CHANGES revision 98a7f8c7ae44bb98d5469cb3a4240c59abceba7f
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4222. [func] Bias IPv6 servers when selecting the next server to
00cf03a1ca1624dac1fecc85f43fc34f8806aff9Luke Smith query. [RT #40836]
00cf03a1ca1624dac1fecc85f43fc34f8806aff9Luke Smith4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai4220. [doc] Improve documentation for zone-statistics.
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai EGAIN when these soft error are not retried for
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai isc_socket_send*().
00cf03a1ca1624dac1fecc85f43fc34f8806aff9Luke Smith4218. [bug] Potential null pointer dereference on out of memory
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai if mmap is not supported. [RT #40777]
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4217. [protocol] Add support for CSYNC. [RT #40532]
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4216. [cleanup] Silence static analysis warnings. [RT #40649]
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4215. [bug] nsupdate: skip to next request on GSSTKEY create
00cf03a1ca1624dac1fecc85f43fc34f8806aff9Luke Smith failure. [RT #40685]
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4214. [protocol] Add support for TALINK. [RT #40544]
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4213. [bug] Don't reuse a cache across multiple classes.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4212. [func] Re-query if we get a bad client cookie returned over
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai UDP. [RT #40748]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4211. [bug] Ensure that lwresd gets at least one task to work
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai with if enabled. [RT #40652]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4210. [cleanup] Silence use after free false positive. [RT #40743]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4209. [bug] Address resource leaks in dlz modules. [RT #40654]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4208. [bug] Address null pointer dereferences on out of memory.
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4207. [bug] Handle class mismatches with raw zone files.
00cf03a1ca1624dac1fecc85f43fc34f8806aff9Luke Smith4206. [bug] contrib: fixed a possible NULL dereference in
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai DLZ wildcard module. [RT #40745]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4205. [bug] 'named-checkconf -p' could include unwanted spaces
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai when printing tuples with unset optional fields.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4204. [bug] 'dig +trace' failed to lookup the correct type if
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai the initial root ns query was retried. [RT #40296]
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4203. [test] The rrchecker system test now tests conversion
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai to and from unkonwn-type format. [RT #40584]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4202. [bug] isccc_cc_fromwire() could return an incorrect
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai result. [RT #40614]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4201. [func] The default preferred-glue is now the address record
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai type of the transport the query was received
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai over. [RT #40468]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4200. [cleanup] win32: update BINDinstall to be BIND release
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai independent. [RT #38915]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai [RT #40545] [RT #40547] [RT #40561] [RT #40563]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4198. [placeholder]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
00cf03a1ca1624dac1fecc85f43fc34f8806aff9Luke Smith4196. [doc] Improve how "enum + other" types are documented.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4194. [bug] named-checkconf -p failed to properly print a port
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai range. [RT #40634]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4193. [bug] Handle broken servers that return BADVERS incorrectly.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4192. [bug] The default rrset-order of random was not always being
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai applied. [RT #40456]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai as per RFC 6763. [RT #37889]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4190. [protocol] Accept Active Diretory gc._msdcs.<forest> name as
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai valid with check-names. <forest> still needs to be
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai LDH. [RT #40399]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai4189. [cleanup] Don't exit on overly long tokens in named.conf.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai4188. [bug] Support HTTP/1.0 client properly on the statistics
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai channel. [RT #40261]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4187. [func] When any RR type implementation doesn't
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai implement totext() for the RDATA's wire
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai representation and returns ISC_R_NOTIMPLEMENTED,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai such RDATA is now printed in unknown
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai presentation format (RFC 3597). RR types affected
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai include LOC(29) and APL(42). [RT #40317].
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4186. [bug] Fixed an RPZ bug where a QNAME would be matched
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai against a policy RR with wildcard owner name
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai (trigger) where the QNAME was the wildcard owner
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai name's parent. For example, the bug caused a query
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai with QNAME "example.com" to match a policy RR with
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai "*.example.com" as trigger. [RT #40357]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai owner name (trigger) would prevent another policy RR
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai with its parent owner name from being
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai loaded. For example, the bug caused a policy RR
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai with trigger "example.com" to not have any
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai effect when a previous policy RR with trigger
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai "*.example.com" existed in that RPZ zone.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4184. [bug] Fixed a possible memory leak in name compression
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai when rendering long messages. (Also, improved
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai wire_test for testing such messages.) [RT #40375]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4183. [cleanup] Use timing-safe memory comparisons in cryptographic
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai code. Also, the timing-safe comparison functions have
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai been renamed to avoid possible confusion with
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai memcmp(). Thanks to Loganaden Velvindron of
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai AFRINIC. [RT #40148]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4182. [cleanup] Use mnemonics for RR class and type comparisons.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4181. [bug] Queued notify messages could be dequeued from the
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai wrong rate limiter queue. [RT #40350]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4180. [bug] Error responses in pipelined queries could
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai cause a crash in client.c. [RT #40289]
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4179. [bug] Fix double frees in getaddrinfo() in libirs.
98c1ab155c0e2148f69291b1abe1007c9d5a08e8Satyen Desai4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai text. [RT #40274]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4177. [bug] Fix assertion failure in parsing NSAP records from
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai text. [RT #40285]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4176. [bug] Address race issues with lwresd. [RT #40284]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4175. [bug] TKEY with GSS-API keys needed bigger buffers.
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4174. [bug] "dnssec-coverage -r" didn't handle time unit
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai suffixes correctly. [RT #38444]
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai4173. [bug] dig +sigchase was not properly matching the trusted
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai key. [RT #40188]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4171. [bug] Fixed incorrect class checks in TSIG RR
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai implementation. [RT #40287]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4170. [security] An incorrect boundary check in the OPENPGPKEY
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai rdatatype could trigger an assertion failure.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai (CVE-2015-5986) [RT #40286]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4169. [test] Added a 'wire_test -d' option to read input as
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai raw binary data, for use as a fuzzing harness.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4168. [security] A buffer accounting error could trigger an
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai assertion failure when parsing certain malformed
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai DNSSEC keys. (CVE-2015-5722) [RT #40212]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4167. [func] Update rndc's usage output to include recently added
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai commands. Thanks to Tony Finch for submitting a
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai patch. [RT #40010]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4166. [func] Print informative output from rndc showzone when
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai allow-new-zones is not enabled for a view. Thanks to
d3c5729464159cab52ada7ff4b6c26b91bd4dcb4Satyen Desai Tony Finch for submitting a patch. [RT #40009]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4165. [security] A failure to reset a value to NULL in tkey.c could
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai result in an assertion failure. (CVE-2015-5477)
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4164. [bug] Don't rename slave files and journals on out of memory.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4163. [bug] Address compiler warnings. [RT #40024]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4161. [test] Add JSON test for traffic size stats; also test
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai for consistency between "rndc stats" and the XML
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai and JSON statistics channel contents. [RT #38700]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4160. [placeholder]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4159. [cleanup] Alphabetize dig's help output. [RT #39966]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4158. [placeholder]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4157. [placeholder]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4156. [func] Added statistics counters to track the sizes
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of incoming queries and outgoing responses in
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai histogram buckets, as specified in RSSAC002.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4155. [func] Allow RPZ rewrite logging to be configured on a
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai per-zone basis using a newly introduced log clause in
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the response-policy option. [RT #39754]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4154. [bug] A OPT record should be included with the FORMERR
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai response when there is a malformed EDNS option.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4153. [bug] Dig should zero non significant +subnet bits. Check
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai that non significant ECS bits are zero on receipt.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4152. [func] Implement DNS COOKIE option. This replaces the
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai experimental SIT option of BIND 9.10. The following
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai named.conf directives are available: send-cookie,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai cookie-secret, cookie-algorithm, nocookie-udp-size
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai and require-server-cookie. The following dig options
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai are available: +[no]cookie[=value] and +[no]badcookie.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai minimal fix. [RT #39667]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4149. [bug] Fixed a race condition in the getaddrinfo()
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai implementation in libirs, which caused the delv
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai utility to crash with an assertion failure when using
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the '@server' syntax with a hostname argument.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4148. [bug] Fix a bug when printing zone names with '/' character
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai in XML and JSON statistics output. [RT #39873]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai was returning referrals rather than nodata responses
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai when the AAAA records were filtered. [RT #39843]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4146. [bug] Address reference leak that could prevent a clean
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai shutdown. [RT #37125]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4145. [bug] Not all unassociated adb entries where being printed.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4144. [func] Add statistics counters for nxdomain redirections.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4143. [placeholder]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4142. [bug] rndc addzone with view specified saved NZF config
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai that could not be read back by named. This has now
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai been fixed. [RT #39845]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4141. [bug] A formatting bug caused rndc zonestatus to print
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai negative numbers for large serial values. This has
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai now been fixed. [RT #39854]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4140. [cleanup] Remove redundant nzf_remove() call during delzone.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4138. [security] An uninitialized value in validator.c could result
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai in an assertion failure. (CVE-2015-4620) [RT #39795]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4137. [bug] Make rndc reconfig report configuration errors the
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai same way rndc reload does. [RT #39635]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4136. [bug] Stale statistics counters with the leading
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai '#' prefix (such as #NXDOMAIN) were not being
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai updated correctly. This has been fixed. [RT #39141]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4135. [cleanup] Log expired NTA at startup. [RT #39680]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4134. [cleanup] Include client-ip rules when logging the number
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of RPZ rules of each type. [RT #39670]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4133. [port] Update how various json libraries are handled.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4132. [cleanup] dig: added +rd as a synonym for +recurse,
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai added +class as an unabbreviated alternative
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai to +cl. [RT #39686]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4131. [bug] Addressed further problems with reloading RPZ
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai zones. [RT #39649]
d8f2b0dd5ac08b7e9256df9f92b204b33c7f9f69Satyen Desai4130. [bug] The compatibility shim for *printf() misprinted some
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai large numbers. [RT #39586]
d8f2b0dd5ac08b7e9256df9f92b204b33c7f9f69Satyen Desai4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
