CHANGES revision b1866070ef4fb9e17bff16ad458f629bbc5a4acc
d5b7ba26785d7494166d48876362ba30ff30b98awrowe4545. [func] Make dnstap-read output more functionally usable.
c30ef289fe64ac7fedc44cfcc6b439f0f8458b4cgregames [RT #43642]
396aeca634b86a3ab34d5bdb9c32cbce73c72421jerenkrantz4544. [func] Add message/payload size to dnstap-read YAML output.
ebf6c41faad84ab037fff4f04ec987463457ef2acoar [RT #43622]
ebf6c41faad84ab037fff4f04ec987463457ef2acoar4543. [bug] dns_client_startupdate now delays sending the update
ebf6c41faad84ab037fff4f04ec987463457ef2acoar request until isc_app_ctxrun has been called.
ebf6c41faad84ab037fff4f04ec987463457ef2acoar [RT #43976]
03ed98f7f258fd6b5205c97c656f94d4db39b79ajwoolley4541. [bug] rndc addzone should properly reject non master/slave
03ed98f7f258fd6b5205c97c656f94d4db39b79ajwoolley zones. [RT #43665]
ab8c0315521735c73ce16c8072f91e17c406ca5bnd4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
ab8c0315521735c73ce16c8072f91e17c406ca5bnd [RT #43601]
b9e99e0d3154bbebe3e1b8d11d6c15bde79510a5nd4539. [bug] Referencing a nonexistant zone with rpz could lead
b9e99e0d3154bbebe3e1b8d11d6c15bde79510a5nd to a assertion failure when configuring. [RT #43787]
ea5f8cfbb7ef1d19318f6994c26dd73c38ffd8ddjerenkrantz4538. [bug] Call dns_client_startresolve from client->task.
4567cfc6a65328bd3e8dd2b758ca926b389c7058brianp4537. [bug] Handle timouts better in dig/host/nslookup. [RT #43576]
4567cfc6a65328bd3e8dd2b758ca926b389c7058brianp4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
3068cf5757c8bdbea77e8f6805686aa0b0241a17nd when reusing the event structure. [RT #43885]
3068cf5757c8bdbea77e8f6805686aa0b0241a17nd4535. [bug] Address race condition in setting / testing of
3068cf5757c8bdbea77e8f6805686aa0b0241a17nd DNS_REQUEST_F_SENDING. [RT #43889]
396aeca634b86a3ab34d5bdb9c32cbce73c72421jerenkrantz4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
4cdc5446050c19b9d519a273a129188586e8d445jerenkrantz4533. [bug] dns_client_update should terminate on prerequisite
4cdc5446050c19b9d519a273a129188586e8d445jerenkrantz failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
4cdc5446050c19b9d519a273a129188586e8d445jerenkrantz and also on BADZONE. [RT #43865]
e0b93afc77decfbc0aab461b08ee224a0af89af2rederpj4532. [contrib] Make gen-data-queryperf.py python 3 compatible.
e0b93afc77decfbc0aab461b08ee224a0af89af2rederpj [RT #43836]
e0b93afc77decfbc0aab461b08ee224a0af89af2rederpj4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
c30ef289fe64ac7fedc44cfcc6b439f0f8458b4cgregames in responses resulting in SERVFAIL being returned.
c30ef289fe64ac7fedc44cfcc6b439f0f8458b4cgregames [RT #43779]
c30ef289fe64ac7fedc44cfcc6b439f0f8458b4cgregames4529. [cleanup] Silence noisy log warning when DSCP probe fails
c30ef289fe64ac7fedc44cfcc6b439f0f8458b4cgregames due to firewall rules. [RT #43847]
2f408250e9111c4b85b2b4b9b8836e83987efdefstoddard4528. [bug] Only set the flag bits for the i/o we are waiting
2f408250e9111c4b85b2b4b9b8836e83987efdefstoddard for on EPOLLERR or EPOLLHUP. [RT #43617]
d5b7ba26785d7494166d48876362ba30ff30b98awrowe4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
47fe07199bddec6124ab7251c6be5c6c9ac00485jerenkrantz4526. [doc] Corrected errors and improved formatting of
6646a289c2d4778c8cd43d62b5a1cc966a356f85jerenkrantz grammar definitions in the ARM. [RT #43739]
6646a289c2d4778c8cd43d62b5a1cc966a356f85jerenkrantz4525. [doc] Fixed outdated documentation on managed-keys.
aec70520ebe1e33e0d5e83c3626649d2a41dbe68wrowe4524. [bug] The net zero test was broken causing IPv4 servers
aec70520ebe1e33e0d5e83c3626649d2a41dbe68wrowe with addresses ending in .0 to be rejected. [RT #43776]
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe4523. [doc] Expand config doc for <querysource4> and
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe <querysource6>. [RT #43768]
367cefc17f8dcfe65651c9c16cb3151589c6cecetrawick4522. [bug] Handle big gaps in log file version numbers better.
367cefc17f8dcfe65651c9c16cb3151589c6cecetrawick [RT #38688]
a3754e9d2edd5758f94fd743b9cf9f814be80383nd4521. [cleanup] Log it as an error if an entropy source is not
a3754e9d2edd5758f94fd743b9cf9f814be80383nd found and there is no fallback available. [RT #43659]
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick4520. [cleanup] Alphabetise more of the grammar when printing it
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick out. Fix unbalanced indenting. [RT #43755]
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick4516. [bug] isc_socketmgr_renderjson was missing from the
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick windows build. [RT #43602]
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick4515. [port] FreeBSD: Find readline headers when they are in
f9a987f71572291f35b9d0adc3fe79af96b2b147trawick edit/readline/ instead of readline/. [RT #43658]
5c870e08d589a24283cd76a9d596120605762cbbminfrin4514. [port] NetBSD: strip -WL, from ld command line. [RT #43204]
47d4dfaca60aff6d3c7e591bf593b3961cafcdefminfrin4513. [cleanup] Minimum Python versions are now 2.7 and 3.2.
47d4dfaca60aff6d3c7e591bf593b3961cafcdefminfrin [RT #43566]
c206205e2475a7a4a192eaa7190a9894f01f0631minfrin4512. [bug] win32: @GEOIP_INC@ missing from delv.vcxproj.in.
c206205e2475a7a4a192eaa7190a9894f01f0631minfrin [RT #43556]
c206205e2475a7a4a192eaa7190a9894f01f0631minfrin4511. [bug] win32: mdig.exe-BNFT was missing Configure. [RT #43554]
304aee4b1ff85cc876570493e4ed334d42b4d9eftrawick4509. [test] Make the rrl system test more reliable on slower
304aee4b1ff85cc876570493e4ed334d42b4d9eftrawick machines by using mdig instead of dig. [RT #43280]
304aee4b1ff85cc876570493e4ed334d42b4d9eftrawick4507. [bug] Named could incorrectly log 'allows updates by IP
304aee4b1ff85cc876570493e4ed334d42b4d9eftrawick address, which is insecure' [RT #43432]
77582a85f880a10e8e225ecd5b303446d23d1c9atrawick4505. [port] Use IP_PMTUDISC_OMIT if available. [RT #35494]
77582a85f880a10e8e225ecd5b303446d23d1c9atrawick4504. [security] Allow the maximum number of records in a zone to
77582a85f880a10e8e225ecd5b303446d23d1c9atrawick be specified. This provides a control for issues
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe raised in CVE-2016-6170. [RT #42143]
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe4503. [cleanup] "make uninstall" now removes files installed by
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe BIND. (This currently excludes Python files
111b2312c9749936ebca4f273db445820a0a703ebrianp due to lack of support in setup.py.) [RT #42912]
111b2312c9749936ebca4f273db445820a0a703ebrianp4502. [func] Report multiple and experimental options when printing
ad877cddc14be8c8171938ba61338c6c7b896bbdtrawick grammar. [RT #43134]
ad877cddc14be8c8171938ba61338c6c7b896bbdtrawick4500. [bug] Support modifier I64 in isc__print_printf. [RT #43526]
ad877cddc14be8c8171938ba61338c6c7b896bbdtrawick4499. [port] MacOSX: silence deprecated function warning
ad877cddc14be8c8171938ba61338c6c7b896bbdtrawick by using arc4random_stir() when available
367cefc17f8dcfe65651c9c16cb3151589c6cecetrawick instead of arc4random_addrandom(). [RT #43503]
367cefc17f8dcfe65651c9c16cb3151589c6cecetrawick4498. [test] Simplify prerequisite checks in system tests.
367cefc17f8dcfe65651c9c16cb3151589c6cecetrawick [RT #43516]
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe4496. [func] dig: add +idnout to control whether labels are
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe display in punycode or not. Requires idn support
f49cf8ce86a01c90d5d843fc27e19d2802dd0f77wrowe to be enabled at compile time. [RT #43398]
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe4495. [bug] A isc_mutex_init call was not being checked.
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe [RT #43391]
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe4494. [bug] Look for <editline/readline.h>. [RT #43429]
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe4493. [bug] bin/tests/system/dyndb/driver/Makefile.in should use
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe SO_TARGETS. [RT# 43336]
52435ceaabd1670b2c3a062acc191159a64fb7a1wrowe4492. [bug] irs_resconf_load failed to initialise sortlistnxt
e199d79647c689a85951f19b08a08082263f4df8brianp causing bad writes if resolv.conf contained a
e199d79647c689a85951f19b08a08082263f4df8brianp sortlist directive. [RT #43459]
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe4491. [bug] Improve message emitted when testing whether sendmsg
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe works with TOS/TCLASS fails. [RT #43483]
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe4489. [security] It was possible to trigger assertions when processing
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe a response containing a DNAME answer. (CVE-2016-8864)
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe [RT #43465]
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe4488. [port] Darwin: use -framework for Kerberos. [RT #43418]
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe4487. [test] Make system tests work on Windows. [RT #42931]
ad451e2e428a069086d1c18c9e3372f8846ec617wrowe4486. [bug] Look in $prefix/lib/pythonX.Y/site-packages for
1e1e5c477f92840ffbcb8acd0003305022e5468atrawick the python modules we install. [RT #43330]
1e1e5c477f92840ffbcb8acd0003305022e5468atrawick4485. [bug] Failure to find readline when requested should be
1e1e5c477f92840ffbcb8acd0003305022e5468atrawick fatal to configure. [RT #43328]
1e1e5c477f92840ffbcb8acd0003305022e5468atrawick4484. [func] Check prefixes in acls to make sure the address and
c998c5be82bf2b41f8fc27de9376ba10651c74bcrederpj prefix lengths are consistent. Warn only in
c998c5be82bf2b41f8fc27de9376ba10651c74bcrederpj BIND 9.11 and earlier. [RT #43367]
c998c5be82bf2b41f8fc27de9376ba10651c74bcrederpj4483. [bug] Address use before require check and remove extraneous
c998c5be82bf2b41f8fc27de9376ba10651c74bcrederpj dns_message_gettsigkey call in dns_tsig_sign.
c998c5be82bf2b41f8fc27de9376ba10651c74bcrederpj [RT #43374]
58eb8d7cca552570577aa8b636349a695ff193datrawick4482. [cleanup] Change #4455 was incomplete. [RT #43252]
58eb8d7cca552570577aa8b636349a695ff193datrawick4478. [func] Add +continue option to mdig, allow continue on socket
ecf435f0c6379df7ed83285d5597fc9aa39c6f6dbrianp errors. [RT #43281]
ecf435f0c6379df7ed83285d5597fc9aa39c6f6dbrianp4477. [test] Fix mkeys test timing issues. [RT #41028]
480f2a1b2fb27a8284e66e60a5bbaee6bc1ccb04trawick4476. [test] Fix reclimit test on slower machines. [RT #43283]
480f2a1b2fb27a8284e66e60a5bbaee6bc1ccb04trawick4475. [doc] Update named-checkconf documentation. [RT #43153]
acc9093ae1f3c97acc635bd5b2c7c0969da21183trawick4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
acc9093ae1f3c97acc635bd5b2c7c0969da21183trawick getprotobyname and getservbyname work. [RT #43197]
2fa5f4c38890220c6ea439317e7dcb9e8b3c76f7jwoolley4473. [bug] Only call fsync / _commit on regular files. [RT #43196]
2fa5f4c38890220c6ea439317e7dcb9e8b3c76f7jwoolley4472. [bug] Named could fail to find the correct NSEC3 records when
95d00ea81131488769296fa5765ed745cbf45207trawick a zone was updated between looking for the answer and
95d00ea81131488769296fa5765ed745cbf45207trawick looking for the NSEC3 records proving nonexistence
95d00ea81131488769296fa5765ed745cbf45207trawick of the answer. [RT #43247]
95d00ea81131488769296fa5765ed745cbf45207trawick --- 9.11.0 released ---
95d00ea81131488769296fa5765ed745cbf45207trawick --- 9.11.0rc3 released ---
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj4471. [cleanup] Render client/query logging format consistent for
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj ease of log file parsing. (Note that this affects
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj "querylog" format: there is now an additional field
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj indicating the client object address.) [RT #43238]
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj4470. [bug] Reset message with intent parse before
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj calling dns_dispatch_getnext. [RT #43229]
f08574f1098defdf1dc7e7f18a1e3664ee157150rederpj --- 9.11.0rc2 released ---
84854ca5d35fb9f101da948858097c88457eece8coar4468. [bug] Address ECS option handling issues. [RT #43191]
84854ca5d35fb9f101da948858097c88457eece8coar4467. [security] It was possible to trigger an assertion when
30990c446eca5b0d16d42171a6b30da9456ff6b4trawick rendering a message. (CVE-2016-2776) [RT #43139]
30990c446eca5b0d16d42171a6b30da9456ff6b4trawick4466. [bug] Interface scanning didn't work on a Windows system
0fd9de72e2a1be5a6134ee70703324be80d816b7trawick without a non local IPv6 addresses. [RT #43130]
0fd9de72e2a1be5a6134ee70703324be80d816b7trawick4465. [bug] Don't use "%z" as Windows doesn't support it.
0fd9de72e2a1be5a6134ee70703324be80d816b7trawick [RT #43131]
f36d2c405b5a9bcc22c67577995560e7d1b616c0aaron4464. [bug] Fix windows python support. [RT #43173]
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe4463. [bug] The dnstap system test failed on some systems.
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe [RT #43129]
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe4462. [bug] Don't describe a returned EDNS COOKIE as "good"
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe when there isn't a valid server cookie. [RT #43167]
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe4461. [bug] win32: not all external data was properly marked
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe as external data for windows dll. [RT #43161]
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe --- 9.11.0rc1 released ---
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe4460. [test] Add system test for dnstap using unix domain sockets.
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe [RT #42926]
854c7bc4128fa2ad9fdfe0fc307d5ef30bcb5bb9wrowe4459. [bug] TCP client objects created to handle pipeline queries
75f8e1cae5ca3a16a7400cdddf604815ab06b5a8rederpj were not cleaned up correctly, causing uncontrolled
75f8e1cae5ca3a16a7400cdddf604815ab06b5a8rederpj memory growth. [RT #43106]
75f8e1cae5ca3a16a7400cdddf604815ab06b5a8rederpj4458. [cleanup] Update assertions to be more correct, and also remove
75f8e1cae5ca3a16a7400cdddf604815ab06b5a8rederpj use of a reserved word. [RT #43090]
75f8e1cae5ca3a16a7400cdddf604815ab06b5a8rederpj4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
7f481efe04fdc4da7a447c14be62c155cbe00ddbbrianp4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
7f481efe04fdc4da7a447c14be62c155cbe00ddbbrianp [RT #42587]
9ed34e5219ab3506ccfd2ca58751ce4c81b263a8rederpj4455. [cleanup] Allow dyndb modules to correctly log the filename
9ed34e5219ab3506ccfd2ca58751ce4c81b263a8rederpj and line number when processing configuration text
9ed34e5219ab3506ccfd2ca58751ce4c81b263a8rederpj from named.conf. [RT #43050]
23b36269d124e7a6aaa5221891f7ae2ef3eeb158jerenkrantz4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089]
23b36269d124e7a6aaa5221891f7ae2ef3eeb158jerenkrantz4453. [bug] Prefetching of DS records failed to update their
d401ff3af66624a7023460054519070a025d31cfwrowe RRSIGs. [RT #42865]
d401ff3af66624a7023460054519070a025d31cfwrowe4452. [bug] The default key manager policy file is now
d401ff3af66624a7023460054519070a025d31cfwrowe <sysdir>/dnssec-policy.conf (usually
e65b56dc229f063425fac589002e34c8246ad878trawick4451. [cleanup] Log more useful information if a PKCS#11 provider
e65b56dc229f063425fac589002e34c8246ad878trawick library cannot be loaded. [RT #43076]
306bd64cf6568149964abdf8ca748a617ed98500gregames4450. [port] Provide more nuanced HSM support which better matches
306bd64cf6568149964abdf8ca748a617ed98500gregames the specific PKCS11 providers capabilities. [RT #42458]
ae3d212043d50288748fe9fdf0aa1a3e8f2ff3a6wrowe4449. [test] Fix catalog zones test on slower systems. [RT #42997]
ae3d212043d50288748fe9fdf0aa1a3e8f2ff3a6wrowe4448. [bug] win32: ::1 was not being found when iterating
ae3d212043d50288748fe9fdf0aa1a3e8f2ff3a6wrowe interfaces. [RT #42993]
766c20b0366e1d0e359e0d9a834669e19a4db3d9trawick4447. [tuning] Allow the fstrm_iothr_init() options to be set using
766c20b0366e1d0e359e0d9a834669e19a4db3d9trawick named.conf to control how dnstap manages the data
766c20b0366e1d0e359e0d9a834669e19a4db3d9trawick flow. [RT #42974]
766c20b0366e1d0e359e0d9a834669e19a4db3d9trawick4446. [bug] The cache_find() and _findrdataset() functions
766c20b0366e1d0e359e0d9a834669e19a4db3d9trawick could find rdatasets that had been marked stale.
2a6e98ba4ffa30ded5d8831664c5cb2a170a56b6coar [RT #42853]
2a6e98ba4ffa30ded5d8831664c5cb2a170a56b6coar4445. [cleanup] isc_errno_toresult() can now be used to call the
2a6e98ba4ffa30ded5d8831664c5cb2a170a56b6coar formerly private function isc__errno2result().
9a11fa4e07f50f2e5750d078ef3751ddbf441b8ftrawick [RT #43050]
9a11fa4e07f50f2e5750d078ef3751ddbf441b8ftrawick4444. [bug] Fixed some issues related to dyndb: A bug caused
1f279dc92a60df9f61bf58468162aab0eef072e4brianp braces to be omitted when passing configuration text
1f279dc92a60df9f61bf58468162aab0eef072e4brianp from named.conf to a dyndb driver, and there was a
1f279dc92a60df9f61bf58468162aab0eef072e4brianp use-after-free in the sample dyndb driver. [RT #43050]
2fd0edbd8b2f47a8458322bedd3b82f825faf336trawick4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
2fd0edbd8b2f47a8458322bedd3b82f825faf336trawick TCP sockets. [RT #42864]
39021cf8b495cdb94013ca73531ccb32658fb793rederpj4442. [bug] Fix RPZ CIDR tree insertion bug that corrupted
39021cf8b495cdb94013ca73531ccb32658fb793rederpj tree data structure with overlapping networks
39021cf8b495cdb94013ca73531ccb32658fb793rederpj (longest prefix match was ineffective).
39021cf8b495cdb94013ca73531ccb32658fb793rederpj [RT #43035]
39021cf8b495cdb94013ca73531ccb32658fb793rederpj4441. [cleanup] Alphabetize host's help output. [RT #43031]
39021cf8b495cdb94013ca73531ccb32658fb793rederpj4440. [func] Enable TCP fast open support when available on the
fa16f10bc02e46bc5a6c2c2c6371926cd1dbe2edwrowe server side. [RT #42866]
fa16f10bc02e46bc5a6c2c2c6371926cd1dbe2edwrowe4439. [bug] Address race conditions getting ownernames of nodes.
fa16f10bc02e46bc5a6c2c2c6371926cd1dbe2edwrowe [RT #43005]
fa16f10bc02e46bc5a6c2c2c6371926cd1dbe2edwrowe4438. [func] Use LIFO rather than FIFO when processing startup
fa16f10bc02e46bc5a6c2c2c6371926cd1dbe2edwrowe notify and refresh queries. [RT #42825]
fa16f10bc02e46bc5a6c2c2c6371926cd1dbe2edwrowe4437. [func] Minimal-responses now has two additional modes
fa16f10bc02e46bc5a6c2c2c6371926cd1dbe2edwrowe no-auth and no-auth-recursive which suppress
db8ac7cbb1fa6cdd6abcc4bb797d4deed32dd269jim adding the NS records to the authority section
db8ac7cbb1fa6cdd6abcc4bb797d4deed32dd269jim as well as the associated address records for the
db8ac7cbb1fa6cdd6abcc4bb797d4deed32dd269jim nameservers. [RT #42005]
db8ac7cbb1fa6cdd6abcc4bb797d4deed32dd269jim4436. [func] Return TLSA records as additional data for MX and SRV
7b979864a91b52ecebca11d0a9a22e09349e59baminfrin lookups. [RT #42894]
8d755accbdc5ae15bb0d00169b815d264c7de745minfrin4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
7b979864a91b52ecebca11d0a9a22e09349e59baminfrin will not fit into a single IPv4 encapsulated IPv6
7b979864a91b52ecebca11d0a9a22e09349e59baminfrin UDP packet when transmitted over a Ethernet link.
7b0a3bcc0e689305df49f7d4da7abc35aa891862brianp [RT #42871]
7b0a3bcc0e689305df49f7d4da7abc35aa891862brianp4434. [protocol] Return EDNS EXPIRE option for master zones in addition
1bae4591a85d90325ecdacedf7e54d1bbfe31037aaron to slave zones. [RT #43008]
1bae4591a85d90325ecdacedf7e54d1bbfe31037aaron4433. [cleanup] Report an error when passing an invalid option or
a6f48cc01ab8f5377e570c61826dcdfc36741936trawick view name to "rndc dumpdb". [RT #42958]
a6f48cc01ab8f5377e570c61826dcdfc36741936trawick4432. [test] Hide rndc output on expected failures in logfileconfig
a6f48cc01ab8f5377e570c61826dcdfc36741936trawick system test. [RT #27996]
2da345202997f8f5860c801d68f7913c02fc05fctrawick4431. [bug] named-checkconf now checks the rate-limit clause.
2da345202997f8f5860c801d68f7913c02fc05fctrawick [RT #42970]
5bd562b1d7da51cb5715899d32bb4c79c54459b0wrowe4430. [bug] Lwresd died if a search list was not defined.
5bd562b1d7da51cb5715899d32bb4c79c54459b0wrowe Found by 0x710DDDD At Alibaba Security. [RT #42895]
1c06e98017400874d5ff6ad79f13145ec4589225striker4429. [bug] Address potential use after free on fclose() error.
99a041314eb3db0b0cca325c9c40d0a6c5fdf04fwrowe [RT #42976]
99a041314eb3db0b0cca325c9c40d0a6c5fdf04fwrowe4428. [bug] The "test dispatch getnext" unit test could fail
99a041314eb3db0b0cca325c9c40d0a6c5fdf04fwrowe in a threaded build. [RT #42979]
99a041314eb3db0b0cca325c9c40d0a6c5fdf04fwrowe4427. [bug] The "query" and "response" parameters to the
99a041314eb3db0b0cca325c9c40d0a6c5fdf04fwrowe "dnstap" option had their functions reversed.
99a041314eb3db0b0cca325c9c40d0a6c5fdf04fwrowe --- 9.11.0b3 released ---
6e119e632566d69798ce6cf4e714ed374b72914frederpj4426. [bug] Addressed Coverity warnings. [RT #42908]
6e119e632566d69798ce6cf4e714ed374b72914frederpj4425. [bug] arpaname, dnstap-read and named-rrchecker were not
6e119e632566d69798ce6cf4e714ed374b72914frederpj being installed into ${prefix}/bin. Tidy up
bd120542ebe7e09cdbada5daf4924f4690e5ece3trawick installation issues with CHANGE 4421. [RT #42910]
bd120542ebe7e09cdbada5daf4924f4690e5ece3trawick4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
bd120542ebe7e09cdbada5daf4924f4690e5ece3trawick to provide feedback to the trust-anchor administrators
bd120542ebe7e09cdbada5daf4924f4690e5ece3trawick about how key rollovers are progressing as per
68d439bc0482b2e41053480f748edc2574c2ea7btrawick draft-ietf-dnsop-edns-key-tag-02. This can be
68d439bc0482b2e41053480f748edc2574c2ea7btrawick disabled using 'trust-anchor-telemetry no;'.
68d439bc0482b2e41053480f748edc2574c2ea7btrawick [RT #40583]
dddbde8480d265d06c84f2281f01e00f8ef52e94mjc4423. [maint] Added missing IPv6 address 2001:500:84::b for
a5ca705e053a6c754c5958aafcd6f0aa60a2e67frbb4422. [port] Silence clang warnings in dig.c and dighost.c.
e06675c51d084791089d79c3ac18aeae8dd465fcrbb [RT #42451]
e06675c51d084791089d79c3ac18aeae8dd465fcrbb4421. [func] When built with LMDB (Lightning Memory-mapped
e06675c51d084791089d79c3ac18aeae8dd465fcrbb Database), named will now use a database to store
481c1206b6065a8f37ab75ca1fc26c947cb37852ianh the configuration for zones added by "rndc addzone"
481c1206b6065a8f37ab75ca1fc26c947cb37852ianh instead of using a flat NZF file. This improves
481c1206b6065a8f37ab75ca1fc26c947cb37852ianh performance of "rndc delzone" and "rndc modzone"
a964f7434f5c7f512a5fa0d0178260ccb74c84berbb significantly. Existing NZF files will
a964f7434f5c7f512a5fa0d0178260ccb74c84berbb automatically by converted to NZD databases.
a964f7434f5c7f512a5fa0d0178260ccb74c84berbb To view the contents of an NZD or to roll back to
a964f7434f5c7f512a5fa0d0178260ccb74c84berbb NZF format, use "named-nzd2nzf". To disable
6a7877447bcb8e6ff848d72f82f184c404ef4c0bminfrin this feature, use "configure --without-lmdb".
6a7877447bcb8e6ff848d72f82f184c404ef4c0bminfrin [RT #39837]
9335cbd541cca1ca6038af329bbd1645310aabccminfrin4420. [func] nslookup now looks for AAAA as well as A by default.
9335cbd541cca1ca6038af329bbd1645310aabccminfrin [RT #40420]
9335cbd541cca1ca6038af329bbd1645310aabccminfrin4419. [bug] Don't cause undefined result if the label of an
9335cbd541cca1ca6038af329bbd1645310aabccminfrin entry in catalog zone is changed. [RT #42708]
9335cbd541cca1ca6038af329bbd1645310aabccminfrin4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879]
e156db58351d1c040bc72430f3eb072cb6ae7107brianp4417. [bug] dnssec-keymgr could fail to create successor keys
e156db58351d1c040bc72430f3eb072cb6ae7107brianp if the prepublication interval was set to a value
e156db58351d1c040bc72430f3eb072cb6ae7107brianp smaller than the default. [RT #42820]
1c06e98017400874d5ff6ad79f13145ec4589225striker4416. [bug] dnssec-keymgr: Domain names in policy files could
1c06e98017400874d5ff6ad79f13145ec4589225striker fail to match due to trailing dots. [RT #42807]
eb1349e4ab58bd2935f7054a1bfc5c86ab5a5fa3striker4415. [bug] dnssec-keymgr: Expired/deleted keys were not always
eb1349e4ab58bd2935f7054a1bfc5c86ab5a5fa3striker excluded. [RT #42884]
6a94da925498a20a09fde0a66002607be8d83b1astriker4414. [bug] Corrected a bug in the MIPS implementation of
75161f3b2029c25bdb3f8ab87b85cb1810c479eajerenkrantz isc_atomic_xadd(). [RT #41965]
8dc5aa056a586ffa920a6ecd5c31048702371ea6brianp4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
4c9d27bfdfea41b388dc705f7cc2b49318ab5344jim was returned. [RT #42733]
4c9d27bfdfea41b388dc705f7cc2b49318ab5344jim --- 9.11.0b2 released ---
e8e8ab3cbc3d90f15eb78e094c381a6e908fd6efjerenkrantz4412. [cleanup] Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was
e8e8ab3cbc3d90f15eb78e094c381a6e908fd6efjerenkrantz removed. [RT #42721]
f4c472b8dce3c2e559232dbb5b27ed2466922ea4jerenkrantz4411. [func] "rndc dnstap -roll" automatically rolls the
8dc5aa056a586ffa920a6ecd5c31048702371ea6brianp dnstap output file; the previous version is
8dc5aa056a586ffa920a6ecd5c31048702371ea6brianp saved with ".0" suffix, and earlier versions
8dc5aa056a586ffa920a6ecd5c31048702371ea6brianp with ".1" and so on. An optional numeric argument
7e31ef4870c7ef94838585004405e8854fefcc51ianh indicates how many prior files to save. [RT #42830]
7e31ef4870c7ef94838585004405e8854fefcc51ianh4410. [bug] Address use after free and memory leak with dnstap.
7e31ef4870c7ef94838585004405e8854fefcc51ianh [RT #42746]
bd496a3a7752a55c849e62ed00cacc492d4f6d3erederpj4409. [bug] DNS64 should exclude mapped addresses by default when
bd496a3a7752a55c849e62ed00cacc492d4f6d3erederpj an exclude acl is not defined. [RT #42810]
bd496a3a7752a55c849e62ed00cacc492d4f6d3erederpj4408. [func] Continue waiting for expected response when we the
bd496a3a7752a55c849e62ed00cacc492d4f6d3erederpj response we get does not match the request. [RT #41026]
a8c401eadf77822e851f19c7740e7ec6dca03daastoddard4407. [performance] Use GCC builtin for clz in RPZ lookup code.
a8c401eadf77822e851f19c7740e7ec6dca03daastoddard [RT #42818]
93d7153aa172665f55b04463b831ad556269c3efbrianp4406. [security] getrrsetbyname with a non absolute name could
791781f2ccc1f1f1bc1b1643861d3da23edfd147jerenkrantz trigger an infinite recursion bug in lwresd
791781f2ccc1f1f1bc1b1643861d3da23edfd147jerenkrantz and named with lwres configured if when combined
2ffa5829cad36f12b0a1fc3481592e85bc210a5bjerenkrantz with a search list entry the resulting name is
2ffa5829cad36f12b0a1fc3481592e85bc210a5bjerenkrantz too long. (CVE-2016-2775) [RT #42694]
02e8590d904653a95eca31bdf8e60866642bb592slive4405. [bug] Change 4342 introduced a regression where you could
02e8590d904653a95eca31bdf8e60866642bb592slive not remove a delegation in a NSEC3 signed zone using
30a5ee06ae5f7f67a83d6852871f654ae3e14aadslive OPTOUT via nsupdate. [RT #42702]
a97c4ce2bea3dbf8ddc82c796cf93aa6b46765a4brianp4404. [misc] Allow krb5-config to be used when configuring gssapi.
a97c4ce2bea3dbf8ddc82c796cf93aa6b46765a4brianp [RT #42580]
b7838ae85a698af19d90ba4ebe03e10bdc149eacjerenkrantz4403. [bug] Rename variables and arguments that shadow: basename,
b7838ae85a698af19d90ba4ebe03e10bdc149eacjerenkrantz clone and gai_error.
435d2db95b905b0d16d35410e18ff77dc39688aabrianp4402. [bug] protoc-c is now a hard requirement for --enable-dnstap.
1a7728c0205d607d5d87c6b6bf1b8837a9785a99ianh --- 9.11.0b1 released ---
a574815e2c6db68b9d8139db89921ededf033decianh4401. [misc] Change LICENSE to MPL 2.0.
964f539e766a3301b3e2f767baeffddcf9f6092bjerenkrantz4400. [bug] ttl policy was not being inherited in policy.py.
5e538c6ced13aa2f7c358e1a44f651d31dd5fab8brianp4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and
5e538c6ced13aa2f7c358e1a44f651d31dd5fab8brianp 'ECDSAP384SHA384' don't have settable keysize.
5e538c6ced13aa2f7c358e1a44f651d31dd5fab8brianp [RT #42718]
61202a45487668abad788c02e339f626176e645fianh4398. [bug] Correct spelling of ECDSAP256SHA256 in policy.py.
61202a45487668abad788c02e339f626176e645fianh [RT #42718]
02c49e1f35a4d1a171df2d319e76af0c5163dc4dmartin4397. [bug] Update Windows python support. [RT #42538]
6deb8bcfb8511ac38243a8274fc589842841b398ianh4396. [func] dnssec-keymgr now takes a '-r randomfile' option.
6deb8bcfb8511ac38243a8274fc589842841b398ianh [RT #42455]
49bbbd1939208be54a3eb00b95e61d90d180a606ianh4395. [bug] Improve out-of-tree installation of python modules.
49bbbd1939208be54a3eb00b95e61d90d180a606ianh [RT #42586]
93d7153aa172665f55b04463b831ad556269c3efbrianp4394. [func] Add rndc command "dnstap-reopen" to close and
93d7153aa172665f55b04463b831ad556269c3efbrianp reopen dnstap output files. [RT #41803]
bc6600a6207e5d15b895294e370e4e3320a803d8stoddard4393. [bug] Address potential NULL pointer dereferences in
bc6600a6207e5d15b895294e370e4e3320a803d8stoddard dnstap code.
bc6600a6207e5d15b895294e370e4e3320a803d8stoddard4392. [func] Collect statistics for RSSAC02v3 traffic-volume,
bc6600a6207e5d15b895294e370e4e3320a803d8stoddard traffic-sizes and rcode-volume reporting. [RT #41475]
bc6600a6207e5d15b895294e370e4e3320a803d8stoddard4391. [contrib] Fix leaks in contrib DLZ code. [RT #42707]
7a23067e782dd5612d4d4b539906e1733b664df7jwoolley4390. [doc] Description of masters with TSIG, allow-query and
5c214a63f9722864ac4983995da11353779515dbrederpj allow-transfer options in catalog zones. [RT #42692]
5c214a63f9722864ac4983995da11353779515dbrederpj4389. [test] Rewritten test suite for catalog zones. [RT #42676]
9f20717d827f2113a23dfa45539813171cf626eaianh4388. [func] Support for master entries with TSIG keys in catalog
9f20717d827f2113a23dfa45539813171cf626eaianh zones. [RT #42577]
9f20717d827f2113a23dfa45539813171cf626eaianh4387. [bug] Change 4336 was not complete leading to SERVFAIL
a0db2f093595083300ad3438314f90921405ccf9wrowe being return as NS records expired. [RT #42683]
a0db2f093595083300ad3438314f90921405ccf9wrowe4386. [bug] Remove shadowed overmem function/variable. [RT #42706]
c66798efb2184ecf904cd8471acd17e65688b1caianh4385. [func] Add support for allow-query and allow-transfer ACLs
fb59f85aab19883025f619727948b8088232cc4brederpj to catalog zones. [RT #42578]
fb59f85aab19883025f619727948b8088232cc4brederpj4384. [bug] Change 4256 accidentally disabled logging of the
fb59f85aab19883025f619727948b8088232cc4brederpj rndc command. [RT #42654]
1a1cf0ee9229ee29e5750b25dd94dbb9b04072cfianh4383. [bug] Correct spelling error in stats channel description of
1a1cf0ee9229ee29e5750b25dd94dbb9b04072cfianh "EDNS client subnet option received". [RT #42633]
61afed048a4d67ed923d52e5c865c0f10a8e9e73trawick4382. [bug] rndc {addzone,modzone,delzone,showzone} should all
0bbb249eafe9ef9508821f0ef58e7440625ecd62trawick compare the zone name using a canonical format.
0bbb249eafe9ef9508821f0ef58e7440625ecd62trawick [RT #42630]
7a23067e782dd5612d4d4b539906e1733b664df7jwoolley4381. [bug] Missing "zone-directory" option in catalog zone
7a23067e782dd5612d4d4b539906e1733b664df7jwoolley definition caused BIND to crash. [RT #42579]
7a23067e782dd5612d4d4b539906e1733b664df7jwoolley --- 9.11.0a3 released ---
6032a7c97a25c52f4bdd78ce23f2010e52c9e81arederpj4380. [experimental] Added a "zone-directory" option to "catalog-zones"
6032a7c97a25c52f4bdd78ce23f2010e52c9e81arederpj syntax, allowing local masterfiles for slaves
ba2e14e474516f1c75a96b4f6d1a9dec332175efianh that are provisioned by catalog zones to be stored
ba2e14e474516f1c75a96b4f6d1a9dec332175efianh in a directory other than the server's working
ec69fc6e323eb1f3112966e06e9e37be608d052cianh directory. [RT #42527]
f0791c5bdfd36969d292a4092df076aa6d1c34ccwrowe4379. [bug] An INSIST could be triggered if a zone contains
f0791c5bdfd36969d292a4092df076aa6d1c34ccwrowe RRSIG records with expiry fields that loop
f0791c5bdfd36969d292a4092df076aa6d1c34ccwrowe using serial number arithmetic. [RT #40571]
749011213737e8d0cd6ca78d5eb532ec6f6b9fdfianh4378. [contrib] #include <isc/string.h> for strlcat in zone2ldap.c.
749011213737e8d0cd6ca78d5eb532ec6f6b9fdfianh [RT #42525]
ec69fc6e323eb1f3112966e06e9e37be608d052cianh4377. [bug] Don't reuse zero TTL responses beyond the current
e7bf4d6f15d04e86e20002e65f60d7fbf80e5974stoddard client set (excludes ANY/SIG/RRSIG queries).
e7bf4d6f15d04e86e20002e65f60d7fbf80e5974stoddard [RT #42142]
de42d3dfd83a4cc62f0dd6b79ee5cbcfa69fd503brianp4376. [experimental] Added support for Catalog Zones, a new method for
de42d3dfd83a4cc62f0dd6b79ee5cbcfa69fd503brianp provisioning secondary servers in which a list of
de42d3dfd83a4cc62f0dd6b79ee5cbcfa69fd503brianp zones to be served is stored in a DNS zone and can
de42d3dfd83a4cc62f0dd6b79ee5cbcfa69fd503brianp be propagated to slaves via AXFR/IXFR. [RT #41581]
44380fc1701cbb8b0a977d5a1497f0c6ee912e0bfielding4375. [func] Add support for automatic reallocation of isc_buffer
44380fc1701cbb8b0a977d5a1497f0c6ee912e0bfielding to isc_buffer_put* functions. [RT #42394]
44380fc1701cbb8b0a977d5a1497f0c6ee912e0bfielding4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
44380fc1701cbb8b0a977d5a1497f0c6ee912e0bfielding probability of reference counting errors as seen
44380fc1701cbb8b0a977d5a1497f0c6ee912e0bfielding in 4365. [RT #42405]
a8dda281113c5038945423320d8c9b42e3d1ddb1jwoolley4373. [bug] Address undefined behavior in getaddrinfo. [RT #42479]
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe4372. [bug] Address undefined behavior in libt_api. [RT #42480]
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe4371. [func] New "minimal-any" option reduces the size of UDP
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe responses for qtype ANY by returning a single
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe arbitrarily selected RRset instead of all RRsets.
