CHANGES revision 578e3196076b409c509c6c0a0873e7bfe54f4d61
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3459. [func] Added -J option to named-checkzone/named-compilezone
fdd80e9a55c70b36a3bf3e409b86897301c44ff8Automatic Updater to specify the path to the journal file. [RT #30958]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3458. [bug] Return FORMERR when presented with a overly long
4a14ce5ba00ab7bc55c99ffdcf59c7a4ab902721Automatic Updater domain named in a request. [RT #29682]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3456. [port] g++47: ATF failed to compile. [RT #32012]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3455. [contrib] queryperf: fix getopt option list. [RT #32338]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3454. [port] sparc64: improve atomic support. [RT #25182]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failed. [RT #31960]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3452. [bug] Accept duplicate singleton records. [RT #32329]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3451. [port] Increase per thread stack size from 64K to 1M.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3450. [bug] Stop logfileconfig system test spam system logs.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3449. [bug] gen.c: use the pre-processor to construct format
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein strings so that compiler can perform sanity checks;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein check the snprintf results. [RT #17576]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3448. [bug] The allow-query-on ACL was not processed correctly.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3447. [port] Add support for libxml2-2.9.x [RT #32231]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3446. [port] win32: Add source ID (see change #3400) to build.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3445. [bug] Warn about zone files with blank owner names
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein immediately after $ORIGIN directives. [RT #31848]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3444. [bug] The NOQNAME proof was not being returned from cached
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein insecure responses. [RT #21409]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rejected when generating keys. [RT #31927]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3442. [port] Net::DNS 0.69 introduced a non backwards compatible
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein change. [RT #32216]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3440. [bug] Reorder get_key_struct to not trigger a assertion when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cleaning up due to out of memory error. [RT #32131]
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater3439. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialise
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein buffers with constant data. [RT #32064]
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater3436. [bug] Check malloc/calloc return values. [RT #32088]
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater3435. [bug] Cross compilation support in configure was broken.
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater3434. [bug] Pass client info to the DLZ findzone() entry
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein point in addition to lookup(). This makes it
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater possible for a database to answer differently
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater whether it's authoritative for a name depending
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater on the address of the client. [RT #31775]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3433. [bug] dlz_findzone() did not correctly handle
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater ISC_R_NOMORE. [RT #31172]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3432. [func] Multiple DLZ databases can now be configured.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein DLZ databases are searched in the order configured,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unless set to "search no", in which case a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone can be configured to be retrieved from a
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater particular DLZ database by using a "dlz <name>"
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater option in the zone statement. DLZ databases can
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater support type "master" and "redirect" zones.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater3431. [bug] ddns-confgen: Some valid key algorithms were
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater not accepted. [RT #31927]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3430. [bug] win32: isc_time_formatISO8601 was missing the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'T' between the date and time. [RT #32044]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3429. [bug] dns_zone_getserial2 could a return success without
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein returning a valid serial. [RT #32007]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3428. [cleanup] dig: Add timezone to date output. [RT #2269]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3427. [bug] dig +trace incorrectly displayed name server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein addresses instead of names. [RT #31641]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3426. [bug] dnssec-checkds: Clearer output when records are not
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater found. [RT #31968]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater3425. [bug] "acacheentry" reference counting was broken resulting
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews in use after free. [RT #31908]
507151045be68c671ffd4e2f37e17cdfa0376fc4Automatic Updater3424. [func] dnssec-dsfromkey now emits the hash without spaces.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3423. [bug] "rndc signing -nsec3param" didn't accept the full
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein range of possible values. Address portability issues.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3422. [bug] Added a clear error message for when the SOA does not
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews match the referral. [RT #31281]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3421. [bug] Named loops when re-signing if all keys are offline.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3420. [bug] Address VPATH compilation issues. [RT #31879]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews3419. [bug] Memory leak on validation cancel. [RT #31869]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3418. [func] New XML schema (version 3.0) for the statistics channel
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein adds query type statistics at the zone level, and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein flattens the XML tree and uses compressed format to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein optimize parsing. Includes new XSL that permits
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein charting via the Google Charts API on browsers that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein support javascript in XSL. The old XML schema has been
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein deprecated. [RT #30023]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3417. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3416. [bug] Named could die on shutdown if running with 128 UDP
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dispatches per interface. [RT #31743]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3415. [bug] named could die with a REQUIRE failure if a valdation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was canceled. [RT #31804]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3414. [bug] Address locking issues found by Coverity. [RT #31626]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3413. [func] Record the number of DNS64 AAAA RRsets that have been
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein synthesized. [RT #27636]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3412. [bug] Copy timeval structure from control message data.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to UDP. [RT #31690]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3410. [bug] Addressed Coverity warnings. [RT #31626]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from X.509 certificates, for use with DANE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (DNS-based Authentication of Named Entities).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3408. [bug] Some DNSSEC-related options (update-check-ksk,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are now legal in slave zones as long as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein inline-signing is in use. [RT #31078]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3407. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3406. [bug] mem.c: Fix compilation errors when building with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3405. [bug] Handle time going backwards in acache. [RT #31253]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3404. [bug] dnssec-signzone: When re-signing a zone, remove
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews RRSIG and NSEC records from nodes that used to be
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews in-zone but are now below a zone cut. [RT #31556]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3402. [test] The IPv6 interface numbers used for system
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews tests were incorrect on some platforms. [RT #25085]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3400. [cleanup] "named -V" can now report a source ID string, defined
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews in the "srcid" file in the build tree and normally set
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to the most recent git hash. [RT #31494]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3399. [port] netbsd: rename 'bool' parameter to avoid namespace
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein clash. [RT #31515]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3398. [bug] SOA parameters were not being updated with inline
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein signed zones if the zone was modified while the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein server was offline. [RT #29272]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3396. [bug] OPT records were incorrectly removed from signed,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein truncated responses. [RT #31439]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater3394. [bug] Adjust 'successfully validated after lower casing
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater signer' log level and category. [RT #31414]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater3393. [bug] 'host -C' could core dump if REFUSED was received.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater3392. [func] Keep statistics on REFUSED responses. [RT #31412]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3390. [bug] Silence clang compiler warnings. [RT #30417]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3388. [bug] Fixed several Coverity warnings. [RT #30996]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3387. [func] DS digest can be disabled at runtime with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein disable-ds-digests. [RT #21581]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3386. [bug] Address locking violation when generating new NSEC /
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein NSEC3 chains. [RT #31224]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3385. [bug] named-checkconf didn't detect missing master lists
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in also-notify clauses. [RT #30810]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3384. [bug] Improved logging of crypto errors. [RT #30963]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3383. [security] A certain combination of records in the RBT could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cause named to hang while populating the additional
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein section of a response. [RT #31090]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3382. [bug] SOA query from slave used use-v6-udp-ports range,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if set, regardless of the address family in use.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3381. [contrib] Update queryperf to support more RR types.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3380. [bug] named could die if a non-existant master list was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein referenced in a also-notify. [RT #31004]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3379. [bug] isc_interval_zero and isc_time_epoch should be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "const (type)* const". [RT #31069]
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews3378. [bug] Handle missing 'managed-keys-directory' better.
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews3377. [bug] Removed spurious newline from NSEC3 multiline
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews output. [RT #31044]
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews3376. [bug] Lack of EDNS support was being recorded without a
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews successful response. [RT #30811]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews3374. [bug] isc_parse_uint32 failed to return a range error on
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews systems with 64 bit longs. [RT #30232]
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews3373. [bug] win32: open raw files in binary mode. [RT #30944]
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews3372. [bug] Silence spurious "deleted from unreachable cache"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein messages. [RT #30501]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3371. [bug] AD=1 should behave like DO=1 when deciding whether to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein add NS RRsets to the additional section or not.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3370. [bug] Address use after free while shutting down. [RT #30241]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3369. [bug] nsupdate terminated unexpectedly in interactive mode
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if built with readline support. [RT #29550]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were not C++ safe.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3367. [bug] dns_dnsseckey_create() result was not being checked.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3366. [bug] Fixed Read-After-Write dependency violation for IA64
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein atomic operations. [RT #25181]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3365. [bug] Removed spurious newlines from log messages in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3364. [security] Named could die on specially crafted record.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3363. [bug] Need to allow "forward" and "fowarders" options
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in static-stub zones; this had been overlooked.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3362. [bug] Setting some option values to 0 in named.conf
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could trigger an assertion failure on startup.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3361. [bug] "rndc signing -nsec3param" didn't work correctly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when salt was set to '-' (no salt). [RT #30099]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3360. [bug] 'host -w' could die. [RT #18723]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3359. [bug] An improperly-formed TSIG secret could cause a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory leak. [RT #30607]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3358. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3357. [port] Add support for libxml2-2.8.x [RT #30440]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein approaching their expiry, so they don't remain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in caches after expiry. [RT #26429]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3355. [port] Use more portable awk in verify system test.
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews3354. [func] Improve OpenSSL error logging. [RT #29932]
ceeb18e6907a10547859faa340ecad83bedae90cMark Andrews3353. [bug] Use a single task for task exclusive operations.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3352. [bug] Ensure that learned server attributes timeout of the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein adb cache. [RT #29856]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory debugging flags are set. [RT #30243]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3350. [bug] Memory read overrun in isc___mem_reallocate if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ISC_MEM_DEBUGCTX memory debugging flag is set.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3349. [bug] Change #3345 was incomplete. [RT #30233]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3348. [bug] Prevent RRSIG data from being cached if a negative
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein record matching the covering type exists at a higher
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein trust level. Such data already can't be retrieved from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the cache since change 3218 -- this prevents it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein being inserted into the cache as well. [RT #26809]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3347. [bug] dnssec-settime: Issue a warning when writing a new
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein private key file would cause a change in the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein permissions of the existing file. [RT #27724]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3346. [security] Bad-cache data could be used before it was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein initialized, causing an assert. [RT #30025]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3345. [bug] Addressed race condition when removing the last item
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or inserting the first item in an ISC_QUEUE.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3344. [func] New "dnssec-checkds" command checks a zone to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein determine which DS records should be published
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in the parent zone, or which DLV records should be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein published in a DLV zone, and queries the DNS to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ensure that it exists. (Note: This tool depends
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein on python; it will not be built or installed on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein systems that do not have a python interpreter.)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3343. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3342. [bug] Change #3314 broke saving of stub zones to disk
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein resulting in excessive cpu usage in some cases.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3341. [func] New "dnssec-verify" command checks a signed zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to ensure correctness of signatures and of NSEC/NSEC3
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein chains. [RT #23673]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3340. [func] Added new 'fast' zone file format, which is an image
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of a zone database that can be loaded directly into
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory via mmap(), allowing much faster zone loading.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (Note: Because of pointer sizes and other
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein considerations, this file format is platform-dependent;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'fast' zone files cannot always be transfered from one
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein server to another.) [RT #25419]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3339. [func] Allow the maximum supported rsa exponent size to be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein specified: "max-rsa-exponent-size <value>;" [RT #29228]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater3338. [bug] Address race condition in units tests: asyncload_zone
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater and asyncload_zt. [RT #26100]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater3337. [bug] Change #3294 broke support for the multiple keys
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater in controls. [RT #29694]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater3336. [func] Maintain statistics for RRsets tagged as "stale".
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater3335. [func] nslookup: return a nonzero exit code when unable
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater to get an answer. [RT #29492]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater3334. [bug] Hold a zone table reference while performing a
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater asyncronous load of a zone. [RT #28326]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater3333. [bug] Setting resolver-query-timeout too low can cause
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater named to not recover if it loses connectivity.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater3331. [security] dns_rdataslab_fromrdataset could produce bad
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater rdataslabs. [RT #29644]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater3330. [func] Fix missing signatures on NOERROR results despite
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater RPZ rewriting. Also
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - add optional "recursive-only yes|no" to the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein response-policy statement
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - add optional "max-policy-ttl" to the response-policy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statement to limit the false data that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "recursive-only no" can introduce into
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein resolvers' caches
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - add a RPZ performance test to bin/tests/system/rpz
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when queryperf is available.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - the encoding of PASSTHRU action to "rpz-passthru".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (The old encoding is still accepted.)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3329. [bug] Handle RRSIG signer-name case consistently: We
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein generate RRSIG records with the signer-name in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lower case. We accept them with any case, but if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein they fail to validate, we try again in lower case.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3328. [bug] Fixed inconsistent data checking in dst_parse.c.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to 'filter-aaaa-on-v4' but applies to IPv6
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein connections. (Use "configure --enable-filter-aaaa"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to enable this option.) [RT #27308]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3326. [func] Added task list statistics: task model, worker
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein threads, quantum, tasks running, tasks ready.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3325. [func] Report cache statistics: memory use, number of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein nodes, number of hash buckets, hit and miss counts.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3324. [test] Add better tests for ADB stats [RT #27057]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3323. [func] Report the number of buckets the resolver is using.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3322. [func] Monitor the number of active TCP and UDP dispatches.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3321. [func] Monitor the number of recursive fetches and the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein number of open sockets, and report these values in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the statistics channel. [RT #27054]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3320. [func] Added support for monitoring of recursing client
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein count. [RT #27009]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3319. [func] Added support for monitoring of ADB entry count and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein hash size. [RT #27057]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3318. [tuning] Reduce the amount of work performed while holding a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein bucket lock when finshed with a fetch context.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3316. [tuning] Improved locking performance when recursing.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3315. [tuning] Use multiple dispatch objects for sending upstream
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein queries; this can improve performance on busy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein multiprocessor systems by reducing lock contention.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3314. [bug] The masters list could be updated while refesh_callback
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and stub_callback were using it. [RT #26732]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3313. [protocol] Add TLSA record type. [RT #28989]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater3311. [bug] Abort the zone dump if zone->db is NULL in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone.c:zone_gotwritehandle. [RT #29028]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3310. [test] Increase table size for mutex profiling. [RT #28809]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3309. [bug] resolver.c:fctx_finddone() was not threadsafe.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3308. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews3305. [func] Add wire format lookup method to sdb. [RT #28563]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3303. [bug] named could die when reloading. [RT #28606]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3302. [bug] dns_dnssec_findmatchingkeys could fail to find
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein keys if the zone name contained character that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein required special mappings. [RT #28600]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3301. [contrib] Update queryperf to build on darwin. Add -R flag
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for non-recursive queries. [RT #28565]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3300. [bug] Named could die if gssapi was enabled in named.conf
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein but was not compiled in. [RT #28338]
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3298. [bug] Named could dereference a NULL pointer in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zmgr_start_xfrin_ifquota if the zone was being removed.
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3296. [bug] Named could die with a INSIST failure in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein client.c:exit_check. [RT #28346]
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews portable. [RT # 26542]
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews error. [RT #28265]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3293. [func] nsupdate: list supported type. [RT #28261]
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater3292. [func] Log messages in the axfr stream at debug 10.
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews3291. [port] Fixed a build error on systems without ENOTSUP.
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews by the DLZ dlopen driver. [RT #28056]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews3286. [bug] Managed key maintenance timer could fail to start
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews after 'rndc reconfig'. [RT #26786]
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews proveunsecure after calling startfinddlvsep.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater3284. [bug] Address race conditions with the handling of
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews failed to load. [RT #27863]
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews of the old NS RRset when replacing it.
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews [RT #27792] [RT #27884]
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews despite succeeding over the loopback interface.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3280. [bug] Potential double free of a rdataset on out of memory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with DNS64. [RT #27762]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3279. [bug] Hold a internal reference to the zone while performing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a asynchronous load. Address potential memory leak
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater if the asynchronous is cancelled. [RT #27750]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews3278. [bug] Make sure automatic key maintenance is started
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when "auto-dnssec maintain" is turned on during
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews "rndc reconfig". [RT #26805]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3276. [bug] win32: ns_os_openfile failed to return NULL on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein safe_open failure. [RT #27696]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein option had been misspelled as '-clear'. (To avoid
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews future confusion, both options now work.) [RT #27173]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3274. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3273. [bug] AAAA responses could be returned in the additional
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein section even when filter-aaaa-on-v4 was in use.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3272. [func] New "rndc zonestatus" command prints information
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein about the specified zone. [RT #21671]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3271. [port] darwin: mksymtbl is not always stable, loop several
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein times before giving up. mksymtbl was using non
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater portable perl to covert 64 bit hex strings. [RT #27653]
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews --- 9.9.0rc2 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3270. [bug] "rndc reload" didn't reuse existing zones correctly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when inline-signing was in use. [RT #27650]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3269. [port] darwin 11 and later now built threaded by default.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein out the earliest expiry time. [RT #23311]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3267. [bug] Memory allocation failures could be mis-reported as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unexpected error. New ISC_R_UNSET result code.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3266. [bug] The maximum number of NSEC3 iterations for a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein DNSKEY RRset was not being properly computed.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce3265. [bug] Corrected a problem with lock ordering in the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce inline-signing code. [RT #27557]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3264. [bug] Automatic regeneration of signatures in an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein inline-signing zone could stall when the server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was restarted. [RT #27344]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3263. [bug] "rndc sync" did not affect the unsigned side of an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein inline-signing zone. [RT #27337]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3262. [bug] Signed responses were handled incorrectly by RPZ.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3261. [func] RRset ordering now defaults to random. [RT #27174]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3260. [bug] "rrset-order cyclic" could appear not to rotate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for some query patterns. [RT #27170/27185]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce --- 9.9.0rc1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3259. [bug] named-compilezone: Suppress "dump zone to <file>"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein message when writing to stdout. [RT #27109]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3258. [test] Add "forcing full sign with unreadable keys" test.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3257. [bug] Do not generate a error message when calling fsync()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in a pipe or socket. [RT #27109]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3255. [func] No longer require that a empty zones be explicitly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein enabled or that a empty zone is disabled for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RFC 1918 empty zones to be configured. [RT #27139]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein too long. [RT #26956]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3252. [bug] When master zones using inline-signing were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein updated while the server was offline, the source
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone could fall out of sync with the signed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein copy. They can now resynchronize. [RT #26676]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory dns_sdlz_putrr() can allocate per record to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein prevent run away memory consumption on ISC_R_NOSPACE.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3250. [func] 'configure --enable-developer'; turn on various
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configure options, normally off by default, that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein we want developers to build and test with. [RT #27103]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3249. [bug] Update log message when saving slave zones files for
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews analysis after load failures. [RT #27087]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3248. [bug] Configure options --enable-fixed-rrset and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --enable-exportlib were incompatible with each
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein other. [RT #27087]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3247. [bug] 'raw' format zones failed to preserve load order
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein breaking 'fixed' sort order. [RT #27087]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3246. [bug] Named failed to start with a empty also-notify list.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3245. [bug] Don't report a error unchanged serials unless there
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were other changes when thawing a zone with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ixfr-fromdifferences. [RT #26845]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3244. [func] Added readline support to nslookup and nsupdate.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Also simplified nsupdate syntax to make "update"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and "prereq" optional. [RT #24659]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein being properly set.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3242. [func] Extended the header of raw-format master files to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein include the serial number of the zone from which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein they were generated, if different (as in the case
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of inline-signing zones). This is to be used in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein inline-signing zones, to track changes between the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unsigned and signed versions of the zone, which may
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein have different serial numbers.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (Note: raw zonefiles generated by this version of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein BIND are no longer compatble with prior versions.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein To generate a backward-compatible raw zonefile
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein using dnssec-signzone or named-compilezone, specify
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein output format "raw=0" instead of simply "raw".)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3241. [bug] Address race conditions in the resolver code.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3240. [bug] DNSKEY state change events could be missed. [RT #26874]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein timestamp. [RT #26883]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3238. [bug] keyrdata was not being reinitialized in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lib/dns/rbtdb.c:iszonesecure. [RT#26913]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3237. [bug] dig -6 didn't work with +trace. [RT #26906]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3236. [bug] Backed out changes #3182 and #3202, related to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein EDNS(0) fallback behavior. [RT #26416]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3235. [func] dns_db_diffx, a extended dns_db_diff which returns
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the generated diff and optionally writes it to a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein journal. [RT #26386]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3232. [bug] Zero zone->curmaster before return in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_zone_setmasterswithkeys(). [RT #26732]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3231. [bug] named could fail to send a uncompressable zone.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3230. [bug] 'dig axfr' failed to properly handle a multi-message
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein axfr with a serial of 0. [RT #26796]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3229. [bug] Fix local variable to struct var assignment
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein found by CLANG warning.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3228. [tuning] Dynamically grow symbol table to improve zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein loading performance. [RT #26523]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3227. [bug] Interim fix to make WKS's use of getprotobyname()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and getservbyname() self thread safe. [RT #26232]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3226. [bug] Address minor resource leakages. [RT #26624]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein messages. [RT #26507]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3223. [bug] 'task_test privilege_drop' generated false positives.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3222. [cleanup] Replace dns_journal_{get,set}_bitws with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_journal_{get,set}_sourceserial. [RT #26634]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3221. [bug] Fixed a potential coredump on shutdown due to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein referencing fetch context after it's been freed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.9.0b2 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could fail to set the database version correctly,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein causing an assertion failure. [RT #26180]
c6d486af36165da7eb970354981d145249e342e4Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
c6d486af36165da7eb970354981d145249e342e4Mark Andrews3218. [security] Cache lookup could return RRSIG data associated with
c6d486af36165da7eb970354981d145249e342e4Mark Andrews nonexistent records, leading to an assertion
c6d486af36165da7eb970354981d145249e342e4Mark Andrews failure. [RT #26590]
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
c6d486af36165da7eb970354981d145249e342e4Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
c6d486af36165da7eb970354981d145249e342e4Mark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater3214. [func] Add 'named -U' option to set the number of UDP
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein listener threads per interface. [RT #26485]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein list prior to adding a reference to it leading a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein possible assertion failure. [RT #23219]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein option prints in single-line-per-record format.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3210. [bug] Canceling the oldest query due to recursive-client
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein overload could trigger an assertion failure. [RT #26463]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3208. [bug] 'dig -y' handle unknown tsig alorithm better.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater3206. [cleanup] Add ISC information to log at start time. [RT #25484]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater3205. [func] Upgrade dig's defaults to better reflect modern
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater nameserver behaviour. Enable "dig +adflag" and
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater "dig +edns=0" by default. Enable "+dnssec" when
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater running "dig +trace". [RT #23497]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater3204. [bug] When a master server that has been marked as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unreachable sends a NOTIFY, mark it reachable
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein again. [RT #25960]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3203. [bug] Increase log level to 'info' for validation failures
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from expired or not-yet-valid RRSIGs. [RT #21796]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3202. [bug] NOEDNS caching on timeout was too agressive.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3201. [func] 'rndc querylog' can now be given an on/off parameter
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein instead of only being used as a toggle. [RT #18351]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3200. [doc] Some rndc functions were undocumented or were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein missing from 'rndc -h' output. [RT #25555]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3199. [func] When logging client information, include the name
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein being queried. [RT #25944]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3198. [doc] Clarified that dnssec-settime can alter keyfile
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein permissions. [RT #24866]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3197. [bug] Don't try to log the filename and line number when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the config parser can't open a file. [RT #22263]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3196. [bug] nsupdate: return nonzero exit code when target zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein doesn't exist. [RT #25783]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3195. [cleanup] Silence "file not found" warnings when loading
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein managed-keys zone. [RT #26340]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews documentation. [RT #25203]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3192. [bug] A query structure could be used after being freed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3191. [bug] Print NULL records using "unknown" format. [RT #26392]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3190. [bug] Underflow in error handling in isc_mutexblock_init.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3189. [test] Added a summary report after system tests. [RT #25517]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3188. [bug] zone.c:zone_refreshkeys() could fail to detach
4556ad3a270bf049b3225433a402666aaffe3c36Mark Andrews references correctly when errors occurred, causing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a hang on shutdown. [RT #26372]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3187. [port] win32: support for Visual Studio 2008. [RT #26356]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.9.0b1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3186. [bug] Version/db mis-match in rpz code. [RT #26180]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3185. [func] New 'rndc signing' option for auto-dnssec zones:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - 'rndc signing -list' displays the current
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein state of signing operations
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - 'rndc signing -clear' clears the signing state
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein records for keys that have fully signed the zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - 'rndc signing -nsec3param' sets the NSEC3
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein parameters for the zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The 'rndc keydone' syntax is removed. [RT #23729]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3184. [bug] named had excessive cpu usage when a redirect zone was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configured. [RT #26013]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3182. [bug] Auth servers behind firewalls which block packets
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein greater than 512 bytes may cause other servers to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein perform poorly. Now, adb retains edns information
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and caches noedns servers. [RT #23392/24964]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3181. [func] Inline-signing is now supported for master zones.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3180. [func] Local copies of slave zones are now saved in raw
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein format by default, to improve startup performance.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'masterfile-format text;' can be used to override
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the default, if desired. [RT #25867]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3179. [port] kfreebsd: build issues. [RT #26273]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3178. [bug] A race condition introduced by change #3163 could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cause an assertion failure on shutdown. [RT #26271]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3177. [func] 'rndc keydone', remove the indicator record that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named has finished signing the zone with the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein corresponding key. [RT #26206]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3176. [doc] Corrected example code and added a README to the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sample external DLZ module in contrib/dlz/example.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3175. [bug] Fix how DNSSEC positive wildcard responses from a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein NSEC3 signed zone are validated. Stop sending a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unnecessary NSEC3 record when generating such
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein responses. [RT #26200]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3174. [bug] Always compute to revoked key tag from scratch.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3173. [port] Correctly validate root DS responses. [RT #25726]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3172. [port] darwin 10.* and freebsd [89] are now built threaded by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3171. [bug] Exclusively lock the task when adding a zone using
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'rndc addzone'. [RT #25600]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.9.0a3 released ---
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater3170. [func] RPZ update:
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - fix precedence among competing rules
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - improve ARM text including documenting rule precedence
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater - try to rewrite CNAME chains until first hit
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater - new "rpz" logging channel
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews - RDATA for CNAME rules can include wildcards
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce - replace "NO-OP" named.conf policy override with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "PASSTHRU" and add "DISABLED" override ("NO-OP"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is still recognized)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3169. [func] Catch db/version mis-matches when calling dns_db_*().
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3168. [bug] Nxdomain redirection could trigger an assert with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a ANY query. [RT #26017]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3167. [bug] Negative answers from forwarders were not being
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews correctly tagged making them appear to not be cached.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3166. [bug] Upgrading a zone to support inline-signing failed.
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews3165. [bug] dnssec-signzone could generate new signatures when
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews resigning, even when valid signatures were already
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews present. [RT #26025]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3164. [func] Enable DLZ modules to retrieve client information,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews so that responses can be changed depending on the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein source address of the query. [RT #25768]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3163. [bug] Use finer-grained locking in client.c to address
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein concurrency problems with large numbers of threads.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3162. [test] start.pl: modified to allow for "named.args" in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ns*/ subdirectory to override stock arguments to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named. Largely from RT#26044, but no separate ticket.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews assertion failures. [RT #25880]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3160. [bug] When printing out a NSEC3 record in multiline form
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the newline was not being printed causing type codes
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to be run together. [RT #25873]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3159. [bug] On some platforms, named could assert on startup
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews when running in a chrooted environment without
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews /proc. [RT #25863]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3158. [bug] Recursive servers would prefer a particular UDP
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews socket instead of using all available sockets.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the config file before pausing the server. [RT #21373]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3156. [placeholder]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews --- 9.9.0a2 released ---
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3154. [bug] Attempting to print an empty rdataset could trigger
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an assert. [RT #25452]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3153. [func] Extend request-ixfr to zone level and remove the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein side effect of forcing an AXFR. [RT #25156]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews incorrect use of __builtin_expect. [RT #25183]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3151. [bug] Queries for type RRSIG or SIG could be handled
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews incorrectly. [RT #21050]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3150. [func] Improved startup and reconfiguration time by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein enabling zones to load in multiple threads. [RT #25333]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3149. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3148. [bug] Processing of normal queries could be stalled when
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews forwarding a UPDATE message. [RT #24711]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews3147. [func] Initial inline signing support. [RT #23657]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.9.0a1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3145. [test] Capture output of ATF unit tests in "./atf.out" if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein there were any errors while running them. [RT #25527]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3144. [bug] dns_dbiterator_seek() could trigger an assert when
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews used with a nonexistent database node. [RT #25358]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3143. [bug] Silence clang compiler warnings. [RT #25174]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3142. [bug] NAPTR is class agnostic. [RT #25429]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3141. [bug] Silence spurious "zone serial (0) unchanged" messages
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein associated with empty zones. [RT #25079]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3140. [func] New command "rndc flushtree <name>" clears the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein specified name from the server cache along with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein all names under it. [RT #19970]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews for the hashing algorithms (md5, sha1 - sha512, and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein their hmac counterparts). [RT #25067]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3138. [bug] Address memory leaks and out-of-order operations when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein shutting named down. [RT #25210]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews3137. [func] Improve hardware scalability by allowing multiple
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews worker threads to process incoming UDP packets.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein This can significantly increase query throughput
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein on some systems. [RT #22992]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3136. [func] Add RFC 1918 reverse zones to the list of built-in
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater empty zones switched on by the 'empty-zones-enable'
a53c45b2b8e778663ea51834272169dc946b6672Mark Andrews option. [RT #24990]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3134. [bug] Improve the accuracy of dnssec-signzone's signing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statistics. [RT #16030]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3133. [bug] Change #3114 was incomplete. [RT #24577]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3132. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3131. [tuning] Improve scalability by allocating one zone task
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein per 100 zones at startup time, rather than using a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fixed-size task table. [RT #24406]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3130. [func] Support alternate methods for managing a dynamic
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone's serial number. Two methods are currently
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater defined using serial-update-method, "increment"
a53c45b2b8e778663ea51834272169dc946b6672Mark Andrews (default) and "unixtime". [RT #23849]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3129. [bug] Named could crash on 'rndc reconfig' when
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce allow-new-zones was set to yes and named ACLs
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were used. [RT #22739]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3128. [func] Inserting an NSEC3PARAM via dynamic update in an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein auto-dnssec zone that has not been signed yet
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater will cause it to be signed with the specified NSEC3
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein parameters when keys are activated. The
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein NSEC3PARAM record will not appear in the zone until
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein it is signed, but the parameters will be stored.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3127. [bug] 'rndc thaw' will now remove a zone's journal file
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if the zone serial number has been changed and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ixfr-from-differences is not in use. [RT #24687]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3126. [security] Using DNAME record to generate replacements caused
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RPZ to exit with a assertion failure. [RT #24766]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3125. [security] Using wildcard CNAME records as a replacement with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RPZ caused named to exit with a assertion failure.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3124. [bug] Use an rdataset attribute flag to indicate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein negative-cache records rather than using rrtype 0;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein this will prevent problems when that rrtype is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein used in actual DNS packets. [RT #24777]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3123. [security] Change #2912 exposed a latent flaw in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_rdataset_totext() that could cause named to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein crash with an assertion failure. [RT #24777]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3121. [security] An authoritative name server sending a negative
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein response containing a very large RRset could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein trigger an off-by-one error in the ncache code
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and crash named. [RT #24650]
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews that validated insecure without using DLV and had
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews DS records in the parent zone. [RT #24631]
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews record could be created and never marked complete.
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews3118. [bug] nsupdate could dump core on shutdown when using
7329012471d165cd3dc4180ad2a0a43de91e7f01Mark Andrews SIG(0) keys. [RT #24604]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3117. [cleanup] Remove doc and parser references to the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein never-implemented 'auto-dnssec create' option.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3116. [func] New 'dnssec-update-mode' option controls updates
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of DNSSEC records in signed dynamic zones. Set to
cf3f55777b86527d5b00bb39d661c5fe6f9625f2Automatic Updater 'no-resign' to disable automatic RRSIG regeneration
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein while retaining the ability to sign new or changed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein data. [RT #24533]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3115. [bug] Named could fail to return requested data when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein following a CNAME that points into the same zone.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3114. [bug] Retain expired RRSIGs in dynamic zones if key is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein inactive and there is no replacement key. [RT #23136]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce3113. [doc] Document the relationship between serial-query-rate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and NOTIFY messages.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce3112. [doc] Add missing descriptions of the update policy name
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce types "ms-self", "ms-subdomain", "krb5-self" and
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce "krb5-subdomain", which allow machines to update
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein their own records, to the BIND 9 ARM.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3111. [bug] Improved consistency checks for dnssec-enable and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-validation, added test cases to the
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater checkconf system test. [RT #24398]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3110. [bug] dnssec-signzone: Wrong error message could appear
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when attempting to sign with no KSK. [RT #24369]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3109. [func] The also-notify option now uses the same syntax
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as a zone's masters clause. This means it is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein now possible to specify a TSIG key to use when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sending notifies to a given server, or to include
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an explicit named masters list in an also-notfiy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statement. [RT #23508]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3108. [cleanup] dnssec-signzone: Clarified some error and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein code (use -P instead). [RT #20852]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3107. [bug] dnssec-signzone: Report the correct number of ZSKs
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson when using -x. [RT #20852]
aeb8fffc841865c3336383eadfd9987332a03286Andreas Gustafsson3106. [func] When logging client requests, include the name of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the TSIG key if any. [RT #23619]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews3105. [bug] GOST support can be suppressed by "configure
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --without-gost" [RT #24367]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3104. [bug] Better support for cross-compiling. [RT #24367]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3103. [bug] Configuring 'dnssec-validation auto' in a view
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein instead of in the options statement could trigger
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an assertion failure in named-checkconf. [RT #24382]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3102. [func] New 'dnssec-loadkeys-interval' option configures
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein how often, in minutes, to check the key repository
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for updates when using automatic key maintenance.
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater Default is every 60 minutes (formerly hard-coded
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to 12 hours). [RT #23744]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3101. [bug] Zones using automatic key maintenance could fail
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to check the key repository for updates. [RT #23744]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3100. [security] Certain response policy zone configurations could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein trigger an INSIST when receiving a query of type
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RRSIG. [RT #24280]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3099. [test] "dlz" system test now runs but gives R:SKIPPED if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not compiled with --with-dlz-filesystem. [RT #24146]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3098. [bug] DLZ zones were answering without setting the AA bit.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3097. [test] Add a tool to test handling of malformed packets.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3096. [bug] Set KRB5_KTNAME before calling log_cred() in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dst_gssapi_acceptctx(). [RT #24004]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3095. [bug] Handle isolated reserved ports in the port range.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3094. [doc] Expand dns64 documentation.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3092. [bug] Signatures for records at the zone apex could go
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein stale due to an incorrect timer setting. [RT #23769]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3091. [bug] Fixed a bug in which zone keys that were published
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and then subsequently activated could fail to trigger
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews automatic signing. [RT #22911]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews3090. [func] Make --with-gssapi default [RT #23738]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3089. [func] dnssec-dsfromkey now supports reading keys from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein standard input "dnssec-dsfromkey -f -". [RT# 20662]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and add setup.sh in order to resolve changing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named.conf issue. [RT #23687]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3087. [bug] DDNS updates using SIG(0) with update-policy match
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein type "external" could cause a crash. [RT #23735]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3086. [bug] Running dnssec-settime -f on an old-style key will
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein now force an update to the new key format even if no
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein other change has been specified, using "-P now -A now"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as default values. [RT #22474]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3085. [func] New '-R' option in dnssec-signzone forces removal
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of signatures which have not yet expired but
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were generated by a key that no longer exists.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3084. [func] A new command "rndc sync" dumps pending changes in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a dynamic zone to disk; "rndc sync -clean" also
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein removes the journal file after syncing. Also,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "rndc freeze" no longer removes journal files.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3083. [bug] NOTIFY messages were not being sent when generating
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a NSEC3 chain incrementally. [RT #23702]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3082. [port] strtok_r is threads only. [RT #23747]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3081. [bug] Failure of DNAME substitution did not return
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein YXDOMAIN. [RT #23591]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce3079. [bug] Handle isc_event_allocate failures in t_tasks.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3078. [func] Added a new include file with function typedefs
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for the DLZ "dlopen" driver. [RT #23629]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3077. [bug] zone.c:zone_refreshkeys() incorrectly called
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_zone_attach(), use zone->irefs instead. [RT #23303]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-keyfromlabel sets the default TTL of the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein key. When possible, automatic signing will use that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein TTL when the key is published. [RT #23304]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein timestamp when determining which keys are active.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3074. [bug] Make the adb cache read through for zone data and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein glue learn for zone named is authoritative for.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3073. [bug] managed-keys changes were not properly being recorded.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3071. [bug] has_nsec could be used unintialised in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein update.c:next_active. [RT #20256]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3070. [bug] dnssec-signzone potential NULL pointer dereference.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3069. [cleanup] Silence warnings messages from clang static analysis.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3068. [bug] Named failed to build with a OpenSSL without engine
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein support. [RT #23473]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3067. [bug] ixfr-from-differences {master|slave}; failed to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein select the master/slave zones. [RT #23580]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3066. [func] The DLZ "dlopen" driver is now built by default,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein no longer requiring a configure option. To
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein disable it, use "configure --without-dlopen".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Driver also supported on win32. [RT #23467]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3065. [bug] RRSIG could have time stamps too far in the future.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3064. [bug] powerpc: add sync instructions to the end of atomic
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein operations. [RT #23469]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3062. [func] Made several changes to enhance human readability
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of DNSSEC data in dig output and in generated
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - DNSKEY record comments are more verbose, no
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein longer used in multiline mode only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - multiline RRSIG records reformatted
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - multiline output mode for NSEC3PARAM records
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - "dig +norrcomments" suppresses DNSKEY comments
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews - "dig +split=X" breaks hex/base64 records into
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fields of width X; "dig +nosplit" disables this.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3061. [func] New option "dnssec-signzone -D", only write out
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein generated DNSSEC records. [RT #22896]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce3060. [func] New option "dnssec-signzone -X <date>" allows
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce specification of a separate expiration date
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3059. [test] Added a regression test for change #3023.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3058. [bug] Cause named to terminate at startup or rndc reconfig/
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reload to fail, if a log file specified in the conf
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file isn't a plain file. [RT #22771]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3057. [bug] "rndc secroots" would abort after the first error
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and so could miss some views. [RT #23488]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3056. [func] Added support for URI resource record. [RT #23386]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3055. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3054. [bug] Added elliptic curve support check in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein GOST OpenSSL engine detection. [RT #23485]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3053. [bug] Under a sustained high query load with a finite
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-cache-size, it was possible for cache memory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to be exhausted and not recovered. [RT #23371]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3052. [test] Fixed last autosign test report. [RT #23256]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3051. [bug] NS records obsure DNAME records at the bottom of the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone if both are present. [RT #23035]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3050. [bug] The autosign system test was timing dependent.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Wait for the initial autosigning to complete
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein before running the rest of the test. [RT #23035]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3049. [bug] Save and restore the gid when creating creating
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named.pid at startup. [RT #23290]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3048. [bug] Fully separate view key mangement. [RT #23419]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater3047. [bug] DNSKEY NODATA responses not cached fixed in
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater validator.c. Tests added to dnssec system test.