d8f2b0dd5ac08b7e9256df9f92b204b33c7f9f69Satyen Desai4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
d8f2b0dd5ac08b7e9256df9f92b204b33c7f9f69Satyen Desai key as per RFC 7344, Section 4.1. [RT #37215]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4126. [bug] Addressed a regression introduced in change #4121.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4125. [test] Added tests for dig, renamed delv test to digdelv.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4124. [func] Log errors or warnings encountered when parsing the
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai internal default configuration. Clarify the logging
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of errors and warnings encountered in rndc
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai addzone or modzone parameters. [RT #39440]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4123. [port] Added %z (size_t) format options to the portable
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai internal printf/sprintf implementation. [RT #39586]
81ed0aaa8456bd5c6a54e7797258b1f182eb1f5bSatyen Desai4122. [bug] The server could match a shorter prefix than what was
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai available in CLIENT-IP policy triggers, and so, an
81ed0aaa8456bd5c6a54e7797258b1f182eb1f5bSatyen Desai unexpected action could be taken. This has been
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai corrected. [RT #39481]
81ed0aaa8456bd5c6a54e7797258b1f182eb1f5bSatyen Desai4121. [bug] On servers with one or more policy zones
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai configured as slaves, if a policy zone updated
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai during regular operation (rather than at
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai startup) using a full zone reload, such as via
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai AXFR, a bug could allow the RPZ summary data to
81ed0aaa8456bd5c6a54e7797258b1f182eb1f5bSatyen Desai fall out of sync, potentially leading to an
81ed0aaa8456bd5c6a54e7797258b1f182eb1f5bSatyen Desai assertion failure in rpz.c when further
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai incremental updates were made to the zone, such
d8f2b0dd5ac08b7e9256df9f92b204b33c7f9f69Satyen Desai as via IXFR. [RT #39567]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4120. [bug] A bug in RPZ could cause the server to crash if
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai policy zones were updated while recursion was
d8f2b0dd5ac08b7e9256df9f92b204b33c7f9f69Satyen Desai pending for RPZ processing of an active query.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4119. [test] Allow dig to set the message opcode. [RT #39550]
d8f2b0dd5ac08b7e9256df9f92b204b33c7f9f69Satyen Desai4118. [bug] Teach isc-config.sh about irs. [RT #39213]
d8f2b0dd5ac08b7e9256df9f92b204b33c7f9f69Satyen Desai4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4116. [bug] Fix a bug in RPZ that could cause some policy
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai zones that did not specifically require
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai recursion to be treated as if they did;
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai consequently, setting qname-wait-recurse no; was
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai sometimes ineffective. [RT #39229]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4115. [func] "rndc -r" now prints the result code (e.g.,
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai running the requested command. [RT #38913]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4114. [bug] Fix a regression in radix tree implementation
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai introduced by ECS code. This bug was never
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai released, but it was reported by a user testing
d8f2b0dd5ac08b7e9256df9f92b204b33c7f9f69Satyen Desai master. [RT #38983]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4113. [test] Check for Net::DNS is some system test
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai prerequisites. [RT #39369]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4112. [bug] Named failed to load when "root-delegation-only"
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai was used without a list of domains to exclude.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4111. [doc] Alphabetize rndc man page. [RT #39360]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4110. [bug] Address memory leaks / null pointer dereferences
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai on out of memory. [RT #39310]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4109. [port] linux: support reading the local port range from
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4108. [func] An additional NXDOMAIN redirect method (option
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai "nxdomain-redirect") has been added, allowing
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai redirection to a specified DNS namespace instead
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of a single redirect zone. [RT #37989]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4107. [bug] Address potential deadlock when updating zone content.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4106. [port] Improve readline support. [RT #38938]
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4105. [port] Misc fixes for Microsoft Visual Studio
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai 2015 CTP6 in 64 bit mode. [RT #39308]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4104. [bug] Address uninitialized elements. [RT #39252]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4103. [port] Misc fixes for Microsoft Visual Studio
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai 2015 CTP6. [RT #39267]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4102. [bug] Fix a use after free bug introduced in change
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai #4094. [RT #39281]
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4101. [bug] dig: the +split and +rrcomments options didn't
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai work with +short. [RT #39291]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4100. [bug] Inherited owernames on the line immediately following
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai a $INCLUDE were not working. [RT #39268]
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4099. [port] clang: make unknown commandline options hard errors
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai when determining what options are supported.
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4098. [bug] Address use-after-free issue when using a
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai predecessor key with dnssec-settime. [RT #39272]
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4097. [func] Add additional logging about xfrin transfer status.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4096. [bug] Fix a use after free of query->sendevent.
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4095. [bug] zone->options2 was not being properly initialized.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4094. [bug] A race during shutdown or reconfiguration could
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai cause an assertion in mem.c. [RT #38979]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4093. [func] Dig now learns the SIT value from truncated
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai responses when it retries over TCP. [RT #39047]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4090. [bug] Fix a crash while parsing malformed CAA RRs in
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai presentation format, i.e., from text such as
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai from master files. Thanks to John Van de
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai Meulebrouck Brendgard for discovering and
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai reporting this problem. [RT #39003]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4089. [bug] Send notifies immediately for slave zones during
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai startup. [RT #38843]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4088. [port] Fixed errors when building with libressl. [RT #38899]
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4087. [bug] Fix a crash due to use-after-free due to sequencing
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of tasks actions. [RT #38495]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4084. [bug] Fix a possible race in updating stats counters.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4083. [cleanup] Print the number of CPUs and UDP listeners
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai consistently in the log and in "rndc status"
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai output; indicate whether threads are supported
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai in "named -V" output. [RT #38811]
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4082. [bug] Incrementally sign large inline zone deltas.
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4080. [func] Completed change #4022, adding a "lock-file" option
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai to named.conf to override the default lock file,
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai in addition to the "named -X <filename>" command
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai line option. Setting the lock file to "none"
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai using either method disables the check completely.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4079. [func] Preserve the case of the owner name of records to
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai the RRset level. [RT #37442]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai CMSG_SPACE(sizeof(char)). [RT #38621]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4077. [test] Add static-stub regression test for DS NXDOMAIN
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai return making the static stub disappear. [RT #38564]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4076. [bug] Named could crash on shutdown with outstanding
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai reload / reconfig events. [RT #38622]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4075. [placeholder]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4073. [cleanup] Add libjson-c version number reporting to
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai "named -V"; normalize version number formatting.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4072. [func] Add a --enable-querytrace configure switch for
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai very verbose query trace logging. (This option
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai has a negative performance impact and should be
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai used only for debugging.) [RT #37520]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4071. [cleanup] Initialize pthread mutex attrs just once, instead of
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai doing it per mutex creation. [RT #38547]
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4070. [bug] Fix a segfault in nslookup in a query such as
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai4069. [doc] Reorganize options in the nsupdate man page.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4068. [bug] Omit unknown serial number from JSON zone statistics.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4067. [cleanup] Reduce noise from RRL when query logging is
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai disabled. [RT #38648]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4066. [doc] Reorganize options in the dig man page. [RT #38516]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4065. [test] Additional RFC 5011 tests. [RT #38569]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4064. [contrib] dnssec-keyset.sh: Generates a specified number
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of DNSSEC keys with timing set to implement a
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai pre-publication key rollover strategy. Thanks
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai to Jeffry A. Spain. [RT #38459]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4063. [bug] Asynchronous zone loads were not handled
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai correctly when the zone load was already in
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai progress; this could trigger a crash in zt.c.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4062. [bug] Fix an out-of-bounds read in RPZ code. If the
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai read succeeded, it doesn't result in a bug
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai during operation. If the read failed, named
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai could segfault. [RT #38559]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4061. [bug] Handle timeout in legacy system test. [RT #38573]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4060. [bug] dns_rdata_freestruct could be called on a
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai uninitialized structure when handling a error.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4059. [bug] Addressed valgrind warnings. [RT #38549]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4058. [bug] UDP dispatches could use the wrong pseudorandom
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai number generator context. [RT #38578]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4056. [bug] Expanded automatic testing of trust anchor
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai management and fixed several small bugs including
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai a memory leak and a possible loss of key state
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai information. [RT #38458]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4055. [func] "rndc managed-keys" can be used to check status
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of trust anchors or to force keys to be refreshed,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai Also, the managed keys data file has easier-to-read
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai comments. [RT #38458]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4054. [func] Added a new tool 'mdig', a light weight clone of
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai dig able to send multiple pipelined queries.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4053. [security] Revoking a managed trust anchor and supplying
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai an untrusted replacement could cause named
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai to crash with an assertion failure.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai (CVE-2015-1349) [RT #38344]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4052. [bug] Fix a leak of query fetchlock. [RT #38454]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4050. [bug] RPZ could send spurious SERVFAILs in response
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai to duplicate queries. [RT #38510]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4048. [bug] adb hash table was not being grown. [RT #38470]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4047. [cleanup] "named -V" now reports the current running versions
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of OpenSSL and the libxml2 libraries, in addition to
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the versions that were in use at build time.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4046. [bug] Accounting of "total use" in memory context
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai statistics was not correct. [RT #38370]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4045. [bug] Skip to next master on dns_request_createvia4 failure.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4044. [bug] Change 3955 was not complete, resulting in an assertion
cea74478b281e652658d4e498aafc87c9fa90e92Satyen Desai failure if the timing was just right. [RT #38352]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4043. [func] "rndc modzone" can be used to modify the
cea74478b281e652658d4e498aafc87c9fa90e92Satyen Desai configuration of an existing zone, using similar
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai syntax to "rndc addzone". [RT #37895]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4042. [bug] zone.c:iszonesecure was being called too late.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4041. [func] TCP sockets can now be shared while connecting.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai (This will be used to enable client-side support
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of pipelined queries.) [RT #38231]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4040. [func] Added server-side support for pipelined TCP
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai queries. Clients may continue sending queries via
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai TCP while previous queries are being processed
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai in parallel. (The new "keep-response-order"
cea74478b281e652658d4e498aafc87c9fa90e92Satyen Desai option allows clients to be specified for which