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe Thanks to Tony Finch. [RT #41615]
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe4370. [bug] Address python3 compatibility issues with RNDC module.
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe [RT #42499] [RT #42506]
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe --- 9.11.0a2 released ---
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe4369. [bug] Fix 'make' and 'make install' out-of-tree python
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe support. [RT #42484]
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe4368. [bug] Fix a crash when calling "rndc stats" on some
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe Windows builds because some Visual Studio compilers
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe generated crashing code for the "%z" printf()
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe format specifier. [RT #42380]
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe4367. [bug] Remove unnecessary assignment of loadtime in
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe zone_touched. [RT #42440]
39dde7f4cd79d701cc14e5beac8ea528bc58d038wrowe4366. [bug] Address race condition when updating rbtnode bit
268ac122b1fd6fa948b30bdf0d8c0d80e75d68dawrowe fields. [RT #42379]
268ac122b1fd6fa948b30bdf0d8c0d80e75d68dawrowe4365. [bug] Address zone reference counting errors involving
268ac122b1fd6fa948b30bdf0d8c0d80e75d68dawrowe nxdomain-redirect. [RT #42258]
268ac122b1fd6fa948b30bdf0d8c0d80e75d68dawrowe4364. [port] freebsd: add -Wl,-E to loader flags [RT #41690]
6ba861fd6c705eaeb1f9bb97df86ddea6895e263minfrin4363. [port] win32: Disable explicit triggering UAC when running
6ba861fd6c705eaeb1f9bb97df86ddea6895e263minfrin BINDInstall.
b78ed256f4b99e72836d36fd68d4e7a26dbe032cianh4362. [func] Changed rndc reconfig behavior so that newly added
b78ed256f4b99e72836d36fd68d4e7a26dbe032cianh zones are loaded asynchronously and the loading does
b78ed256f4b99e72836d36fd68d4e7a26dbe032cianh not block the server. [RT #41934]
e7ec1c54206901c9369e40f471b71836c78e017dwrowe4361. [cleanup] Where supported, file modification times returned
698670444b30b79e808155739f98c39bec35f72awrowe by isc_file_getmodtime() are now accurate to the
57bea0f0559e31536af3b7b5859d3681ee29a34cwrowe nanosecond. [RT #41968]
57bea0f0559e31536af3b7b5859d3681ee29a34cwrowe4360. [bug] Silence spurious 'bad key type' message when there is
57bea0f0559e31536af3b7b5859d3681ee29a34cwrowe a existing TSIG key. [RT #42195]
57bea0f0559e31536af3b7b5859d3681ee29a34cwrowe4359. [bug] Inherited 'also-notify' lists were not being checked
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick by named-checkconf. [RT #42174]
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick4358. [test] Added American Fuzzy Lop harness that allows
94e2b2d12fa269af16fa63a6270d3336d9f126f2trawick feeding fuzzed packets into BIND.
35313c8d7368125c3e95d3118238d2be9a613000trawick [RT #41723]
35313c8d7368125c3e95d3118238d2be9a613000trawick4357. [func] Add the python RNDC module. [RT #42093]
55da18d54a0ba74dc51aecba5b0daf71a2ed10a7trawick4356. [func] Add the ability to specify whether to wait for
55da18d54a0ba74dc51aecba5b0daf71a2ed10a7trawick nameserver addresses to be looked up or not to
55da18d54a0ba74dc51aecba5b0daf71a2ed10a7trawick RPZ with a new modifying directive 'nsip-wait-recurse'.
55da18d54a0ba74dc51aecba5b0daf71a2ed10a7trawick [RT #35009]
c51f2b89da23e3371959a74808dee1792d96f5c1wsanchez4355. [func] "pkcs11-list" now displays the extractability
c51f2b89da23e3371959a74808dee1792d96f5c1wsanchez attribute of private or secret keys stored in
c51f2b89da23e3371959a74808dee1792d96f5c1wsanchez an HSM, as either "true", "false", or "never"
c51f2b89da23e3371959a74808dee1792d96f5c1wsanchez Thanks to Daniel Stirnimann. [RT #36557]
79c9b0ac498d97336874edba0daf9f544ad14671trawick4354. [bug] Check that the received HMAC length matches the
79c9b0ac498d97336874edba0daf9f544ad14671trawick expected length prior to check the contents on the
79c9b0ac498d97336874edba0daf9f544ad14671trawick control channel. This prevents a OOB read error.
79c9b0ac498d97336874edba0daf9f544ad14671trawick This was reported by Lian Yihan, <lianyihan@360.cn>.
5a7d934619b2be92e18be5dd3366f4ac6ddeab43trawick [RT #42215]
5a7d934619b2be92e18be5dd3366f4ac6ddeab43trawick4353. [cleanup] Update PKCS#11 header files. [RT #42175]
5a70e5b66eb7758d0e64e070211f699fc83fca70wrowe4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service
5a70e5b66eb7758d0e64e070211f699fc83fca70wrowe is scheduled to be disabled in 2017. A warning is
5a70e5b66eb7758d0e64e070211f699fc83fca70wrowe now logged when named is configured to use it,
5a70e5b66eb7758d0e64e070211f699fc83fca70wrowe either explicitly or via "dnssec-lookaside auto;"
84eeb0ab12215fc22577a9a0a9589cea2a445712trawick [RT #42207]
1d3fbd2d9f03c0826977d940a2081401edf522d4jerenkrantz4351. [bug] 'dig +noignore' didn't work. [RT #42273]
b5cc0253789825ace46944dc9cde744be08dd77fjerenkrantz4350. [contrib] Declare result in dlz_filesystem_dynamic.c.
e4bb84f3c11f282d3ba66f64940b1b8e13f85e7aslive4349. [contrib] kasp2policy: A python script to create a DNSSEC
e4bb84f3c11f282d3ba66f64940b1b8e13f85e7aslive policy file from an OpenDNSSEC KASP XML file.
e4bb84f3c11f282d3ba66f64940b1b8e13f85e7aslive4348. [func] dnssec-keymgr: A new python-based DNSSEC key
e4bb84f3c11f282d3ba66f64940b1b8e13f85e7aslive management utility, which reads a policy definition
e4bb84f3c11f282d3ba66f64940b1b8e13f85e7aslive file and can create or update DNSSEC keys as needed
e4bb84f3c11f282d3ba66f64940b1b8e13f85e7aslive to ensure that a zone's keys match policy, roll over
ba2bab42e97405dc41c0f8fe3416f7f9a79ed7a9brianp correctly on schedule, etc. Thanks to Sebastian
ba2bab42e97405dc41c0f8fe3416f7f9a79ed7a9brianp Castro for assistance in development. [RT #39211]
756b54396a86db555817bb52149d91b60d00e35fwrowe4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
756b54396a86db555817bb52149d91b60d00e35fwrowe4346. [bug] Fixed a regression introduced in change #4337 which
756b54396a86db555817bb52149d91b60d00e35fwrowe caused signed domains with revoked KSKs to fail
b4251d1fbef86f96e01c68f8de086e0dbb8bcb74trawick validation. [RT #42147]
b4251d1fbef86f96e01c68f8de086e0dbb8bcb74trawick4345. [contrib] perftcpdns mishandled the return values from
24efed0910118b762a4eb84830875d4714b8d315ianh clock_nanosleep. [RT #42131]
50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp4344. [port] Address openssl version differences. [RT #42059]
50e60f30bdc074fbc887f0b98f4d570457ac97c9brianp4343. [bug] dns_dnssec_syncupdate mis-declared in <dns/dnssec.h>.
bdbafc44d060509e86f0cc56ff4d19579438f846striker [RT #42090]
bdbafc44d060509e86f0cc56ff4d19579438f846striker4342. [bug] 'rndc flushtree' could fail to clean the tree if there
fbd0c3dbae333ba4a7225dad2d090419ad894e4ctrawick wasn't a node at the specified name. [RT #41846]
bdbafc44d060509e86f0cc56ff4d19579438f846striker --- 9.11.0a1 released ---
6d0ec39a3ef89ce485f23008efa399b7b35bf1fdjwoolley4341. [bug] Correct the handling of ECS options with
6d0ec39a3ef89ce485f23008efa399b7b35bf1fdjwoolley address family 0. [RT #41377]
6d0ec39a3ef89ce485f23008efa399b7b35bf1fdjwoolley4340. [performance] Implement adaptive read-write locks, reducing the
0fdf8c342123fde84405b885fb1720ebc652e10djerenkrantz overhead of locks that are only held briefly.
0fdf8c342123fde84405b885fb1720ebc652e10djerenkrantz4339. [test] Use "mdig" to test pipelined queries. [RT #41929]
6b87b6eee6a43f40ef6bead9ef3173979b4cd76crbb4338. [bug] Reimplement change 4324 as it wasn't properly doing
6b87b6eee6a43f40ef6bead9ef3173979b4cd76crbb all the required book keeping. [RT #41941]
6b87b6eee6a43f40ef6bead9ef3173979b4cd76crbb4337. [bug] The previous change exposed a latent flaw in
6b87b6eee6a43f40ef6bead9ef3173979b4cd76crbb key refresh queries for managed-keys when
bfd2cedbf2918fcb95daa9f850ecdf5e24765c22jerenkrantz a cached DNSKEY had TTL 0. [RT #41986]
bfd2cedbf2918fcb95daa9f850ecdf5e24765c22jerenkrantz4336. [bug] Don't emit records with zero ttl unless the records
f9a773d26994c3b267589e404cdb5b760f83e888jerenkrantz were learnt with a zero ttl. [RT #41687]
f9a773d26994c3b267589e404cdb5b760f83e888jerenkrantz4335. [bug] zone->view could be detached too early. [RT #41942]
a250599aab6669d5877edf158032efd2538e5820trawick4334. [func] 'named -V' now reports zlib version. [RT #41913]
a250599aab6669d5877edf158032efd2538e5820trawick4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
41338e6ead3fa8d60ad3841d069f4b47e71d9177wrowe 2001:500:9f::42.
41338e6ead3fa8d60ad3841d069f4b47e71d9177wrowe4332. [placeholder]
92b0ffb9cbc04b3d9c7ce6becadc0c3d88dea2d9wrowe4331. [func] When loading managed signed zones detect if the
92b0ffb9cbc04b3d9c7ce6becadc0c3d88dea2d9wrowe RRSIG's inception time is in the future and regenerate
92b0ffb9cbc04b3d9c7ce6becadc0c3d88dea2d9wrowe the RRSIG immediately. [RT #41808]
961ff00a8f1fe79a8ac8b18617b40a404e28cb35brianp4330. [protocol] Identify the PAD option as "PAD" when printing out
6a82dfd37385024d0e94e71edd2f46b609796cfdwrowe4329. [func] Warn about a common misconfiguration when forwarding
6a82dfd37385024d0e94e71edd2f46b609796cfdwrowe RFC 1918 zones. [RT #41441]
6a82dfd37385024d0e94e71edd2f46b609796cfdwrowe4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
6a82dfd37385024d0e94e71edd2f46b609796cfdwrowe4327. [func] Log query and depth counters during fetches when
6a82dfd37385024d0e94e71edd2f46b609796cfdwrowe querytrace (./configure --enable-querytrace) is
6a82dfd37385024d0e94e71edd2f46b609796cfdwrowe enabled (helps in diagnosing). [RT #41787]
c43fd8f8f90a7549bffe1e581eedbd087db1163estoddard4326. [protocol] Add support for AVC. [RT #41819]
a8dda281113c5038945423320d8c9b42e3d1ddb1jwoolley4325. [func] Add a line to "rndc status" indicating the
854cc4d3451547c2359c27870a3c354ad385a49bianh hostname and operating system details. [RT #41610]
854cc4d3451547c2359c27870a3c354ad385a49bianh4324. [bug] When deleting records from a zone database, interior
02ec77ed8e15b4b601de98a322e4bd8d7d3e1ec2trawick nodes could be left empty but not deleted, damaging
02ec77ed8e15b4b601de98a322e4bd8d7d3e1ec2trawick search performance afterward. [RT #40997]
49ada1eac7c4cae429ba193273b7f40f355d9c7ejwoolley4323. [bug] Improve HTTP header processing on statschannel.
49ada1eac7c4cae429ba193273b7f40f355d9c7ejwoolley [RT #41674]
88425bd3442321915195ac9dfa9a80ffcd968fa4brianp4322. [security] Duplicate EDNS COOKIE options in a response could
88425bd3442321915195ac9dfa9a80ffcd968fa4brianp trigger an assertion failure. (CVE-2016-2088)
88425bd3442321915195ac9dfa9a80ffcd968fa4brianp [RT #41809]
a8dda281113c5038945423320d8c9b42e3d1ddb1jwoolley4321. [bug] Zones using mapped files containing out-of-zone data
a8dda281113c5038945423320d8c9b42e3d1ddb1jwoolley could return SERVFAIL instead of the expected NODATA
a8dda281113c5038945423320d8c9b42e3d1ddb1jwoolley or NXDOMAIN results. [RT #41596]
37b8494ffaeb4ee9a9a2f9917d334078c16d4212jwoolley4320. [bug] Insufficient memory allocation when handling
37b8494ffaeb4ee9a9a2f9917d334078c16d4212jwoolley "none" ACL could cause an assertion failure in
bf3d1782a29630335a1df535eb395355ab1cd154jwoolley named when parsing ACL configuration. [RT #41745]
37b8494ffaeb4ee9a9a2f9917d334078c16d4212jwoolley4319. [security] Fix resolver assertion failure due to improper
da16bea08c6ff10ceb8d250ff23e8e81a372cef8jwoolley DNAME handling when parsing fetch reply messages.
da16bea08c6ff10ceb8d250ff23e8e81a372cef8jwoolley (CVE-2016-1286) [RT #41753]
99f692732327e0c200fd639105dbf9940bd229f1rbb4318. [security] Malformed control messages can trigger assertions
99f692732327e0c200fd639105dbf9940bd229f1rbb in named and rndc. (CVE-2016-1285) [RT #41666]
80f73246cc14f02d50bfac5306c079464c2dd1c6rbb4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
80f73246cc14f02d50bfac5306c079464c2dd1c6rbb4316. [func] Add option to tools to print RRs in unknown
80f73246cc14f02d50bfac5306c079464c2dd1c6rbb presentation format [RT #41595].
dcdc78fce34f06533df4829abbc726f7fbf207fejwoolley4315. [bug] Check that configured view class isn't a meta class.
dcdc78fce34f06533df4829abbc726f7fbf207fejwoolley [RT #41572].
d4a93d608a28bf331625544a2896fa20bef4a2b4rbb4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
d4a93d608a28bf331625544a2896fa20bef4a2b4rbb testing tools provided by Nominum, Inc.
d4a93d608a28bf331625544a2896fa20bef4a2b4rbb4313. [bug] Handle ns_client_replace failures in test mode.
36fcd3d96b9bf9a2d4af424e64584b5dede3e3e6brianp [RT #41190]
36fcd3d96b9bf9a2d4af424e64584b5dede3e3e6brianp4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
4b34d6a5b70303010612df6c87da3ee91ae86078rbb was not consistent. [RT #41600]
4b34d6a5b70303010612df6c87da3ee91ae86078rbb4311. [bug] Prevent "rndc delzone" from being used on
4b34d6a5b70303010612df6c87da3ee91ae86078rbb response-policy zones. [RT #41593]
4b34d6a5b70303010612df6c87da3ee91ae86078rbb4310. [performance] Use __builtin_expect() where available to annotate
4b34d6a5b70303010612df6c87da3ee91ae86078rbb conditions with known behavior. [RT #41411]
84bdb86d57d2a2f828b17e77ac2379fed551c2adtrawick4309. [cleanup] Remove the spurious "none" filename from log messages
84bdb86d57d2a2f828b17e77ac2379fed551c2adtrawick when processing built-in configuration. [RT #41594]
46603605c2edcc1cc84fa45634e19a395134078atrawick4308. [func] Added operating system details to "named -V"
46603605c2edcc1cc84fa45634e19a395134078atrawick output. [RT #41452]
46603605c2edcc1cc84fa45634e19a395134078atrawick4307. [bug] "dig +subnet" and "mdig +subnet" could send
46603605c2edcc1cc84fa45634e19a395134078atrawick incorrectly-formatted Client Subnet options
86826d685f83170ca07d56550db9f0c2922a916btrawick if the prefix length was not divisible by 8.
86826d685f83170ca07d56550db9f0c2922a916btrawick Also fixed a memory leak in "mdig". [RT #45178]
86826d685f83170ca07d56550db9f0c2922a916btrawick4306. [maint] Added a PKCS#11 openssl patch supporting
86826d685f83170ca07d56550db9f0c2922a916btrawick version 1.0.2f [RT #38312]
4f412c60e9c2af999619d11b236068a0e0e94944trawick4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
4f412c60e9c2af999619d11b236068a0e0e94944trawick from the zone's apex. [RT #41483]
4f6effa17a5084085c9104b0bb97c2ba1622cfa6jerenkrantz4304. [port] xfer system test failed as 'tail -n +value' is not
4f6effa17a5084085c9104b0bb97c2ba1622cfa6jerenkrantz portable. [RT #41315]
bfa5c37259833629155d486bb1571d39a57de64dbnicholes4303. [bug] "dig +subnet" was unable to send a prefix length of
bfa5c37259833629155d486bb1571d39a57de64dbnicholes zero, as it was incorrectly changed to 32 for v4
bfa5c37259833629155d486bb1571d39a57de64dbnicholes prefixes or 128 for v6 prefixes. In addition to
a946a7e607c21cf6068e7380d7e81cc2bf027913trawick fixing this, "dig +subnet=0" has been added as a
a946a7e607c21cf6068e7380d7e81cc2bf027913trawick short form for 0.0.0.0/0. The same changes have
da16bea08c6ff10ceb8d250ff23e8e81a372cef8jwoolley also been made in "mdig". [RT #41553]
c88a70518d7d0b5bccb22a68d446c2d6589790dcjwoolley4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
e59e4b703b7e19c4b35030e4baac8a96a8d4b504dougm4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534]
e59e4b703b7e19c4b35030e4baac8a96a8d4b504dougm4300. [bug] A flag could be set in the wrong field when setting
5717c6b0b97a065a84fba32cebeee959a5fe4f15dougm up non-recursive queries; this could cause the
5717c6b0b97a065a84fba32cebeee959a5fe4f15dougm SERVFAIL cache to cache responses it shouldn't.
5717c6b0b97a065a84fba32cebeee959a5fe4f15dougm New querytrace logging has been added which
5717c6b0b97a065a84fba32cebeee959a5fe4f15dougm identified this error. [RT #41155]
5717c6b0b97a065a84fba32cebeee959a5fe4f15dougm4299. [bug] Check that exactly totallen bytes are read when
835836eaf9e2a23192a262307b08f626e50e2180trawick reading a RRset from raw files in both single read
835836eaf9e2a23192a262307b08f626e50e2180trawick and incremental modes. [RT #41402]
81dddb023f9dd43b350f782972c1f75a88a2d93ftrawick4298. [bug] dns_rpz_add errors in loadzone were not being
81dddb023f9dd43b350f782972c1f75a88a2d93ftrawick propagated up the call stack. [RT #41425]
9b9e0eca165f5f464e357bb2a9b8bbfc9621067cwrowe4297. [test] Ensure delegations in RPZ zones fail robustly.
9b9e0eca165f5f464e357bb2a9b8bbfc9621067cwrowe [RT #41518]
9b9e0eca165f5f464e357bb2a9b8bbfc9621067cwrowe4296. [bug] TCP packet sizes were calculated incorrectly in the
9b9e0eca165f5f464e357bb2a9b8bbfc9621067cwrowe stats channel; they could be counted in the wrong
9b9e0eca165f5f464e357bb2a9b8bbfc9621067cwrowe histogram bucket. [RT #40587]
b26781e595625911fc8fc8215133ad2285ed75d8jim4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
b26781e595625911fc8fc8215133ad2285ed75d8jim could allow incorrect text formatting of EDNS EXPIRE
5117466ef123b1efbc2feba168f37069ef6f230bianh options. [RT #41437]
5117466ef123b1efbc2feba168f37069ef6f230bianh4294. [bug] Fixed a regression in which "rndc stop -p" failed
9c39f8fb982df4dbce5304e49385568e6d35bfa8trawick to print the PID. [RT #41513]
9c39f8fb982df4dbce5304e49385568e6d35bfa8trawick4293. [bug] Address memory leak on priming query creation failure.
9c39f8fb982df4dbce5304e49385568e6d35bfa8trawick [RT #41512]
bdd4aa13a97de79596cd19708f1516e8fa92700ewrowe4292. [placeholder]
bdd4aa13a97de79596cd19708f1516e8fa92700ewrowe4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
1d50c90ddb7e3d144ec8a2bd848ca1e7bbf8e534bnicholes4290. [func] The timers returned by the statistics channel
bdd4aa13a97de79596cd19708f1516e8fa92700ewrowe (indicating current time, server boot time, and
bdd4aa13a97de79596cd19708f1516e8fa92700ewrowe most recent reconfiguration time) are now reported
1d50c90ddb7e3d144ec8a2bd848ca1e7bbf8e534bnicholes with millisecond accuracy. [RT #40082]
24e361af20a3107dc934b4895911ce6bcce0603ejwoolley4289. [bug] The server could crash due to memory being used
24e361af20a3107dc934b4895911ce6bcce0603ejwoolley after it was freed if a zone transfer timed out.
24e361af20a3107dc934b4895911ce6bcce0603ejwoolley [RT #41297]
4657f9b12af4b123b80e15c73fa03c190e47a8bftrawick4288. [bug] Fixed a regression in resolver.c:possibly_mark()
4657f9b12af4b123b80e15c73fa03c190e47a8bftrawick which caused known-bogus servers to be queried
4657f9b12af4b123b80e15c73fa03c190e47a8bftrawick anyway. [RT #41321]
c36bac9a918f59b2dbf5dcd7d67b50c1da04c89drbb4287. [bug] Silence an overly noisy log message when message
c36bac9a918f59b2dbf5dcd7d67b50c1da04c89drbb parsing fails. [RT #41374]
c36bac9a918f59b2dbf5dcd7d67b50c1da04c89drbb4286. [security] render_ecs errors were mishandled when printing out
c36bac9a918f59b2dbf5dcd7d67b50c1da04c89drbb a OPT record resulting in a assertion failure.
ad668861e40da485f2eea24dc4c1f9940e470698rbb (CVE-2015-8705) [RT #41397]
ad668861e40da485f2eea24dc4c1f9940e470698rbb4285. [security] Specific APL data could trigger a INSIST.
ad668861e40da485f2eea24dc4c1f9940e470698rbb (CVE-2015-8704) [RT #41396]
89211a5d592cdf0170d2b541946661b1a2a279c5trawick4284. [bug] Some GeoIP options were incorrectly documented
89211a5d592cdf0170d2b541946661b1a2a279c5trawick using abbreviated forms which were not accepted by
89211a5d592cdf0170d2b541946661b1a2a279c5trawick named. The code has been updated to allow both
5caa0a5c428439b566a4fcc711747e2053bcfd1ajerenkrantz long and abbreviated forms. [RT #41381]
5caa0a5c428439b566a4fcc711747e2053bcfd1ajerenkrantz4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
34d672a81f3e72f30568462135ddf6d71dcfa8d8bnicholes4282. [func] 'dig +[no]mapped' determine whether the use of mapped
34d672a81f3e72f30568462135ddf6d71dcfa8d8bnicholes IPv4 addresses over IPv6 is permitted or not. The
b1d2d2797866636f792717f96401292481697145wrowe default is +mapped. [RT #41307]
b1d2d2797866636f792717f96401292481697145wrowe4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
b1d2d2797866636f792717f96401292481697145wrowe4280. [performance] Use optimal message sizes to improve compression
b1d2d2797866636f792717f96401292481697145wrowe in AXFRs. This reduces network traffic. [RT #40996]
b1d2d2797866636f792717f96401292481697145wrowe4279. [test] Don't use fixed ports when unit testing. [RT #41194]
4a98c07ecf4f27a9b18963bbe85260857664d03bjerenkrantz4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
b24d065530fdf97376f390522396be5a4469fcf4jerenkrantz4277. [performance] Improve performance of the RBT, the central zone
b24d065530fdf97376f390522396be5a4469fcf4jerenkrantz datastructure: The aux hashtable was improved,
b24d065530fdf97376f390522396be5a4469fcf4jerenkrantz hash function was updated to perform more
a981bcb9c3b780184e75ff069d67fe84da6c3d3dbnicholes uniform mapping, uppernode was added to
a981bcb9c3b780184e75ff069d67fe84da6c3d3dbnicholes dns_rbtnode, and other cleanups and performance
8e2e1446dd3b216c1f414493758f8b0d267a3c0dwrowe improvements were made. [RT #41165]
a981bcb9c3b780184e75ff069d67fe84da6c3d3dbnicholes4276. [protocol] Add support for SMIMEA. [RT #40513]
b5fe023e1cf0aa3d15a3bf2e237891e837980feastoddard4275. [performance] Lazily initialize dns_compress->table only when
b2cff333bc23b8e74c6aad9ee97973df02cca180aaron compression is enabled. [RT #41189]
7eb55be5bcc75f2acf789aeca38d88a9c75d001ejwoolley4274. [performance] Speed up typemap processing from text. [RT #41196]
7eb55be5bcc75f2acf789aeca38d88a9c75d001ejwoolley4273. [bug] Only call dns_test_begin() and dns_test_end() once each
d31e50dddb975275ef388ab64e380b6d4e5d9710jerenkrantz in nsec3_test as it fails with GOST if called multiple
d31e50dddb975275ef388ab64e380b6d4e5d9710jerenkrantz4272. [bug] dig: the +norrcomments option didn't work with +multi.
d5eaaee4a1e5faaf21e7111fd61732c6e7dbe8b2jwoolley4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
d5eaaee4a1e5faaf21e7111fd61732c6e7dbe8b2jwoolley [RT #41235]
c88a70518d7d0b5bccb22a68d446c2d6589790dcjwoolley4270. [security] Update allowed OpenSSL versions as named is
c88a70518d7d0b5bccb22a68d446c2d6589790dcjwoolley potentially vulnerable to CVE-2015-3193.
c64c364bf863ad985309ef10d68caaa93e8d09ccstoddard4269. [bug] Zones using "map" format master files currently
c64c364bf863ad985309ef10d68caaa93e8d09ccstoddard don't work as policy zones. This limitation has
c64c364bf863ad985309ef10d68caaa93e8d09ccstoddard now been documented; attempting to use such zones
d8d240df2f2b23455be6b01343daedebaa6c4f96trawick in "response-policy" statements is now a
d8d240df2f2b23455be6b01343daedebaa6c4f96trawick configuration error. [RT #38321]
d8d240df2f2b23455be6b01343daedebaa6c4f96trawick4268. [func] "rndc status" now reports the path to the
d8d240df2f2b23455be6b01343daedebaa6c4f96trawick configuration file. [RT #36470]
b5b5e8cc4668ab29d8f08f590d829dcfaeda9d33brianp4267. [test] Check sdlz error handling. [RT #41142]
b5b5e8cc4668ab29d8f08f590d829dcfaeda9d33brianp4266. [placeholder]
e2653756d0d14a9a620b24bd04a6ab1182178462brianp4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
d980a97cfc68de0ef35432ce03f1c1e468a19877jwoolley4264. [bug] Check const of strchr/strrchr assignments match
d980a97cfc68de0ef35432ce03f1c1e468a19877jwoolley argument's const status. [RT #41150]
d980a97cfc68de0ef35432ce03f1c1e468a19877jwoolley4263. [contrib] Address compiler warnings in mysqldyn module.
d980a97cfc68de0ef35432ce03f1c1e468a19877jwoolley [RT #41130]
aa3510b82ec5d82ddbf4748829ec90f1ce71398ebrianp4262. [bug] Fixed a bug in epoll socket code that caused
aa3510b82ec5d82ddbf4748829ec90f1ce71398ebrianp sockets to not be registered for ready
aa3510b82ec5d82ddbf4748829ec90f1ce71398ebrianp notification in some cases, causing named to not
51b1d7f8eaa74807ab14479edde4421e77f5d1d7brianp read from or write to them, resulting in what
51b1d7f8eaa74807ab14479edde4421e77f5d1d7brianp appear to the user as blocked connections.
08aff55373b2ae69182a58055a5c1b3a12d927b0slive [RT #41067]
08aff55373b2ae69182a58055a5c1b3a12d927b0slive4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
4f50bfb0367b91396c0fe85b80536b760080d39etrawick [RT #40556]
4f50bfb0367b91396c0fe85b80536b760080d39etrawick4260. [security] Insufficient testing when parsing a message allowed
5a63340978acb9dd7e87724be57d2bde1cf1f629trawick records with an incorrect class to be be accepted,
5a63340978acb9dd7e87724be57d2bde1cf1f629trawick triggering a REQUIRE failure when those records
5a63340978acb9dd7e87724be57d2bde1cf1f629trawick were subsequently cached. (CVE-2015-8000) [RT #40987]
8565f742f1ee3d514b2d48a1f2a5af5d7437c3b9trawick4259. [func] Add an option for non-destructive control channel
8565f742f1ee3d514b2d48a1f2a5af5d7437c3b9trawick access using a "read-only" clause. In such
8565f742f1ee3d514b2d48a1f2a5af5d7437c3b9trawick cases, a restricted set of rndc commands are
8843b75d1c70af3da9a7306c4aede3b3e9346deajwoolley allowed for querying information from named.
8843b75d1c70af3da9a7306c4aede3b3e9346deajwoolley [RT #40498]
8843b75d1c70af3da9a7306c4aede3b3e9346deajwoolley4258. [bug] Limit rndc query message sizes to 32 KiB. This should
8843b75d1c70af3da9a7306c4aede3b3e9346deajwoolley not break any legitimate rndc commands, but will
dcecfbe7e63603d0fb95e4811e015039e9401990stoddard prevent a rogue rndc query from allocating too
dcecfbe7e63603d0fb95e4811e015039e9401990stoddard much memory. [RT #41073]
0c7592379b55b7736dd70d2d87f53af9a2347614jerenkrantz4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
4844d314b0b6e55a309621b84c1786446c5fb418ianh4256. [bug] Allow rndc command arguments to be quoted so as
4844d314b0b6e55a309621b84c1786446c5fb418ianh to allow spaces. [RT #36665]
127c81d6b2c9ba8932273c2e1b13e3ea3d673b07trawick4255. [performance] Add 'message-compression' option to disable DNS
127c81d6b2c9ba8932273c2e1b13e3ea3d673b07trawick compression in responses. [RT #40726]
59d01b9ed1de043745262e49bb44bde7095c4723jwoolley4254. [bug] Address missing lock when getting zone's serial.
59d01b9ed1de043745262e49bb44bde7095c4723jwoolley [RT #41072]
59d01b9ed1de043745262e49bb44bde7095c4723jwoolley4253. [security] Address fetch context reference count handling error
59d01b9ed1de043745262e49bb44bde7095c4723jwoolley on socket error. (CVE-2015-8461) [RT#40945]
e6e65585927961caf45d4e9e932bb1f4e9e89ca1jerenkrantz4252. [func] Add support for automating the generation CDS and
e6e65585927961caf45d4e9e932bb1f4e9e89ca1jerenkrantz CDNSKEY rrsets to named and dnssec-signzone.
b068b71651c802cc4e0b835495ad0e41c65e1174trawick [RT #40424]
b068b71651c802cc4e0b835495ad0e41c65e1174trawick4251. [bug] NTAs were deleted when the server was reconfigured
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe or reloaded. [RT #41058]
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe4250. [func] Log the TSIG key in use during inbound zone
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe transfers. [RT #41075]
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe4249. [func] Improve error reporting of TSIG / SIG(0) records in
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe the wrong location. [RT #41030]
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe4248. [performance] Add an isc_atomic_storeq() function, use it in
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe stats counters to improve performance.
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe [RT #39972] [RT #39979]
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe defined to report json library version. [RT #41045]
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe4246. [test] Ensure the statschannel system test runs when BIND
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe is not built with libjson. [RT #40944]
34a1e566d4af2735c87e2d3e6ac5e505855518aawrowe4245. [placeholder]
dd39efc1f7ed97cf526aefa24359f0be2ac5c3f4trawick4244. [bug] The parser was not reporting that use-ixfr is obsolete.
dd39efc1f7ed97cf526aefa24359f0be2ac5c3f4trawick [RT #41010]
f53367106769f90696d9c1f0ffcf9fbb4db883c2jerenkrantz4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
f53367106769f90696d9c1f0ffcf9fbb4db883c2jerenkrantz4242. [bug] Replace the client if not already replaced when
9a940e8e90f9b163737e23bbf72a3f2c67a39220brianp prefetching. [RT #41001]
9a940e8e90f9b163737e23bbf72a3f2c67a39220brianp4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
8496c88debb9962575dac2b1ef9b81984d7bd759brianp the ARM. [RT #40955]
8496c88debb9962575dac2b1ef9b81984d7bd759brianp4240. [port] Fix LibreSSL compatibility. [RT #40977]
7c8747b339a5e47ea8301907051a9974d15b23b7brianp4239. [func] Changed default servfail-ttl value to 1 second from 10.
7c8747b339a5e47ea8301907051a9974d15b23b7brianp Also, the maximum value is now 30 instead of 300.
98f81eac9530d487f05013cda9df99755bb59689trawick [RT #37556]
0b493ad526b8bbc2ff21ce19510fc32238abb816jwoolley4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
0b493ad526b8bbc2ff21ce19510fc32238abb816jwoolley [RT #40947]
0b493ad526b8bbc2ff21ce19510fc32238abb816jwoolley4237. [doc] Upgraded documentation toolchain to use DocBook 5
1376737cb6afa24d3e12f3a223318fe1bd71bb1fslive and dblatex. [RT #40766]
1376737cb6afa24d3e12f3a223318fe1bd71bb1fslive4236. [performance] On machines with 2 or more processors (CPU), the
1376737cb6afa24d3e12f3a223318fe1bd71bb1fslive default value for the number of UDP listeners
ec1719a5748717f67dcd279bb64bd0da424ae450jerenkrantz has been changed to the number of detected
ec1719a5748717f67dcd279bb64bd0da424ae450jerenkrantz processors minus one. [RT #40761]
dea9ded7417a8328f8fce5d57eca9d7af5500520trawick4235. [func] Added support in named for "dnstap", a fast method of
dea9ded7417a8328f8fce5d57eca9d7af5500520trawick capturing and logging DNS traffic, and a new command
3f0220bf6e864d982a10348c9cc269bfe798d65eaaron "dnstap-read" to read a dnstap log file. Use
3f0220bf6e864d982a10348c9cc269bfe798d65eaaron "configure --enable-dnstap" to enable this
3f0220bf6e864d982a10348c9cc269bfe798d65eaaron feature (note that this requires libprotobuf-c
3f0220bf6e864d982a10348c9cc269bfe798d65eaaron and libfstrm). See the ARM for configuration details.
75d133afee2e3636b07366fd62102b13b67b1b1djerenkrantz Thanks to Robert Edmonds of Farsight Security.
2ae7ad6f58b7e3188ed4bd375a8930808529ba71jwoolley4234. [func] Add deflate compression in statistics channel HTTP
2ae7ad6f58b7e3188ed4bd375a8930808529ba71jwoolley server. [RT #40861]
5b30f835d627766b024500189c35bb55e686e890brianp4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
5b30f835d627766b024500189c35bb55e686e890brianp [RT #40597]
d45481dadf7f1f0ffd95b38b1c5b0ea6b2d57888jerenkrantz4232. [contrib] Address unchecked memory allocation calls in
d45481dadf7f1f0ffd95b38b1c5b0ea6b2d57888jerenkrantz query-loc and zone2ldap. [RT #40789]
0c7592379b55b7736dd70d2d87f53af9a2347614jerenkrantz4231. [contrib] Address unchecked calloc call in dlz_mysqldyn_mod.c.
6d62bc22f8f22a43e66e2e4d8860a5a144316b1astoddard4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
6d62bc22f8f22a43e66e2e4d8860a5a144316b1astoddard uninitialized result. [RT #40839]
8efcf516f2b6514879fff8d034be55b6d64ff830striker4229. [bug] A variable could be used uninitialized in
71eda8b1c14e4d0adb2f294f22299587cd3d74a9striker dns_update_signaturesinc. [RT #40784]
922c0ad0014590bb10d13674012683eef44c0bbarederpj4228. [bug] Address race condition in dns_client_destroyrestrans.
922c0ad0014590bb10d13674012683eef44c0bbarederpj [RT #40605]
922c0ad0014590bb10d13674012683eef44c0bbarederpj4227. [bug] Silence static analysis warnings. [RT #40828]
aec964227053fab7e59deb26709b94726ce67224rederpj4226. [bug] Address a theoretical shutdown race in
8ffd5c9693162130d35be41953f0dd3bba18edf7rederpj zone.c:notify_send_queue(). [RT #38958]
1e27f530f81c6058d1a11944ae1e2da45977fc7bjerenkrantz4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
1e27f530f81c6058d1a11944ae1e2da45977fc7bjerenkrantz shared libraries. [RT #39557]
469549ac22c6f7b9ecdd9df2565925563e4df84djwoolley4224. [func] Added support for "dyndb", a new interface for loading
469549ac22c6f7b9ecdd9df2565925563e4df84djwoolley zone data from an external database, developed by
469549ac22c6f7b9ecdd9df2565925563e4df84djwoolley Red Hat for the FreeIPA project.
469549ac22c6f7b9ecdd9df2565925563e4df84djwoolley DynDB drivers fully implement the BIND database
7a9f3bef545b0bbc93c2ed758119b0d2e2647c31trawick API, and are capable of significantly better
7a9f3bef545b0bbc93c2ed758119b0d2e2647c31trawick performance and functionality than DLZ drivers,
7a9f3bef545b0bbc93c2ed758119b0d2e2647c31trawick while taking advantage of advanced database
0be05c658c7e6e5a05fd2d4068d8ac0f030d4752jwoolley features not available in BIND such as multi-master
0be05c658c7e6e5a05fd2d4068d8ac0f030d4752jwoolley replication.
223b367115aefc20f1c32fe2d4e2bfcc4bfe108fjwoolley Thanks to Adam Tkac and Petr Spacek of Red Hat.
223b367115aefc20f1c32fe2d4e2bfcc4bfe108fjwoolley [RT #35271]
223b367115aefc20f1c32fe2d4e2bfcc4bfe108fjwoolley4223. [func] Add support for setting max-cache-size to percentage
639cf068707865a81ad2c610e72d57b043d20dd6wrowe of available physical memory, set default to 90%.
639cf068707865a81ad2c610e72d57b043d20dd6wrowe [RT #38442]
639cf068707865a81ad2c610e72d57b043d20dd6wrowe4222. [func] Bias IPv6 servers when selecting the next server to
f3f0c2a5f6009d06350341219d1f38a1644708bcbrianp query. [RT #40836]
f3f0c2a5f6009d06350341219d1f38a1644708bcbrianp4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
33b095d35c5dac22358ce63c32635ab59ce7cb25aaron [RT #40583]
33b095d35c5dac22358ce63c32635ab59ce7cb25aaron4220. [doc] Improve documentation for zone-statistics.