7c0ebe385b36d64c2424dd5a3e62d441c08e7037Andreas Gustafsson3046. [bug] Use RRSIG original TTL to compute validated RRset
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson and RRSIG TTL. [RT #23332]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater3045. [removed] Replaced by change #3050.
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater3044. [bug] Hold the socket manager lock while freeing the socket.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce3043. [test] Merged in the NetBSD ATF test framework (currently
7c0ebe385b36d64c2424dd5a3e62d441c08e7037Andreas Gustafsson version 0.12) for development of future unit tests.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson Use configure --with-atf to build ATF internally
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater or configure --with-atf=prefix to use an external
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater copy. [RT #23209]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater3042. [bug] dig +trace could fail attempting to use IPv6
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce addresses on systems with only IPv4 connectivity.
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater3041. [bug] dnssec-signzone failed to generate new signatures on
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater ttl changes. [RT #23330]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3040. [bug] Named failed to validate insecure zones where a node
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with a CNAME existed between the trust anchor and the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein top of the zone. [RT #23338]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3039. [func] Redirect on NXDOMAIN support. [RT #23146]
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3037. [doc] Update COPYRIGHT to contain all the individual
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein copyright notices that cover various parts.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3036. [bug] Check built-in zone arguments to see if the zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is re-usable or not. [RT #21914]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3035. [cleanup] Simplify by using strlcpy. [RT #22521]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3029. [bug] isc_netaddr_format() handle a zero sized buffer.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein catch NULL pointer dereferences before they happen.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3026. [bug] lib/isc/httpd.c: check that we have enough space
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein after calling grow_headerspace() and if not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein re-call grow_headerspace() until we do. [RT #22521]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3025. [bug] Fixed a possible deadlock due to zone resigning.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce3024. [func] RTT Banding removed due to minor security increase
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce but major impact on resolver latency. [RT #23310]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson3023. [bug] Named could be left in an inconsistent state when
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson receiving multiple AXFR response messages that were
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson not all TSIG-signed. [RT #23254]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3021. [bug] Change #3010 was incomplete. [RT #22296]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson3020. [bug] auto-dnssec failed to correctly update the zone when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein changing the DNSKEY RRset. [RT #23232]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3019. [test] Test: check apex NSEC3 records after adding DNSKEY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein record via UPDATE. [RT #23229]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3018. [bug] Named failed to check for the "none;" acl when deciding
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if a zone may need to be re-signed. [RT #23120]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3017. [doc] dnssec-keyfromlabel -I was not properly documented.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3016. [bug] rndc usage missing '-b'. [RT #22937]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3014. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3013. [bug] The DNS64 ttl was not always being set as expected.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3012. [bug] Remove DNSKEY TTL change pairs before generating
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein signing records for any remaining DNSKEY changes.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3011. [func] Change the default query timeout from 30 seconds
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to 10. Allow setting this in named.conf using the new
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'resolver-query-timeout' option, which specifies a max
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein time in seconds. 0 means 'default' and anything longer
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein than 30 will be silently set to 30. [RT #22852]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for refreshing managed-keys. [RT #22296]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3009. [bug] clients-per-query code didn't work as expected with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein particular query patterns. [RT #22972]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.8.0b1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3008. [func] Response policy zones (RPZ) support. [RT #21726]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3007. [bug] Named failed to preserve the case of domain names in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rdata which is not compressible when writing master
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein files. [RT #22863]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3006. [func] Allow dynamically generated TSIG keys to be preserved
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein across restarts of named. Initially this is for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein TSIG keys generated using GSSAPI. [RT #22639]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3005. [port] Solaris: Work around the lack of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein gsskrb5_register_acceptor_identity() by setting
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the KRB5_KTNAME environment variable to the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein contents of tkey-gssapi-keytab. Also fixed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein test errors on MacOSX. [RT #22853]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3004. [func] DNS64 reverse support. [RT #22769]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3003. [experimental] Added update-policy match type "external",
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein enabling named to defer the decision of whether to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow a dynamic update to an external daemon.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (Contributed by Andrew Tridgell.) [RT #22758]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3001. [func] Added a default trust anchor for the root zone, which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein can be switched on by setting "dnssec-validation auto;"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in the named.conf options. [RT #21727]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein3000. [bug] More TKEY/GSS fixes:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - nsupdate can now get the default realm from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the user's Kerberos principal
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - corrected gsstest compilation flags
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - improved documentation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - fixed some NULL dereferences
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2999. [func] Add GOST support (RFC 5933). [RT #20639]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to the task api. [RT #22776]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2997. [func] named -V now reports the OpenSSL and libxml2 verions
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein it was compiled against. [RT #22687]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2996. [security] Temporarily disable SO_ACCEPTFILTER support.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2995. [bug] The Kerberos realm was not being correctly extracted
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from the signer's identity. [RT #22770]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein do not use threads on earlier versions. Also kill
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the unproven-pthreads, mit-pthreads, and ptl2 support.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2993. [func] Dynamically grow adb hash tables. [RT #21186]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for looking at a secure delegation. [RT #22059]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dynamic zones. [RT #22365]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2990. [bug] 'dnssec-settime -S' no longer tests prepublication
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein interval validity when the interval is set to 0.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2989. [func] Added support for writable DLZ zones. (Contributed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by Andrew Tridgell of the Samba project.) [RT #22629]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of external DLZ drivers that can be loaded as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein shared objects at runtime rather than linked with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named. Currently this is switched on via a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein compile-time option, "configure --with-dlz-dlopen".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Note: the syntax for configuring DLZ zones
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is likely to be refined in future releases.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (Contributed by Andrew Tridgell of the Samba
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein project.) [RT #22629]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2987. [func] Improve ease of configuring TKEY/GSS updates by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein adding a "tkey-gssapi-keytab" option. If set,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein updates will be allowed with any key matching
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a principal in the specified keytab file.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "tkey-gssapi-credential" is no longer required
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and is expected to be deprecated. (Contributed
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater by Andrew Tridgell of the Samba project.)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2986. [func] Add new zone type "static-stub". It's like a stub
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone, but the nameserver names and/or their IP
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein addresses are statically configured. [RT #21474]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2985. [bug] Add a regression test for change #2896. [RT #21324]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2984. [bug] Don't run MX checks when the target of the MX record
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is ".". [RT #22645]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.8.0a1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2982. [bug] Reference count dst keys. dst_key_attach() can be used
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein increment the reference count.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Note: dns_tsigkey_createfromkey() callers should now
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein always call dst_key_free() rather than setting it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to NULL on success. [RT #22672]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2980. [bug] named didn't properly handle UPDATES that changed the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein TTL of the NSEC3PARAM RRset. [RT #22363]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2979. [bug] named could deadlock during shutdown if two
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "rndc stop" commands were issued at the same
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein time. [RT #22108]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2978. [port] hpux: look for <devpoll.h> [RT #21919]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2977. [bug] 'nsupdate -l' report if the session key is missing.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2976. [bug] named could die on exit after negotiating a GSS-TSIG
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein key. [RT #22573]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein wrong lock which could lead to server deadlock.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2974. [bug] Some valid UPDATE requests could fail due to a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein consistency check examining the existing version
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of the zone rather than the new version resulting
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from the UPDATE. [RT #22413]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2973. [bug] bind.keys.h was being removed by the "make clean"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein at the end of configure resulting in build failures
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein where there is very old version of perl installed.
47b6d855e3a569e46ec2481dd1abb62e99752817Mark Andrews Move it to "make maintainer-clean". [RT #22230]
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
919c99b7a47dadd4564eb2b48be2f59216d932fcAutomatic Updater2971. [bug] Fixed a bug that caused journal files not to be
47b6d855e3a569e46ec2481dd1abb62e99752817Mark Andrews compacted on Windows systems as a result of
47b6d855e3a569e46ec2481dd1abb62e99752817Mark Andrews non-POSIX-compliant rename() semantics. [RT #22434]
64affc54f96a2c71cbd10ed71e246ce0746259aaAutomatic Updater2970. [security] Adding a NO DATA negative cache entry failed to clear
64affc54f96a2c71cbd10ed71e246ce0746259aaAutomatic Updater any matching RRSIG records. A subsequent lookup of
64affc54f96a2c71cbd10ed71e246ce0746259aaAutomatic Updater of NO DATA cache entry could trigger a INSIST when the
64affc54f96a2c71cbd10ed71e246ce0746259aaAutomatic Updater unexpected RRSIG was also returned with the NO DATA
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cache entry.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein CVE-2010-3613, VU#706148. [RT #22288]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2969. [security] Fix acl type processing so that allow-query works
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in options and view statements. Also add a new
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein set of tests to verify proper functioning.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein CVE-2010-3615, VU#510208. [RT #22418]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2968. [security] Named could fail to prove a data set was insecure
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater before marking it as insecure. One set of conditions
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater that can trigger this occurs naturally when rolling
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater DNSKEY algorithms.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater CVE-2010-3614, VU#837744. [RT #22309]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2967. [bug] 'host -D' now turns on debugging messages earlier.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2966. [bug] isc_print_vsnprintf() failed to check if there was
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater space available in the buffer when adding a left
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein justified character with a non zero width,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (e.g. "%-1c"). [RT #22270]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2965. [func] Test HMAC functions using test data from RFC 2104 and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RFC 4634. [RT #21702]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2964. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2963. [security] The allow-query acl was being applied instead of the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-query-cache acl to cache lookups. [RT #22114]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2962. [port] win32: add more dependencies to BINDBuild.dsw.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2961. [bug] Be still more selective about the non-authoritative
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein answers we apply change 2748 to. [RT #22074]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2960. [func] Check that named accepts non-authoritative answers.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2959. [func] Check that named starts with a missing masterfile.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2958. [bug] named failed to start with a missing master file.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2957. [bug] entropy_get() and entropy_getpseudo() failed to match
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the API for RAND_bytes() and RAND_pseudo_bytes()
cbf7f1435f332b31f51a98611ccbfcd07c42c032Automatic Updater respectively. [RT #21962]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2955. [func] Provide more detail in the recursing log. [RT #22043]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein build_sqldbinstance failure. [RT #21623]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2953. [bug] Silence spurious "expected covering NSEC3, got an
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater exact match" message when returning a wildcard
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater no data response. [RT #21744]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2952. [port] win32: named-checkzone and named-checkconf failed
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater to initialise winsock. [RT #21932]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2951. [bug] named failed to generate a correct signed response
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in a optout, delegation only zone with no secure
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews delegations. [RT #22007]
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews2950. [bug] named failed to perform a SOA up to date check when
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews falling back to TCP on UDP timeouts when
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews ixfr-from-differences was set. [RT #21595]
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews it was called multiple times. [RT #21942]
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews2948. [port] MacOS: provide a mechanism to configure the test
12351e0500dff39f56844401fd191a36bcc4a7adMark Andrews interfaces at reboot. See bin/tests/system/README
12351e0500dff39f56844401fd191a36bcc4a7adMark Andrews for details.
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews2947. [placeholder]
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews2946. [doc] Document the default values for the minimum and maximum
12351e0500dff39f56844401fd191a36bcc4a7adMark Andrews zone refresh and retry values in the ARM. [RT #21886]
12351e0500dff39f56844401fd191a36bcc4a7adMark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
12351e0500dff39f56844401fd191a36bcc4a7adMark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews2943. [func] Add support to load new keys into managed zones
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater without signing immediately with "rndc loadkeys".
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews Add support to link keys with "dnssec-keygen -S"
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews and "dnssec-settime -S". [RT #21351]
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews2941. [bug] sdb and sdlz (dlz's zone database) failed to support
f7b41fd9291b8f4dba27e2b57e1d93f0913a4f1dMark Andrews DNAME at the zone apex. [RT #21610]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2940. [port] Remove connection aborted error message on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Windows. [RT #21549]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2939. [func] Check that named successfully skips NSEC3 records
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater that fail to match the NSEC3PARAM record currently
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater in use. [RT# 21868]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2938. [bug] When generating signed responses, from a signed zone
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater that uses NSEC3, named would use a uninitialised
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater pointer if it needed to skip a NSEC3 record because
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater it didn't match the selected NSEC3PARAM record for
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater zone. [RT# 21868]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2937. [bug] Worked around an apparent race condition in over
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater memory conditions. Without this fix a DNS cache DB or
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater ADB could incorrectly stay in an over memory state,
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater effectively refusing further caching, which
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater subsequently made a BIND 9 caching server unworkable.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater This fix prevents this problem from happening by
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater polling the state of the memory context, rather than
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater making a copy of the state, which appeared to cause
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater a race. This is a "workaround" in that it doesn't
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater solve the possible race per se, but several experiments
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater proved this change solves the symptom. Also, the
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater polling overhead hasn't been reported to be an issue.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater This bug should only affect a caching server that
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater specifies a finite max-cache-size. It's also quite
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater likely that the bug happens only when enabling threads,
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater but it's not confirmed yet. [RT #21818]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2936. [func] Improved configuration syntax and multiple-view
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater support for addzone/delzone feature (see change
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater #2930). Removed "new-zone-file" option, replaced
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater with "allow-new-zones (yes|no)". The new-zone-file
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater for each view is now created automatically, with
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater a filename generated from a hash of the view name.
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater It is no longer necessary to "include" the
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater new-zone-file in named.conf; this happens
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater automatically. Zones that were not added via
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater "rndc addzone" can no longer be removed with
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater "rndc delzone". [RT #19447]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater2935. [bug] nsupdate: improve 'file not found' error message.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2933. [bug] 'dig +nsid' used stack memory after it went out of
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater scope. This could potentially result in a unknown,
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater potentially malformed, EDNS option being sent instead
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater of the desired NSID option. [RT #21781]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2932. [cleanup] Corrected a numbering error in the "dnssec" test.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2931. [bug] Temporarily and partially disable change 2864
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater because it would cause infinite attempts of RRSIG
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater queries. This is an urgent care fix; we'll
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater revisit the issue and complete the fix later.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2930. [experimental] New "rndc addzone" and "rndc delzone" commads
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater allow dynamic addition and deletion of zones.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater To enable this feature, specify a "new-zone-file"
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater option at the view or options level in named.conf.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater Zone configuration information for the new zones
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater will be written into that file. To make the new
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater zones persist after a restart, "include" the file
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater into named.conf in the appropriate view. (Note:
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater This feature is not yet documented, and its syntax
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater is expected to change.) [RT #19447]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2929. [bug] Improved handling of GSS security contexts:
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater - added LRU expiration for generated TSIGs
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater - added the ability to use a non-default realm
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater - added new "realm" keyword in nsupdate
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater - limited lifetime of generated keys to 1 hour
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater or the lifetime of the context (whichever is
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2928. [bug] Be more selective about the non-authoritative
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater answer we apply change 2748 to. [RT #21594]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2927. [placeholder]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2926. [placeholder]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2925. [bug] Named failed to accept uncachable negative responses
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater from insecure zones. [RT# 21555]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2924. [func] 'rndc secroots' dump a combined summary of the
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater current managed keys combined with trusted keys.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2923. [bug] 'dig +trace' could drop core after "connection
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater timeout". [RT #21514]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2922. [contrib] Update zkt to version 1.0.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2921. [bug] The resolver could attempt to destroy a fetch context
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater too soon. [RT #19878]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater to IPv4 clients. New acl 'filter-aaaa' (default any).
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2917. [func] Virtual time test framework. [RT #20801]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2916. [func] Add framework to use IPv6 in tests.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2915. [cleanup] Be smarter about which objects we attempt to compile
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater based on configure options. [RT #21444]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2914. [bug] Make the "autosign" system test more portable.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2913. [func] Add pkcs#11 system tests. [RT #20784]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2912. [func] Windows clients don't like UPDATE responses that clear
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater the zone section. [RT #20986]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2911. [bug] dnssec-signzone didn't handle out of zone records well.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2910. [func] Sanity check Kerberos credentials. [RT #20986]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2909. [bug] named-checkconf -p could die if "update-policy local;"
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater was specified in named.conf. [RT #21416]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2908. [bug] It was possible for re-signing to stop after removing
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater a DNSKEY. [RT #21384]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2907. [bug] The export version of libdns had undefined references.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2905. [port] aix: set use_atomic=yes with native compiler.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2904. [bug] When using DLV, sub-zones of the zones in the DLV,
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater could be incorrectly marked as insecure instead of
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater secure leading to negative proofs failing. This was
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater a unintended outcome from change 2890. [RT# 21392]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2903. [bug] managed-keys-directory missing from namedconf.c.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2902. [func] Add regression test for change 2897. [RT #21040]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2900. [bug] The placeholder negative caching element was not
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater properly constructed triggering a INSIST in
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater dns_ncache_towire(). [RT #21346]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2899. [port] win32: Support linking against OpenSSL 1.0.0.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2898. [bug] nslookup leaked memory when -domain=value was
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater specified. [RT #21301]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2897. [bug] NSEC3 chains could be left behind when transitioning
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater to insecure. [RT #21040]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2896. [bug] "rndc sign" failed to properly update the zone
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater when adding a DNSKEY for publication only. [RT #21045]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2895. [func] genrandom: add support for the generation of multiple
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater files. [RT #20917]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2893. [bug] Improve managed keys support. New named.conf option
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater managed-keys-directory. [RT #20924]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2892. [bug] Handle REVOKED keys better. [RT #20961]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2891. [maint] Update empty-zones list to match
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2890. [bug] Handle the introduction of new trusted-keys and
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater DS, DLV RRsets better. [RT #21097]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2889. [bug] Elements of the grammar where not properly reported.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2888. [bug] Only the first EDNS option was displayed. [RT #21273]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2887. [bug] Report the keytag times in UTC in the .key file,
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater local time is presented as a comment within the
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater comment. [RT #21223]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2886. [bug] ctime() is not thread safe. [RT #21223]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2885. [bug] Improve -fno-strict-aliasing support probing in
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater configure. [RT #21080]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2884. [bug] Insufficient validation in dns_name_getlabelsequence().
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2883. [bug] 'dig +short' failed to handle really large datasets.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2882. [bug] Remove memory context from list of active contexts
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater before clearing 'magic'. [RT #21274]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2881. [bug] Reduce the amount of time the rbtdb write lock
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater is held when closing a version. [RT #21198]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater consistent. [RT #21078]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2878. [func] Incrementally write the master file after performing
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater a AXFR. [RT #21010]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2877. [bug] The validator failed to skip obviously mismatching
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater RRSIGs. [RT #21138]
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater2876. [bug] Named could return SERVFAIL for negative responses
1fdd2470b625a58b57d0b155e6caf8c4fc0afe8aAutomatic Updater from unsigned zones. [RT #21131]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2875. [bug] dns_time64_fromtext() could accept non digits.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2874. [bug] Cache lack of EDNS support only after the server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein successfully responds to the query using plain DNS.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2873. [bug] Cancelling a dynamic update via the dns/client module
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater could trigger an assertion failure. [RT #21133]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2872. [bug] Modify dns/client.c:dns_client_createx() to only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein require one of IPv4 or IPv6 rather than both.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2871. [bug] Type mismatch in mem_api.c between the definition and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the header file, causing build failure with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --enable-exportlib. [RT #21138]
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein any changes made by configure are integrated.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Use --with-make-clean=no to disable. [RT #20994]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein don't like it. [RT #20986]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2866. [bug] Windows does not like the TSIG name being compressed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2865. [bug] memset to zero event.data. [RT #20986]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2862. [bug] nsupdate didn't default to the parent zone when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein updating DS records. [RT #20896]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2861. [doc] dnssec-settime man pages didn't correctly document the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein inactivation time. [RT #21039]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2860. [bug] named-checkconf's usage was out of date. [RT #21039]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2859. [bug] When cancelling validation it was possible to leak
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory. [RT #20800]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2858. [bug] RTT estimates were not being adjusted on ICMP errors.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2857. [bug] named-checkconf did not fail on a bad trusted key.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2856. [bug] The size of a memory allocation was not always properly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein recorded. [RT #20927]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2855. [func] nsupdate will now preserve the entered case of domain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein names in update requests it sends. [RT #20928]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2854. [func] dig: allow the final soa record in a axfr response to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be suppressed, dig +onesoa. [RT #20929]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater2851. [doc] nslookup.1, removed <informalexample> from the docbook
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater source as it produced bad nroff. [RT #21007]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2850. [bug] If isc_heap_insert() failed due to memory shortage
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the heap would have corrupted entries. [RT #20951]
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater2849. [bug] Don't treat errors from the xml2 library as fatal.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein README.rfc5011 into the ARM. [RT #20899]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2846. [bug] EOF on unix domain sockets was not being handled
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater correctly. [RT #20731]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2844. [doc] notify-delay default in ARM was wrong. It should have
a53c45b2b8e778663ea51834272169dc946b6672Mark Andrews been five (5) seconds.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein creating key files if there is a chance that the new
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein key ID will collide with an existing one after
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein either of the keys has been revoked. (To override
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein this in the case of dnssec-keyfromlabel, use the -y
0284e57b9b9dfaf2517a2cc3282ecf766b8ad075Automatic Updater option. dnssec-keygen will simply create a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein different, non-colliding key, so an override is
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews not necessary.) [RT #20838]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2842. [func] Added "smartsign" and improved "autosign" and
22c71c7b86fa57a19f7df0da4222eb8593e6ad12Mark Andrews "dnssec" regression tests. [RT #20865]
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater2841. [bug] Change 2836 was not complete. [RT #20883]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2840. [bug] Temporary fixed pkcs11-destroy usage check.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2839. [bug] A KSK revoked by named could not be deleted.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2838. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2837. [port] Prevent Linux spurious warnings about fwrite().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2836. [bug] Keys that were scheduled to become active could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be delayed. [RT #20874]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2835. [bug] Key inactivity dates were inadvertently stored in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the private key file with the outdated tag
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "Unpublish" rather than "Inactive". This has been
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fixed; however, any existing keys that had Inactive
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dates set will now need to have them reset, using
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'dnssec-settime -I'. [RT #20868]
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater2834. [bug] HMAC-SHA* keys that were longer than the algorithm
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein digest length were used incorrectly, leading to
f051d76c87e055c6ea3879e0c97a76609df915ccMark Andrews interoperability problems with other DNS
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater implementations. This has been corrected.
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater (Note: If an oversize key is in use, and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein compatibility is needed with an older release of
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews BIND, the new tool "isc-hmac-fixup" can convert
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the key secret to a form that will work with all
7326ba2f542b89196323867a1457f596f99e315dMark Andrews versions.) [RT #20751]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to avoid redefinition in some OSs [RT 20831]
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews2831. [security] Do not attempt to validate or cache
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein out-of-bailiwick data returned with a secure
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews answer; it must be re-fetched from its original
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews source and validated in that context. [RT #20819]
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews2830. [bug] Changing the OPTOUT setting could take multiple
82d13321f4dcc79a9aec992c7a1c4aaff8983adaAutomatic Updater passes. [RT #20813]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2829. [bug] Fixed potential node inconsistency in rbtdb.c.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2828. [security] Cached CNAME or DNAME RR could be returned to clients
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein without DNSSEC validation. [RT #20737]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
083a5588a3488b6335ee7bafa505d00644c7c58dMark Andrews being released. [RT #20740]
089c63b69cdf6803aa8901aae3f2fbae58969511Automatic Updater2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
6bf6622b7b9053dc52527478473b572f042c4b5bMark Andrews was in the process of being created was not properly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein recorded in the zone. [RT #20786]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2824. [bug] "rndc sign" was not being run by the correct task.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2822. [bug] rbtdb.c:loadnode() could return the wrong result.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2820. [func] Handle read access failure of OpenSSL configuration
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews file more user friendly (PKCS#11 engine patch).
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2818. [cleanup] rndc could return an incorrect error code
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when a zone was not found. [RT #20767]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2816. [bug] previous_closest_nsec() could fail to return
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein data for NSEC3 nodes [RT #29730]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2815. [bug] Exclusively lock the task when freezing a zone.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2814. [func] Provide a definitive error message when a master
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone is not loaded. [RT #20757]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2813. [bug] Better handling of unreadable DNSSEC key files.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2812. [bug] Make sure updates can't result in a zone with
d71e2e0c61df16ff37c9934c371a4a60c08974f7Mark Andrews NSEC-only keys and NSEC3 records. [RT #20748]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews output. [RT #20733]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater2810. [doc] Clarified the process of transitioning an NSEC3 zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to insecure. [RT #20746]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2809. [cleanup] Restored accidentally-deleted text in usage output
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in dnssec-settime and dnssec-revoke [RT #20739]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2808. [bug] Remove the attempt to install atomic.h from lib/isc.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein atomic.h is correctly installed by the architecture
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein specific subdirectories. [RT #20722]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2807. [bug] Fixed a possible ASSERT when reconfiguring zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein keys. [RT #20720]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.7.0rc1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when it had changed. [RT #20703]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater2805. [bug] Fixed namespace problems encountered when building
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater external programs using non-exported BIND9 libraries
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater (i.e., built without --enable-exportlib). [RT #20679]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2804. [bug] Send notifies when a zone is signed with "rndc sign"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or as a result of a scheduled key change. [RT #20700]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and genrandom under windows. [RT #20670]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2801. [func] Detect and report records that are different according
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to DNSSEC but are semantically equal according to plain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein DNS. Apply plain DNS comparisons rather than DNSSEC
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein comparisons when processing UPDATE requests.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-signzone now removes such semantically duplicate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein records prior to signing the RRset.
07ee99c7d0c2cd7f3e72263c29bd76ebd6d7ed43Automatic Updater named-checkzone -r {ignore|warn|fail} (default warn)
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater named-compilezone -r {ignore|warn|fail} (default warn)
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater named.conf: check-dup-records {ignore|warn|fail};
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2800. [func] Reject zones which have NS records which refer to
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater CNAMEs, DNAMEs or don't have address record (class IN
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater only). Reject UPDATEs which would cause the zone
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater to fail the above checks if committed. [RT #20678]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2799. [cleanup] Changed the "secure-to-insecure" option to
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater2798. [bug] Addressed bugs in managed-keys initialization
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater and rollover. [RT #20683]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2797. [bug] Don't decrement the dispatch manager's maxbuffers.
538a83db7509d598da95a93bd7b74ef3112123a4Mark Andrews2796. [bug] Missing dns_rdataset_disassociate() call in
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews dns_nsec3_delnsec3sx(). [RT #20681]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews log messages. [RT #18889]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2794. [bug] Install <isc/namespace.h>. [RT #20677]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater2793. [func] Add "autosign" and "metadata" tests to the
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater automatic tests. [RT #19946]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2792. [func] "filter-aaaa-on-v4" can now be set in view
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein options (if compiled in). [RT #20635]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2791. [bug] The installation of isc-config.sh was broken.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2790. [bug] Handle DS queries to stub zones. [RT #20440]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2788. [bug] dnssec-signzone could sign with keys that were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not requested [RT #20625]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2787. [bug] Spurious log message when zone keys were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dynamically reconfigured. [RT #20659]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2786. [bug] Additional could be promoted to answer. [RT #20663]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater --- 9.7.0b3 released ---
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2785. [bug] Revoked keys could fail to self-sign [RT #20652]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2784. [bug] TC was not always being set when required glue was
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater dropped. [RT #20655]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater buffer size of 512 or less. [RT #20654]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2782. [port] win32: use getaddrinfo() for hostname lookups.
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2781. [bug] Inactive keys could be used for signing. [RT #20649]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2780. [bug] dnssec-keygen -A none didn't properly unset the
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater activation date in all cases. [RT #20648]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2779. [bug] Dynamic key revocation could fail. [RT #20644]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2778. [bug] dnssec-signzone could fail when a key was revoked
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater without deleting the unrevoked version. [RT #20638]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2776. [bug] Change #2762 was not correct. [RT #20647]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater in dnssec-keyfromlabel. [RT #20643]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2774. [bug] Existing cache DB wasn't being reused after
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater reconfiguration. [RT #20629]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2773. [bug] In autosigned zones, the SOA could be signed
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater with the KSK. [RT #20628]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2772. [security] When validating, track whether pending data was from
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater the additional section or not and only return it if
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater validates as secure. [RT #20438]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2771. [bug] dnssec-signzone: DNSKEY records could be
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater corrupted when importing from key files [RT #20624]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2770. [cleanup] Add log messages to resolver.c to indicate events
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater causing FORMERR responses. [RT #20526]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2769. [cleanup] Change #2742 was incomplete. [RT #19589]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2767. [bug] named could crash on startup if a zone was
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater configured with auto-dnssec and there was no
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater key-directory. [RT #20615]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2766. [bug] isc_socket_fdwatchpoke() should only update the
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater socketmgr state if the socket is not pending on a
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater read or write. [RT #20603]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2765. [bug] Skip masters for which the TSIG key cannot be found.
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2762. [bug] DLV validation failed with a local slave DLV zone.
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2761. [cleanup] Enable internal symbol table for backtrace only for
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater systems that are known to work. Currently, BSD
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater variants, Linux and Solaris are supported. [RT# 20202]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2759. [doc] Add information about .jbk/.jnw files to
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater the ARM. [RT #20303]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2758. [bug] win32: Added a workaround for a windows 2008 bug
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater that could cause the UDP client handler to shut
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater down. [RT #19176]
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater2757. [bug] dig: assertion failure could occur in connect
0ddeab91cf922fd977f37318620b4c69dccf8364Automatic Updater timeout. [RT #20599]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2755. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2754. [bug] Secure-to-insecure transitions failed when zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was signed with NSEC3. [RT #20587]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2753. [bug] Removed an unnecessary warning that could appear when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein building an NSEC chain. [RT #20589]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2752. [bug] Locking violation. [RT #20587]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2750. [bug] dig: assertion failure could occur when a server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein didn't have an address. [RT #20579]
f8da2eefea1ea17bb233fa8c0c9b18404075dd9cAutomatic Updater2749. [bug] ixfr-from-differences generated a non-minimal ixfr
f8da2eefea1ea17bb233fa8c0c9b18404075dd9cAutomatic Updater for NSEC3 signed zones. [RT #20452]
8e821eea5f57ac47a94305aa7ab0c3570d92a311Automatic Updater2748. [func] Identify bad answers from GTLD servers and treat them
f8da2eefea1ea17bb233fa8c0c9b18404075dd9cAutomatic Updater as referrals. [RT #18884]
f8da2eefea1ea17bb233fa8c0c9b18404075dd9cAutomatic Updater2747. [bug] Journal roll forwards failed to set the re-signing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein time of RRSIGs correctly. [RT #20541]
0284e57b9b9dfaf2517a2cc3282ecf766b8ad075Automatic Updater2746. [port] hpux: address signed/unsigned expansion mismatch of
0284e57b9b9dfaf2517a2cc3282ecf766b8ad075Automatic Updater2745. [bug] configure script didn't probe the return type of
0284e57b9b9dfaf2517a2cc3282ecf766b8ad075Automatic Updater gai_strerror(3) correctly. [RT #20573]
0284e57b9b9dfaf2517a2cc3282ecf766b8ad075Automatic Updater2744. [func] Log if a query was over TCP. [RT #19961]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews for a insecure delegation.
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews --- 9.7.0b2 released ---
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews2742. [cleanup] Clarify some DNSSEC-related log messages in
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews2741. [func] Allow the dnssec-keygen progress messages to be
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews suppressed (dnssec-keygen -q). Automatically
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews suppress the progress messages when stdin is not
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews a tty. [RT #20474]
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews2740. [placeholder]
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews2739. [cleanup] Clean up API for initializing and clearing trust
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews anchors for a view. [RT #20211]
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews test. [RT #20453]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2737. [func] UPDATE requests can leak existence information.
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews2736. [func] Improve the performance of NSEC signed zones with
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews more than a normal amount of glue below a delegation.
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater2735. [bug] dnssec-signzone could fail to read keys
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews that were specified on the command line with
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews full paths, but weren't in the current
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews directory. [RT #20421]
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews2734. [port] cygwin: arpaname did not compile. [RT #20473]
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2732. [func] Add optional filter-aaaa-on-v4 option, available
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if built with './configure --enable-filter-aaaa'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Filters out AAAA answers to clients connecting
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein via IPv4. (This is NOT recommended for general
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein use.) [RT #20339]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2731. [func] Additional work on change 2709. The key parser
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein will now ignore unrecognized fields when the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein minor version number of the private key format
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein has been increased. It will reject any key with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the major version number increased. [RT #20310]
22c71c7b86fa57a19f7df0da4222eb8593e6ad12Mark Andrews2730. [func] Have dnssec-keygen display a progress indication
22c71c7b86fa57a19f7df0da4222eb8593e6ad12Mark Andrews a la 'openssl genrsa' on standard error. Note
22c71c7b86fa57a19f7df0da4222eb8593e6ad12Mark Andrews when the first '.' is followed by a long stop
22c71c7b86fa57a19f7df0da4222eb8593e6ad12Mark Andrews one has the choice between slow generation vs.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2729. [func] When constructing a CNAME from a DNAME use the DNAME
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein TTL. [RT #20451]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-signzone now warn immediately if asked to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein write into a nonexistent directory. [RT #20278]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2727. [func] The 'key-directory' option can now specify a relative
71eeac3530eabb7f70f4b6bdba5addb40a5bca27Mark Andrews path. [RT #20154]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2726. [func] Added support for SHA-2 DNSSEC algorithms,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RSASHA256 and RSASHA512. [RT #20023]
18fa75b694d056da4be3ebfc2185d007d4882752Automatic Updater2725. [doc] Added information about the file "managed-keys.bind"
18fa75b694d056da4be3ebfc2185d007d4882752Automatic Updater to the ARM. [RT #20235]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2724. [bug] Updates to a existing node in secure zone using NSEC
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were failing. [RT #20448]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews isc_base64_totext(), didn't always mark regions of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory as fully consumed after conversion. [RT #20445]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2722. [bug] Ensure that the memory associated with the name of
1224c3b69b3d18f7127aa042644936af25a2d679Mark Andrews a node in a rbt tree is not altered during the life
1224c3b69b3d18f7127aa042644936af25a2d679Mark Andrews of the node. [RT #20431]
1224c3b69b3d18f7127aa042644936af25a2d679Mark Andrews2721. [port] Have dst__entropy_status() prime the random number
1224c3b69b3d18f7127aa042644936af25a2d679Mark Andrews generator. [RT #20369]
1224c3b69b3d18f7127aa042644936af25a2d679Mark Andrews2720. [bug] RFC 5011 trust anchor updates could trigger an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein assert if the DNSKEY record was unsigned. [RT #20406]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2719. [func] Skip trusted/managed keys for unsupported algorithms.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2718. [bug] The space calculations in opensslrsa_todns() were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein incorrect. [RT #20394]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2717. [bug] named failed to update the NSEC/NSEC3 record when
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater the last private type record was removed as a result
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater of completing the signing the zone with a key.
102ccdd2c0ade46f2d668c4b4d3fbbe668a44994Automatic Updater2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater --- 9.7.0b1 released ---
1238b38c9f0ab563b762dc0fd00ac6c34c2b7295Automatic Updater2715. [bug] Require OpenSSL support to be explicitly disabled.
1238b38c9f0ab563b762dc0fd00ac6c34c2b7295Automatic Updater2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
1238b38c9f0ab563b762dc0fd00ac6c34c2b7295Automatic Updater2713. [bug] powerpc: atomic operations missing asm("ics") /
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater __isync() calls.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater2712. [func] New 'auto-dnssec' zone option allows zone signing
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater to be fully automated in zones configured for
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater dynamic DNS. 'auto-dnssec allow;' permits a zone
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater to be signed by creating keys for it in the
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater key-directory and using 'rndc sign <zone>'.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater 'auto-dnssec maintain;' allows that too, plus it
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater also keeps the zone's DNSSEC keys up to date
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater according to their timing metadata. [RT #19943]
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater2711. [port] win32: Add the bin/pkcs11 tools into the full
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater build. [RT #20372]
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater zone option cause a zone to be signed with only KSKs
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater signing the DNSKEY RRset, not ZSKs. This reduces
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater the size of a DNSKEY answer. [RT #20340]
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater2709. [func] Added some data fields, currently unused, to the
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater private key file format, to allow implementation
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater of explicit key rollover in a future release
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater without impairing backward or forward compatibility.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater2708. [func] Insecure to secure and NSEC3 parameter changes via
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater update are now fully supported and no longer require
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater defines to enable. We now no longer overload the
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater NSEC3PARAM flag field, nor the NSEC OPT bit at the
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater apex. Secure to insecure changes are controlled by
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater by the named.conf option 'secure-to-insecure'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Warning: If you had previously enabled support by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein adding defines at compile time to BIND 9.6 you should
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ensure that all changes that are in progress have
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein completed prior to upgrading to BIND 9.7. BIND 9.7
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is not backwards compatible.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2707. [func] dnssec-keyfromlabel no longer require engine name
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to be specified in the label if there is a default
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein engine or the -E option has been used. Also, it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein now uses default algorithms as dnssec-keygen does
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2706. [bug] Loading a zone with a very large NSEC3 salt could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein trigger an assert. [RT #20368]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2705. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2704. [bug] Serial of dynamic and stub zones could be inconsistent
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with their SOA serial. [RT #19387]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2703. [func] Introduce an OpenSSL "engine" argument with -E
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for all binaries which can take benefit of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein crypto hardware. [RT #20230]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2701. [doc] Correction to ARM: hmac-md5 is no longer the only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein supported TSIG key algorithm. [RT #18046]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2700. [doc] The match-mapped-addresses option is discouraged.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2699. [bug] Missing lock in rbtdb.c. [RT #20037]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2698. [placeholder]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater S_IFREG are defined after including <isc/stat.h>.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2696. [bug] named failed to successfully process some valid
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater acl constructs. [RT #20308]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2695. [func] DHCP/DDNS - update fdwatch code for use by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein DHCP. Modify the api to isc_sockfdwatch_t (the
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater callback functon for isc_socket_fdwatchcreate)
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater to include information about the direction (read
d3907d27cc138f45772d3d63082ae02c7659148aAutomatic Updater or write) and add isc_socket_fdwatchpoke.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2693. [port] Add some noreturn attributes. [RT #20257]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2692. [port] win32: 32/64 bit cleanups. [RT #20335]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater chain when re-signing a previously-signed zone.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater Use -u to modify NSEC3 parameters or switch
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater between NSEC and NSEC3. [RT #20304]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2689. [bug] Correctly handle snprintf result. [RT #20306]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater to decide to fetch the destination address. [RT #20305]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater Also, added warnings when revoking a ZSK, as this is
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater not defined by protocol (but is legal). [RT #19943]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater2686. [bug] dnssec-signzone should clean the old NSEC chain when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein signing with NSEC3 and vice versa. [RT #20301]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
3970098dcd2a7122541667b4b56cea8abce8ccf2Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein +adflag and +cdflag. [RT #19305]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the NSEC3 parameters used to sign the zone change.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2682. [bug] "configure --enable-symtable=all" failed to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein build. [RT #20282]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein decoded. [RT #20269]
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater2679. [func] dig -k can now accept TSIG keys in named.conf
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater format. [RT #20031]
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater2678. [func] Treat DS queries as if "minimal-response yes;"
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater was set. [RT #20258]
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater2677. [func] Changes to key metadata behavior:
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater - Keys without "publish" or "active" dates set will
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater no longer be used for smart signing. However,
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater those dates will be set to "now" by default when
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater a key is created; to generate a key but not use
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater it yet, use dnssec-keygen -G.