12bdc27e9ac1ba89d9657200cfb22aadad54e7fbSatyen Desai the old behavior will still be used.) [RT #37821]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4038. [bug] Add 'rpz' flag to node and use it to determine whether
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai to call dns_rpz_delete. This should prevent unbalanced
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai add / delete calls. [RT #36888]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4037. [bug] also-notify was ignoring the tsig key when checking
cea74478b281e652658d4e498aafc87c9fa90e92Satyen Desai for duplicates resulting in some expected notify
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai messages not being sent. [RT #38369]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4036. [bug] Make call to open a temporary file name safe during
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai NZF creation. [RT #38331]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4035. [bug] Close temporary and NZF FILE pointers before moving
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the former into the latter's place, as required on
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai Windows. [RT #38332]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4034. [func] When added, negative trust anchors (NTA) are now
cea74478b281e652658d4e498aafc87c9fa90e92Satyen Desai saved to files (viewname.nta), in order to
cea74478b281e652658d4e498aafc87c9fa90e92Satyen Desai persist across restarts of the named server.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4033. [bug] Missing out of memory check in request.c:req_send.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4032. [bug] Built-in "empty" zones did not correctly inherit the
00cf03a1ca1624dac1fecc85f43fc34f8806aff9Luke Smith "allow-transfer" ACL from the options or view.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4031. [bug] named-checkconf -z failed to report a missing file
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai with a hint zone. [RT #38294]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4030. [func] "rndc delzone" is now applicable to zones that were
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai configured in named.conf, as well as zones that
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai were added via "rndc addzone". (Note, however, that
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai if named.conf is not also modified, the deleted zone
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai will return when named is reloaded.) [RT #37887]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4029. [func] "rndc showzone" displays the current configuration
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of a specified zone. [RT #37887]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4028. [bug] $GENERATE with a zero step was not being caught as a
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai error. A $GENERATE with a / but no step was not being
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai caught as a error. [RT #38262]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4025. [port] bsdi: failed to build. [RT #38047]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai dns_rdata_opt_current, dns_rdata_txt_first,
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai dns_rdata_txt_next and dns_rdata_txt_current were
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai documented but not implemented. These have now been
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai implemented.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai dns_rdata_spf_first, dns_rdata_spf_next and
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai dns_rdata_spf_current were documented but not
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai implemented. The prototypes for these
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai functions have been removed. [RT #38068]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4023. [bug] win32: socket handling with explicit ports and
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai invoking named with -4 was broken for some
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai configurations. [RT #38068]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai4022. [func] Stop multiple spawns of named by limiting number of
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai processes to 1. This is done by using a lockfile and
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai checking whether we can listen on any configured
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai TCP interfaces. [RT #37908]
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai4021. [bug] Adjust max-recursion-queries to accommodate
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai the need for more queries when the cache is
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai empty. [RT #38104]
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai resulting in updates being sent to the wrong server.
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai4019. [func] If named is not configured to validate the answer
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai then allow fallback to plain DNS on timeout even
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai when we know the server supports EDNS. [RT #37978]
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai4018. [placeholder]
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai4017. [test] Add system test to check lookups to legacy servers
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai with broken DNS behavior. [RT #37965]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4016. [bug] Fix a dig segfault due to bad linked list usage.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4015. [bug] Nameservers that are skipped due to them being
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai CNAMEs were not being logged. They are now logged
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai to category 'cname' as per BIND 8. [RT #37935]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai4014. [bug] When including a master file origin_changed was
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai not being properly set leading to a potentially
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai spurious 'inherited owner' warning. [RT #37919]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai4013. [func] Add a new tcp-only option to server (config) /
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai peer (struct) to use TCP transport to send
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai queries (in place of UDP transport with a
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai TCP fallback on truncated (TC set) response).
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai4012. [cleanup] Check returned status of OpenSSL digest and HMAC
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai functions when they return one. Note this applies
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai only to FIPS capable OpenSSL libraries put in
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai FIPS mode and MD5. [RT #37944]
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai4011. [bug] master's list port and dscp inheritance was not
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai properly implemented. [RT #37792]
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai4010. [cleanup] Clear the prefetchable state when initiating a
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai prefetch. [RT #37399]
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai4009. [func] delv: added a +tcp option. [RT #37855]
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai4007. [doc] Remove acl forward reference restriction. [RT #37772]
1809f37c5e32d3366ee0a26377448d74d5fa7ff5Satyen Desai4006. [security] A flaw in delegation handling could be exploited
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai to put named into an infinite loop. This has
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai been addressed by placing limits on the number
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai of levels of recursion named will allow (default 7),
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai and the number of iterative queries that it will
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai send (default 50) before terminating a recursive
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai query (CVE-2014-8500).
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai The recursion depth limit is configured via the
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai "max-recursion-depth" option, and the query limit
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai via the "max-recursion-queries" option. [RT #37580]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai4005. [func] The buffer used for returning text from rndc
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai commands is now dynamically resizable, allowing
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai arbitrarily large amounts of text to be sent back
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai to the client. (Prior to this change, it was
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai possible for the output of "rndc tsig-list" to be
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai truncated.) [RT #37731]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai4004. [bug] When delegations had AAAA glue but not A, a
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai reference could be leaked causing an assertion
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai failure on shutdown. [RT #37796]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai4003. [security] When geoip-directory was reconfigured during
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai named run-time, the previously loaded GeoIP
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai data could remain, potentially causing wrong
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai ACLs to be used or wrong results to be served
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai based on geolocation (CVE-2014-8680). [RT #37720]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai4002. [security] Lookups in GeoIP databases that were not
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai loaded could cause an assertion failure
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai (CVE-2014-8680). [RT #37679]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai4001. [security] The caching of GeoIP lookups did not always
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai handle address families correctly, potentially
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai resulting in an assertion failure (CVE-2014-8680).
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai from the redirect zone. [RT #37722]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3999. [func] "mkeys" and "nzf" files are now named after
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai their corresponding views, unless the view name
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai contains characters that would be incompatible
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai with use in a filename (i.e., slash, backslash,
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai or capital letters). If a view name does contain
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai these characters, the files will still be named
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai using a cryptographic hash of the view name.
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai Regardless of this, if a file using the old name
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai format is found to exist, it will continue to be
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai used. [RT #37704]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3998. [bug] isc_radix_search was returning matches that were
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai too precise. [RT #37680]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3996. [bug] Address use after free on out of memory error in
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai keyring_add. [RT #37639]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3995. [bug] receive_secure_serial holds the zone lock for too
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai long. [RT #37626]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3994. [func] Dig now supports setting the last unassigned DNS
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai header flag bit (dig +zflag). [RT #37421]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3993. [func] Dig now supports EDNS negotiation by default.
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai (dig +[no]ednsnegotiation).
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai Note: This is disabled by default in BIND 9.10
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai and enabled by default in BIND 9.11. [RT #37604]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3992. [func] DiG can now send queries without questions
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai (dig +header-only). [RT #37599]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3991. [func] Add the ability to buffer logging output by specifying
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai "buffered yes;" when defining a channel. [RT #26561]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3990. [testing] Add tests for unknown DNSSEC algorithm handling.
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3988. [func] Allow the zone serial of a dynamically updatable
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai zone to be updated via "rndc signing -serial".
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai3987. [func] Handle future Visual Studio 14 incompatible changes.
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai3986. [doc] Add the BIND version number to page footers
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai in the ARM. [RT #37398]
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai3985. [doc] Describe how +ndots and +search interact in dig.
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai3984. [func] Accept 256 byte long PINs in native PKCS#11
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai crypto. [RT #37410]
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai3983. [bug] Change #3940 was incomplete: negative trust anchors
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai could be set to last up to a week, but the
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai "nta-lifetime" and "nta-recheck" options were
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai still limited to one day. [RT #37522]
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai3982. [doc] Include release notes in product documentation.
5b1bd5cf62150e84e5e6456235479d28c5656317Satyen Desai3981. [bug] Cache DS/NXDOMAIN independently of other query types.
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai size. [RT #37187]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3979. [bug] Negative trust anchor fetches were not properly
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai managed. [RT #37488]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3978. [test] Added a unit test for Diffie-Hellman key
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai computation, completing change #3974. [RT #37477]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3977. [cleanup] "rndc secroots" reported a "not found" error when
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai there were no negative trust anchors set. [RT #37506]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3976. [bug] When refreshing managed-key trust anchors, clear
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai any cached trust so that they will always be
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai revalidated with the current set of secure
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai roots. [RT #37506]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3975. [bug] Don't populate or use the bad cache for queries that
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai don't request or use recursion. [RT #37466]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3974. [bug] Handle DH_compute_key() failure correctly in
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3973. [test] Added hooks for Google Performance Tools CPU profiler,
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai including real-time/wall-clock profiling. Use
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai "configure --with-gperftools-profiler" to enable.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3972. [bug] Fix host's usage statement. [RT #37397]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3971. [bug] Reduce the cascading failures due to a bad $TTL line
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai in named-checkconf / named-checkzone. [RT #37138]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3969. [test] Added 'delv' system test. [RT #36901]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3968. [bug] Silence spurious log messages when using 'named -[46]'.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3967. [test] Add test for inlined signed zone in multiple views
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai with different DNSKEY sets. [RT #35759]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3965. [func] Log outgoing packets and improve packet logging to
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai support logging the remote address. [RT #36624]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3964. [func] nsupdate now performs check-names processing.