33b095d35c5dac22358ce63c32635ab59ce7cb25aaron [RT #36955]
100e6f5dec61d108494565f8f3bfa894afadc33ajerenkrantz4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
100e6f5dec61d108494565f8f3bfa894afadc33ajerenkrantz EGAIN when these soft error are not retried for
100e6f5dec61d108494565f8f3bfa894afadc33ajerenkrantz isc_socket_send*().
5d5d5ca04c57c7ab865924f4648e8f80de27adfebrianp4218. [bug] Potential null pointer dereference on out of memory
5d5d5ca04c57c7ab865924f4648e8f80de27adfebrianp if mmap is not supported. [RT #40777]
4f3ec2ec53c7ca5ca308d85e2e0beb933a2fd0f9aaron4217. [protocol] Add support for CSYNC. [RT #40532]
4f3ec2ec53c7ca5ca308d85e2e0beb933a2fd0f9aaron4216. [cleanup] Silence static analysis warnings. [RT #40649]
3c0c3ae288166a8736593093c636768702abf263aaron4215. [bug] nsupdate: skip to next request on GSSTKEY create
3c0c3ae288166a8736593093c636768702abf263aaron failure. [RT #40685]
b8a843847aae3d9a1838fb8f1de84cd66212f48atrawick4214. [protocol] Add support for TALINK. [RT #40544]
c8411888a54dd5dbfd8a5d337ebf0e911a789063trawick4213. [bug] Don't reuse a cache across multiple classes.
c8411888a54dd5dbfd8a5d337ebf0e911a789063trawick [RT #40205]
28caffb98f18c0b9562ac20870f7ab91f3d9a01fjerenkrantz4212. [func] Re-query if we get a bad client cookie returned over
28caffb98f18c0b9562ac20870f7ab91f3d9a01fjerenkrantz UDP. [RT #40748]
d757628a07145aa711ba75b4e7c7c01a33133ca1jerenkrantz4211. [bug] Ensure that lwresd gets at least one task to work
d757628a07145aa711ba75b4e7c7c01a33133ca1jerenkrantz with if enabled. [RT #40652]
1585c2979d749ee71edb6a1d57bc9ff6db12a426jerenkrantz4210. [cleanup] Silence use after free false positive. [RT #40743]
1585c2979d749ee71edb6a1d57bc9ff6db12a426jerenkrantz4209. [bug] Address resource leaks in dlz modules. [RT #40654]
6bdb2c094666367615890147775bb18761216c8dminfrin4208. [bug] Address null pointer dereferences on out of memory.
6bdb2c094666367615890147775bb18761216c8dminfrin [RT #40764]
c069757188a3cd9ab19b05169b005a824b60b6fcaaron4207. [bug] Handle class mismatches with raw zone files.
c069757188a3cd9ab19b05169b005a824b60b6fcaaron [RT #40746]
c069757188a3cd9ab19b05169b005a824b60b6fcaaron4206. [bug] contrib: fixed a possible NULL dereference in
11ce97701b22d795fd1a5ec3769a3367bc220921wrowe DLZ wildcard module. [RT #40745]
11ce97701b22d795fd1a5ec3769a3367bc220921wrowe4205. [bug] 'named-checkconf -p' could include unwanted spaces
11ce97701b22d795fd1a5ec3769a3367bc220921wrowe when printing tuples with unset optional fields.
11ce97701b22d795fd1a5ec3769a3367bc220921wrowe [RT #40731]
e45d7d4ca98387c2898f8302bafb31e3b4f5a5d8jwoolley4204. [bug] 'dig +trace' failed to lookup the correct type if
6cdd5cd95d8323de5cfb912d8fc0df8c5e3d02cejerenkrantz the initial root NS query was retried. [RT #40296]
239ab9d14d3851c2efc1312b3b42c838073533f4jerenkrantz4203. [test] The rrchecker system test now tests conversion
239ab9d14d3851c2efc1312b3b42c838073533f4jerenkrantz to and from unknown-type format. [RT #40584]
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb4202. [bug] isccc_cc_fromwire() could return an incorrect
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb result. [RT #40614]
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb4201. [func] The default preferred-glue is now the address record
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb type of the transport the query was received
c5fb76caa5498c60b991fcba8dfbf3c229f0f4d5rbb over. [RT #40468]
b9cf7102006ac2ccfebcb78174585986ff127ba9jwoolley4200. [cleanup] win32: update BINDinstall to be BIND release
4b0939148fffde56f0b7db2a43cab1d1dc76ab3fmjc independent. [RT #38915]
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard [RT #40545] [RT #40547] [RT #40561] [RT #40563]
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard4198. [placeholder]
2b13bc45632d72cdf50ac42149e4fc8bc0d05bf2stoddard4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
52617e76a53b1d90da027a5311790e1ccef8f60ftrawick [RT #40603]
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley4196. [doc] Improve how "enum + other" types are documented.
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley [RT #40608]
b584ec31a47334b1253f4a5ad73f023336ab2f28jwoolley4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
7ac88dc1ac207b9a434fd76c0406651d68018d69rederpj4194. [bug] named-checkconf -p failed to properly print a port
52617e76a53b1d90da027a5311790e1ccef8f60ftrawick range. [RT #40634]
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz4193. [bug] Handle broken servers that return BADVERS incorrectly.
d157b208942316e96c34fa8b2222ed4cc2e56783trawick [RT #40427]
d157b208942316e96c34fa8b2222ed4cc2e56783trawick4192. [bug] The default rrset-order of random was not always being
d157b208942316e96c34fa8b2222ed4cc2e56783trawick applied. [RT #40456]
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick as per RFC 6763. [RT #37889]
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick valid with check-names. <forest> still needs to be
dc903d97a896d4e414efb1cb49f22ce00a49f070trawick LDH. [RT #40399]
68f803c489cf61918fb4e61745fcd1e0cc980541jerenkrantz4189. [cleanup] Don't exit on overly long tokens in named.conf.
15405e91bb3fad5a80f7abe828a00b44a3a65bf8jerenkrantz4188. [bug] Support HTTP/1.0 client properly on the statistics
15405e91bb3fad5a80f7abe828a00b44a3a65bf8jerenkrantz channel. [RT #40261]
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz4187. [func] When any RR type implementation doesn't
f905b21d99b264dbf26acc30b430ebe92838cdcejerenkrantz implement totext() for the RDATA's wire
0e2340134f2336b98c92d7f157fb65d0a6f477d4stoddard representation and returns ISC_R_NOTIMPLEMENTED,
0e2340134f2336b98c92d7f157fb65d0a6f477d4stoddard such RDATA is now printed in unknown
431d6106eaf796cc8dfa8cb0db2b180dd93ed6dftrawick presentation format (RFC 3597). RR types affected
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe include LOC(29) and APL(42). [RT #40317].
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe4186. [bug] Fixed an RPZ bug where a QNAME would be matched
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe against a policy RR with wildcard owner name
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe (trigger) where the QNAME was the wildcard owner
b3edf21d591bfd0e64bbec0dda73c0e41d7ecdb6wrowe name's parent. For example, the bug caused a query
5d238058bc748dfa13ff21890ae4a58481e3be89jerenkrantz with QNAME "example.com" to match a policy RR with
5d238058bc748dfa13ff21890ae4a58481e3be89jerenkrantz "*.example.com" as trigger. [RT #40357]
9282327b0ffe8981d39835130dfb334af192b508jerenkrantz4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
9282327b0ffe8981d39835130dfb334af192b508jerenkrantz owner name (trigger) would prevent another policy RR
9282327b0ffe8981d39835130dfb334af192b508jerenkrantz with its parent owner name from being
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz loaded. For example, the bug caused a policy RR
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz with trigger "example.com" to not have any
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz effect when a previous policy RR with trigger
8fcaadcb287f361bb304d53a69d508500840fafcjerenkrantz "*.example.com" existed in that RPZ zone.
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz4184. [bug] Fixed a possible memory leak in name compression
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz when rendering long messages. (Also, improved
8af88bd6958b80c224e964892b8237720b13ab1ajerenkrantz wire_test for testing such messages.) [RT #40375]
25b812bcab8b61981e288996b991e0ab4d224b92jerenkrantz4183. [cleanup] Use timing-safe memory comparisons in cryptographic
87f0329e30de94828e08d53a99ea23cda86a9fccjerenkrantz code. Also, the timing-safe comparison functions have
87f0329e30de94828e08d53a99ea23cda86a9fccjerenkrantz been renamed to avoid possible confusion with
87f0329e30de94828e08d53a99ea23cda86a9fccjerenkrantz memcmp(). Thanks to Loganaden Velvindron of
0396e75f271f51be57be778655e32ba8d64d240bwrowe AFRINIC. [RT #40148]
0396e75f271f51be57be778655e32ba8d64d240bwrowe4182. [cleanup] Use mnemonics for RR class and type comparisons.
9438d70ce91fa99ec828a2828f0fd45542cd9c4fwrowe [RT #40297]
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick4181. [bug] Queued notify messages could be dequeued from the
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick wrong rate limiter queue. [RT #40350]
dc10f7a2f87d4cd7cdd16dc248b165122b4ac62btrawick4180. [bug] Error responses in pipelined queries could
431d6106eaf796cc8dfa8cb0db2b180dd93ed6dftrawick cause a crash in client.c. [RT #40289]
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz4179. [bug] Fix double frees in getaddrinfo() in libirs.
390489eb69fe15943ddf67adcc832ca8de125cd9jerenkrantz4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
a1e8b54f269a8f2388590174174509546e886e60stoddard text. [RT #40274]
a1e8b54f269a8f2388590174174509546e886e60stoddard4177. [bug] Fix assertion failure in parsing NSAP records from
3eb95d6629bb326ae90e5eec693b7e628951751brbb text. [RT #40285]
109d280c3fcf810e573fc1af5e141ad525c45811bjh4176. [bug] Address race issues with lwresd. [RT #40284]
61d2cd001754548e90364aa3a7e76863616544b0minfrin4175. [bug] TKEY with GSS-API keys needed bigger buffers.
61d2cd001754548e90364aa3a7e76863616544b0minfrin [RT #40333]
61d2cd001754548e90364aa3a7e76863616544b0minfrin4174. [bug] "dnssec-coverage -r" didn't handle time unit
61d2cd001754548e90364aa3a7e76863616544b0minfrin suffixes correctly. [RT #38444]
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron4173. [bug] dig +sigchase was not properly matching the trusted
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron key. [RT #40188]
9a3bbca61e24c13d8b496116ac759117136c6bf4aaron4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm [RT #40265]
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm4171. [bug] Fixed incorrect class checks in TSIG RR
64c351fd973428b5bb4c28e983fa86875ea4e60fdougm implementation. [RT #40287]
0506359f47150991eaaae37ca07f94117a9aa63dtrawick4170. [security] An incorrect boundary check in the OPENPGPKEY
0506359f47150991eaaae37ca07f94117a9aa63dtrawick rdatatype could trigger an assertion failure.
0506359f47150991eaaae37ca07f94117a9aa63dtrawick (CVE-2015-5986) [RT #40286]
67f62b7a48ff9eb8d9f31898dceaf9f89280a723dougm4169. [test] Added a 'wire_test -d' option to read input as
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick raw binary data, for use as a fuzzing harness.
9d3fdc3bb8077a46851080e17ef9f16c83720c8ftrawick [RT #40312]
219472ea2d5f1563509321d8b8a91b116792bf7adougm4168. [security] A buffer accounting error could trigger an
219472ea2d5f1563509321d8b8a91b116792bf7adougm assertion failure when parsing certain malformed
219472ea2d5f1563509321d8b8a91b116792bf7adougm DNSSEC keys. (CVE-2015-5722) [RT #40212]
c048b545f06921f53ceb830b30f99aed7b369d95dougm4167. [func] Update rndc's usage output to include recently added
c048b545f06921f53ceb830b30f99aed7b369d95dougm commands. Thanks to Tony Finch for submitting a
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm patch. [RT #40010]
621bd763d2e4d32f19013ac8b76b375b5a01851fdougm4166. [func] Print informative output from rndc showzone when
0ea12b5dcb3d1d399f9bff6f56fb445d80205f9dstriker allow-new-zones is not enabled for a view. Thanks to
0ea12b5dcb3d1d399f9bff6f56fb445d80205f9dstriker Tony Finch for submitting a patch. [RT #40009]
e93624301705e3dc68992e3b488a764389eb8b98trawick4165. [security] A failure to reset a value to NULL in tkey.c could
e93624301705e3dc68992e3b488a764389eb8b98trawick result in an assertion failure. (CVE-2015-5477)
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron [RT #40046]
cba0728e3535ee87e89cdb3cb54ce91eda18f6ccaaron4164. [bug] Don't rename slave files and journals on out of memory.
a45de374fb215f294eb1369d4406ac79d6596ee1brianp [RT #40033]
a45de374fb215f294eb1369d4406ac79d6596ee1brianp4163. [bug] Address compiler warnings. [RT #40024]
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick4161. [test] Add JSON test for traffic size stats; also test
7f14bcf6b594703df385ce84ba2ee3cdf3ccbae4trawick for consistency between "rndc stats" and the XML
0007bb1e01dd762bde7280beb57113309c1715a3trawick and JSON statistics channel contents. [RT #38700]
a1be7357e2c08b9dfe52c277063d212d65b15feejim4160. [placeholder]
a1be7357e2c08b9dfe52c277063d212d65b15feejim4159. [cleanup] Alphabetize dig's help output. [RT #39966]
6682df9b639663c50f447e5690dd62cce7b1c086trawick4158. [placeholder]
6682df9b639663c50f447e5690dd62cce7b1c086trawick4157. [placeholder]
51c0f0fe0a49a180389009442a83f74b1916f96atrawick4156. [func] Added statistics counters to track the sizes
51c0f0fe0a49a180389009442a83f74b1916f96atrawick of incoming queries and outgoing responses in
51c0f0fe0a49a180389009442a83f74b1916f96atrawick histogram buckets, as specified in RSSAC002.
51c0f0fe0a49a180389009442a83f74b1916f96atrawick [RT #39049]
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick4155. [func] Allow RPZ rewrite logging to be configured on a
7e8bc9ca9d1e752f6ca6debec6be8addae8bd72etrawick per-zone basis using a newly introduced log clause in
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz the response-policy option. [RT #39754]
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz4154. [bug] A OPT record should be included with the FORMERR
ecb511c254d5affe7cc018482d53c19aaf145878jerenkrantz response when there is a malformed EDNS option.
60b83cd8f9427809082340cfd7581091990962f5jwoolley [RT #39647]
60b83cd8f9427809082340cfd7581091990962f5jwoolley4153. [bug] Dig should zero non significant +subnet bits. Check
e93624301705e3dc68992e3b488a764389eb8b98trawick that non significant ECS bits are zero on receipt.
e93624301705e3dc68992e3b488a764389eb8b98trawick [RT #39647]
4da4d1ae427ee8827c2325dd121ac05a83afd579wrowe4152. [func] Implement DNS COOKIE option. This replaces the
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm experimental SIT option of BIND 9.10. The following
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb named.conf directives are available: send-cookie,
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb cookie-secret, cookie-algorithm, nocookie-udp-size
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb and require-server-cookie. The following dig options
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb are available: +[no]cookie[=value] and +[no]badcookie.
d56d6753a75f5b915120c797aedbfcf13bb14c8brbb [RT #39928]
4aaf7088758ca56823e585969320f2405a7cc5fcdougm4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
e0596968fe84a2bdaebe0192d8d64d2e9856d4d6brianp minimal fix. [RT #39667]
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx4149. [bug] Fixed a race condition in the getaddrinfo()
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx implementation in libirs, which caused the delv
f33c2c86b419be97248c5289b71738b5f0c7ab0adirkx utility to crash with an assertion failure when using
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim the '@server' syntax with a hostname argument.
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim [RT #39899]
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim4148. [bug] Fix a bug when printing zone names with '/' character
c5fdaba2e790a0a351d796b5fe3dcfb585be1ba2jim in XML and JSON statistics output. [RT #39873]
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley was returning referrals rather than nodata responses
2fc50921b88defeb7127985dfe4b4130175e069ejwoolley when the AAAA records were filtered. [RT #39843]
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp4146. [bug] Address reference leak that could prevent a clean
47638f4a67ce38e5a83e7a303d6f2d5c9ff47b4ebrianp shutdown. [RT #37125]
82630c4a04be47f39298d3284b2c596244fb509bbrianp4145. [bug] Not all unassociated adb entries where being printed.
82630c4a04be47f39298d3284b2c596244fb509bbrianp [RT #37125]
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive4144. [func] Add statistics counters for nxdomain redirections.
35d682920b0b7073bb9ff8c8794f0f73e3ee1a47slive [RT #39790]
a2d4f1da4e19836b2d6a673f80f33381a926a8bddougm4143. [placeholder]
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard4142. [bug] rndc addzone with view specified saved NZF config
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard that could not be read back by named. This has now
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard been fixed. [RT #39845]
30b4a330a5f651eb5198fa93dbb9f3d3594564c9stoddard4141. [bug] A formatting bug caused rndc zonestatus to print
17895aa4b66b8af02d8788b15cb92e1f6a8ecafcwrowe negative numbers for large serial values. This has
983988ac7b8faaf037f4df0ab29729cd047a3ffdtrawick now been fixed. [RT #39854]
7a64b871b8b5e5a427b570e90f0e38e88266c783jim4140. [cleanup] Remove redundant nzf_remove() call during delzone.
7a64b871b8b5e5a427b570e90f0e38e88266c783jim [RT #39844]
7a64b871b8b5e5a427b570e90f0e38e88266c783jim4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz4138. [security] An uninitialized value in validator.c could result
a736bac16e58d5e96945f35ee3c43a2cd2f5d37ejerenkrantz in an assertion failure. (CVE-2015-4620) [RT #39795]
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz4137. [bug] Make rndc reconfig report configuration errors the
797d596a95d4f9900e83ec18295b4ca4951bf763jerenkrantz same way rndc reload does. [RT #39635]
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp4136. [bug] Stale statistics counters with the leading
5842e6b336b1cc0252b6cc2944dd81c7d3a19a1bbrianp '#' prefix (such as #NXDOMAIN) were not being
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin updated correctly. This has been fixed. [RT #39141]
2532433e80d73506f7bcc18bd0dab686f1c39397minfrin4135. [cleanup] Log expired NTA at startup. [RT #39680]
c148bc6b4eea544af816783400362f741c5f5fc2trawick4134. [cleanup] Include client-ip rules when logging the number
c148bc6b4eea544af816783400362f741c5f5fc2trawick of RPZ rules of each type. [RT #39670]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron4133. [port] Update how various json libraries are handled.
9d432e23f6025b78322cbee43e8e89262a108e5eaaron [RT #39646]
9d432e23f6025b78322cbee43e8e89262a108e5eaaron4132. [cleanup] dig: added +rd as a synonym for +recurse,
9d432e23f6025b78322cbee43e8e89262a108e5eaaron added +class as an unabbreviated alternative
9d432e23f6025b78322cbee43e8e89262a108e5eaaron to +cl. [RT #39686]
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick4131. [bug] Addressed further problems with reloading RPZ
6a5bdbbacf4a62adecde52b8f23ebcc4fa2a08b8trawick zones. [RT #39649]
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin4130. [bug] The compatibility shim for *printf() misprinted some
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin large numbers. [RT #39586]
10306ac2c175f420e6989568f4c8535a5dbc1349minfrin4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
b4e4d76bf454e1b603b410110356dbcf12f3bc42jim4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
adb1e17ae7e1cf5cf4f8f2b07d3389cb55f4becetrawick key as per RFC 7344, Section 4.1. [RT #37215]
71f891073f6fa0209870791f64cbbf28d77ffdc1brianp4126. [bug] Addressed a regression introduced in change #4121.
71f891073f6fa0209870791f64cbbf28d77ffdc1brianp [RT #39611]
2864362ca8266097928e84f101010bdf814ffa08stoddard4125. [test] Added tests for dig, renamed delv test to digdelv.
2864362ca8266097928e84f101010bdf814ffa08stoddard [RT #39490]
2864362ca8266097928e84f101010bdf814ffa08stoddard4124. [func] Log errors or warnings encountered when parsing the
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick internal default configuration. Clarify the logging
893c106ae59d8e96d921524b123ae26dea8ad37fgstein of errors and warnings encountered in rndc
893c106ae59d8e96d921524b123ae26dea8ad37fgstein addzone or modzone parameters. [RT #39440]
893c106ae59d8e96d921524b123ae26dea8ad37fgstein4123. [port] Added %z (size_t) format options to the portable
3aa6444bcee4e9fc32ec8860d832ff83a15784efianh internal printf/sprintf implementation. [RT #39586]
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp4122. [bug] The server could match a shorter prefix than what was
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp available in CLIENT-IP policy triggers, and so, an
e2bdfd25d9d0461e0a3ab18ceff2113215e3e115brianp unexpected action could be taken. This has been
b9fe73991e7c592a634242a7e11f924689f58e1fgstein corrected. [RT #39481]
b9fe73991e7c592a634242a7e11f924689f58e1fgstein4121. [bug] On servers with one or more policy zones
b9fe73991e7c592a634242a7e11f924689f58e1fgstein configured as slaves, if a policy zone updated
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick during regular operation (rather than at
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick startup) using a full zone reload, such as via
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick AXFR, a bug could allow the RPZ summary data to
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick fall out of sync, potentially leading to an
d9fcdb415d8661cbd9451df8f88e003a1aa04ce9trawick assertion failure in rpz.c when further
81b8d0f83e9d0bc2bf6900fc680737e0cac439a2brianp incremental updates were made to the zone, such
81b8d0f83e9d0bc2bf6900fc680737e0cac439a2brianp as via IXFR. [RT #39567]
b5033962c73a470b6f36a3ac796c542a6ab4ddf6brianp4120. [bug] A bug in RPZ could cause the server to crash if
d7856f850b9b51165f23ae381a891bda894e1373ianh policy zones were updated while recursion was
d7856f850b9b51165f23ae381a891bda894e1373ianh pending for RPZ processing of an active query.
d7856f850b9b51165f23ae381a891bda894e1373ianh [RT #39415]
d7856f850b9b51165f23ae381a891bda894e1373ianh4119. [test] Allow dig to set the message opcode. [RT #39550]
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick4118. [bug] Teach isc-config.sh about irs. [RT #39213]
d75626f0952c6152a99acd013a4f127d46f0f9edtrawick4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm4116. [bug] Fix a bug in RPZ that could cause some policy
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm zones that did not specifically require
ab2053f3cdda69cfa5e4ce0800ea7af203cc6d5ddougm recursion to be treated as if they did;
88ecd979f1112454432371f55a1420240fae3743trawick consequently, setting qname-wait-recurse no; was
88ecd979f1112454432371f55a1420240fae3743trawick sometimes ineffective. [RT #39229]
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick4115. [func] "rndc -r" now prints the result code (e.g.,
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
548e06e26f5377b2efbb7e0dab20f536e5e24160trawick running the requested command. [RT #38913]
c02a689f2274966ed5d1c16207f74b5128c35c86trawick4114. [bug] Fix a regression in radix tree implementation
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick introduced by ECS code. This bug was never
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick released, but it was reported by a user testing
f51dbb1f5b66d94b5c190bfcd444aa73bdc2b176trawick master. [RT #38983]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard4113. [test] Check for Net::DNS is some system test
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard prerequisites. [RT #39369]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard4112. [bug] Named failed to load when "root-delegation-only"
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard was used without a list of domains to exclude.
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard [RT #39380]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard4111. [doc] Alphabetize rndc man page. [RT #39360]
aa202cda00837ed5381d5f67254e08c565a5c3a8stoddard4110. [bug] Address memory leaks / null pointer dereferences
3a9c3ec5357b36fc34766cb8166168311af3562frbb on out of memory. [RT #39310]
94f4821a5444a4fe782f772aef5db4d8b839675djerenkrantz4109. [port] linux: support reading the local port range from
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz4108. [func] An additional NXDOMAIN redirect method (option
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz "nxdomain-redirect") has been added, allowing
2a49e30bae376c9744b96c8681ab88122ccaa46cjerenkrantz redirection to a specified DNS namespace instead
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin of a single redirect zone. [RT #37989]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin4107. [bug] Address potential deadlock when updating zone content.
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin [RT #39269]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin4106. [port] Improve readline support. [RT #38938]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin4105. [port] Misc fixes for Microsoft Visual Studio
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin 2015 CTP6 in 64 bit mode. [RT #39308]
afef080e47ef499a5cbceb7ad7fadbb3abca0b48minfrin4104. [bug] Address uninitialized elements. [RT #39252]
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin4103. [port] Misc fixes for Microsoft Visual Studio
c49200a2bdbb8fa1f2e5c3b87cc497ecdeefa8feminfrin 2015 CTP6. [RT #39267]
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh4102. [bug] Fix a use after free bug introduced in change
103005439776bb7aeccb95ebf4761ebfef3f9c39ianh #4094. [RT #39281]
92d311b27a6182c2eed67317990c8c168584ee75trawick4101. [bug] dig: the +split and +rrcomments options didn't
92d311b27a6182c2eed67317990c8c168584ee75trawick work with +short. [RT #39291]
92d311b27a6182c2eed67317990c8c168584ee75trawick4100. [bug] Inherited owernames on the line immediately following
92d311b27a6182c2eed67317990c8c168584ee75trawick a $INCLUDE were not working. [RT #39268]
6f0dd808a674b7c09a625b36f320030f4e339f8faaron4099. [port] clang: make unknown commandline options hard errors
6f0dd808a674b7c09a625b36f320030f4e339f8faaron when determining what options are supported.
744ecbcc06a9128fc4730d1334cc180bf7fc521caaron [RT #39273]
59511de77b389ced52253d055fc470ecfedfcd99aaron4098. [bug] Address use-after-free issue when using a
59511de77b389ced52253d055fc470ecfedfcd99aaron predecessor key with dnssec-settime. [RT #39272]
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz4097. [func] Add additional logging about xfrin transfer status.
b5cdec7910a44654cb254b99c5a39d7c180c4bcajerenkrantz4096. [bug] Fix a use after free of query->sendevent.
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley4095. [bug] zone->options2 was not being properly initialized.
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron [RT #39228]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron4094. [bug] A race during shutdown or reconfiguration could
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron cause an assertion in mem.c. [RT #38979]
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron4093. [func] Dig now learns the SIT value from truncated
6c2dc61d4760fa5e356f95c4b1685eec7f1d75dcaaron responses when it retries over TCP. [RT #39047]
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
01e8aca9299a0b872414c24c8b7724d6f88ae665ianh [RT #39173]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm4090. [bug] Fix a crash while parsing malformed CAA RRs in
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm presentation format, i.e., from text such as
f783dff0c8b69344a6b67e97f16b91f8b0790799dougm from master files. Thanks to John Van de
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe Meulebrouck Brendgard for discovering and
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe reporting this problem. [RT #39003]
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe4089. [bug] Send notifies immediately for slave zones during
6362515725d2b6d66ac3b26531f8c53ac75f8c20wrowe startup. [RT #38843]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron4088. [port] Fixed errors when building with libressl. [RT #38899]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron4087. [bug] Fix a crash due to use-after-free due to sequencing
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron of tasks actions. [RT #38495]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
98ae9b96926a3dd99b195d7628c7e527e720f6acaaron [RT #38828]
9379749d811388a7d0e3410940ddd6743a33d330jim4084. [bug] Fix a possible race in updating stats counters.
9379749d811388a7d0e3410940ddd6743a33d330jim [RT #38826]
f37499bf7da81cd6b697d4667233137957426428jerenkrantz4083. [cleanup] Print the number of CPUs and UDP listeners
f37499bf7da81cd6b697d4667233137957426428jerenkrantz consistently in the log and in "rndc status"
421dc1d123c9adda60e024f93fb614bfada8b9e5wrowe output; indicate whether threads are supported
b8c2b4dfc363e33a8a1c2464802c3fb05cab86bbwrowe in "named -V" output. [RT #38811]
421dc1d123c9adda60e024f93fb614bfada8b9e5wrowe4082. [bug] Incrementally sign large inline zone deltas.
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron [RT #37927]
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron4080. [func] Completed change #4022, adding a "lock-file" option
83d91d60d00dc345bfbcbc48ff206db4a6b23b2eaaron to named.conf to override the default lock file,
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley in addition to the "named -X <filename>" command
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley line option. Setting the lock file to "none"
c10fe96ac7d024918e26af6c8ba5470273b75bb2jwoolley using either method disables the check completely.
83ca150ef902e9692972aa923e893bc6406d20f1ianh [RT #37908]
cbfbf9598d686b11afc7a9f9d91a8facfdfa7216trawick4079. [func] Preserve the case of the owner name of records to
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp the RRset level. [RT #37442]
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
7a8a0744e378f2343c3ee6787fac0f8f959d2141brianp CMSG_SPACE(sizeof(char)). [RT #38621]
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe4077. [test] Add static-stub regression test for DS NXDOMAIN
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe return making the static stub disappear. [RT #38564]
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe4076. [bug] Named could crash on shutdown with outstanding
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe reload / reconfig events. [RT #38622]
f5ce2873c97c12a34d6b03d2771b9250b7bbfe55wrowe4075. [placeholder]
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron4073. [cleanup] Add libjson-c version number reporting to
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron "named -V"; normalize version number formatting.
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron [RT #38056]
73cba74a34576f7ece4bd98fd58c8a932a178e6daaron4072. [func] Add a --enable-querytrace configure switch for
29c30db45f6a469017e16b606611e460cc1a1f2caaron very verbose query trace logging. (This option
29c30db45f6a469017e16b606611e460cc1a1f2caaron has a negative performance impact and should be
29c30db45f6a469017e16b606611e460cc1a1f2caaron used only for debugging.) [RT #37520]
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh4071. [cleanup] Initialize pthread mutex attrs just once, instead of
095071bbd0b3ccccd6883edc7cd10f13cac71160ianh doing it per mutex creation. [RT #38547]
a322a82f79b790fb7ddcd7df4459d20725450fa7trawick4070. [bug] Fix a segfault in nslookup in a query such as
21644b4d1b09d0531911a8c9a891819a261480f8minfrin [RT #38548]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin4069. [doc] Reorganize options in the nsupdate man page.
21644b4d1b09d0531911a8c9a891819a261480f8minfrin [RT #38515]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin4068. [bug] Omit unknown serial number from JSON zone statistics.
21644b4d1b09d0531911a8c9a891819a261480f8minfrin [RT #38604]
21644b4d1b09d0531911a8c9a891819a261480f8minfrin4067. [cleanup] Reduce noise from RRL when query logging is
21644b4d1b09d0531911a8c9a891819a261480f8minfrin disabled. [RT #38648]
bf5cf58cc30750e9f9764cc830aff426ced288f9aaron4066. [doc] Reorganize options in the dig man page. [RT #38516]
bf5cf58cc30750e9f9764cc830aff426ced288f9aaron4065. [test] Additional RFC 5011 tests. [RT #38569]
7cdc36a99b42a3c5e36ac47726ad41c9c7b039ceianh4064. [contrib] dnssec-keyset.sh: Generates a specified number
7cdc36a99b42a3c5e36ac47726ad41c9c7b039ceianh of DNSSEC keys with timing set to implement a
cbfbf9598d686b11afc7a9f9d91a8facfdfa7216trawick pre-publication key rollover strategy. Thanks
cbfbf9598d686b11afc7a9f9d91a8facfdfa7216trawick to Jeffry A. Spain. [RT #38459]
e37c657172940f82d9b28a45fc1304140eb0b1d7stoddard4063. [bug] Asynchronous zone loads were not handled
fe808620434aa59b796e8b60cd6eec65a32dfc2dstoddard correctly when the zone load was already in
e37c657172940f82d9b28a45fc1304140eb0b1d7stoddard progress; this could trigger a crash in zt.c.
5f08a022a210f4e511561e89f500621a15e6177dtrawick4062. [bug] Fix an out-of-bounds read in RPZ code. If the
6db5333c9461942b8af724b101e687af541d4d4cjerenkrantz read succeeded, it doesn't result in a bug
6db5333c9461942b8af724b101e687af541d4d4cjerenkrantz during operation. If the read failed, named
d4fcf63a5d9171d50c0d04e05a35ec6bf1f85100jerenkrantz could segfault. [RT #38559]
d4fcf63a5d9171d50c0d04e05a35ec6bf1f85100jerenkrantz4061. [bug] Handle timeout in legacy system test. [RT #38573]
dee6a8bde4d598087dc4b3ebf3d4dd06809d2dd7jerenkrantz4060. [bug] dns_rdata_freestruct could be called on a
dee6a8bde4d598087dc4b3ebf3d4dd06809d2dd7jerenkrantz uninitialized structure when handling a error.
edd6c1f4be1aa23fc99134802941397f7f31b3d5jerenkrantz4059. [bug] Addressed valgrind warnings. [RT #38549]
d7d551e53cdfb3288eb651447d7209599c40d17estoddard4058. [bug] UDP dispatches could use the wrong pseudorandom
d7d551e53cdfb3288eb651447d7209599c40d17estoddard number generator context. [RT #38578]
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron [RT #38565]
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron4056. [bug] Expanded automatic testing of trust anchor
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron management and fixed several small bugs including
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron a memory leak and a possible loss of key state
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron information. [RT #38458]
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron4055. [func] "rndc managed-keys" can be used to check status
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron of trust anchors or to force keys to be refreshed,
956a1511249b1fec73aaee0fb7d69c8492aa1368aaron Also, the managed keys data file has easier-to-read
d0e4ca9bfd8bf44bea574733965851bfee939d95aaron comments. [RT #38458]
a4b3fb28f3d2e0983b15b4c6828c6980f2fc9b15jerenkrantz4054. [func] Added a new tool 'mdig', a lightweight clone of
a4b3fb28f3d2e0983b15b4c6828c6980f2fc9b15jerenkrantz dig able to send multiple pipelined queries.
548b2980e83f609186a76e98fb245d02e8547bc3jerenkrantz4053. [security] Revoking a managed trust anchor and supplying
e54b09d79ca9bc18ea5ae33367fd907473621dcejerenkrantz an untrusted replacement could cause named
e54b09d79ca9bc18ea5ae33367fd907473621dcejerenkrantz to crash with an assertion failure.
e54b09d79ca9bc18ea5ae33367fd907473621dcejerenkrantz (CVE-2015-1349) [RT #38344]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4052. [bug] Fix a leak of query fetchlock. [RT #38454]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4050. [bug] RPZ could send spurious SERVFAILs in response
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz to duplicate queries. [RT #38510]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4048. [bug] adb hash table was not being grown. [RT #38470]
edcd9e6d9d29f60b25f7b9779dbd33e9dc1cc79ejerenkrantz4047. [cleanup] "named -V" now reports the current running versions
3dacbb0a9d24ff7178be1d79846225549719c0c7jerenkrantz of OpenSSL and the libxml2 libraries, in addition to
0733b4ac1b339822a5b506be8a28fea6e384cbfetrawick the versions that were in use at build time.
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4046. [bug] Accounting of "total use" in memory context
1582553026e5e3a1921a34222eaee923fddee9b9wrowe statistics was not correct. [RT #38370]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4045. [bug] Skip to next master on dns_request_createvia4 failure.
1582553026e5e3a1921a34222eaee923fddee9b9wrowe [RT #25185]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4044. [bug] Change 3955 was not complete, resulting in an assertion
1582553026e5e3a1921a34222eaee923fddee9b9wrowe failure if the timing was just right. [RT #38352]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4043. [func] "rndc modzone" can be used to modify the
1582553026e5e3a1921a34222eaee923fddee9b9wrowe configuration of an existing zone, using similar
1582553026e5e3a1921a34222eaee923fddee9b9wrowe syntax to "rndc addzone". [RT #37895]
1582553026e5e3a1921a34222eaee923fddee9b9wrowe4042. [bug] zone.c:iszonesecure was being called too late.
1582553026e5e3a1921a34222eaee923fddee9b9wrowe [RT #38371]
bd214bbc8d9db9d6d1dcb6b24462e6d1da8e8bbbstoddard4041. [func] TCP sockets can now be shared while connecting.
bd214bbc8d9db9d6d1dcb6b24462e6d1da8e8bbbstoddard (This will be used to enable client-side support
bd214bbc8d9db9d6d1dcb6b24462e6d1da8e8bbbstoddard of pipelined queries.) [RT #38231]
064448ce15afe798e3c1dc0445fe2a30eb256bf6gregames4040. [func] Added server-side support for pipelined TCP
1078b2c97bb39352bae929d2ed3f290a420470a7ianh queries. Clients may continue sending queries via
762c82a23cc3ddaac92f941b2f871e94efdf4e6bgregames TCP while previous queries are being processed
762c82a23cc3ddaac92f941b2f871e94efdf4e6bgregames in parallel. (The new "keep-response-order"
762c82a23cc3ddaac92f941b2f871e94efdf4e6bgregames option allows clients to be specified for which
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron the old behavior will still be used.) [RT #37821]
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
fb50cf6056a42f94cc9e8eeabea1eb8d05e0aefcaaron4038. [bug] Add 'rpz' flag to node and use it to determine whether
d56c38bfb6293bfff7c980858b19e32039106618jerenkrantz to call dns_rpz_delete. This should prevent unbalanced
d56c38bfb6293bfff7c980858b19e32039106618jerenkrantz add / delete calls. [RT #36888]
d56c38bfb6293bfff7c980858b19e32039106618jerenkrantz4037. [bug] also-notify was ignoring the tsig key when checking
7c301a1818939f85da8f3629cc3e9b5588610ef0jerenkrantz for duplicates resulting in some expected notify
7c301a1818939f85da8f3629cc3e9b5588610ef0jerenkrantz messages not being sent. [RT #38369]
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb4036. [bug] Make call to open a temporary file name safe during
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb NZF creation. [RT #38331]
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb4035. [bug] Close temporary and NZF FILE pointers before moving
a7fb6d64e059872d5410e873b7f492d62a5cf916rbb the former into the latter's place, as required on
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick Windows. [RT #38332]
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick4034. [func] When added, negative trust anchors (NTA) are now
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick saved to files (viewname.nta), in order to
a985ccb3ebd4be0fda23a0ce9ad95fd233089463trawick persist across restarts of the named server.
af262486b3d1c33299307195a715bd1e373f99afrbb [RT #37087]
af262486b3d1c33299307195a715bd1e373f99afrbb4033. [bug] Missing out of memory check in request.c:req_send.
af262486b3d1c33299307195a715bd1e373f99afrbb [RT #38311]
628ce9384209a460022be952ccdcc8538ad3ca84slive4032. [bug] Built-in "empty" zones did not correctly inherit the
628ce9384209a460022be952ccdcc8538ad3ca84slive "allow-transfer" ACL from the options or view.