102ccdd2c0ade46f2d668c4b4d3fbbe668a44994Automatic Updater - New "inactive" date (dnssec-keygen/settime -I)
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater sets the time when a key is no longer used for
102ccdd2c0ade46f2d668c4b4d3fbbe668a44994Automatic Updater signing but is still published.
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater - The "unpublished" date (-U) is deprecated in
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater favour of "deleted" (-D).
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater2676. [bug] --with-export-installdir should have been
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater --with-export-includedir. [RT #20252]
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater2675. [bug] dnssec-signzone could crash if the key directory
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater did not exist. [RT #20232]
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater --- 9.7.0a3 released ---
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater2674. [bug] "dnssec-lookaside auto;" crashed if named was built
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater without openssl. [RT #20231]
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater2673. [bug] The managed-keys.bind zone file could fail to
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater load due to a spurious result from sync_keyzone()
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater2672. [bug] Don't enable searching in 'host' when doing reverse
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater lookups. [RT #20218]
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater2671. [bug] Add support for PKCS#11 providers not returning
d060d8669f5558690e7faf4a1c12fe5c02a7c60dAutomatic Updater the public exponent in RSA private keys
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater (OpenCryptoki for instance) in
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater dnssec-keyfromlabel. [RT #19294]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2670. [bug] Unexpected connect failures failed to log enough
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater information to be useful. [RT #20205]
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater2669. [func] Update PKCS#11 support to support Keyper HSM.
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater Update PKCS#11 patch to be against openssl-0.9.8i.
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater2668. [func] Several improvements to dnssec-* tools, including:
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater - dnssec-keygen and dnssec-settime can now set key
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater metadata fields 0 (to unset a value, use "none")
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater - dnssec-revoke sets the revocation date in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein addition to the revoke bit
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater - dnssec-settime can now print individual metadata
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater fields instead of always printing all of them,
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater and can print them in unix epoch time format for
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater use by scripts
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2667. [func] Add support for logging stack backtrace on assertion
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater failure (not available for all platforms). [RT #19780]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2666. [func] Added an 'options' argument to dns_name_fromstring()
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater (API change from 9.7.0a2). [RT #20196]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2665. [func] Clarify syntax for managed-keys {} statement, add
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater ARM documentation about RFC 5011 support. [RT #19874]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2664. [bug] create_keydata() and minimal_update() in zone.c
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater didn't properly check return values for some
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater functions. [RT #19956]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2663. [func] win32: allow named to run as a service using
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater "NT AUTHORITY\LocalService" as the account. [RT #19977]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater returned a misleading error code when lwresd was
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater down. [RT #20028]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater creating lwres context. [RT #20029]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2660. [func] Add a new set of DNS libraries for non-BIND9
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater applications. See README.libdns. [RT #19369]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2659. [doc] Clarify dnssec-keygen doc: key name must match zone
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater name for DNSSEC keys. [RT #19938]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2658. [bug] dnssec-settime and dnssec-revoke didn't process
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater key file paths correctly. [RT #20078]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2657. [cleanup] Lower "journal file <path> does not exist, creating it"
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater log level to debug 1. [RT #20058]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2656. [func] win32: add a "tools only" check box to the installer
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater which causes it to only install dig, host, nslookup,
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater nsupdate and relevant DLLs. [RT #19998]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2655. [doc] Document that key-directory does not affect
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater bind.keys, rndc.key or session.key. [RT #20155]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2654. [bug] Improve error reporting on duplicated names for
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater deny-answer-xxx. [RT #20164]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2653. [bug] Treat ENGINE_load_private_key() failures as key
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater not found rather than out of memory. [RT #18033]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2652. [func] Provide more detail about what record is being
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein deleted. [RT #20061]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2651. [bug] Dates could print incorrectly in K*.key files on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 64-bit systems. [RT #20076]
82d13321f4dcc79a9aec992c7a1c4aaff8983adaAutomatic Updater2650. [bug] Assertion failure in dnssec-signzone when trying
82d13321f4dcc79a9aec992c7a1c4aaff8983adaAutomatic Updater to read keyset-* files. [RT #20075]
82d13321f4dcc79a9aec992c7a1c4aaff8983adaAutomatic Updater2649. [bug] Set the domain for forward only zones. [RT #19944]
82d13321f4dcc79a9aec992c7a1c4aaff8983adaAutomatic Updater2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2647. [bug] Remove unnecessary SOA updates when a new KSK is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein added. [RT #19913]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews which default to 64 bits. [RT #19927]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.7.0a2 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2644. [bug] Change #2628 caused a regression on some systems;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named was unable to write the PID file and would
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews fail on startup. [RT #20001]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
71eeac3530eabb7f70f4b6bdba5addb40a5bca27Mark Andrews2642. [bug] nsupdate could dump core on solaris when reading
71eeac3530eabb7f70f4b6bdba5addb40a5bca27Mark Andrews improperly formatted key files. [RT #20015]
71eeac3530eabb7f70f4b6bdba5addb40a5bca27Mark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
71eeac3530eabb7f70f4b6bdba5addb40a5bca27Mark Andrews added a regression test to check it. [RT #20007]
71eeac3530eabb7f70f4b6bdba5addb40a5bca27Mark Andrews2640. [security] A specially crafted update packet will cause named
71eeac3530eabb7f70f4b6bdba5addb40a5bca27Mark Andrews to exit. [RT #20000]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2638. [bug] Install arpaname. [RT #19957]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2636. [func] Simplify zone signing and key maintenance with the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-* tools. Major changes:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - all dnssec-* tools now take a -K option to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein specify a directory in which key files will be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - DNSSEC can now store metadata indicating when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein they are scheduled to be published, activated,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein revoked or removed; these values can be set by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-keygen or overwritten by the new
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-settime command
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - dnssec-signzone -S (for "smart") option reads key
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein metadata and uses it to determine automatically
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein which keys to publish to the zone, use for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein signing, revoke, or remove from the zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2634. [port] win32: Add support for libxml2, enable
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statschannel. [RT #19773]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2633. [bug] Handle 15 bit rand() functions. [RT #19783]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2632. [func] util/kit.sh: warn if documentation appears to be out of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein date. [RT #19922]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #19926 ]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2630. [func] Improved syntax for DDNS autoconfiguration: use
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "update-policy local;" to switch on local DDNS in a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone. (The "ddns-autoconf" option has been removed.)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2629. [port] Check for seteuid()/setegid(), use setresuid()/
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein setresgid() if not present. [RT #19932]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2628. [port] linux: Allow /var/run/named/named.pid to be opened
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein at startup with reduced capabilities in operation.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2627. [bug] Named aborted if the same key was included in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein trusted-keys more than once. [RT #19918]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2626. [bug] Multiple trusted-keys could trigger an assertion
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failure. [RT #19914]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2624. [func] 'named-checkconf -p' will print out the parsed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configuration. [RT #18871]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2623. [bug] Named started searches for DS non-optimally. [RT #19915]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2621. [doc] Made copyright boilerplate consistent. [RT #19833]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2620. [bug] Delay thawing the zone until the reload of it has
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein completed successfully. [RT #19750]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2619. [func] Add support for RFC 5011, automatic trust anchor
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein maintenance. The new "managed-keys" statement can
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be used in place of "trusted-keys" for zones which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein support this protocol. (Note: this syntax is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein expected to change prior to 9.7.0 final.) [RT #19248]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2618. [bug] The sdb and sdlz db_interator_seek() methods could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein loop infinitely. [RT #19847]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2617. [bug] ifconfig.sh failed to emit an error message when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein run from the wrong location. [RT #19375]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2616. [bug] 'host' used the nameservers from resolv.conf even
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when a explicit nameserver was specified. [RT #19852]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2615. [bug] "__attribute__((unused))" was in the wrong place
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for ia64 gcc builds. [RT #19854]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2614. [port] win32: 'named -v' should automatically be executed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in the foreground. [RT #19844]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2613. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.7.0a1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2612. [func] Add default values for the arguments to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-keygen. Without arguments, it will now
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein generate a 1024-bit RSASHA1 zone-signing key,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or with the -f KSK option, a 2048-bit RSASHA1
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein key-signing key. [RT #19300]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2611. [func] Add -l option to dnssec-dsfromkey to generate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein DLV records instead of DS records. [RT #19300]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2610. [port] sunos: Change #2363 was not complete. [RT #19796]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2609. [func] Simplify the configuration of dynamic zones:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - add ddns-confgen command to generate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configuration text for named.conf
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - add zone option "ddns-autoconf yes;", which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein causes named to generate a TSIG session key
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and allow updates to the zone using that key
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein - add '-l' (localhost) option to nsupdate, which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein causes nsupdate to connect to a locally-running
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named process using the session key generated
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2608. [func] Perform post signing verification checks in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-signzone. These can be disabled with -P.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The post sign verification test ensures that for each
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein algorithm in use there is at least one non revoked
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein self signed KSK key. That all revoked KSK keys are
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein self signed. That all records in the zone are signed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by the algorithm. [RT #19653]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2607. [bug] named could incorrectly delete NSEC3 records for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein empty nodes when processing a update request.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2606. [bug] "delegation-only" was not being accepted in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein delegation-only type zones. [RT #19717]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2605. [bug] Accept DS responses from delegation only zones.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT # 19296]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2604. [func] Add support for DNS rebinding attack prevention through
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein new options, deny-answer-addresses and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein deny-answer-aliases. Based on contributed code from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein JD Nurmi, Google. [RT #18192]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2603. [port] win32: handle .exe extension of named-checkzone and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named-comilezone argv[0] names under windows.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2602. [port] win32: fix debugging command line build of libisccfg.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2601. [doc] Mention file creation mode mask in the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named manual page.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2600. [doc] ARM: miscellaneous reformatting for different
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein page widths. [RT #19574]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2599. [bug] Address rapid memory growth when validation fails.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2598. [func] Reserve the -F flag. [RT #19657]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2597. [bug] Handle a validation failure with a insecure delegation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from a NSEC3 signed master/slave zone. [RT #19464]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein long, leading to inefficient memory usage or rejecting
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein newer cache entries in the worst case. [RT #19563]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2594. [func] Have rndc warn if using its default configuration
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file when the key file also exists. [RT #19424]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2591. [bug] named could die when processing a update in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein removed_orphaned_ds(). [RT #19507]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2590. [func] Report zone/class of "update with no effect".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2588. [bug] SO_REUSEADDR could be set unconditionally after failure
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of bind(2) call. This should be rare and mostly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein harmless, but may cause interference with other
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein processes that happen to use the same port. [RT #19642]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2587. [func] Improve logging by reporting serial numbers for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when zone serial has gone backwards or unchanged.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or SDB. [RT #19577]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2585. [bug] Uninitialized socket name could be referenced via a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statistics channel, triggering an assertion failure in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein XML rendering. [RT #19427]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2584. [bug] alpha: gcc optimization could break atomic operations.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2583. [port] netbsd: provide a control to not add the compile
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein date to the version string, -DNO_VERSION_DATE.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2582. [bug] Don't emit warning log message when we attempt to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein remove non-existent journal. [RT #19516]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Requires MySQL 5.0.19 or later. [RT #19084]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2580. [bug] UpdateRej statistics counter could be incremented twice
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for one rejection. [RT #19476]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2579. [bug] DNSSEC lookaside validation failed to handle unknown
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein algorithms. [RT #19479]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2578. [bug] Changed default sig-signing-type to 65534, because
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews 65535 turns out to be reserved. [RT #19477]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews2577. [doc] Clarified some statistics counters. [RT #19454]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2576. [bug] NSEC record were not being correctly signed when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a zone transitions from insecure to secure.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Handle such incorrectly signed zones. [RT #19114]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2575. [func] New functions dns_name_fromstring() and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_name_tostring(), to simplify conversion
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of a string to a dns_name structure and vice
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein versa. [RT #19451]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2574. [doc] Document nsupdate -g and -o. [RT #19351]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2573. [bug] Replacing a non-CNAME record with a CNAME record in a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein single transaction in a signed zone failed. [RT #19397]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2572. [func] Simplify DLV configuration, with a new option
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews "dnssec-lookaside auto;" This is the equivalent
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of "dnssec-lookaside . trust-anchor dlv.isc.org;"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein plus setting a trusted-key for dlv.isc.org.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Note: The trusted key is hard-coded into named,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein but is also stored in (and can be overridden
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by) $sysconfdir/bind.keys. As the ISC DLV key
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews rolls over it can be kept up to date by replacing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the bind.keys file with a key downloaded from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2571. [func] Add a new tool "arpaname" which translates IP addresses
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2570. [func] Log the destination address the query was sent to.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2569. [func] Move journalprint, nsec3hash, and genrandom
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "make install" will put them in $sbindir. [RT #19301]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2568. [bug] Report when the write to indicate a otherwise
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein successful start fails. [RT #19360]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2567. [bug] dst__privstruct_writefile() could miss write errors.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews write_public_key() could miss write errors.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-dsfromkey could miss write errors.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2566. [cleanup] Clarify logged message when an insecure DNSSEC
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein response arrives from a zone thought to be secure:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "insecurity proof failed" instead of "not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein insecure". [RT #19400]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2565. [func] Add support for HIP record. Includes new functions
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews and dns_rdata_hip_current(). [RT #19384]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2564. [bug] Only take EDNS fallback steps when processing timeouts.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to exit. [RT #19359]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews and some new content.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2559. [bug] dnssec-dsfromkey could compute bad DS records when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reading from a K* files. [RT #19357]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2558. [func] Set the ownership of missing directories created
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for pid-file if -u has been specified on the command
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein line. [RT #19328]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2557. [cleanup] PCI compliance:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * new libisc log module file
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * isc_dir_chroot() now also changes the working
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein directory to "/".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * additional INSISTs
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein * additional logging when files can't be removed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein error checks in the correct order resulting in the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein wrong error code sometimes being returned. [RT #19249]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2555. [func] dig: when emitting a hex dump also display the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein corresponding characters. [RT #19258]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2554. [bug] Validation of uppercase queries from NSEC3 zones could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fail. [RT #19297]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2552. [bug] zero-no-soa-ttl-cache was not being honoured.
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews2551. [bug] Potential Reference leak on return. [RT #19341]
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews2548. [bug] Install iterated_hash.h. [RT #19335]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2547. [bug] openssl_link.c:mem_realloc() could reference an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein out-of-range area of the source buffer. New public
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein function isc_mem_reallocate() was introduced to address
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein this bug. [RT #19313]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2546. [func] Add --enable-openssl-hash configure flag to use
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein OpenSSL (in place of internal routine) for hash
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein functions (MD5, SHA[12] and HMAC). [RT #18815]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2545. [doc] ARM: Legal hostname checking (check-names) is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for SRV RDATA too. [RT #19304]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2542. [doc] Update the description of dig +adflag. [RT #19290]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2541. [bug] Conditionally update dispatch manager statistics.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2539. [security] Update the interaction between recursion, allow-query,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-query-cache and allow-recursion. [RT #19198]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2538. [bug] cache/ADB memory could grow over max-cache-size,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein especially with threads and smaller max-cache-size
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein values. [RT #19240]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews2537. [func] Added more statistics counters including those on socket
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein I/O events and query RTT histograms. [RT #18802]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2536. [cleanup] Silence some warnings when -Werror=format-security is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein specified. [RT #19083]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews2534. [func] Check NAPTR records regular expressions and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein replacement strings to ensure they are syntactically
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein valid and consistant. [RT #18168]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2533. [doc] ARM: document @ (at-sign). [RT #17144]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2532. [bug] dig: check the question section of the response to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein see if it matches the asked question. [RT #18495]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2531. [bug] Change #2207 was incomplete. [RT #19098]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2530. [bug] named failed to reject insecure to secure transitions
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein via UPDATE. [RT #19101]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2529. [cleanup] Upgrade libtool to silence complaints from recent
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein version of autoconf. [RT #18657]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2528. [cleanup] Silence spurious configure warning about
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --datarootdir [RT #19096]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2527. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2526. [func] New named option "attach-cache" that allows multiple
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein views to share a single cache to save memory and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein improve lookup efficiency. Based on contributed code
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from Barclay Osborn, Google. [RT #18905]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2525. [func] New logging category "query-errors" to provide detailed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein internal information about query failures, especially
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein about server failures. [RT #19027]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2523. [bug] Random type rdata freed by dns_nsec_typepresent().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2521. [bug] Improve epoll cross compilation support. [RT #19047]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2520. [bug] Update xml statistics version number to 2.0 as change
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein #2388 made the schema incompatible to the previous
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein version. [RT #19080]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2519. [bug] dig/host with -4 or -6 didn't work if more than two
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein nameserver addresses of the excluded address family
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein preceded in resolv.conf. [RT #19081]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2518. [func] Add support for the new CERT types from RFC 4398.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2517. [bug] dig +trace with -4 or -6 failed when it chose a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein nameserver address of the excluded address type.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2516. [bug] glue sort for responses was performed even when not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein needed. [RT #19039]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a nameserver of the excluded address family.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2513. [bug] Fix windows cli build. [RT #19062]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2512. [func] Print a summary of the cached records which make up
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the negative response. [RT #18885]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2509. [bug] Specifying a fixed query source port was broken.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2508. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2507. [func] Log the recursion quota values when killing the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein oldest query or refusing to recurse due to quota.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2506. [port] solaris: Check at configure time if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein hack_shutup_pthreadonceinit is needed. [RT #19037]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2505. [port] Treat amd64 similarly to x86_64 when determining
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein atomic operation support. [RT #19031]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2504. [bug] Address race condition in the socket code. [RT #18899]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2503. [port] linux: improve compatibility with Linux Standard
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Base. [RT #18793]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2502. [cleanup] isc_radix: Improve compliance with coding style,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein document function in <isc/radix.h>. [RT #18534]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2501. [func] $GENERATE now supports all rdata types. Multi-field
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rdata types need to be quoted. See the ARM for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein details. [RT #18368]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein function. [RT #18582]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.6.0rc1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2498. [bug] Removed a bogus function argument used with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ISC_SOCKET_USE_POLLWATCH: it could cause compiler
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein warning or crash named with the debug 1 level
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of logging. [RT #18917]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2496. [bug] Add sanity length checks to NSID option. [RT #18813]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2495. [bug] Tighten RRSIG checks. [RT #18795]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein installed. [RT #18826]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2493. [bug] The linux capabilities code was not correctly cleaning
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein up after itself. [RT #18767]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2492. [func] Rndc status now reports the number of cpus discovered
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and the number of worker threads when running
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein multi-threaded. [RT #18273]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2491. [func] Attempt to re-use a local port if we are already using
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the port. [RT #18548]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is cleared when IPV6_V6ONLY is set. [RT #18785]
04ecc85ca69027c4d56b4a11ce5bafb21ebf3966Automatic Updater2489. [port] solaris: Workaround Solaris's kernel bug about
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Define ISC_SOCKET_USE_POLLWATCH at build time to enable
04ecc85ca69027c4d56b4a11ce5bafb21ebf3966Automatic Updater this workaround. [RT #18870]
04ecc85ca69027c4d56b4a11ce5bafb21ebf3966Automatic Updater2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
04ecc85ca69027c4d56b4a11ce5bafb21ebf3966Automatic Updater from keyset and .key files. [RT #18694]
04ecc85ca69027c4d56b4a11ce5bafb21ebf3966Automatic Updater2487. [bug] Give TCP connections longer to complete. [RT #18675]
04ecc85ca69027c4d56b4a11ce5bafb21ebf3966Automatic Updater2486. [func] The default locations for named.pid and lwresd.pid
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater This allows the owner of the containing directory
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater to be set, for "named -u" support, and allows there
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater to be a permanent symbolic link in the path, for
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater "named -t" support. [RT #18306]
cd0df9459e87097d01fc6c0de0a283c7e8d3c401Automatic Updater2485. [bug] Change update's the handling of obscured RRSIG
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater records. Not all orphaned DS records were being
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater removed. [RT #18828]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2484. [bug] It was possible to trigger a REQUIRE failure when
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater adding NSEC3 proofs to the response in
996dbb19570bb25601a3611db5d59ccda0a064c5Automatic Updater query_addwildcardproof(). [RT #18828]
996dbb19570bb25601a3611db5d59ccda0a064c5Automatic Updater2483. [port] win32: chroot() is not supported. [RT #18805]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2482. [port] libxml2: support versions 2.7.* in addition
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater to 2.6.*. [RT #18806]
07ee99c7d0c2cd7f3e72263c29bd76ebd6d7ed43Automatic Updater --- 9.6.0b1 released ---
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater collisions. [RT #18812]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2480. [bug] named could fail to emit all the required NSEC3
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater records. [RT #18812]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2478. [bug] 'addresses' could be used uninitialized in
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater configure_forward(). [RT #18800]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2477. [bug] dig: the global option to print the command line is
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater +cmd not print_cmd. Update the output to reflect
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater this. [RT #17008]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2476. [doc] ARM: improve documentation for max-journal-size and
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater ixfr-from-differences. [RT #15909] [RT #18541]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2475. [bug] LRU cache cleanup under overmem condition could purge
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater particular entries more aggressively. [RT #17628]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2474. [bug] ACL structures could be allocated with insufficient
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater space, causing an array overrun. [RT #18765]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2473. [port] linux: raise the limit on open files to the possible
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater maximum value before spawning threads; 'files'
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater specified in named.conf doesn't seem to work with
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater threads as expected. [RT #18784]
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater2472. [port] linux: check the number of available cpu's before
e4adb07cc1f8253b3c39aeeeb3ea03dc5b7011ccAutomatic Updater calling chroot as it depends on "/proc". [RT #16923]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2471. [bug] named-checkzone was not reporting missing mandatory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein glue when sibling checks were disabled. [RT #18768]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2470. [bug] Elements of the isc_radix_node_t could be incorrectly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein overwritten. [RT# 18719]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2469. [port] solaris: Work around Solaris's select() limitations.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2468. [bug] Resolver could try unreachable servers multiple times.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2465. [bug] Adb's handling of lame addresses was different
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for IPv4 and IPv6. [RT #18738]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2464. [port] linux: check that a capability is present before
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein trying to set it. [RT #18135]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein API and glibc hides parts of the IPv6 Advanced Socket
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein API as a result. This is stupid as it breaks how the
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater two halves (Basic and Advanced) of the IPv6 Socket API
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were designed to be used but we have to live with it.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater API. [RT #18388]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2462. [doc] Document -m (enable memory usage debugging)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein option for dig. [RT #18757]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2461. [port] sunos: Change #2363 was not complete. [RT #17513]
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater --- 9.6.0a1 released ---
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2458. [doc] ARM: update and correction for max-cache-size.
f051d76c87e055c6ea3879e0c97a76609df915ccMark Andrews2457. [tuning] max-cache-size is reverted to 0, the previous
f051d76c87e055c6ea3879e0c97a76609df915ccMark Andrews default. It should be safe because expired cache
f051d76c87e055c6ea3879e0c97a76609df915ccMark Andrews entries are also purged. [RT #18684]
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
f051d76c87e055c6ea3879e0c97a76609df915ccMark Andrews address, regardless of family. They now correctly
f051d76c87e055c6ea3879e0c97a76609df915ccMark Andrews distinguish IPv4 from IPv6. [RT #18559]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2455. [bug] Stop metadata being transferred via axfr/ixfr.
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
102ccdd2c0ade46f2d668c4b4d3fbbe668a44994Automatic Updater2453. [bug] Remove NULL pointer dereference in dns_journal_print().
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2452. [func] Improve bin/test/journalprint. [RT #18316]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2451. [port] solaris: handle runtime linking better. [RT #18356]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews2450. [doc] Fix lwresd docbook problem for manual page.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2449. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2448. [func] Add NSEC3 support. [RT #15452]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2447. [cleanup] libbind has been split out as a separate product.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2446. [func] Add a new log message about build options on startup.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein A new command-line option '-V' for named is also
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein provided to show this information. [RT# 18645]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2445. [doc] ARM out-of-date on empty reverse zones (list includes
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RFC1918 address, but these are not yet compiled in).
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (clear DF) for UDP responses and requests.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2443. [bug] win32: UDP connect() would not generate an event,
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews and so connected UDP sockets would never clean up.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews Fix this by doing an immediate WSAConnect() rather
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein than an io completion port type for UDP.
f02216f5b390ff0a589fa080f29350fd7794bf5cMark Andrews2442. [bug] A lock could be destroyed twice. [RT# 18626]
72628d3a5ef809d995c759130a81a1b1ae1395e0Automatic Updater2441. [bug] isc_radix_insert() could copy radix tree nodes
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews incompletely. [RT #18573]
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews2440. [bug] named-checkconf used an incorrect test to determine
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if an ACL was set to none.
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater2438. [bug] Timeouts could be logged incorrectly under win32.
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater2437. [bug] Sockets could be closed too early, leading to
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater inconsistent states in the socket module. [RT #18298]
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater2435. [bug] Fixed an ACL memory leak affecting win32.
e2e4d321999340802f77adaacd19c797d04b4b95Automatic Updater2434. [bug] Fixed a minor error-reporting bug in
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews2433. [tuning] Set initial timeout to 800ms.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2432. [bug] More Windows socket handling improvements. Stop
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews using I/O events and use IO Completion Ports
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews throughout. Rewrite the receive path logic to make
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews it easier to support multiple simultaneous
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews requesters in the future. Add stricter consistency
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein checking as a compile-time option (define
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2431. [bug] Acl processing could leak memory. [RT #18323]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2430. [bug] win32: isc_interval_set() could round down to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zero if the input was less than NS_INTERVAL
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein nanoseconds. Round up instead. [RT #18549]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2429. [doc] nsupdate should be in section 1 of the man pages.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2428. [bug] dns_iptable_merge() mishandled merges of negative
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews tables. [RT #18409]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews was set. [RT #18528]
dc91524e4b73ee70908a295e3f2f62305680c5c2Automatic Updater2426. [bug] libbind: inet_net_pton() can sometimes return the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews wrong value if excessively large net masks are
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews supplied. [RT #18512]
dc91524e4b73ee70908a295e3f2f62305680c5c2Automatic Updater2425. [bug] named didn't detect unavailable query source addresses
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews at load time. [RT #18536]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2424. [port] configure now probes for a working epoll
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews implementation. Allow the use of kqueue,
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews epoll and /dev/poll to be selected at compile
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews time. [RT #18277]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2423. [security] Randomize server selection on queries, so as to
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews make forgery a little more difficult. Instead of
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews always preferring the server with the lowest RTT,
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews pick a server with RTT within the same 128
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews millisecond band. [RT #18441]
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews2422. [bug] Handle the special return value of a empty node as
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews if it was a NXRRSET in the validator. [RT #18447]
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews2421. [func] Add new command line option '-S' for named to specify
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews the max number of sockets. [RT #18493]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews Use caution: this option may not work for some
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews operating systems without rebuilding named.
01b18d4c7c14ccb93708ab7ffdece3ac67b15a7cAutomatic Updater2420. [bug] Windows socket handling cleanup. Let the io
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews completion event send out canceled read/write
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews done events, which keeps us from writing to memory
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews we no longer have ownership of. Add debugging
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews socket_log() function. Rework TCP socket handling
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews to not leak sockets.
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews should not be used for isc_sockettype_fdwatch sockets.
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2417. [bug] Connecting UDP sockets for outgoing queries could
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater unexpectedly fail with an 'address already in use'
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater error. [RT #18411]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2416. [func] Log file descriptors that cause exceeding the
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater internal maximum. [RT #18460]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2415. [bug] 'rndc dumpdb' could trigger various assertion failures
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2414. [bug] A masterdump context held the database lock too long,
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater causing various troubles such as dead lock and
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater recursive lock acquisition. [RT #18311, #18456]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2412. [bug] win32: address a resource leak. [RT #18374]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater at compilation time. [RT #18433]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater Note: with changes #2469 and #2421 above, there is no
089c63b69cdf6803aa8901aae3f2fbae58969511Automatic Updater need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2410. [bug] Correctly delete m_versionInfo. [RT #18432]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2409. [bug] Only log that we disabled EDNS processing if we were
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater subsequently successful. [RT #18029]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2408. [bug] A duplicate TCP dispatch event could be sent, which
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater could then trigger an assertion failure in
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater resquery_response(). [RT #18275]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2406. [placeholder]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater2405. [cleanup] The default value for dnssec-validation was changed to
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater "yes" in 9.5.0-P1 and all subsequent releases; this
6bf6622b7b9053dc52527478473b572f042c4b5bMark Andrews was inadvertently omitted from CHANGES at the time.
6bf6622b7b9053dc52527478473b572f042c4b5bMark Andrews2404. [port] hpux: files unlimited support.
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews2403. [bug] TSIG context leak. [RT #18341]
089c63b69cdf6803aa8901aae3f2fbae58969511Automatic Updater2402. [port] Support Solaris 2.11 and over. [RT #18362]
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater2401. [bug] Expect to get E[MN]FILE errno internal_accept()
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater (from accept() or fcntl() system calls). [RT #18358]
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater2399. [placeholder]
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater2398. [bug] Improve file descriptor management. New,
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater temporary, named.conf option reserved-sockets,
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater default 512. [RT #18344]
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater2397. [bug] gssapi_functions had too many elements. [RT #18355]
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater2396. [bug] Don't set SO_REUSEADDR for randomized ports.
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater2395. [port] Avoid warning and no effect from "files unlimited"
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater on Linux when running as root. [RT #18335]
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater2394. [bug] Default configuration options set the limit for
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater open files to 'unlimited' as described in the
7a0d680aa507f1b9beaa5c350e4d562aab534323Automatic Updater documentation. [RT #18331]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2393. [bug] nested acls containing keys could trigger an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein assertion in acl.c. [RT #18166]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2392. [bug] remove 'grep -q' from acl test script, some platforms
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein don't support it. [RT #18253]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2391. [port] hpux: cover additional recvmsg() error codes.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2390. [bug] dispatch.c could make a false warning on 'odd socket'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #18301].
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2389. [bug] Move the "working directory writable" check to after
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the ns_os_changeuser() call. [RT #18326]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2388. [bug] Avoid using tables for layout purposes in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statistics XSL [RT #18159].
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2387. [bug] Silence compiler warnings in lib/isc/radix.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #18147] [RT #18258]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews2386. [func] Add warning about too small 'open files' limit.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2385. [bug] A condition variable in socket.c could leak in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rare error handling [RT #17968].
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2384. [security] Fully randomize UDP query ports to improve
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein forgery resilience. [RT #17949, #18098]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2383. [bug] named could double queries when they resulted in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein SERVFAIL due to overkilling EDNS0 failure detection.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2381. [port] dlz/mysql: support multiple install layouts for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein mysql. <prefix>/include/{,mysql/}mysql.h and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <prefix>/lib/{,mysql/}. [RT #18152]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein proofs which, in turn, caused validation failures
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for insecure zones immediately below a secure zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the server was authoritative for. [RT #18112]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater TLDs and supported RRs with TTLs [RT #17972]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2376. [bug] Change #2144 was not complete.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2375. [placeholder]
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews2374. [bug] "blackhole" ACLs could cause named to segfault due
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews to some uninitialized memory. [RT #18095]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2373. [bug] Default values of zone ACLs were re-parsed each time a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein new zone was configured, causing an overconsumption
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews of memory. [RT #18092]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2371. [doc] Add +nsid option to dig man page. [RT #18039]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2370. [bug] "rndc freeze" could trigger an assertion in named
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when called on a nonexistent zone. [RT #18050]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2369. [bug] libbind: Array bounds overrun on read in bitncmp().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2368. [port] Linux: use libcap for capability management if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein possible. [RT# 18026]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2367. [bug] Improve counting of dns_resstatscounter_retry
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2366. [bug] Adb shutdown race. [RT #18021]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2365. [bug] Fix a bug that caused dns_acl_isany() to return
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein spurious results. [RT #18000]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2364. [bug] named could trigger a assertion when serving a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein malformed signed zone. [RT #17828]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2362. [cleanup] Make "rrset-order fixed" a compile-time option.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein settable by "./configure --enable-fixed-rrset".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Disabled by default. [RT #17977]
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews2361. [bug] "recursion" statistics counter could be counted
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews multiple times for a single query. [RT #17990]
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews2360. [bug] Fix a condition where we release a database version
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews (which may acquire a lock) while holding the lock.
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews2359. [bug] Fix NSID bug. [RT #17942]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2358. [doc] Update host's default query description. [RT #17934]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2357. [port] Don't use OpenSSL's engine support in versions before
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews OpenSSL 0.9.7f. [RT #17922]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2356. [bug] Built in mutex profiler was not scalable enough.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2355. [func] Extend the number statistics counters available.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2353. [func] Add support for Name Server ID (RFC 5001).
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews 'dig +nsid' requests NSID from server.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews 'request-nsid yes;' causes recursive server to send
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews NSID requests to upstream servers. Server responds
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews to NSID requests with the string configured by
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews 'server-id' option. [RT #17091]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2352. [bug] Various GSS_API fixups. [RT #17729]
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2350. [port] win32: IPv6 support. [RT #17797]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2349. [func] Provide incremental re-signing support for secure
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews dynamic zones. [RT #1091]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews Documentation is in the new README.pkcs11 file.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews New tool, dnssec-keyfromlabel, which takes the
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews label of a key pair in a HSM and constructs a DNS
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews key pair for use by named and dnssec-signzone.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2347. [bug] Delete now traverses the RB tree in the canonical
bddb70a27123e31020438cff811d898d44b42c71Mark Andrews order. [RT #17451]
bddb70a27123e31020438cff811d898d44b42c71Mark Andrews2346. [func] Memory statistics now cover all active memory contexts
8ae3bbdd860f8abe3d47ec02d1f4d2008bf46f63Automatic Updater in increased detail. [RT #17580]
8ae3bbdd860f8abe3d47ec02d1f4d2008bf46f63Automatic Updater2345. [bug] named-checkconf failed to detect when forwarders
bddb70a27123e31020438cff811d898d44b42c71Mark Andrews were set at both the options/view level and in
bddb70a27123e31020438cff811d898d44b42c71Mark Andrews a root zone. [RT #17671]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2344. [bug] Improve "logging{ file ...; };" documentation.
a404eb87dc8f91fe81bedce8bb3957fc3c7684a5Mark Andrews2343. [bug] (Seemingly) duplicate IPv6 entries could be
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews created in ADB. [RT #17837]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2341. [bug] libbind: add missing -I../include for off source
035992291cb70ec3be4046fcea921b4a6acb1c77Mark Andrews tree builds. [RT #17606]
bddb70a27123e31020438cff811d898d44b42c71Mark Andrews2340. [port] openbsd: interface configuration. [RT #17700]
bddb70a27123e31020438cff811d898d44b42c71Mark Andrews2339. [port] tru64: support for libbind. [RT #17589]
bddb70a27123e31020438cff811d898d44b42c71Mark Andrews2338. [bug] check_ds() could be called with a non DS rdataset.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews2336. [func] If "named -6" is specified then listen on all IPv6
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews interfaces if there are not listen-on-v6 clauses in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2335. [port] sunos: libbind and *printf() support for long long.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein bug in fromstruct_txt(). [RT #17609]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2333. [bug] Fix off by one error in isc_time_nowplusinterval().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2332. [contrib] query-loc-0.4.0. [RT #17602]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2331. [bug] Failure to regenerate any signatures was not being
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reported nor being past back to the UPDATE client.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2330. [bug] Remove potential race condition when handling
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein over memory events. [RT #17572]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein WARNING: API CHANGE: over memory callback
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein function now needs to call isc_mem_waterack().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein See <isc/mem.h> for details.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2329. [bug] Clearer help text for dig's '-x' and '-i' options.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2327. [bug] It was possible to dereference a NULL pointer in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rbtdb.c. Implement dead node processing in zones as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein we do for caches. [RT #17312]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2326. [bug] It was possible to trigger a INSIST in the acache
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2325. [port] Linux: use capset() function if available. [RT #17557]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2323. [port] tru64: namespace clash. [RT #17547]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2322. [port] MacOS: work around the limitation of setrlimit()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for RLIMIT_NOFILE. [RT #17526]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2321. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2320. [func] Make statistics counters thread-safe for platforms
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein that support certain atomic operations. [RT #17466]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2319. [bug] Silence Coverity warnings in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2318. [port] sunos fixes for libbind. [RT #17514]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2315. [bug] Used incorrect address family for mapped IPv4
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein addresses in acl.c. [RT #17519]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2314. [bug] Uninitialized memory use on error path in
07ee99c7d0c2cd7f3e72263c29bd76ebd6d7ed43Automatic Updater2313. [cleanup] Silence Coverity warnings. Handle private stacks.
07ee99c7d0c2cd7f3e72263c29bd76ebd6d7ed43Automatic Updater [RT #17447] [RT #17478]
07ee99c7d0c2cd7f3e72263c29bd76ebd6d7ed43Automatic Updater2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2311. [bug] IPv6 addresses could match IPv4 ACL entries and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein vice versa. [RT #17462]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater2310. [bug] dig, host, nslookup: flush stdout before emitting
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein debug/fatal messages. [RT #17501]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2306. [bug] Remove potential race from lib/dns/resolver.c.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2305. [security] inet_network() buffer overflow. CVE-2008-0122.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2304. [bug] Check returns from all dns_rdata_tostruct() calls.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2301. [bug] Remove resource leak and fix error messages in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2300. [bug] Fixed failure to close open file in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2299. [bug] Remove unnecessary NULL check in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2298. [bug] isc_mutex_lock() failure not caught in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2297. [bug] isc_entropy_createfilesource() failure not caught in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2296. [port] Allow docbook stylesheet location to be specified to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configure. [RT #17457]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2294. [func] Allow the experimental statistics channels to have
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein multiple connections and ACL.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Note: the stats-server and stats-server-v6 options
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein available in the previous beta releases are replaced
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with the generic statistics-channels statement.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2293. [func] Add ACL regression test. [RT #17375]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2292. [bug] Log if the working directory is not writable.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failure to set PR_SET_DUMPABLE. [RT #17312]
3eb9ec750c9088869170dda63e8899b2ba462823Mark Andrews2290. [bug] Let AD in the query signal that the client wants AD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein set in the response. [RT #17301]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2289. [func] named-checkzone now reports the out-of-zone CNAME
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein found. [RT #17309]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2288. [port] win32: mark service as running when we have finished
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein loading. [RT #17441]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2286. [func] Allow a TCP connection to be used as a weak
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein authentication method for reverse zones.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein New update-policy methods tcp-self and 6to4-self.