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3963. [test] Added NXRRSET test cases to the "dlzexternal"
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai system test. [RT #37344]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai conditions. [RT #34663]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai BADSIG. [RT #37216]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3959. [bug] Updates could be lost if they arrived immediately
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai after a rndc thaw. [RT #37233]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3958. [bug] Detect when writeable files have multiple references
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai in named.conf. [RT #37172]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai and ECDSAP384SHA384. [RT #37183]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3956. [func] Notify messages are now rate limited by notify-rate and
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai startup-notify-rate instead of serial-query-rate.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3955. [bug] Notify messages due to changes are no longer queued
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai behind startup notify messages. [RT #24454]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai two name pointers were the same. [RT #37176]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3951. [func] Add the ability to set yet-to-be-defined EDNS flags
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai to dig (+ednsflags=#). [RT #37142]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3950. [port] Changed the bin/python Makefile to work around a
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3949. [experimental] Experimental support for draft-andrews-edns1 by sending
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai building). Add support for limiting the EDNS version
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai advertised to servers: server { edns-version 0; };
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai Log the EDNS version received in the query log.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai --with-tuning=large. [RT #37059]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3947. [cleanup] Set the executable bit on libraries when using
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai libtool. [RT #36786]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3946. [cleanup] Improved "configure" search for a python interpreter.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3945. [bug] Invalid wildcard expansions could be incorrectly
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai accepted by the validator. [RT #37093]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3944. [test] Added a regression test for "server-id". [RT #37057]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3943. [func] SERVFAIL responses can now be cached for a
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai limited time (configured by "servfail-ttl",
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai default 10 seconds, limit 30). This can reduce
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai the frequency of retries when an authoritative
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai server is known to be failing, e.g., due to
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai ongoing DNSSEC validation problems. [RT #21347]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3942. [bug] Wildcard responses from a optout range should be
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai marked as insecure. [RT #37072]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3941. [doc] Include the BIND version number in the ARM. [RT #37067]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3940. [func] "rndc nta" now allows negative trust anchors to be
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai set for up to one week. [RT #37069]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3939. [func] Improve UPDATE forwarding performance by allowing TCP
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai connections to be shared. [RT #37039]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3938. [func] Added quotas to be used in recursive resolvers
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai that are under high query load for names in zones
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai whose authoritative servers are nonresponsive or
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai are experiencing a denial of service attack.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai - "fetches-per-server" limits the number of
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai simultaneous queries that can be sent to any
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai single authoritative server. The configured
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai value is a starting point; it is automatically
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai adjusted downward if the server is partially or
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai completely non-responsive. The algorithm used to
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai adjust the quota can be configured via the
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai "fetch-quota-params" option.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai - "fetches-per-zone" limits the number of
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai simultaneous queries that can be sent for names
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai within a single domain. (Note: Unlike
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai "fetches-per-server", this value is not
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai self-tuning.)
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai - New stats counters have been added to count
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai queries spilled due to these quotas.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai See the ARM for details of these options. [RT #37125]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3937. [func] Added some debug logging to better indicate the
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai conditions causing SERVFAILs when resolving.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3936. [func] Added authoritative support for the EDNS Client
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai Subnet (ECS) option.
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai ACLs can now include "ecs" elements which specify
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai an address or network prefix; if an ECS option is
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai included in a DNS query, then the address encoded
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai in the option will be matched against "ecs" ACL
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai Also, if an ECS address is included in a query,
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai then it will be used instead of the client source
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai address when matching "geoip" ACL elements. This
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai behavior can be overridden with "geoip-use-ecs no;".
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai (Note: to enable "geoip" ACLs, use "configure
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai --with-geoip". This requires libGeoIP version
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai 1.5.0 or higher.)
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai When "ecs" or "geoip" ACL elements are used to
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai select a view for a query, the response will include
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai an ECS option to indicate which client network the
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai answer is valid for.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai (Thanks to Vincent Bernat.) [RT #36781]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3935. [bug] "geoip asnum" ACL elements would not match unless
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai the full organization name was specified. They
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai can now match against the AS number alone (e.g.,
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai AS1234). [RT #36945]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai sit-secret documentation. [RT #36980]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3933. [bug] Corrected the implementation of dns_rdata_casecompare()
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai for the HIP rdata type. [RT #36911]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3932. [test] Improved named-checkconf tests. [RT #36911]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3930. [bug] "rndc nta -r" could cause a server hang if the
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai NTA was not found. [RT #36909]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3928. [test] Improve rndc system test. [RT #36898]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3927. [bug] dig: report PKCS#11 error codes correctly when
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai compiled with --enable-native-pkcs11. [RT #36956]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3926. [doc] Added doc for geoip-directory. [RT #36877]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3923. [bug] Sanity check the xml2-config output. [RT #22246]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3922. [bug] When resigning, dnssec-signzone was removing
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai all signatures from delegation nodes. It now
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai retains DS and (if applicable) NSEC signatures.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3920. [doc] Added doc for masterfile-style. [RT #36823]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3919. [bug] dig: continue to next line if a address lookup fails
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai in batch mode. [RT #36755]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3918. [doc] Update check-spf documentation. [RT #36910]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3917. [bug] dig, nslookup and host now continue on names that are
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai too long after applying a search list elements.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3916. [contrib] zone2sqlite checked wrong result code. Address
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai compiler warnings. [RT #36931]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3915. [bug] Address a assertion if a route event arrived while
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai shutting down. [RT #36887]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3914. [bug] Allow the URI target and CAA value fields to
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai be zero length. [RT #36737]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3913. [bug] Address race issue in dispatch. [RT #36731]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3911. [func] Implement EDNS EXPIRE option client side, allowing
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai a slave server to set the expiration timer correctly
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai when transferring zone data from another slave
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai server. [RT #35925]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3910. [bug] Fix races to free event during shutdown. [RT #36720]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3909. [bug] When computing the number of elements required for a
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai acl count_acl_elements could have a short count leading
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai to a assertion failure. Also zero out new acl elements
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai in dns_acl_merge. [RT #36675]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3908. [bug] rndc now differentiates between a zone in multiple
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai views and a zone that doesn't exist at all. [RT #36691]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3907. [cleanup] Alphabetize rndc help. [RT #36683]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3906. [protocol] Update URI record format to comply with
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai draft-faltstrom-uri-08. [RT #36642]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3904. [func] Add the RPZ SOA to the additional section. [RT36507]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3903. [bug] Improve the accuracy of DiG's reported round trip
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai time. [RT 36611]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3902. [bug] liblwres wasn't handling link-local addresses in
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai nameserver clauses in resolv.conf. [RT #36039]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3901. [protocol] Added support for CAA record type (RFC 6844).
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3899. [bug] "request-ixfr" is only applicable to slave and redirect
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai zones. [RT #36608]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3898. [bug] Too small a buffer in tohexstr() calls in test code.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3897. [bug] RPZ summary information was not properly being updated
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai after a AXFR resulting in changes sometimes being
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai ignored. [RT #35885]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3896. [bug] Address performance issues with DSCP code on some
8590f7a396daf54f3440f970f550bbc9f59bc7b7Satyen Desai platforms. [RT #36534]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3895. [func] Add the ability to set the DSCP code point to dig.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3894. [bug] Buffers in isc_print_vsnprintf were not properly
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai initialized leading to potential overflows when
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai printing out quad values. [RT #36505]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3893. [bug] Peer DSCP values could be returned without being set.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3892. [bug] Setting '-t aaaa' in .digrc had unintended side
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai effects. [RT #36452]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai to install python programs.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3890. [bug] RRSIG sets that were not loaded in a single transaction
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai at start up where not being correctly added to
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai re-signing heaps. [RT #36302]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3889. [port] hurd: configure fixes as per:
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3888. [func] 'rndc status' now reports the number of automatic
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai zones. [RT #36015]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai they are easier to use in a debugger. [RT #36373]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3886. [bug] rbtdb_write_header should use a once to initialize
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai FILE_VERSION. [RT #36374]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3885. [port] Use 'open()' rather than 'file()' to open files in
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3883. [placeholder]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3882. [func] By default, negative trust anchors will be tested
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai periodically to see whether data below them can be
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai validated, and if so, they will be allowed to
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai expire early. The "rndc nta -force" option
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai overrides this behavior. The default NTA lifetime
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai and the recheck frequency can be configured by the
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai "nta-lifetime" and "nta-recheck" options. [RT #36146]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3881. [bug] Address memory leak with UPDATE error handling.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3880. [test] Update ans.pl to work with new TSIG support in
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai Net::DNS; add additional Net::DNS version prerequisite
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai checks. [RT #36327]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3879. [func] Add version printing option to various BIND utilities.