628ce9384209a460022be952ccdcc8538ad3ca84slive [RT #38310]
628ce9384209a460022be952ccdcc8538ad3ca84slive4031. [bug] named-checkconf -z failed to report a missing file
2b9a9a94658c0febcad2f76621b2d5ab856edc6atrawick with a hint zone. [RT #38294]
2b9a9a94658c0febcad2f76621b2d5ab856edc6atrawick4030. [func] "rndc delzone" is now applicable to zones that were
2b9a9a94658c0febcad2f76621b2d5ab856edc6atrawick configured in named.conf, as well as zones that
f6f453bf03007f391d347dc821e507cdd924d1bftrawick were added via "rndc addzone". (Note, however, that
f6f453bf03007f391d347dc821e507cdd924d1bftrawick if named.conf is not also modified, the deleted zone
f6f453bf03007f391d347dc821e507cdd924d1bftrawick will return when named is reloaded.) [RT #37887]
f6f453bf03007f391d347dc821e507cdd924d1bftrawick4029. [func] "rndc showzone" displays the current configuration
205f4595abf32ae208958d7f8abea68b335c9f39trawick of a specified zone. [RT #37887]
205f4595abf32ae208958d7f8abea68b335c9f39trawick4028. [bug] $GENERATE with a zero step was not being caught as a
205f4595abf32ae208958d7f8abea68b335c9f39trawick error. A $GENERATE with a / but no step was not being
1078b2c97bb39352bae929d2ed3f290a420470a7ianh caught as a error. [RT #38262]
1078b2c97bb39352bae929d2ed3f290a420470a7ianh4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
1078b2c97bb39352bae929d2ed3f290a420470a7ianh4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
1078b2c97bb39352bae929d2ed3f290a420470a7ianh4025. [port] bsdi: failed to build. [RT #38047]
a8d5ccbcbde8cb6cf3a9dcf2eb05f393ab76baa9ianh4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron dns_rdata_opt_current, dns_rdata_txt_first,
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron dns_rdata_txt_next and dns_rdata_txt_current were
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron documented but not implemented. These have now been
611e46c801a6bd62e58a7f68abe1d2bbba473a92aaron implemented.
4224d5789080ea5586d49420da1e1996f5653bb5ianh dns_rdata_spf_first, dns_rdata_spf_next and
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh dns_rdata_spf_current were documented but not
2d2e3667d789f527a04ce6a0089621470c8143ccmartin implemented. The prototypes for these
2d2e3667d789f527a04ce6a0089621470c8143ccmartin functions have been removed. [RT #38068]
2d2e3667d789f527a04ce6a0089621470c8143ccmartin4023. [bug] win32: socket handling with explicit ports and
2d2e3667d789f527a04ce6a0089621470c8143ccmartin invoking named with -4 was broken for some
2d2e3667d789f527a04ce6a0089621470c8143ccmartin configurations. [RT #38068]
2d2e3667d789f527a04ce6a0089621470c8143ccmartin4022. [func] Stop multiple spawns of named by limiting number of
2d2e3667d789f527a04ce6a0089621470c8143ccmartin processes to 1. This is done by using a lockfile and
2d2e3667d789f527a04ce6a0089621470c8143ccmartin checking whether we can listen on any configured
9b0141308bc27f61d82742c198356975aa6b488abrianp TCP interfaces. [RT #37908]
9b0141308bc27f61d82742c198356975aa6b488abrianp4021. [bug] Adjust max-recursion-queries to accommodate
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh the need for more queries when the cache is
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh empty. [RT #38104]
fd3fa792f04fc9c4e8f5f83dceb0fc34e71f8570ianh4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
22d348febc3c258df246ac93e37945398dbf0348ianh resulting in updates being sent to the wrong server.
22d348febc3c258df246ac93e37945398dbf0348ianh [RT #37925]
62af8654f682ca4913636bae099bec0befab985ctrawick4019. [func] If named is not configured to validate the answer
62af8654f682ca4913636bae099bec0befab985ctrawick then allow fallback to plain DNS on timeout even
62af8654f682ca4913636bae099bec0befab985ctrawick when we know the server supports EDNS. [RT #37978]
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron4018. [placeholder]
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron4017. [test] Add system test to check lookups to legacy servers
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron with broken DNS behavior. [RT #37965]
5e98e52df07f59be456af01ebf46d81defef2385trawick4016. [bug] Fix a dig segfault due to bad linked list usage.
5e98e52df07f59be456af01ebf46d81defef2385trawick [RT #37591]
7a95e47ff0d0e4306df0901d56131b49dca5691etrawick4015. [bug] Nameservers that are skipped due to them being
7a95e47ff0d0e4306df0901d56131b49dca5691etrawick CNAMEs were not being logged. They are now logged
1e557a77c091a1d2f2872872a7c20e9f2ffccbc1aaron to category 'cname' as per BIND 8. [RT #37935]
b393bdb2e1eabbe4b9b37c5eaeeeca799b2eb324stoddard4014. [bug] When including a master file origin_changed was
b393bdb2e1eabbe4b9b37c5eaeeeca799b2eb324stoddard not being properly set leading to a potentially
b393bdb2e1eabbe4b9b37c5eaeeeca799b2eb324stoddard spurious 'inherited owner' warning. [RT #37919]
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe4013. [func] Add a new tcp-only option to server (config) /
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe peer (struct) to use TCP transport to send
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe queries (in place of UDP transport with a
3cd826b00280881e5a2f03d8ec1f8d55802b93dewrowe TCP fallback on truncated (TC set) response).
435c423bdcfa61ff871a9e289d1140f2bac839b8brianp [RT #37800]
435c423bdcfa61ff871a9e289d1140f2bac839b8brianp4012. [cleanup] Check returned status of OpenSSL digest and HMAC
435c423bdcfa61ff871a9e289d1140f2bac839b8brianp functions when they return one. Note this applies
bf9e1eb04f8b0af835d15ac1d0ebcd8a154474cfjerenkrantz only to FIPS capable OpenSSL libraries put in
e93cea6246ce30bf9791530a15c56f9e2eecf9cbianh FIPS mode and MD5. [RT #37944]
f65342c1467751310036d4f9d75f554eaaf01cc6wrowe4011. [bug] master's list port and dscp inheritance was not
f65342c1467751310036d4f9d75f554eaaf01cc6wrowe properly implemented. [RT #37792]
960eba6c6d512880c3ed0516f5d15c6e7bc7581ajerenkrantz4010. [cleanup] Clear the prefetchable state when initiating a
960eba6c6d512880c3ed0516f5d15c6e7bc7581ajerenkrantz prefetch. [RT #37399]
45613d36b9466a48def0498cffa07f48980720f8jerenkrantz4009. [func] delv: added a +tcp option. [RT #37855]
6f912b4ad14f622aa8d57f887c8c745e13ff6dbfjerenkrantz4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
1abe6003aeb198cc97263503bceed457a6c2cb4aaaron4007. [doc] Remove acl forward reference restriction. [RT #37772]
1abe6003aeb198cc97263503bceed457a6c2cb4aaaron4006. [security] A flaw in delegation handling could be exploited
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh to put named into an infinite loop. This has
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh been addressed by placing limits on the number
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh of levels of recursion named will allow (default 7),
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh and the number of iterative queries that it will
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh send (default 50) before terminating a recursive
cbd8d35ca8d9780f1081f30ebfe4abda44cab7ebianh query (CVE-2014-8500).
3ad5a1fa75e728431fa7b8e3d8a74bcadcd79d4dlars The recursion depth limit is configured via the
3ad5a1fa75e728431fa7b8e3d8a74bcadcd79d4dlars "max-recursion-depth" option, and the query limit
3ad5a1fa75e728431fa7b8e3d8a74bcadcd79d4dlars via the "max-recursion-queries" option. [RT #37580]
3fde4c273ea649d1320ec9c51e7d096cd9340a94jerenkrantz4005. [func] The buffer used for returning text from rndc
3fde4c273ea649d1320ec9c51e7d096cd9340a94jerenkrantz commands is now dynamically resizable, allowing
75eee56d2eaac9c27d32fc46b90bb6b1eac85359trawick arbitrarily large amounts of text to be sent back
75eee56d2eaac9c27d32fc46b90bb6b1eac85359trawick to the client. (Prior to this change, it was
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe possible for the output of "rndc tsig-list" to be
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe truncated.) [RT #37731]
0dc14774d2c21baf6123fcafdb853af5be1d97edwrowe4004. [bug] When delegations had AAAA glue but not A, a
9f62694a8b4e2b88994a14555d144b3836b311cfstoddard reference could be leaked causing an assertion
9f62694a8b4e2b88994a14555d144b3836b311cfstoddard failure on shutdown. [RT #37796]
9f62694a8b4e2b88994a14555d144b3836b311cfstoddard4003. [security] When geoip-directory was reconfigured during
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick named run-time, the previously loaded GeoIP
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick data could remain, potentially causing wrong
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick ACLs to be used or wrong results to be served
52489511342e4ff3fe399e57f29d38e5c4227bc8trawick based on geolocation (CVE-2014-8680). [RT #37720]
8864d6f5f4744b5d2b638e2a53e2660bcf8b5ab5dougm4002. [security] Lookups in GeoIP databases that were not
8864d6f5f4744b5d2b638e2a53e2660bcf8b5ab5dougm loaded could cause an assertion failure
ea512a4af20e6b6e6931de4929d54d93f03a0139ianh (CVE-2014-8680). [RT #37679]
1dfb5e008f35ed13c343b7f6306675e33c399792gstein4001. [security] The caching of GeoIP lookups did not always
1dfb5e008f35ed13c343b7f6306675e33c399792gstein handle address families correctly, potentially
1dfb5e008f35ed13c343b7f6306675e33c399792gstein resulting in an assertion failure (CVE-2014-8680).
1dfb5e008f35ed13c343b7f6306675e33c399792gstein [RT #37672]
eadb64379834961679105b7fd4178253fbb9f95dtrawick4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
eadb64379834961679105b7fd4178253fbb9f95dtrawick from the redirect zone. [RT #37722]
eadb64379834961679105b7fd4178253fbb9f95dtrawick3999. [func] "mkeys" and "nzf" files are now named after
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick their corresponding views, unless the view name
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick contains characters that would be incompatible
c7e917aa56886c47bfe061c5e9f603a5aaef0d87trawick with use in a filename (i.e., slash, backslash,
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar or capital letters). If a view name does contain
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar these characters, the files will still be named
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar using a cryptographic hash of the view name.
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar Regardless of this, if a file using the old name
b8daf4c5ea3d5bb2111b1b021de6d3cd891e403bcoar format is found to exist, it will continue to be
6b6083e6518007139257ee449c2af3032d2437d0trawick used. [RT #37704]
6b6083e6518007139257ee449c2af3032d2437d0trawick3998. [bug] isc_radix_search was returning matches that were
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick too precise. [RT #37680]
88dd056b9863502bba82c2889a0c4cde9fc0ba93trawick3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
7ef3a1797818c6d25efe8c5fadb5eec3b965a6fabrianp3996. [bug] Address use after free on out of memory error in
7ef3a1797818c6d25efe8c5fadb5eec3b965a6fabrianp keyring_add. [RT #37639]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe3995. [bug] receive_secure_serial holds the zone lock for too
1e83c8de3aa48b316b28057d53995272baf1260cwrowe long. [RT #37626]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe3994. [func] Dig now supports setting the last unassigned DNS
1e83c8de3aa48b316b28057d53995272baf1260cwrowe header flag bit (dig +zflag). [RT #37421]
1e83c8de3aa48b316b28057d53995272baf1260cwrowe3993. [func] Dig now supports EDNS negotiation by default.
1e83c8de3aa48b316b28057d53995272baf1260cwrowe (dig +[no]ednsnegotiation).
1e83c8de3aa48b316b28057d53995272baf1260cwrowe Note: This is disabled by default in BIND 9.10
7f683bb300df767164724ebc664f339ac396b434dougm and enabled by default in BIND 9.11. [RT #37604]
7f683bb300df767164724ebc664f339ac396b434dougm3992. [func] DiG can now send queries without questions
7f683bb300df767164724ebc664f339ac396b434dougm (dig +header-only). [RT #37599]
7f683bb300df767164724ebc664f339ac396b434dougm3991. [func] Add the ability to buffer logging output by specifying
7f683bb300df767164724ebc664f339ac396b434dougm "buffered yes;" when defining a channel. [RT #26561]
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe3990. [test] Add tests for unknown DNSSEC algorithm handling.
26dfa083a1662d57ba7cc410eec4e0696b9be469wrowe [RT #37541]
4760aa1f19600972cf531ad7da73c1ee5a0225cedougm3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
87a1c79b7b37702a254920ca5214fb282a4fb085dougm3988. [func] Allow the zone serial of a dynamically updatable
994c3fbc3335e8fe883b1ce4515efc0c85061cdfaaron zone to be updated via "rndc signing -serial".
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid3987. [port] Handle future Visual Studio 14 incompatible changes.
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid [RT #37380]
e93d563852e1fa7a8c73af3b807916b41942d2f6dreid3986. [doc] Add the BIND version number to page footers
525508562a53864b78cf8da91ac13be9c072bba7jerenkrantz in the ARM. [RT #37398]
525508562a53864b78cf8da91ac13be9c072bba7jerenkrantz3985. [doc] Describe how +ndots and +search interact in dig.
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick [RT #37529]
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick3984. [func] Accept 256 byte long PINs in native PKCS#11
f1fe10268cdadb775eef841aa4fa7305291d35fdtrawick crypto. [RT #37410]
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick3983. [bug] Change #3940 was incomplete: negative trust anchors
f04ad0ba7fe0eea5ea7a92f852cef75747ab2090trawick could be set to last up to a week, but the
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick "nta-lifetime" and "nta-recheck" options were
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick still limited to one day. [RT #37522]
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick3982. [doc] Include release notes in product documentation.
65a1588701f9e5d0f62261d0da85733a23edc92ftrawick [RT #37272]
d5d164b22a2004abed640cb52fc275f00ed92f69jerenkrantz3981. [bug] Cache DS/NXDOMAIN independently of other query types.
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
360a9d933a8c25f5975e0ddc883607a5d37e408estoddard size. [RT #37187]
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard3979. [bug] Negative trust anchor fetches were not properly
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard managed. [RT #37488]
9b8afc47122e9b0eabb860b6ba2cf9c061c6060fstoddard3978. [test] Added a unit test for Diffie-Hellman key
a21148678a1459064627d917a66669e7e8d140e6stoddard computation, completing change #3974. [RT #37477]
910df8b3f50a0515b430b999d4750de94c509f2atrawick3977. [cleanup] "rndc secroots" reported a "not found" error when
c6a9d49433c9ba5b18b26c3d764f1bbcb9746090wrowe there were no negative trust anchors set. [RT #37506]
c6a9d49433c9ba5b18b26c3d764f1bbcb9746090wrowe3976. [bug] When refreshing managed-key trust anchors, clear
51be7fc538641ed7cb22e959eb31629f7183f70fianh any cached trust so that they will always be
51be7fc538641ed7cb22e959eb31629f7183f70fianh revalidated with the current set of secure
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe roots. [RT #37506]
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe3975. [bug] Don't populate or use the bad cache for queries that
bb6a7fc0427d0d197c50de34b94a0d23e5732696wrowe don't request or use recursion. [RT #37466]
decd0c23bb26f6662f4b963cf86ee569613bffeagregames3974. [bug] Handle DH_compute_key() failure correctly in
e1753aabf5df187b5b04e72a958af4b65b1a125daaron3973. [test] Added hooks for Google Performance Tools CPU profiler,
e1753aabf5df187b5b04e72a958af4b65b1a125daaron including real-time/wall-clock profiling. Use
e1753aabf5df187b5b04e72a958af4b65b1a125daaron "configure --with-gperftools-profiler" to enable.
e1753aabf5df187b5b04e72a958af4b65b1a125daaron [RT #37339]
e1753aabf5df187b5b04e72a958af4b65b1a125daaron3972. [bug] Fix host's usage statement. [RT #37397]
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron3971. [bug] Reduce the cascading failures due to a bad $TTL line
e57f991fe2b9a4c080cd50ca913a2a5693b096b5aaron in named-checkconf / named-checkzone. [RT #37138]
924c8dd40352ca7775704a31a7a77ab86dc951b4ianh3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
910df8b3f50a0515b430b999d4750de94c509f2atrawick [RT #37237]
910df8b3f50a0515b430b999d4750de94c509f2atrawick3969. [test] Added 'delv' system test. [RT #36901]
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp3968. [bug] Silence spurious log messages when using 'named -[46]'.
0d628dd174dd6de13463b10d2599f6cac24e9fe8brianp [RT #37308]
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp3967. [test] Add test for inlined signed zone in multiple views
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp with different DNSKEY sets. [RT #35759]
2fee4fe267fa3577fd71d8c314fe9b527e2b90c0brianp3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
7bf77d70b6830636bc36e6b76a228c301be23ff7brianp [RT #35746]
7bf77d70b6830636bc36e6b76a228c301be23ff7brianp3965. [func] Log outgoing packets and improve packet logging to
185b73b1f914e5d8f99f31225cc656b882dcbf73ianh support logging the remote address. [RT #36624]
cef5cb47e2ea4c174c01762d4430613db0f41e5cstoddard3964. [func] nsupdate now performs check-names processing.
cef5cb47e2ea4c174c01762d4430613db0f41e5cstoddard [RT #36266]
1eb1f02a23de724c105b2c6c9fbd469a611059c6trawick3963. [test] Added NXRRSET test cases to the "dlzexternal"
8abd60101b9794e224795ccf68b8ba984efbc94astoddard system test. [RT #37344]
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick conditions. [RT #34663]
6ef713e25735887d4a59a879b97a68bd575ecb92trawick3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
ca47a2b6bcea23e8af185c68f256dcbbfd2a0f9dtrawick BADSIG. [RT #37216]
26d590c0e5338f66ca1aad6f925374843fac5121stoddard3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
26d590c0e5338f66ca1aad6f925374843fac5121stoddard3959. [bug] Updates could be lost if they arrived immediately
26d590c0e5338f66ca1aad6f925374843fac5121stoddard after a rndc thaw. [RT #37233]
d472f67198d6b15dd1270136f180cca9c9263243trawick3958. [bug] Detect when writeable files have multiple references
d472f67198d6b15dd1270136f180cca9c9263243trawick in named.conf. [RT #37172]
d472f67198d6b15dd1270136f180cca9c9263243trawick3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
d472f67198d6b15dd1270136f180cca9c9263243trawick and ECDSAP384SHA384. [RT #37183]
d472f67198d6b15dd1270136f180cca9c9263243trawick3956. [func] Notify messages are now rate limited by notify-rate and
a3bb95a3600153c7f09f62749e32093658943c32brianp startup-notify-rate instead of serial-query-rate.
a3bb95a3600153c7f09f62749e32093658943c32brianp [RT #24454]
b760518cc17e7124ba546ed63063603f1ab82a40aaron3955. [bug] Notify messages due to changes are no longer queued
b760518cc17e7124ba546ed63063603f1ab82a40aaron behind startup notify messages. [RT #24454]
b760518cc17e7124ba546ed63063603f1ab82a40aaron3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
b760518cc17e7124ba546ed63063603f1ab82a40aaron3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
b760518cc17e7124ba546ed63063603f1ab82a40aaron3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
23d8f62856c1531526042e1c5edf44557cadd2e5trawick two name pointers were the same. [RT #37176]
23d8f62856c1531526042e1c5edf44557cadd2e5trawick3951. [func] Add the ability to set yet-to-be-defined EDNS flags
705c8ed3ef608706c91ca12483d7b54ff9007cc9jerenkrantz to dig (+ednsflags=#). [RT #37142]
705c8ed3ef608706c91ca12483d7b54ff9007cc9jerenkrantz3950. [port] Changed the bin/python Makefile to work around a
ef154948c97c53cdc1ad5329cb83c32ad26cf416aaron bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
ef154948c97c53cdc1ad5329cb83c32ad26cf416aaron3949. [experimental] Experimental support for draft-andrews-edns1 by sending
c6741d11357aace4c9ba39535d3cb2d751f46114trawick EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
c6741d11357aace4c9ba39535d3cb2d751f46114trawick building). Add support for limiting the EDNS version
c6741d11357aace4c9ba39535d3cb2d751f46114trawick advertised to servers: server { edns-version 0; };
c6741d11357aace4c9ba39535d3cb2d751f46114trawick Log the EDNS version received in the query log.
7230f1eb017a35b7d20e0e9ec0d234766f2a732dtrawick [RT #35864]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick --with-tuning=large. [RT #37059]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick3947. [cleanup] Set the executable bit on libraries when using
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick libtool. [RT #36786]
86a5d34400b7f586ad2cca97c8b33b2f55bac61btrawick3946. [cleanup] Improved "configure" search for a python interpreter.
6b477c0a238733ca8fd156629310513d29dc7e02trawick [RT #36992]
6b477c0a238733ca8fd156629310513d29dc7e02trawick3945. [bug] Invalid wildcard expansions could be incorrectly
6b477c0a238733ca8fd156629310513d29dc7e02trawick accepted by the validator. [RT #37093]
2b31ac2c6342d2afcf67b7b0f08c928a87f98c74wrowe3944. [test] Added a regression test for "server-id". [RT #37057]
557eb8d48357657fa898250560f089c65539c634gregames3943. [func] SERVFAIL responses can now be cached for a
557eb8d48357657fa898250560f089c65539c634gregames limited time (configured by "servfail-ttl",
adb8c5e5291be5943122bbff404bc1018c79d555ianh default 10 seconds, limit 30). This can reduce
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick the frequency of retries when an authoritative
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick server is known to be failing, e.g., due to
25b715e9687f82ea055fdea2a9761c7e5f1ac6eetrawick ongoing DNSSEC validation problems. [RT #21347]
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp3942. [bug] Wildcard responses from a optout range should be
51ced3b28ef430a96586284d4320f7dbdaf7225ebrianp marked as insecure. [RT #37072]
a222035458f89e2db231450ba6d5fae8052da5f5aaron3941. [doc] Include the BIND version number in the ARM. [RT #37067]
a222035458f89e2db231450ba6d5fae8052da5f5aaron3940. [func] "rndc nta" now allows negative trust anchors to be
a222035458f89e2db231450ba6d5fae8052da5f5aaron set for up to one week. [RT #37069]
4a872628ca5bf20847f442a625c255b643120db0wrowe3939. [func] Improve UPDATE forwarding performance by allowing TCP
4a872628ca5bf20847f442a625c255b643120db0wrowe connections to be shared. [RT #37039]
74528257888620220641cd28366731539a37e1f3ianh3938. [func] Added quotas to be used in recursive resolvers
74528257888620220641cd28366731539a37e1f3ianh that are under high query load for names in zones
0632de713e41fa3aa928a1777677b0d79843ae2bdougm whose authoritative servers are nonresponsive or
0632de713e41fa3aa928a1777677b0d79843ae2bdougm are experiencing a denial of service attack.
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick - "fetches-per-server" limits the number of
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp simultaneous queries that can be sent to any
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp single authoritative server. The configured
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp value is a starting point; it is automatically
855e263a93fde2e30d10a48a9ffc047039bfc9d9brianp adjusted downward if the server is partially or
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb completely non-responsive. The algorithm used to
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb adjust the quota can be configured via the
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb "fetch-quota-params" option.
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb - "fetches-per-zone" limits the number of
54b3b7946d22324cea615d7c8a4ff0c9eadd1f8crbb simultaneous queries that can be sent for names
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb within a single domain. (Note: Unlike
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb "fetches-per-server", this value is not
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb self-tuning.)
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb - New stats counters have been added to count
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb queries spilled due to these quotas.
e28c02dc08247d3fcb71e81791cac2311a248dfdrbb See the ARM for details of these options. [RT #37125]
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh3937. [func] Added some debug logging to better indicate the
f9f506f0686ad065b4c6fe14dd962cdd478350dbianh conditions causing SERVFAILs when resolving.
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh [RT #35538]
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh3936. [func] Added authoritative support for the EDNS Client
9d0665da83d1e22c0ea0e5f6f940f70f75bf5237ianh Subnet (ECS) option.
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron ACLs can now include "ecs" elements which specify
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron an address or network prefix; if an ECS option is
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron included in a DNS query, then the address encoded
47c2fb4c1f155ddb6954e46e7f6d125eef78b3bbaaron in the option will be matched against "ecs" ACL
9ca934cec0a1cc3c425fde5dc51956bce6cd3183brianp Also, if an ECS address is included in a query,
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz then it will be used instead of the client source
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz address when matching "geoip" ACL elements. This
0cdca1e056a05a09fe16fe736abcf79969c9767ejerenkrantz behavior can be overridden with "geoip-use-ecs no;".
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick (Note: to enable "geoip" ACLs, use "configure
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick --with-geoip". This requires libGeoIP version
f2afeedf074acc1a698a9527154eacd138e6c5a1trawick 1.5.0 or higher.)
0a2d57d962bef3a8898723925b3fb02d2e836994dougm When "ecs" or "geoip" ACL elements are used to
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames select a view for a query, the response will include
06461d67f387ea068187e6dfa036875a8205c04cjerenkrantz an ECS option to indicate which client network the
06461d67f387ea068187e6dfa036875a8205c04cjerenkrantz answer is valid for.
900127764fb985c340ee4979cac97146a330c694trawick (Thanks to Vincent Bernat.) [RT #36781]
1a6a0072a95887164091e366ba0e89c2b39a954abrianp3935. [bug] "geoip asnum" ACL elements would not match unless
1a6a0072a95887164091e366ba0e89c2b39a954abrianp the full organization name was specified. They
6f4c27ba6e152792f3729069e8d8313ebc87cc60jwoolley can now match against the AS number alone (e.g.,
6f4c27ba6e152792f3729069e8d8313ebc87cc60jwoolley AS1234). [RT #36945]
23ce412bd50a47accab4dd26019b78810bbf46ebtrawick3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
23ce412bd50a47accab4dd26019b78810bbf46ebtrawick sit-secret documentation. [RT #36980]
6865813dee5d3c1ebf12dd810368171792a0190atrawick3933. [bug] Corrected the implementation of dns_rdata_casecompare()
6865813dee5d3c1ebf12dd810368171792a0190atrawick for the HIP rdata type. [RT #36911]
97719ad970d779ac48af9364ab0ea9fdcc27470ajwoolley3932. [test] Improved named-checkconf tests. [RT #36911]
97719ad970d779ac48af9364ab0ea9fdcc27470ajwoolley3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick3930. [bug] "rndc nta -r" could cause a server hang if the
5ad238c42b1e159ee8f164515e0c4ee6c727c2fdtrawick NTA was not found. [RT #36909]
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb3928. [test] Improve rndc system test. [RT #36898]
ba00c3b7c20f00ce631b89ae3b1cd3bae8d1b165rbb3927. [bug] dig: report PKCS#11 error codes correctly when
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb compiled with --enable-native-pkcs11. [RT #36956]
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb3926. [doc] Added doc for geoip-directory. [RT #36877]
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
6e954603b02f2b7d4ad80af17d9b3cc6f0bacf69rbb3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley3923. [bug] Sanity check the xml2-config output. [RT #22246]
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley3922. [bug] When resigning, dnssec-signzone was removing
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley all signatures from delegation nodes. It now
fa449f5bc87c5d87c4c60e778c9c882e7254de7ejwoolley retains DS and (if applicable) NSEC signatures.
1c0b7c3bdace07946457fa7ba04b7f97b6599792rbb [RT #36946]
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley3920. [doc] Added doc for masterfile-style. [RT #36823]
227d23a7db41dd89f52391c9356dbb1adcd675e0jwoolley3919. [bug] dig: continue to next line if a address lookup fails
1c0b7c3bdace07946457fa7ba04b7f97b6599792rbb in batch mode. [RT #36755]
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz3918. [doc] Update check-spf documentation. [RT #36910]
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz3917. [bug] dig, nslookup and host now continue on names that are
17bc0e8f2e3816e25bc8fd3fadf39357340aebd0jerenkrantz too long after applying a search list elements.
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb [RT #36892]
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb3916. [contrib] zone2sqlite checked wrong result code. Address
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb compiler warnings. [RT #36931]
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb3915. [bug] Address a assertion if a route event arrived while
e6cc28a5eb3371ba0c38e941855e71ff0054f50erbb shutting down. [RT #36887]
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick3914. [bug] Allow the URI target and CAA value fields to
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick be zero length. [RT #36737]
cf233fb4b439415a2bf7bab7e622afd994e0bebftrawick3913. [bug] Address race issue in dispatch. [RT #36731]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames3911. [func] Implement EDNS EXPIRE option client side, allowing
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames a slave server to set the expiration timer correctly
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames when transferring zone data from another slave
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames server. [RT #35925]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames3910. [bug] Fix races to free event during shutdown. [RT #36720]
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames3909. [bug] When computing the number of elements required for a
2a20a2f8432a15b530e0a6b0998c32f40aef82a8gregames acl count_acl_elements could have a short count leading
8d49090fd56a8ce06c7f7135f19e5ff8e24b5ff3gregames to a assertion failure. Also zero out new acl elements
f99bffd6087564cf9c05cc29d1c6b38d94e0ed30gregames in dns_acl_merge. [RT #36675]
270609308f247c5e934b400b5f1691c2cca16c61jerenkrantz3908. [bug] rndc now differentiates between a zone in multiple
270609308f247c5e934b400b5f1691c2cca16c61jerenkrantz views and a zone that doesn't exist at all. [RT #36691]
8458877c9ba0af86acd590eea531476adde3d02dmartin3907. [cleanup] Alphabetize rndc help. [RT #36683]
8458877c9ba0af86acd590eea531476adde3d02dmartin3906. [protocol] Update URI record format to comply with
8458877c9ba0af86acd590eea531476adde3d02dmartin draft-faltstrom-uri-08. [RT #36642]
644be6f54749d2d9950d2c4d2ac448f7af016d26martin3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
644be6f54749d2d9950d2c4d2ac448f7af016d26martin3904. [func] Add the RPZ SOA to the additional section. [RT36507]
b30b04f639d479b96cc08c43ffa34c92ba275676ianh3903. [bug] Improve the accuracy of DiG's reported round trip
b30b04f639d479b96cc08c43ffa34c92ba275676ianh time. [RT 36611]
c4fbc4018fd2b6716673a38ee27eeb36cba41c5djwoolley3902. [bug] liblwres wasn't handling link-local addresses in
c4fbc4018fd2b6716673a38ee27eeb36cba41c5djwoolley nameserver clauses in resolv.conf. [RT #36039]
c4fbc4018fd2b6716673a38ee27eeb36cba41c5djwoolley3901. [protocol] Added support for CAA record type (RFC 6844).
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe [RT #36625]
f4e4643c309e5b5da60e13f9a25984d54b307caawrowe3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
2548497d480c4f3e9b3fe14711bd510aa2157434gregames3899. [bug] "request-ixfr" is only applicable to slave and redirect
2548497d480c4f3e9b3fe14711bd510aa2157434gregames zones. [RT #36608]
0e58e92812f2f679d6bf2ff66cbcfa6c1d1e14bbjerenkrantz3898. [bug] Too small a buffer in tohexstr() calls in test code.
da6e93dca0222159650783802e23172e3160605egregames [RT #36598]
da6e93dca0222159650783802e23172e3160605egregames3897. [bug] RPZ summary information was not properly being updated
c927e13f298c42251296d33cc1fa3eb8232b843daaron after a AXFR resulting in changes sometimes being
c927e13f298c42251296d33cc1fa3eb8232b843daaron ignored. [RT #35885]
c927e13f298c42251296d33cc1fa3eb8232b843daaron3896. [bug] Address performance issues with DSCP code on some
c927e13f298c42251296d33cc1fa3eb8232b843daaron platforms. [RT #36534]
9126ed10455a2a98a3a51c68ed1b356e1873e8e6aaron3895. [func] Add the ability to set the DSCP code point to dig.
9126ed10455a2a98a3a51c68ed1b356e1873e8e6aaron [RT #36546]
fa3ca21e09bac0dbc2045e9f53963ba46cfed5b1trawick3894. [bug] Buffers in isc_print_vsnprintf were not properly
fa3ca21e09bac0dbc2045e9f53963ba46cfed5b1trawick initialized leading to potential overflows when
fa3ca21e09bac0dbc2045e9f53963ba46cfed5b1trawick printing out quad values. [RT #36505]
18acb2c0df442ead1d075a1a2207cbb197725b14coar3893. [bug] Peer DSCP values could be returned without being set.
18acb2c0df442ead1d075a1a2207cbb197725b14coar [RT #36538]
18acb2c0df442ead1d075a1a2207cbb197725b14coar3892. [bug] Setting '-t aaaa' in .digrc had unintended side
617f972690d850a52cd4e9ef2f32d356e0fae715aaron effects. [RT #36452]
617f972690d850a52cd4e9ef2f32d356e0fae715aaron3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
617f972690d850a52cd4e9ef2f32d356e0fae715aaron to install python programs.
9278d5393ef084f4fc6d7ec8641af5959442c157jwoolley3890. [bug] RRSIG sets that were not loaded in a single transaction
9278d5393ef084f4fc6d7ec8641af5959442c157jwoolley at start up where not being correctly added to
9278d5393ef084f4fc6d7ec8641af5959442c157jwoolley re-signing heaps. [RT #36302]
022cff78006f698453640e0a0e97cc5f8c9de59drbb3889. [port] hurd: configure fixes as per:
022cff78006f698453640e0a0e97cc5f8c9de59drbb https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
526a776292f420ffeea0d081c61971ed381fad20stoddard3888. [func] 'rndc status' now reports the number of automatic
526a776292f420ffeea0d081c61971ed381fad20stoddard zones. [RT #36015]
526a776292f420ffeea0d081c61971ed381fad20stoddard3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
526a776292f420ffeea0d081c61971ed381fad20stoddard they are easier to use in a debugger. [RT #36373]
526a776292f420ffeea0d081c61971ed381fad20stoddard3886. [bug] rbtdb_write_header should use a once to initialize
526a776292f420ffeea0d081c61971ed381fad20stoddard FILE_VERSION. [RT #36374]
526a776292f420ffeea0d081c61971ed381fad20stoddard3885. [port] Use 'open()' rather than 'file()' to open files in
62ddc9851530478919d169ba9c34b80f60cf7718trawick3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
62ddc9851530478919d169ba9c34b80f60cf7718trawick3883. [placeholder]
62ddc9851530478919d169ba9c34b80f60cf7718trawick3882. [func] By default, negative trust anchors will be tested
904d7bf799c6216beb34519463596b4fce630308wrowe periodically to see whether data below them can be
904d7bf799c6216beb34519463596b4fce630308wrowe validated, and if so, they will be allowed to
904d7bf799c6216beb34519463596b4fce630308wrowe expire early. The "rndc nta -force" option
904d7bf799c6216beb34519463596b4fce630308wrowe overrides this behavior. The default NTA lifetime
904d7bf799c6216beb34519463596b4fce630308wrowe and the recheck frequency can be configured by the
904d7bf799c6216beb34519463596b4fce630308wrowe "nta-lifetime" and "nta-recheck" options. [RT #36146]
904d7bf799c6216beb34519463596b4fce630308wrowe3881. [bug] Address memory leak with UPDATE error handling.
904d7bf799c6216beb34519463596b4fce630308wrowe [RT #36303]
17a4c6968b2fa692ff4dde12fe305230ee6b0421aaron3880. [test] Update ans.pl to work with new TSIG support in
17a4c6968b2fa692ff4dde12fe305230ee6b0421aaron Net::DNS; add additional Net::DNS version prerequisite
17a4c6968b2fa692ff4dde12fe305230ee6b0421aaron checks. [RT #36327]
83b031099aa3dc8a5fd2f708e397818cbd16c9aajerenkrantz3879. [func] Add version printing option to various BIND utilities.
01e77cadbd9ad4962993380245bcc033dde523e4rbb3878. [bug] Using the incorrect filename for a DLZ module
01e77cadbd9ad4962993380245bcc033dde523e4rbb caused a segmentation fault on startup. [RT #36286]
8ea9794272347cfdd92861f46295406649f01afatrawick3877. [bug] Inserting and deleting parent and child nodes
8ea9794272347cfdd92861f46295406649f01afatrawick in response policy zones could trigger an assertion
8ea9794272347cfdd92861f46295406649f01afatrawick failure. [RT #36272]
b900452c9c36031434d318880f023c0fb9143325rbb3876. [bug] Improve efficiency of DLZ redirect zones by
b900452c9c36031434d318880f023c0fb9143325rbb suppressing unnecessary database lookups. [RT #35835]
b900452c9c36031434d318880f023c0fb9143325rbb3875. [cleanup] Clarify log message when unable to read private
b900452c9c36031434d318880f023c0fb9143325rbb key files. [RT #24702]
b900452c9c36031434d318880f023c0fb9143325rbb3874. [test] Check that only "check-names master" is needed for
b900452c9c36031434d318880f023c0fb9143325rbb updates to be accepted.
8b666e1fb772b6fe45de3604b224f3e1f2cfd620rbb3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
c453a141db60a5b19649eac508f4851a8729c556rbb3872. [bug] Address issues found by static analysis. [RT #36209]
8b91dcac0e1ef7796c72d16b0962267313cac486jerenkrantz3871. [bug] Don't publish an activated key automatically before
8b91dcac0e1ef7796c72d16b0962267313cac486jerenkrantz its publish time. [RT #35063]
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe3870. [func] Updated the random number generator used in
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe the resolver to use the updated ChaCha based one
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe (similar to OpenBSD's changes). Also moved the
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe RNG to libisc and added unit tests for it.
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe [RT #35942]
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe3869. [doc] Document that in-view zones cannot be used for
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe response policy zones. [RT #35941]
7dfed2b71c9c4223996cbd7c5c0c85c7c8fef2a4rbb3868. [bug] isc_mem_setwater incorrectly cleared hi_called
6ce942b017db75b559a42bdc2d7b8ea9e869a956wrowe potentially leaving over memory cleaner running.
7dfed2b71c9c4223996cbd7c5c0c85c7c8fef2a4rbb [RT #35270]
574f6ff9ee80ef4f772649c5c8319b764a8abe42jerenkrantz3867. [func] "rndc nta" can now be used to set a temporary
574f6ff9ee80ef4f772649c5c8319b764a8abe42jerenkrantz negative trust anchor, which disables DNSSEC
6d7d70dbda8e461d87f2d41e323755496ae3ebc7trawick validation below a specified name for a specified
6d7d70dbda8e461d87f2d41e323755496ae3ebc7trawick period of time (not exceeding 24 hours). This
6d7d70dbda8e461d87f2d41e323755496ae3ebc7trawick can be used when validation for a domain is known
22a25f3393393b781e214f4abef17950bcb8bbe3jerenkrantz to be failing due to a configuration error on
22a25f3393393b781e214f4abef17950bcb8bbe3jerenkrantz the part of the domain owner rather than a
22a25f3393393b781e214f4abef17950bcb8bbe3jerenkrantz spoofing attack. [RT #29358]
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe3866. [bug] Named could die on disk full in generate_session_key.
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe [RT #36119]
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe3865. [test] Improved testability of the red-black tree
a310497ca9c5112d759871e1b7d9f6a40fb78bcfwrowe implementation and added unit tests. [RT #35904]
8bda0627eb2aca9e678c1303a0423d33069388dfwrowe3864. [bug] RPZ didn't work well when being used as forwarder.