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater2285. [func] Test framework for client memory context management.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2284. [bug] Memory leak in UPDATE prerequisite processing.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2283. [bug] TSIG keys were not attaching to the memory
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews context. TSIG keys should use the rings
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory context rather than the clients memory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein context. [RT #17377]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews2281. [bug] Attempts to use undefined acls were not being logged.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2280. [func] Allow the experimental http server to be reached
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater over IPv6 as well as IPv4. [RT #17332]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater to protect applications from receiving spurious
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater SIGPIPE signals when using the resolver.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2278. [bug] win32: handle the case where Windows returns no
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater search list or DNS suffix. [RT #17354]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2277. [bug] Empty zone names were not correctly being caught at
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater in the post parse checks. [RT #17357]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2275. [func] Add support to dig to perform IXFR queries over UDP.
3970098dcd2a7122541667b4b56cea8abce8ccf2Mark Andrews2274. [func] Log zone transfer statistics. [RT #17336]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2273. [bug] Adjust log level to WARNING when saving inconsistent
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater stub/slave master and journal files. [RT# 17279]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2271. [bug] Fix a memory leak in http server code [RT #17100]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2270. [bug] dns_db_closeversion() version->writer could be reset
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater before it is tested. [RT #17290]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater --- 9.5.0b1 released ---
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2267. [bug] Radix tree node_num value could be set incorrectly,
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater causing positive ACL matches to look like negative
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater ones. [RT #17311]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2266. [bug] client.c:get_clientmctx() returned the same mctx
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater once the pool of mctx's was filled. [RT #17218]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2265. [bug] Test that the memory context's basic_table is non NULL
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater before freeing. [RT #17265]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2264. [bug] Server prefix length was being ignored. [RT #17308]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2263. [bug] "named-checkconf -z" failed to set default value
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater for "check-integrity". [RT #17306]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2262. [bug] Error status from all but the last view could be
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater lost. [RT #17292]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2260. [bug] Reported wrong clients-per-query when increasing the
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater value. [RT #17236]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2259. [placeholder]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater --- 9.5.0a7 released ---
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2257. [bug] win32: Use the full path to vcredist_x86.exe when
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater calling it. [RT #17222]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2256. [bug] win32: Correctly register the installation location of
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2254. [bug] timer.c:dispatch() failed to lock timer->lock
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater when reading timer->idle allowing it to see
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater intermediate values as timer->idle was reset by
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater isc_timer_touch(). [RT #17243]
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews2253. [func] "max-cache-size" defaults to 32M.
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews "max-acache-size" defaults to 16M.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2252. [bug] Fixed errors in sortlist code [RT #17216]
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews2251. [placeholder]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2250. [func] New flag 'memstatistics' to state whether the
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews memory statistics file should be written or not.
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews Additionally named's -m option will cause the
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews statistics file to be written. [RT #17113]
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews2249. [bug] Only set Authentic Data bit if client requested
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews DNSSEC, per RFC 3655 [RT #17175]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2247. [doc] Sort doc/misc/options. [RT #17067]
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews2246. [bug] Make the startup of test servers (ans.pl) more
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein robust. [RT #17147]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2245. [bug] Validating lack of DS records at trust anchors wasn't
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein working. [RT #17151]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2244. [func] Allow the check of nameserver names against the
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews SOA MNAME field to be disabled by specifying
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews 'notify-to-soa yes;'. [RT #17073]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2243. [func] Configuration files without a newline at the end now
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews parse without error. [RT #17120]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein library could require a source of random data.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a number of INSIST()s into plain fatal() errors
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein which report the triggering result code.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The 'key' command wasn't disabling GSS-TSIG.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2238. [bug] It was possible to trigger a REQUIRE when a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein validation was canceled. [RT #17106]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2236. [bug] dnssec-signzone failed to preserve the case of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of wildcard owner names. [RT #17085]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater2233. [func] Add support for O(1) ACL processing, based on
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater radix tree code originally written by Kevin
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater Brintnall. [RT #16288]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2232. [bug] dns_adb_findaddrinfo() could fail and return
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ISC_R_SUCCESS. [RT #17137]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2230. [bug] We could INSIST reading a corrupted journal.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2229. [bug] Null pointer dereference on query pool creation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failure. [RT #17133]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2228. [contrib] contrib: Change 2188 was incomplete.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2227. [cleanup] Tidied up the FAQ. [RT #17121]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2226. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2225. [bug] More support for systems with no IPv4 addresses.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2224. [bug] Defer journal compaction if a xfrin is in progress.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2223. [bug] Make a new journal when compacting. [RT #17119]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2222. [func] named-checkconf now checks server key references.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2221. [bug] Set the event result code to reflect the actual
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein record turned to caller when a cache update is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rejected due to a more credible answer existing.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2220. [bug] win32: Address a race condition in final shutdown of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the Windows socket code. [RT #17028]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2219. [bug] Apply zone consistency checks to additions, not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein removals, when updating. [RT #17049]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2217. [func] Adjust update log levels. [RT #17092]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2216. [cleanup] Fix a number of errors reported by Coverity.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2214. [bug] Deregister OpenSSL lock callback when cleaning
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein up. Reorder OpenSSL cleanup so that RAND_cleanup()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is called before the locks are destroyed. [RT #17098]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2213. [bug] SIG0 diagnostic failure messages were looking at the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein wrong status code. [RT #17101]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2212. [func] 'host -m' now causes memory statistics and active
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory to be printed at exit. [RT 17028]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2211. [func] Update "dynamic update temporarily disabled" message.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2210. [bug] Deleting class specific records via UPDATE could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fail. [RT #17074]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2209. [port] osx: linking against user supplied static OpenSSL
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews libraries failed as the system ones were still being
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews found. [RT #17078]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2208. [port] win32: make sure both build methods produce the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews same output. [RT #17058]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews ai_canonname correctly. [RT #17061]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews --- 9.5.0a6 released ---
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews2206. [security] "allow-query-cache" and "allow-recursion" now
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews cross inherit from each other.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews If allow-query-cache is not set in named.conf then
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews allow-recursion is used if set, otherwise allow-query
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews is used if set, otherwise the default (localnets;
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews localhost;) is used.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein If allow-recursion is not set in named.conf then
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-query-cache is used if set, otherwise allow-query
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is used if set, otherwise the default (localnets;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein localhost;) is used.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2204. [bug] "rndc flushanme name unknown-view" caused named
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to crash. [RT #16984]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2203. [security] Query id generation was cryptographically weak.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT # 16915]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2202. [security] The default acls for allow-query-cache and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-recursion were not being applied. [RT #16960]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2201. [bug] The build failed in a separate object directory.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2200. [bug] The search for cached NSEC records was stopping to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein early leading to excessive DLV queries. [RT #16930]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2199. [bug] win32: don't call WSAStartup() while loading dlls.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2198. [bug] win32: RegCloseKey() could be called when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RegOpenKeyEx() failed. [RT #16911]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2197. [bug] Add INSIST to catch negative responses which are
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews not setting the event result code appropriately.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2196. [port] win32: yield processor while waiting for once to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to complete. [RT #16958]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2195. [func] dnssec-keygen now defaults to nametype "ZONE"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when generating DNSKEYs. [RT #16954]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2194. [bug] Close journal before calling 'done' in xfrin.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.5.0a5 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2193. [port] win32: BINDInstall.exe is now linked statically.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2192. [port] win32: use vcredist_x86.exe to install Visual
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Studio's redistributable dlls if building with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Visual Stdio 2005 or later.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2191. [func] named-checkzone now allows dumping to stdout (-).
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews named-checkconf now has -h for help.
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews named-checkzone now has -h for help.
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews rndc now has -h for help.
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews Better handling of '-?' for usage summaries.
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2190. [func] Make fallback to plain DNS from EDNS due to timeouts
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews more visible. New logging category "edns-disabled".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2189. [bug] Handle socket() returning EINTR. [RT #15949]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2188. [contrib] queryperf: autoconf changes to make the search for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein libresolv or libbind more robust. [RT #16299]
00124ad0406365d39f4b2d1011ef6a76706e9df0Mark Andrews2187. [bug] query_addds(), query_addwildcardproof() and
00124ad0406365d39f4b2d1011ef6a76706e9df0Mark Andrews query_addnxrrsetnsec() should take a version
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein argument. [RT #16368]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2186. [port] cygwin: libbind: check for struct sockaddr_storage
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein independently of IPv6. [RT #16482]
00124ad0406365d39f4b2d1011ef6a76706e9df0Mark Andrews2185. [port] sunos: libbind: check for ssize_t, memmove() and
00124ad0406365d39f4b2d1011ef6a76706e9df0Mark Andrews memchr(). [RT #16463]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews2184. [bug] bind9.xsl.h didn't build out of the source tree.
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater2183. [bug] dnssec-signzone didn't handle offline private keys
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews well. [RT #16832]
00124ad0406365d39f4b2d1011ef6a76706e9df0Mark Andrews2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could return ISC_R_SUCCESS when they ran out of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory. [RT #16365]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2180. [cleanup] Remove bit test from 'compress_test' as they
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are no longer needed. [RT #16497]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2179. [func] 'rndc command zone' will now find 'zone' if it is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unique to all the views. [RT #16821]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2178. [bug] 'rndc reload' of a slave or stub zone resulted in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a reference leak. [RT #16867]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2177. [bug] Array bounds overrun on read (rcodetext) at
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein debug level 10+. [RT #16798]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2176. [contrib] dbus update to handle race condition during
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews initialization (Bugzilla 235809). [RT #16842]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2175. [bug] win32: windows broadcast condition variable support
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was broken. [RT #16592]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2174. [bug] I/O errors should always be fatal when reading
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews master files. [RT #16825]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2173. [port] win32: When compiling with MSVS 2005 SP1 we also
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.5.0a4 released ---
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2172. [bug] query_addsoa() was being called with a non zone db.
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2171. [bug] Handle breaks in DNSSEC trust chains where the parent
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews servers are not DS aware (DS queries to the parent
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews return a referral to the child).
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews2170. [func] Add acache processing to test suite. [RT #16711]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2169. [bug] host, nslookup: when reporting NXDOMAIN report the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein given name and not the last name searched for.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2168. [bug] nsupdate: in non-interactive mode treat syntax errors
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as fatal errors. [RT #16785]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2167. [bug] When re-using a automatic zone named failed to
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater attach it to the new view. [RT #16786]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater --- 9.5.0a3 released ---
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2166. [bug] When running in batch mode, dig could misinterpret
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater a server address as a name to be looked up, causing
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater unexpected output. [RT #16743]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2165. [func] Allow the destination address of a query to determine
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater if we will answer the query or recurse.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater allow-query-on, allow-recursion-on and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allow-query-cache-on. [RT #16291]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2164. [bug] The code to determine how named-checkzone /
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater named-compilezone was called failed under windows.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2163. [bug] If only one of query-source and query-source-v6
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater specified a port the query pools code broke (change
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater 2129). [RT #16768]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2162. [func] Allow "rrset-order fixed" to be disabled at compile
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater time. [RT #16665]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2161. [bug] Fix which log messages are emitted for 'rndc flush'.
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater from getifaddrs(). [RT #16708]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater --- 9.5.0a2 released ---
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2159. [bug] Array bounds overrun in acache processing. [RT #16710]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2158. [bug] ns_client_isself() failed to initialize key
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater leading to a REQUIRE failure. [RT #16688]
984c2e9f76e66e86f7d9aca99a774836ddf196eaAutomatic Updater2157. [func] dns_db_transfernode() created. [RT #16685]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein resolver.c:validated() and resolver.c:cache_name().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Fix a memory leak in rbtdb.c:free_noqname().
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater Make lookup.c:lookup_find() robust against
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein event leaks. [RT #16685]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein matched in acls by omitting the scope. [RT #16599]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2153. [bug] nsupdate could leak memory. [RT #16691]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2152. [cleanup] Use sizeof(buf) instead of fixed number in
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews dighost.c:get_trusted_key(). [RT #16678]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2151. [bug] Missing newline in usage message for journalprint.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2150. [bug] 'rrset-order cyclic' uniformly distribute the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein starting point for the first response for a given
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein RRset. [RT #16655]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2149. [bug] isc_mem_checkdestroyed() failed to abort on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if there were still active memory contexts.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2148. [func] Add positive logging for rndc commands. [RT #14623]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2147. [bug] libbind: remove potential buffer overflow from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein SO_BSDCOMPAT" message. [RT #16641]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2145. [bug] Check DS/DLV digest lengths for known digests.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2143. [bug] We failed to restart the IPv6 client when the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein kernel failed to return the destination the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein packet was sent to. [RT #16613]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2142. [bug] Handle master files with a modification time that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein matches the epoch. [RT# 16612]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein equivalent of LDH checks). [RT #16609]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2140. [bug] libbind: missing unlock on pthread_key_create()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failures. [RT #16654]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2139. [bug] dns_view_find() was being called with wrong type
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in adb.c. [RT #16670]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2138. [bug] Lock order reversal in resolver.c. [RT #16653]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2137. [port] Mips little endian and/or mips 64 bit are now
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein supported for atomic operations. [RT#16648]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2136. [bug] nslookup/host looped if there was no search list
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and the host didn't exist. [RT #16657]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2134. [func] Additional statistics support. [RT #16666]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2133. [port] powerpc: Support both IBM and MacOS Power PC
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein assembler syntaxes. [RT #16647]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2132. [bug] Missing unlock on out of memory in
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews dns_dispatchmgr_setudp().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2130. [func] Log if CD or DO were set. [RT #16640]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2129. [func] Provide a pool of UDP sockets for queries to be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein made over. See use-queryport-pool, queryport-pool-ports
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and queryport-pool-updateinterval. [RT #16415]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2126. [security] Serialize validation of type ANY responses. [RT #16555]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was defined. [RT #16574]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2124. [security] It was possible to dereference a freed fetch
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein context. [RT #16584]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.5.0a1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2123. [func] Use Doxygen to generate internal documentation.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2122. [func] Experimental http server and statistics support
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for named via xml.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein second timeout. [RT #16553]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2120. [doc] Fix markup on nsupdate man page. [RT #16556]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2119. [compat] libbind: allow res_init() to succeed enough to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein return the default domain even if it was unable
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to allocate memory.
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater2118. [bug] Handle response with long chains of domain name
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater compression pointers which point to other compression
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater pointers. [RT #16427]
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater which could lead to validation failures. named didn't
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater handle negative DS responses that were in the process
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater of being validated. Check CNAME bit before accepting
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater NODATA proof. To be able to ignore a child NSEC there
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater must be SOA (and NS) set in the bitmap. [RT #16399]
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater2116. [bug] 'rndc reload' could cause the cache to continually
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater be cleaned. [RT #16401]
4a71c59d2bf32585c5dd18f4630d5f10e56a1ab3Automatic Updater2115. [bug] 'rndc reconfig' could trigger a INSIST if the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein number of masters for a zone was reduced. [RT #16444]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2114. [bug] dig/host/nslookup: searches for names with multiple
8b1cba45ade83893c009b37f47d5478e97eb61d2Automatic Updater labels were failing. [RT #16447]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2113. [bug] nsupdate: if a zone is specified it should be used
8b1cba45ade83893c009b37f47d5478e97eb61d2Automatic Updater for server discover. [RT# 16455]
8b1cba45ade83893c009b37f47d5478e97eb61d2Automatic Updater2112. [security] Warn if weak RSA exponent is used. [RT #16460]
8b1cba45ade83893c009b37f47d5478e97eb61d2Automatic Updater2111. [bug] Fix a number of errors reported by Coverity.
8b1cba45ade83893c009b37f47d5478e97eb61d2Automatic Updater2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
8b1cba45ade83893c009b37f47d5478e97eb61d2Automatic Updater priming queries. [RT #16491]
8b1cba45ade83893c009b37f47d5478e97eb61d2Automatic Updater2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
8b1cba45ade83893c009b37f47d5478e97eb61d2Automatic Updater2108. [func] DHCID support. [RT #16456]
8b1cba45ade83893c009b37f47d5478e97eb61d2Automatic Updater2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2106. [func] 'rndc status' now reports named's version. [RT #16426]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2105. [func] GSS-TSIG support (RFC 3645).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2104. [port] Fix Solaris SMF error message.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2103. [port] Add /usr/sfw to list of locations for OpenSSL
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein under Solaris.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2102. [port] Silence Solaris 10 warnings.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2101. [bug] OpenSSL version checks were not quite right.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2100. [port] win32: copy libeay32.dll to Build\Debug.
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater Copy Debug\named-checkzone to Debug\named-compilezone.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2099. [port] win32: more manifest issues.
2a9a5e1871710510cdbba67c13ce21e75296b451Automatic Updater2098. [bug] Race in rbtdb.c:no_references(), which occasionally
2a9a5e1871710510cdbba67c13ce21e75296b451Automatic Updater triggered an INSIST failure about the node lock
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reference. [RT #16411]
2a9a5e1871710510cdbba67c13ce21e75296b451Automatic Updater2097. [bug] named could reference a destroyed memory context
2a9a5e1871710510cdbba67c13ce21e75296b451Automatic Updater after being reloaded / reconfigured. [RT #16428]
2a9a5e1871710510cdbba67c13ce21e75296b451Automatic Updater2096. [bug] libbind: handle applications that fail to detect
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein res_init() failures better.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein net_cidr_ntop_ipv6(). [RT #16388]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2094. [contrib] Update named-bootconf. [RT# 16404]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2093. [bug] named-checkzone -s was broken.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2092. [bug] win32: dig, host, nslookup. Use registry config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if resolv.conf does not exist or no nameservers
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein listed. [RT #15877]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2091. [port] dighost.c: race condition on cleanup. [RT #16417]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2090. [port] win32: Visual C++ 2005 command line manifest support.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2089. [security] Raise the minimum safe OpenSSL versions to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein prior to these have known security flaws which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are (potentially) exploitable in named. [RT #16391]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2088. [security] Change the default RSA exponent from 3 to 65537.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2086. [port] libbind: FreeBSD now has get*by*_r() functions.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2085. [doc] win32: added index.html and README to zip. [RT #16201]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2084. [contrib] dbus update for 9.3.3rc2.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2083. [port] win32: Visual C++ 2005 support.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2082. [doc] Document 'cache-file' as a test only option.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2080. [port] libbind: res_init.c did not compile on older versions
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of Solaris. [RT #16363]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2079. [bug] The lame cache was not handling multiple types
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein correctly. [RT #16361]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2078. [bug] dnssec-checkzone output style "default" was badly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named. It is now called "relative". [RT #16326]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein complete signed zone. [RT #16326]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2076. [bug] Several files were missing #include <config.h>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein causing build failures on OSF. [RT #16341]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2075. [bug] The spillat timer event hander could leak memory.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_request_createraw2() and dns_request_createraw3()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failed to send multiple UDP requests. [RT #16349]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2073. [bug] Incorrect semantics check for update policy "wildcard".
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2072. [bug] We were not generating valid HMAC SHA digests.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2071. [port] Test whether gcc accepts -fno-strict-aliasing.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2070. [bug] The remote address was not always displayed when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reporting dispatch failures. [RT #16315]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2069. [bug] Cross compiling was not working. [RT #16330]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2068. [cleanup] Lower incremental tuning message to debug 1.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2067. [bug] 'rndc' could close the socket too early triggering
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a INSIST under Windows. [RT #16317]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews2066. [security] Handle SIG queries gracefully. [RT #16300]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2065. [bug] libbind: probe for HPUX prototypes for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein endprotoent_r() and endservent_r(). [RT 16313]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2063. [bug] Change #1955 introduced a bug which caused the first
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'rndc flush' call to not free memory. [RT #16244]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2062. [bug] 'dig +nssearch' was reusing a buffer before it had
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein been returned by the socket code. [RT #16307]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2061. [bug] Accept expired wildcard message reversed. [RT #16296]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2060. [bug] Enabling DLZ support could leave views partially
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configured. [RT #16295]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2059. [bug] Search into cache rbtdb could trigger an INSIST
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews failure while cleaning up a stale rdataset.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2058. [bug] Adjust how we calculate rtt estimates in the presence
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of authoritative servers that drop EDNS and/or CD
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein requests. Also fallback to EDNS/512 and plain DNS
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein faster for zones with less than 3 servers. [RT #16187]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2057. [bug] Make setting "ra" dependent on both allow-query-cache
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and allow-recursion. [RT #16290]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2056. [bug] dig: ixfr= was not being treated case insensitively
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein at all times. [RT #15955]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2055. [bug] Missing goto after dropping multicast query.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2054. [port] freebsd: do not explicitly link against -lpthread.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2052. [bug] 'rndc' improve connect failed message to report
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the failing address. [RT #15978]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2051. [port] More strtol() fixes. [RT #16249]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2050. [bug] Parsing of NSAP records was not case insensitive.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2049. [bug] Restore SOA before AXFR when falling back from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a attempted IXFR when transferring in a zone.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Allow a initial SOA query before attempting
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a AXFR to be requested. [RT #16156]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2048. [bug] It was possible to loop forever when using
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein avoid-v4-udp-ports / avoid-v6-udp-ports when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the OS always returned the same local port.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2047. [bug] Failed to initialize the interface flags to zero.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cleanup [RT #16247].
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2045. [func] Use lock buckets for acache entries to limit memory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein consumption. [RT #16183]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2044. [port] Add support for atomic operations for Itanium.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2043. [port] nsupdate/nslookup: Force the flushing of the prompt
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for interactive sessions. [RT#16148]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater2042. [bug] named-checkconf was incorrectly rejecting the
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater logging category "config". [RT #16117]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
4e243fdc6b33a6371208b48d64912d8e327b4f5cAndreas Gustafsson set of libraries to be linked. [RT #16129]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater2040. [bug] rbtdb no_references() could trigger an INSIST
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater failure with --enable-atomic. [RT #16022]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater2039. [func] Check that all buffers passed to the socket code
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater have been retrieved when the socket event is freed.
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater2038. [bug] dig/nslookup/host was unlinking from wrong list
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater when handling errors. [RT #16122]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2037. [func] When unlinking the first or last element in a list
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater check that the list head points to the element to
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater be unlinked. [RT #15959]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2035. [func] Make falling back to TCP on UDP refresh failure
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews optional. Default "try-tcp-refresh yes;" for BIND 8
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein compatibility. [RT #16123]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2033. [bug] We weren't creating multiple client memory contexts
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein on demand as expected. [RT #16095]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce2031. [bug] Emit a error message when "rndc refresh" is called on
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce a non slave/stub zone. [RT # 16073]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2030. [bug] We were being overly conservative when disabling
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein openssl engine support. [RT #16030]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2029. [bug] host printed out the server multiple times when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein specified on the command line. [RT #15992]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2028. [port] linux: socket.c compatibility for old systems.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2027. [port] libbind: Solaris x86 support. [RT #16020]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2026. [bug] Rate limit the two recursive client exceeded messages.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2025. [func] Update "zone serial unchanged" message. [RT #16026]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2024. [bug] named emitted spurious "zone serial unchanged"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein messages on reload. [RT #16027]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2023. [bug] "make install" should create ${localstatedir}/run and
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews ${sysconfdir} if they do not exist. [RT #16033]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2022. [bug] If dnssec validation is disabled only assert CD if
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews CD was requested. [RT #16037]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2019. [tuning] Reduce the amount of work performed per quantum
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when cleaning the cache. [RT #15986]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2018. [bug] Checking if the HMAC MD5 private file was broken.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2017. [bug] allow-query default was not correct. [RT #15946]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2016. [bug] Return a partial answer if recursion is not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein allowed but requested and we had the answer
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to the original qname. [RT #15945]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2015. [cleanup] use-additional-cache is now acache-enable for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein consistency. Default acache-enable off in BIND 9.4
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as it requires memory usage to be configured.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein It may be enabled by default in BIND 9.5 once we
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein have more experience with it.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2014. [func] Statistics about acache now recorded and sent
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to log. [RT #15976]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein responses more gracefully. [RT #15941]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2012. [func] Don't insert new acache entries if acache is full.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2011. [func] dnssec-signzone can now update the SOA record of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the signed zone, either as an increment or as the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein system time(). [RT #15633]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2010. [placeholder] rt15958
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2009. [bug] libbind: Coverity fixes. [RT #15808]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2008. [func] It is now possible to enable/disable DNSSEC
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein validation from rndc. This is useful for the
9ef82979c49da3dd3647273b1cd6ed7d3352c003Automatic Updater mobile hosts where the current connection point
767c53c304b86460d72eeec7d3304172cdd904bdEvan Hunt breaks DNSSEC (firewall/proxy). [RT #15592]
9ef82979c49da3dd3647273b1cd6ed7d3352c003Automatic Updater rndc validation newstate [view]
9ef82979c49da3dd3647273b1cd6ed7d3352c003Automatic Updater2007. [func] It is now possible to explicitly enable DNSSEC
9ef82979c49da3dd3647273b1cd6ed7d3352c003Automatic Updater validation. default dnssec-validation no; to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be changed to yes in 9.5.0. [RT #15674]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2006. [security] Allow-query-cache and allow-recursion now default
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to the built in acls "localnets" and "localhost".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein This is being done to make caching servers less
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein attractive as reflective amplifying targets for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein spoofed traffic. This still leave authoritative
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein servers exposed.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce The best fix is for full BCP 38 deployment to
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce remove spoofed traffic.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2005. [bug] libbind: Retransmission timeouts should be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein based on which attempt it is to the nameserver
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and not the nameserver itself. [RT #13548]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2004. [bug] dns_tsig_sign() could pass a NULL pointer to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dst_context_destroy() when cleaning up after a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein error. [RT #15835]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2003. [bug] libbind: The DNS name/address lookup functions could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein occasionally follow a random pointer due to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein structures not being completely zeroed. [RT #15806]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein2002. [bug] libbind: tighten the constraints on when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein struct addrinfo._ai_pad exists. [RT #15783]
9ef82979c49da3dd3647273b1cd6ed7d3352c003Automatic Updater2001. [func] Check the KSK flag when updating a secure dynamic zone.
9ef82979c49da3dd3647273b1cd6ed7d3352c003Automatic Updater New zone option "update-check-ksk yes;". [RT #15817]
9ef82979c49da3dd3647273b1cd6ed7d3352c003Automatic Updater2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1999. [func] Implement "rrset-order fixed". [RT #13662]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1998. [bug] Restrict handling of fifos as sockets to just SunOS.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein This allows named to connect to entropy gathering
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein daemons that use fifos instead of sockets. [RT #15840]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1997. [bug] Named was failing to replace negative cache entries
49853562e29e3813e49c251cde132d7be6a6475eAutomatic Updater when a positive one for the type was learnt.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1996. [bug] nsupdate: if a zone has been specified it should
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein appear in the output of 'show'. [RT #15797]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews1995. [bug] 'host' was reporting multiple "is an alias" messages.
49853562e29e3813e49c251cde132d7be6a6475eAutomatic Updater1994. [port] OpenSSL 0.9.8 support. [RT #15694]
49853562e29e3813e49c251cde132d7be6a6475eAutomatic Updater1993. [bug] Log messages, via syslog, were missing the space
49853562e29e3813e49c251cde132d7be6a6475eAutomatic Updater after the timestamp if "print-time yes" was specified.
49853562e29e3813e49c251cde132d7be6a6475eAutomatic Updater1992. [bug] Not all incoming zone transfer messages included the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein view. [RT #15825]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews1991. [cleanup] The configuration data, once read, should be treated
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as read only. Expand the use of const to enforce this
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein at compile time. [RT #15813]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1990. [bug] libbind: isc's override of broken gettimeofday()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein implementations was not always effective.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1989. [bug] win32: don't check the service password when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein re-installing. [RT #15882]
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews1988. [bug] Remove a bus error from the SHA256/SHA512 support.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
cd3ee12f1d34107678bde7be68b1d7f0f45cf2c9Automatic Updater1986. [func] Report when a zone is removed. [RT #15849]
cd3ee12f1d34107678bde7be68b1d7f0f45cf2c9Automatic Updater1985. [protocol] DLV has now been assigned a official type code of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 32769. [RT #15807]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Note: care should be taken to ensure you upgrade
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein both named and dnssec-signzone at the same time for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zones with DLV records where named is the master
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein server for the zone. Also any zones that contain
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews DLV records should be removed when upgrading a slave
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone. You do not however have to upgrade all
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein servers for a zone with DLV records simultaneously.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1984. [func] dig, nslookup and host now advertise a 4096 byte
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein EDNS UDP buffer size by default. [RT #15855]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1983. [func] Two new update policies. "selfsub" and "selfwild".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1982. [bug] DNSKEY was being accepted on the parent side of
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater a delegation. KEY is still accepted there for
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater RFC 3007 validated updates. [RT #15620]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1981. [bug] win32: condition.c:wait() could fail to reattain
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater the mutex lock.
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1980. [func] dnssec-signzone: output the SOA record as the
9fbbfb5757a1e3e86d7dea62c4e63ffc2303ca2bAutomatic Updater first record in the signed zone. [RT #15758]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1979. [port] linux: allow named to drop core after changing
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater user ids. [RT #15753]
2914684df93e6c3aa4d402b5a14fbe6137f538aeAutomatic Updater1978. [port] Handle systems which have a broken recvmsg().
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1977. [bug] Silence noisy log message. [RT #15704]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1975. [bug] libbind: isc_gethexstring() could misparse multi-line
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater hex strings with comments. [RT #15814]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1974. [doc] List each of the zone types and associated zone
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater options separately in the ARM.
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater HMACSHA512 support. [RT #13606]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1972. [contrib] DBUS dynamic forwarders integration from
2914684df93e6c3aa4d402b5a14fbe6137f538aeAutomatic Updater Jason Vas Dias <jvdias@redhat.com>.
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1971. [port] linux: make detection of missing IF_NAMESIZE more
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater robust. [RT #15443]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1970. [bug] nsupdate: adjust UDP timeout when falling back to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unsigned SOA query. [RT #15775]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1969. [bug] win32: the socket code was freeing the socket
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater structure too early. [RT #15776]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
2914684df93e6c3aa4d402b5a14fbe6137f538aeAutomatic Updater1966. [bug] Don't set CD when we have fallen back to plain DNS.
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1965. [func] Suppress spurious "recursion requested but not
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater available" warning with 'dig +qr'. [RT #15780].
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1963. [port] Tru64 4.0E doesn't support send() and recv().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1962. [bug] Named failed to clear old update-policy when it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was removed. [RT #15491]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1961. [bug] Check the port and address of responses forwarded
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to dispatch. [RT #15474]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1959. [func] Control the zeroing of the negative response TTL to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a soa query. Defaults "zero-no-soa-ttl yes;" and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "zero-no-soa-ttl-cache no;". [RT #15460]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1958. [bug] Named failed to update the zone's secure state
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein until the zone was reloaded. [RT #15412]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1957. [bug] Dig mishandled responses to class ANY queries.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1956. [bug] Improve cross compile support, 'gen' is now built
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by native compiler. See README for additional
fde6bfde6ec1d7a5f9907aeea8618db9dbd02f4cAutomatic Updater cross compile support information. [RT #15148]
fde6bfde6ec1d7a5f9907aeea8618db9dbd02f4cAutomatic Updater1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
fde6bfde6ec1d7a5f9907aeea8618db9dbd02f4cAutomatic Updater1954. [func] Named now falls back to advertising EDNS with a
fde6bfde6ec1d7a5f9907aeea8618db9dbd02f4cAutomatic Updater 512 byte receive buffer if the initial EDNS queries
fde6bfde6ec1d7a5f9907aeea8618db9dbd02f4cAutomatic Updater fail. [RT #14852]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1953. [func] The maximum EDNS UDP response named will send can
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein now be set in named.conf (max-udp-size). This is
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater independent of the advertised receive buffer
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater (edns-udp-size). [RT #14852]
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater1952. [port] hpux: tell the linker to build a runtime link
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater path "-Wl,+b:". [RT #14816].
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater1951. [security] Drop queries from particular well known ports.
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater Don't return FORMERR to queries from particular
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater well known ports. [RT #15636]
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater a TCP socket. This prevents the source address being
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater set for TCP connections. [RT #15628]
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater1949. [func] Addition memory leakage checks. [RT #15544]
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater1948. [bug] If was possible to trigger a REQUIRE failure in
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater xfrin.c:maybe_free() if named ran out of memory.
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews1947. [func] It is now possible to configure named to accept
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater expired RRSIGs. Default "dnssec-accept-expired no;".
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater Setting "dnssec-accept-expired yes;" leaves named
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater vulnerable to replay attacks. [RT #14685]
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater1946. [bug] resume_dslookup() could trigger a REQUIRE failure
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater when using forwarders. [RT #15549]
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater To generate a RSAMD5 key you must explicitly request
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater RSAMD5. [RT #13780]
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews1944. [cleanup] isc_hash_create() does not need a read/write lock.
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater1943. [bug] Set the loadtime after rolling forward the journal.
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater1942. [bug] If the name of a DNSKEY match that of one in
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater trusted-keys do not attempt to validate the DNSKEY
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews using the parents DS RRset. [RT #15649]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1941. [bug] ncache_adderesult() should set eresult even if no
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews rdataset is passed to it. [RT #15642]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1940. [bug] Fixed a number of error conditions reported by
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1939. [bug] The resolver could dereference a null pointer after
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews validation if all the queries have timed out.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1938. [bug] The validator was not correctly handling unsecure
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews negative responses at or below a SEP. [RT #15528]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1936. [bug] The validator could leak memory. [RT #15544]
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews1935. [bug] 'acache' was DO sensitive. [RT #15430]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1934. [func] Validate pending NS RRsets, in the authority section,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews prior to returning them if it can be done without
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews requiring DNSKEYs to be fetched. [RT #15430]
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews1931. [bug] Per-client mctx could require a huge amount of memory,
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews particularly for a busy caching server. [RT #15519]
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1930. [port] HPUX: ia64 support. [RT #15473]
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1927. [bug] Access to soanode or nsnode in rbtdb violated the
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews lock order rule and could cause a dead lock.
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1926. [bug] The Windows installer did not check for empty
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews passwords. BINDinstall was being installed in
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews the wrong place. [RT #15483]
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1925. [port] All outer level AC_TRY_RUNs need cross compiling
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews defaults. [RT #15469]
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1924. [port] libbind: hpux ia64 support. [RT #15473]
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1923. [bug] ns_client_detach() called too early. [RT #15499]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews1922. [bug] check-tool.c:setup_logging() missing call to
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews dns_log_setcontext().
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews1921. [bug] Client memory contexts were not using internal
68abac6cb23aa2c6489ccc16663e051d7aad3ad9Mark Andrews malloc. [RT# 15434]
d71e2e0c61df16ff37c9934c371a4a60c08974f7Mark Andrews1920. [bug] The cache rbtdb lock array was too small to
d71e2e0c61df16ff37c9934c371a4a60c08974f7Mark Andrews have the desired performance characteristics.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1919. [contrib] queryperf: a set of new features: collecting/printing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein response delays, printing intermediate results, and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein adjusting query rate for the "target" qps.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1918. [bug] Memory leak when checking acls. [RT #15391]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when generating man pages. [RT #15385]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1915. [bug] dig +ndots was broken. [RT #15215]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1914. [protocol] DS is required to accept mnemonic algorithms
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (RFC 4034). Still emit numeric algorithms for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein compatibility with RFC 3658. [RT #15354]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1913. [func] Integrate contributed DLZ code into named. [RT #11382]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1912. [port] aix: atomic locking for powerpc. [RT #15020]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1911. [bug] Update windows socket code. [RT #14965]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1910. [bug] dig's +sigchase code overhauled. [RT #14933]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1909. [bug] The DLV code has been re-worked to make no longer
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein query order sensitive. [RT #14933]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1908. [func] dig now warns if 'RA' is not set in the answer when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'RD' was set in the query. host/nslookup skip servers
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein that fail to set 'RA' when 'RD' is set unless a server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is explicitly set. [RT #15005]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1906. [func] dig now has a '-q queryname' and '+showsearch' options.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1905. [bug] Strings returned from cfg_obj_asstring() should be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein treated as read-only. The prototype for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cfg_obj_asstring() has been updated to reflect this.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein friends. Note: RFC 1918 zones are not yet covered by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein this but are likely to be in a future release.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein New options: empty-server, empty-contact,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein empty-zones-enable and disable-empty-zone.
9011c72c568aedd03709f56f21d639fd55944a74Automatic Updater1903. [func] ISC string copy API.
9011c72c568aedd03709f56f21d639fd55944a74Automatic Updater1902. [func] Attempt to make the amount of work performed in a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein iteration self tuning. The covers nodes clean from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the cache per iteration, nodes written to disk when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rewriting a master file and nodes destroyed per
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein iteration when destroying a zone or a cache.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1901. [cleanup] Don't add DNSKEY records to the additional section.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1900. [bug] ixfr-from-differences failed to ensure that the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein serial number increased. [RT #15036]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1899. [func] named-checkconf now validates update-policy entries.
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews ISC_NETADDR_FORMATSIZE to allow for scope details.
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews1897. [func] x86 and x86_64 now have separate atomic locking
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews implementations.
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1896. [bug] Recursive clients soft quota support wasn't working
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews as expected. [RT #15103]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1895. [bug] A escaped character is, potentially, converted to
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews the output character set too early. [RT #14666]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1894. [doc] Review ARM for BIND 9.4.
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1893. [port] Use uintptr_t if available. [RT #14606]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1892. [func] Support for SPF rdata type. [RT #15033]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1891. [port] freebsd: pthread_mutex_init can fail if it runs out
824f38c0310fddef55f0f691580154022a7852f5Automatic Updater of memory. [RT #14995]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1890. [func] Raise the UDP receive buffer size to 32k if it is
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews less than 32k. [RT #14953]
c25877b3630eee1da5b942aaa924cba831b89328Automatic Updater1889. [port] sunos: non blocking i/o support. [RT #14951]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1888. [func] Support for IPSECKEY rdata type. [RT #14967]
c25877b3630eee1da5b942aaa924cba831b89328Automatic Updater1887. [bug] The cache could delete expired records too fast for
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews clients with a virtual time in the past. [RT #14991]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1886. [bug] fctx_create() could return success even though it
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews failed. [RT #14993]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1885. [func] dig: report the number of extra bytes still left in
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews the packet after processing all the records.
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews levels. [RT #14962]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews1882. [func] Limit the number of recursive clients that can be
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews waiting for a single query (<qname,qtype,qclass>) to
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews resolve. New options clients-per-query and
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews max-clients-per-query.