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3878. [bug] Using the incorrect filename for a DLZ module
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai caused a segmentation fault on startup. [RT #36286]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3877. [bug] Inserting and deleting parent and child nodes
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai in response policy zones could trigger an assertion
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai failure. [RT #36272]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3876. [bug] Improve efficiency of DLZ redirect zones by
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai suppressing unnecessary database lookups. [RT #35835]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3875. [cleanup] Clarify log message when unable to read private
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai key files. [RT #24702]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3874. [test] Check that only "check-names master" is needed for
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai updates to be accepted.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3872. [bug] Address issues found by static analysis. [RT #36209]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3871. [bug] Don't publish an activated key automatically before
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai its publish time. [RT #35063]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3870. [func] Updated the random number generator used in
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai the resolver to use the updated ChaCha based one
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai (similar to OpenBSD's changes). Also moved the
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai RNG to libisc and added unit tests for it.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3869. [doc] Document that in-view zones cannot be used for
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai response policy zones. [RT #35941]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3868. [bug] isc_mem_setwater incorrectly cleared hi_called
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai potentially leaving over memory cleaner running.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3867. [func] "rndc nta" can now be used to set a temporary
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai negative trust anchor, which disables DNSSEC
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai validation below a specified name for a specified
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai period of time (not exceeding 24 hours). This
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai can be used when validation for a domain is known
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai to be failing due to a configuration error on
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai the part of the domain owner rather than a
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai spoofing attack. [RT #29358]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3866. [bug] Named could die on disk full in generate_session_key.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3865. [test] Improved testability of the red-black tree
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai implementation and added unit tests. [RT #35904]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3864. [bug] RPZ didn't work well when being used as forwarder.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3863. [bug] The "E" flag was missing from the query log as a
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai unintended side effect of code rearrangement to
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai support EDNS EXPIRE. [RT #36117]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3862. [cleanup] Return immediately if we are not going to log the
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai message in ns_client_dumpmessage.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3861. [security] Missing isc_buffer_availablelength check results
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai in a REQUIRE assertion when printing out a packet
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai (CVE-2014-3859). [RT #36078]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3860. [bug] ioctl(DP_POLL) array size needs to be determined
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai at run time as it is limited to {OPEN_MAX}.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3859. [placeholder]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3858. [bug] Disable GCC 4.9 "delete null pointer check".
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3857. [bug] Make it harder for a incorrect NOEDNS classification
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai to be made. [RT #36020]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3856. [bug] Configuring libjson without also configuring libxml
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai resulted in a REQUIRE assertion when retrieving
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai statistics using json. [RT #36009]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3855. [bug] Limit smoothed round trip time aging to no more than
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai once a second. [RT #32909]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3854. [cleanup] Report unrecognized options, if any, in the final
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai configure summary. [RT #36014]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai the handling of a rdataset with no records. [RT #35968]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3852. [func] Increase the default number of clients available
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai for servicing lightweight resolver queries, and
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai make them configurable via the "lwres-tasks" and
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai "lwres-clients" options. (Thanks to Tomas Hozza.)
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3851. [func] Allow libseccomp based system-call filtering
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai on Linux; use "configure --enable-seccomp" to
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai turn it on. Thanks to Loganaden Velvindron
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai of AFRINIC for the contribution. [RT #35347]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3849. [doc] Alphabetized dig's +options. [RT #35992]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3848. [bug] Adjust 'statistics-channels specified but not effective'
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai error message to account for JSON support. [RT #36008]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3847. [bug] 'configure --with-dlz-postgres' failed to fail when
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai there is not support available.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai ixfr query. [RT #35980]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3845. [placeholder]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3844. [bug] Use the x64 version of the Microsoft Visual C++
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai Redistributable when built for 64 bit Windows.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3842. [bug] Adjust RRL log-only logging category. [RT #35945]
1610a0f21714a139d54cc4c4dcc5a175d965dd4fSatyen Desai3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3840. [port] Check for arc4random_addrandom() before using it;
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai it's been removed from OpenBSD 5.5. [RT #35907]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3839. [test] Use only posix-compatible shell in system tests.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3837. [security] A NULL pointer is passed to query_prefetch resulting
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai a REQUIRE assertion failure when a fetch is actually
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai initiated (CVE-2014-3214). [RT #35899]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3836. [bug] Address C++ keyword usage in header file.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3835. [bug] Geoip ACL elements didn't work correctly when
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai referenced via named or nested ACLs. [RT #35879]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3834. [bug] The re-signing heaps were not being updated soon enough
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai leading to multiple re-generations of the same RRSIG
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai when a zone transfer was in progress. [RT #35273]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3833. [bug] Cross compiling was broken due to calling genrandom at
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai build time. [RT #35869]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3832. [func] "named -L <filename>" causes named to send log
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai messages to the specified file by default instead
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai of to the system log. (Thanks to Tony Finch.)
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3831. [cleanup] Reduce logging noise when EDNS state changes occur.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3830. [func] When query logging is enabled, log query errors at
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai the same level ('info') as the queries themselves.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3829. [func] "dig +ttlunits" causes dig to print TTL values
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai with time-unit suffixes: w, d, h, m, s for
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai weeks, days, hours, minutes, and seconds. (Thanks
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai to Tony Finch.) [RT #35823]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3828. [func] "dnssec-signzone -N date" updates serial number
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai to the current date in YYYYMMDDNN format.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3827. [placeholder]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
1610a0f21714a139d54cc4c4dcc5a175d965dd4fSatyen Desai3825. [bug] Address sign extension bug in isc_regex_validate.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3824. [bug] A collision between two flag values could cause
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai problems with cache cleaning when SIT was enabled.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3823. [func] Log the rpz cname target when rewriting. [RT #35667]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3822. [bug] Log the correct type of static-stub zones when
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai removing them. [RT #35842]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai update and transaction support. Thanks to Marty
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai Lee for the contribution. [RT #35656]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3820. [func] The DLZ API doesn't pass the database version to
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai the lookup() function; this can cause DLZ modules
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai that allow dynamic updates to mishandle prerequisite
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai checks. This has been corrected by adding a
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai 'dbversion' field to the dns_clientinfo_t
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai structure. [RT #35656]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3819. [bug] NSEC3 hashes need to be able to be entered and
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai displayed without padding. This is not a issue for
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai currently defined algorithms but may be for future
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai hash algorithms. [RT #27925]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3818. [bug] Stop lying to the optimizer that 'void *arg' is a
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai constant in isc_event_allocate.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3817. [func] The "delve" command is now spelled "delv" to avoid
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai a namespace collision with the Xapian project.
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3816. [func] "dig +qr" now reports query size. (Thanks to
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai Tony Finch.) [RT #35822]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3814. [func] The "masterfile-style" zone option controls the
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai formatting of dumped zone files. Options are
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai "relative" (multiline format) and "full" (one
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai record per line). The default is "relative".
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3813. [func] "host" now recognizes the "timeout", "attempts" and
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai "debug" options when set in /etc/resolv.conf.
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai (Thanks to Adam Tkac at RedHat.) [RT #21885]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3812. [func] Dig now supports sending arbitrary EDNS options from
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai the command line (+ednsopt=code[:value]). [RT #35584]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3811. [func] "serial-update-method date;" sets serial number
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai on dynamic update to today's date in YYYYMMDDNN
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai format. (Thanks to Bradley Forschinger.) [RT #24903]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3810. [bug] Work around broken nameservers that fail to ignore
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai unknown EDNS options. [RT #35766]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3809. [doc] Fix SIT and NSID documentation.
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3808. [doc] Clean up "prefetch" documentation. [RT #35751]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3807. [bug] Fix sign extension bug in dns_name_fromtext when
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai lowercase is set. [RT #35743]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3806. [test] Improved system test portability. [RT #35625]
ae03b489c1ce3defbcd9db6c72c68f0dc3a14b37Satyen Desai3805. [contrib] Added contrib/perftcpdns, a performance testing tool
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai for DNS over TCP. [RT #35710]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai --- 9.10.0rc1 released ---
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3804. [bug] Corrected a race condition in dispatch.c in which
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai portentry could be reset leading to an assertion
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai failure in socket_search(). (Change #3708
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai addressed the same issue but was incomplete.)
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3803. [bug] "named-checkconf -z" incorrectly rejected zones
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai using alternate data sources for not having a "file"
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai option. [RT #35685]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3802. [bug] Various header files were not being installed.