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb3863. [bug] The "E" flag was missing from the query log as a
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb unintended side effect of code rearrangement to
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb support EDNS EXPIRE. [RT #36117]
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb3862. [cleanup] Return immediately if we are not going to log the
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb message in ns_client_dumpmessage.
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb3861. [security] Missing isc_buffer_availablelength check results
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb in a REQUIRE assertion when printing out a packet
e36ef0d081aa59867688bcbb3da65952ec16fae3rbb (CVE-2014-3859). [RT #36078]
52df98b165194a0ad68885f49f81fdaf56ece568wrowe3860. [bug] ioctl(DP_POLL) array size needs to be determined
52df98b165194a0ad68885f49f81fdaf56ece568wrowe at run time as it is limited to {OPEN_MAX}.
52df98b165194a0ad68885f49f81fdaf56ece568wrowe [RT #35878]
2c294c31addd5c957bafe6e78c4a30d423ad6e80rbb3859. [placeholder]
2c294c31addd5c957bafe6e78c4a30d423ad6e80rbb3858. [bug] Disable GCC 4.9 "delete null pointer check".
7e44dd5082cd865068285e8f915bb5f045e0bb80lars [RT #35968]
7e44dd5082cd865068285e8f915bb5f045e0bb80lars3857. [bug] Make it harder for a incorrect NOEDNS classification
7e44dd5082cd865068285e8f915bb5f045e0bb80lars to be made. [RT #36020]
44a4ee1140769173da7bc2b42d1a686e3260ad84wrowe3856. [bug] Configuring libjson without also configuring libxml
44a4ee1140769173da7bc2b42d1a686e3260ad84wrowe resulted in a REQUIRE assertion when retrieving
44a4ee1140769173da7bc2b42d1a686e3260ad84wrowe statistics using json. [RT #36009]
e379fc6d7f79163700290d92ce75deb4f3005301jerenkrantz3855. [bug] Limit smoothed round trip time aging to no more than
e379fc6d7f79163700290d92ce75deb4f3005301jerenkrantz once a second. [RT #32909]
978faa9e29e0f0c42e66c07240e562325a4717b0jerenkrantz3854. [cleanup] Report unrecognized options, if any, in the final
978faa9e29e0f0c42e66c07240e562325a4717b0jerenkrantz configure summary. [RT #36014]
978faa9e29e0f0c42e66c07240e562325a4717b0jerenkrantz3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
976501adbc040220270f7d1d77c4b8373033be69wrowe the handling of a rdataset with no records. [RT #35968]
976501adbc040220270f7d1d77c4b8373033be69wrowe3852. [func] Increase the default number of clients available
976501adbc040220270f7d1d77c4b8373033be69wrowe for servicing lightweight resolver queries, and
976501adbc040220270f7d1d77c4b8373033be69wrowe make them configurable via the "lwres-tasks" and
976501adbc040220270f7d1d77c4b8373033be69wrowe "lwres-clients" options. (Thanks to Tomas Hozza.)
10a00688adcf1df367b1243810beedaabe6b1abeminfrin [RT #35857]
10a00688adcf1df367b1243810beedaabe6b1abeminfrin3851. [func] Allow libseccomp based system-call filtering
8a3a703eae0e35f674b189181609545c6fc77a09rbb on Linux; use "configure --enable-seccomp" to
8a3a703eae0e35f674b189181609545c6fc77a09rbb turn it on. Thanks to Loganaden Velvindron
8a3a703eae0e35f674b189181609545c6fc77a09rbb of AFRINIC for the contribution. [RT #35347]
9af1ccb223d0669b3c3a43eed070d815afde9084mjc3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
9af1ccb223d0669b3c3a43eed070d815afde9084mjc [RT #35979]
9d41fafe32b324c197f25224207fc6ce34f085bfrbb3849. [doc] Alphabetized dig's +options. [RT #35992]
9d41fafe32b324c197f25224207fc6ce34f085bfrbb3848. [bug] Adjust 'statistics-channels specified but not effective'
9d41fafe32b324c197f25224207fc6ce34f085bfrbb error message to account for JSON support. [RT #36008]
889d9c84f8b1ad850f977a6d8e548696994f8f86jerenkrantz3847. [bug] 'configure --with-dlz-postgres' failed to fail when
889d9c84f8b1ad850f977a6d8e548696994f8f86jerenkrantz there is not support available.
8c83461e53ca7d204e1d634f0c78199d60320d7bjerenkrantz3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
8c83461e53ca7d204e1d634f0c78199d60320d7bjerenkrantz ixfr query. [RT #35980]
8e5842bc05146bb5c171e53b00b24063d17c666cjerenkrantz3845. [placeholder]
8e5842bc05146bb5c171e53b00b24063d17c666cjerenkrantz3844. [bug] Use the x64 version of the Microsoft Visual C++
cdb15137887e284797e9510029098dc725b4dacfjerenkrantz Redistributable when built for 64 bit Windows.
798c7c11dc2fe3b08e591e9c76fc1a84857f2cd4jerenkrantz3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
abaaa634d7cee882b7c4bf078ded749ebf11997erbb3842. [bug] Adjust RRL log-only logging category. [RT #35945]
abaaa634d7cee882b7c4bf078ded749ebf11997erbb3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
abaaa634d7cee882b7c4bf078ded749ebf11997erbb [RT #35924]
0aa8e8fd5a242948518655f2296b3c76386754e5jerenkrantz3840. [port] Check for arc4random_addrandom() before using it;
0aa8e8fd5a242948518655f2296b3c76386754e5jerenkrantz it's been removed from OpenBSD 5.5. [RT #35907]
de3abad1fe263e577bb11e99b358836bd901397crbb3839. [test] Use only posix-compatible shell in system tests.
de3abad1fe263e577bb11e99b358836bd901397crbb [RT #35625]
de3abad1fe263e577bb11e99b358836bd901397crbb3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
de3abad1fe263e577bb11e99b358836bd901397crbb3837. [security] A NULL pointer is passed to query_prefetch resulting
de3abad1fe263e577bb11e99b358836bd901397crbb a REQUIRE assertion failure when a fetch is actually
de3abad1fe263e577bb11e99b358836bd901397crbb initiated (CVE-2014-3214). [RT #35899]
0a549489abdb309ef25483431e1e5610ed4ba7a8gstein3836. [bug] Address C++ keyword usage in header file.
0a549489abdb309ef25483431e1e5610ed4ba7a8gstein3835. [bug] Geoip ACL elements didn't work correctly when
0a549489abdb309ef25483431e1e5610ed4ba7a8gstein referenced via named or nested ACLs. [RT #35879]
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe3834. [bug] The re-signing heaps were not being updated soon enough
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe leading to multiple re-generations of the same RRSIG
14c6f2e13d97a4fafac1fbc247a274a298d5b418wrowe when a zone transfer was in progress. [RT #35273]
f00d1e76bae896c2f6a520eec69b1d0d802d4108jerenkrantz3833. [bug] Cross compiling was broken due to calling genrandom at
f00d1e76bae896c2f6a520eec69b1d0d802d4108jerenkrantz build time. [RT #35869]
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb3832. [func] "named -L <filename>" causes named to send log
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb messages to the specified file by default instead
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb of to the system log. (Thanks to Tony Finch.)
58097d7d8d1a394092374b9f6ddf76b7993724a4rbb [RT #35845]
2f6cebd6b8bf0b044f6579d23117a4a3c364a554wrowe3831. [cleanup] Reduce logging noise when EDNS state changes occur.
2f6cebd6b8bf0b044f6579d23117a4a3c364a554wrowe [RT #35843]
2f6cebd6b8bf0b044f6579d23117a4a3c364a554wrowe3830. [func] When query logging is enabled, log query errors at
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb the same level ('info') as the queries themselves.
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb [RT #35844]
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb3829. [func] "dig +ttlunits" causes dig to print TTL values
070d2f9fd52a3f0e45ca7ae1235c5a5755b80d24rbb with time-unit suffixes: w, d, h, m, s for
7c19ce86bbd72bba1d018522250f5f315ffbc0afjerenkrantz weeks, days, hours, minutes, and seconds. (Thanks
7c19ce86bbd72bba1d018522250f5f315ffbc0afjerenkrantz to Tony Finch.) [RT #35823]
2264fbcbab4c796c4222c30393c0b218c98b6befrbb3828. [func] "dnssec-signzone -N date" updates serial number
2264fbcbab4c796c4222c30393c0b218c98b6befrbb to the current date in YYYYMMDDNN format.
2264fbcbab4c796c4222c30393c0b218c98b6befrbb [RT #35800]
e099672a13ea4ff4a11f130406f1baecba5949bajerenkrantz3827. [placeholder]
e099672a13ea4ff4a11f130406f1baecba5949bajerenkrantz3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
9b29e0cfeb2c89a047806cc4a2a764afed6bb170wrowe [RT #35870]
9b29e0cfeb2c89a047806cc4a2a764afed6bb170wrowe3825. [bug] Address sign extension bug in isc_regex_validate.
9b29e0cfeb2c89a047806cc4a2a764afed6bb170wrowe [RT #35758]
441bd066858500e75e4f63ef149120bcf523de58jerenkrantz3824. [bug] A collision between two flag values could cause
441bd066858500e75e4f63ef149120bcf523de58jerenkrantz problems with cache cleaning when SIT was enabled.
d6a93816bfaa5b3de5f2e6cb0d172cbe20dd056ejerenkrantz3823. [func] Log the rpz cname target when rewriting. [RT #35667]
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe3822. [bug] Log the correct type of static-stub zones when
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe removing them. [RT #35842]
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
c839614b4216fe34f6346668ad646aca2c0f23c6wrowe update and transaction support. Thanks to Marty
117e2968318323d2ad2187fcd4de379d2eca245cwrowe Lee for the contribution. [RT #35656]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe3820. [func] The DLZ API doesn't pass the database version to
117e2968318323d2ad2187fcd4de379d2eca245cwrowe the lookup() function; this can cause DLZ modules
117e2968318323d2ad2187fcd4de379d2eca245cwrowe that allow dynamic updates to mishandle prerequisite
117e2968318323d2ad2187fcd4de379d2eca245cwrowe checks. This has been corrected by adding a
117e2968318323d2ad2187fcd4de379d2eca245cwrowe 'dbversion' field to the dns_clientinfo_t
117e2968318323d2ad2187fcd4de379d2eca245cwrowe structure. [RT #35656]
117e2968318323d2ad2187fcd4de379d2eca245cwrowe3819. [bug] NSEC3 hashes need to be able to be entered and
117e2968318323d2ad2187fcd4de379d2eca245cwrowe displayed without padding. This is not a issue for
117e2968318323d2ad2187fcd4de379d2eca245cwrowe currently defined algorithms but may be for future
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe hash algorithms. [RT #27925]
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe3818. [bug] Stop lying to the optimizer that 'void *arg' is a
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe constant in isc_event_allocate.
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe3817. [func] The "delve" command is now spelled "delv" to avoid
e9fa5a00f39f6aabbc5dcd776c5bc6bd0638f955wrowe a namespace collision with the Xapian project.
de419544885a5c64589dddf1b8517672ee17c1feminfrin [RT #35801]
de419544885a5c64589dddf1b8517672ee17c1feminfrin3816. [func] "dig +qr" now reports query size. (Thanks to
df14f0d3a5191cdd7c4bb5b03acd135d43a6f51brbb Tony Finch.) [RT #35822]
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin3814. [func] The "masterfile-style" zone option controls the
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin formatting of dumped zone files. Options are
9c4321d9cc4eecbb0c5d568aea53d5e6812c7b96martin "relative" (multiline format) and "full" (one
956c6100798467199833e7159a00506ee879d772minfrin record per line). The default is "relative".
956c6100798467199833e7159a00506ee879d772minfrin [RT #20798]
956c6100798467199833e7159a00506ee879d772minfrin3813. [func] "host" now recognizes the "timeout", "attempts" and
956c6100798467199833e7159a00506ee879d772minfrin "debug" options when set in /etc/resolv.conf.
956c6100798467199833e7159a00506ee879d772minfrin (Thanks to Adam Tkac at RedHat.) [RT #21885]
47697533fd7ced2259f9150677ea5efa583b6c13rbb3812. [func] Dig now supports sending arbitrary EDNS options from
47697533fd7ced2259f9150677ea5efa583b6c13rbb the command line (+ednsopt=code[:value]). [RT #35584]
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe3811. [func] "serial-update-method date;" sets serial number
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe on dynamic update to today's date in YYYYMMDDNN
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe format. (Thanks to Bradley Forschinger.) [RT #24903]
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe3810. [bug] Work around broken nameservers that fail to ignore
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe unknown EDNS options. [RT #35766]
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe3809. [doc] Fix SIT and NSID documentation.
7ba1a2c8babfd7c7c46bb03567a868d51e1023dbwrowe3808. [doc] Clean up "prefetch" documentation. [RT #35751]
b2c2c8a4bc977c0a6bb937af995efc56dc3879a3wrowe3807. [bug] Fix sign extension bug in dns_name_fromtext when
b2c2c8a4bc977c0a6bb937af995efc56dc3879a3wrowe lowercase is set. [RT #35743]
b2c2c8a4bc977c0a6bb937af995efc56dc3879a3wrowe3806. [test] Improved system test portability. [RT #35625]
67869a9db2967cb50405e51b1d6d1ebab1219e03trawick3805. [contrib] Added contrib/perftcpdns, a performance testing tool
67869a9db2967cb50405e51b1d6d1ebab1219e03trawick for DNS over TCP. [RT #35710]
4d003677925ceb0abefb9c95355b4c9e9e502899rederpj --- 9.10.0rc1 released ---
67869a9db2967cb50405e51b1d6d1ebab1219e03trawick3804. [bug] Corrected a race condition in dispatch.c in which
4d003677925ceb0abefb9c95355b4c9e9e502899rederpj portentry could be reset leading to an assertion
e00ae6859667e293a4c40108f524408ae1289f2frbb failure in socket_search(). (Change #3708
0db1b9810f06c0e3c537e0e0dfbc30160c308526trawick addressed the same issue but was incomplete.)
0db1b9810f06c0e3c537e0e0dfbc30160c308526trawick [RT #35128]
13bac43a0f21d8c6401debc1baa76be984474074rbb3803. [bug] "named-checkconf -z" incorrectly rejected zones
13bac43a0f21d8c6401debc1baa76be984474074rbb using alternate data sources for not having a "file"
13bac43a0f21d8c6401debc1baa76be984474074rbb option. [RT #35685]
053497224246c4dbef9af594cacf5c00ed271e6cwrowe3802. [bug] Various header files were not being installed.
053497224246c4dbef9af594cacf5c00ed271e6cwrowe3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe3800. [bug] A pending event on the route socket could cause an
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe assertion failure when shutting down named. [RT #35674]
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe3799. [bug] Improve named's command line error reporting.
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe [RT #35603]
ac06e54654494445fd3d39e90bd23b436b4f84ccwrowe3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
314b1f3fac7a0b556146ef055f37df00020604d0jwoolley time. [RT #35659]
78e8198247420a3efeb21e38b42c423e5863cbb0jwoolley3797. [port] netbsd: geoip support probing was broken. [RT #35642]
78e8198247420a3efeb21e38b42c423e5863cbb0jwoolley3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe3795. [bug] Make named-checkconf detect raw masterfiles for
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe hint zones and reject them. [RT #35268]
a2a0abd88b19e042a3eb2a9fa1702c25ad51303dwrowe3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
a906160166014e14adc01c87a956d89de0d79918rbb3793. [bug] zone.c:save_nsec3param() could assert when out of
a906160166014e14adc01c87a956d89de0d79918rbb memory. [RT #35621]
a906160166014e14adc01c87a956d89de0d79918rbb3792. [func] Provide links to the alternate statistics views when
a906160166014e14adc01c87a956d89de0d79918rbb displaying in a browser. [RT #35605]
a906160166014e14adc01c87a956d89de0d79918rbb3791. [placeholder]
7f66c5be12d3b48b1ebfa79033c099e4f91ff302dougm3790. [bug] Handle broken nameservers that send BADVERS in
7f66c5be12d3b48b1ebfa79033c099e4f91ff302dougm response to unknown EDNS options. Maintain
7f66c5be12d3b48b1ebfa79033c099e4f91ff302dougm statistics on BADVERS responses.
e00ae6859667e293a4c40108f524408ae1289f2frbb3789. [bug] Null pointer dereference on rbt creation failure.
e00ae6859667e293a4c40108f524408ae1289f2frbb3788. [bug] dns_peer_getrequestsit was returning request_nsid by
e00ae6859667e293a4c40108f524408ae1289f2frbb --- 9.10.0b2 released ---
d94fd18ee21dc9b8c1f422144a881e941687d41fdougm3787. [bug] The code that checks whether "auto-dnssec" is
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj allowed was ignoring "allow-update" ACLs set at
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj the options or view level. [RT #29536]
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj3786. [func] Provide more detailed error codes when using
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj native PKCS#11. "pkcs11-tokens" now fails robustly
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj rather than asserting when run against an HSM with
53b8cdb3621b11b897438d8990d20e0b78f0d4b7rederpj an incomplete PKCS#11 API implementation. [RT #35479]
a1373889aeb316ed9d1b0f24a715e919d02a4d99dougm3785. [bug] Debugging code dumphex didn't accept arbitrarily long
a1373889aeb316ed9d1b0f24a715e919d02a4d99dougm input (only compiled with -DDEBUG). [RT #35544]
6b025bd5a034790b2bb31236092265e154d6a565dougm3784. [bug] Using "rrset-order fixed" when it had not been
330e5149d05dc4f5121b30964753167e43690afdrbb enabled at compile time caused inconsistent
d0af34e0d69afb8195eee403c60357d59ac046e1trawick results. It now works as documented, defaulting
d0af34e0d69afb8195eee403c60357d59ac046e1trawick to cyclic mode. [RT #28104]
d0af34e0d69afb8195eee403c60357d59ac046e1trawick3783. [func] "tsig-keygen" is now available as an alternate
91cbefdfe308c93892b52045a5f0253506432cd0trawick command name for "ddns-confgen". It generates
91cbefdfe308c93892b52045a5f0253506432cd0trawick a TSIG key in named.conf format without comments.
598ce99543701a45a31bb01bf73c83d894592491rederpj [RT #35503]
598ce99543701a45a31bb01bf73c83d894592491rederpj3782. [func] Specifying "auto" as the salt when using
598ce99543701a45a31bb01bf73c83d894592491rederpj "rndc signing -nsec3param" causes named to
fa687651463b68c7cc0dda80341712d1ef9543efwrowe generate a 64-bit salt at random. [RT #35322]
fa687651463b68c7cc0dda80341712d1ef9543efwrowe3781. [tuning] Use adaptive mutex locks when available; this
fa687651463b68c7cc0dda80341712d1ef9543efwrowe has been found to improve performance under load
7680ff9dd09d8feb9db31d23f33458d0464e92f1wrowe on many systems. "configure --with-locktype=standard"
7680ff9dd09d8feb9db31d23f33458d0464e92f1wrowe restores conventional mutex locks. [RT #32576]
7680ff9dd09d8feb9db31d23f33458d0464e92f1wrowe3780. [bug] $GENERATE handled negative numbers incorrectly.
c760d13cffeef40df3f8c5a798e40a064dc80067bjh [RT #25528]
78980330fa2be5f42eb3a9c9b73a71a5168944e6minfrin3779. [cleanup] Clarify the error message when using an option
78980330fa2be5f42eb3a9c9b73a71a5168944e6minfrin that was not enabled at compile time. [RT #35504]
78980330fa2be5f42eb3a9c9b73a71a5168944e6minfrin3778. [bug] Log a warning when the wrong address family is
1fff95696a94273a1629649652cbc5d2e9e8ce39minfrin used in "listen-on" or "listen-on-v6". [RT #17848]
1fff95696a94273a1629649652cbc5d2e9e8ce39minfrin3777. [bug] EDNS EXPIRE code could dump core when processing
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin DLZ queries. [RT #35493]
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin3776. [func] "rndc -q" suppresses output from successful
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin rndc commands. Errors are printed on stderr.
90ad571a3ddd07e9b96f06b6b425295e1ec93da0minfrin [RT #21393]
10dd882bd22449ec6c1b8fb0c5227727e2232ba8minfrin3775. [bug] dlz_dlopen driver could return the wrong error
10dd882bd22449ec6c1b8fb0c5227727e2232ba8minfrin code on API version mismatch, leading to a segfault.
89342f4a895e67868f8fe37a0ac77f1dd9f91868minfrin [RT #35495]
89342f4a895e67868f8fe37a0ac77f1dd9f91868minfrin3774. [func] When using "request-nsid", log the NSID value in
89342f4a895e67868f8fe37a0ac77f1dd9f91868minfrin printable form as well as hex. [RT #20864]
7a027a168069a89ca0946e04294f5130d9cbe3b8rederpj3773. [func] "host", "nslookup" and "nsupdate" now have
7a027a168069a89ca0946e04294f5130d9cbe3b8rederpj options to print the version number and exit.
10dd882bd22449ec6c1b8fb0c5227727e2232ba8minfrin [RT #26057]
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin (Based in part on a contribution from Tim Tessier.)
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin [RT #20822]
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin3771. [cleanup] Adjusted log level for "using built-in key"
29caf394750ea44e25d289a9aa7b92b9823faa8aminfrin messages. [RT #24383]
330e5149d05dc4f5121b30964753167e43690afdrbb3770. [bug] "dig +trace" could fail with an assertion when it
330e5149d05dc4f5121b30964753167e43690afdrbb needed to fall back to TCP due to a truncated
330e5149d05dc4f5121b30964753167e43690afdrbb response. [RT #24660]
5ba9b0e6d4e69e3daaad80eba67774408a2355f2wrowe3769. [doc] Improved documentation of "rndc signing -list".
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick [RT #30652]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
bfad8636cb9e52b309679a90dadc91b635ecfe2atrawick algorithm. [RT #34000]
bfad8636cb9e52b309679a90dadc91b635ecfe2atrawick3767. [func] Log explicitly when using rndc.key to configure
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick command channel. [RT #35316]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick3766. [cleanup] Fixed problems with building outside the source
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick tree when using native PKCS#11. [RT #35459]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick3765. [bug] Fixed a bug in "rndc secroots" that could crash
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick named when dumping an empty keynode. [RT #35469]
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick3764. [bug] The dnssec-keygen/settime -S and -i options
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick (to set up a successor key and set the prepublication
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick interval) were missing from dnssec-keyfromlabel.
bb5c04f1ab6c2913d49b263e26302c748a1aa70btrawick [RT #35394]
50e228f0b8429c27e411611f4863fafaba403b47wrowe3763. [bug] delve: Cache DNSSEC records to avoid the need to
50e228f0b8429c27e411611f4863fafaba403b47wrowe re-fetch them when restarting validation. [RT #35476]
50e228f0b8429c27e411611f4863fafaba403b47wrowe3762. [bug] Address build problems with --pkcs11-native +
50e228f0b8429c27e411611f4863fafaba403b47wrowe --with-openssl with ECDSA support. [RT #35467]
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick3761. [bug] Address dangling reference bug in dns_keytable_add.
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick [RT #35471]
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick3760. [bug] Improve SIT with native PKCS#11 and on Windows.
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick [RT #35433]
7ba58e7e63da9a8b84f6160c476a0c9d639c81e9trawick3759. [port] Enable delve on Windows. [RT #35441]
0315d8e436a65aa1fd145ce0a84f6c0f21e304c0wrowe3758. [port] Enable export library APIs on Windows. [RT #35382]
6270ac7f45156afd9d798dc28f1c6e1d09e040c1rbb3757. [port] Enable Python tools (dnssec-coverage,
6270ac7f45156afd9d798dc28f1c6e1d09e040c1rbb dnssec-checkds) to run on Windows. [RT #34355]
496dc24432cc5c9f95a627865879d4b83dca1055coar3756. [bug] GSSAPI Kerberos realm checking was broken in
496dc24432cc5c9f95a627865879d4b83dca1055coar check_config leading to spurious messages being
496dc24432cc5c9f95a627865879d4b83dca1055coar logged. [RT #35443]
5b5d90c6d3ffb9e28a62c6bc8e2cb60e4740f7f7coar --- 9.10.0b1 released ---
496dc24432cc5c9f95a627865879d4b83dca1055coar3755. [func] Add stats counters for known EDNS options + others.
622f0f22cd52de0e9904b218defdeb3181e113f3trawick [RT #35447]
622f0f22cd52de0e9904b218defdeb3181e113f3trawick3754. [cleanup] win32: Installer now places files in the
622f0f22cd52de0e9904b218defdeb3181e113f3trawick Program Files area rather than system services.
622f0f22cd52de0e9904b218defdeb3181e113f3trawick [RT #35361]
e83476358ef015a1959284421fdc25ab18a7aa02rbb3753. [bug] allow-notify was ignoring keys. [RT #35425]
7b4c4bb891261e613de39a021d7554fd08132fc5rbb3752. [bug] Address potential REQUIRE failure if
7b4c4bb891261e613de39a021d7554fd08132fc5rbb DNS_STYLEFLAG_COMMENTDATA is set when printing out
7b4c4bb891261e613de39a021d7554fd08132fc5rbb a rdataset.
22d41dd622ae45958da09d4afd1163fd1923f7ddjwoolley3751. [tuning] The default setting for the -U option (setting
4c6731b2f737f8d7fcacd44b97d9e6bab745f1a5rbb the number of UDP listeners per interface) has
4c6731b2f737f8d7fcacd44b97d9e6bab745f1a5rbb been adjusted to improve performance. [RT #35417]
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb3750. [experimental] Partially implement EDNS EXPIRE option as described
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb in draft-andrews-dnsext-expire-00. Retrieval of
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb the remaining time until expiry for slave zones
0917cf91e713579b7ee0b03e499a08d7c3ec2d88rbb is supported.
251b60354534e12b004603ecf2a83f32756dc885rbb EXPIRE uses an experimental option code (65002),
251b60354534e12b004603ecf2a83f32756dc885rbb which is subject to change. [RT #35416]
251b60354534e12b004603ecf2a83f32756dc885rbb3749. [func] "dig +subnet" sends an EDNS client subnet option
251b60354534e12b004603ecf2a83f32756dc885rbb containing the specified address/prefix when
251b60354534e12b004603ecf2a83f32756dc885rbb querying. (Thanks to Wilmer van der Gaast.)
251b60354534e12b004603ecf2a83f32756dc885rbb [RT #35415]
251b60354534e12b004603ecf2a83f32756dc885rbb3748. [test] Use delve to test dns_client interfaces. [RT #35383]
22d41dd622ae45958da09d4afd1163fd1923f7ddjwoolley3747. [bug] A race condition could lead to a core dump when
12348d5b520522b6581d907ef9c1ceda029fbc05rbb destroying a resolver fetch object. [RT #35385]
12348d5b520522b6581d907ef9c1ceda029fbc05rbb3746. [func] New "max-zone-ttl" option enforces maximum
a3b2a05c4c0f6a29e75c9349b85640192f6a8bfejwoolley TTLs for zones. If loading a zone containing a
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames higher TTL, the load fails. DDNS updates with
d65b067e7797b56d6678b0ddcd0aa9258cd55e64trawick higher TTLs are accepted but the TTL is truncated.
d65b067e7797b56d6678b0ddcd0aa9258cd55e64trawick (Note: Currently supported for master zones only;
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley inline-signing slaves will be added.) [RT #38405]
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley3745. [func] "configure --with-tuning=large" adjusts various
f947ecf8a772cbfcce0315feb68ad88e84299ad0trawick compiled-in constants and default settings to
f947ecf8a772cbfcce0315feb68ad88e84299ad0trawick values suited to large servers with abundant
f947ecf8a772cbfcce0315feb68ad88e84299ad0trawick memory. [RT #29538]
82efd02118af953c3840478fa5e979a4194a579fwrowe3744. [experimental] SIT: send and process Source Identity Tokens
82efd02118af953c3840478fa5e979a4194a579fwrowe (similar to DNS Cookies by Donald Eastlake 3rd),
82efd02118af953c3840478fa5e979a4194a579fwrowe which are designed to help clients detect off-path
82efd02118af953c3840478fa5e979a4194a579fwrowe spoofed responses and for servers to identify
82efd02118af953c3840478fa5e979a4194a579fwrowe legitimate clients.
82efd02118af953c3840478fa5e979a4194a579fwrowe SIT uses an experimental EDNS option code (65001),
82efd02118af953c3840478fa5e979a4194a579fwrowe which will be changed to an IANA-assigned value
82efd02118af953c3840478fa5e979a4194a579fwrowe if the experiment is deemed a success.
82efd02118af953c3840478fa5e979a4194a579fwrowe SIT can be enabled via "configure --enable-sit" (or
82efd02118af953c3840478fa5e979a4194a579fwrowe --enable-developer). It is enabled by default in
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley Servers can be configured to send smaller responses
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley to clients that have not identified themselves via
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley SIT. RRL processing has also been updated;
ff2fef0d709ee06646b3462cd3ef39648a54c7f7jwoolley legitimate clients are not subject to rate
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley limiting. [RT #35389]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe3743. [bug] delegation-only flag wasn't working in forward zone
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe declarations despite being documented. This is
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe needed to support turning off forwarding and turning
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley on delegation only at the same name. [RT #35392]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe3742. [port] linux: libcap support: declare curval at start of
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe block. [RT #35387]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe3741. [func] "delve" (domain entity lookup and validation engine):
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe A new tool with dig-like semantics for performing DNS
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley lookups, with internal DNSSEC validation, using the
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe same resolver and validator logic as named. This
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe allows easy validation of DNSSEC data in environments
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe with untrustworthy resolvers, and assists with
416713f4130a31ae7317885c4638b3753c40a5e9jwoolley troubleshooting of DNSSEC problems. [RT #32406]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe3740. [contrib] Minor fixes to configure --with-dlz-bdb,
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe3739. [func] Added per-zone stats counters to track TCP and
77e04697cbdb146d93cd22ad9f1c5e74ef8f9cbcwrowe UDP queries. [RT #35375]
731c41a39b8273a6c4b8b87b6fd0ba5c7f3f9e2bwrowe3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe3737. [bug] 'rndc retransfer' could trigger a assertion failure
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe with inline zones. [RT #35353]
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe3736. [bug] nsupdate: When specifying a server by name,
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe fall back to alternate addresses if the first
731c41a39b8273a6c4b8b87b6fd0ba5c7f3f9e2bwrowe address for that name is not reachable. [RT #25784]
cd32ea298a494089c6886c8de0e8ad13ddc7ee6cwrowe3735. [cleanup] Merged the libiscpk11 library into libisc
cd32ea298a494089c6886c8de0e8ad13ddc7ee6cwrowe to simplify dependencies. [RT #35205]
dc96a5e6f9af3c514df4c61ab9468fcf97f9846fwrowe3734. [bug] Improve building with libtool. [RT #35314]
af2bf35f47aaa3f1a3b1fe8336b9d20efad5b7e9gregames3733. [func] Improve interface scanning support. Interface
af2bf35f47aaa3f1a3b1fe8336b9d20efad5b7e9gregames information will be automatically updated if the
af2bf35f47aaa3f1a3b1fe8336b9d20efad5b7e9gregames OS supports routing sockets (MacOS, *BSD, Linux).
af2bf35f47aaa3f1a3b1fe8336b9d20efad5b7e9gregames Use "automatic-interface-scan no;" to disable.
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb Add "rndc scan" to trigger a scan. [RT #23027]
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
e49758465fbf67f29f9aeda996d09f7cc6fa9fe5rbb driver to dump core on 64-bit systems. [RT #35324]
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb3731. [func] Added a "no-case-compress" ACL, which causes
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb named to use case-insensitive compression
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb (disabling change #3645) for specified
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb clients. (This is useful when dealing
81e5d74ef38fbf76853e1fbdd95c117e130e473frbb with broken client implementations that
62db15de4c1f335a64d45821796ae197cff94ef8rbb use case-sensitive name comparisons,
62db15de4c1f335a64d45821796ae197cff94ef8rbb rejecting responses that fail to match the
62db15de4c1f335a64d45821796ae197cff94ef8rbb capitalization of the query that was sent.)
62db15de4c1f335a64d45821796ae197cff94ef8rbb [RT #35300]
62db15de4c1f335a64d45821796ae197cff94ef8rbb3730. [cleanup] Added "never" as a synonym for "none" when
62db15de4c1f335a64d45821796ae197cff94ef8rbb configuring key event dates in the dnssec tools.
f2e16ea0697f128c32da623a0b2b9d0f81c5ebcawrowe [RT #35277]
f2e16ea0697f128c32da623a0b2b9d0f81c5ebcawrowe3729. [bug] dnssec-keygen could set the publication date
3463e3fe80229b9cded9130e8bd13e961ad2ad2cwrowe incorrectly when only the activation date was
3463e3fe80229b9cded9130e8bd13e961ad2ad2cwrowe specified on the command line. [RT #35278]
3463e3fe80229b9cded9130e8bd13e961ad2ad2cwrowe3728. [doc] Expanded native-PKCS#11 documentation,
7ff254655b6cb0516fa27409470a98554bbec706wrowe specifically pkcs11: URI labels. [RT #35287]
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames3727. [func] The isc_bitstring API is no longer used and
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames has been removed from libisc. [RT #35284]
f8b7801ea5717ef22cc0d02bffacfd5f9e48f898gregames3726. [cleanup] Clarified the error message when attempting
286129112dc6bfee53f0db4f945d3352d4d5bed7stoddard to configure more than 32 response-policy zones.
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe [RT #35283]
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb3725. [contrib] Updated zkt and nslint to newest versions,
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb cleaned up and rearranged the contrib
b1627fe7e2cb3809dcdfdf1fcbbb6dbccaf788c6rbb directory, and added a README.
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe --- 9.10.0a2 released ---
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe3724. [bug] win32: Fixed a bug that prevented dig and
eccae8f28bd9fcf6a2d1f29548f7c3b8e297c712wrowe host from exiting properly after completing
4e136881902ae5dfba3c59a23db7aa09345cea3awrowe a UDP query. [RT #35288]
06c2a9f9fcea4b8a21d6b7ffdd50c7a40edf10ffgregames3723. [cleanup] Imported keys are now handled the same way
06c2a9f9fcea4b8a21d6b7ffdd50c7a40edf10ffgregames regardless of DNSSEC algorithm. [RT #35215]
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames3722. [bug] Using geoip ACLs in a blackhole statement
6529086e53a38486d6cf0eac256b96548b6ef299wrowe could cause a segfault. [RT #35272]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe3721. [doc] Improved documentation of the EDNS processing
6529086e53a38486d6cf0eac256b96548b6ef299wrowe enhancements introduced in change #3593. [RT #35275]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe3720. [bug] Address compiler warnings. [RT #35261]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe3719. [bug] Address memory leak in in peer.c. [RT #35255]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
9876642ec8126175f143702d7b949643f8128fdftrawick3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
9876642ec8126175f143702d7b949643f8128fdftrawick probing to see if it is possible to set dscp values
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames on a per packet basis. [RT #35252]
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames3716. [bug] The dns_request code was setting dcsp values when not
263dbbd9c2a6952e756973b3dde9beeaf8eff6b7gregames requested. [RT #35252]
0f2ac39337f7543f197db8b040f596123167eb2dstoddard3715. [bug] The region and city databases could fail to
0f2ac39337f7543f197db8b040f596123167eb2dstoddard initialize when using some versions of libGeoIP,
0f2ac39337f7543f197db8b040f596123167eb2dstoddard causing assertion failures when named was
0f2ac39337f7543f197db8b040f596123167eb2dstoddard configured to use them. [RT #35427]
5183e10e45a86e2dd1112a4d71c24db3facbbc9agregames3714. [test] System tests that need to test for cryptography
5183e10e45a86e2dd1112a4d71c24db3facbbc9agregames support before running can now use a common
5183e10e45a86e2dd1112a4d71c24db3facbbc9agregames "testcrypto.sh" script to do so. [RT #35213]
4ff47e3535a6da266acc3f0cf743046dbf16a856rbb3713. [bug] Save memory by not storing "also-notify" addresses
afab3e893c3fecabf2e3cac4e37ada58db984cearbb in zone objects that are configured not to send
afab3e893c3fecabf2e3cac4e37ada58db984cearbb notify requests. [RT #35195]
afab3e893c3fecabf2e3cac4e37ada58db984cearbb3712. [placeholder]
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb3711. [placeholder]
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb3710. [bug] Address double dns_zone_detach when switching to
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb using automatic empty zones from regular zones.
612ea048caf897cb6e69dc296d2b143a08ba83a0rbb [RT #35177]
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard3709. [port] Use built-in versions of strptime() and timegm()
6529086e53a38486d6cf0eac256b96548b6ef299wrowe on all platforms to avoid portability issues.
6529086e53a38486d6cf0eac256b96548b6ef299wrowe [RT #35183]
6529086e53a38486d6cf0eac256b96548b6ef299wrowe3708. [bug] Address a portentry locking issue in dispatch.c.
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe [RT #35128]
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe on a missing resolv.conf file and initializes the
30309f86bfd564437654aa822a19cd0cb29ca6f8wrowe structure as if it had been configured with:
65db4f712167a3498de73cee5c08032a8aa6a010rbb nameserver ::1
65db4f712167a3498de73cee5c08032a8aa6a010rbb nameserver 127.0.0.1
65db4f712167a3498de73cee5c08032a8aa6a010rbb Note: Callers will need to be updated to treat
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj ISC_R_FILENOTFOUND as a qualified success or else
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj they will leak memory. The following code fragment
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj will work with both old and new versions without
ed4f9ec869d7fc5bd220c8d70ee58eed9b32d60arederpj changing the behaviour of the existing code.