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews1881. [func] Add a system test for named-checkconf. [RT #14931]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1880. [func] The lame cache is now done on a <qname,qclass,qtype>
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews basis as some servers only appear to be lame for
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews certain query types. [RT #14916]
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews1878. [func] Detect duplicates of UDP queries we are recursing on
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews and drop them. New stats category "duplicate".
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1877. [bug] Fix unreasonably low quantum on call to
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews dns_rbt_destroy2(). Remove unnecessary unhash_node()
9c6a5d1f22f972232d7a9fd5c5fa64f10bacbdffAutomatic Updater call. [RT #14919]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1876. [func] Additional memory debugging support to track size
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews and mctx arguments. [RT #14814]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1875. [bug] process_dhtkey() was using the wrong memory context
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews to free some memory. [RT #14890]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1874. [port] sunos: portability fixes. [RT #14814]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1873. [port] win32: isc__errno2result() now reports its caller.
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1871. [placeholder]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1870. [func] Added framework for handling multiple EDNS versions.
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1869. [func] dig can now specify the EDNS version when making
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews a query. [RT #14873]
9fbbfb5757a1e3e86d7dea62c4e63ffc2303ca2bAutomatic Updater1868. [func] edns-udp-size can now be overridden on a per
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews server basis. [RT #14851]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1867. [bug] It was possible to trigger a INSIST in
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews dlv_validatezonekey(). [RT #14846]
1586d8cbac5d73031716561386f60758c6c332d5Mark Andrews1866. [bug] resolv.conf parse errors were being ignored by
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews bad addresses. [RT #14841]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1864. [bug] Don't try the alternative transfer source if you
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews got a answer / transfer with the main source
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews address. [RT #14802]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1863. [bug] rrset-order "fixed" error messages not complete.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1862. [func] Add additional zone data constancy checks.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews named-checkzone has extended checking of NS, MX and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein SRV record and the hosts they reference.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named has extended post zone load checks.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein New zone options: check-mx and integrity-check.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1861. [bug] dig could trigger a INSIST on certain malformed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein responses. [RT #14801]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews incorrectly set. [RT #14775]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1859. [func] Add support for CH A record. [RT #14695]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1858. [bug] The flush-zones-on-shutdown option wasn't being
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein parsed. [RT #14686]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1857. [bug] named could trigger a INSIST() if reconfigured /
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews reloaded too fast. [RT #14673]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
df6faef67126d1277b0f21defd41c54994bf6fcfMark Andrews1855. [bug] ixfr-from-differences was failing to detect changes
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of ttl due to dns_diff_subtract() was ignoring the ttl
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of records. [RT #14616]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1854. [bug] lwres also needs to know the print format for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (long long). [RT #13754]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1853. [bug] Rework how DLV interacts with proveunsecure().
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1852. [cleanup] Remove last vestiges of dnssec-signkey and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-makekeyset (removed from Makefile years ago).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1851. [doc] Doxygen comment markup. [RT #11398]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1849. [doc] All forms of the man pages (docbook, man, html) should
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein have consistent copyright dates.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1848. [bug] Improve SMF integration. [RT #13238]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1847. [bug] isc_ondestroy_init() is called too late in
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews dns_rbtdb_create()/dns_rbtdb64_create().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
df6faef67126d1277b0f21defd41c54994bf6fcfMark Andrews <bortzmeyer@nic.fr>.
df6faef67126d1277b0f21defd41c54994bf6fcfMark Andrews1845. [bug] Improve error reporting to distinguish between
df6faef67126d1277b0f21defd41c54994bf6fcfMark Andrews accept()/fcntl() and socket()/fcntl() errors.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for each 16 bit piece of the IPv6 address. The text
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein representation of a IPv6 address has been tightened
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when CFLAGS contains "-I /usr/local/include"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein resulting in old header files being used.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1842. [port] cmsg_len() could produce incorrect results on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein some platform. [RT #13744]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1841. [bug] "dig +nssearch" now makes a recursive query to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein find the list of nameservers to query. [RT #13694]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1840. [func] dnssec-signzone can now randomize signature end times
276e28f813ffef042d5a6e9f3373ef4e2ad37996Mark Andrews (dnssec-signzone -j jitter). [RT #13609]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1839. [bug] <isc/hash.h> was not being installed.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1838. [cleanup] Don't allow Linux capabilities to be inherited.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1837. [bug] Compile time option ISC_FACILITY was not effective
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater for 'named -u <user>'. [RT #13714]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1836. [cleanup] Silence compiler warnings in hash_test.c.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1834. [bug] Bad memset in rdata_test.c. [RT #13658]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1831. [doc] Update named-checkzone documentation. [RT#13604]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1829. [bug] win32: "pid-file none;" broken. [RT #13563]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1828. [bug] isc_rwlock_init() failed to properly cleanup if it
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater encountered a error. [RT #13549]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1827. [bug] host: update usage message for '-a'. [RT #37116]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater of memory error. [RT #13537]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1825. [bug] Missing UNLOCK() on out of memory error from in
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater rbtdb.c:subtractrdataset(). [RT #13519]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1824. [bug] Memory leak on dns_zone_setdbtype() failure.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1823. [bug] Wrong macro used to check for point to point interface.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1822. [bug] check-names test for RT was reversed. [RT #13382]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1821. [placeholder]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1820. [bug] Gracefully handle acl loops. [RT #13659]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1819. [bug] The validator needed to check both the algorithm and
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater digest types of the DS to determine if it could be
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater used to introduce a secure zone. [RT #13593]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1817. [func] Add support for additional zone file formats for
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater improving loading performance. The masterfile-format
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater option in named.conf can be used to specify a
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater non-default format. A separate command
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater named-compilezone was provided to generate zone files
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater in the new format. Additionally, the -I and -O options
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater for dnssec-signzone specify the input and output
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1815. [bug] nsupdate triggered a REQUIRE if the server was set
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater without also setting the zone and it encountered
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater a CNAME and was using TSIG. [RT #13086]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1814. [func] UNIX domain controls are now supported.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1813. [func] Restructured the data locking framework using
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater architecture dependent atomic operations (when
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater available), improving response performance on
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater multi-processor machines significantly.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater x86, x86_64, alpha, powerpc, and mips are currently
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1811. [func] Preserve the case of domain names in rdata during
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater zone transfers. [RT #13547]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1810. [bug] configure, lib/bind/configure make different default
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater decisions about whether to do a threaded build.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1809. [bug] "make distclean" failed for libbind if the platform
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater is not supported.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1808. [bug] zone.c:notify_zone() contained a race condition,
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater zone->db could change underneath it. [RT #13511]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1807. [bug] When forwarding (forward only) set the active domain
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater from the forward zone name. [RT #13526]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1806. [bug] The resolver returned the wrong result when a CNAME /
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater DNAME was encountered when fetching glue from a
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater secure namespace. [RT #13501]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1805. [bug] Pending status was not being cleared when DLV was
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater active. [RT #13501]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1804. [bug] Ensure that if we are queried for glue that it fits
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater in the additional section or TC is set to tell the
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater client to retry using TCP. [RT #10114]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1803. [bug] dnssec-signzone sometimes failed to remove old
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater RRSIGs. [RT #13483]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1802. [bug] Handle connection resets better. [RT #11280]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1801. [func] Report differences between hints and real NS rrset
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater and associated address records.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1800. [bug] Changes #1719 allowed a INSIST to be triggered.
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1799. [bug] 'rndc flushname' failed to flush negative cache
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater entries. [RT #13438]
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater1798. [func] The server syntax has been extended to support a
afb33f777af856f8c3382604a7a8ffdfe2b512c5Automatic Updater range of servers. [RT #11132]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1797. [func] named-checkconf now check acls to verify that they
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein only refer to existing acls. [RT #13101]
a53c45b2b8e778663ea51834272169dc946b6672Mark Andrews1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1795. [bug] "rndc dumpdb" was not fully documented. Minor
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein formating issues with "rndc dumpdb -all". [RT #13396]
00124ad0406365d39f4b2d1011ef6a76706e9df0Mark Andrews1794. [func] Named and named-checkzone can now both check for
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews non-terminal wildcard records.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1793. [func] Extend adjusting TTL warning messages. [RT #13378]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1792. [func] New zone option "notify-delay". Specify a minimum
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein delay between sets of NOTIFY messages.
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews1791. [bug] 'host -t a' still printed out AAAA and MX records.
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater allow parallel make to succeed.
89bc48260b64a8859ae717e9e5bae380e275fef4Mark Andrews1789. [bug] Prerequisite test for tkey and dnssec could fail
b3c2030de4cc02b8e881ca4e6f62b385d4b41b0fAutomatic Updater with "configure --with-libtool".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1788. [bug] libbind9.la/libbind9.so needs to link against
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1786. [port] AIX: libt_api needs to be taught to look for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein T_testlist in the main executable (--with-libtool).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1785. [bug] libbind9.la/libbind9.so needs to link against
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1784. [cleanup] "libtool -allow-undefined" is the default.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Leave hooks in configure to allow it to be set
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if needed in the future.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein source tree.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1782. [port] OSX: --with-libtool + --enable-libbind broke on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein __evOptMonoTime. [RT #13219]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1780. [bug] Update libtool to 1.5.10.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein IN6ADDR_LOOPBACK_INIT macros.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein IN6ADDR_LOOPBACK_INIT macros.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein IN6ADDR_LOOPBACK_INIT macros.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1774. [port] Aix: Silence compiler warnings / build failures.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1773. [bug] Fast retry on host / net unreachable. [RT #13153]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1772. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1771. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1770. [bug] named-checkconf failed to report missing a missing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file clause for rbt{64} master/hint zones. [RT#13009]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1769. [port] win32: change compiler flags /MTd ==> /MDd,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein /MT ==> /MD.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rdataset. [RT #12907]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein support for (struct in6_pktinfo) failed. [RT #13077]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1766. [bug] Update the master file timestamp on successful refresh
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as well as the journal's timestamp. [RT# 13062]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1765. [bug] configure --with-openssl=auto failed. [RT #12937]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1764. [bug] dns_zone_replacedb failed to emit a error message
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if there was no SOA record in the replacement db.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1763. [func] Perform sanity checks on NS records which refer to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'in zone' names. [RT #13002]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein even when it failed. [RT #12995]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1760. [bug] Host / net unreachable was not penalising rtt
00124ad0406365d39f4b2d1011ef6a76706e9df0Mark Andrews estimates. [RT #12970]
00124ad0406365d39f4b2d1011ef6a76706e9df0Mark Andrews1759. [bug] Named failed to startup if the OS supported IPv6
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater but had no IPv6 interfaces configured. [RT #12942]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1758. [func] Don't send notify messages to self. [RT #12933]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1757. [func] host now can turn on memory debugging flags with '-m'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1756. [func] named-checkconf now checks the logging configuration.
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater1755. [func] allow-update is now settable at the options / view
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews level. [RT #6636]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews1754. [bug] We weren't always attempting to query the parent
58d9e9169e7ab4355a0b0bfc13bc616bc5247dfeAutomatic Updater server for the DS records at the zone cut.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1753. [bug] Don't serve a slave zone which has no NS records.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews1752. [port] Move isc_app_start() to after ns_os_daemonise()
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews as some fork() implementations unblock the signals
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein that are blocked by isc_app_start(). [RT #12810]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1749. [bug] 'check-names response ignore;' failed to ignore.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1748. [func] dig now returns the byte count for axfr/ixfr.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1747. [bug] BIND 8 compatibility: named/named-checkconf failed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to parse "host-statistics-max" in named.conf.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1746. [func] Make public the function to read a key file,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dst_key_read_public(). [RT #12450]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1745. [bug] Dig/host/nslookup accept replies from link locals
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein regardless of scope if no scope was specified when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein query was sent. [RT #12745]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1744. [bug] If tuple2msgname() failed to convert a tuple to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a name a REQUIRE could be triggered. [RT #12796]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1743. [bug] If isc_taskmgr_create() was not able to create the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein requested number of worker threads then destruction
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of the manager would trigger an INSIST() failure.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1742. [bug] Deleting all records at a node then adding a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein previously existing record, in a single UPDATE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein transaction, failed to leave / regenerate the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein associated RRSIG records. [RT #12788]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1741. [bug] Deleting all records at a node in a secure zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein using a update-policy grant failed. [RT #12787]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1740. [bug] Replace rbt's hash algorithm as it performed badly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with certain zones. [RT #12729]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein NOTE: a hash context now needs to be established
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein via isc_hash_create() if the application was not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein already doing this.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1739. [bug] dns_rbt_deletetree() could incorrectly return
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ISC_R_QUOTA. [RT #12695]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1738. [bug] Enable overrun checking by default. [RT #12695]
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews1737. [bug] named failed if more than 16 masters were specified.
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews1736. [bug] dst_key_fromnamedfile() could fail to read a
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews public key. [RT #12687]
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews1733. [bug] Return non-zero exit status on initial load failure.
dca44b90c96352111e0f1cdfdeccde1a13732161Mark Andrews1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1731. [port] darwin: relax version test in ifconfig.sh.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1730. [port] Determine the length type used by the socket API.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1729. [func] Improve check-names error messages.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1728. [doc] Update check-names documentation.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1727. [bug] named-checkzone: check-names support didn't match
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater documentation.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1726. [port] aix5: add support for aix5.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1725. [port] linux: update error message on interaction of threads,
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater capabilities and setuid support (named -u). [RT #12541]
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1724. [bug] Look for DNSKEY records with "dig +sigtrace".
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1722. [bug] Don't commit the journal on malformed ixfr streams.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1721. [bug] Error message from the journal processing were not
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater always identifying the relevant journal. [RT #12519]
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater negative response. [RT #12506]
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1719. [bug] named was not correctly caching a RFC 2308 Type 1
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater negative response. [RT #12506]
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater responses when looking for the zone / master server.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1717. [port] solaris: ifconfig.sh did not support Solaris 10.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater "ifconfig.sh down" didn't work for Solaris 9.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1716. [doc] named.conf(5) was being installed in the wrong
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater location. [RT# 12441]
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1715. [func] 'dig +trace' now randomly selects the next servers
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater to try. Report if there is a bad delegation.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1714. [bug] dig/host/nslookup were only trying the first
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater address when a nameserver was specified by name.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1713. [port] linux: extend capset failure message to say:
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater please ensure that the capset kernel module is
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater loaded. see insmod(8)
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
a1ad6695ed6f988406cf155aa26376f84f73bcb9Automatic Updater messages for the specified zone. [RT #9479]
44d0f0256fbdce130a18655023c3b06bacacbd61Automatic Updater1709. [port] solaris: add SMF support from Sun.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for conformance to the name space convention. Binary
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce backward compatibility to the old function name is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein provided. [RT #12376]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1707. [contrib] sdb/ldap updated to version 1.0-beta.
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater1706. [bug] 'rndc stop' failed to cause zones to be flushed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sometimes. [RT #12328]
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews1705. [func] Allow the journal's name to be changed via named.conf.
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews1704. [port] lwres needed a snprintf() implementation for
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews platforms without snprintf(). Add missing
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews "#include <isc/print.h>". [RT #12321]
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews1703. [bug] named would loop sending NOTIFY messages when it
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews failed to receive a response. [RT #12322]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1702. [bug] also-notify should not be applied to built in zones.
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews1701. [doc] A minimal named.conf man page.
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews1700. [func] nslookup is no longer to be treated as deprecated.
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews Remove "deprecated" warning message. Add man page.
dcb551033f0b33eb5c113169750a61084d8250a1Mark Andrews1699. [bug] dnssec-signzone can generate "not exact" errors
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when resigning. [RT #12281]
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews1698. [doc] Use reserved IPv6 documentation prefix.
6101b9f0d904a708e900a74abc16d1e0eda67264Mark Andrews1697. [bug] xxx-source{,-v6} was not effective when it
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater specified one of listening addresses and a
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater different port than the listening port. [RT #12257]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1696. [bug] dnssec-signzone failed to clean out nodes that
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater consisted of only NSEC and RRSIG records.
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater1695. [bug] DS records when forwarding require special handling.
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater1694. [bug] Report if the builtin views of "_default" / "_bind"
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater are defined in named.conf. [RT #12023]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1693. [bug] max-journal-size was not effective for master zones
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater with ixfr-from-differences set. [RT# 12024]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1691. [bug] sdb's attachversion was not complete. [RT #11990]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1690. [bug] Delay detaching view from the client until UPDATE
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater processing completes when shutting down. [RT #11714]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
7a7a44400d49122d4cc207b43922a7b9c5afe443Automatic Updater contained gratuitous semicolons. [RT #11707]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1688. [bug] LDFLAGS was not supported.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1687. [bug] Race condition in dispatch. [RT #10272]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1686. [bug] Named sent a extraneous NOTIFY when it received a
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater redundant UPDATE request. [RT #11943]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1685. [bug] Change #1679 loop tests weren't quite right.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1684. [func] ixfr-from-differences now takes master and slave in
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater addition to yes and no at the options and view levels.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1683. [bug] dig +sigchase could leak memory. [RT #11445]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1682. [port] Update configure test for (long long) printf format.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1681. [bug] Only set SO_REUSEADDR when a port is specified in
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater isc_socket_bind(). [RT #11742]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1680. [func] rndc: the source address can now be specified.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1679. [bug] When there was a single nameserver with multiple
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater addresses for a zone not all addresses were tried.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1676. [func] New option "allow-query-cache". This lets
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater allow-query be used to specify the default zone
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater access level rather than having to have every
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater zone override the global value. allow-query-cache
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater can be set at both the options and view levels.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater If allow-query-cache is not set allow-query applies.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1675. [bug] named would sometimes add extra NSEC records to
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater the authority section.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1674. [port] linux: increase buffer size used to scan
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1673. [port] linux: issue a error messages if IPv6 interface
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1672. [cleanup] Tests which only function in a threaded build
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater now return R:THREADONLY (rather than R:UNTESTED)
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater in a non-threaded build.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1671. [contrib] queryperf: add NAPTR to the list of known types.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1670. [func] Log UPDATE requests to slave zones without an acl as
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater "disabled" at debug level 3. [RT# 11657]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1669. [placeholder]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1667. [port] linux: not all versions have IF_NAMESIZE.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1666. [bug] The optional port on hostnames in dual-stack-servers
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater was being ignored.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1665. [func] rndc now allows addresses to be set in the
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater server clauses.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1663. [func] Look for OpenSSL by default.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1662. [bug] Change #1658 failed to change one use of 'type'
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1661. [bug] Restore dns_name_concatenate() call in
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater adb.c:set_target(). [RT #11582]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1660. [bug] win32: connection_reset_fix() was being called
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater unconditionally. [RT #11595]
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1659. [cleanup] Cleanup some messages that were referring to KEY vs
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater DNSKEY, NXT vs NSEC and SIG vs RRSIG.
8e821eea5f57ac47a94305aa7ab0c3570d92a311Automatic Updater1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
8e821eea5f57ac47a94305aa7ab0c3570d92a311Automatic Updater and DH. Tighten which options apply to KEY and
8e821eea5f57ac47a94305aa7ab0c3570d92a311Automatic Updater DNSKEY records.
8e821eea5f57ac47a94305aa7ab0c3570d92a311Automatic Updater1657. [doc] ARM: document query log output.
8e821eea5f57ac47a94305aa7ab0c3570d92a311Automatic Updater1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
8e821eea5f57ac47a94305aa7ab0c3570d92a311Automatic Updater DNSKEY and RRSIG. [RT #11542]
8e821eea5f57ac47a94305aa7ab0c3570d92a311Automatic Updater1655. [bug] Logging multiple versions w/o a size was broken.
8e821eea5f57ac47a94305aa7ab0c3570d92a311Automatic Updater1654. [bug] isc_result_totext() contained array bounds read
102ccdd2c0ade46f2d668c4b4d3fbbe668a44994Automatic Updater1653. [func] Add key type checking to dst_key_fromfilename(),
102ccdd2c0ade46f2d668c4b4d3fbbe668a44994Automatic Updater DST_TYPE_KEY should be used to read TSIG, TKEY and
102ccdd2c0ade46f2d668c4b4d3fbbe668a44994Automatic Updater1652. [bug] TKEY still uses KEY.
2895f101b5585a19015ac2c2c1e1812ac467fa12Automatic Updater1651. [bug] dig: process multiple dash options.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1650. [bug] dig, nslookup: flush standard out after each command.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1649. [bug] Silence "unexpected non-minimal diff" message.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1648. [func] Update dnssec-lookaside named.conf syntax to support
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews multiple dnssec-lookaside namespaces (not yet
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews implemented).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1647. [bug] It was possible trigger a INSIST when chasing a DS
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein record that required walking back over a empty node.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1646. [bug] win32: logging file versions didn't work with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein non-UNC filenames. [RT#11486]
d893c6248414d34d434a63216eaa5bd1fbec4ca4Automatic Updater1645. [bug] named could trigger a REQUIRE failure if multiple
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein masters with keys are specified.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1644. [bug] Update the journal modification time after a
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews successful refresh query. [RT #11436]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1643. [bug] dns_db_closeversion() could leak memory / node
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein references. [RT #11163]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1642. [port] Support OpenSSL implementations which don't have
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein DSA support. [RT #11360]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1641. [bug] Update the check-names description in ARM. [RT #11389]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein incorrectly closing the socket. [RT #11291]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1639. [func] Initial dlv system test.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1638. [bug] "ixfr-from-differences" could generate a REQUIRE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failure if the journal open failed. [RT #11347]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1637. [bug] Node reference leak on error in addnoqname().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a error had occurred. The database version no longer
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein matched the version of the database that was dumped.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1635. [bug] Memory leak on error in query_addds().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1634. [bug] named didn't supply a useful error message when it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein detected duplicate views. [RT #11208]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1633. [bug] named should return NOTIMP to update requests to a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein slaves without a allow-update-forwarding acl specified.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1632. [bug] nsupdate failed to send prerequisite only UPDATE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein messages. [RT #11288]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1631. [bug] dns_journal_compact() could sometimes corrupt the
d01e14dc0bfc700a8d72e9676fc8aa66c237151fAutomatic Updater journal. [RT #11124]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1630. [contrib] queryperf: add support for IPv6 transport.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1629. [func] dig now supports IPv6 scoped addresses with the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein extended format in the local-server part. [RT #8753]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1627. [bug] win32: sockets were not being closed when the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein last external reference was removed. [RT# 11179]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1626. [bug] --enable-getifaddrs was broken. [RT#11259]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1625. [bug] named failed to load/transfer RFC2535 signed zones
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein which contained CNAMES. [RT# 11237]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1623. [bug] A serial number of zero was being displayed in the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "sending notifies" log message when also-notify was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein used. [RT #11177]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein available, and suppress wildcard binding if not.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1621. [bug] match-destinations did not work for IPv6 TCP queries.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1620. [func] When loading a zone report if it is signed. [RT #11149]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1618. [bug] Fencepost errors in dns_name_ishostname() and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_name_ismailbox() could trigger a INSIST().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1617. [port] win32: VC++ 6.0 support.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1616. [compat] Ensure that named's version is visible in the core
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dump. [RT #11127]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein it is defined.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson1614. [port] win32: silence resource limit messages. [RT# 11101]
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson1613. [bug] Builds would fail on machines w/o a if_nametoindex().
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson1612. [bug] check-names at the option/view level could trigger
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater an INSIST. [RT# 11116]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce1611. [bug] solaris: IPv6 interface scanning failed to cope with
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce no active IPv6 interfaces.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce1610. [bug] On dual stack machines "dig -b" failed to set the
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce address type to be looked up with "@server".
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater1609. [func] dig now has support to chase DNSSEC signature chains.
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson DNSSEC validation code in dig coded by Olivier Courtay
727f5b8846457a33d06f515a10a7e1aa849ddf18Andreas Gustafsson (olivier.courtay@irisa.fr) for the IDsA project
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater1608. [func] dig and host now accept -4/-6 to select IP transport
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater to use when making queries.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce1607. [bug] dig, host and nslookup were still using random()
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce to generate query ids. [RT# 11013]
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce1606. [bug] DLV insecurity proof was failing.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1604. [bug] A xfrout_ctx_create() failure would result in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein xfrout_ctx_destroy() being called with a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein partially initialized structure.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1603. [bug] nsupdate: set interactive based on isatty().
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1602. [bug] Logging to a file failed unless a size was specified.
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater1601. [bug] Silence spurious warning 'both "recursion no;" and
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater "allow-recursion" active' warning from view "_bind".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1600. [bug] Duplicate zone pre-load checks were not case
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews insensitive.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1599. [bug] Fix memory leak on error path when checking named.conf.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1598. [func] Specify that certain parts of the namespace must
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater be secure (dnssec-must-be-secure).
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1597. [func] Allow notify-source and query-source to be specified
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews on a per server basis similar to transfer-source.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1596. [func] Accept 'notify-source' style syntax for query-source.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1595. [func] New notify type 'master-only'. Enable notify for
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews master zones only.
d71e2e0c61df16ff37c9934c371a4a60c08974f7Mark Andrews1594. [bug] 'rndc dumpdb' could prevent named from answering
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews queries while the dump was in progress. [RT #10565]
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1593. [bug] rndc should return "unknown command" to unknown
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews commands. [RT# 10642]
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1592. [bug] configure_view() could leak a dispatch. [RT# 10675]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1591. [bug] libbind: updated to BIND 8.4.5.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1590. [port] netbsd: update thread support.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1589. [func] DNSSEC lookaside validation.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1587. [bug] dns_message_settsigkey() failed to clear existing key.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1586. [func] "check-names" is now implemented.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1585. [placeholder]
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1584. [bug] "make test" failed with a read only source tree.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1583. [bug] Records add via UPDATE failed to get the correct trust
083a5588a3488b6335ee7bafa505d00644c7c58dMark Andrews level. [RT #10452]
089c63b69cdf6803aa8901aae3f2fbae58969511Automatic Updater1582. [bug] rrset-order failed to work on RRsets with more
6bf6622b7b9053dc52527478473b572f042c4b5bMark Andrews than 32 elements. [RT #10381]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater1581. [func] Disable DNSSEC support by default. To enable
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews DNSSEC specify "dnssec-enable yes;" in named.conf.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1580. [bug] Zone destruction on final detach takes a long time.
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater1579. [bug] Multiple task managers could not be created.
7326ba2f542b89196323867a1457f596f99e315dMark Andrews1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein workaround code. [RT #10331]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater1576. [bug] Race condition in dns_dispatch_addresponse().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1574. [bug] Don't attempt to open the controls socket(s) when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein running tests. [RT #9091]
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews1573. [port] linux: update to libtool 1.5.2 so that
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews "make install DESTDIR=/xx" works with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "configure --with-libtool". [RT #9941]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1572. [bug] nsupdate: sign the soa query to find the enclosing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone if the server is specified. [RT #10148]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater1571. [bug] rbt:hash_node() could fail leaving the hash table
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in an inconsistent state. [RT #10208]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1570. [bug] nsupdate failed to handle classes other than IN.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein New keyword 'class' which sets the default class.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1569. [func] nsupdate new command 'answer' which displays the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein complete answer message to the last update.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1568. [bug] nsupdate now reports that the update failed in
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews interactive mode. [RT# 10236]
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1566. [port] Support for the cmsg framework on Solaris and HP/UX.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews This also solved the problem that match-destinations
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews for IPv6 addresses did not work on these systems.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1565. [bug] CD flag should be copied to outgoing queries unless
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews the query is under a secure entry point in which case
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews CD should be set.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews1564. [func] Attempt to provide a fallback entropy source to be
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews used if named is running chrooted and named is unable
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews to open entropy source within the chroot area.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1563. [bug] Gracefully fail when unable to obtain neither an IPv4
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews nor an IPv6 dispatch. [RT #10230]
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater1562. [bug] isc_socket_create() and isc_socket_accept() could
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater leak memory under error conditions. [RT #10230]
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1561. [bug] It was possible to release the same name twice if
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews named ran out of memory. [RT #10197]
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater and EAI_NONAME to the same value.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1559. [port] named should ignore SIGFSZ.
ac93437301f55ed69bf85883a497a75598c628f9Automatic Updater1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews child zones for which we don't have a supported
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews algorithm. Such child zones are treated as unsigned.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1557. [func] Implement missing DNSSEC tests for
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews * NOQNAME proof with wildcard answers.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews * NOWILDARD proof with NXDOMAIN.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews Cache and return NOQNAME with wildcard answers.
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1556. [bug] nsupdate now treats all names as fully qualified.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1555. [func] 'rrset-order cyclic' no longer has a random starting
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater point per query. [RT #7572]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1554. [bug] dig, host, nslookup failed when no nameservers
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater were specified in /etc/resolv.conf. [RT #8232]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1553. [bug] The windows socket code could stop accepting
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews connections. [RT#10115]
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1552. [bug] Accept NOTIFY requests from mapped masters if
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews matched-mapped is set. [RT #10049]
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1551. [port] Open "/dev/null" before calling chroot().
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1550. [port] Call tzset(), if available, before calling chroot().
885c1096e0c296b0188f01ca7511df1f70a6cddaMark Andrews1549. [func] named-checkzone can now write out the zone contents
9090a36b61a90746738f66bce09ceaf8d8491d7eAndreas Gustafsson in a easily parsable format (-D and -o).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1548. [bug] When parsing APL records it was possible to silently
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein accept out of range ADDRESSFAMILY values. [RT# 9979]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1547. [bug] Named wasted memory recording duplicate lame zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein entries. [RT #9341]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1546. [bug] We were rejecting valid secure CNAME to negative
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1545. [bug] It was possible to leak memory if named was unable to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein bind to the specified transfer source and TSIG was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein being used. [RT #10120]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1544. [bug] Named would logged a single entry to a file despite it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein being over the specified size limit.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1543. [bug] Logging using "versions unlimited" did not work.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1542. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1541. [func] NSEC now uses new bitmap format.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1539. [bug] Open UDP sockets for notify-source and transfer-source
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein that use reserved ports at startup. [RT #9475]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1538. [placeholder] rt9997
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1537. [func] New option "querylog". If set specify whether query
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein logging is to be enabled or disabled at startup.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1536. [bug] Windows socket code failed to log a error description
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when returning ISC_R_UNEXPECTED. [RT #9998]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1535. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1534. [bug] Race condition when priming cache. [RT# 9940]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1533. [func] Warn if both "recursion no;" and "allow-recursion"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are active. [RT# 4389]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1532. [port] netbsd: the configure test for <sys/sysctl.h>
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1531. [port] AIX more libtool fixes.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1530. [bug] It was possible to trigger a INSIST() failure if a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein slave master file was removed at just the correct
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein moment. [RT #9462]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1529. [bug] "notify explicit;" failed to log that NOTIFY messages
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were being sent for the zone. [RT# 9442]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1528. [cleanup] Simplify some dns_name_ functions based on the
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews deprecation of bitstring labels.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1527. [cleanup] Reduce the number of gettimeofday() calls without
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein losing necessary timer granularity.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1526. [func] Implemented "additional section caching (or acache)",
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews an internal cache framework for additional section
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein content to improve response performance. Several
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configuration options were provided to control the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1525. [bug] dns_cache_create() could trigger a REQUIRE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failure in isc_mem_put() during error cleanup.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1524. [port] AIX needs to be able to resolve all symbols when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein creating shared libraries (--with-libtool).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1523. [bug] Fix race condition in rbtdb. [RT# 9189]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1522. [bug] dns_db_findnode() relax the requirements on 'name'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1521. [bug] dns_view_createresolver() failed to check the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein result from isc_mem_create(). [RT# 9294]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1520. [protocol] Add SSHFP (SSH Finger Print) type.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein length of the new bitmap.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein contained a off-by-one error when working out the
c60793c77f6b6b8b66ad57c73cd7eb67e8d7ff6fAndreas Gustafsson number of octets in the bitmap.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1517. [port] Support for IPv6 interface scanning on HP/UX and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein TrueUNIX 5.1.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1515. [func] Allow transfer source to be set in a server statement.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews1514. [bug] named: isc_hash_destroy() was being called too early.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1513. [doc] Add "US" to root-delegation-only exclude list.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1512. [bug] Extend the delegation-only logging to return query
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews type, class and responding nameserver.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1511. [bug] delegation-only was generating false positives
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews on negative answers from sub-zones.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1510. [func] New view option "root-delegation-only". Apply
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein delegation-only check to all TLDs and root.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Note there are some TLDs that are NOT delegation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein only (e.g. DE, LV, US and MUSEUM) these can be excluded
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from the checks by using exclude.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein root-delegation-only exclude {
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "DE"; "LV"; "US"; "MUSEUM";
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1509. [bug] Hint zones should accept delegation-only. Forward
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone should not accept delegation-only.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1508. [bug] Don't apply delegation-only checks to answers from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1507. [bug] Handle BIND 8 style returns to NS queries to parents
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when making delegation-only checks.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1506. [bug] Wrong return type for dns_view_isdelegationonly().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1504. [func] New zone type "delegation-only".
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1503. [port] win32: install libeay32.dll outside of system32.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1501. [func] Allow TCP queue length to be specified via
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater named.conf, tcp-listen-queue.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1500. [bug] host failed to lookup MX records. Also look up
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1499. [bug] isc_random need to be seeded better if arc4random()
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1498. [port] bsdos: 5.x support.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1497. [placeholder]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1496. [port] test for pthread_attr_setstacksize().
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1495. [cleanup] Replace hash functions with universal hash.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1494. [security] Turn on RSA BLINDING as a precaution.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1493. [placeholder]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1492. [cleanup] Preserve rwlock quota context when upgrading /
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater downgrading. [RT #5599]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater lines. [RT #6206]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1490. [bug] Accept reading state as well as working state in
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater ns_client_next(). [RT #6813]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1489. [compat] Treat 'allow-update' on slave zones as a warning.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1488. [bug] Don't override trust levels for glue addresses.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1487. [bug] A REQUIRE() failure could be triggered if a zone was
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater queued for transfer and the zone was then removed.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1486. [bug] isc_print_snprintf() '%%' consumed one too many format
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater characters. [RT# 8230]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1485. [bug] gen failed to handle high type values. [RT #6225]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1484. [bug] The number of records reported after a AXFR was wrong.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1483. [bug] dig axfr failed if the message id in the answer failed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to match that in the request. Only the id in the first
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein message is required to match. [RT #8138]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1482. [bug] named could fail to start if the kernel supports
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein IPv6 but no interfaces are configured. Similarly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for IPv4. [RT #6229]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1481. [bug] Refresh and stub queries failed to use masters keys
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if specified. [RT #7391]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1480. [bug] Provide replay protection for rndc commands. Full
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein replay protection requires both rndc and named to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be updated. Partial replay protection (limited
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein exposure after restart) is provided if just named
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1479. [bug] cfg_create_tuple() failed to handle out of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein memory cleanup. parse_list() would leak memory
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews on syntax errors.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1478. [port] ifconfig.sh didn't account for other virtual
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein interfaces. It now takes a optional argument
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to specify the first interface number. [RT #3907]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1477. [bug] memory leak using stub zones and TSIG.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1476. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1475. [port] Probe for old sprintf().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1474. [port] Provide strtoul() and memmove() for platforms
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein without them.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1473. [bug] create_map() and create_string() failed to handle out
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of memory cleanup. [RT #6813]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1471. [bug] libbind: updated to BIND 8.4.0.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1470. [bug] Incorrect length passed to snprintf. [RT #5966]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1469. [func] Log end of outgoing zone transfer at same level
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as the start of transfer is logged. [RT #4441]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1468. [func] Internal zones are no longer counted for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'rndc status'. [RT #4706]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1467. [func] $GENERATES now supports optional class and ttl.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1466. [bug] lwresd configuration errors resulted in memory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and lock leaks. [RT #5228]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failed to check that trailing bits were zero allowing
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews some invalid base64 strings to be accepted. [RT #5397]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater1464. [bug] Preserve "out of zone" data for outgoing zone
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater transfers. [RT #5192]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater NXT bit maps. [RT #5577]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1462. [bug] parse_sizeval() failed to check the token type.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater1460. [bug] inet_pton() failed to reject certain malformed
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater IPv6 literals.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1459. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1458. [cleanup] sprintf() -> snprintf().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1457. [port] Provide strlcat() and strlcpy() for platforms without
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1455. [bug] <netaddr> missing from server grammar in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1454. [port] Use getifaddrs() if available for interface scanning.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --disable-getifaddrs to override. Glibc currently
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein has a getifaddrs() that does not support IPv6.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Use --enable-getifaddrs=glibc to force the use of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein this version under linux machines.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1452. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1451. [bug] rndc-confgen didn't exit with a error code for all
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews failures. [RT #5209]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1450. [bug] Fetching expired glue failed under certain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein circumstances. [RT #5124]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1449. [bug] query_addbestns() didn't handle running out of memory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1448. [bug] Handle empty wildcards labels.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1447. [bug] We were casting (unsigned int) to and from (void *).
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews rdataset->private4 is now rdataset->privateuint4
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to reflect a type change.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1446. [func] Implemented undocumented alternate transfer sources
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from BIND 8. See use-alt-transfer-source,
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews alt-transfer-source and alt-transfer-source-v6.
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews SECURITY: use-alt-transfer-source is ENABLED unless
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews you are using views. This may cause a security risk
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews resulting in accidental disclosure of wrong zone
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews content if the master supplying different source
68b30890ebd441a6a1ae3fdf71744d07d02cd030Mark Andrews content based on IP address. If you are not certain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ISC recommends setting use-alt-transfer-source no;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein been replaced with DNS_ADBFIND_STARTATZONE which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein causes the search to start using the closest zone.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1444. [func] dns_view_findzonecut2() allows you to specify if the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cache should be searched for zone cuts.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1443. [func] Masters lists can now be specified and referenced
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in zone masters clauses and other masters lists.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1442. [func] New functions for manipulating port lists:
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_portlist_create(), dns_portlist_add(),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_portlist_remove(), dns_portlist_match(),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_portlist_attach() and dns_portlist_detach().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1441. [func] It is now possible to tell dig to bind to a specific
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein source port.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1440. [func] It is now possible to tell named to avoid using
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein certain source ports (avoid-v4-udp-ports,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein avoid-v6-udp-ports).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1439. [bug] Named could return NOERROR with certain NOTIFY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failures. Return NOTAUTH if the NOTIFY zone is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not being served.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1438. [func] Log TSIG (if any) when logging NOTIFY requests.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1437. [bug] Leave space for stdio to work in. [RT #5033]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1436. [func] dns_zonemgr_resumexfrs() can be used to restart
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein stalled transfers.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1435. [bug] zmgr_resume_xfrs() was being called read locked
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rather than write locked. zmgr_resume_xfrs()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was not being called if the zone was being
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1434. [bug] "rndc reconfig" failed to initiate the initial
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone transfer of new slave zones.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1433. [bug] named could trigger a REQUIRE failure if it could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not get a file descriptor when attempting to write
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a master file. [RT #4347]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1432. [func] The advertised EDNS UDP buffer size can now be set
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater via named.conf (edns-udp-size).