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3800. [bug] A pending event on the route socket could cause an
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai assertion failure when shutting down named. [RT #35674]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3799. [bug] Improve named's command line error reporting.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai time. [RT #35659]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3797. [port] netbsd: geoip support probing was broken. [RT #35642]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3795. [bug] Make named-checkconf detect raw masterfiles for
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai hint zones and reject them. [RT #35268]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3793. [bug] zone.c:save_nsec3param() could assert when out of
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai memory. [RT #35621]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3792. [func] Provide links to the alternate statistics views when
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai displaying in a browser. [RT #35605]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3791. [placeholder]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3790. [bug] Handle broken nameservers that send BADVERS in
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai response to unknown EDNS options. Maintain
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai statistics on BADVERS responses.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3789. [bug] Null pointer dereference on rbt creation failure.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3788. [bug] dns_peer_getrequestsit was returning request_nsid by
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai --- 9.10.0b2 released ---
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3787. [bug] The code that checks whether "auto-dnssec" is
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai allowed was ignoring "allow-update" ACLs set at
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai the options or view level. [RT #29536]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3786. [func] Provide more detailed error codes when using
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai native PKCS#11. "pkcs11-tokens" now fails robustly
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai rather than asserting when run against an HSM with
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai an incomplete PKCS#11 API implementation. [RT #35479]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3785. [bug] Debugging code dumphex didn't accept arbitrarily long
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai input (only compiled with -DDEBUG). [RT #35544]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3784. [bug] Using "rrset-order fixed" when it had not been
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai enabled at compile time caused inconsistent
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai results. It now works as documented, defaulting
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai to cyclic mode. [RT #28104]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3783. [func] "tsig-keygen" is now available as an alternate
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai command name for "ddns-confgen". It generates
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai a TSIG key in named.conf format without comments.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3782. [func] Specifying "auto" as the salt when using
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai "rndc signing -nsec3param" causes named to
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai generate a 64-bit salt at random. [RT #35322]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3781. [tuning] Use adaptive mutex locks when available; this
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai has been found to improve performance under load
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai on many systems. "configure --with-locktype=standard"
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai restores conventional mutex locks. [RT #32576]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3780. [bug] $GENERATE handled negative numbers incorrectly.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3779. [cleanup] Clarify the error message when using an option
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai that was not enabled at compile time. [RT #35504]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3778. [bug] Log a warning when the wrong address family is
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai used in "listen-on" or "listen-on-v6". [RT #17848]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3777. [bug] EDNS EXPIRE code could dump core when processing
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai DLZ queries. [RT #35493]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3776. [func] "rndc -q" suppresses output from successful
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai rndc commands. Errors are printed on stderr.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3775. [bug] dlz_dlopen driver could return the wrong error
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai code on API version mismatch, leading to a segfault.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3774. [func] When using "request-nsid", log the NSID value in
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai printable form as well as hex. [RT #20864]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3773. [func] "host", "nslookup" and "nsupdate" now have
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai options to print the version number and exit.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai (Based in part on a contribution from Tim Tessier.)
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3771. [cleanup] Adjusted log level for "using built-in key"
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai messages. [RT #24383]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3770. [bug] "dig +trace" could fail with an assertion when it
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai needed to fall back to TCP due to a truncated
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai response. [RT #24660]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3769. [doc] Improved documentation of "rndc signing -list".
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai algorithm. [RT #34000]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3767. [func] Log explicitly when using rndc.key to configure
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai command channel. [RT #35316]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3766. [cleanup] Fixed problems with building outside the source
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai tree when using native PKCS#11. [RT #35459]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3765. [bug] Fixed a bug in "rndc secroots" that could crash
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai named when dumping an empty keynode. [RT #35469]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3764. [bug] The dnssec-keygen/settime -S and -i options
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai (to set up a successor key and set the prepublication
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai interval) were missing from dnssec-keyfromlabel.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3763. [bug] delve: Cache DNSSEC records to avoid the need to
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai re-fetch them when restarting validation. [RT #35476]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3762. [bug] Address build problems with --pkcs11-native +
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai --with-openssl with ECDSA support. [RT #35467]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3761. [bug] Address dangling reference bug in dns_keytable_add.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3760. [bug] Improve SIT with native PKCS#11 and on Windows.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3759. [port] Enable delve on Windows. [RT #35441]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3758. [port] Enable export library APIs on Windows. [RT #35382]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3757. [port] Enable Python tools (dnssec-coverage,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai dnssec-checkds) to run on Windows. [RT #34355]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3756. [bug] GSSAPI Kerberos realm checking was broken in
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai check_config leading to spurious messages being
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai logged. [RT #35443]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai --- 9.10.0b1 released ---
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3755. [func] Add stats counters for known EDNS options + others.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3754. [cleanup] win32: Installer now places files in the
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai Program Files area rather than system services.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3753. [bug] allow-notify was ignoring keys. [RT #35425]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3752. [bug] Address potential REQUIRE failure if
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai DNS_STYLEFLAG_COMMENTDATA is set when printing out
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai3751. [tuning] The default setting for the -U option (setting
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai the number of UDP listeners per interface) has
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai been adjusted to improve performance. [RT #35417]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3750. [experimental] Partially implement EDNS EXPIRE option as described
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai in draft-andrews-dnsext-expire-00. Retrieval of
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai the remaining time until expiry for slave zones
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai is supported.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai EXPIRE uses an experimental option code (65002),
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai which is subject to change. [RT #35416]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3749. [func] "dig +subnet" sends an EDNS client subnet option
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai containing the specified address/prefix when
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai querying. (Thanks to Wilmer van der Gaast.)
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3748. [test] Use delve to test dns_client interfaces. [RT #35383]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3747. [bug] A race condition could lead to a core dump when
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai destroying a resolver fetch object. [RT #35385]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3746. [func] New "max-zone-ttl" option enforces maximum
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai TTLs for zones. If loading a zone containing a
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai higher TTL, the load fails. DDNS updates with
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai higher TTLs are accepted but the TTL is truncated.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai (Note: Currently supported for master zones only;
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai inline-signing slaves will be added.) [RT #38405]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3745. [func] "configure --with-tuning=large" adjusts various
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai compiled-in constants and default settings to
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai values suited to large servers with abundant
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai memory. [RT #29538]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3744. [experimental] SIT: send and process Source Identity Tokens
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai (similar to DNS Cookies by Donald Eastlake 3rd),
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai which are designed to help clients detect off-path
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai spoofed responses and for servers to identify
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai legitimate clients.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai SIT uses an experimental EDNS option code (65001),
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai which will be changed to an IANA-assigned value
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai if the experiment is deemed a success.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai SIT can be enabled via "configure --enable-sit" (or
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai --enable-developer). It is enabled by default in
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai Servers can be configured to send smaller responses
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai to clients that have not identified themselves via
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai SIT. RRL processing has also been updated;
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai legitimate clients are not subject to rate
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai limiting. [RT #35389]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3743. [bug] delegation-only flag wasn't working in forward zone
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai declarations despite being documented. This is
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai needed to support turning off forwarding and turning
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai on delegation only at the same name. [RT #35392]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3742. [port] linux: libcap support: declare curval at start of
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai block. [RT #35387]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3741. [func] "delve" (domain entity lookup and validation engine):
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai A new tool with dig-like semantics for performing DNS
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai lookups, with internal DNSSEC validation, using the
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai same resolver and validator logic as named. This
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai allows easy validation of DNSSEC data in environments
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai with untrustworthy resolvers, and assists with
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai troubleshooting of DNSSEC problems. [RT #32406]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3740. [contrib] Minor fixes to configure --with-dlz-bdb,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3739. [func] Added per-zone stats counters to track TCP and
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai UDP queries. [RT #35375]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3737. [bug] 'rndc retransfer' could trigger a assertion failure
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai with inline zones. [RT #35353]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3736. [bug] nsupdate: When specifying a server by name,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai fall back to alternate addresses if the first
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai address for that name is not reachable. [RT #25784]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3735. [cleanup] Merged the libiscpk11 library into libisc
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai to simplify dependencies. [RT #35205]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3734. [bug] Improve building with libtool. [RT #35314]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3733. [func] Improve interface scanning support. Interface
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai information will be automatically updated if the
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai OS supports routing sockets (MacOS, *BSD, Linux).
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai Use "automatic-interface-scan no;" to disable.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai Add "rndc scan" to trigger a scan. [RT #23027]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai driver to dump core on 64-bit systems. [RT #35324]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3731. [func] Added a "no-case-compress" ACL, which causes
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai named to use case-insensitive compression
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai (disabling change #3645) for specified
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai clients. (This is useful when dealing
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai with broken client implementations that
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai use case-sensitive name comparisons,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai rejecting responses that fail to match the
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai capitalization of the query that was sent.)
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3730. [cleanup] Added "never" as a synonym for "none" when
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai configuring key event dates in the dnssec tools.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3729. [bug] dnssec-keygen could set the publication date
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai incorrectly when only the activation date was
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai specified on the command line. [RT #35278]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3728. [doc] Expanded native-PKCS#11 documentation,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai specifically pkcs11: URI labels. [RT #35287]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3727. [func] The isc_bitstring API is no longer used and
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai has been removed from libisc. [RT #35284]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3726. [cleanup] Clarified the error message when attempting
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai to configure more than 32 response-policy zones.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3725. [contrib] Updated zkt and nslint to newest versions,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai cleaned up and rearranged the contrib
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai directory, and added a README.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai --- 9.10.0a2 released ---
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3724. [bug] win32: Fixed a bug that prevented dig and
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai host from exiting properly after completing
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai a UDP query. [RT #35288]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3723. [cleanup] Imported keys are now handled the same way
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai regardless of DNSSEC algorithm. [RT #35215]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3722. [bug] Using geoip ACLs in a blackhole statement
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai could cause a segfault. [RT #35272]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3721. [doc] Improved documentation of the EDNS processing
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai enhancements introduced in change #3593. [RT #35275]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3720. [bug] Address compiler warnings. [RT #35261]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3719. [bug] Address memory leak in in peer.c. [RT #35255]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai probing to see if it is possible to set dscp values
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai on a per packet basis. [RT #35252]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3716. [bug] The dns_request code was setting dcsp values when not
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai requested. [RT #35252]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3715. [bug] The region and city databases could fail to
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai initialize when using some versions of libGeoIP,
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai causing assertion failures when named was
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai configured to use them. [RT #35427]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3714. [test] System tests that need to test for cryptography
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai support before running can now use a common
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai "testcrypto.sh" script to do so. [RT #35213]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3713. [bug] Save memory by not storing "also-notify" addresses
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai in zone objects that are configured not to send
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai notify requests. [RT #35195]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3712. [placeholder]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3711. [placeholder]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3710. [bug] Address double dns_zone_detach when switching to
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai using automatic empty zones from regular zones.
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3709. [port] Use built-in versions of strptime() and timegm()
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai on all platforms to avoid portability issues.
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai3708. [bug] Address a portentry locking issue in dispatch.c.