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard resconf = NULL;
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard result = irs_resconf_load(mctx, "/etc/resolv.conf",
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard if (result != ISC_SUCCESS) {
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard if (resconf != NULL)
c8af62b87a118cbbc25414eb9459219f338b1b0fstoddard irs_resconf_destroy(&resconf);
c981632de03d61667b7a6dda3e1f0a80fd5973b1gregames [RT #35194]
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick3706. [contrib] queryperf: Fixed a possible integer overflow when
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick printing results. [RT #35182]
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick3705. [func] "configure --enable-native-pkcs11" enables BIND
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick to use the PKCS#11 API for all cryptographic
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick functions, so that it can drive a hardware service
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick module directly without the need to use a modified
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick OpenSSL as intermediary (so long as the HSM's vendor
8f43c3299e44dc11a4cd68acc93b578a0318daaftrawick provides a complete-enough implementation of the
688f7d0bc138bb02f92288017920468e7e314f23stoddard PKCS#11 interface). This has been tested successfully
688f7d0bc138bb02f92288017920468e7e314f23stoddard with the Thales nShield HSM and with SoftHSMv2 from
688f7d0bc138bb02f92288017920468e7e314f23stoddard the OpenDNSSEC project. [RT #29031]
688f7d0bc138bb02f92288017920468e7e314f23stoddard3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
448a83963e3ec557bc9f9020ab44f9681595d1eerbb3703. [func] To improve recursive resolver performance, cache
3b8937baf1826c625c1ca90d220453a5e4b499edrbb records which are still being requested by clients
3b8937baf1826c625c1ca90d220453a5e4b499edrbb can now be automatically refreshed from the
3b8937baf1826c625c1ca90d220453a5e4b499edrbb authoritative server before they expire, reducing
3b8937baf1826c625c1ca90d220453a5e4b499edrbb or eliminating the time window in which no answer
3b8937baf1826c625c1ca90d220453a5e4b499edrbb is available in the cache. See the "prefetch" option
9180a5933673ffb1af633c255ceee029340f3b1erbb for more details. [RT #35041]
e654452796751e21828a4078767e075eccf3b232stoddard3702. [func] 'dnssec-coverage -l' option specifies a length
e654452796751e21828a4078767e075eccf3b232stoddard of time to check for coverage; events further into
e654452796751e21828a4078767e075eccf3b232stoddard the future are ignored. 'dnssec-coverage -z'
e654452796751e21828a4078767e075eccf3b232stoddard checks only ZSK events, and 'dnssec-coverage -k'
e654452796751e21828a4078767e075eccf3b232stoddard checks only KSK events. (Thanks to Peter Palfrader.)
e654452796751e21828a4078767e075eccf3b232stoddard [RT #35168]
4670899d8a45ac6add3105181adf1976a1fae109stoddard3701. [func] named-checkconf can now obscure shared secrets
85986096003221e8eb135ad1fda59a57c3d0528brbb when printing by specifying '-x'. [RT #34465]
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley3700. [func] Allow access to subgroups of XML statistics via
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley special URLs http://<server>:<port>/xml/v3/server,
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley /zones, /net, /tasks, /mem, and /status. [RT #35115]
cbed27f4c149736a6319a790c81aa8acc491fa18jwoolley3699. [bug] Improvements to statistics channel XSL stylesheet:
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley the stylesheet can now be cached by the browser;
f91cd1fc44d2588d82a56570b1005e7310dfc970jwoolley section headers are omitted from the stats display
8ff9257331986cb3646442ab61703fcc02158046trawick when there is no data in those sections to be
7537a55be7520037878a521d4ec8c8eb2d44a288rbb displayed; counters are now right-justified for
7537a55be7520037878a521d4ec8c8eb2d44a288rbb easier readability. [RT #35117]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb3698. [cleanup] Replaced all uses of memcpy() with memmove().
7537a55be7520037878a521d4ec8c8eb2d44a288rbb [RT #35120]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb3697. [bug] Handle "." as a search list element when IDN support
7537a55be7520037878a521d4ec8c8eb2d44a288rbb is enabled. [RT #35133]
7537a55be7520037878a521d4ec8c8eb2d44a288rbb3696. [bug] dig failed to handle AXFR style IXFR responses which
7537a55be7520037878a521d4ec8c8eb2d44a288rbb span multiple messages. [RT #35137]
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe3695. [bug] Address a possible race in dispatch.c. [RT #35107]
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe3694. [bug] Warn when a key-directory is configured for a zone,
de0fbde2191d651a2dd0296e0fd4c449fa9f1d39wrowe but does not exist or is not a directory. [RT #35108]
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley3693. [security] memcpy was incorrectly called with overlapping
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley ranges resulting in malformed names being generated
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley on some platforms. This could cause INSIST failures
54f7f1c85247dad29d8fa275866cea31d465b392stoddard when serving NSEC3 signed zones (CVE-2014-0591).
54f7f1c85247dad29d8fa275866cea31d465b392stoddard [RT #35120]
54f7f1c85247dad29d8fa275866cea31d465b392stoddard3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
01f404bacecbd1354af8f04c23a28acef5044e73jwoolley was no data at the node. [RT #35080]
3af8fbdd62c9495c8f879eef1eb952a638a18a7adougm3691. [contrib] Address null pointer dereference in LDAP and
3af8fbdd62c9495c8f879eef1eb952a638a18a7adougm MySQL DLZ modules.
e14ec68ef48bbf6c3dc567900f9e087eaf0bc931trawick3690. [bug] Iterative responses could be missed when the source
e14ec68ef48bbf6c3dc567900f9e087eaf0bc931trawick port for an upstream query was the same as the
e14ec68ef48bbf6c3dc567900f9e087eaf0bc931trawick listener port (53). [RT #34925]
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe3689. [bug] Fixed a bug causing an insecure delegation from one
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe static-stub zone to another to fail with a broken
227e0bfd39e7c757d3618c8ada78d80cd1143d32wrowe trust chain. [RT #35081]
8ff9257331986cb3646442ab61703fcc02158046trawick3688. [bug] loadnode could return a freed node on out of memory.
8ff9257331986cb3646442ab61703fcc02158046trawick [RT #35106]
8ff9257331986cb3646442ab61703fcc02158046trawick3687. [bug] Address null pointer dereference in zone_xfrdone.
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames [RT #35042]
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames3686. [func] "dnssec-signzone -Q" drops signatures from keys
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames that are still published but no longer active.
d9b416f8cfaaadcbc739cd8c7c356e76efdd3a2agregames [RT #34990]
4192c91889a84b18aec0b046a94a2b2863be204cstoddard3685. [bug] "rndc refresh" didn't work correctly with slave
4192c91889a84b18aec0b046a94a2b2863be204cstoddard zones using inline-signing. [RT #35105]
4192c91889a84b18aec0b046a94a2b2863be204cstoddard3684. [bug] The list of included files would grow on reload.
7af2fcad9e14a79d7020a33766fbd3a4dfd088dcorlikowski3683. [cleanup] Add a more detailed "not found" message to rndc
7af2fcad9e14a79d7020a33766fbd3a4dfd088dcorlikowski commands which specify a zone name. [RT #35059]
b9d82dd4bc49204d9c2c5523e36b3109da298c04wrowe3682. [bug] Correct the behavior of rndc retransfer to allow
7cc9511b8f1fff69439041327dc55e3423ccf439stoddard inline-signing slave zones to retain NSEC3 parameters
7cc9511b8f1fff69439041327dc55e3423ccf439stoddard instead of reverting to NSEC. [RT #34745]
b9d82dd4bc49204d9c2c5523e36b3109da298c04wrowe3681. [port] Update the Windows build system to support feature
b9d82dd4bc49204d9c2c5523e36b3109da298c04wrowe selection and WIN64 builds. This is a work in
1ccb67ea7d1f2a3747d285835fd0ce0d123b66b2orlikowski progress. [RT #34160]
1ccb67ea7d1f2a3747d285835fd0ce0d123b66b2orlikowski3680. [bug] Ensure buffer space is available in "rndc zonestatus".
3f4d7fdb598d64d80ab8656852276246f2f3b502rbb [RT #35084]
a7318397b355119d990d1f311b951dea2aafc53arbb3679. [bug] dig could fail to clean up TCP sockets still
a7318397b355119d990d1f311b951dea2aafc53arbb waiting on connect(). [RT #35074]
a7318397b355119d990d1f311b951dea2aafc53arbb3678. [port] Update config.guess and config.sub. [RT #35060]
3f4d7fdb598d64d80ab8656852276246f2f3b502rbb3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
3f4d7fdb598d64d80ab8656852276246f2f3b502rbb times. [RT #35073]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard3676. [bug] "named-checkconf -z" now checks zones of type
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard hint and redirect as well as master. [RT #35046]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard3675. [misc] Provide a place for third parties to add version
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard information for their extensions in the version
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard file by setting the EXTENSIONS variable.
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard --- 9.10.0a1 released ---
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard3673. [func] New "in-view" zone option allows direct sharing
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard of zones between views. [RT #32968]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard3672. [func] Local address can now be specified when using
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard dns_client API. [RT #34811]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard3671. [bug] Don't allow dnssec-importkey overwrite a existing
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard non-imported private key.
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard3670. [bug] Address read after free in server side of
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard lwres_getrrsetbyname. [RT #29075]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
fd709745f1226d683c57ad9bbcdd05971d214d0cstoddard [RT #34993]
0530cd68803616cfba0456038f2e679d41ebecb1minfrin3667. [test] dig: add support to keep the TCP socket open between
55069cedbbaf2768c1f317c80129c6f869890fb9rbb successive queries (+[no]keepopen). [RT #34918]
55069cedbbaf2768c1f317c80129c6f869890fb9rbb3666. [func] Add a tool, named-rrchecker, for checking the syntax
55069cedbbaf2768c1f317c80129c6f869890fb9rbb of individual resource records. This tool is intended
6206099ac06c8fcc8c342e993e5d47d3dfb95d8dminfrin to be called by provisioning systems so that the front
6206099ac06c8fcc8c342e993e5d47d3dfb95d8dminfrin end does not need to be upgraded to support new DNS
0530cd68803616cfba0456038f2e679d41ebecb1minfrin record types. [RT #34778]
0530cd68803616cfba0456038f2e679d41ebecb1minfrin3665. [bug] Failure to release lock on error in receive_secure_db.
0530cd68803616cfba0456038f2e679d41ebecb1minfrin [RT #34944]
b9d75184a83c325dc6cdf5488b0b1a4adec27506stoddard3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
b9d75184a83c325dc6cdf5488b0b1a4adec27506stoddard locking and other bugs. [RT #34855]
ba4c566c200c2436dae841b7c811807c80cd712afielding3663. [bug] Address bugs in dns_rdata_fromstruct and
2a7df37e1fa5276b519eb1f04827b96204ba8873trawick dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
2a7df37e1fa5276b519eb1f04827b96204ba8873trawick3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
864c5615d55b8ebbde24e72043f6325741335a74fielding3661. [bug] Address lock order reversal deadlock with inline zones.
864c5615d55b8ebbde24e72043f6325741335a74fielding [RT #34856]
ff33056d9ea71f35e6fb3c17d53a18931be70a99minfrin3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
ff33056d9ea71f35e6fb3c17d53a18931be70a99minfrin [RT #23825]
ff33056d9ea71f35e6fb3c17d53a18931be70a99minfrin3659. [port] solaris: don't add explicit dependencies/rules for
ea92d0ffcb30b186010a2c8ca2c80d2ac09e34dastoddard python programs as make won't use the implicit rules.
ba4c566c200c2436dae841b7c811807c80cd712afielding [RT #34835]
ba4c566c200c2436dae841b7c811807c80cd712afielding3658. [port] linux: Address platform specific compilation issue
ba4c566c200c2436dae841b7c811807c80cd712afielding when libcap-devel is installed. [RT #34838]
342e2ae0f9ab3e3a56c2f37be6ec6c9c44f9ef48trawick3657. [port] Some readline clones don't accept NULL pointers when
342e2ae0f9ab3e3a56c2f37be6ec6c9c44f9ef48trawick calling add_history. [RT #34842]
cb5d3f2f217d457dada4883addb1dc9f3f17bb85fielding3656. [security] Treat an all zero netmask as invalid when generating
cb5d3f2f217d457dada4883addb1dc9f3f17bb85fielding the localnets acl. (The prior behavior could
cb5d3f2f217d457dada4883addb1dc9f3f17bb85fielding allow unexpected matches when using some versions
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick of Winsock: CVE-2013-6320.) [RT #34687]
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick3655. [cleanup] Simplify TCP message processing when requesting a
82c7b60981923b89fb4ab4483d2aebcf206e9ee8trawick zone transfer. [RT #34825]
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard3654. [bug] Address race condition with manual notify requests.
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard [RT #34806]
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard3653. [func] Create delegations for all "children" of empty zones
7c60e4e710c92b3c4a0eb831bc6dd65368c599bcstoddard except "forward first". [RT #34826]
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard3652. [bug] Address bug with rpz-drop policy. [RT #34816]
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard3651. [tuning] Adjust when a master server is deemed unreachable.
0c7d8ecf301c2a3f99deff385bdda0c21ac60af5stoddard [RT #27075]
0e161c3b556697af1dd88b719c05d3af239682d5dougm3650. [tuning] Use separate rate limiting queues for refresh and
0e161c3b556697af1dd88b719c05d3af239682d5dougm notify requests. [RT #30589]
aa616c3b5a4aa59867472cddf7d8e63693808f0erederpj3649. [cleanup] Include a comment in .nzf files, giving the name of
aa616c3b5a4aa59867472cddf7d8e63693808f0erederpj the associated view. [RT #34765]
aa616c3b5a4aa59867472cddf7d8e63693808f0erederpj3648. [test] Updated the ATF test framework to version 0.17.
80e9324586de2fa55e2da4df409e6a85885ea659fielding [RT #25627]
80e9324586de2fa55e2da4df409e6a85885ea659fielding3647. [bug] Address a race condition when shutting down a zone.
bacd210652b4559c2597f62e1d41ccbde92acdfafielding [RT #34750]
4682cf97ee2eca42a7222e0113ebacf5ef70c4efrbb3646. [bug] Journal filename string could be set incorrectly,
4682cf97ee2eca42a7222e0113ebacf5ef70c4efrbb causing garbage in log messages. [RT #34738]
9f7fc4627b7d98f6f6955ad6cf0cec5a3e1c4debfielding3645. [protocol] Use case sensitive compression when responding to
9f7fc4627b7d98f6f6955ad6cf0cec5a3e1c4debfielding queries. [RT #34737]
1702068419e130e99f021228659597c1ec658edcchuck3644. [protocol] Check that EDNS subnet client options are well formed.
1702068419e130e99f021228659597c1ec658edcchuck [RT #34718]
1702068419e130e99f021228659597c1ec658edcchuck3643. [doc] Clarify RRL "slip" documentation.
01f61931c658183042469eb02fd3f61e4e643a6atrawick3642. [func] Allow externally generated DNSKEY to be imported
01f61931c658183042469eb02fd3f61e4e643a6atrawick into the DNSKEY management framework. A new tool
01f61931c658183042469eb02fd3f61e4e643a6atrawick dnssec-importkey is used to do this. [RT #34698]
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard3641. [bug] Handle changes to sig-validity-interval settings
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard better. [RT #34625]
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard3640. [bug] ndots was not being checked when searching. Only
7ae8bc63caa2292341a22235223ff1ed17ac02aestoddard continue searching on NXDOMAIN responses. Add the
a70c3ad07126101795f5a988e86c88a699b297cerederpj ability to specify ndots to nslookup. [RT #34711]
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb in a key zone. [RT #34238]
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb encountered. [RT #34668]
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb3637. [bug] 'allow-query-on' was checking the source address
23851fdc3ee2eac45ebb85f400a5d719656dfa22rbb rather than the destination address. [RT #34590]
105475009f541187ba7a14a367547d9404c578befielding3636. [bug] Automatic empty zones now behave better with
105475009f541187ba7a14a367547d9404c578befielding forward only "zones" beneath them. [RT #34583]
105475009f541187ba7a14a367547d9404c578befielding3635. [bug] Signatures were not being removed from a zone with
105475009f541187ba7a14a367547d9404c578befielding only KSK keys for a algorithm. [RT #34439]
b90c64e517df3fe1c97806830f84a30362187f0afielding3634. [func] Report build-id in rndc status. Report build-id
b90c64e517df3fe1c97806830f84a30362187f0afielding when building from a git repository. [RT #20422]
b90c64e517df3fe1c97806830f84a30362187f0afielding3633. [cleanup] Refactor OPT processing in named to make it easier
105475009f541187ba7a14a367547d9404c578befielding to support new EDNS options. [RT #34414]
6ff63662058d5891fc110f8b357a3604d7f7deb3trawick3632. [bug] Signature from newly inactive keys were not being
6ff63662058d5891fc110f8b357a3604d7f7deb3trawick removed. [RT #32178]
c4be1ca9db22140f3788166f0195304e2fe4743bgregames3631. [bug] Remove spurious warning about missing signatures when
c4be1ca9db22140f3788166f0195304e2fe4743bgregames qtype is SIG. [RT #34600]
8019a211b7453e80e6e22db6d41fe68dd7f8c4b8fielding3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
8019a211b7453e80e6e22db6d41fe68dd7f8c4b8fielding3629. [func] Allow the printing of cryptographic fields in DNSSEC
a70c3ad07126101795f5a988e86c88a699b297cerederpj records by dig to be suppressed (dig +nocrypto).
a70c3ad07126101795f5a988e86c88a699b297cerederpj [RT #34534]
a70c3ad07126101795f5a988e86c88a699b297cerederpj3628. [func] Report DNSKEY key id's when dumping the cache.
a70c3ad07126101795f5a988e86c88a699b297cerederpj [RT #34533]
a3a9ceac1bc30598c594c89e1382609496b7752brbb3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
a3a9ceac1bc30598c594c89e1382609496b7752brbb3626. [func] dig: NSID output now easier to read. [RT #21160]
a3a9ceac1bc30598c594c89e1382609496b7752brbb3625. [bug] Don't send notify messages to machines outside of the
25e17566bc9005778707317c8919c610513a4418stoddard test setup.
25e17566bc9005778707317c8919c610513a4418stoddard3624. [bug] Look for 'json_object_new_int64' when looking for a
25e17566bc9005778707317c8919c610513a4418stoddard the json library. [RT #34449]
25e17566bc9005778707317c8919c610513a4418stoddard3623. [placeholder]
25e17566bc9005778707317c8919c610513a4418stoddard3622. [tuning] Eliminate an unnecessary lock when incrementing
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb cache statistics. [RT #34339]
44ea927aaaa7c419de1c824beb01b26216f387c3dougm3621. [security] Incorrect bounds checking on private type 'keydata'
44ea927aaaa7c419de1c824beb01b26216f387c3dougm can lead to a remotely triggerable REQUIRE failure
a601a32cec653022741d22b5d692b6afd6c4dc55trawick (CVE-2013-4854). [RT #34238]
a601a32cec653022741d22b5d692b6afd6c4dc55trawick3620. [func] Added "rpz-client-ip" policy triggers, enabling
a601a32cec653022741d22b5d692b6afd6c4dc55trawick RPZ responses to be configured on the basis of
a601a32cec653022741d22b5d692b6afd6c4dc55trawick the client IP address; this can be used, for
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb example, to blacklist misbehaving recursive
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb or stub resolvers. [RT #33605]
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb [RT #33776]
73579c435f9f6c2670c4391114368a2eedaf8ebfrbb3618. [func] "rndc reload" now checks modification times of
decf1efd1558ed0d2562e2f4f2dd741dcc0c392crbb include files as well as master files to determine
6202bc12656548c624a235bf43d6c866719b2b06rbb whether to skip reloading a zone. [RT #33936]
6202bc12656548c624a235bf43d6c866719b2b06rbb3617. [bug] Named was failing to answer queries during
6202bc12656548c624a235bf43d6c866719b2b06rbb "rndc reload" [RT #34098]
6202bc12656548c624a235bf43d6c866719b2b06rbb3616. [bug] Change #3613 was incomplete. [RT #34177]
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj3615. [cleanup] "configure" now finishes by printing a summary
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj of optional BIND features and whether they are
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj active or inactive. ("configure --enable-full-report"
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj increases the verbosity of the summary.) [RT #31777]
bf6fc76bb2af745a68396e793d5d51a135a35f54rederpj3614. [port] Check for <linux/types.h>. [RT #34162]
4f110a6b1eb8b6a88a2a0c804cf699062f67f708rbb3613. [bug] named could crash when deleting inline-signing
4f110a6b1eb8b6a88a2a0c804cf699062f67f708rbb zones with "rndc delzone". [RT #34066]
4f110a6b1eb8b6a88a2a0c804cf699062f67f708rbb3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
7aae0c3ef8e7f18f57e2712815c7b48358e5ff68rbb3611. [bug] Improved resistance to a theoretical authentication
7aae0c3ef8e7f18f57e2712815c7b48358e5ff68rbb attack based on differential timing. [RT #33939]
d353d275978f11f5221110e8f954d09d03ec5e3arbb3610. [cleanup] win32: Some executables had been omitted from the
d353d275978f11f5221110e8f954d09d03ec5e3arbb installer. [RT #34116]
20fb0ba160cf0ca91b3f0f0d552cbe60d92b0449fielding3609. [bug] Corrected a possible deadlock in applications using
20fb0ba160cf0ca91b3f0f0d552cbe60d92b0449fielding the export version of the isc_app API. [RT #33967]
66f62d70d05d9011c6ac59d5cd10a24e452fa1b3rbb3608. [port] win32: added todos.pl script to ensure all text files
66f62d70d05d9011c6ac59d5cd10a24e452fa1b3rbb the win32 build depends on are converted to DOS
66f62d70d05d9011c6ac59d5cd10a24e452fa1b3rbb newline format. [RT #22067]
9832ee60b23ca2a3faa403bbe88720815969a9fefielding3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
9832ee60b23ca2a3faa403bbe88720815969a9fefielding message. [RT #34045]
dd6d55810261b3c26c4a2ec2e089c031beb1d44dgregames3606. [func] "rndc flushtree" now flushes matching
dd6d55810261b3c26c4a2ec2e089c031beb1d44dgregames records in the address database and bad cache
dd6d55810261b3c26c4a2ec2e089c031beb1d44dgregames as well as the DNS cache. (Previously only the
dd6d55810261b3c26c4a2ec2e089c031beb1d44dgregames DNS cache was flushed.) [RT #33970]
ee25ccdf4aa79a7a7f2dfc13fc118f0a343422fcwrowe3605. [port] win32: Addressed several compatibility issues
ee25ccdf4aa79a7a7f2dfc13fc118f0a343422fcwrowe with newer versions of Visual Studio. [RT #33916]
90a8cab05f4d949dd1317df7e19a2f787c46a5f6rbb3604. [bug] Fixed a compile-time error when building with
90a8cab05f4d949dd1317df7e19a2f787c46a5f6rbb JSON but not XML. [RT #33959]
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb3603. [bug] Install <isc/stat.h>. [RT #33956]
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb integrate with named and serve DNS data.
6c3ee5153fd311a5fc6dd718dcc704487ac7d2a3rbb (Contributed by John Eaglesham of Yahoo.)
da3e32612f06d3082e41ba709919c996c89b8c06rederpj3601. [bug] Added to PKCS#11 openssl patches a value len
da3e32612f06d3082e41ba709919c996c89b8c06rederpj attribute in DH derive key. [RT #33928]
da3e32612f06d3082e41ba709919c996c89b8c06rederpj3600. [cleanup] dig: Fixed a typo in the warning output when receiving
da3e32612f06d3082e41ba709919c996c89b8c06rederpj an oversized response. [RT #33910]
da3e32612f06d3082e41ba709919c996c89b8c06rederpj3599. [tuning] Check for pointer equivalence in name comparisons.
da3e32612f06d3082e41ba709919c996c89b8c06rederpj [RT #18125]
0d9c389e9c63d02edb068917d49af2fa8012af91marc3598. [cleanup] Improved portability of map file code. [RT #33820]
0d9c389e9c63d02edb068917d49af2fa8012af91marc3597. [bug] Ensure automatic-resigning heaps are reconstructed
0d9c389e9c63d02edb068917d49af2fa8012af91marc when loading zones in map format. [RT #33381]
ae416a3cdff7a12665838a2184183299dcee6ec9bjh3596. [port] Updated win32 build documentation, added
ae416a3cdff7a12665838a2184183299dcee6ec9bjh dnssec-verify. [RT #22067]
b0bb6f215e43a79342c422bc9b0c258add88ca51stoddard3595. [port] win32: Fix build problems introduced by change #3550.
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick [RT #33807]
99cec2acb38d6a2fb2d4a9d437db7b50ef5b208awrowe3594. [maint] Update config.guess and config.sub. [RT #33816]
4d83a32b74579903e90aa1cb8574b5b97404d0c4trawick3593. [func] Update EDNS processing to better track remote server
4d83a32b74579903e90aa1cb8574b5b97404d0c4trawick capabilities. [RT #30655]
4d83a32b74579903e90aa1cb8574b5b97404d0c4trawick3592. [doc] Moved documentation of rndc command options to the
7c2d1ecc95b2213a3fd449b2549999ed6f19f6berbb rndc man page. [RT #33506]
7c2d1ecc95b2213a3fd449b2549999ed6f19f6berbb3591. [func] Use CRC-64 to detect map file corruption at load
7c2d1ecc95b2213a3fd449b2549999ed6f19f6berbb time. [RT #33746]
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx3590. [bug] When using RRL on recursive servers, defer
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx rate-limiting until after recursion is complete;
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx also, use correct rcode for slipped NXDOMAIN
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx responses. [RT #33604]
383a9c6af58f5a670e8ef8b7f222ce71dbb7bee5dirkx3589. [func] Report serial numbers in when starting zone transfers.
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx Report accepted NOTIFY requests including serial.
51469a0d2057aa24107b6f5a04e145824e10da1fdirkx [RT #33037]
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick3588. [bug] dig: addressed a memory leak in the sigchase code
6d8d0dd6604f823aadbe3a18c3cff4eca584bda8trawick that could cause a shutdown crash. [RT #33733]
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard3587. [func] 'named -g' now checks the logging configuration but
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard does not use it. [RT #33473]
73cd9876e07c696a3e3563277a1d4e3173861af6stoddard3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
15ecbdb46249bbd3ac51fdacaff3b3ac4d179ffarbb3585. [func] "rndc delzone -clean" option removes zone files
f0484231f96a9d95f5044c1c8cb33b322d6f9bcbdougm when deleting a zone. [RT #33570]
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb3584. [security] Caching data from an incompletely signed zone could
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb trigger an assertion failure in resolver.c
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb (CVE-2013-3919). [RT #33690]
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb3583. [bug] Address memory leak in GSS-API processing [RT #33574]
2281907b9a2a509aa0eabdc0b1d21424018dbbdfrbb3582. [bug] Silence false positive warning regarding missing file
2ca377182c951f9895cd5e7a350b442a39c8eb23rbb directive for inline slave zones. [RT #33662]
2ca377182c951f9895cd5e7a350b442a39c8eb23rbb3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
1217c8c05f7e3ac0cac8c8dc0c6e7979326c977arbb3580. [bug] Addressed a possible race in acache.c [RT #33602]
1217c8c05f7e3ac0cac8c8dc0c6e7979326c977arbb3579. [maint] Updates to PKCS#11 openssl patches, supporting
b6873e2c00ff7b0af18d837ef4c3cd58cf6b54c5rbb versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
893328ef6ff86d0ca27774778d84410353789fb0fielding3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
893328ef6ff86d0ca27774778d84410353789fb0fielding [RT #33571]
893328ef6ff86d0ca27774778d84410353789fb0fielding3577. [bug] Handle zero TTL values better. [RT #33411]
274de94b0b59f4ee126dca1726624980828d0cd0stoddard3576. [bug] Address a shutdown race when validating. [RT #33573]
274de94b0b59f4ee126dca1726624980828d0cd0stoddard3575. [func] Changed the logging category for RRL events from
85d733e70c94a57c9ff893ed05d8b9cfcd0f083fstoddard 'queries' to 'query-errors'. [RT #33540]
85d733e70c94a57c9ff893ed05d8b9cfcd0f083fstoddard3574. [doc] The 'hostname' keyword was missing from server-id
962f339c5f0f61adde79936f610fb05ce0854d6echuck description in the named.conf man page. [RT #33476]
4b0939148fffde56f0b7db2a43cab1d1dc76ab3fmjc3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
4b0939148fffde56f0b7db2a43cab1d1dc76ab3fmjc zone names containing punctuation marks and other
4b0939148fffde56f0b7db2a43cab1d1dc76ab3fmjc nonstandard characters. [RT #33419]
70b83609159f247f5920421a890dc27a0718d63adreid3572. [func] Threads are now enabled by default on most
70b83609159f247f5920421a890dc27a0718d63adreid operating systems. [RT #25483]
70b83609159f247f5920421a890dc27a0718d63adreid3571. [bug] Address race condition in dns_client_startresolve().
70b83609159f247f5920421a890dc27a0718d63adreid [RT #33234]
a1033a770bfee276def7d4cb9759856f69293e48trawick3570. [bug] Check internal pointers are valid when loading map
a1033a770bfee276def7d4cb9759856f69293e48trawick files. [RT #33403]
a1033a770bfee276def7d4cb9759856f69293e48trawick3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
bd2d582e0f0708b6e8e258a9a5f9a15445752087trawick module, and added multithread support. [RT #33394]
bd2d582e0f0708b6e8e258a9a5f9a15445752087trawick3568. [cleanup] Add a product description line to the version file,
adb8ad10ffc20ed06ec6cfab6cd7933ab429ea7dtrawick to be reported by named -v/-V. [RT #33366]
adb8ad10ffc20ed06ec6cfab6cd7933ab429ea7dtrawick3567. [bug] Silence clang static analyzer warnings. [RT #33365]
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb3566. [func] Log when forwarding updates to master. [RT #33240]
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb3565. [placeholder]
b45c1c292ff1fa635004ae81fa691f8cb3cdda85rbb3564. [bug] Improved handling of corrupted map files. [RT #33380]
86f191e8221867df8c9cd22271e7d54204f39186rbb3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
86f191e8221867df8c9cd22271e7d54204f39186rbb3562. [func] Update map file header format to include a SHA-1 hash
86f191e8221867df8c9cd22271e7d54204f39186rbb of the database content, so that corrupted map files
86f191e8221867df8c9cd22271e7d54204f39186rbb can be rejected at load time. [RT #32459]
962f339c5f0f61adde79936f610fb05ce0854d6echuck3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
962f339c5f0f61adde79936f610fb05ce0854d6echuck or NOTIMP. Adjust usage message. [RT #33363]
157e6980a24a44e4719173b1c555133caecbc172stoddard3560. [bug] isc-config.sh did not honor includedir and libdir
157e6980a24a44e4719173b1c555133caecbc172stoddard when set via configure. [RT #33345]
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar3559. [func] Check that both forms of Sender Policy Framework
4b0939148fffde56f0b7db2a43cab1d1dc76ab3fmjc records exist or do not exist. [RT #33355]
171f8c636ff1374e3a3dfff333211becda355b98trawick3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
171f8c636ff1374e3a3dfff333211becda355b98trawick3557. [bug] Reloading redirect zones was broken. [RT #33292]
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar3555. [bug] Address theoretical race conditions in acache.c
faa6e5d8b210456ae4dad0398dfa40a19fd89d59coar (change #3553 was incomplete). [RT #33252]
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard3554. [bug] RRL failed to correctly rate-limit upward
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard referrals and failed to count dropped error
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard responses in the statistics. [RT #33225]
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard3553. [bug] Address suspected double free in acache. [RT #33252]
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard3552. [bug] Wrong getopt option string for 'nsupdate -r'.
ed105ee460bbaf479f0aa0f59d3951da85066e27stoddard [RT #33280]
bae64a3e5bf7b96d8379e24f13273f26b3b29e16coar3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
bae64a3e5bf7b96d8379e24f13273f26b3b29e16coar3550. [func] Unified the internal and export versions of the
c7fe488773cf6f50a1b2d9211c2f30a2ace8b67ccoar BIND libraries, allowing external clients to use
c7fe488773cf6f50a1b2d9211c2f30a2ace8b67ccoar the same libraries as BIND. [RT #33131]
c7fe488773cf6f50a1b2d9211c2f30a2ace8b67ccoar3549. [doc] Documentation for "request-nsid" was missing.
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb [RT #33153]
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb3548. [bug] The NSID request code in resolver.c was broken
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb resulting in invalid EDNS options being sent.
27338fc39af80f2f0e4a8dbdc90c8a8179a5b2e4rbb [RT #33153]
853a0c44563b056e40e9cffe911190f554e63ec3chuck3547. [bug] Some malformed unknown rdata records were not properly
853a0c44563b056e40e9cffe911190f554e63ec3chuck detected and rejected. [RT #33129]
853a0c44563b056e40e9cffe911190f554e63ec3chuck3546. [func] Add EUI48 and EUI64 types. [RT #33082]
330c042543440d0987244c94c65d14eeb7af0868rbb3545. [bug] RRL slip behavior was incorrect when set to 1.
f1fa5e69040a3a72054d185f6087a7d1592b83e8rbb [RT #33111]
f1fa5e69040a3a72054d185f6087a7d1592b83e8rbb3544. [contrib] check5011.pl: Script to report the status of
f1fa5e69040a3a72054d185f6087a7d1592b83e8rbb managed keys as recorded in managed-keys.bind.
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick Contributed by Tony Finch <dot@dotat.at>
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick3543. [bug] Update socket structure before attaching to socket
30e3e9b782c701f885583b7d13d8e46c37d7e1ddtrawick manager after accept. [RT #33084]
27faa3af8a50c1dc2dc6cb3049722378f85e5517rbb3542. [placeholder]
27faa3af8a50c1dc2dc6cb3049722378f85e5517rbb3541. [bug] Parts of libdns were not properly initialized when
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb built in libexport mode. [RT #33028]
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb3540. [test] libt_api: t_info and t_assert were not thread safe.
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb3539. [port] win32: timestamp format didn't match other platforms.
141b1a93f508248cbc0e9a124cc38041eb3e2562rbb3538. [test] Running "make test" now requires loopback interfaces
865980dc9aeb61741e586502440f0c0fea4835c6trawick to be set up. [RT #32452]
865980dc9aeb61741e586502440f0c0fea4835c6trawick3537. [tuning] Slave zones, when updated, now send NOTIFY messages
865980dc9aeb61741e586502440f0c0fea4835c6trawick to peers before being dumped to disk rather than
865980dc9aeb61741e586502440f0c0fea4835c6trawick after. [RT #27242]
865980dc9aeb61741e586502440f0c0fea4835c6trawick3536. [func] Add support for setting Differentiated Services Code
865980dc9aeb61741e586502440f0c0fea4835c6trawick Point (DSCP) values in named. Most configuration
9a0d076511763b559a755133f6a182e6c24ef643rbb options which take a "port" option (e.g.,
9a0d076511763b559a755133f6a182e6c24ef643rbb listen-on, forwarders, also-notify, masters,
9a0d076511763b559a755133f6a182e6c24ef643rbb notify-source, etc) can now also take a "dscp"
9a0d076511763b559a755133f6a182e6c24ef643rbb option specifying a code point for use with
9a0d076511763b559a755133f6a182e6c24ef643rbb outgoing traffic, if supported by the underlying
b42a7e46e4f80282bd27e96d43c9510b14ccb9aarbb OS. [RT #27596]
b42a7e46e4f80282bd27e96d43c9510b14ccb9aarbb3535. [bug] Minor win32 cleanups. [RT #32962]
b42a7e46e4f80282bd27e96d43c9510b14ccb9aarbb3534. [bug] Extra text after an embedded NULL was ignored when
6501b757f710f75d47c950300d8110aca67dc0b0rbb parsing zone files. [RT #32699]
6501b757f710f75d47c950300d8110aca67dc0b0rbb3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
dfd4950edac888e671b96f62ff5382b7cb350d48rbb3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
dfd4950edac888e671b96f62ff5382b7cb350d48rbb3531. [bug] win32: A uninitialized value could be returned on out
dfd4950edac888e671b96f62ff5382b7cb350d48rbb of memory. [RT #32960]
a6d4b3f8d54aaf14d8ee5dda3a09bf8b6370dfa4wrowe3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
c9a95767fbf0f5fb0976a06b97a256033925e433rbb3529. [func] Named now listens on both IPv4 and IPv6 interfaces
c9a95767fbf0f5fb0976a06b97a256033925e433rbb by default. Named previously only listened on IPv4
c9a95767fbf0f5fb0976a06b97a256033925e433rbb interfaces by default unless named was running in
21b8c3cb46cea2b31a585a95ce9f93f4f6abc35brbb IPv6 only mode. [RT #32945]
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb3528. [func] New "dnssec-coverage" command scans the timing
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb metadata for a set of DNSSEC keys and reports if a
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb lapse in signing coverage has been scheduled
adaea88da2d103e4302e361c932b98cee86fb1c5rbb inadvertently. (Note: This tool depends on python;
9635d7ffbd8ca441f85051f9a3adba17142d0b20rbb it will not be built or installed on systems that
9635d7ffbd8ca441f85051f9a3adba17142d0b20rbb do not have a python interpreter.) [RT #28098]
9635d7ffbd8ca441f85051f9a3adba17142d0b20rbb3527. [compat] Add a URI to allow applications to explicitly
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb request a particular XML schema from the statistics
d8d839738b1e80b0f9c54e83677b3f2c46c22705rbb channel, returning 404 if not supported. [RT #32481]
0415e5e1b9b6eba6899a2e5ef18f8facb8db0cfbstoddard3526. [cleanup] Set up dependencies for unit tests correctly during
0415e5e1b9b6eba6899a2e5ef18f8facb8db0cfbstoddard build. [RT #32803]
1374444b4fab1475091e12a81663f379b73005efrbb3525. [func] Support for additional signing algorithms in rndc:
1374444b4fab1475091e12a81663f379b73005efrbb hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
1374444b4fab1475091e12a81663f379b73005efrbb The -A option to rndc-confgen can be used to
3233d057ad276d823bded5c24c3fd6729ed1a736rbb select the algorithm for the generated key.