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews1431. [bug] isc_print_snprintf() "%s" with precision could walk off
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews end of argument. [RT #5191]
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews1430. [port] linux: IPv6 interface scanning support.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1429. [bug] Prevent the cache getting locked to old servers.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1428. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1427. [bug] Race condition in adb with threaded build.
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews1426. [placeholder]
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews1425. [port] linux/libbind: define __USE_MISC when testing *_r()
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews function prototypes in netdb.h. [RT #4921]
3a3705ef7747327df182bf8d009333d2472253d5Mark Andrews1424. [bug] EDNS version not being correctly printed.
a057e8e33baa5fa369be28a9680585200ce3ff73Mark Andrews1423. [contrib] queryperf: added A6 and SRV.
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews1422. [func] Log name/type/class when denying a query. [RT #4663]
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews1421. [func] Differentiate updates that don't succeed due to
3b4098640dd85040270f39b9a5ee5e22de99d3d6Mark Andrews prerequisites (unsuccessful) vs other reasons
083a5588a3488b6335ee7bafa505d00644c7c58dMark Andrews1420. [port] solaris: work around gcc optimizer bug.
083a5588a3488b6335ee7bafa505d00644c7c58dMark Andrews1419. [port] openbsd: use /dev/arandom. [RT #4950]
089c63b69cdf6803aa8901aae3f2fbae58969511Automatic Updater1418. [bug] 'rndc reconfig' did not cause new slaves to load.
8de0d8a6905e397ed0a26054815420685f9b435eAutomatic Updater1417. [func] ID.SERVER/CHAOS is now a built in zone.
089c63b69cdf6803aa8901aae3f2fbae58969511Automatic Updater See "server-id" for how to configure.
6bf6622b7b9053dc52527478473b572f042c4b5bMark Andrews1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
6bf6622b7b9053dc52527478473b572f042c4b5bMark Andrews1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
6bf6622b7b9053dc52527478473b572f042c4b5bMark Andrews from SOA MINIMUM.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1414. [func] Support for KSK flag.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1413. [func] Explicitly request the (re-)generation of DS records
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from keysets (dnssec-signzone -g).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1412. [func] You can now specify servers to be tried if a nameserver
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein has IPv6 address and you only support IPv4 or the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reverse. See dual-stack-servers.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1410. [func] Handle records that live in the parent zone, e.g. DS.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1408. [bug] "make distclean" was not complete. [RT #4700]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1407. [bug] lfsr incorrectly implements the shift register.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1406. [bug] dispatch initializes one of the LFSR's with a incorrect
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein polynomial. [RT #4617]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1405. [func] Use arc4random() if available.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dnssec-signkey now report their version in the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein usage message.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater1402. [cleanup] A6 has been moved to experimental and is no longer
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fully supported.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater1401. [bug] adb wasn't clearing state when the timer expired.
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater1400. [bug] Block the addition of wildcard NS records by IXFR
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater or UPDATE. [RT #3502]
38760f5b074d2974a56479fa8b3aeb4b89bf36c8Automatic Updater1399. [bug] Use serial number arithmetic when testing SIG
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein timestamps. [RT #4268]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1398. [doc] ARM: notify-also should have been also-notify.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1396. [func] dnssec-signzone: adjust the default signing time by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 1 hour to allow for clock skew.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein have a working implementation. [RT #4079]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1394. [func] It is now possible to check if a particular element is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in a acl. Remove duplicate entries from the localnets
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is not available in the kernel to prevent accidently
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein listening on IPv4 interfaces.
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews1392. [bug] named-checkzone: update usage.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1391. [func] Add support for IPv6 scoped addresses in named.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1390. [func] host now supports ixfr.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1389. [bug] named could fail to rotate long log files. [RT #3666]
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews defining HAVE_IFLIST_SYSCTL. [RT #3770]
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews1387. [bug] named could crash due to an access to invalid memory
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews space (which caused an assertion failure) in
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews incremental cleaning. [RT #3588]
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews1386. [bug] named-checkzone -z stopped on errors in a zone.
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater1385. [bug] Setting serial-query-rate to 10 would trigger a
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater REQUIRE failure.
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater1384. [bug] host was incompatible with BIND 8 in its exit code and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in the output with the -l option. [RT #3536]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1383. [func] Track the serial number in a IXFR response and log if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a mismatch occurs. This is a more specific error than
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "not exact". [RT #3445]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1382. [bug] make install failed with --enable-libbind. [RT #3656]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1381. [bug] named failed to correctly process answers that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein contained DNAME records where the resulting CNAME
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein resulted in a negative answer.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1380. [func] 'rndc recursing' dump recursing queries to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'recursing-file = "named.recursing";'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1379. [func] 'rndc status' now reports tcp and recursion quota
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1377. [func] dns_zone_load{new}() now reports if the zone was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein loaded, queued for loading to up to date.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1376. [func] New function dns_zone_logc() to log to specified
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews1374. [func] dns_adb_dump() now logs the lame zones associated
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews with each server.
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews1373. [bug] Recovery from expired glue failed under certain
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews circumstances.
7526edc7677371c366232de5f39a678b7dcda747Mark Andrews1372. [bug] named crashes with an assertion failure on exit when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sharing the same port for listening and querying, and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein changing listening addresses several times. [RT# 3509]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1371. [bug] notify-source-v6, transfer-source-v6 and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein query-source-v6 with explicit addresses and using the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein same ports as named was listening on could interfere
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews with named's ability to answer queries sent to those
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1370. [bug] dig '+[no]recurse' was incorrectly documented.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1369. [bug] Adding an NS record as the lexicographically last
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein record in a secure zone didn't work.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1368. [func] remove support for bitstring labels.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1367. [func] Use response times to select forwarders.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1365. [func] "localhost" and "localnets" acls now include IPv6
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater addresses / prefixes.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1364. [func] Log file name when unable to open memory statistics
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater and dump database files. [RT# 3437]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1363. [func] Listen-on-v6 now supports specific addresses.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1362. [bug] remove IFF_RUNNING test when scanning interfaces.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1361. [func] log the reason for rejecting a server when resolving
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1360. [bug] --enable-libbind would fail when not built in the
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater source tree for certain OS's.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1359. [security] Support patches OpenSSL libraries.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater http://www.cert.org/advisories/CA-2002-23.html
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1358. [bug] It was possible to trigger a INSIST when debugging
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater large dynamic updates. [RT #3390]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1357. [bug] nsupdate was extremely wasteful of memory.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1356. [tuning] Reduce the number of events / quantum for zone tasks.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1354. [doc] lwres man pages had illegal nroff.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1353. [contrib] sdb/ldap to version 0.9.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1352. [bug] dig, host, nslookup when falling back to TCP use the
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater current search entry (if any). [RT #3374]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1351. [bug] lwres_getipnodebyname() returned the wrong name
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1350. [bug] dns_name_fromtext() failed to handle too many labels
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater http://www.cert.org/advisories/CA-2002-23.html
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1348. [port] win32: Rewrote code to use I/O Completion Ports
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater in socket.c and eliminating a host of socket
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater errors. Performance is enhanced.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1347. [placeholder]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1346. [placeholder]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1345. [port] Use a explicit -Wformat with gcc. Not all versions
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater include it in -Wall.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1344. [func] Log if the serial number on the master has gone
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater If you have multiple machines specified in the masters
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater clause you may want to set 'multi-master yes;' to
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater suppress this warning.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1343. [func] Log successful notifies received (info). Adjust log
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater level for failed notifies to notice.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1342. [func] Log remote address with TCP dispatch failures.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater1341. [func] Allow a rate limiter to be stalled.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1340. [bug] Delay and spread out the startup refresh load.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lookups. Bit string lookups are no longer attempted.
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1338. [placeholder]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1337. [placeholder]
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1336. [func] Nibble lookups under IP6.ARPA are now supported by
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater dns_byaddr_create(). dns_byaddr_createptrname() is
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater deprecated, use dns_byaddr_createptrname2() instead.
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1335. [bug] When performing a nonexistence proof, the validator
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater should discard parent NXTs from higher in the DNS.
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1334. [bug] When signing/verifying rdatasets, duplicate rdatas
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater need to be suppressed.
aeb7938001b22e811a910e1b36cdf452f9193865Automatic Updater1333. [contrib] queryperf now reports a summary of returned
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rcodes (-c), rcodes are printed in mnemonic form (-v).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1332. [func] Report the current serial with periodic commits when
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews rolling forward the journal.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1331. [func] Generate DNSSEC wildcard proofs.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1330. [bug] When processing events (non-threaded) only allow
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews the task one chance to use to use its quantum.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1329. [func] named-checkzone will now check if nameservers that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein appear to be IP addresses. Available modes "fail",
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "warn" (default) and "ignore" the results of the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1328. [bug] The validator could incorrectly verify an invalid
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein negative proof.
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews1327. [bug] The validator would incorrectly mark data as insecure
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when seeing a bogus signature before a correct
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1326. [bug] DNAME/CNAME signatures were not being cached when
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews validation was not being performed. [RT #3284]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1325. [bug] If the tcpquota was exhausted it was possible to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to trigger a INSIST() failure.
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews1324. [port] darwin: ifconfig.sh now supports darwin.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1322. [bug] dnssec-signzone usage message was misleading.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein would incorrectly duplicate its output and sign it.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1320. [doc] query-source-v6 was missing from options section.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1319. [func] libbind: log attempts to exploit #1318.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1318. [bug] libbind: Remote buffer overrun.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater1316. [bug] libbind: gethostans() could get out of sync parsing
ccc383f3a74bdf3559650c630bbca24b11d8f8aeAutomatic Updater the response if there was a very long CNAME chain.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1315. [bug] Options should apply to the internal _bind view.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1314. [port] Handle ECONNRESET from sendmsg() [unix].
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1313. [func] Query log now says if the query was signed (S) or
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews if EDNS was used (E).
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1312. [func] Log TSIG key used w/ outgoing zone transfers.
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1310. [bug] 'rndc stop' failed to cause zones to be flushed
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater sometimes. [RT #3157]
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1309. [func] Log that a zone transfer was covered by a TSIG.
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater1308. [func] DS (delegation signer) support.
b7ce89b8ca18904810265cc0074d7d517c9a5c5cAutomatic Updater1307. [bug] nsupdate: allow white space base64 key data.
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1306. [bug] Badly encoded LOC record when the size, horizontal
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater precision or vertical precision was 0.1m.
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1305. [bug] Document that internal zones are included in the
3ce014e9afe4abc756f9aee363c8f4bfcded9b04Automatic Updater rndc status results.
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater1304. [func] New function: dns_zone_name().
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater1302. [func] Extended rndc dumpdb to support dumping of zones and
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater view selection: 'dumpdb [-all|-zones|-cache] [view]'.
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater1301. [func] New category 'update-security'.
3acf5eb97cebc2ba868e6ac4a4e01e6d1be0c892Automatic Updater1300. [port] Compaq Trucluster support.
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1299. [bug] Set AI_ADDRCONFIG when looking up addresses
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater via getaddrinfo() (affects dig, host, nslookup, rndc
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater and nsupdate).
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater could be left with a trailing "\" after configure
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1297. [port] linux: make handling EINVAL from socket() no longer
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater conditional on #ifdef LINUX.
3b2c6af63e0367c6eabe0a21ca23841ca87cd22fAutomatic Updater1296. [bug] isc_log_closefilelogs() needed to lock the log
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews1295. [bug] isc_log_setdebuglevel() needed to lock the log
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews1294. [func] libbind: no longer attempts bit string labels for
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews IPv6 reverse resolution. Try IP6.ARPA then IP6.INT
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews for nibble style resolution.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
b05106c7e68077d805893fbae006fae125494fd6Automatic Updater1292. [func] Enable IPv6 support when using ioctl style interface
b05106c7e68077d805893fbae006fae125494fd6Automatic Updater scanning and OS supports SIOCGLIFADDR using struct
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1291. [func] Enable IPv6 support when using sysctl style interface
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1290. [func] "dig axfr" now reports the number of messages
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as well as the number of records.
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews reflect written requirements.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a rdataset to a zone db in the rbtdb implementation of
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews addrdataset.
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1286. [bug] dns_name_downcase() enforce requirement that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein target != NULL or name->buffer != NULL.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1285. [func] lwres: probe the system to see what address families
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater are currently in use.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1284. [bug] The RTT estimate on unused servers was not aged.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1283. [func] Use "dataready" accept filter if available.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1282. [port] libbind: hpux 11.11 interface scanning.
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1281. [func] Log zone when unable to get private keys to update
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews zone. Log zone when NXT records are missing from
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews secure zone.
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1280. [bug] libbind: escape '(' and ')' when converting to
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews presentation form.
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1278. [func] dig: now supports +[no]cl +[no]ttlid.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1277. [func] You can now create your own customized printing
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater styles: dns_master_stylecreate() and
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater dns_master_styledestroy().
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1276. [bug] libbind: const pointer conflicts in res_debug.c.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1274. [bug] Memory leak in lwres_gnbarequest_parse().
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1273. [port] libbind: solaris: 64 bit binary compatibility.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1272. [contrib] Berkeley DB 4.0 sdb implementation from
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1271. [bug] "recursion available: {denied,approved}" was too
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1270. [bug] Check that system inet_pton() and inet_ntop() support
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1269. [port] Openserver: ifconfig.sh support.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1268. [port] Openserver: the value FD_SETSIZE depends on whether
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater <sys/param.h> is included or not. Be consistent.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1267. [func] isc_file_openunique() now creates file using mode
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater 0666 rather than 0600.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are not C++ compatible, use *_TYPE versions instead.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1264. [placeholder]
3cddb2c552ee6582e8db0849c28747f6b6ca57feAutomatic Updater1263. [bug] Reference after free error if dns_dispatchmgr_create()
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews support for compressed TSIG owner names.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1260. [func] libbind: res_update can now update IPv6 servers,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein new function res_findzonecut2().
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1258. [bug] libbind: res_nametotype() and res_nametoclass() were
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1257. [bug] Failure to write pid-file should not be fatal on
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews reload. [RT #2861]
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews1255. [bug] When verifying that an NXT proves nonexistence, check
acb72d5e2c83b597332e3eb0c7d59e1142f1adfdMark Andrews the rcode of the message and only do the matching NXT
a404eb87dc8f91fe81bedce8bb3957fc3c7684a5Mark Andrews check. That is, for NXDOMAIN responses, check that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the name is in the range between the NXT owner and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein next name, and for NOERROR NODATA responses, check
3daad56dbb60acbdd1e8f59a1cfbfb03d364dba8Automatic Updater that the type is not present in the NXT bitmap.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1254. [func] preferred-glue option from BIND 8.3.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1253. [bug] The dnssec system test failed to remove the correct
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1252. [bug] Dig, host and nslookup were not checking the address
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater the answer was coming from against the address it was
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater sent to. [RT# 2692]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1251. [port] win32: a make file contained absolute version specific
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1250. [func] Nsupdate will report the address the update was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1249. [bug] Missing masters clause was not handled gracefully.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1248. [bug] DESTDIR was not being propagated between makes.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1247. [bug] Don't reset the interface index for link/site local
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein addresses. [RT #2576]
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1246. [func] New functions isc_sockaddr_issitelocal(),
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews and isc_netaddr_islinklocal().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1244. [bug] Receiving a TCP message from a blackhole address would
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein prevent further messages being received over that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1243. [bug] It was possible to trigger a REQUIRE() in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_message_findtype(). [RT #2659]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1241. [bug] Drop received UDP messages with a zero source port
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews as these are invariably forged. [RT #2621]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1240. [bug] It was possible to leak zone references by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein specifying an incorrect zone to rndc.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1239. [bug] Under certain circumstances named could continue to
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater use a name after it had been freed triggering
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater INSIST() failures. [RT #2614]
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater1238. [bug] It is possible to lockup the server when shutting down
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater if notifies were being processed. [RT #2591]
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater1237. [bug] nslookup: "set q=type" failed.
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater NULL terminated text regions. [RT #2588]
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater1235. [func] Report 'out of memory' errors from openssl.
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater1234. [bug] contrib/sdb: 'zonetodb' failed to call
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater dns_result_register(). DNS_R_SEENINCLUDE should not
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater1233. [bug] The flags field of a KEY record can be expressed in
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater hex as well as decimal.
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
852ccdd42a71550c974111b49415204ffeca6573Automatic Updater1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1229. [bug] named would crash if it received a TSIG signed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein query as part of an AXFR response. [RT #2570]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews if a number was expected and some other token was
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews found. [RT#2532]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1226. [func] Use EDNS for zone refresh queries. [RT #2551]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1225. [func] dns_message_setopt() no longer requires that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_message_renderbegin() to have been called.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1224. [bug] 'rrset-order' and 'sortlist' should be additive
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not exclusive.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are supported.
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1222. [bug] Specifying 'port *' did not always result in a system
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews selected (non-reserved) port being used. [RT #2537]
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews compared case insensitively. [RT #2542]
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1220. [func] Support for APL rdata type.
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1219. [func] Named now reports the TSIG extended error code when
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews signature verification fails. [RT #1651]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1218. [bug] Named incorrectly returned SERVFAIL rather than
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1217. [func] Report locations of previous key definition when a
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews duplicate is detected.
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1216. [bug] Multiple server clauses for the same server were not
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews reported. [RT #2514]
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1214. [bug] Win32: isc_file_renameunique() could leave zero length
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews files behind.
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1213. [func] Report view associated with client if it is not a
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews standard view (_default or _bind).
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1212. [port] libbind: 64k answer buffers were causing stack space
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews to be exceeded for certain OS. Use heap space instead.
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1211. [bug] dns_name_fromtext() incorrectly handled certain
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews valid octal bitlabels. [RT #2483]
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews compatible addresses. [RT #2461]
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1209. [bug] Dig, host, nslookup were not checking the message ids
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews on the responses. [RT #2454]
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews1208. [bug] dns_master_load*() failed to log a error message if
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews an error was detected when parsing the ownername of
7f723eabc5768f576470cd9cc82fd4af200013a1Mark Andrews a record. [RT #2448]
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews an invalid pointer.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews trigger a non-EDNS retry.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews of the message. [RT #2449]
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1204. [bug] libbind: res_nupdate() failed to update the name
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews server addresses before sending the update.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1203. [func] Report locations of previous acl and zone definitions
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews when a duplicate is detected.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1202. [func] New functions: cfg_obj_line() and cfg_obj_file().
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1201. [bug] Require that if 'callbacks' is passed to
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews dns_rdata_fromtext(), callbacks->error and
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews callbacks->warn are initialized.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1200. [bug] Log 'errno' that we are unable to convert to
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews isc_result_t. [RT #2404]
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1198. [bug] OPT printing style was not consistent with the way the
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater header fields are printed. The DO bit was not reported
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews if set. Report if any of the MBZ bits are set.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1197. [bug] Attempts to define the same acl multiple times were not
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1196. [contrib] update mdnkit to 2.2.3.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1195. [bug] Attempts to redefine builtin acls should be caught.
f4429c1c31ec32f05125baab1adcc4f09863f7afMark Andrews1194. [bug] Not all duplicate zone definitions were being detected
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein at the named.conf checking stage. [RT #2431]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1193. [bug] dig +besteffort parsing didn't handle packet
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein truncation. dns_message_parse() has new flag
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein DNS_MESSAGE_IGNORETRUNCATION.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1192. [bug] The seconds fields in LOC records were restricted
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to three decimal places. More decimal places should
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater be allowed but warned about.
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1191. [bug] A dynamic update removing the last non-apex name in
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater a secure zone would fail. [RT #2399]
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1189. [bug] On some systems, malloc(0) returns NULL, which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could cause the caller to report an out of memory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein error. [RT #2398]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1188. [bug] Dynamic updates of a signed zone would fail if
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater some of the zone private keys were unavailable.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1187. [bug] named was incorrectly returning DNSSEC records
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in negative responses when the DO bit was not set.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein EOL token when reading to end of line.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein unless RES_INIT is set when calling res_*init().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when res_*init() is called.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1183. [bug] Handle ENOSR error when writing to the internal
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein control pipe. [RT #2395]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1182. [bug] The server could throw an assertion failure when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein constructing a negative response packet.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1181. [func] Add the "key-directory" configuration statement,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein which allows the server to look for online signing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein keys in alternate directories.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1180. [func] dnssec-keygen should always generate keys with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein protocol 3 (DNSSEC), since it's less confusing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1179. [func] Add SIG(0) support to nsupdate.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1178. [bug] Follow and cache (if appropriate) A6 and other
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein data chains to completion in the additional section.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1177. [func] Report view when loading zones if it is not a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein standard view (_default or _bind). [RT #2270]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1176. [doc] Document that allow-v6-synthesis is only performed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for clients that are supplied recursive service.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1175. [bug] named-checkzone and named-checkconf failed to call
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews dns_result_register() at startup which could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein result in runtime exceptions when printing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "out of memory" errors. [RT #2335]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1174. [bug] Win32: add WSAECONNRESET to the expected errors
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein from connect(). [RT #2308]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1173. [bug] Potential memory leaks in isc_log_create() and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein isc_log_settag(). [RT #2336]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein table of RR types in ARM.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1171. [func] Added function isc_region_compare(), updated files in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lib/dns to use this function instead of local one.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1170. [bug] Don't attempt to print the token when a I/O error
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein occurs when parsing named.conf. [RT #2275]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1169. [func] Identify recursive queries in the query log.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1167. [contrib] nslint-2.1a3 (from author).
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews1166. [bug] "Not Implemented" should be reported as NOTIMP,
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews not NOTIMPL. [RT #2281]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1164. [bug] Empty masters clauses in slave / stub zones were not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein handled gracefully. [RT #2262]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1163. [func] isc_time_formattimestamp() now includes the year.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1162. [bug] The allow-notify option was not accepted in slave
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone statements.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1161. [bug] named-checkzone looped on unbalanced brackets.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1160. [bug] Generating Diffie-Hellman keys longer than 1024
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews bits could fail. [RT #2241]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1159. [bug] MD and MF are not permitted to be loaded by RFC1123.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1158. [func] Report the client's address when logging notify
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1157. [func] match-clients and match-destinations now accept
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein keys. [RT #2045]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1156. [port] The configure test for strsep() incorrectly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein succeeded on certain patched versions of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein AIX 4.3.3. [RT #2190]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1155. [func] Recover from master files being removed from under
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1154. [bug] Don't attempt to obtain the netmask of a interface
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if there is no address configured. [RT #2176]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1153. [func] 'rndc {stop|halt} -p' now reports the process id
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of the instance of named being shutdown.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1152. [bug] libbind: read buffer overflows.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1151. [bug] nslookup failed to check that the arguments to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the port, timeout, and retry options were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein valid integers and in range. [RT #2099]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1150. [bug] named incorrectly accepted TTL values
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein containing plus or minus signs, such as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1149. [func] New function isc_parse_uint32().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1148. [func] 'rndc-confgen -a' now provides positive feedback.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the OS. listen-on-v6 { any; }; should no longer
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein result in IPv4 queries be accepted. Similarly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein control { inet :: ... }; should no longer result
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in IPv4 connections being accepted. This can be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein overridden at compile time by defining
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ISC_ALLOW_MAPPED=1.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein supported by the OS by a new function
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein isc_socket_ipv6only().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1145. [func] "host" no longer reports a NOERROR/NODATA response
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by printing nothing. [RT #2065]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1144. [bug] rndc-confgen would crash if both the -a and -t
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein options were specified. [RT #2159]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1143. [bug] When a trusted-keys statement was present and named
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was built without crypto support, it would leak memory.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1142. [bug] dnssec-signzone would fail to delete temporary files
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in some failure cases. [RT #2144]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1141. [bug] When named rejected a control message, it would
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein leak a file descriptor and memory. It would also
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fail to respond, causing rndc to hang.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #2139, #2164]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to the -s option. [RT #2138]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1139. [func] It is now possible to flush a given name from the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cache(s) via 'rndc flushname name [view]'. [RT #2051]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1138. [func] It is now possible to flush a given name from the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cache by calling the new function
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_cache_flushname().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1137. [func] It is now possible to flush a given name from the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ADB by calling the new function dns_adb_flushname().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1136. [bug] CNAME records synthesized from DNAMEs did not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein have a TTL of zero as required by RFC2672.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1135. [func] You can now override the default syslog() facility for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named/lwresd at compile time. [RT #1982]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1134. [bug] Multi-threaded servers could deadlock in ferror()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when reloading zone files. [RT #1951, #1998]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1132. [func] Improve UPDATE prerequisite failure diagnostic messages.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1131. [bug] The match-destinations view option did not work with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein IPv6 destinations. [RT #2073, #2074]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1130. [bug] Log messages reporting an out-of-range serial number
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein did not include the out-of-range number but the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein following token. [RT #2076]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1129. [bug] Multi-threaded servers could crash under heavy
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein resolution load due to a race condition. [RT #2018]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1128. [func] sdb drivers can now provide RR data in either text
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or wire format, the latter using the new functions
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_sdb_putrdata() and dns_sdb_putnamedrdata().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1127. [func] rndc: If the server to contact has multiple addresses,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein try all of them.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1126. [bug] The server could access a freed event if shut
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein down while a client start event was pending
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein delivery. [RT #2061]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1125. [bug] rndc: -k option was missing from usage message.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are now documented. [RT #2052]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1123. [bug] dig +[no]fail did not match description. [RT #2052]
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1122. [tuning] Resolution timeout reduced from 90 to 30 seconds.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1121. [bug] The server could attempt to access a NULL zone
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater table if shut down while resolving.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater [RT #1587, #2054]
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1120. [bug] Errors in options were not fatal. [RT #2002]
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1119. [func] Added support in Win32 for NTFS file/directory ACL's
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater for access control.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1118. [bug] On multi-threaded servers, a race condition
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could cause an assertion failure in resolver.c
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein during resolver shutdown. [RT #2029]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1117. [port] The configure check for in6addr_loopback incorrectly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein succeeded on AIX 4.3 when compiling with -O2
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein because the test code was optimized away.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1116. [bug] Setting transfers in a server clause, transfers-in,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or transfers-per-ns to a value greater than
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 2147483647 disabled transfers. [RT #2002]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1115. [func] Set maximum values for cleaning-interval,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein heartbeat-interval, interface-interval,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-transfer-idle-in, max-transfer-idle-out,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein max-transfer-time-in, max-transfer-time-out,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statistics-interval of 28 days and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sig-validity-interval of 3660 days. [RT #2002]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1114. [port] Ignore more accept() errors. [RT #2021]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1113. [bug] The allow-update-forwarding option was ignored
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews when specified in a view. [RT #2014]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1112. [placeholder]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1111. [bug] Multi-threaded servers could deadlock processing
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews recursive queries due to a locking hierarchy
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews violation in adb.c. [RT #2017]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1110. [bug] dig should only accept valid abbreviations of +options.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1109. [bug] nsupdate accepted illegal ttl values.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1108. [bug] On Win32, rndc was hanging when named was not running
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews due to failure to select for exceptional conditions
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews in select(). [RT #1870]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1107. [bug] nsupdate could catch an assertion failure if an
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews invalid domain name was given as the argument to
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews the "zone" command.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1106. [bug] After seeing an out of range TTL, nsupdate would
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein treat all TTLs as out of range. [RT #2001]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1105. [port] OpenUNIX 8 enable threads by default. [RT #1970]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1104. [bug] Invalid arguments to the transfer-format option
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could cause an assertion failure. [RT #1995]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1102. [doc] Note that query logging is enabled by directing the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein queries category to a channel.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1101. [bug] Array bounds read error in lwres_gai_strerror.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1100. [bug] libbind: DNSSEC key ids were computed incorrectly.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein compile time errors.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1097. [func] libbind: RES_PRF_TRUNC for dig.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1096. [func] libbind: "DNSSEC OK" (DO) support.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1095. [func] libbind: resolver option: no-tld-query. disables
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater trying unqualified as a tld. no_tld_query is also
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater supported for FreeBSD compatibility.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1094. [func] libbind: add support gcc's format string checking.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1093. [doc] libbind: miscellaneous nroff fixes.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1092. [bug] libbind: get*by*() failed to check if res_init() had
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1091. [bug] libbind: misplaced va_end().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the amount of memory consumed resulting in garbage
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein address being returned. Alignment calculations were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein wasting space. We weren't suppressing duplicate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1089. [func] libbind: inet_{cidr,net}_{pton,ntop}() now have IPv6
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1088. [port] libbind: MPE/iX C.70 (incomplete)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1087. [bug] libbind: struct __res_state too large on 64 bit arch.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1086. [port] libbind: sunos: old sprintf.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1085. [port] libbind: solaris: sys_nerr and sys_errlist do not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein exist when compiling in 64 bit mode.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1084. [cleanup] libbind: gai_strerror() rewritten.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1083. [bug] The default control channel listened on the
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews wildcard address, not the loopback as documented.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1082. [bug] The -g option to named incorrectly caused logging
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to be sent to syslog in addition to stderr.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1081. [bug] Multicast queries were incorrectly identified
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein based on the source address, not the destination
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1080. [bug] BIND 8 compatibility: accept bare IP prefixes
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as the second element of a two-element top level
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sort list statement. [RT #1964]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1079. [bug] BIND 8 compatibility: accept bare elements at top
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein level of sort list treating them as if they were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a single element list. [RT #1963]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1078. [bug] We failed to correct bad tv_usec values in one case.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1077. [func] Do not accept further recursive clients when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the total number of recursive lookups being
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein processed exceeds max-recursive-clients, even
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if some of the lookups are internally generated.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #1915, #1938]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1076. [bug] A badly defined global key could trigger an assertion
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein on load/reload if views were used. [RT #1947]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1075. [bug] Out-of-range network prefix lengths were not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reported. [RT #1954]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1074. [bug] Running out of memory in dump_rdataset() could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cause an assertion failure. [RT #1946]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1073. [bug] The ADB cache cleaning should also be space driven.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #1915, #1938]
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews1072. [bug] The TCP client quota could be exceeded when
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews recursion occurred. [RT #1937]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1071. [bug] Sockets listening for TCP DNS connections
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein specified an excessive listen backlog. [RT #1937]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1070. [bug] Copy DNSSEC OK (DO) to response as specified by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1069. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1068. [bug] errno could be overwritten by catgets(). [RT #1921]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1067. [func] Allow quotas to be soft, isc_quota_soft().
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1066. [bug] Provide a thread safe wrapper for strerror().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1065. [func] Runtime support to select new / old style interface
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein scanning using ioctls.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1064. [bug] Do not shut down active network interfaces if we
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are unable to scan the interface list. [RT #1921]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1063. [bug] libbind: "make install" was failing on IRIX.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1062. [bug] If the control channel listener socket was shut
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein down before server exit, the listener object could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be freed twice. [RT #1916]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1061. [bug] If periodic cache cleaning happened to start
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein while cleaning due to reaching the configured
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein maximum cache size was in progress, the server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could catch an assertion failure. [RT #1912]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1060. [func] Move refresh, stub and notify UDP retry processing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein into dns_request.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1059. [func] dns_request now support will now retry UDP queries,
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews dns_request_createvia2() and dns_request_createraw2().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1058. [func] Limited lifetime ticker timers are now available,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein isc_timertype_limited.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1057. [bug] Reloading the server after adding a "file" clause
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to a zone statement could cause the server to
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews crash due to a typo in change 1016.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1056. [bug] Rndc could catch an assertion failure on SIGINT due
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews to an uninitialized variable. [RT #1908]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1055. [func] Version and hostname queries can now be disabled
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews using "version none;" and "hostname none;",
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews respectively.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1054. [bug] On Win32, cfg_categories and cfg_modules need to be
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews exported from the libisccfg DLL.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1053. [bug] Dig did not increase its timeout when receiving
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews AXFRs unless the +time option was used. [RT #1904]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1052. [bug] Journals were not being created in binary mode
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater resulting in "journal format not recognized" error
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater under Win32. [RT #1889]
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1051. [bug] Do not ignore a network interface completely just
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater because it has a noncontiguous netmask. Instead,
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater omit it from the localnets ACL and issue a warning.
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1050. [bug] Log messages reporting malformed IP addresses in
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater address lists such as that of the forwarders option
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater failed to include the correct error code, file
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater name, and line number. [RT #1890]
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1049. [func] "pid-file none;" will disable writing a pid file.
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1048. [bug] Servers built with -DISC_MEM_USE_INTERNAL_MALLOC=1
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1047. [bug] named was incorrectly refusing all requests signed
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater with a TSIG key derived from an unsigned TKEY
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater negotiation with a NOERROR response. [RT #1886]
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1046. [bug] The help message for the --with-openssl configure
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater option was inaccurate. [RT #1880]
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1045. [bug] It was possible to skip saving glue for a nameserver
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater for a stub zone.
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1044. [bug] Specifying allow-transfer, notify-source, or
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater notify-source-v6 in a stub zone was not treated
38417cbfb1a328c20b5b723b8584a02c57f88897Automatic Updater1043. [bug] Specifying a transfer-source or transfer-source-v6
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein option in the zone statement for a master zone was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not treated as an error. [RT #1876]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1042. [bug] The "config" logging category did not work properly.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1041. [bug] Dig/host/nslookup could catch an assertion failure
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews on SIGINT due to an uninitialized variable. [RT #1867]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1040. [bug] Multiple listen-on-v6 options with different ports
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were not accepted. [RT #1875]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1039. [bug] Negative responses with CNAMEs in the answer section
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews were cached incorrectly. [RT #1862]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1038. [bug] In servers configured with a tkey-domain option,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein TKEY queries with an owner name other than the root
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could cause an assertion failure. [RT #1866, #1869]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1037. [bug] Negative responses whose authority section contain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein SOA or NS records whose owner names are not equal
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein equal to or parents of the query name should be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rejected. [RT #1862]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1036. [func] Silently drop requests received via multicast as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein long as there is no final multicast DNS standard.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1035. [bug] If we respond to multicast queries (which we
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein currently do not), respond from a unicast address
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as specified in RFC 1123. [RT #137]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1034. [bug] Ignore the RD bit on multicast queries as specified
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in RFC 1123. [RT #137]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1033. [bug] Always respond to requests with an unsupported opcode
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with NOTIMP, even if we don't have a matching view
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or cannot determine the class.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1032. [func] hostname.bind/txt/chaos now returns the name of
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews the machine hosting the nameserver. This is useful
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in diagnosing problems with anycast servers.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1030. [bug] On systems with no resolv.conf file, nsupdate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein exited with an error rather than defaulting
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to using the loopback address. [RT #1836]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1029. [bug] Some named.conf errors did not cause the loading
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of the configuration file to return a failure
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein status even though they were logged. [RT #1847]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1028. [bug] On Win32, dig/host/nslookup looked for resolv.conf
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in the wrong directory. [RT #1833]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1027. [bug] RRs having the reserved type 0 should be rejected.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1026. [placeholder]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1025. [bug] Don't use multicast addresses to resolve iterative
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews queries. [RT #101]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1024. [port] Compilation failed on HP-UX 11.11 due to
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews incompatible use of the SIOCGLIFCONF macro
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews name. [RT #1831]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1023. [func] Accept hints without TTLs.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1022. [bug] Don't report empty root hints as "extra data".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1021. [bug] On Win32, log message timestamps were one month
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein later than they should have been, and the server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein would exhibit unspecified behavior in December.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1020. [bug] IXFR log messages did not distinguish between
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews true IXFRs, AXFR-style IXFRs, and mere version
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein polls. [RT #1811]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1019. [bug] The value of the lame-ttl option was limited to 18000
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein seconds, not 1800 seconds as documented. [RT #1803]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1018. [bug] The default log channel was not always initialized
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein correctly. [RT #1813]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1017. [bug] When specifying TSIG keys to dig and nsupdate using
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the -k option, they must be HMAC-MD5 keys. [RT #1810]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1016. [bug] Slave zones with no backup file were re-transferred
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein on every server reload.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1015. [bug] Log channels that had a "versions" option but no
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews "size" option failed to create numbered log
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews files. [RT #1783]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1014. [bug] Some queries would cause statistics counters to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein increment more than once or not at all. [RT #1321]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1013. [bug] It was possible to cancel a query twice when marking
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a server as bogus or by having a blackhole acl.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1012. [bug] The -p option to named did not behave as documented.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1011. [cleanup] Removed isc_dir_current().
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews1010. [bug] The server could attempt to execute a command channel
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein command after initiating server shutdown, causing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an assertion failure. [RT #1766]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1009. [port] OpenUNIX 8 support. [RT #1728]
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1008. [port] libtool.m4, ltmain.sh from libtool-1.4.2.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1007. [port] config.guess, config.sub from autoconf-2.52.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1006. [bug] If a KEY RR was found missing during DNSSEC validation,
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater an assertion failure could subsequently be triggered
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater in the resolver. [RT #1763]
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1005. [bug] Don't copy nonzero RCODEs from request to response.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater1004. [port] Deal with recvfrom() returning EHOSTDOWN. [RT #1770]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1003. [func] Add the +retry option to dig.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1002. [bug] When reporting an unknown class name in named.conf,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein including the file name and line number. [RT #1759]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1001. [bug] win32 socket code doio_recv was not catching a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein WSACONNRESET error when a client was timing out
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews the request and closing its socket. [RT #1745]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein1000. [bug] BIND 8 compatibility: accept "HESIOD" as an alias
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for class "HS". [RT #1759]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 999. [func] "rndc retransfer zone [class [view]]" added.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater 998. [func] named-checkzone now has arguments to specify the
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater chroot directory (-t) and working directory (-w).
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater 997. [func] Add support for RSA-SHA1 keys (RFC3110).
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater 996. [func] Issue warning if the configuration filename contains
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater the chroot path.