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai on a missing resolv.conf file and initializes the
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai structure as if it had been configured with:
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai nameserver ::1
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai nameserver 127.0.0.1
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai Note: Callers will need to be updated to treat
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai ISC_R_FILENOTFOUND as a qualified success or else
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai they will leak memory. The following code fragment
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai will work with both old and new versions without
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai changing the behaviour of the existing code.
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai resconf = NULL;
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai result = irs_resconf_load(mctx, "/etc/resolv.conf",
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai if (result != ISC_SUCCESS) {
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai if (resconf != NULL)
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai irs_resconf_destroy(&resconf);
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai3706. [contrib] queryperf: Fixed a possible integer overflow when
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai printing results. [RT #35182]
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai3705. [func] "configure --enable-native-pkcs11" enables BIND
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai to use the PKCS#11 API for all cryptographic
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai functions, so that it can drive a hardware service
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai module directly without the need to use a modified
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai OpenSSL as intermediary (so long as the HSM's vendor
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai provides a complete-enough implementation of the
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai PKCS#11 interface). This has been tested successfully
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai with the Thales nShield HSM and with SoftHSMv2 from
6b7baaa39136d411805ffeac06cc81f3af043085Satyen Desai the OpenDNSSEC project. [RT #29031]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3703. [func] To improve recursive resolver performance, cache
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai records which are still being requested by clients
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai can now be automatically refreshed from the
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai authoritative server before they expire, reducing
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai or eliminating the time window in which no answer
3deb14ef5289f666e316e224e72e532226c41be5Satyen Desai is available in the cache. See the "prefetch" option
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai for more details. [RT #35041]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3702. [func] 'dnssec-coverage -l' option specifies a length
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai of time to check for coverage; events further into
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the future are ignored. 'dnssec-coverage -z'
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai checks only ZSK events, and 'dnssec-coverage -k'
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai checks only KSK events. (Thanks to Peter Palfrader.)
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3701. [func] named-checkconf can now obscure shared secrets
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai when printing by specifying '-x'. [RT #34465]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3700. [func] Allow access to subgroups of XML statistics via
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai special URLs http://<server>:<port>/xml/v3/server,
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai /zones, /net, /tasks, /mem, and /status. [RT #35115]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3699. [bug] Improvements to statistics channel XSL stylesheet:
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai the stylesheet can now be cached by the browser;
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai section headers are omitted from the stats display
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai when there is no data in those sections to be
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai displayed; counters are now right-justified for
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai easier readability. [RT #35117]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3698. [cleanup] Replaced all uses of memcpy() with memmove().
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3697. [bug] Handle "." as a search list element when IDN support
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai is enabled. [RT #35133]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3696. [bug] dig failed to handle AXFR style IXFR responses which
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai span multiple messages. [RT #35137]
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3695. [bug] Address a possible race in dispatch.c. [RT #35107]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3694. [bug] Warn when a key-directory is configured for a zone,
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai but does not exist or is not a directory. [RT #35108]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3693. [security] memcpy was incorrectly called with overlapping
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai ranges resulting in malformed names being generated
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai on some platforms. This could cause INSIST failures
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai when serving NSEC3 signed zones (CVE-2014-0591).
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
f8255676f21f65c5a8114dd9246b3d5b4604b359Satyen Desai was no data at the node. [RT #35080]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3691. [contrib] Address null pointer dereference in LDAP and
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai MySQL DLZ modules.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3690. [bug] Iterative responses could be missed when the source
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai port for an upstream query was the same as the
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai listener port (53). [RT #34925]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3689. [bug] Fixed a bug causing an insecure delegation from one
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai static-stub zone to another to fail with a broken
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai trust chain. [RT #35081]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3688. [bug] loadnode could return a freed node on out of memory.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3687. [bug] Address null pointer dereference in zone_xfrdone.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3686. [func] "dnssec-signzone -Q" drops signatures from keys
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai that are still published but no longer active.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3685. [bug] "rndc refresh" didn't work correctly with slave
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai zones using inline-signing. [RT #35105]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3684. [bug] The list of included files would grow on reload.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3683. [cleanup] Add a more detailed "not found" message to rndc
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai commands which specify a zone name. [RT #35059]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3682. [bug] Correct the behavior of rndc retransfer to allow
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai inline-signing slave zones to retain NSEC3 parameters
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai instead of reverting to NSEC. [RT #34745]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3681. [port] Update the Windows build system to support feature
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai selection and WIN64 builds. This is a work in
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai progress. [RT #34160]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3680. [bug] Ensure buffer space is available in "rndc zonestatus".
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3679. [bug] dig could fail to clean up TCP sockets still
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai waiting on connect(). [RT #35074]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3678. [port] Update config.guess and config.sub. [RT #35060]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai times. [RT #35073]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3676. [bug] "named-checkconf -z" now checks zones of type
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai hint and redirect as well as master. [RT #35046]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3675. [misc] Provide a place for third parties to add version
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai information for their extensions in the version
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai file by setting the EXTENSIONS variable.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai --- 9.10.0a1 released ---
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai3673. [func] New "in-view" zone option allows direct sharing
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of zones between views. [RT #32968]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3672. [func] Local address can now be specified when using
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai dns_client API. [RT #34811]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3671. [bug] Don't allow dnssec-importkey overwrite a existing
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai non-imported private key.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3670. [bug] Address read after free in server side of
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai lwres_getrrsetbyname. [RT #29075]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3667. [test] dig: add support to keep the TCP socket open between
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai successive queries (+[no]keepopen). [RT #34918]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3666. [func] Add a tool, named-rrchecker, for checking the syntax
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of individual resource records. This tool is intended
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai to be called by provisioning systems so that the front
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai end does not need to be upgraded to support new DNS
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai record types. [RT #34778]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3665. [bug] Failure to release lock on error in receive_secure_db.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai locking and other bugs. [RT #34855]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3663. [bug] Address bugs in dns_rdata_fromstruct and
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3661. [bug] Address lock order reversal deadlock with inline zones.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3659. [port] solaris: don't add explicit dependencies/rules for
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai python programs as make won't use the implicit rules.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3658. [port] linux: Address platform specific compilation issue
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai when libcap-devel is installed. [RT #34838]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3657. [port] Some readline clones don't accept NULL pointers when
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai calling add_history. [RT #34842]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3656. [security] Treat an all zero netmask as invalid when generating
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the localnets acl. (The prior behavior could
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai allow unexpected matches when using some versions
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai of Winsock: CVE-2013-6320.) [RT #34687]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3655. [cleanup] Simplify TCP message processing when requesting a
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai zone transfer. [RT #34825]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3654. [bug] Address race condition with manual notify requests.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3653. [func] Create delegations for all "children" of empty zones
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai except "forward first". [RT #34826]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3652. [bug] Address bug with rpz-drop policy. [RT #34816]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3651. [tuning] Adjust when a master server is deemed unreachable.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3650. [tuning] Use separate rate limiting queues for refresh and
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai notify requests. [RT #30589]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3649. [cleanup] Include a comment in .nzf files, giving the name of
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the associated view. [RT #34765]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3648. [test] Updated the ATF test framework to version 0.17.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3647. [bug] Address a race condition when shutting down a zone.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3646. [bug] Journal filename string could be set incorrectly,
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai causing garbage in log messages. [RT #34738]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3645. [protocol] Use case sensitive compression when responding to
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai queries. [RT #34737]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3644. [protocol] Check that EDNS subnet client options are well formed.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3643. [doc] Clarify RRL "slip" documentation.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3642. [func] Allow externally generated DNSKEY to be imported
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai into the DNSKEY management framework. A new tool
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai dnssec-importkey is used to do this. [RT #34698]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3641. [bug] Handle changes to sig-validity-interval settings
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai better. [RT #34625]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3640. [bug] ndots was not being checked when searching. Only
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai continue searching on NXDOMAIN responses. Add the
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai ability to specify ndots to nslookup. [RT #34711]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai in a key zone. [RT #34238]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai encountered. [RT #34668]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3637. [bug] 'allow-query-on' was checking the source address
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai rather than the destination address. [RT #34590]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3636. [bug] Automatic empty zones now behave better with
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai forward only "zones" beneath them. [RT #34583]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3635. [bug] Signatures were not being removed from a zone with
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai only KSK keys for a algorithm. [RT #34439]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3634. [func] Report build-id in rndc status. Report build-id
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai when building from a git repository. [RT #20422]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3633. [cleanup] Refactor OPT processing in named to make it easier
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai to support new EDNS options. [RT #34414]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3632. [bug] Signature from newly inactive keys were not being
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai removed. [RT #32178]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3631. [bug] Remove spurious warning about missing signatures when
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai qtype is SIG. [RT #34600]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3629. [func] Allow the printing of cryptographic fields in DNSSEC
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai records by dig to be suppressed (dig +nocrypto).
