconf now has -h for help.
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson named-checkzone now has -h for help.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce rndc now has -h for help.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce Better handling of '-?' for usage summaries.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2190. [func] Make fallback to plain DNS from EDNS due to timeouts
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce more visible. New logging category "edns-disabled".
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2189. [bug] Handle socket() returning EINTR. [RT #15949]
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2188. [contrib] queryperf: autoconf changes to make the search for
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson libresolv or libbind more robust. [RT #16299]
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2187. [bug] query_addds(), query_addwildcardproof() and
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson query_addnxrrsetnsec() should take a version
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce argument. [RT #16368]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2186. [port] cygwin: libbind: check for struct sockaddr_storage
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson independently of IPv6. [RT #16482]
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2185. [port] sunos: libbind: check for ssize_t, memmove() and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce memchr(). [RT #16463]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2184. [bug] bind9.xsl.h didn't build out of the source tree.
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson2183. [bug] dnssec-signzone didn't handle offline private keys
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce well. [RT #16832]
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson could return ISC_R_SUCCESS when they ran out of
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson memory. [RT #16365]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2180. [cleanup] Remove bit test from 'compress_test' as they
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson are no longer needed. [RT #16497]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2179. [func] 'rndc command zone' will now find 'zone' if it is
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson unique to all the views. [RT #16821]
b9c96971964d87c2705c8dc29300ff8103479ee6Andreas Gustafsson2178. [bug] 'rndc reload' of a slave or stub zone resulted in
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a reference leak. [RT #16867]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2177. [bug] Array bounds overrun on read (rcodetext) at
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce debug level 10+. [RT #16798]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2176. [contrib] dbus update to handle race condition during
8e245ec21beee31a780de9b89ba1e8bb2b9f4c9aAndreas Gustafsson initialization (Bugzilla 235809). [RT #16842]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2175. [bug] win32: windows broadcast condition variable support
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce was broken. [RT #16592]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2174. [bug] I/O errors should always be fatal when reading
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce master files. [RT #16825]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2173. [port] win32: When compiling with MSVS 2005 SP1 we also
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.5.0a4 released ---
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2172. [bug] query_addsoa() was being called with a non zone db.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2171. [bug] Handle breaks in DNSSEC trust chains where the parent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce servers are not DS aware (DS queries to the parent
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce return a referral to the child).
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2170. [func] Add acache processing to test suite. [RT #16711]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2169. [bug] host, nslookup: when reporting NXDOMAIN report the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce given name and not the last name searched for.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2168. [bug] nsupdate: in non-interactive mode treat syntax errors
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce as fatal errors. [RT #16785]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2167. [bug] When re-using a automatic zone named failed to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce attach it to the new view. [RT #16786]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.5.0a3 released ---
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2166. [bug] When running in batch mode, dig could misinterpret
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a server address as a name to be looked up, causing
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce unexpected output. [RT #16743]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2165. [func] Allow the destination address of a query to determine
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce if we will answer the query or recurse.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-on, allow-recursion-on and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-query-cache-on. [RT #16291]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2164. [bug] The code to determine how named-checkzone /
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce named-compilezone was called failed under windows.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2163. [bug] If only one of query-source and query-source-v6
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specified a port the query pools code broke (change
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 2129). [RT #16768]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2162. [func] Allow "rrset-order fixed" to be disabled at compile
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce time. [RT #16665]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2161. [bug] Fix which log messages are emitted for 'rndc flush'.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce from getifaddrs(). [RT #16708]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.5.0a2 released ---
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2159. [bug] Array bounds overrun in acache processing. [RT #16710]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2158. [bug] ns_client_isself() failed to initialize key
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which