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater 995. [bug] dig, host, nslookup: using a raw IPv6 address as a
0c6ada0a814f3c5417daa1654129bc2af56ed504Automatic Updater target address should be fatal on a IPv4 only system.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 994. [func] Treat non-authoritative responses to queries for type
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein NS as referrals even if the NS records are in the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein answer section, because BIND 8 servers incorrectly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein send them that way. This is necessary for DNSSEC
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein validation of the NS records of a secure zone to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein succeed when the parent is a BIND 8 server. [RT #1706]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 993. [func] dig: -v now reports the version.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 992. [doc] dig: ~/.digrc is now documented.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 991. [func] Lower UDP refresh timeout messages to level
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 990. [bug] The rndc-confgen man page was not installed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 989. [bug] Report filename if $INCLUDE fails for file related
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein errors. [RT #1736]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 988. [bug] 'additional-from-auth no;' did not work reliably
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in the case of queries answered from the cache.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 987. [bug] "dig -help" didn't show "+[no]stats".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 986. [bug] "dig +noall" failed to clear stats and command
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 985. [func] Consider network interfaces to be up iff they have
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a nonzero IP address rather than based on the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein IFF_UP flag. [RT #1160]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 984. [bug] Multi-threading should be enabled by default on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Solaris 2.7 and newer, but it wasn't.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 983. [func] The server now supports generating IXFR difference
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sequences for non-dynamic zones by comparing zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein versions, when enabled using the new config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein option "ixfr-from-differences". [RT #1727]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 982. [func] If "memstatistics-file" is set in options the memory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein statistics will be written to it.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 981. [func] The dnssec tools can now take multiple '-r randomfile'
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 980. [bug] Incoming zone transfers restarting after an error
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could trigger an assertion failure. [RT #1692]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 979. [func] Incremental master file dumping. dns_master_dumpinc(),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_master_dumptostreaminc(), dns_dumpctx_attach(),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_dumpctx_detach(), dns_dumpctx_cancel(),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dns_dumpctx_db() and dns_dumpctx_version().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 978. [bug] dns_db_attachversion() had an invalid REQUIRE()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 977. [bug] Improve "not at top of zone" error message.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 976. [func] named-checkconf can now test load master zones
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (named-checkconf -z). [RT #1468]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 975. [bug] "max-cache-size default;" as a view option
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein caused an assertion failure.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 974. [bug] "max-cache-size unlimited;" as a global option
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was not accepted.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 973. [bug] Failed to log the question name when logging:
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews "bad zone transfer request: non-authoritative zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 972. [bug] The file modification time code in zone.c was using the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein wrong epoch. [RT #1667]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 971. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 970. [func] 'max-journal-size' can now be used to set a target
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein size for a journal.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 969. [func] dig now supports the undocumented dig 8 feature
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of allowing arbitrary labels, not just dotted
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein decimal quads, with the -x option. This can be
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein used to conveniently look up RFC2317 names as in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 968. [bug] On win32, the isc_time_now() function was unnecessarily
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein calling strtime(). [RT #1671]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 967. [bug] On win32, the link for bindevt was not including the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein required resource file to enable the event viewer
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to interpret the error messages in the event log,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 966. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 965. [bug] Including data other than root server NS and A
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein records in the root hint file could cause a rbtdb
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein node reference leak. [RT #1581, #1618]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 964. [func] Warn if data other than root server NS and A records
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are found in the root hint file. [RT #1581, #1618]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 963. [bug] Bad ISC_LANG_ENDDECLS. [RT #1645]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 962. [bug] libbind: bad "#undef", don't attempt to install
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein non-existent nlist.h. [RT #1640]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 961. [bug] Tried to use a IPV6 feature when ISC_PLATFORM_HAVEIPV6
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was not defined. [RT #1482]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 960. [port] liblwres failed to build on systems with support for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein getrrsetbyname() in the OS. [RT #1592]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 959. [port] On FreeBSD, determine the number of CPUs by calling
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein sysctlbyname(). [RT #1584]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 958. [port] ssize_t is not available on all platforms. [RT #1607]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 957. [bug] sys/select.h inclusion was broken on older platforms.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 956. [bug] ns_g_autorndcfile changed to ns_g_keyfile
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in named/win32/os.c due to code changes in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein change #953. win32 .make file for rndc-confgen
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein updated to add include path for os.h header.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.2.0rc1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 955. [bug] When using views, the zone's class was not being
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein inherited from the view's class. [RT #1583]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 954. [bug] When requesting AXFRs or IXFRs using dig, host, or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein nslookup, the RD bit should not be set as zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein transfers are inherently non-recursive. [RT #1575]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 953. [func] The /var/run/named.key file from change #843
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater has been replaced by /etc/rndc.key. Both
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named and rndc will look for this file and use
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein it to configure a default control channel key
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if not already configured using a different
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein method (rndc.conf / controls). Unlike
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named.key, rndc.key is not created automatically;
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein it must be created by manually running
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "rndc-confgen -a".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 952. [bug] The server required manual intervention to serve the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein affected zones if it died between creating a journal
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and committing the first change to it.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 951. [bug] CFLAGS was not passed to the linker when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein linking some of the test programs under
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 950. [bug] Explicit TTLs did not properly override $TTL
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein due to a bug in change 834. [RT #1558]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 949. [bug] host was unable to print records larger than 512
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein bytes. [RT #1557]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.2.0b2 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 948. [port] Integrated support for building on Windows NT /
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein Windows 2000.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 947. [bug] dns_rdata_soa_t had a badly named element "mname" which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was really the RNAME field from RFC1035. To avoid
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein confusion and silent errors that would occur it the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "origin" and "mname" elements were given their correct
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein names "mname" and "rname" respectively, the "mname"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein element is renamed to "contact".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 946. [cleanup] doc/misc/options is now machine-generated from the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein configuration parser syntax tables, and therefore
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein more likely to be correct.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 945. [func] Add the new view-specific options
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "match-destinations" and "match-recursive-only".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 944. [func] Check for expired signatures on load.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 943. [bug] The server could crash when receiving a command
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein via rndc if the configuration file listed only
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein nonexistent keys in the controls statement. [RT #1530]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein defined on some platforms.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 941. [bug] The configuration checker crashed if a slave
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zone didn't contain a masters statement. [RT #1514]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 940. [bug] Double zone locking failure on error path. [RT #1510]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.2.0b1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 939. [port] Add the --disable-linux-caps option to configure for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein systems that manage capabilities outside of named.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 938. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 937. [bug] A race when shutting down a zone could trigger a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein INSIST() failure. [RT #1034]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 936. [func] Warn about IPv4 addresses that are not complete
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dotted quads. [RT #1084]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 935. [bug] inet_pton failed to reject leading zeros.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 934. [port] Deal with systems where accept() spuriously returns
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 933. [bug] configure failed doing libbind on platforms not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein supported by BIND 8. [RT #1496]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.2.0a3 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when installing isc-config.sh.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #198, #1466]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 931. [bug] The controls statement only attempted to verify
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein messages using the first key in the key list.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (9.2.0a1/a2 only).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 930. [func] Query performance testing tool added as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 929. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 928. [bug] nsupdate would send empty update packets if the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein send (or empty line) command was run after
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein another send but before any new updates or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein prerequisites were specified. It should simply
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ignore this command.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 927. [bug] Don't hold the zone lock for the entire dump to disk.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 926. [bug] The resolver could deadlock with the ADB when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein shutting down (multi-threaded builds only).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 925. [cleanup] Remove openssl from the distribution; require that
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --with-openssl be specified if DNSSEC is needed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 924. [port] Extend support for pre-RFC2133 IPv6 implementation.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 923. [bug] Multiline TSIG secrets (and other multiline strings)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were not accepted in named.conf. [RT #1469]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 922. [func] Added two new lwres_getrrsetbyname() result codes,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ERR_NONAME and ERR_NODATA.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 921. [bug] lwres returned an incorrect error code if it received
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a truncated message.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 920. [func] Increase the lwres receive buffer size to 16K.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 919. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 918. [func] In nsupdate, TSIG errors are no longer treated as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein fatal errors.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 917. [func] New nsupdate command 'key', allowing TSIG keys to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be specified in the nsupdate command stream rather
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein than the command line.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 916. [bug] Specifying type ixfr to dig without specifying
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a serial number failed in unexpected ways.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 915. [func] The named-checkconf and named-checkzone programs
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein now have a '-v' option for printing their version.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 914. [bug] Global 'server' statements were rejected when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein using views, even though they were accepted
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein in 9.1. [RT #1368]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews 913. [bug] Cache cleaning was not sufficiently aggressive.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #1441, #1444]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews 912. [bug] Attempts to set the 'additional-from-cache' or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 'additional-from-auth' option to 'no' in a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein server with recursion enabled will now
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews be ignored and cause a warning message.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 911. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 910. [port] Some pre-RFC2133 IPv6 implementations do not define
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein IN6ADDR_ANY_INIT. [RT #1416]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 909. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 908. [func] New program, rndc-confgen, to simplify setting up rndc.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 907. [func] The ability to get entropy from either the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein random device, a user-provided file or from
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the keyboard was migrated from the DNSSEC tools
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to libisc as isc_entropy_usebestsource().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 906. [port] Separated the system independent portion of
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 905. [bug] Configuring a forward "zone" for the root domain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein did not work. [RT #1418]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 904. [bug] The server would leak memory if attempting to use
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an expired TSIG key. [RT #1406]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 903. [bug] dig should not crash when receiving a TCP packet
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of length 0.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 902. [bug] The -d option was ignored if both -t and -g were also
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 901. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 900. [bug] A config.guess update changed the system identification
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein string of FreeBSD systems; configure and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein bin/tests/system/ifconfig.sh now recognize the new
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.2.0a2 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 899. [bug] lib/dns/soa.c failed to compile on many platforms
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein due to inappropriate use of a void value.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #1372, #1373, #1386, #1387, #1395]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 898. [bug] "dig" failed to set a nonzero exit status
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews on UDP query timeout. [RT #1323]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 897. [bug] A config.guess update changed the system identification
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein string of UnixWare systems; configure now recognizes
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the new string.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater 896. [bug] If a configuration file is set on named's command line
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and it has a relative pathname, the current directory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (after any possible jailing resulting from named -t)
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein will be prepended to it so that reloading works
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein properly even when a directory option is present.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 895. [func] New function, isc_dir_current(), akin to POSIX's
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 894. [bug] When using the DNSSEC tools, a message intended to warn
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when the keyboard was being used because of the lack
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of a suitable random device was not being printed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 893. [func] Removed isc_file_test() and added isc_file_exists()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein for the basic functionality that was being added
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with isc_file_test().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 892. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 891. [bug] Return an error when a SIG(0) signed response to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an unsigned query is seen. This should actually
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein do the verification, but it's not currently
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein possible. [RT #1391]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 890. [cleanup] The man pages no longer require the mandoc macros
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews and should now format cleanly using most versions of
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein nroff, and HTML versions of the man pages have been
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein added. Both are generated from DocBook source.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 889. [port] Eliminated blank lines before .TH in nroff man
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein pages since they cause problems with some versions
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of nroff. [RT #1390]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 888. [bug] Don't die when using TKEY to delete a nonexistent
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews TSIG key. [RT #1392]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 887. [port] Detect broken compilers that can't call static
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein functions from inline functions. [RT #1212]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 886. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 885. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 884. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 883. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 882. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 881. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 880. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 879. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 878. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 877. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 876. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 875. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 874. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 873. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 872. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 871. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 870. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 869. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 868. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 867. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 866. [func] Close debug only file channels when debug is set to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein zero. [RT #1246]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 865. [bug] The new configuration parser did not allow
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the optional debug level in a "severity debug"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein clause of a logging channel to be omitted.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein This is now allowed and treated as "severity
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein debug 1;" like it does in BIND 8.2.4, not as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein "severity debug 0;" like it did in BIND 9.1.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 864. [cleanup] Multi-threading is now enabled by default on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 863. [bug] If an error occurred while an outgoing zone transfer
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was starting up, the server could access a domain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein name that had already been freed when logging a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein message saying that the transfer was starting.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 862. [bug] Use after realloc(), non portable pointer arithmetic in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 861. [port] Add support for Mac OS X, by making it equivalent
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to Darwin. This was derived from the config.guess
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file shipped with Mac OS X. [RT #1355]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 860. [func] Drop cross class glue in zone transfers.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 859. [bug] Cache cleaning now won't swamp the CPU if there
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein is a persistent over limit condition.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 858. [func] isc_mem_setwater() no longer requires that when the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein callback function is non-NULL then its hi_water
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein argument must be greater than its lo_water argument
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein (they can now be equal) or that they be non-zero.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 857. [cleanup] Use ISC_MAGIC() to define all magic numbers for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein structs, for our friends in EBCDIC-land.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 856. [func] Allow partial rdatasets to be returned in answer and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein authority sections to help non-TCP capable clients
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein recover from truncation. [RT #1301]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 854. [bug] The config parser didn't properly handle config
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein options that were specified in units of time other
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein than seconds. [RT #1372]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 853. [bug] configure_view_acl() failed to detach existing acls.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 852. [bug] Handle responses from servers which do not know
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 851. [cleanup] The obsolete support-ixfr option was not properly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --- 9.2.0a1 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 850. [bug] dns_rbt_findnode() would not find nodes that were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein split on a bitstring label somewhere other than in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the last label of the node. [RT #1351]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 848. [func] A minimum max-cache-size of two megabytes is enforced
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by the cache cleaner.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 847. [func] Added isc_file_test(), which currently only has
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein some very basic functionality to test for the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein existence of a file, whether a pathname is absolute,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or whether a pathname is the fundamental representation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of the current directory. It is intended that this
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein function can be expanded to test other things a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein programmer might want to know about a file.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 846. [func] A non-zero 'param' to dst_key_generate() when making an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein hmac-md5 key means that good entropy is not required.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 845. [bug] The access rights on the public file of a symmetric
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein key are now restricted as soon as the file is opened,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rather than after it has been written and closed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein just as <lwres/net.h> does.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 843. [func] If no controls statement is present in named.conf,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or if any inet phrase of a controls statement is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lacking a keys clause, then a key will be automatically
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein generated by named and an rndc.conf-style file
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein named named.key will be written that uses it. rndc
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein will use this file only if its normal configuration
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein file, or one provided on the command line, does not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 842. [func] 'rndc flush' now takes an optional view.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 841. [bug] When sdb modules were not declared threadsafe, their
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein create and destroy functions were not serialized.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 840. [bug] The config file parser could print the wrong file
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein name if an error was detected after an included file
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein was parsed. [RT #1353]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews 839. [func] Dump packets for which there was no view or that the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein class could not be determined to category "unmatched".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 838. [port] UnixWare 7.x.x is now suported by
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 837. [cleanup] Multi-threading is now enabled by default only on
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein OSF1, Solaris 2.7 and newer, and AIX.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 836. [func] Upgraded libtool to 1.4.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 835. [bug] The dispatcher could enter a busy loop if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein it got an I/O error receiving on a UDP socket.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 834. [func] Accept (but warn about) master files beginning with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an SOA record without an explicit TTL field and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein lacking a $TTL directive, by using the SOA MINTTL
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein as a default TTL. This is for backwards compatibility
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with old versions of BIND 8, which accepted such
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein files without warning although they are illegal
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein according to RFC1035.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein <dns/soa.h>, and extended them to support
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein all the integer-valued fields of the SOA RR.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 832. [bug] The default location for named.conf in named-checkconf
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein should depend on --sysconfdir like it does in named.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 831. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 830. [func] Implement 'rndc status'.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 829. [bug] The DNS_R_ZONECUT result code should only be returned
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when an ANY query is made with DNS_DBFIND_GLUEOK set.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein In all other ANY query cases, returning the delegation
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 828. [bug] The errno value from recvfrom() could be overwritten
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by logging code. [RT #1293]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 827. [bug] When an IXFR protocol error occurs, the slave
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein should retry with AXFR.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 826. [bug] Some IXFR protocol errors were not detected.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 825. [bug] zone.c:ns_query() detached from the wrong zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reference. [RT #1264]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 824. [bug] Correct line numbers reported by dns_master_load().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 823. [func] The output of "dig -h" now goes to stdout so that it
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein can easily be piped through "more". [RT #1254]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 822. [bug] Sending nxrrset prerequisites would crash nsupdate.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 821. [bug] The program name used when logging to syslog should
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be stripped of leading path components.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #1178, #1232]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 820. [bug] Name server address lookups failed to follow
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein A6 chains into the glue of local authoritative
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 819. [bug] In certain cases, the resolver's attempts to
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein restart an address lookup at the root could cause
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the fetch to deadlock (with itself) instead of
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater restarting. [RT #1225]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 818. [bug] Certain pathological responses to ANY queries could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cause an assertion failure. [RT #1218]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 817. [func] Adjust timeouts for dialup zone queries.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 816. [bug] Report potential problems with log file accessibility
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein at configuration time, since such problems can't
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reliably be reported at the time they actually occur.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 815. [bug] If a log file was specified with a path separator
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein character (i.e. "/") in its name and the directory
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein did not exist, the log file's name was treated as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein though it were the directory name. [RT #1189]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 814. [bug] Socket objects left over from accept() failures
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were incorrectly destroyed, causing corruption
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein of socket manager data structures.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 813. [bug] File descriptors exceeding FD_SETSIZE were handled
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein badly. [RT #1192]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 812. [bug] dig sometimes printed incomplete IXFR responses
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein due to an uninitialized variable. [RT #1188]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 810. [bug] The signer name in SIG records was not properly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein down-cased when signing/verifying records. [RT #1186]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 809. [bug] Configuring a non-local address as a transfer-source
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could cause an assertion failure during load.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 808. [func] Add 'rndc flush' to flush the server's cache.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 807. [bug] When setting up TCP connections for incoming zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein transfers, the transfer-source port was not
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein ignored like it should be.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the calling stack to the zone maintenance level,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein causing zones to not reload when an included file was
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein touched but the top-level zone file was not.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 805. [bug] When using "forward only", missing root hints should
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not cause queries to fail. [RT #1143]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 804. [bug] Attempting to obtain entropy could fail in some
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein situations. This would be most common on systems
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with user-space threads. [RT #1131]
a1b05dea35aa30b152a47115e18bbe679d3fcf19Mark Andrews 803. [bug] Treat all SIG queries as if they have the CD bit set,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein otherwise no data will be returned [RT #749]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 802. [bug] DNSSEC key tags were computed incorrectly in almost
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein all cases. [RT #1146]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 801. [bug] nsupdate should treat lines beginning with ';' as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein comments. [RT #1139]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater 800. [bug] dnssec-signzone produced incorrect statistics for
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein large zones. [RT #1133]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 799. [bug] The ADB didn't find AAAA glue in a zone unless A6
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein glue was also present.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 798. [bug] nsupdate should be able to reject bad input lines
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein and continue. [RT #1130]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 797. [func] Issue a warning if the 'directory' option contains
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a relative path. [RT #269]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 796. [func] When a size limit is associated with a log file,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein only roll it when the size is reached, not every
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein time the log file is opened. [RT #1096]
9fbbfb5757a1e3e86d7dea62c4e63ffc2303ca2bAutomatic Updater 795. [func] Add the +multiline option to dig. [RT #1095]
9fbbfb5757a1e3e86d7dea62c4e63ffc2303ca2bAutomatic Updater 794. [func] Implement the "port" and "default-port" statements
9fbbfb5757a1e3e86d7dea62c4e63ffc2303ca2bAutomatic Updater 793. [cleanup] The DNSSEC tools could create filenames that were
9fbbfb5757a1e3e86d7dea62c4e63ffc2303ca2bAutomatic Updater illegal or contained shell meta-characters. They
9fbbfb5757a1e3e86d7dea62c4e63ffc2303ca2bAutomatic Updater now use a different text encoding of names that
9fbbfb5757a1e3e86d7dea62c4e63ffc2303ca2bAutomatic Updater doesn't have these problems. [RT #1101]
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater 792. [cleanup] Replace the OMAPI command channel protocol with a
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein simpler one.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 791. [bug] The command channel now works over IPv6.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 790. [bug] Wildcards created using dynamic update or IXFR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could fail to match. [RT #1111]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 789. [bug] The "localhost" and "localnets" ACLs did not match
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when used as the second element of a two-element
9fbbfb5757a1e3e86d7dea62c4e63ffc2303ca2bAutomatic Updater sortlist item.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 788. [func] Add the "match-mapped-addresses" option, which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein causes IPv6 v4mapped addresses to be treated as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein IPv4 addresses for the purpose of acl matching.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 787. [bug] The DNSSEC tools failed to downcase domain
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein names when mapping them into file names.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 786. [bug] When DNSSEC signing/verifying data, owner names were
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not properly down-cased.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 785. [bug] A race condition in the resolver could cause
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an assertion failure. [RT #673, #872, #1048]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 784. [bug] nsupdate and other programs would not quit properly
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein if some signals were blocked by the caller. [RT #1081]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 783. [bug] Following CNAMEs could cause an assertion failure
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater when either using an sdb database or under very
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein rare conditions.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 782. [func] Implement the "serial-query-rate" option.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 781. [func] Avoid error packet loops by dropping duplicate FORMERR
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein responses. [RT #1006]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 780. [bug] Error handling code dealing with out of memory or
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein other rare errors could lead to assertion failures
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein by calling functions on uninitialized names. [RT #1065]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 779. [func] Added the "minimal-responses" option.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 778. [bug] When starting cache cleaning, cleaning_timer_action()
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein returned without first pausing the iterator, which
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein could cause deadlock. [RT #998]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 777. [bug] An empty forwarders list in a zone failed to override
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein global forwarders. [RT #995]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 776. [func] Improved error reporting in denied messages. [RT #252]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 775. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 774. [func] max-cache-size is implemented.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 773. [func] Added isc_rwlock_trylock() to attempt to lock without
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 772. [bug] Owner names could be incorrectly omitted from cache
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dumps in the presence of negative caching entries.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 771. [cleanup] TSIG errors related to unsynchronized clocks
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein are logged better. [RT #919]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 770. [func] Add the "edns yes_or_no" statement to the server
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein clause. [RT #524]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 769. [func] Improved error reporting when parsing rdata. [RT #740]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 768. [bug] The server did not emit an SOA when a CNAME
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein or DNAME chain ended in NXDOMAIN in an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein authoritative zone.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 767. [placeholder]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 766. [bug] A few cases in query_find() could leak fname.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews This would trigger the mpctx->allocated == 0
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein assertion when the server exited.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #739, #776, #798, #812, #818, #821, #845,
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein #892, #935, #966]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 765. [func] ACL names are once again case insensitive, like
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater in BIND 8. [RT #252]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 764. [func] Configuration files now allow "include" directives
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews in more places, such as inside the "view" statement.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews [RT #377, #728, #860]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 763. [func] Configuration files no longer have reserved words.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews [RT #731, #753]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 762. [cleanup] The named.conf and rndc.conf file parsers have
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein been completely rewritten.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 761. [bug] _REENTRANT was still defined when building with
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein --disable-threads.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 760. [contrib] Significant enhancements to the pgsql sdb driver.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 759. [bug] The resolver didn't turn off "avoid fetches" mode
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein when restarting, possibly causing resolution
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to fail when it should not. This bug only affected
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater platforms which support both IPv4 and IPv6. [RT #927]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 758. [bug] The "avoid fetches" code did not treat negative
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein cache entries correctly, causing fetches that would
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein be useful to be avoided. This bug only affected
ab8729140b1ad688ab03e1e9ce438fb1cbb49222Automatic Updater platforms which support both IPv4 and IPv6. [RT #927]
3970098dcd2a7122541667b4b56cea8abce8ccf2Mark Andrews 757. [func] Log zone transfers.
f293a69bcd1c1dd7bdac8f4102fc2398b9e475c8Eric Luce 756. [bug] dns_zone_load() could "return" success when no master
3970098dcd2a7122541667b4b56cea8abce8ccf2Mark Andrews file was configured.
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater 755. [bug] Fix incorrectly formatted log messages in zone.c.
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater 754. [bug] Certain failure conditions sending UDP packets
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater could cause the server to retry the transmission
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater indefinitely. [RT #902]
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater 753. [bug] dig, host, and nslookup would fail to contact a
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater remote server if getaddrinfo() returned an IPv6
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater address on a system that doesn't support IPv6.
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater 752. [func] Correct bad tv_usec elements returned by
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater gettimeofday().
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater 751. [func] Log successful zone loads / transfers. [RT #898]
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater 750. [bug] A query should not match a DNAME whose trust level
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater is pending. [RT #916]
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater 749. [bug] When a query matched a DNAME in a secure zone, the
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater server did not return the signature of the DNAME.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 748. [doc] List supported RFCs in doc/misc/rfc-compliance.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 747. [bug] The code to determine whether an IXFR was possible
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein did not properly check for a database that could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not have a journal. [RT #865, #908]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 746. [bug] The sdb didn't clone rdatasets properly, causing
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein a crash when the server followed delegations. [RT #905]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 745. [func] Report the owner name of records that fail
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein semantic checks while loading.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein result of an ANY or SIG query, the resolver failed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to setup the return event's rdatasets, causing an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein assertion failure in the query code. [RT #881]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 743. [bug] Receiving a large number of certain malformed
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein answers could cause named to stop responding.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 742. [placeholder]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 741. [port] Support openssl-engine. [RT #709]
b05bdb520d83f7ecaad708fe305268c3420be01dMark Andrews 740. [port] Handle openssl library mismatches slightly better.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 739. [port] Look for /dev/random in configure, rather than
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein assuming it will be there for only a predefined
bea931e17b7567f09107f93ab7e25c7f00abeb9cMark Andrews set of OSes.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 738. [bug] If a non-threadsafe sdb driver supported AXFR and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein received an AXFR request, it would deadlock or die
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein with an assertion failure. [RT #852]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 737. [port] stdtime.c failed to compile on certain platforms.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 736. [func] New functions isc_task_{begin,end}exclusive().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 735. [doc] Add BIND 4 migration notes.
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews 734. [bug] An attempt to re-lock the zone lock could occur if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein the server was shutdown during a zone transfer.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 733. [bug] Reference counts of dns_acl_t objects need to be
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews locked but were not. [RT #801, #821]
8ae3bbdd860f8abe3d47ec02d1f4d2008bf46f63Automatic Updater 732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]
8ae3bbdd860f8abe3d47ec02d1f4d2008bf46f63Automatic Updater 731. [bug] Certain zone errors could cause named-checkzone to
8ae3bbdd860f8abe3d47ec02d1f4d2008bf46f63Automatic Updater fail ungracefully. [RT #819]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 730. [bug] lwres_getaddrinfo() returns the correct result when
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein it fails to contact a server. [RT #768]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 729. [port] pthread_setconcurrency() needs to be called on Solaris.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 728. [bug] Fix comment processing on master file directives.
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater 727. [port] Work around OS bug where accept() succeeds but
8ae3bbdd860f8abe3d47ec02d1f4d2008bf46f63Automatic Updater fails to fill in the peer address of the accepted
2cbb4ab75757fbb656997a82c14ca07db37d481aAutomatic Updater connection, by treating it as an error rather than
8ae3bbdd860f8abe3d47ec02d1f4d2008bf46f63Automatic Updater an assertion failure. [RT #809]
8ae3bbdd860f8abe3d47ec02d1f4d2008bf46f63Automatic Updater 726. [func] Implement the "trace" and "notrace" commands in rndc.
8ae3bbdd860f8abe3d47ec02d1f4d2008bf46f63Automatic Updater 725. [bug] Installing man pages could fail.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 724. [func] New libisc functions isc_netaddr_any(),
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein isc_netaddr_any6().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein to return DNS_R_SERVFAIL. [RT #783]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 722. [func] Allow incremental loads to be canceled.
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews 721. [cleanup] Load manager and dns_master_loadfilequota() are no
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 720. [bug] Server could enter infinite loop in
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein dispatch.c:do_cancel(). [RT #733]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 719. [bug] Rapid reloads could trigger an assertion failure.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #743, #763]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 718. [cleanup] "internal" is no longer a reserved word in named.conf.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein [RT #753, #731]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 717. [bug] Certain TKEY processing failure modes could
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein reference an uninitialized variable, causing the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein server to crash. [RT #750]
47012ae6dbf18a2503d7b33c1c9583dc38625cb7Mark Andrews 716. [bug] The first line of a $INCLUDE master file was lost if
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein an origin was specified. [RT #744]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 715. [bug] Resolving some A6 chains could cause an assertion
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein failure in adb.c. [RT #738]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 714. [bug] Preserve interval timers across reloads unless changed.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 713. [func] named-checkconf takes '-t directory' similar to named.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 712. [bug] Sending a large signed update message caused an
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein assertion failure. [RT #718]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 711. [bug] The libisc and liblwres implementations of
07e2d9518d5d78818b469de77f398f3439106abfAutomatic Updater inet_ntop contained an off by one error.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 710. [func] The forwarders statement now takes an optional
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein port. [RT #418]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 709. [bug] ANY or SIG queries for data with a TTL of 0
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein would return SERVFAIL. [RT #620]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 708. [bug] When building with --with-openssl, the openssl headers
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein included with BIND 9 should not be used. [RT #702]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 707. [func] The "filename" argument to named-checkzone is no
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein longer optional, to reduce confusion. [RT #612]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 706. [bug] Zones with an explicit "allow-update { none; };"
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein were considered dynamic and therefore not reloaded
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein on SIGHUP or "rndc reload".
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 705. [port] Work out resource limit type for use where rlim_t is
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein not available. [RT #695]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 704. [port] RLIMIT_NOFILE is not available on all platforms.
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews 703. [port] sys/select.h is needed on older platforms. [RT #695]
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews 702. [func] If the address 0.0.0.0 is seen in resolv.conf,
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews use 127.0.0.1 instead. [RT #693]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 701. [func] Root hints are now fully optional. Class IN
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews views use compiled-in hints by default, as
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews before. Non-IN views with no root hints now
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews provide authoritative service but not recursion.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews A warning is logged if a view has neither root
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews hints nor authoritative data for the root. [RT #696]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 700. [bug] $GENERATE range check was wrong. [RT #688]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 699. [bug] The lexer mishandled empty quoted strings. [RT #694]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 698. [bug] Aborting nsupdate with ^C would lead to several
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews race conditions.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 697. [bug] nsupdate was not compatible with the undocumented
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews BIND 8 behavior of ignoring TTLs in "update delete"
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews commands. [RT #693]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 696. [bug] lwresd would die with an assertion failure when passed
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews a zero-length name. [RT #692]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 695. [bug] If the resolver attempted to query a blackholed or
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews bogus server, the resolution would fail immediately.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 694. [bug] $GENERATE did not produce the last entry.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews [RT #682, #683]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 693. [bug] An empty lwres statement in named.conf caused
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews the server to crash while loading.
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 692. [bug] Deal with systems that have getaddrinfo() but not
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews gai_strerror(). [RT #679]
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews 691. [bug] Configuring per-view forwarders caused an assertion
5a4557e8de2951a2796676b5ec4b6a90caa5be14Mark Andrews failure. [RT #675, #734]
7208386cd37a2092c70eddf80cf29519b16c4c80Mark Andrews 690. [func] $GENERATE now supports DNAME. [RT #654]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 689. [doc] man pages are now installed. [RT #210]
507151045be68c671ffd4e2f37e17cdfa0376fc4Automatic Updater 688. [func] "make tags" now works on systems with the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater "Exuberant Ctags" etags.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 687. [bug] Only say we have IPv6, with sufficient functionality,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater if it has actually been tested. [RT #586]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 686. [bug] dig and nslookup can now be properly aborted during
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater blocking operations. [RT #568]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 685. [bug] nslookup should use the search list/domain options
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater from resolv.conf by default. [RT #405, #630]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 684. [bug] Memory leak with view forwarders. [RT #656]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 683. [bug] File descriptor leak in isc_lex_openfile().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 682. [bug] nslookup displayed SOA records incorrectly. [RT #665]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 681. [bug] $GENERATE specifying output format was broken. [RT #653]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 680. [bug] dns_rdata_fromstruct() mishandled options bigger
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater than 255 octets.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 679. [bug] $INCLUDE could leak memory and file descriptors on
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater reload. [RT #639]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 678. [bug] "transfer-format one-answer;" could trigger an assertion
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater failure. [RT #646]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 677. [bug] dnssec-signzone would occasionally use the wrong ttl
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater for database operations and fail. [RT #643]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 676. [bug] Log messages about lame servers to category
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 'lame-servers' rather than 'resolver', so as not
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to be gratuitously incompatible with BIND 8.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 675. [bug] TKEY queries could cause the server to leak
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 674. [func] Allow messages to be TSIG signed / verified using
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater a offset from the current time.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 673. [func] The server can now convert RFC1886-style recursive
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater lookup requests into RFC2874-style lookups, when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater enabled using the new option "allow-v6-synthesis".
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 672. [bug] The wrong time was in the "time signed" field when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater replying with BADTIME error.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 671. [bug] The message code was failing to parse a message with
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater no question section and a TSIG record. [RT #628]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 670. [bug] The lwres replacements for getaddrinfo and
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater getipnodebyname didn't properly check for the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater existence of the sockaddr sa_len field.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 669. [bug] dnssec-keygen now makes the public key file
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater non-world-readable for symmetric keys. [RT #403]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 668. [func] named-checkzone now reports multiple errors in master
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 667. [bug] On Linux, running named with the -u option and a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater non-world-readable configuration file didn't work.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 666. [bug] If a request sent by dig is longer than 512 bytes,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 665. [bug] Signed responses were not sent when the size of the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater TSIG + question exceeded the maximum message size.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 664. [bug] The t_tasks and t_timers module tests are now skipped
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater when building without threads, since they require
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 663. [func] Accept a size_spec, not just an integer, in the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater (unimplemented and ignored) max-ixfr-log-size option
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater for compatibility with recent versions of BIND 8.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 662. [bug] dns_rdata_fromtext() failed to log certain errors.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 661. [bug] Certain UDP IXFR requests caused an assertion failure
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater (mpctx->allocated == 0). [RT #355, #394, #623]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 660. [port] Detect multiple CPUs on HP-UX and IRIX.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 659. [performance] Rewrite the name compression code to be much faster.
fc8e82904a5a53fbc8b7e2f9262e3aa74ab20a2cAutomatic Updater 658. [cleanup] Remove all vestiges of 16 bit global compression.
fc8e82904a5a53fbc8b7e2f9262e3aa74ab20a2cAutomatic Updater 657. [bug] When a listen-on statement in an lwres block does not
fc8e82904a5a53fbc8b7e2f9262e3aa74ab20a2cAutomatic Updater specify a port, use 921, not 53. Also update the
fc8e82904a5a53fbc8b7e2f9262e3aa74ab20a2cAutomatic Updater listen-on documentation. [RT #616]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 656. [func] Treat an unescaped newline in a quoted string as
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater an error. This means that TXT records with missing
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater close quotes should have meaningful errors printed.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 655. [bug] Improve error reporting on unexpected eof when loading
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater zones. [RT #611]
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 654. [bug] Origin was being forgotten in TCP retries in dig.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 653. [bug] +defname option in dig was reversed in sense.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 652. [bug] zone_saveunique() did not report the new name.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 651. [func] The AD bit in responses now has the meaning
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater specified in <draft-ietf-dnsext-ad-is-secure>.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 650. [bug] SIG(0) records were being generated and verified
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater incorrectly. [RT #606]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 649. [bug] It was possible to join to an already running fctx
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater after it had "cloned" its events, but before it sent
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater them. In this case, the event of the newly joined
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater fetch would not contain the answer, and would
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater trigger the INSIST() in fctx_sendevents(). In
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater BIND 9.0, this bug did not trigger an INSIST(), but
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater caused the fetch to fail with a SERVFAIL result.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater [RT #588, #597, #605, #607]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 648. [port] Add support for pre-RFC2133 IPv6 implementations.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 647. [bug] Resolver queries sent after following multiple
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater referrals had excessively long retransmission
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater timeouts due to incorrectly counting the referrals
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater as "restarts".
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater didn't _cleanly_ fix the problem it was trying to fix.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 644. [bug] #622 needed more work. [RT #562]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 643. [bug] xfrin error messages made more verbose, added class
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater of the zone. [RT# 599]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 642. [bug] Break the exit_check() race in the zone module.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater --- 9.1.0b2 released ---
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 641. [bug] $GENERATE caused a uninitialized link to be used.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 640. [bug] Memory leak in error path could cause
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater "mpctx->allocated == 0" failure. [RT #584]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 639. [bug] Reading entropy from the keyboard would sometimes fail.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 638. [port] lib/isc/random.c needed to explicitly include time.h
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to get a prototype for time() when pthreads was not
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater being used. [RT #592]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 637. [port] Use isc_u?int64_t instead of (unsigned) long long in
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater lib/isc/print.c. Also allow lib/isc/print.c to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater be compiled even if the platform does not need it.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 636. [port] Shut up MSVC++ about a possible loss of precision
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater in the ISC__BUFFER_PUTUINT*() macros. [RT #592]
507151045be68c671ffd4e2f37e17cdfa0376fc4Automatic Updater 635. [bug] Reloading a server with a configured blackhole list
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater would cause an assertion. [RT #590]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 634. [bug] A log file will completely stop being written when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater it reaches the maximum size in all cases, not just
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater when versioning is also enabled. [RT #570]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 632. [bug] The index array of the journal file was
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater corrupted as it was written to disk.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 631. [port] Build without thread support on systems without
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 630. [bug] Locking failure in zone code. [RT #582]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 629. [bug] 9.1.0b1 dereferenced a null pointer and crashed
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater when responding to a UDP IXFR request.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 628. [bug] If the root hints contained only AAAA addresses,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater named would be unable to perform resolution.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 627. [bug] The EDNS0 blackhole detection code of change 324
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater waited for three retransmissions to each server,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater which takes much too long when a domain has many
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater name servers and all of them drop EDNS0 queries.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater Now we retry without EDNS0 after three consecutive
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater timeouts, even if they are all from different
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater servers. [RT #143]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 626. [bug] The lightweight resolver daemon no longer crashes
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater when asked for a SIG rrset. [RT #558]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 625. [func] Zones now inherit their class from the enclosing view.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 624. [bug] The zone object could get timer events after it had
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater been destroyed, causing a server crash. [RT #571]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 623. [func] Added "named-checkconf" and "named-checkzone" program
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater for syntax checking named.conf files and zone files,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 622. [bug] A canceled request could be destroyed before
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_request_destroy() was called. [RT #562]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 621. [port] Disable IPv6 at runtime if IPv6 sockets are unusable.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater This mostly affects Red Hat Linux 7.0, which has
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater conflicts between libc and the kernel.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 620. [bug] dns_master_load*inc() now require 'task' and 'load'
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to be non-null. Also 'done' will not be called if
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_master_load*inc() fails immediately. [RT #565]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 619. [placeholder]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 618. [bug] Queries to a signed zone could sometimes cause
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater an assertion failure.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 617. [bug] When using dynamic update to add a new RR to an
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater existing RRset with a different TTL, the journal
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater entries generated from the update did not include
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater explicit deletions and re-additions of the existing
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater RRs to update their TTL to the new value.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 616. [func] dnssec-signzone -t output now includes performance
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 615. [bug] dnssec-signzone did not like child keysets signed
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater by multiple keys.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 614. [bug] Checks for uninitialized link fields were prone
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to false positives, causing assertion failures.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater The checks are now disabled by default and may
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater be re-enabled by defining ISC_LIST_CHECKINIT.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 613. [bug] "rndc reload zone" now reloads primary zones.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater It previously only updated slave and stub zones,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater if an SOA query indicated an out of date serial.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 612. [cleanup] Shutup a ridiculously noisy HP-UX compiler that
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater complains relentlessly about how its treatment
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater of 'const' has changed as well as how casting
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater sometimes tightens alignment constraints.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 611. [func] allow-notify can be used to permit processing of
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater notify messages from hosts other than a slave's
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 610. [func] rndc dumpdb is now supported.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 609. [bug] getrrsetbyname() would crash lwresd if the server
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater found more SIGs than answers. [RT #554]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 608. [func] dnssec-signzone now adds a comment to the zone
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater with the time the file was signed.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 607. [bug] nsupdate would fail if it encountered a CNAME or
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater DNAME in a response to an SOA query. [RT #515]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 606. [bug] Compiling with --disable-threads failed due
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to isc_thread_self() being incorrectly defined
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater as an integer rather than a function.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 605. [func] New function isc_lex_getlasttokentext().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 604. [bug] The named.conf parser could print incorrect line
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater numbers when long comments were present.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 603. [bug] Make dig handle multiple types or classes on the same
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater query more correctly.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 602. [func] Cope automatically with UnixWare's broken
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater IN6_IS_ADDR_* macros. [RT #539]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 601. [func] Return a non-zero exit code if an update fails
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 600. [bug] Reverse lookups sometimes failed in dig, etc...