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3628. [func] Report DNSKEY key id's when dumping the cache.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3626. [func] dig: NSID output now easier to read. [RT #21160]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3625. [bug] Don't send notify messages to machines outside of the
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3624. [bug] Look for 'json_object_new_int64' when looking for a
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the json library. [RT #34449]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3623. [placeholder]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3622. [tuning] Eliminate an unnecessary lock when incrementing
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai cache statistics. [RT #34339]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3621. [security] Incorrect bounds checking on private type 'keydata'
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai can lead to a remotely triggerable REQUIRE failure
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai (CVE-2013-4854). [RT #34238]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3620. [func] Added "rpz-client-ip" policy triggers, enabling
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai RPZ responses to be configured on the basis of
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the client IP address; this can be used, for
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai example, to blacklist misbehaving recursive
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai or stub resolvers. [RT #33605]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3618. [func] "rndc reload" now checks modification times of
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai include files as well as master files to determine
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai whether to skip reloading a zone. [RT #33936]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3617. [bug] Named was failing to answer queries during
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai "rndc reload" [RT #34098]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3616. [bug] Change #3613 was incomplete. [RT #34177]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3615. [cleanup] "configure" now finishes by printing a summary
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai of optional BIND features and whether they are
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai active or inactive. ("configure --enable-full-report"
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai increases the verbosity of the summary.) [RT #31777]
9bdfc363ef897a298b7596475f598c1c4fd427b6Satyen Desai3614. [port] Check for <linux/types.h>. [RT #34162]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3613. [bug] named could crash when deleting inline-signing
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai zones with "rndc delzone". [RT #34066]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3611. [bug] Improved resistance to a theoretical authentication
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai attack based on differential timing. [RT #33939]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3610. [cleanup] win32: Some executables had been omitted from the
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai installer. [RT #34116]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3609. [bug] Corrected a possible deadlock in applications using
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the export version of the isc_app API. [RT #33967]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3608. [port] win32: added todos.pl script to ensure all text files
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai the win32 build depends on are converted to DOS
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai newline format. [RT #22067]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai message. [RT #34045]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3606. [func] "rndc flushtree" now flushes matching
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai records in the address database and bad cache
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai as well as the DNS cache. (Previously only the
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai DNS cache was flushed.) [RT #33970]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3605. [port] win32: Addressed several compatibility issues
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai with newer versions of Visual Studio. [RT #33916]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3604. [bug] Fixed a compile-time error when building with
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai JSON but not XML. [RT #33959]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3603. [bug] Install <isc/stat.h>. [RT #33956]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai integrate with named and serve DNS data.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai (Contributed by John Eaglesham of Yahoo.)
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3601. [bug] Added to PKCS#11 openssl patches a value len
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai attribute in DH derive key. [RT #33928]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3600. [cleanup] dig: Fixed a typo in the warning output when receiving
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai an oversized response. [RT #33910]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3599. [tuning] Check for pointer equivalence in name comparisons.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3598. [cleanup] Improved portability of map file code. [RT #33820]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3597. [bug] Ensure automatic-resigning heaps are reconstructed
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai when loading zones in map format. [RT #33381]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3596. [port] Updated win32 build documentation, added
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai dnssec-verify. [RT #22067]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3595. [port] win32: Fix build problems introduced by change #3550.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3594. [maint] Update config.guess and config.sub. [RT #33816]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3593. [func] Update EDNS processing to better track remote server
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai capabilities. [RT #30655]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3592. [doc] Moved documentation of rndc command options to the
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai rndc man page. [RT #33506]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3591. [func] Use CRC-64 to detect map file corruption at load
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai time. [RT #33746]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3590. [bug] When using RRL on recursive servers, defer
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai rate-limiting until after recursion is complete;
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai also, use correct rcode for slipped NXDOMAIN
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai responses. [RT #33604]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3589. [func] Report serial numbers in when starting zone transfers.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai Report accepted NOTIFY requests including serial.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3588. [bug] dig: addressed a memory leak in the sigchase code
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai that could cause a shutdown crash. [RT #33733]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3587. [func] 'named -g' now checks the logging configuration but
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai does not use it. [RT #33473]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3585. [func] "rndc delzone -clean" option removes zone files
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai when deleting a zone. [RT #33570]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3584. [security] Caching data from an incompletely signed zone could
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai trigger an assertion failure in resolver.c
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai (CVE-2013-3919). [RT #33690]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3583. [bug] Address memory leak in GSS-API processing [RT #33574]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3582. [bug] Silence false positive warning regarding missing file
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai directive for inline slave zones. [RT #33662]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3580. [bug] Addressed a possible race in acache.c [RT #33602]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3579. [maint] Updates to PKCS#11 openssl patches, supporting
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3577. [bug] Handle zero TTL values better. [RT #33411]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3576. [bug] Address a shutdown race when validating. [RT #33573]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3575. [func] Changed the logging category for RRL events from
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai 'queries' to 'query-errors'. [RT #33540]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3574. [doc] The 'hostname' keyword was missing from server-id
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai description in the named.conf man page. [RT #33476]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai zone names containing punctuation marks and other
4de1c70b905d1ec094efa1406a5264e29ea112c9Satyen Desai nonstandard characters. [RT #33419]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3572. [func] Threads are now enabled by default on most
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai operating systems. [RT #25483]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3571. [bug] Address race condition in dns_client_startresolve().
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3570. [bug] Check internal pointers are valid when loading map
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai files. [RT #33403]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai module, and added multithread support. [RT #33394]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3568. [cleanup] Add a product description line to the version file,
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai to be reported by named -v/-V. [RT #33366]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3567. [bug] Silence clang static analyzer warnings. [RT #33365]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3566. [func] Log when forwarding updates to master. [RT #33240]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3565. [placeholder]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3564. [bug] Improved handling of corrupted map files. [RT #33380]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3562. [func] Update map file header format to include a SHA-1 hash
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai of the database content, so that corrupted map files
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai can be rejected at load time. [RT #32459]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai or NOTIMP. Adjust usage message. [RT #33363]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3560. [bug] isc-config.sh did not honor includedir and libdir
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai when set via configure. [RT #33345]
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai3559. [func] Check that both forms of Sender Policy Framework
2cde0d56e1a4bc15add8f9cdcab3e87ff5a5b733Satyen Desai records exist or do not exist. [RT #33355]
d4a90de3308f343c5d935b5f9b6bcc9f5bc4d05fSatyen Desai3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
00cf03a1ca1624dac1fecc85f43fc34f8806aff9Luke Smith3557. [bug] Reloading redirect zones was broken. [RT #33292]
3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
3555. [bug] Address theoretical race conditions in acache.c
3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
3548. [bug] The NSID request code in resolver.c was broken
3544. [contrib] check5011.pl: Script to report the status of
managed keys as recorded in managed-keys.bind.
options which take a "port" option (e.g.,
3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
3497. [func] When deleting a slave/stub zone using 'rndc delzone'
dlzdb.link. When cloning a rdataset do not copy
3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
3473. [bug] dnssec-signzone/verify could incorrectly report
3459. [func] Added -J option to named-checkzone/named-compilezone
3449. [bug] gen.c: use the pre-processor to construct format
3447. [port] Add support for libxml2-2.9.x [RT #32231]
3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
3436. [bug] Check malloc/calloc return values. [RT #32088]
3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
3406. [bug] mem.c: Fix compilation errors when building with
zone.c [RT #30675]
3362. [bug] Setting some option values to 0 in named.conf
3357. [port] Add support for libxml2-2.8.x [RT #30440]
to ensure correctness of signatures and of NSEC/NSEC3
- add a RPZ performance test to bin/tests/system/rpz
3328. [bug] Fixed inconsistent data checking in dst_parse.c.
zone.c:zone_gotwritehandle. [RT #29028]
3309. [bug] resolver.c:fctx_finddone() was not thread safe.
3300. [bug] Named could die if gssapi was enabled in named.conf
client.c:exit_check. [RT #28346]
3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
rbtnode.deadlink. [RT #27738]
lib/dns/rbtdb.c:iszonesecure. [RT #26913]
3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
3201. [func] 'rndc querylog' can now be given an on/off parameter
dnssec.h. [RT #26415]
3188. [bug] zone.c:zone_refreshkeys() could fail to detach
3186. [bug] Version/db mis-match in rpz code. [RT #26180]
sample external DLZ module in contrib/dlz/example.
- replace "NO-OP" named.conf policy override with
3169. [func] Catch db/version mis-matches when calling dns_db_*().
3163. [bug] Use finer-grained locking in client.c to address
3161. [bug] zone.c:del_sigs failed to always reset rdata leading
drivers (e.g., mysql, postgresql, etc). [RT #25710]
3145. [test] Capture output of ATF unit tests in "./atf.out" if
3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
and add setup.sh in order to resolve changing
named.conf issue. [RT #23687]
3077. [bug] zone.c:zone_refreshkeys() incorrectly called
update.c:next_active. [RT #20256]
select the master/slave zones. [RT #23580]
- "dig +split=X" breaks hex/base64 records into
named.pid at startup. [RT #23290]
validator.c. Tests added to dnssec system test.
3038. [bug] Install <dns/rpz.h>. [RT #23342]
3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
3026. [bug] lib/isc/httpd.c: check that we have enough space
to 10. Allow setting this in named.conf using the new
in the named.conf options. [RT #21727]
3000. [bug] More TKEY/GSS fixes:
2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
2987. [func] Improve ease of configuring TKEY/GSS updates by
zone, but the nameserver names and/or their IP
2978. [port] hpux: look for <devpoll.h> [RT #21919]
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
2973. [bug] bind.keys.h was being removed by the "make clean"
(e.g. "%-1c"). [RT #22270]
2962. [port] win32: add more dependencies to BINDBuild.dsw.
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
interfaces at reboot. See bin/tests/system/README
support for addzone/delzone feature (see change
new-zone-file in named.conf; this happens
2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
option at the view or options level in named.conf.
into named.conf in the appropriate view. (Note:
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
was specified in named.conf. [RT #21416]
2903. [bug] managed-keys-directory missing from namedconf.c.
2893. [bug] Improve managed keys support. New named.conf option
2873. [bug] Canceling a dynamic update via the dns/client module
2872. [bug] Modify dns/client.c:dns_client_createx() to only
2871. [bug] Type mismatch in mem_api.c between the definition and
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2865. [bug] memset to zero event.data. [RT #20986]
2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT #17359]
stub/slave master and journal files. [RT #17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT #13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which