3233d057ad276d823bded5c24c3fd6729ed1a736rbb (The default is still hmac-md5; this may
3233d057ad276d823bded5c24c3fd6729ed1a736rbb change in a future release.) [RT #20363]
9927a2a72d50103f32323b53f5fc4577c1801327rbb3524. [func] Added an alternate statistics channel in JSON format,
9927a2a72d50103f32323b53f5fc4577c1801327rbb when the server is built with the json-c library:
9927a2a72d50103f32323b53f5fc4577c1801327rbb http://[address]:[port]/json. [RT #32630]
82d2eed8f2152aff3f7554951c133a9d404ebbc5rbb3523. [contrib] Ported filesystem and ldap DLZ drivers to
82d2eed8f2152aff3f7554951c133a9d404ebbc5rbb dynamically-loadable modules, and added the
82d2eed8f2152aff3f7554951c133a9d404ebbc5rbb "wildcard" module based on a contribution from
2e970b7ec485dde18f8fb3f494f98a3f68749859fanf Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
2e970b7ec485dde18f8fb3f494f98a3f68749859fanf3522. [bug] DLZ lookups could fail to return SERVFAIL when
a5a7ecb732cfe89bb1f8e3c61b316c2075cefe52rbb they ought to. [RT #32685]
a5a7ecb732cfe89bb1f8e3c61b316c2075cefe52rbb3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
364701a102725758f2e3a511924381e2faa93e27rbb3520. [bug] 'mctx' was not being referenced counted in some places
364701a102725758f2e3a511924381e2faa93e27rbb where it should have been. [RT #32794]
364701a102725758f2e3a511924381e2faa93e27rbb3519. [func] Full replay protection via four-way handshake is
364701a102725758f2e3a511924381e2faa93e27rbb now mandatory for rndc clients. Very old versions
0811e8a41d152f0016a385ce1dfa44f475425b70rbb of rndc will no longer work. [RT #32798]
0811e8a41d152f0016a385ce1dfa44f475425b70rbb3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
0811e8a41d152f0016a385ce1dfa44f475425b70rbb so that all dns_rrl_rtype_t enum values fit regardless
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb of whether it is teated as signed or unsigned by
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb the compiler. [RT #32792]
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
957b9b3f5e47c6cc7c2d8d9e2224c7364e966c70rbb3516. [placeholder]
e91c80d53d8ffa738283d923638fa3efd8aa6bf7rbb3515. [port] '%T' is not portable in strftime(). [RT #32763]
9359bd100badb53fd8a465cb3a0a90b218b30c4cben3514. [bug] The ranges for valid key sizes in ddns-confgen and
9359bd100badb53fd8a465cb3a0a90b218b30c4cben rndc-confgen were too constrained. Keys up to 512
9359bd100badb53fd8a465cb3a0a90b218b30c4cben bits are now allowed for most algorithms, and up
d0211374a981173d4537e3f919c708b5f64040fcgstein to 1024 bits for hmac-sha384 and hmac-sha512.
d0211374a981173d4537e3f919c708b5f64040fcgstein [RT #32753]
37d15e1062df9dcdd39ebee5bd2fdc75d4a6aa4arbb3513. [func] "dig -u" prints times in microseconds rather than
37d15e1062df9dcdd39ebee5bd2fdc75d4a6aa4arbb milliseconds. [RT #32704]
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb3512. [func] "rndc validation check" reports the current status
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb of DNSSEC validation. [RT #21397]
e3ec3193b69b45923c14915fa3ee3bc1f0215bafrbb3511. [doc] Improve documentation of redirect zones. [RT #32756]
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin3510. [func] "rndc status" and XML statistics channel now report
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin server start and reconfiguration times. [RT #21048]
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin3509. [cleanup] Added a product line to version file to allow for
138c8f7cb8254e035c6f45288e3909cd9c21be5cmartin easy naming of different products (BIND
adaea88da2d103e4302e361c932b98cee86fb1c5rbb vs BIND ESV, for example). [RT #32755]
adaea88da2d103e4302e361c932b98cee86fb1c5rbb3508. [contrib] queryperf was incorrectly rejecting the -T option.
adaea88da2d103e4302e361c932b98cee86fb1c5rbb [RT #32338]
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb3507. [bug] Statistics channel XSL had a glitch when attempting
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb to chart query data before any queries had been
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb received. [RT #32620]
8e7c85d6eb9bf628f081763c5bd778b784d5001crbb3506. [func] When setting "max-cache-size" and "max-acache-size",
97ad13ce0413b573e63512b57c874ebbd41065b2rbb the keyword "unlimited" is no longer defined as equal
97ad13ce0413b573e63512b57c874ebbd41065b2rbb to 4 gigabytes (except on 32-bit platforms); it
2d3a1dd65798c72b7e46593614b4e27716cc5cderbb means literally unlimited. [RT #32358]
2d3a1dd65798c72b7e46593614b4e27716cc5cderbb3505. [bug] When setting "max-cache-size" and "max-acache-size",
2d3a1dd65798c72b7e46593614b4e27716cc5cderbb larger values than 4 gigabytes could not be set
78f2608a1583b3cb409e12be701392ad1a929653rbb explicitly, though larger sizes were available
78f2608a1583b3cb409e12be701392ad1a929653rbb when setting cache size to 0. This has been
78f2608a1583b3cb409e12be701392ad1a929653rbb corrected; the full range is now available.
78f2608a1583b3cb409e12be701392ad1a929653rbb [RT #32358]
c5c3b5e33fca6425dc716e1dc51c10733d9b6bc3rbb3504. [func] Add support for ACLs based on geographic location,
c5c3b5e33fca6425dc716e1dc51c10733d9b6bc3rbb using MaxMind GeoIP databases. Based on code
c5c3b5e33fca6425dc716e1dc51c10733d9b6bc3rbb contributed by Ken Brownfield <kb@slide.com>.
be7b08f10dc6b0be088c8b41009d89ea49ad4acarbb [RT #30681]
be7b08f10dc6b0be088c8b41009d89ea49ad4acarbb3503. [doc] Clarify size_spec syntax. [RT #32449]
2a0c3663b66c9af764267ac3c4e140e659598474ben3502. [func] zone-statistics: "no" is now a synonym for "none",
2a0c3663b66c9af764267ac3c4e140e659598474ben instead of "terse". [RT #29165]
2a0c3663b66c9af764267ac3c4e140e659598474ben3501. [func] zone-statistics now takes three options: full,
8a76b3f3c93d39930182afa227d258218f80926brbb terse, and none. "yes" and "no" are retained as
8a76b3f3c93d39930182afa227d258218f80926brbb synonyms for full and terse, respectively. [RT #29165]
8a76b3f3c93d39930182afa227d258218f80926brbb3500. [security] Support NAPTR regular expression validation on
11d400383ba9f941cc49e1a8da562fd172d3d7c5stoddard all platforms without using libregex, which
11d400383ba9f941cc49e1a8da562fd172d3d7c5stoddard can be vulnerable to memory exhaustion attack
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb (CVE-2013-2266). [RT #32688]
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb3499. [doc] Corrected ARM documentation of built-in zones.
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb [RT #32694]
528e2a7d7cf6b8879291b59dd5afd8f6c7ae1b6brbb3498. [bug] zone statistics for zones which matched a potential
1a3161b56ebbbd036730d5372d4800cc495db212rbb empty zone could have their zone-statistics setting
1a3161b56ebbbd036730d5372d4800cc495db212rbb overridden.
1a3161b56ebbbd036730d5372d4800cc495db212rbb3497. [func] When deleting a slave/stub zone using 'rndc delzone'
1a3161b56ebbbd036730d5372d4800cc495db212rbb report the files that were being used so they can
2d87d8f191175a0683f430d790d81a5604b74ec6rbb be cleaned up if desired. [RT #27899]
2d87d8f191175a0683f430d790d81a5604b74ec6rbb3496. [placeholder]
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb3495. [func] Support multiple response-policy zones (up to 32),
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb while improving RPZ performance. "response-policy"
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb syntax now includes a "min-ns-dots" clause, with
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb default 1, to exclude top-level domains from
6bcee6b60a2fc4c96328af30e79bad4927ff30f3rbb NSIP and NSDNAME checking. --enable-rpz-nsip and
1e8d4cfede0bad3a1a33e3b2eef0ba6754746f72rbb --enable-rpz-nsdname are now the default. [RT #32251]
1e8d4cfede0bad3a1a33e3b2eef0ba6754746f72rbb3494. [func] DNS RRL: Blunt the impact of DNS reflection and
1e8d4cfede0bad3a1a33e3b2eef0ba6754746f72rbb amplification attacks by rate-limiting substantially-
5600cf225f3be88ed9b5385a0737ccde7d0775bbrbb identical responses. [RT #28130]
5600cf225f3be88ed9b5385a0737ccde7d0775bbrbb3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
5600cf225f3be88ed9b5385a0737ccde7d0775bbrbb contributed by Mark Goldfinch. [RT #32549]
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb3492. [bug] Fixed a regression in zone loading performance
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb due to lock contention. [RT #30399]
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb3491. [bug] Slave zones using inline-signing must specify a
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb file name. [RT #31946]
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb3490. [bug] When logging RDATA during update, truncate if it's
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb too long. [RT #32365]
84b76faff9e8fa4b16b587b95d3930e36fe3c405rbb3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
bcef91d7068817e2e56854f5c5b22b6eb4663a85rbb dns_dlzcreate() failed to properly initialize
bcef91d7068817e2e56854f5c5b22b6eb4663a85rbb dlzdb.link. When cloning a rdataset do not copy
bcef91d7068817e2e56854f5c5b22b6eb4663a85rbb the link contents. [RT #32651]
445997e06464e7625c7f0e22917f8f2d9876cfffrbb3488. [bug] Use after free error with DH generated keys. [RT #32649]
445997e06464e7625c7f0e22917f8f2d9876cfffrbb3487. [bug] Change 3444 was not complete. There was a additional
445997e06464e7625c7f0e22917f8f2d9876cfffrbb place where the NOQNAME proof needed to be saved.
a2c240fe8836beba2330b03d55569d9e31bb3358trawick [RT #32629]
a2c240fe8836beba2330b03d55569d9e31bb3358trawick3486. [bug] named could crash when using TKEY-negotiated keys
a2c240fe8836beba2330b03d55569d9e31bb3358trawick that had been deleted and then recreated. [RT #32506]
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
13ee9baf0119bca0739d3f17591f0bf2c64cdcccrbb3484. [bug] Some statistics were incorrectly rendered in XML.
5a58a10705b7b154b53294e0c0283d64eabdcb7fstoddard [RT #32587]
5a58a10705b7b154b53294e0c0283d64eabdcb7fstoddard3483. [placeholder]
3568de757bac0b47256647504c186d17ca272f85rbb3482. [func] dig +nssearch now prints name servers that don't
3568de757bac0b47256647504c186d17ca272f85rbb have address records (missing AAAA or A, or the name
3568de757bac0b47256647504c186d17ca272f85rbb doesn't exist). [RT #29348]
98f3c8c547839251cb43e9f917114cc8b16ced9efanf3481. [cleanup] Removed use of const const in atf.
1a411968bb62cc88c3cbf14a53caf6587c224259fanf3480. [bug] Silence logging noise when setting up zone
1a411968bb62cc88c3cbf14a53caf6587c224259fanf statistics. [RT #32525]
10a2de5cee9ae5abe675ea200fbe635a54556c8ffanf3479. [bug] Address potential memory leaks in gssapi support
10a2de5cee9ae5abe675ea200fbe635a54556c8ffanf code. [RT #32405]
60777c94cb33363389d4848524c0809c235ba5e5rbb3478. [port] Fix a build failure in strict C99 environments
6f06d481dafc90f1b553f1d2828bcea50a039854fielding [RT #32475]
b5140df3124b186e4a977812fd9828d1e295c080wrowe3477. [func] Expand logging when adding records via DDNS update
b5140df3124b186e4a977812fd9828d1e295c080wrowe [RT #32365]
b5140df3124b186e4a977812fd9828d1e295c080wrowe3476. [bug] "rndc zonestatus" could report a spurious "not
c9dafaafc2650994e47f88f5239f643c97ec4cb3wrowe found" error on inline-signing zones. [RT #29226]
c9dafaafc2650994e47f88f5239f643c97ec4cb3wrowe3475. [cleanup] Changed name of 'map' zone file format (previously
c9dafaafc2650994e47f88f5239f643c97ec4cb3wrowe 'fast'). [RT #32458]
41aef8943f349ee0b5b510dd436301b4c33c628cwrowe3474. [bug] nsupdate could assert when the local and remote
41aef8943f349ee0b5b510dd436301b4c33c628cwrowe address families didn't match. [RT #22897]
5727f68f33838686d447f55a100309e54efb20f8fielding3473. [bug] dnssec-signzone/verify could incorrectly report
5727f68f33838686d447f55a100309e54efb20f8fielding an error condition due to an empty node above an
5727f68f33838686d447f55a100309e54efb20f8fielding opt-out delegation lacking an NSEC3. [RT #32072]
5727f68f33838686d447f55a100309e54efb20f8fielding3472. [bug] The active-connections counter in the socket
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb statistics could underflow. [RT #31747]
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb3471. [bug] The number of UDP dispatches now defaults to
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb the number of CPUs even if -n has been set to
d28c69d8e5f2e88e653d61436bb6fa6302a212b4rbb a higher value. [RT #30964]
b974a8fc59a9d6193305dcd8690992a411d88232rbb3470. [bug] Slave zones could fail to dump when successfully
b974a8fc59a9d6193305dcd8690992a411d88232rbb refreshing after an initial failure. [RT #31276]
b974a8fc59a9d6193305dcd8690992a411d88232rbb3469. [bug] Handle DLZ lookup failures more gracefully. Improve
fa996ff928f6170678c8789c8073c368f56d770arbb backward compatibility between versions of DLZ dlopen
fa996ff928f6170678c8789c8073c368f56d770arbb API. [RT #32275]
fa996ff928f6170678c8789c8073c368f56d770arbb3468. [security] RPZ rules to generate A records (but not AAAA records)
fa996ff928f6170678c8789c8073c368f56d770arbb could trigger an assertion failure when used in
fa996ff928f6170678c8789c8073c368f56d770arbb conjunction with DNS64 (CVE-2012-5689). [RT #32141]
a1bbc66131c63e718e3f73fc11a348f7552d7947rbb3467. [bug] Added checks in dnssec-keygen and dnssec-settime
a1bbc66131c63e718e3f73fc11a348f7552d7947rbb to check for delete date < inactive date. [RT #31719]
b31025f6f2c0392dc76eecca7f27faad0b902be0wrowe3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
b31025f6f2c0392dc76eecca7f27faad0b902be0wrowe in DLZ example driver. [RT #32275]
b31025f6f2c0392dc76eecca7f27faad0b902be0wrowe3465. [bug] Handle isolated reserved ports. [RT #31778]
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben3464. [maint] Updates to PKCS#11 openssl patches, supporting
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
4783bc116b4dc37deadcc0b68ce3d3eeb6a7464aben3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb3462. [doc] Clarify server selection behavior of dig when using
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb -4 or -6 options. [RT #32181]
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb3461. [bug] Negative responses could incorrectly have AD=1
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb set. [RT #32237]
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb3460. [bug] Only link against readline where needed. [RT #29810]
fcc25eda7b150e226d3c1cdaea66a943d3fdee4erbb3459. [func] Added -J option to named-checkzone/named-compilezone
cab10c98980b42562a7850410cecd37798e170ecrbb to specify the path to the journal file. [RT #30958]
cab10c98980b42562a7850410cecd37798e170ecrbb3458. [bug] Return FORMERR when presented with a overly long
cab10c98980b42562a7850410cecd37798e170ecrbb domain named in a request. [RT #29682]
71715c646d5231de578431f8961e711764b899d3fanf3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
71715c646d5231de578431f8961e711764b899d3fanf3456. [port] g++47: ATF failed to compile. [RT #32012]
2714d6002fcdf12f5b26cc948c9f2f03ca5e7ee9rbb3455. [contrib] queryperf: fix getopt option list. [RT #32338]
2714d6002fcdf12f5b26cc948c9f2f03ca5e7ee9rbb3454. [port] sparc64: improve atomic support. [RT #25182]
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb failed. [RT #31960]
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb3452. [bug] Accept duplicate singleton records. [RT #32329]
8695c28e4d0bb9357f606045b37238d4f49ce8b6rbb3451. [port] Increase per thread stack size from 64K to 1M.
5f69f46ccdf50afd8f0a23f134746e6066185e89rbb [RT #32230]
5f69f46ccdf50afd8f0a23f134746e6066185e89rbb3450. [bug] Stop logfileconfig system test spam system logs.
5f69f46ccdf50afd8f0a23f134746e6066185e89rbb [RT #32315]
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe3449. [bug] gen.c: use the pre-processor to construct format
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe strings so that compiler can perform sanity checks;
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe check the snprintf results. [RT #17576]
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe3448. [bug] The allow-query-on ACL was not processed correctly.
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe [RT #29486]
e76797ee89ad6fb15ad97b0f3903ae324ac44949wrowe3447. [port] Add support for libxml2-2.9.x [RT #32231]
a1e0709c89175c34a3f72eb4a83d7ee1621a0884rbb3446. [port] win32: Add source ID (see change #3400) to build.
a1e0709c89175c34a3f72eb4a83d7ee1621a0884rbb [RT #31683]
a1e0709c89175c34a3f72eb4a83d7ee1621a0884rbb3445. [bug] Warn about zone files with blank owner names
4b13b6bcdcfae61d3c58cc2569757651f28f2bbfrbb immediately after $ORIGIN directives. [RT #31848]
4b13b6bcdcfae61d3c58cc2569757651f28f2bbfrbb3444. [bug] The NOQNAME proof was not being returned from cached
34ea1d36f4e1c8d66338e691793017d105cc9c32rbb insecure responses. [RT #21409]
34ea1d36f4e1c8d66338e691793017d105cc9c32rbb3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
34ea1d36f4e1c8d66338e691793017d105cc9c32rbb rejected when generating keys. [RT #31927]
2c8f06bf370a44a3d0544ed5319355463c417132gregames3442. [port] Net::DNS 0.69 introduced a non backwards compatible
2c8f06bf370a44a3d0544ed5319355463c417132gregames change. [RT #32216]
db06e09891b001667974483058923b88c3258324rbb3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
db06e09891b001667974483058923b88c3258324rbb3440. [bug] Reorder get_key_struct to not trigger a assertion when
db06e09891b001667974483058923b88c3258324rbb cleaning up due to out of memory error. [RT #32131]
8ba9d5e9aaaa79dba0de13f5c1b6e725d98f1dc2fanf3439. [placeholder]
8ba9d5e9aaaa79dba0de13f5c1b6e725d98f1dc2fanf3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
26cf4d32b4ff8807a64b0cfa6865a7d6d171c68efanf3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
26cf4d32b4ff8807a64b0cfa6865a7d6d171c68efanf buffers with constant data. [RT #32064]
06c107289de0a0888386e0bc08ef9fc60aacd8bctrawick3436. [bug] Check malloc/calloc return values. [RT #32088]
06c107289de0a0888386e0bc08ef9fc60aacd8bctrawick3435. [bug] Cross compilation support in configure was broken.
f4ab6acec7b02518869ca649ce2d3ceeb92d282etrawick [RT #32078]
f4ab6acec7b02518869ca649ce2d3ceeb92d282etrawick3434. [bug] Pass client info to the DLZ findzone() entry
b0bd38b2226e5cfb86cce6ed1991723f4c9e4f68trawick point in addition to lookup(). This makes it
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim possible for a database to answer differently
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim whether it's authoritative for a name depending
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim on the address of the client. [RT #31775]
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim3433. [bug] dlz_findzone() did not correctly handle
bf9902ea6090f94c9ee0aaddd80b419a184ffe55jim ISC_R_NOMORE. [RT #31172]
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb3432. [func] Multiple DLZ databases can now be configured.
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb DLZ databases are searched in the order configured,
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb unless set to "search no", in which case a
83047afdc49c183cdca6373dba6a0c6afa638f12gstein zone can be configured to be retrieved from a
0b34df54ff22d0ca05eb8e9d7c9610138a878c83rbb particular DLZ database by using a "dlz <name>"
c8cc46d12794845f39fa154224075a3bbe57a4c8ben option in the zone statement. DLZ databases can
c8cc46d12794845f39fa154224075a3bbe57a4c8ben support type "master" and "redirect" zones.
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb [RT #27597]
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb3431. [bug] ddns-confgen: Some valid key algorithms were
5dea9095cbfab622c65e5f2f806007aaa7d7761arbb not accepted. [RT #31927]
365c33fd9c0fc3ac27c0bd1d360a5a94980c576atrawick3430. [bug] win32: isc_time_formatISO8601 was missing the
365c33fd9c0fc3ac27c0bd1d360a5a94980c576atrawick 'T' between the date and time. [RT #32044]
0ea568e49752d337d2b513cce07f2a6f4699d6eatrawick3429. [bug] dns_zone_getserial2 could a return success without
0ea568e49752d337d2b513cce07f2a6f4699d6eatrawick returning a valid serial. [RT #32007]
b7a0ad483b54711addc5f43f679189619a23c749ben3428. [cleanup] dig: Add timezone to date output. [RT #2269]
328d02603f471fad56cc5588fc9e93f589593ad0rbb3427. [bug] dig +trace incorrectly displayed name server
328d02603f471fad56cc5588fc9e93f589593ad0rbb addresses instead of names. [RT #31641]
1c850e9f96375578e43e5f69ba7499a543b2a7bdtrawick3426. [bug] dnssec-checkds: Clearer output when records are not
1c850e9f96375578e43e5f69ba7499a543b2a7bdtrawick found. [RT #31968]
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick3425. [bug] "acacheentry" reference counting was broken resulting
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick in use after free. [RT #31908]
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick3424. [func] dnssec-dsfromkey now emits the hash without spaces.
48a2f5e2c189669b025d462f44fda5d4b45e8d78trawick [RT #31951]
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb3423. [bug] "rndc signing -nsec3param" didn't accept the full
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb range of possible values. Address portability issues.
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb [RT #31938]
b22fb75c37b70fbe176afdb8081c3ce2dba86db4rbb3422. [bug] Added a clear error message for when the SOA does not
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb match the referral. [RT #31281]
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb3421. [bug] Named loops when re-signing if all keys are offline.
8fccb89ed59d5c80c76a818f7ca02bb0d068d4d3rbb [RT #31916]
da07a882b90b44243c9cd88ac09a789999dccc4drbb3420. [bug] Address VPATH compilation issues. [RT #31879]
da07a882b90b44243c9cd88ac09a789999dccc4drbb3419. [bug] Memory leak on validation cancel. [RT #31869]
da07a882b90b44243c9cd88ac09a789999dccc4drbb3418. [func] New XML schema (version 3.0) for the statistics channel
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb adds query type statistics at the zone level, and
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb flattens the XML tree and uses compressed format to
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb optimize parsing. Includes new XSL that permits
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb charting via the Google Charts API on browsers that
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb support javascript in XSL. The old XML schema has been
4a5c8a77f48f0cf10bfe70479d0a2e8e7d6cd917rbb deprecated. [RT #30023]
5bf029f8452b6aa105cf3d9d9b19221920725428rbb3417. [placeholder]
60ed053fe71b1e3cfab8c4ed37afde30a6db4841rbb3416. [bug] Named could die on shutdown if running with 128 UDP
60ed053fe71b1e3cfab8c4ed37afde30a6db4841rbb dispatches per interface. [RT #31743]
e03878add0099ba9741efc46d545955a60ea8bdcrbb3415. [bug] named could die with a REQUIRE failure if a validation
e03878add0099ba9741efc46d545955a60ea8bdcrbb was canceled. [RT #31804]
e03878add0099ba9741efc46d545955a60ea8bdcrbb3414. [bug] Address locking issues found by Coverity. [RT #31626]
1860b2b5f1de31f8cf9d95f1b394fe98c8dbfab7rbb3413. [func] Record the number of DNS64 AAAA RRsets that have been
1860b2b5f1de31f8cf9d95f1b394fe98c8dbfab7rbb synthesized. [RT #27636]
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe3412. [bug] Copy timeval structure from control message data.
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe [RT #31548]
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe to UDP. [RT #31690]
9ec65cbae2f760e485a1c54df5b19853688d5c91wrowe3410. [bug] Addressed Coverity warnings. [RT #31626]
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick from X.509 certificates, for use with DANE
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick (DNS-based Authentication of Named Entities).
a8c0c0b8d7dada680bd3f3d70f78ce0656ba5aa6trawick [RT #30513]
77c656dabf05adcdee0d30b15b4628be738a1913rbb3408. [bug] Some DNSSEC-related options (update-check-ksk,
77c656dabf05adcdee0d30b15b4628be738a1913rbb dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
77c656dabf05adcdee0d30b15b4628be738a1913rbb are now legal in slave zones as long as
77c656dabf05adcdee0d30b15b4628be738a1913rbb inline-signing is in use. [RT #31078]
7e73041858979fd162c849cc2e7447beb51eedf8rbb3407. [placeholder]
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb3406. [bug] mem.c: Fix compilation errors when building with
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb3405. [bug] Handle time going backwards in acache. [RT #31253]
886cd69ebf69e990dbc365be87ff8ea7cd681904rbb3404. [bug] dnssec-signzone: When re-signing a zone, remove
db9ac238bf63d7df2bebbaff4de1628a32151028trawick RRSIG and NSEC records from nodes that used to be
ce121a776564df6bb75498209094142d92404b8atrawick in-zone but are now below a zone cut. [RT #31556]
ce121a776564df6bb75498209094142d92404b8atrawick3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
e1ade9256c87684358786fcf7eef251bd4c1db10rbb3402. [test] The IPv6 interface numbers used for system
e1ade9256c87684358786fcf7eef251bd4c1db10rbb tests were incorrect on some platforms. [RT #25085]
e1ade9256c87684358786fcf7eef251bd4c1db10rbb3401. [bug] Addressed Coverity warnings. [RT #31484]
db9ac238bf63d7df2bebbaff4de1628a32151028trawick3400. [cleanup] "named -V" can now report a source ID string, defined
db9ac238bf63d7df2bebbaff4de1628a32151028trawick in the "srcid" file in the build tree and normally set
db9ac238bf63d7df2bebbaff4de1628a32151028trawick to the most recent git hash. [RT #31494]
eae32ab3fb398ca408bc2d45b22adf1b67a75471rbb3399. [port] netbsd: rename 'bool' parameter to avoid namespace
d1d25826dbd7d2ba97db90b77122ae2b0f363e89rbb clash. [RT #31515]
d1d25826dbd7d2ba97db90b77122ae2b0f363e89rbb3398. [bug] SOA parameters were not being updated with inline
42ec91fadb5532438ab4c02993b15c18a517967frbb signed zones if the zone was modified while the
42ec91fadb5532438ab4c02993b15c18a517967frbb server was offline. [RT #29272]
42ec91fadb5532438ab4c02993b15c18a517967frbb3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
96fc773162e93e5b85686ab152f11baf4498d868rbb3396. [bug] OPT records were incorrectly removed from signed,
2975523a2901fc601ae9510082a7d4fb11bb9aecake truncated responses. [RT #31439]
2975523a2901fc601ae9510082a7d4fb11bb9aecake3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick [RT #31336]
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick3394. [bug] Adjust 'successfully validated after lower casing
5827adc4c40ff4b10db9b09cea43f4307c8fc319trawick signer' log level and category. [RT #31414]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3393. [bug] 'host -C' could core dump if REFUSED was received.
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe [RT #31381]
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe3392. [func] Keep statistics on REFUSED responses. [RT #31412]
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
e7270e4daeb3e62414b361ca2bf0e707d0ae3310wrowe [RT #31262]
f6e9f5600e77b78fb013bb543d364135961639d1rbb3390. [bug] Silence clang compiler warnings. [RT #30417]
f6e9f5600e77b78fb013bb543d364135961639d1rbb3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
f6e9f5600e77b78fb013bb543d364135961639d1rbb3388. [bug] Fixed several Coverity warnings.
f6e9f5600e77b78fb013bb543d364135961639d1rbb Note: This change includes a fix for a bug that
f6e9f5600e77b78fb013bb543d364135961639d1rbb was subsequently determined to be an exploitable
f6e9f5600e77b78fb013bb543d364135961639d1rbb security vulnerability, CVE-2012-5688: named could
f6e9f5600e77b78fb013bb543d364135961639d1rbb die on specific queries with dns64 enabled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30996]
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick3387. [func] DS digest can be disabled at runtime with
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick disable-ds-digests. [RT #21581]
b580e99ec29c68e3c56b5b1ad8a4ec1e2de865c0trawick3386. [bug] Address locking violation when generating new NSEC /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC3 chains. [RT #31224]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3385. [bug] named-checkconf didn't detect missing master lists
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in also-notify clauses. [RT #30810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3384. [bug] Improved logging of crypto errors. [RT #30963]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3383. [security] A certain combination of records in the RBT could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause named to hang while populating the additional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding section of a response. [RT #31090]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3382. [bug] SOA query from slave used use-v6-udp-ports range,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if set, regardless of the address family in use.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24173]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3381. [contrib] Update queryperf to support more RR types.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30762]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3380. [bug] named could die if a nonexistent master list was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding referenced in a also-notify. [RT #31004]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3379. [bug] isc_interval_zero and isc_time_epoch should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "const (type)* const". [RT #31069]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3378. [bug] Handle missing 'managed-keys-directory' better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30625]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3377. [bug] Removed spurious newline from NSEC3 multiline
cfa64348224b66dd1c9979b809406c4d15b1c137fielding output. [RT #31044]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3376. [bug] Lack of EDNS support was being recorded without a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successful response. [RT #30811]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3374. [bug] isc_parse_uint32 failed to return a range error on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding systems with 64 bit longs. [RT #30232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3373. [bug] win32: open raw files in binary mode. [RT #30944]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3372. [bug] Silence spurious "deleted from unreachable cache"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages. [RT #30501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3371. [bug] AD=1 should behave like DO=1 when deciding whether to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding add NS RRsets to the additional section or not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30479]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3370. [bug] Address use after free while shutting down. [RT #30241]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3369. [bug] nsupdate terminated unexpectedly in interactive mode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if built with readline support. [RT #29550]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were not C++ safe.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3367. [bug] dns_dnsseckey_create() result was not being checked.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3366. [bug] Fixed Read-After-Write dependency violation for IA64
cfa64348224b66dd1c9979b809406c4d15b1c137fielding atomic operations. [RT #25181]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3365. [bug] Removed spurious newlines from log messages in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3364. [security] Named could die on specially crafted record.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3363. [bug] Need to allow "forward" and "fowarders" options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in static-stub zones; this had been overlooked.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30482]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3362. [bug] Setting some option values to 0 in named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could trigger an assertion failure on startup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27730]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3361. [bug] "rndc signing -nsec3param" didn't work correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when salt was set to '-' (no salt). [RT #30099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3360. [bug] 'host -w' could die. [RT #18723]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3359. [bug] An improperly-formed TSIG secret could cause a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory leak. [RT #30607]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3358. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3357. [port] Add support for libxml2-2.8.x [RT #30440]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding approaching their expiry, so they don't remain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in caches after expiry. [RT #26429]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3355. [port] Use more portable awk in verify system test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3354. [func] Improve OpenSSL error logging. [RT #29932]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3353. [bug] Use a single task for task exclusive operations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29872]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3352. [bug] Ensure that learned server attributes timeout of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adb cache. [RT #29856]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
cfa64348224b66dd1c9979b809406c4d15b1c137fielding caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory debugging flags are set. [RT #30243]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3350. [bug] Memory read overrun in isc___mem_reallocate if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_MEM_DEBUGCTX memory debugging flag is set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #30240]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3349. [bug] Change #3345 was incomplete. [RT #30233]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3348. [bug] Prevent RRSIG data from being cached if a negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record matching the covering type exists at a higher
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trust level. Such data already can't be retrieved from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the cache since change 3218 -- this prevents it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being inserted into the cache as well. [RT #26809]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3347. [bug] dnssec-settime: Issue a warning when writing a new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding private key file would cause a change in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding permissions of the existing file. [RT #27724]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3346. [security] Bad-cache data could be used before it was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding initialized, causing an assert. [RT #30025]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3345. [bug] Addressed race condition when removing the last item
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or inserting the first item in an ISC_QUEUE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29539]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3344. [func] New "dnssec-checkds" command checks a zone to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding determine which DS records should be published
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the parent zone, or which DLV records should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding published in a DLV zone, and queries the DNS to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ensure that it exists. (Note: This tool depends
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on python; it will not be built or installed on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding systems that do not have a python interpreter.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3343. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3342. [bug] Change #3314 broke saving of stub zones to disk
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in excessive cpu usage in some cases.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29952]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3341. [func] New "dnssec-verify" command checks a signed zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to ensure correctness of signatures and of NSEC/NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding chains. [RT #23673]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3340. [func] Added new 'map' zone file format, which is an image
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of a zone database that can be loaded directly into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory via mmap(), allowing much faster zone loading.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Note: Because of pointer sizes and other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding considerations, this file format is platform-dependent;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'map' zone files cannot always be transferred from one
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server to another.) [RT #25419]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3339. [func] Allow the maximum supported rsa exponent size to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified: "max-rsa-exponent-size <value>;" [RT #29228]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3338. [bug] Address race condition in units tests: asyncload_zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and asyncload_zt. [RT #26100]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3337. [bug] Change #3294 broke support for the multiple keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in controls. [RT #29694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3336. [func] Maintain statistics for RRsets tagged as "stale".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3335. [func] nslookup: return a nonzero exit code when unable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to get an answer. [RT #29492]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3334. [bug] Hold a zone table reference while performing a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding asynchronous load of a zone. [RT #28326]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3333. [bug] Setting resolver-query-timeout too low can cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named to not recover if it loses connectivity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29623]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3331. [security] dns_rdataslab_fromrdataset could produce bad
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataslabs. [RT #29644]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3330. [func] Fix missing signatures on NOERROR results despite
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RPZ rewriting. Also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add optional "recursive-only yes|no" to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response-policy statement
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add optional "max-policy-ttl" to the response-policy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statement to limit the false data that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "recursive-only no" can introduce into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolvers' caches
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add a RPZ performance test to bin/tests/system/rpz
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when queryperf is available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - the encoding of PASSTHRU action to "rpz-passthru".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (The old encoding is still accepted.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26172]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3329. [bug] Handle RRSIG signer-name case consistently: We
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generate RRSIG records with the signer-name in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lower case. We accept them with any case, but if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they fail to validate, we try again in lower case.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27451]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3328. [bug] Fixed inconsistent data checking in dst_parse.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29401]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 'filter-aaaa-on-v4' but applies to IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding connections. (Use "configure --enable-filter-aaaa"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to enable this option.) [RT #27308]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3326. [func] Added task list statistics: task model, worker
cfa64348224b66dd1c9979b809406c4d15b1c137fielding threads, quantum, tasks running, tasks ready.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27678]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3325. [func] Report cache statistics: memory use, number of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nodes, number of hash buckets, hit and miss counts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27056]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3324. [test] Add better tests for ADB stats [RT #27057]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3323. [func] Report the number of buckets the resolver is using.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27020]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3322. [func] Monitor the number of active TCP and UDP dispatches.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27055]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3321. [func] Monitor the number of recursive fetches and the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding number of open sockets, and report these values in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the statistics channel. [RT #27054]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3320. [func] Added support for monitoring of recursing client
cfa64348224b66dd1c9979b809406c4d15b1c137fielding count. [RT #27009]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3319. [func] Added support for monitoring of ADB entry count and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hash size. [RT #27057]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3318. [tuning] Reduce the amount of work performed while holding a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bucket lock when finished with a fetch context.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #29239]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3316. [tuning] Improved locking performance when recursing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28836]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3315. [tuning] Use multiple dispatch objects for sending upstream
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries; this can improve performance on busy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multiprocessor systems by reducing lock contention.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28605]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3314. [bug] The masters list could be updated while stub_callback
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or refresh_callback were using it. [RT #26732]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3313. [protocol] Add TLSA record type. [RT #28989]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27631]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3311. [bug] Abort the zone dump if zone->db is NULL in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone.c:zone_gotwritehandle. [RT #29028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3310. [test] Increase table size for mutex profiling. [RT #28809]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3309. [bug] resolver.c:fctx_finddone() was not thread safe.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3308. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28956]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3305. [func] Add wire format lookup method to sdb. [RT #28563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28571]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3303. [bug] named could die when reloading. [RT #28606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3302. [bug] dns_dnssec_findmatchingkeys could fail to find
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys if the zone name contained character that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding required special mappings. [RT #28600]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3301. [contrib] Update queryperf to build on darwin. Add -R flag
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for non-recursive queries. [RT #28565]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3300. [bug] Named could die if gssapi was enabled in named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but was not compiled in. [RT #28338]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3299. [bug] Make SDB handle errors from database drivers better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28534]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3298. [bug] Named could dereference a NULL pointer in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zmgr_start_xfrin_ifquota if the zone was being removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28419]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3297. [bug] Named could die on a malformed master file. [RT #28467]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3296. [bug] Named could die with a INSIST failure in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding client.c:exit_check. [RT #28346]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3295. [bug] Adjust isc_time_secondsastimet range check to be more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding portable. [RT # 26542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #28265]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3293. [func] nsupdate: list supported type. [RT #28261]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3292. [func] Log messages in the axfr stream at debug 10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28040]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3291. [port] Fixed a build error on systems without ENOTSUP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #28200]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3288. [bug] dlz_destroy() function wasn't correctly registered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by the DLZ dlopen driver. [RT #28056]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3286. [bug] Managed key maintenance timer could fail to start
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after 'rndc reconfig'. [RT #26786]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3285. [bug] val-frdataset was incorrectly disassociated in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding proveunsecure after calling startfinddlvsep.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27928]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3284. [bug] Address race conditions with the handling of
35c7d65bfb91baf5d930a1d287329e8b37e0235cmjc3283. [bug] Raw zones with with more than 512 records in a RRset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to load. [RT #27863]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3282. [bug] Restrict the TTL of NS RRset to no more than that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the old NS RRset when replacing it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27792] [RT #27884]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3281. [bug] SOA refresh queries could be treated as cancelled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding despite succeeding over the loopback interface.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27782]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3280. [bug] Potential double free of a rdataset on out of memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with DNS64. [RT #27762]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3279. [bug] Hold a internal reference to the zone while performing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a asynchronous load. Address potential memory leak
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if the asynchronous is cancelled. [RT #27750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3278. [bug] Make sure automatic key maintenance is started
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when "auto-dnssec maintain" is turned on during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc reconfig". [RT #26805]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3276. [bug] win32: ns_os_openfile failed to return NULL on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding safe_open failure. [RT #27696]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option had been misspelled as '-clear'. (To avoid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding future confusion, both options now work.) [RT #27173]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3274. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3273. [bug] AAAA responses could be returned in the additional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding section even when filter-aaaa-on-v4 was in use.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27292]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3272. [func] New "rndc zonestatus" command prints information
cfa64348224b66dd1c9979b809406c4d15b1c137fielding about the specified zone. [RT #21671]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3271. [port] darwin: mksymtbl is not always stable, loop several
cfa64348224b66dd1c9979b809406c4d15b1c137fielding times before giving up. mksymtbl was using non
cfa64348224b66dd1c9979b809406c4d15b1c137fielding portable perl to covert 64 bit hex strings. [RT #27653]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0rc2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3270. [bug] "rndc reload" didn't reuse existing zones correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when inline-signing was in use. [RT #27650]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3269. [port] darwin 11 and later now built threaded by default.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
cfa64348224b66dd1c9979b809406c4d15b1c137fielding out the earliest expiry time. [RT #23311]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3267. [bug] Memory allocation failures could be mis-reported as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unexpected error. New ISC_R_UNSET result code.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3266. [bug] The maximum number of NSEC3 iterations for a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY RRset was not being properly computed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26543]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3265. [bug] Corrected a problem with lock ordering in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing code. [RT #27557]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3264. [bug] Automatic regeneration of signatures in an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing zone could stall when the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was restarted. [RT #27344]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3263. [bug] "rndc sync" did not affect the unsigned side of an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing zone. [RT #27337]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3262. [bug] Signed responses were handled incorrectly by RPZ.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27316]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3261. [func] RRset ordering now defaults to random. [RT #27174]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3260. [bug] "rrset-order cyclic" could appear not to rotate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for some query patterns. [RT #27170/27185]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0rc1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3259. [bug] named-compilezone: Suppress "dump zone to <file>"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding message when writing to stdout. [RT #27109]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3258. [test] Add "forcing full sign with unreadable keys" test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27153]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3257. [bug] Do not generate a error message when calling fsync()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a pipe or socket. [RT #27109]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3255. [func] No longer require that a empty zones be explicitly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enabled or that a empty zone is disabled for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC 1918 empty zones to be configured. [RT #27139]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22249]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding too long. [RT #26956]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3252. [bug] When master zones using inline-signing were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding updated while the server was offline, the source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone could fall out of sync with the signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding copy. They can now resynchronize. [RT #26676]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory dns_sdlz_putrr() can allocate per record to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prevent run away memory consumption on ISC_R_NOSPACE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26956]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3250. [func] 'configure --enable-developer'; turn on various
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configure options, normally off by default, that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding we want developers to build and test with. [RT #27103]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3249. [bug] Update log message when saving slave zones files for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding analysis after load failures. [RT #27087]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3248. [bug] Configure options --enable-fixed-rrset and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --enable-exportlib were incompatible with each
cfa64348224b66dd1c9979b809406c4d15b1c137fielding other. [RT #27087]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3247. [bug] 'raw' format zones failed to preserve load order
cfa64348224b66dd1c9979b809406c4d15b1c137fielding breaking 'fixed' sort order. [RT #27087]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3246. [bug] Named failed to start with a empty also-notify list.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #27087]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3245. [bug] Don't report a error unchanged serials unless there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were other changes when thawing a zone with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ixfr-fromdifferences. [RT #26845]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3244. [func] Added readline support to nslookup and nsupdate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Also simplified nsupdate syntax to make "update"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and "prereq" optional. [RT #24659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being properly set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3242. [func] Extended the header of raw-format master files to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding include the serial number of the zone from which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they were generated, if different (as in the case
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of inline-signing zones). This is to be used in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing zones, to track changes between the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unsigned and signed versions of the zone, which may
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have different serial numbers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Note: raw zonefiles generated by this version of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding BIND are no longer compatible with prior versions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding To generate a backward-compatible raw zonefile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using dnssec-signzone or named-compilezone, specify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding output format "raw=0" instead of simply "raw".)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26587]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3241. [bug] Address race conditions in the resolver code.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26889]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3240. [bug] DNSKEY state change events could be missed. [RT #26874]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timestamp. [RT #26883]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3238. [bug] keyrdata was not being reinitialized in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lib/dns/rbtdb.c:iszonesecure. [RT #26913]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3237. [bug] dig -6 didn't work with +trace. [RT #26906]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3236. [bug] Backed out changes #3182 and #3202, related to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding EDNS(0) fallback behavior. [RT #26416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3235. [func] dns_db_diffx, a extended dns_db_diff which returns
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the generated diff and optionally writes it to a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding journal. [RT #26386]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26632]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3232. [bug] Zero zone->curmaster before return in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_zone_setmasterswithkeys(). [RT #26732]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3231. [bug] named could fail to send a incompressible zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3230. [bug] 'dig axfr' failed to properly handle a multi-message
cfa64348224b66dd1c9979b809406c4d15b1c137fielding axfr with a serial of 0. [RT #26796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3229. [bug] Fix local variable to struct var assignment
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found by CLANG warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3228. [tuning] Dynamically grow symbol table to improve zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loading performance. [RT #26523]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3227. [bug] Interim fix to make WKS's use of getprotobyname()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and getservbyname() self thread safe. [RT #26232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3226. [bug] Address minor resource leakages. [RT #26624]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages. [RT #26507]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3223. [bug] 'task_test privilege_drop' generated false positives.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26766]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3222. [cleanup] Replace dns_journal_{get,set}_bitws with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_journal_{get,set}_sourceserial. [RT #26634]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3221. [bug] Fixed a potential core dump on shutdown due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding referencing fetch context after it's been freed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26720]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0b2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could fail to set the database version correctly,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing an assertion failure. [RT #26180]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3219. [bug] Disable NOEDNS caching following a timeout.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3218. [security] Cache lookup could return RRSIG data associated with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nonexistent records, leading to an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #26590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3214. [func] Add 'named -U' option to set the number of UDP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listener threads per interface. [RT #26485]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding list prior to adding a reference to it leading a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding possible assertion failure. [RT #23219]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option prints in single-line-per-record format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20287]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3210. [bug] Canceling the oldest query due to recursive-client
cfa64348224b66dd1c9979b809406c4d15b1c137fielding overload could trigger an assertion failure. [RT #26463]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3208. [bug] 'dig -y' handle unknown tsig algorithm better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #25522]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3206. [cleanup] Add ISC information to log at start time. [RT #25484]
35c7d65bfb91baf5d930a1d287329e8b37e0235cmjc3205. [func] Upgrade dig's defaults to better reflect modern
35c7d65bfb91baf5d930a1d287329e8b37e0235cmjc nameserver behavior. Enable "dig +adflag" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dig +edns=0" by default. Enable "+dnssec" when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding running "dig +trace". [RT #23497]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3204. [bug] When a master server that has been marked as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unreachable sends a NOTIFY, mark it reachable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding again. [RT #25960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3203. [bug] Increase log level to 'info' for validation failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from expired or not-yet-valid RRSIGs. [RT #21796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3202. [bug] NOEDNS caching on timeout was too aggressive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3201. [func] 'rndc querylog' can now be given an on/off parameter
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of only being used as a toggle. [RT #18351]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3200. [doc] Some rndc functions were undocumented or were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding missing from 'rndc -h' output. [RT #25555]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3199. [func] When logging client information, include the name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being queried. [RT #25944]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3198. [doc] Clarified that dnssec-settime can alter keyfile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding permissions. [RT #24866]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3197. [bug] Don't try to log the filename and line number when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the config parser can't open a file. [RT #22263]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3196. [bug] nsupdate: return nonzero exit code when target zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding doesn't exist. [RT #25783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3195. [cleanup] Silence "file not found" warnings when loading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding managed-keys zone. [RT #26340]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3194. [doc] Updated RFC references in the 'empty-zones-enable'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding documentation. [RT #25203]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3192. [bug] A query structure could be used after being freed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22208]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3191. [bug] Print NULL records using "unknown" format. [RT #26392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3190. [bug] Underflow in error handling in isc_mutexblock_init.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26397]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3189. [test] Added a summary report after system tests. [RT #25517]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3188. [bug] zone.c:zone_refreshkeys() could fail to detach
cfa64348224b66dd1c9979b809406c4d15b1c137fielding references correctly when errors occurred, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a hang on shutdown. [RT #26372]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3187. [port] win32: support for Visual Studio 2008. [RT #26356]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3186. [bug] Version/db mis-match in rpz code. [RT #26180]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3185. [func] New 'rndc signing' option for auto-dnssec zones:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - 'rndc signing -list' displays the current
cfa64348224b66dd1c9979b809406c4d15b1c137fielding state of signing operations
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - 'rndc signing -clear' clears the signing state
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records for keys that have fully signed the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - 'rndc signing -nsec3param' sets the NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parameters for the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The 'rndc keydone' syntax is removed. [RT #23729]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3184. [bug] named had excessive cpu usage when a redirect zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configured. [RT #26013]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3182. [bug] Auth servers behind firewalls which block packets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding greater than 512 bytes may cause other servers to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding perform poorly. Now, adb retains edns information
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and caches noedns servers. [RT #23392/24964]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3181. [func] Inline-signing is now supported for master zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26224]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3180. [func] Local copies of slave zones are now saved in raw