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 599. [func] Added four new functions to the libisc log API to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater support i18n messages. isc_log_iwrite(),
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater isc_log_ivwrite(), isc_log_iwrite1() and
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater isc_log_ivwrite1() were added.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 598. [bug] An update-policy statement would cause the server
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to assert while loading. [RT #536]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 597. [func] dnssec-signzone is now multi-threaded.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 596. [bug] DNS_RDATASLAB_FORCE and DNS_RDATASLAB_EXACT are
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater not mutually exclusive.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 595. [port] On Linux 2.2, socket() returns EINVAL when it
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater should return EAFNOSUPPORT. Work around this.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 594. [func] sdb drivers are now assumed to not be thread-safe
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater unless the DNS_SDBFLAG_THREADSAFE flag is supplied.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 593. [bug] If a secure zone was missing all its NXTs and
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater a dynamic update was attempted, the server entered
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater an infinite loop.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 592. [bug] The sig-validity-interval option now specifies a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater number of days, not seconds. This matches the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater documentation. [RT #529]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater --- 9.1.0b1 released ---
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 591. [bug] Work around non-reentrancy in openssl by disabling
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater pre-computation in keys.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 590. [doc] There are now man pages for the lwres library in
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 589. [bug] The server could deadlock if a zone was updated
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater while being transferred out.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 588. [bug] ctx->in_use was not being correctly initialized when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater when pushing a file for $INCLUDE. [RT #523]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 587. [func] A warning is now printed if the "allow-update"
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater option allows updates based on the source IP
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater address, to alert users to the fact that this
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater is insecure and becoming increasingly so as
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater servers capable of update forwarding are being
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 586. [bug] multiple views with the same name were fatal. [RT #516]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 585. [func] dns_db_addrdataset() and and dns_rdataslab_merge()
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater now support 'exact' additions in a similar manner to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_db_subtractrdataset() and dns_rdataslab_subtract().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 584. [func] You can now say 'notify explicit'; to suppress
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater notification of the servers listed in NS records
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater and notify only those servers listed in the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 'also-notify' option.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 583. [func] "rndc querylog" will now toggle logging of
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater queries, like "ndc querylog" in BIND 8.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 582. [bug] dns_zone_idetach() failed to lock the zone.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater [RT #199, #463]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 581. [bug] log severity was not being correctly processed.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 580. [func] Ignore trailing garbage on incoming DNS packets,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater for interoperability with broken server
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater implementations. [RT #491]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 579. [bug] nsupdate did not take a filename to read update from.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 578. [func] New config option "notify-source", to specify the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater source address for notify messages.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 577. [func] Log illegal RDATA combinations. e.g. multiple
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater singleton types, cname and other data.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 576. [doc] isc_log_create() description did not match reality.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 575. [bug] isc_log_create() was not setting internal state
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater correctly to reflect the default channels created.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 574. [bug] TSIG signed queries sent by the resolver would fail to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater have their responses validated and would leak memory.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 573. [bug] The journal files of IXFRed slave zones were
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater inadvertently discarded on server reload, causing
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater "journal out of sync with zone" errors on subsequent
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater reloads. [RT #482]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 572. [bug] Quoted strings were not accepted as key names in
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater address match lists.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 571. [bug] It was possible to create an rdataset of singleton
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater type which had more than one rdata. [RT #154]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 570. [bug] rbtdb.c allowed zones containing nodes which had
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater both a CNAME and "other data". [RT #154]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 569. [func] The DNSSEC AD bit will not be set on queries which
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater have not requested a DNSSEC response.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 568. [func] Add sample simple database drivers in contrib/sdb.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 567. [bug] Setting the zone transfer timeout to zero caused an
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater assertion failure. [RT #302]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 566. [func] New public function dns_timer_setidle().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 565. [func] Log queries more like BIND 8: query logging is now
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater done to category "queries", level "info". [RT #169]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 564. [func] Add sortlist support to lwresd.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 563. [func] New public functions dns_rdatatype_format() and
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_rdataclass_format(), for convenient formatting
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater of rdata type/class mnemonics in log messages.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 562. [cleanup] Moved lib/dns/*conf.c to bin/named where they belong.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 561. [func] The 'datasize', 'stacksize', 'coresize' and 'files'
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater clauses of the options{} statement are now implemented.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 560. [bug] dns_name_split did not properly the resulting prefix
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater when a maximal length bitstring label was split which
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater was preceded by another bitstring label. [RT #429]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 559. [bug] dns_name_split did not properly create the suffix
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater when splitting within a maximal length bitstring label.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 558. [func] New functions, isc_resource_getlimit and
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater isc_resource_setlimit.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 557. [func] Symbolic constants for libisc integral types.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 556. [func] The DNSSEC OK bit in the EDNS extended flags
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater is now implemented. Responses to queries without
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater this bit set will not contain any DNSSEC records.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 555. [bug] A slave server attempting a zone transfer could
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater crash with an assertion failure on certain
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater malformed responses from the master. [RT #457]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 554. [bug] In some cases, not all of the dnssec tools were
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater properly installed.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 553. [bug] Incoming zone transfers deferred due to quota
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater were not started when quota was increased but
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater only when a transfer in progress finished. [RT #456]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 552. [bug] We were not correctly detecting the end of all c-style
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater comments. [RT #455]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 551. [func] Implemented the 'sortlist' option.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 550. [func] Support unknown rdata types and classes.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 549. [bug] "make" did not immediately abort the build when a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater subdirectory make failed [RT #450].
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 548. [func] The lexer now ungets tokens more correctly.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 547. [placeholder]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 546. [func] Option 'lame-ttl' is now implemented.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 545. [func] Name limit and counting options removed from dig;
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater they didn't work properly, and cannot be correctly
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater implemented without significant changes.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 544. [func] Add statistics option, enable statistics-file option,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater add RNDC option "dump-statistics" to write out a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater query statistics file.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 543. [doc] The 'port' option is now documented.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 542. [func] Add support for update forwarding as required for
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater full compliance with RFC2136. It is turned off
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater by default and can be enabled using the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 'allow-update-forwarding' option.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 541. [func] Add bogus server support.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 540. [func] Add dialup support.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 539. [func] Support the blackhole option.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 537. [placeholder]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 536. [func] Use transfer-source{-v6} when sending refresh queries.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater Transfer-source{-v6} now take a optional port
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater parameter for setting the UDP source port. The port
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater parameter is ignored for TCP.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 535. [func] Use transfer-source{-v6} when forwarding update
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 534. [func] Ancestors have been removed from RBT chains. Ancestor
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater information can be discerned via node parent pointers.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 533. [func] Incorporated name hashing into the RBT database to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater improve search speed.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 532. [func] Implement DNS UPDATE pseudo records using
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater DNS_RDATA_UPDATE flag.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 531. [func] Rdata really should be initialized before being assigned
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to (dns_rdata_fromwire(), dns_rdata_fromtext(),
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_rdata_clone(), dns_rdata_fromregion()),
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater check that it is.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 530. [func] New function dns_rdata_invalidate().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 529. [bug] 521 contained a bug which caused zones to always
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater reload. [RT #410]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 528. [func] The ISC_LIST_XXXX macros now perform sanity checks
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater on their arguments. ISC_LIST_XXXXUNSAFE can be use
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to skip the checks however use with caution.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 527. [func] New function dns_rdata_clone().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 526. [bug] nsupdate incorrectly refused to add RRs with a TTL
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 525. [func] New arguments 'options' for dns_db_subtractrdataset(),
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater and 'flags' for dns_rdataslab_subtract() allowing you
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to request that the RR's must exist prior to deletion.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater DNS_R_NOTEXACT is returned if the condition is not met.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 524. [func] The 'forward' and 'forwarders' statement in
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater non-forward zones should work now.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 523. [doc] The source to the Administrator Reference Manual is
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater now an XML file using the DocBook DTD, and is included
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater in the distribution. The plain text version of the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater ARM is temporarily unavailable while we figure out
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater how to generate readable plain text from the XML.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 522. [func] The lightweight resolver daemon can now use
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater a real configuration file, and its functionality
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater can be provided by a name server. Also, the -p and -P
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater options to lwresd have been reversed.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 521. [bug] Detect master files which contain $INCLUDE and always
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater reload. [RT #196]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 520. [bug] Upgraded libtool to 1.3.5, which makes shared
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater library builds almost work on AIX (and possibly
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 519. [bug] dns_name_split() would improperly split some bitstring
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater labels, zeroing a few of the least significant bits in
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the prefix part. When such an improperly created
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater prefix was returned to the RBT database, the bogus
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater label was dutifully stored, corrupting the tree.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 518. [bug] The resolver did not realize that a DNAME which was
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater "the answer" to the client's query was "the answer",
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater and such queries would fail. [RT #399]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 517. [bug] The resolver's DNAME code would trigger an assertion
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater if there was more than one DNAME in the chain.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 516. [bug] Cache lookups which had a NULL node pointer, e.g.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater those by dns_view_find(), and which would match a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater DNAME, would trigger an INSIST(!search.need_cleanup)
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater assertion. [RT #399]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 515. [bug] The ssu table was not being attached / detached
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater by dns_zone_[sg]etssutable. [RT#397]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 514. [func] Retry refresh and notify queries if they timeout.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 513. [func] New functionality added to rdnc and server to allow
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater individual zones to be refreshed or reloaded.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 512. [bug] The zone transfer code could throw an exception with
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater an invalid IXFR stream.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 511. [bug] The message code could throw an assertion on an
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater out of memory failure. [RT #392]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 510. [bug] Remove spurious view notify warning. [RT #376]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 509. [func] Add support for write of zone files on shutdown.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 508. [func] dns_message_parse() can now do a best-effort
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater attempt, which should allow dig to print more invalid
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater and dns_view_flushanddetach().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 506. [func] Do not fail to start on errors in zone files.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 505. [bug] nsupdate was printing "unknown result code". [RT #373]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 504. [bug] The zone was not being marked as dirty when updated via
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 503. [bug] dumptime was not being set along with
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater DNS_ZONEFLG_NEEDDUMP.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 502. [func] On a SERVFAIL reply, DiG will now try the next server
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater in the list, unless the +fail option is specified.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 501. [bug] Incorrect port numbers were being displayed by
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater nslookup. [RT #352]
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater 500. [func] Nearly useless +details option removed from DiG.
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater 499. [func] In DiG, specifying a class with -c or type with -t
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater changes command-line parsing so that classes and
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater types are only recognized if following -c or -t.
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater This allows hosts with the same name as a class or
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater type to be looked up.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 498. [doc] There is now a man page for "dig"
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 497. [bug] The error messages printed when an IP match list
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater contained a network address with a nonzero host
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater part where not sufficiently detailed. [RT #365]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 496. [bug] named didn't sanity check numeric parameters. [RT #361]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 495. [bug] nsupdate was unable to handle large records. [RT #368]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 494. [func] Do not cache NXDOMAIN responses for SOA queries.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater for SOA queries. This makes it easier to locate
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the containing zone without polluting intermediate
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 492. [bug] attempting to reload a zone caused the server fail
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to shutdown cleanly. [RT #360]
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater 491. [bug] nsupdate would segfault when sending certain
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater prerequisites with empty RDATA. [RT #356]
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater 490. [func] When a slave/stub zone has not yet successfully
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater obtained an SOA containing the zone's configured
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater retry time, perform the SOA query retries using
ea21c734ff027f23f289f8c6507a4e79984e4830Automatic Updater exponential backoff. [RT #337]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 489. [func] The zone manager now has a "i/o" queue.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 488. [bug] Locks weren't properly destroyed in some cases.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 487. [port] flockfile() is not defined on all systems.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 486. [bug] nslookup: "set all" and "server" commands showed
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the incorrect port number if a port other than 53
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater was specified. [RT #352]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 485. [func] When dig had more than one server to query, it would
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater send all of the messages at the same time. Add
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater rate limiting of the transmitted messages.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 484. [bug] When the server was reloaded after removing addresses
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater from the named.conf "listen-on" statement, sockets
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater were still listening on the removed addresses due
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to reference count loops. [RT #325]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 483. [bug] nslookup: "set all" showed a "search" option but it
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater was not settable.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 482. [bug] nslookup: a plain "server" or "lserver" should be
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater treated as a lookup.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 481. [bug] nslookup:get_next_command() stack size could exceed
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater per thread limit.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 480. [bug] strtok() is not thread safe. [RT #349]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 479. [func] The test suite can now be run by typing "make check"
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater or "make test" at the top level.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 478. [bug] "make install" failed if the directory specified with
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater --prefix did not already exist.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 477. [bug] The the isc-config.sh script could be installed before
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater its directory was created. [RT #324]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 476. [bug] A zone could expire while a zone transfer was in
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater progress triggering a INSIST failure. [RT #329]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 475. [bug] query_getzonedb() sometimes returned a non-null version
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater on failure. This caused assertion failures when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater generating query responses where names subject to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater additional section processing pointed to a zone
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to which access had been denied by means of the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater allow-query option. [RT #336]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 474. [bug] The mnemonic of the CHAOS class is CH according to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater RFC1035, but it was printed and read only as CHAOS.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater We now accept both forms as input, and print it
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater as CH. [RT #305]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 473. [bug] nsupdate overran the end of the list of name servers
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater when no servers could be reached, typically causing
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater it to print the error message "dns_request_create:
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater not implemented".
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 472. [bug] Off-by-one error caused isc_time_add() to sometimes
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater produce invalid time values.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 471. [bug] nsupdate didn't compile on HP/UX 10.20
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 470. [func] $GENERATE is now supported. See also
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 469. [bug] "query-source address * port 53;" now works.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 468. [bug] dns_master_load*() failed to report file and line
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater number in certain error conditions.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 467. [bug] dns_master_load*() failed to log an error if
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater pushfile() failed.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 466. [bug] dns_master_load*() could return success when it failed.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 465. [cleanup] Allow 0 to be set as an omapi_value_t value by
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater omapi_value_storeint().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 464. [cleanup] Build with openssl's RSA code instead of dnssafe.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 463. [bug] nsupdate sent malformed SOA queries to the second
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater and subsequent name servers in resolv.conf if the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater query sent to the first one failed.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 462. [bug] --disable-ipv6 should work now.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 461. [bug] Specifying an unknown key in the "keys" clause of the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater "controls" statement caused a NULL pointer dereference.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 460. [bug] Much of the DNSSEC code only worked with class IN.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 459. [bug] Nslookup processed the "set" command incorrectly.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 458. [bug] Nslookup didn't properly check class and type values.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 457. [bug] Dig/host/hslookup didn't properly handle connect
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater timeouts in certain situations, causing an
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater unnecessary warning message to be printed.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 456. [bug] Stub zones were not resetting the refresh and expire
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater counters, loadtime or clearing the DNS_ZONE_REFRESH
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater (refresh in progress) flag upon successful update.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater This disabled further refreshing of the stub zone,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater causing it to eventually expire. [RT #300]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 455. [doc] Document IPv4 prefix notation does not require a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dotted decimal quad but may be just dotted decimal.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 454. [bug] Enforce dotted decimal and dotted decimal quad where
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater documented as such in named.conf. [RT #304, RT #311]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 453. [bug] Warn if the obsolete option "maintain-ixfr-base"
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater is specified in named.conf. [RT #306]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 452. [bug] Warn if the unimplemented option "statistics-file"
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater is specified in named.conf. [RT #301]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 451. [func] Update forwarding implemented.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 450. [func] New function ns_client_sendraw().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 449. [bug] isc_bitstring_copy() only works correctly if the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater two bitstrings have the same lsb0 value, but this
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater requirement was not documented, nor was there a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater REQUIRE for it.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 448. [bug] Host output formatting change, to match v8. [RT #255]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 447. [bug] Dig didn't properly retry in TCP mode after
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater a truncated reply. [RT #277]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 446. [bug] Confusing notify log message. [RT #298]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater bitstring triggered a REQUIRE statement. The REQUIRE
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater statement was incorrect. [RT #297]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 444. [func] "recursion denied" messages are always logged at
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater debug level 1, now, rather than sometimes at ERROR.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater This silences these warnings in the usual case, where
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater some clients set the RD bit in all queries.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 443. [bug] When loading a master file failed because of an
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater unrecognized RR type name, the error message
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater did not include the file name and line number.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 442. [bug] TSIG signed messages that did not match any view
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater crashed the server. [RT #290]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 441. [bug] Nodes obscured by a DNAME were inaccessible even
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater when DNS_DBFIND_GLUEOK was set.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 440. [func] New function dns_zone_forwardupdate().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 439. [func] New function dns_request_createraw().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 438. [func] New function dns_message_getrawmessage().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 437. [func] Log NOTIFY activity to the notify channel.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater which sometimes happens on Linux, named would enter
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater a busy loop. Also, unexpected socket errors were
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater not logged at a high enough logging level to be
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater useful in diagnosing this situation. [RT #275]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 435. [bug] dns_zone_dump() overwrote existing zone files
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater rather than writing to a temporary file and
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater renaming. This could lead to empty or partial
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater zone files being left around in certain error
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater conditions involving the initial transfer of a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater slave zone, interfering with subsequent server
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater startup. [RT #282]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 434. [func] New function isc_file_isabsolute().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 433. [func] isc_base64_decodestring() now accepts newlines
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater within the base64 data. This makes it possible
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to break up the key data in a "trusted-keys"
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater statement into multiple lines. [RT #284]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 432. [func] Added refresh/retry jitter. The actual refresh/
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater retry time is now a random value between 75% and
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 100% of the configured value.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 431. [func] Log at ISC_LOG_INFO when a zone is successfully
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 430. [bug] Rewrote the lightweight resolver client management
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater code to handle shutdown correctly and general
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 429. [bug] The space reserved for a TSIG record in a response
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater was 2 bytes too short, leading to message
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater generation failures.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater DNS_R_BADDB for nodes which had neither NXT nor SIG NXT
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater (e.g. glue). This could cause SERVFAILs when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater generating negative responses in a secure zone.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 427. [bug] Avoid going into an infinite loop when the validator
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater gets a negative response to a key query where the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater records are signed by the missing key.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 426. [bug] Attempting to generate an oversized RSA key could
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater cause dnssec-keygen to dump core.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 425. [bug] Warn about the auth-nxdomain default value change
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater if there is no auth-nxdomain statement in the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater config file. [RT #287]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 424. [bug] notify_createmessage() could trigger an assertion
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater failure when creating the notify message failed,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater e.g. due to corrupt zones with multiple SOA records.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 423. [bug] When responding to a recursive query, errors that occur
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater after following a CNAME should cause the query to fail.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 422. [func] get rid of isc_random_t, and make isc_random_get()
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater and isc_random_jitter() use rand() internally
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater instead of local state. Note that isc_random_*()
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater functions are only for weak, non-critical "randomness"
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater such as timing jitter and such.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 421. [bug] nslookup would exit when given a blank line as input.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 420. [bug] nslookup failed to implement the "exit" command.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 419. [bug] The certificate type PKIX was misspelled as SKIX.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 418. [bug] At debug levels >= 10, getting an unexpected
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater socket receive error would crash the server
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater while trying to log the error message.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 417. [func] Add isc_app_block() and isc_app_unblock(), which
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater allow an application to handle signals while
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 416. [bug] Slave zones with no master file tried to use a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater NULL pointer for a journal file name when they
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater received an IXFR. [RT #273]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 415. [bug] The logging code leaked file descriptors.
b6f3a9131ec5bff166be3efb172c0492e53f932bAutomatic Updater 414. [bug] Server did not shut down until all incoming zone
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater transfers were finished.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 413. [bug] Notify could attempt to use the zone database after
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater it had been unloaded. [RT#267]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 412. [bug] named -v didn't print the version.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 411. [bug] A typo in the HS A code caused an assertion failure.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 410. [bug] lwres_gethostbyname() and company set lwres_h_errno
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to a random value on success.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 409. [bug] If named was shut down early in the startup
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater process, ns_omapi_shutdown() would attempt to lock
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater an uninitialized mutex. [RT #262]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 408. [bug] stub zones could leak memory and reference counts if
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater all the masters were unreachable.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 407. [bug] isc_rwlock_lock() would needlessly block
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater readers when it reached the read quota even
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater if no writers were waiting.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 406. [bug] Log messages were occasionally lost or corrupted
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater due to a race condition in isc_log_doit().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 405. [func] Add support for selective forwarding (forward zones)
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 404. [bug] The request library didn't completely work with IPv6.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 403. [bug] "host" did not use the search list.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 402. [bug] Treat undefined acls as errors, rather than
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater warning and then later throwing an assertion.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 401. [func] Added simple database API.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 400. [bug] SIG(0) signing and verifying was done incorrectly.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 399. [bug] When reloading the server with a config file
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater containing a syntax error, it could catch an
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater assertion failure trying to perform zone
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater maintenance on, or sending notifies from,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater tentatively created zones whose views were
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater never fully configured and lacked an address
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater database and request manager.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 398. [bug] "dig" sometimes caught an assertion failure when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater using TSIG, depending on the key length.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 397. [func] Added utility functions dns_view_gettsig() and
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_view_getpeertsig().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 396. [doc] There is now a man page for "nsupdate"
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 395. [bug] nslookup printed incorrect RR type mnemonics
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater for RRs of type >= 21 [RT #237].
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 394. [bug] Current name was not propagated via $INCLUDE.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 393. [func] Initial answer while loading (awl) support.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater Entry points: dns_master_loadfileinc(),
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_master_loadstreaminc(), dns_master_loadbufferinc().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater Note: calls to dns_master_load*inc() should be rate
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater be rate limited so as to not use up all file
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater not support the given address family requested.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 390. [func] The function dns_zone_setdbtype() now takes
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater an argc/argv style vector of words and sets
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater both the zone database type and its arguments,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater making the functions dns_zone_adddbarg()
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater and dns_zone_cleardbargs() unnecessary.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 389. [bug] Attempting to send a request over IPv6 using
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_request_create() on a system without IPv6
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater support caused an assertion failure [RT #235].
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 388. [func] dig and host can now do reverse ipv6 lookups.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 387. [func] Add dns_byaddr_createptrname(), which converts
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater an address into the name used by a PTR query.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 386. [bug] Missing strdup() of ACL name caused random
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater ACL matching failures [RT #228].
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater and dns_zt_print().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater of 2147483647.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 383. [func] When writing a master file, print the SOA and NS
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater records (and their SIGs) before other records.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 382. [bug] named -u failed on many Linux systems where the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater libc provided kernel headers do not match
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the current kernel.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 381. [bug] Check for IPV6_RECVPKTINFO and use it instead of
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater IPV6_PKTINFO if found. [RT #229]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 380. [bug] nsupdate didn't work with IPv6.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 379. [func] New library function isc_sockaddr_anyofpf().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 378. [func] named and lwresd will log the command line arguments
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater they were started with in the "starting ..." message.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 377. [bug] When additional data lookups were refused due to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater "allow-query", the databases were still being
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater attached causing reference leaks.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 376. [bug] The server should always use good entropy when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater performing cryptographic functions needing entropy.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 375. [bug] Per-zone "allow-query" did not properly override the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater view/global one for CNAME targets and additional
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater data [RT #220].
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 374. [bug] SOA in authoritative negative responses had wrong TTL.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 373. [func] nslookup is now installed by "make install".
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 372. [bug] Deal with Microsoft DNS servers appending two bytes of
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater garbage to zone transfer requests.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 371. [bug] At high debug levels, doing an outgoing zone transfer
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater of a very large RRset could cause an assertion failure
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater during logging.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 370. [bug] The error messages for roll-forward failures were
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 369. [func] Support new named.conf options, view and zone
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater max-retry-time, min-retry-time,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater max-refresh-time, min-refresh-time.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 368. [func] Restructure the internal ".bind" view so that more
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater zones can be added to it.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 367. [bug] Allow proper selection of server on nslookup command
65e9adc0e8185883d0de6690683ef4c2a0cc968bAutomatic Updater 366. [func] Allow use of '-' batch file in dig for stdin.
65e9adc0e8185883d0de6690683ef4c2a0cc968bAutomatic Updater 365. [bug] nsupdate -k leaked memory.
65e9adc0e8185883d0de6690683ef4c2a0cc968bAutomatic Updater 364. [func] Added additional-from-{cache,auth}
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 363. [placeholder]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 362. [bug] rndc no longer aborts if the configuration file is
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater missing an options statement. [RT #209]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 361. [func] When the RBT find or chain functions set the name and
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater origin for a node that stores the root label
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the name is now set to an empty name, instead of ".",
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to simplify later use of the name and origin by
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_name_concatenate(), dns_name_totext() or
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_name_format().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 360. [func] dns_name_totext() and dns_name_format() now allow
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater an empty name to be passed, which is formatted as "@".
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 359. [bug] dnssec-signzone occasionally signed glue records.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 358. [cleanup] Rename the intermediate files used by the dnssec
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 357. [bug] The zone file parser crashed if the argument
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to $INCLUDE was a quoted string.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 356. [cleanup] isc_task_send no longer requires event->sender to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 355. [func] Added isc_dir_createunique(), similar to mkdtemp().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 354. [doc] Man pages for the dnssec tools are now included in
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the distribution, in doc/man/dnssec.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 353. [bug] double increment in lwres/gethost.c:copytobuf().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 352. [bug] Race condition in dns_client_t startup could cause
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater an assertion failure.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater signed query could crash the server.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 350. [bug] Also-notify lists specified in the global options
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater block were not correctly reference counted, causing
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater a memory leak.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 349. [bug] Processing a query with the CD bit set now works
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 348. [func] New boolean named.conf options 'additional-from-auth'
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater and 'additional-from-cache' now supported in view and
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater global options statement.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 347. [bug] Don't crash if an argument is left off options in dig.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 346. [placeholder]
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 345. [bug] Large-scale changes/cleanups to dig:
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater * Significantly improve structure handling
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater * Don't pre-load entire batch files
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater * Fix SIGINT handling
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater * Shorten timeouts to match v8's behavior
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 344. [bug] When shutting down, lwresd sometimes tried
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater to shut down its client tasks twice,
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater triggering an assertion.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 343. [bug] Although zone maintenance SOA queries and
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater notify requests were signed with TSIG keys
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater when configured for the server in case,
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater the TSIG was not verified on the response.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 342. [bug] The wrong name was being passed to
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater dns_name_dup() when generating a TSIG
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater key using TKEY.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 341. [func] Support 'key' clause in named.conf zone masters
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater statement to allow authentication via TSIG keys:
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 10.0.0.1 port 5353 key "foo";
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 340. [bug] The top-level COPYRIGHT file was missing from
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the distribution.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 339. [bug] DNSSEC validation of the response to an ANY
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater query at a name with a CNAME RR in a secure
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater zone triggered an assertion failure.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 338. [bug] lwresd logged to syslog as named, not lwresd.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 337. [bug] "dig" did not recognize "nsap-ptr" as an RR type
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater on the command line.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 336. [bug] "dig -f" used 64 k of memory for each line in
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the file. It now uses much less, though still
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater proportionally to the file size.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 335. [bug] named would occasionally attempt recursion when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater it was disallowed or undesired.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 334. [func] Added hmac-md5 to libisc.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 333. [bug] The resolver incorrectly accepted referrals to
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater domains that were not parents of the query name,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater causing assertion failures.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 332. [func] New function dns_name_reset().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 331. [bug] Only log "recursion denied" if RD is set. [RT #178]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 330. [bug] Many debugging messages were partially formatted
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater even when debugging was turned off, causing a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater significant decrease in query performance.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 329. [func] omapi_auth_register() now takes a size_t argument for
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the length of a key's secret data. Previously
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater OMAPI only stored secrets up to the first NUL byte.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 328. [func] Added isc_base64_decodestring().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 327. [bug] rndc.conf parser wasn't correctly recognizing an IP
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater address where a host specification was required.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 326. [func] 'keys' in an 'inet' control statement is now
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater required and must have at least one item in it.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater A "not supported" warning is now issued if a 'unix'
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater control channel is defined.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 325. [bug] isc_lex_gettoken was processing octal strings when
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater ISC_LEXOPT_CNUMBER was not set.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 324. [func] In the resolver, turn EDNS0 off if there is no
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater response after a number of retransmissions.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater This is to allow queries some chance of succeeding
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater even if all the authoritative servers of a zone
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater silently discard EDNS0 requests instead of
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater sending an error response like they ought to.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater Because of this, servers authoritative for a parent
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater and grandchild zone but not authoritative for the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater intervening child zone did not correctly issue
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater referrals to the servers of the child zone.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 322. [bug] Queries for KEY RRs are now sent to the parent
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater server before the authoritative one, making
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater DNSSEC insecurity proofs work in many cases
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater where they previously didn't.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 321. [bug] When synthesizing a CNAME RR for a DNAME
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater response, query_addcname() failed to initialize
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater the type and class of the CNAME dns_rdata_t,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater causing random failures.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 320. [func] Multiple rndc changes: parses an rndc.conf file,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater uses authentication to talk to named, command
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater line syntax changed. This will all be described
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 319. [func] The named.conf "controls" statement is now used
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to configure the OMAPI command channel.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 318. [func] dns_c_ndcctx_destroy() could never return anything
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater except ISC_R_SUCCESS; made it have void return instead.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 317. [func] Use callbacks from libomapi to determine if a
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater new connection is valid, and if a key requested
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater to be used with that connection is valid.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 316. [bug] Generate a warning if we detect an unexpected <eof>
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater but treat as <eol><eof>.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 315. [bug] Handle non-empty blanks lines. [RT #163]
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 314. [func] The named.conf controls statement can now have
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater more than one key specified for the inet clause.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 313. [bug] When parsing resolv.conf, don't terminate on an
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater error. Instead, parse as much as possible, but
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater still return an error if one was found.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 312. [bug] Increase the number of allowed elements in the
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater resolv.conf search path from 6 to 8. If there
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater are more than this, ignore the remainder rather
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater than returning a failure in lwres_conf_parse.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 311. [bug] lwres_conf_parse failed when the first line of
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater resolv.conf was empty or a comment.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 310. [func] Changes to named.conf "controls" statement (inet
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater - support "keys" clause
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater inet * port 1024
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater allow { any; } keys { "foo"; }
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater - allow "port xxx" to be left out of statement,
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater in which case it defaults to omapi's default port
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 309. [bug] When sending a referral, the server did not look
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater for name server addresses as glue in the zone
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater holding the NS RRset in the case where this zone
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater was not the same as the one where it looked for
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater name server addresses as authoritative data.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 308. [bug] Treat a SOA record not at top of zone as an error
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater when loading a zone. [RT #154]
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 307. [bug] When canceling a query, the resolver didn't check for
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater isc_socket_sendto() calls that did not yet have their
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater completion events posted, so it could (rarely) end up
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater destroying the query context and then want to use
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater it again when the send event posted, triggering an
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater assertion as it tried to cancel an already-canceled
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater query. [RT #77]
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 306. [bug] Reading HMAC-MD5 private key files didn't work.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 305. [bug] When reloading the server with a config file
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater containing a syntax error, it could catch an
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater assertion failure trying to perform zone
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater maintenance on tentatively created zones whose
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater views were never fully configured and lacked
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater an address database.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater are listed in resolv.conf, silently ignore them
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater instead of returning failure.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 303. [bug] Add additional sanity checks to differentiate a AXFR
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater response vs a IXFR response. [RT #157]
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 302. [bug] In dig, host, and nslookup, MXNAME should be large
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater enough to hold any legal domain name in presentation
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater format + terminating NULL.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 301. [bug] Uninitialized pointer in host:printmessage(). [RT #159]
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater on platforms lacking IPv6 because each included their
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater own ipv6 header file for the missing definitions. Now
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater each library's ipv6.h defines the wrapper symbol of
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater the other (ISC_IPV6_H and LWRES_IPV6_H).
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 299. [cleanup] Get the user and group information before changing the
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater root directory, so the administrator does not need to
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater keep a copy of the user and group databases in the
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater chroot'ed environment. Suggested by Hakan Olsson.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 298. [bug] A mutex deadlock occurred during shutdown of the
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater interface manager under certain conditions.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater Digital Unix systems were the most affected.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 297. [bug] Specifying a key name that wasn't fully qualified
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater in certain parts of the config file could cause
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater an assertion failure.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 296. [bug] "make install" from a separate build directory
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater failed unless configure had been run in the source
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater directory, too.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 295. [bug] When invoked with type==CNAME and a message
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater not constructed by dns_message_parse(),
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater dns_message_findname() failed to find anything
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater due to checking for attribute bits that are set
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater only in dns_message_parse(). This caused an
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater infinite loop when constructing the response to
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater an ANY query at a CNAME in a secure zone.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 294. [bug] If we run out of space in while processing glue
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater when reading a master file and commit "current name"
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater reverts to "name_current" instead of staying as
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 293. [port] Add support for FreeBSD 4.0 system tests.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 292. [bug] Due to problems with the way some operating systems
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater handle simultaneous listening on IPv4 and IPv6
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater addresses, the server no longer listens on IPv6
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater addresses by default. To revert to the previous
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater behavior, specify "listen-on-v6 { any; };" in
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater the config file.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 291. [func] Caching servers no longer send outgoing queries
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater over TCP just because the incoming recursive query
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater was a TCP one.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 290. [cleanup] +twiddle option to dig (for testing only) removed.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 289. [cleanup] dig is now installed in $bindir instead of $sbindir.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater host is now installed in $bindir. (Be sure to remove
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater any $sbindir/dig from a previous release.)
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 288. [func] rndc is now installed by "make install" into $sbindir.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 287. [bug] rndc now works again as "rndc 127.1 reload" (for
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater only that task). Parsing its configuration file and
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater using digital signatures for authentication has been
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater disabled until named supports the "controls" statement,
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 286. [bug] On Solaris 2, when named inherited a signal state
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater where SIGHUP had the SIG_IGN action, SIGHUP would
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater be ignored rather than causing the server to reload
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater its configuration.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 285. [bug] A change made to the dst API for beta4 inadvertently
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater broke OMAPI's creation of a dst key from an incoming
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater message, causing an assertion to be triggered. Fixed.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 284. [func] The DNSSEC key generation and signing tools now
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater generate randomness from keyboard input on systems
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 283. [cleanup] The 'lwresd' program is now a link to 'named'.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater too big for an unsigned long.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 281. [bug] Fixed list of recognized config file category names.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 280. [func] Add isc-config.sh, which can be used to more
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater easily build applications that link with
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater our libraries.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 279. [bug] Private omapi function symbols shared between
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater two or more files in libomapi.a were not namespace
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater protected using the ISC convention of starting with
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater the library name and two underscores ("omapi__"...)
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 278. [bug] bin/named/logconf.c:category_fromconf() didn't take
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater note of when isc_log_categorybyname() wasn't able
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater to find the category name and would then apply the
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater channel list of the unknown category to all categories.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 277. [bug] isc_log_categorybyname() and isc_log_modulebyname()
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater would fail to find the first member of any category
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater or module array apart from the internal defaults.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater Thus, for example, the "notify" category was improperly
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater configured by named.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 276. [bug] dig now supports maximum sized TCP messages.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 275. [bug] The definition of lwres_gai_strerror() was missing
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater the lwres_ prefix.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 274. [bug] TSIG AXFR verify failed when talking to a BIND 8
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 273. [func] The default for the 'transfer-format' option is
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater now 'many-answers'. This will break zone transfers
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater to BIND 4.9.5 and older unless there is an explicit
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 'one-answer' configuration.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 272. [bug] The sending of large TCP responses was canceled
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater in mid-transmission due to a race condition
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater caused by the failure to set the client object's
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater "newstate" variable correctly when transitioning
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater to the "working" state.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 271. [func] Attempt to probe the number of cpus in named
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater if unspecified rather than defaulting to 1.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 270. [func] Allow maximum sized TCP answers.
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater 269. [bug] Failed DNSSEC validations could cause an assertion
c821eb704848afd1f2e70c77c70e7b6ce0b92989Automatic Updater failure by causing clone_results() to be called with
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater with hevent->node == NULL.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 268. [doc] A plain text version of the Administrator
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater Reference Manual is now included in the distribution,
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 267. [func] Nsupdate is now provided in the distribution.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 266. [bug] zone.c:save_nsrrset() node was not initialized.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 265. [bug] dns_request_create() now works for TCP.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 264. [func] Dispatch can not take TCP sockets in connecting
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater state. Set DNS_DISPATCHATTR_CONNECTED when calling
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater dns_dispatch_createtcp() for connected TCP sockets
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater or call dns_dispatch_starttcp() when the socket is
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 263. [func] New logging channel type 'stderr'
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater channel some-name {
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater severity error;
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 262. [bug] 'master' was not initialized in zone.c:stub_callback().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 261. [func] Add dns_zone_markdirty().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 260. [bug] Running named as a non-root user failed on Linux
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater kernels new enough to support retaining capabilities
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater after setuid().
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 259. [func] New random-device and random-seed-file statements
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater for global options block of named.conf. Both accept
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater a single string argument.
98b5a9d1099f72169c90de39712fc4f63e9d990eAutomatic Updater 258. [bug] Fixed printing of lwres_addr_t.address field.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 257. [bug] The server detached the last zone manager reference
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein too early, while it could still be in use by queries.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein This manifested itself as assertion failures during the
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein shutdown process for busy name servers. [RT #133]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 256. [func] isc_ratelimiter_t now has attach/detach semantics, and
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein isc_ratelimiter_shutdown guarantees that the rate
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein limiter is detached from its task.
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 255. [func] New function dns_zonemgr_attach().
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 254. [bug] Suppress "query denied" messages on additional data
71c66a876ecca77923638d3f94cc0783152b2f03Mark Andrews --- 9.0.0b4 released ---
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 253. [func] resolv.conf parser now recognizes ';' and '#' as
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein comments (anywhere in line, not just as the beginning).
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein 252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which