cfa64348224b66dd1c9979b809406c4d15b1c137fielding format by default, to improve startup performance.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'masterfile-format text;' can be used to override
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the default, if desired. [RT #25867]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3179. [port] kfreebsd: build issues. [RT #26273]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3178. [bug] A race condition introduced by change #3163 could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause an assertion failure on shutdown. [RT #26271]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3177. [func] 'rndc keydone', remove the indicator record that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named has finished signing the zone with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding corresponding key. [RT #26206]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3176. [doc] Corrected example code and added a README to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sample external DLZ module in contrib/dlz/example.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26215]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3175. [bug] Fix how DNSSEC positive wildcard responses from a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC3 signed zone are validated. Stop sending a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unnecessary NSEC3 record when generating such
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses. [RT #26200]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3174. [bug] Always compute to revoked key tag from scratch.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26186]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3173. [port] Correctly validate root DS responses. [RT #25726]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3172. [port] darwin 10.* and freebsd [89] are now built threaded by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3171. [bug] Exclusively lock the task when adding a zone using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'rndc addzone'. [RT #25600]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0a3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3170. [func] RPZ update:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - fix precedence among competing rules
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - improve ARM text including documenting rule precedence
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - try to rewrite CNAME chains until first hit
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - new "rpz" logging channel
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - RDATA for CNAME rules can include wildcards
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - replace "NO-OP" named.conf policy override with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "PASSTHRU" and add "DISABLED" override ("NO-OP"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is still recognized)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #25172]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3169. [func] Catch db/version mis-matches when calling dns_db_*().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26017]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3168. [bug] Nxdomain redirection could trigger an assert with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a ANY query. [RT #26017]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3167. [bug] Negative answers from forwarders were not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding correctly tagged making them appear to not be cached.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #25380]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3166. [bug] Upgrading a zone to support inline-signing failed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26014]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3165. [bug] dnssec-signzone could generate new signatures when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resigning, even when valid signatures were already
cfa64348224b66dd1c9979b809406c4d15b1c137fielding present. [RT #26025]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3164. [func] Enable DLZ modules to retrieve client information,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding so that responses can be changed depending on the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source address of the query. [RT #25768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3163. [bug] Use finer-grained locking in client.c to address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding concurrency problems with large numbers of threads.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26044]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3162. [test] start.pl: modified to allow for "named.args" in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ns*/ subdirectory to override stock arguments to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named. Largely from RT #26044, but no separate ticket.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3161. [bug] zone.c:del_sigs failed to always reset rdata leading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failures. [RT #25880]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3160. [bug] When printing out a NSEC3 record in multiline form
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the newline was not being printed causing type codes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be run together. [RT #25873]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3159. [bug] On some platforms, named could assert on startup
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when running in a chrooted environment without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding /proc. [RT #25863]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3158. [bug] Recursive servers would prefer a particular UDP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding socket instead of using all available sockets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #26038]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the config file before pausing the server. [RT #21373]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3156. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0a2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3155. [bug] Fixed a build failure when using contrib DLZ
cfa64348224b66dd1c9979b809406c4d15b1c137fielding drivers (e.g., mysql, postgresql, etc). [RT #25710]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3154. [bug] Attempting to print an empty rdataset could trigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assert. [RT #25452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3153. [func] Extend request-ixfr to zone level and remove the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding side effect of forcing an AXFR. [RT #25156]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3152. [cleanup] Some versions of gcc and clang failed due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrect use of __builtin_expect. [RT #25183]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3151. [bug] Queries for type RRSIG or SIG could be handled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly. [RT #21050]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3150. [func] Improved startup and reconfiguration time by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enabling zones to load in multiple threads. [RT #25333]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3149. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3148. [bug] Processing of normal queries could be stalled when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding forwarding a UPDATE message. [RT #24711]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3147. [func] Initial inline signing support. [RT #23657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.9.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3145. [test] Capture output of ATF unit tests in "./atf.out" if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding there were any errors while running them. [RT #25527]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3144. [bug] dns_dbiterator_seek() could trigger an assert when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used with a nonexistent database node. [RT #25358]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3143. [bug] Silence clang compiler warnings. [RT #25174]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3142. [bug] NAPTR is class agnostic. [RT #25429]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3141. [bug] Silence spurious "zone serial (0) unchanged" messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding associated with empty zones. [RT #25079]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3140. [func] New command "rndc flushtree <name>" clears the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified name from the server cache along with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding all names under it. [RT #19970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for the hashing algorithms (md5, sha1 - sha512, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding their hmac counterparts). [RT #25067]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3138. [bug] Address memory leaks and out-of-order operations when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding shutting named down. [RT #25210]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3137. [func] Improve hardware scalability by allowing multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding worker threads to process incoming UDP packets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This can significantly increase query throughput
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on some systems. [RT #22992]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3136. [func] Add RFC 1918 reverse zones to the list of built-in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding empty zones switched on by the 'empty-zones-enable'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option. [RT #24990]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24950]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3134. [bug] Improve the accuracy of dnssec-signzone's signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics. [RT #16030]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3133. [bug] Change #3114 was incomplete. [RT #24577]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3132. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3131. [tuning] Improve scalability by allocating one zone task
cfa64348224b66dd1c9979b809406c4d15b1c137fielding per 100 zones at startup time, rather than using a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fixed-size task table. [RT #24406]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3130. [func] Support alternate methods for managing a dynamic
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone's serial number. Two methods are currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defined using serial-update-method, "increment"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (default) and "unixtime". [RT #23849]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3129. [bug] Named could crash on 'rndc reconfig' when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-new-zones was set to yes and named ACLs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were used. [RT #22739]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3128. [func] Inserting an NSEC3PARAM via dynamic update in an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding auto-dnssec zone that has not been signed yet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will cause it to be signed with the specified NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parameters when keys are activated. The
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC3PARAM record will not appear in the zone until
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it is signed, but the parameters will be stored.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23684]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3127. [bug] 'rndc thaw' will now remove a zone's journal file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if the zone serial number has been changed and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ixfr-from-differences is not in use. [RT #24687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3126. [security] Using DNAME record to generate replacements caused
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RPZ to exit with a assertion failure. [RT #24766]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3125. [security] Using wildcard CNAME records as a replacement with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RPZ caused named to exit with a assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24715]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3124. [bug] Use an rdataset attribute flag to indicate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative-cache records rather than using rrtype 0;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this will prevent problems when that rrtype is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used in actual DNS packets. [RT #24777]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3123. [security] Change #2912 exposed a latent flaw in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdataset_totext() that could cause named to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding crash with an assertion failure. [RT #24777]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3121. [security] An authoritative name server sending a negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response containing a very large RRset could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger an off-by-one error in the ncache code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and crash named. [RT #24650]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3120. [bug] Named could fail to validate zones listed in a DLV
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that validated insecure without using DLV and had
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DS records in the parent zone. [RT #24631]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3119. [bug] When rolling to a new DNSSEC key, a private-type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record could be created and never marked complete.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23253]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3118. [bug] nsupdate could dump core on shutdown when using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIG(0) keys. [RT #24604]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3117. [cleanup] Remove doc and parser references to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding never-implemented 'auto-dnssec create' option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24533]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3116. [func] New 'dnssec-update-mode' option controls updates
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of DNSSEC records in signed dynamic zones. Set to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'no-resign' to disable automatic RRSIG regeneration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding while retaining the ability to sign new or changed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data. [RT #24533]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3115. [bug] Named could fail to return requested data when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding following a CNAME that points into the same zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3114. [bug] Retain expired RRSIGs in dynamic zones if key is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inactive and there is no replacement key. [RT #23136]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3113. [doc] Document the relationship between serial-query-rate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and NOTIFY messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3112. [doc] Add missing descriptions of the update policy name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding types "ms-self", "ms-subdomain", "krb5-self" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "krb5-subdomain", which allow machines to update
cfa64348224b66dd1c9979b809406c4d15b1c137fielding their own records, to the BIND 9 ARM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3111. [bug] Improved consistency checks for dnssec-enable and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-validation, added test cases to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding checkconf system test. [RT #24398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3110. [bug] dnssec-signzone: Wrong error message could appear
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when attempting to sign with no KSK. [RT #24369]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3109. [func] The also-notify option now uses the same syntax
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as a zone's masters clause. This means it is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now possible to specify a TSIG key to use when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sending notifies to a given server, or to include
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an explicit named masters list in an also-notify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statement. [RT #23508]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3108. [cleanup] dnssec-signzone: Clarified some error and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
cfa64348224b66dd1c9979b809406c4d15b1c137fielding code (use -P instead). [RT #20852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3107. [bug] dnssec-signzone: Report the correct number of ZSKs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when using -x. [RT #20852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3106. [func] When logging client requests, include the name of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the TSIG key if any. [RT #23619]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3105. [bug] GOST support can be suppressed by "configure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --without-gost" [RT #24367]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3104. [bug] Better support for cross-compiling. [RT #24367]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3103. [bug] Configuring 'dnssec-validation auto' in a view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding instead of in the options statement could trigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure in named-checkconf. [RT #24382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3102. [func] New 'dnssec-loadkeys-interval' option configures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding how often, in minutes, to check the key repository
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for updates when using automatic key maintenance.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Default is every 60 minutes (formerly hard-coded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 12 hours). [RT #23744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3101. [bug] Zones using automatic key maintenance could fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to check the key repository for updates. [RT #23744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3100. [security] Certain response policy zone configurations could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger an INSIST when receiving a query of type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRSIG. [RT #24280]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3099. [test] "dlz" system test now runs but gives R:SKIPPED if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not compiled with --with-dlz-filesystem. [RT #24146]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3098. [bug] DLZ zones were answering without setting the AA bit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #24146]
4b0939148fffde56f0b7db2a43cab1d1dc76ab3fmjc3097. [test] Add a tool to test handling of malformed packets.
35c7d65bfb91baf5d930a1d287329e8b37e0235cmjc [RT #24096]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3096. [bug] Set KRB5_KTNAME before calling log_cred() in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dst_gssapi_acceptctx(). [RT #24004]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3095. [bug] Handle isolated reserved ports in the port range.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23957]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3094. [doc] Expand dns64 documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3092. [bug] Signatures for records at the zone apex could go
cfa64348224b66dd1c9979b809406c4d15b1c137fielding stale due to an incorrect timer setting. [RT #23769]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3091. [bug] Fixed a bug in which zone keys that were published
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and then subsequently activated could fail to trigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding automatic signing. [RT #22911]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3090. [func] Make --with-gssapi default [RT #23738]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3089. [func] dnssec-dsfromkey now supports reading keys from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding standard input "dnssec-dsfromkey -f -". [RT #20662]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and add setup.sh in order to resolve changing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named.conf issue. [RT #23687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3087. [bug] DDNS updates using SIG(0) with update-policy match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding type "external" could cause a crash. [RT #23735]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3086. [bug] Running dnssec-settime -f on an old-style key will
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now force an update to the new key format even if no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding other change has been specified, using "-P now -A now"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as default values. [RT #22474]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3085. [func] New '-R' option in dnssec-signzone forces removal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of signatures which have not yet expired but
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were generated by a key that no longer exists.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22471]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3084. [func] A new command "rndc sync" dumps pending changes in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a dynamic zone to disk; "rndc sync -clean" also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removes the journal file after syncing. Also,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc freeze" no longer removes journal files.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3083. [bug] NOTIFY messages were not being sent when generating
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a NSEC3 chain incrementally. [RT #23702]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3082. [port] strtok_r is threads only. [RT #23747]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3081. [bug] Failure of DNAME substitution did not return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding YXDOMAIN. [RT #23591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23587]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3079. [bug] Handle isc_event_allocate failures in t_tasks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23572]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3078. [func] Added a new include file with function typedefs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for the DLZ "dlopen" driver. [RT #23629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3077. [bug] zone.c:zone_refreshkeys() incorrectly called
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_zone_attach(), use zone->irefs instead. [RT #23303]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-keyfromlabel sets the default TTL of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key. When possible, automatic signing will use that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TTL when the key is published. [RT #23304]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timestamp when determining which keys are active.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3074. [bug] Make the adb cache read through for zone data and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding glue learn for zone named is authoritative for.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22842]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3073. [bug] managed-keys changes were not properly being recorded.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3071. [bug] has_nsec could be used uninitialized in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding update.c:next_active. [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3070. [bug] dnssec-signzone potential NULL pointer dereference.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3069. [cleanup] Silence warnings messages from clang static analysis.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3068. [bug] Named failed to build with a OpenSSL without engine
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support. [RT #23473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3067. [bug] ixfr-from-differences {master|slave}; failed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding select the master/slave zones. [RT #23580]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3066. [func] The DLZ "dlopen" driver is now built by default,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no longer requiring a configure option. To
cfa64348224b66dd1c9979b809406c4d15b1c137fielding disable it, use "configure --without-dlopen".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Driver also supported on win32. [RT #23467]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3065. [bug] RRSIG could have time stamps too far in the future.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23356]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3064. [bug] powerpc: add sync instructions to the end of atomic
cfa64348224b66dd1c9979b809406c4d15b1c137fielding operations. [RT #23469]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3062. [func] Made several changes to enhance human readability
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of DNSSEC data in dig output and in generated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone files:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - DNSKEY record comments are more verbose, no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding longer used in multiline mode only
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - multiline RRSIG records reformatted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - multiline output mode for NSEC3PARAM records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - "dig +norrcomments" suppresses DNSKEY comments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - "dig +split=X" breaks hex/base64 records into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fields of width X; "dig +nosplit" disables this.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22820]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3061. [func] New option "dnssec-signzone -D", only write out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generated DNSSEC records. [RT #22896]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3060. [func] New option "dnssec-signzone -X <date>" allows
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specification of a separate expiration date
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3059. [test] Added a regression test for change #3023.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3058. [bug] Cause named to terminate at startup or rndc reconfig/
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reload to fail, if a log file specified in the conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file isn't a plain file. [RT #22771]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3057. [bug] "rndc secroots" would abort after the first error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and so could miss some views. [RT #23488]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3056. [func] Added support for URI resource record. [RT #23386]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3055. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3054. [bug] Added elliptic curve support check in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding GOST OpenSSL engine detection. [RT #23485]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3053. [bug] Under a sustained high query load with a finite
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-cache-size, it was possible for cache memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be exhausted and not recovered. [RT #23371]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3052. [test] Fixed last autosign test report. [RT #23256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3051. [bug] NS records obscure DNAME records at the bottom of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone if both are present. [RT #23035]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3050. [bug] The autosign system test was timing dependent.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Wait for the initial autosigning to complete
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before running the rest of the test. [RT #23035]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3049. [bug] Save and restore the gid when creating creating
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named.pid at startup. [RT #23290]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3048. [bug] Fully separate view key management. [RT #23419]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3047. [bug] DNSKEY NODATA responses not cached fixed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validator.c. Tests added to dnssec system test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22908]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3046. [bug] Use RRSIG original TTL to compute validated RRset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and RRSIG TTL. [RT #23332]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3045. [removed] Replaced by change #3050.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3044. [bug] Hold the socket manager lock while freeing the socket.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23333]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3043. [test] Merged in the NetBSD ATF test framework (currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding version 0.12) for development of future unit tests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use configure --with-atf to build ATF internally
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or configure --with-atf=prefix to use an external
cfa64348224b66dd1c9979b809406c4d15b1c137fielding copy. [RT #23209]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3042. [bug] dig +trace could fail attempting to use IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses on systems with only IPv4 connectivity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23297]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3041. [bug] dnssec-signzone failed to generate new signatures on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ttl changes. [RT #23330]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3040. [bug] Named failed to validate insecure zones where a node
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with a CNAME existed between the trust anchor and the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding top of the zone. [RT #23338]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3039. [func] Redirect on NXDOMAIN support. [RT #23146]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3038. [bug] Install <dns/rpz.h>. [RT #23342]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3037. [doc] Update COPYRIGHT to contain all the individual
cfa64348224b66dd1c9979b809406c4d15b1c137fielding copyright notices that cover various parts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3036. [bug] Check built-in zone arguments to see if the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is re-usable or not. [RT #21914]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3035. [cleanup] Simplify by using strlcpy. [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3029. [bug] isc_netaddr_format() handle a zero sized buffer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding catch NULL pointer dereferences before they happen.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3026. [bug] lib/isc/httpd.c: check that we have enough space
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after calling grow_headerspace() and if not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding re-call grow_headerspace() until we do. [RT #22521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3025. [bug] Fixed a possible deadlock due to zone resigning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22964]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3024. [func] RTT Banding removed due to minor security increase
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but major impact on resolver latency. [RT #23310]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3023. [bug] Named could be left in an inconsistent state when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding receiving multiple AXFR response messages that were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not all TSIG-signed. [RT #23254]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23246]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3021. [bug] Change #3010 was incomplete. [RT #22296]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3020. [bug] auto-dnssec failed to correctly update the zone when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding changing the DNSKEY RRset. [RT #23232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3019. [test] Test: check apex NSEC3 records after adding DNSKEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record via UPDATE. [RT #23229]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3018. [bug] Named failed to check for the "none;" acl when deciding
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if a zone may need to be re-signed. [RT #23120]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3017. [doc] dnssec-keyfromlabel -I was not properly documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22887]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3016. [bug] rndc usage missing '-b'. [RT #22937]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3014. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3013. [bug] The DNS64 ttl was not always being set as expected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #23034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3012. [bug] Remove DNSKEY TTL change pairs before generating
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing records for any remaining DNSKEY changes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3011. [func] Change the default query timeout from 30 seconds
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 10. Allow setting this in named.conf using the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'resolver-query-timeout' option, which specifies a max
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time in seconds. 0 means 'default' and anything longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than 30 will be silently set to 30. [RT #22852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for refreshing managed-keys. [RT #22296]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3009. [bug] clients-per-query code didn't work as expected with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding particular query patterns. [RT #22972]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.8.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3008. [func] Response policy zones (RPZ) support. [RT #21726]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3007. [bug] Named failed to preserve the case of domain names in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdata which is not compressible when writing master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files. [RT #22863]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3006. [func] Allow dynamically generated TSIG keys to be preserved
cfa64348224b66dd1c9979b809406c4d15b1c137fielding across restarts of named. Initially this is for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TSIG keys generated using GSSAPI. [RT #22639]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3005. [port] Solaris: Work around the lack of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gsskrb5_register_acceptor_identity() by setting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the KRB5_KTNAME environment variable to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contents of tkey-gssapi-keytab. Also fixed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding test errors on MacOSX. [RT #22853]
f8daf64667c8f58631844cb460099333eabfe68bgregames3004. [func] DNS64 reverse support. [RT #22769]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3003. [experimental] Added update-policy match type "external",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enabling named to defer the decision of whether to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow a dynamic update to an external daemon.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Contributed by Andrew Tridgell.) [RT #22758]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22766]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3001. [func] Added a default trust anchor for the root zone, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can be switched on by setting "dnssec-validation auto;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the named.conf options. [RT #21727]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3000. [bug] More TKEY/GSS fixes:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - nsupdate can now get the default realm from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the user's Kerberos principal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - corrected gsstest compilation flags
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - improved documentation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - fixed some NULL dereferences
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22795]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2999. [func] Add GOST support (RFC 5933). [RT #20639]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the task api. [RT #22776]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2997. [func] named -V now reports the OpenSSL and libxml2 verions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it was compiled against. [RT #22687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2996. [security] Temporarily disable SO_ACCEPTFILTER support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22589]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2995. [bug] The Kerberos realm was not being correctly extracted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the signer's identity. [RT #22770]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding do not use threads on earlier versions. Also kill
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the unproven-pthreads, mit-pthreads, and ptl2 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2993. [func] Dynamically grow adb hash tables. [RT #21186]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for looking at a secure delegation. [RT #22059]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dynamic zones. [RT #22365]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2990. [bug] 'dnssec-settime -S' no longer tests prepublication
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interval validity when the interval is set to 0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22761]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2989. [func] Added support for writable DLZ zones. (Contributed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by Andrew Tridgell of the Samba project.) [RT #22629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of external DLZ drivers that can be loaded as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding shared objects at runtime rather than linked with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named. Currently this is switched on via a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compile-time option, "configure --with-dlz-dlopen".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: the syntax for configuring DLZ zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is likely to be refined in future releases.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Contributed by Andrew Tridgell of the Samba
cfa64348224b66dd1c9979b809406c4d15b1c137fielding project.) [RT #22629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2987. [func] Improve ease of configuring TKEY/GSS updates by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adding a "tkey-gssapi-keytab" option. If set,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding updates will be allowed with any key matching
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a principal in the specified keytab file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "tkey-gssapi-credential" is no longer required
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and is expected to be deprecated. (Contributed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by Andrew Tridgell of the Samba project.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2986. [func] Add new zone type "static-stub". It's like a stub
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone, but the nameserver names and/or their IP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses are statically configured. [RT #21474]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2985. [bug] Add a regression test for change #2896. [RT #21324]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2984. [bug] Don't run MX checks when the target of the MX record
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is ".". [RT #22645]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.8.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2982. [bug] Reference count dst keys. dst_key_attach() can be used
cfa64348224b66dd1c9979b809406c4d15b1c137fielding increment the reference count.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: dns_tsigkey_createfromkey() callers should now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding always call dst_key_free() rather than setting it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to NULL on success. [RT #22672]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2980. [bug] named didn't properly handle UPDATES that changed the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TTL of the NSEC3PARAM RRset. [RT #22363]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2979. [bug] named could deadlock during shutdown if two
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc stop" commands were issued at the same
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time. [RT #22108]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2978. [port] hpux: look for <devpoll.h> [RT #21919]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2977. [bug] 'nsupdate -l' report if the session key is missing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21670]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2976. [bug] named could die on exit after negotiating a GSS-TSIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key. [RT #22573]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong lock which could lead to server deadlock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22614]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2974. [bug] Some valid UPDATE requests could fail due to a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consistency check examining the existing version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the zone rather than the new version resulting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the UPDATE. [RT #22413]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2973. [bug] bind.keys.h was being removed by the "make clean"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at the end of configure resulting in build failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding where there is very old version of perl installed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Move it to "make maintainer-clean". [RT #22230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2972. [bug] win32: address windows socket errors. [RT #21906]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2971. [bug] Fixed a bug that caused journal files not to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compacted on Windows systems as a result of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-POSIX-compliant rename() semantics. [RT #22434]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2970. [security] Adding a NO DATA negative cache entry failed to clear
cfa64348224b66dd1c9979b809406c4d15b1c137fielding any matching RRSIG records. A subsequent lookup of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of NO DATA cache entry could trigger a INSIST when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unexpected RRSIG was also returned with the NO DATA
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache entry.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CVE-2010-3613, VU#706148. [RT #22288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2969. [security] Fix acl type processing so that allow-query works
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in options and view statements. Also add a new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set of tests to verify proper functioning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CVE-2010-3615, VU#510208. [RT #22418]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2968. [security] Named could fail to prove a data set was insecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before marking it as insecure. One set of conditions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that can trigger this occurs naturally when rolling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY algorithms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CVE-2010-3614, VU#837744. [RT #22309]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2967. [bug] 'host -D' now turns on debugging messages earlier.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22361]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2966. [bug] isc_print_vsnprintf() failed to check if there was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding space available in the buffer when adding a left
cfa64348224b66dd1c9979b809406c4d15b1c137fielding justified character with a non zero width,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (e.g. "%-1c"). [RT #22270]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2965. [func] Test HMAC functions using test data from RFC 2104 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC 4634. [RT #21702]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2964. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2963. [security] The allow-query acl was being applied instead of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-cache acl to cache lookups. [RT #22114]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2962. [port] win32: add more dependencies to BINDBuild.dsw.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22062]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2961. [bug] Be still more selective about the non-authoritative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answers we apply change 2748 to. [RT #22074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2960. [func] Check that named accepts non-authoritative answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21594]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2959. [func] Check that named starts with a missing masterfile.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22076]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2958. [bug] named failed to start with a missing master file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #22076]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2957. [bug] entropy_get() and entropy_getpseudo() failed to match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the API for RAND_bytes() and RAND_pseudo_bytes()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding respectively. [RT #21962]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2955. [func] Provide more detail in the recursing log. [RT #22043]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding build_sqldbinstance failure. [RT #21623]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2953. [bug] Silence spurious "expected covering NSEC3, got an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exact match" message when returning a wildcard
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no data response. [RT #21744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2952. [port] win32: named-checkzone and named-checkconf failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to initialize winsock. [RT #21932]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2951. [bug] named failed to generate a correct signed response
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a optout, delegation only zone with no secure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegations. [RT #22007]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2950. [bug] named failed to perform a SOA up to date check when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding falling back to TCP on UDP timeouts when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ixfr-from-differences was set. [RT #21595]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2949. [bug] dns_view_setnewzones() contained a memory leak if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it was called multiple times. [RT #21942]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2948. [port] MacOS: provide a mechanism to configure the test
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interfaces at reboot. See bin/tests/system/README
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for details.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2947. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2946. [doc] Document the default values for the minimum and maximum
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone refresh and retry values in the ARM. [RT #21886]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2945. [doc] Update empty-zones list in ARM. [RT #21772]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2944. [maint] Remove ORCHID prefix from built in empty zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21772]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2943. [func] Add support to load new keys into managed zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without signing immediately with "rndc loadkeys".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Add support to link keys with "dnssec-keygen -S"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and "dnssec-settime -S". [RT #21351]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2942. [contrib] zone2sqlite failed to setup the entropy sources.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21610]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2941. [bug] sdb and sdlz (dlz's zone database) failed to support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNAME at the zone apex. [RT #21610]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2940. [port] Remove connection aborted error message on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Windows. [RT #21549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2939. [func] Check that named successfully skips NSEC3 records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that fail to match the NSEC3PARAM record currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in use. [RT #21868]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2938. [bug] When generating signed responses, from a signed zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that uses NSEC3, named would use a uninitialized
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pointer if it needed to skip a NSEC3 record because
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it didn't match the selected NSEC3PARAM record for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. [RT #21868]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2937. [bug] Worked around an apparent race condition in over
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory conditions. Without this fix a DNS cache DB or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ADB could incorrectly stay in an over memory state,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding effectively refusing further caching, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding subsequently made a BIND 9 caching server unworkable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This fix prevents this problem from happening by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding polling the state of the memory context, rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding making a copy of the state, which appeared to cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a race. This is a "workaround" in that it doesn't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding solve the possible race per se, but several experiments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding proved this change solves the symptom. Also, the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding polling overhead hasn't been reported to be an issue.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This bug should only affect a caching server that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specifies a finite max-cache-size. It's also quite
cfa64348224b66dd1c9979b809406c4d15b1c137fielding likely that the bug happens only when enabling threads,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but it's not confirmed yet. [RT #21818]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2936. [func] Improved configuration syntax and multiple-view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support for addzone/delzone feature (see change
cfa64348224b66dd1c9979b809406c4d15b1c137fielding #2930). Removed "new-zone-file" option, replaced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with "allow-new-zones (yes|no)". The new-zone-file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for each view is now created automatically, with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a filename generated from a hash of the view name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding It is no longer necessary to "include" the
35c7d65bfb91baf5d930a1d287329e8b37e0235cmjc new-zone-file in named.conf; this happens
35c7d65bfb91baf5d930a1d287329e8b37e0235cmjc automatically. Zones that were not added via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc addzone" can no longer be removed with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc delzone". [RT #19447]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2935. [bug] nsupdate: improve 'file not found' error message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21871]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21871]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2933. [bug] 'dig +nsid' used stack memory after it went out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scope. This could potentially result in a unknown,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding potentially malformed, EDNS option being sent instead
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the desired NSID option. [RT #21781]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2932. [cleanup] Corrected a numbering error in the "dnssec" test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21597]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2931. [bug] Temporarily and partially disable change 2864
cfa64348224b66dd1c9979b809406c4d15b1c137fielding because it would cause infinite attempts of RRSIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries. This is an urgent care fix; we'll
cfa64348224b66dd1c9979b809406c4d15b1c137fielding revisit the issue and complete the fix later.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21710]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2930. [experimental] New "rndc addzone" and "rndc delzone" commands
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow dynamic addition and deletion of zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding To enable this feature, specify a "new-zone-file"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option at the view or options level in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Zone configuration information for the new zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will be written into that file. To make the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones persist after a restart, "include" the file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding into named.conf in the appropriate view. (Note:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This feature is not yet documented, and its syntax
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is expected to change.) [RT #19447]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2929. [bug] Improved handling of GSS security contexts:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - added LRU expiration for generated TSIGs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - added the ability to use a non-default realm
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - added new "realm" keyword in nsupdate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - limited lifetime of generated keys to 1 hour
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or the lifetime of the context (whichever is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19737]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2928. [bug] Be more selective about the non-authoritative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answer we apply change 2748 to. [RT #21594]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2927. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2926. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2925. [bug] Named failed to accept uncachable negative responses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from insecure zones. [RT #21555]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2924. [func] 'rndc secroots' dump a combined summary of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding current managed keys combined with trusted keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20904]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2923. [bug] 'dig +trace' could drop core after "connection
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timeout". [RT #21514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2922. [contrib] Update zkt to version 1.0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2921. [bug] The resolver could attempt to destroy a fetch context
cfa64348224b66dd1c9979b809406c4d15b1c137fielding too soon. [RT #19878]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to IPv4 clients. New acl 'filter-aaaa' (default any).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20840]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2917. [func] Virtual time test framework. [RT #20801]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2916. [func] Add framework to use IPv6 in tests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2915. [cleanup] Be smarter about which objects we attempt to compile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding based on configure options. [RT #21444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2914. [bug] Make the "autosign" system test more portable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20997]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2913. [func] Add pkcs#11 system tests. [RT #20784]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2912. [func] Windows clients don't like UPDATE responses that clear
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the zone section. [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2911. [bug] dnssec-signzone didn't handle out of zone records well.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21367]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2910. [func] Sanity check Kerberos credentials. [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2909. [bug] named-checkconf -p could die if "update-policy local;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was specified in named.conf. [RT #21416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2908. [bug] It was possible for re-signing to stop after removing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a DNSKEY. [RT #21384]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2907. [bug] The export version of libdns had undefined references.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2905. [port] aix: set use_atomic=yes with native compiler.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21402]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2904. [bug] When using DLV, sub-zones of the zones in the DLV,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could be incorrectly marked as insecure instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding secure leading to negative proofs failing. This was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a unintended outcome from change 2890. [RT #21392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2903. [bug] managed-keys-directory missing from namedconf.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21370]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2902. [func] Add regression test for change 2897. [RT #21040]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2900. [bug] The placeholder negative caching element was not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding properly constructed triggering a INSIST in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_ncache_towire(). [RT #21346]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2899. [port] win32: Support linking against OpenSSL 1.0.0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2898. [bug] nslookup leaked memory when -domain=value was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified. [RT #21301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2897. [bug] NSEC3 chains could be left behind when transitioning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to insecure. [RT #21040]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2896. [bug] "rndc sign" failed to properly update the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when adding a DNSKEY for publication only. [RT #21045]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2895. [func] genrandom: add support for the generation of multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files. [RT #20917]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2893. [bug] Improve managed keys support. New named.conf option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding managed-keys-directory. [RT #20924]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2892. [bug] Handle REVOKED keys better. [RT #20961]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2891. [maint] Update empty-zones list to match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding draft-ietf-dnsop-default-local-zones-13. [RT #21099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2890. [bug] Handle the introduction of new trusted-keys and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DS, DLV RRsets better. [RT #21097]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2889. [bug] Elements of the grammar where not properly reported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21046]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2888. [bug] Only the first EDNS option was displayed. [RT #21273]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2887. [bug] Report the keytag times in UTC in the .key file,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding local time is presented as a comment within the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding comment. [RT #21223]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2886. [bug] ctime() is not thread safe. [RT #21223]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2885. [bug] Improve -fno-strict-aliasing support probing in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configure. [RT #21080]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2884. [bug] Insufficient validation in dns_name_getlabelsequence().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21283]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2883. [bug] 'dig +short' failed to handle really large datasets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21113]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2882. [bug] Remove memory context from list of active contexts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before clearing 'magic'. [RT #21274]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2881. [bug] Reduce the amount of time the rbtdb write lock
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is held when closing a version. [RT #21198]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consistent. [RT #21078]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21106]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2878. [func] Incrementally write the master file after performing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a AXFR. [RT #21010]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2877. [bug] The validator failed to skip obviously mismatching
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRSIGs. [RT #21138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2876. [bug] Named could return SERVFAIL for negative responses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from unsigned zones. [RT #21131]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2875. [bug] dns_time64_fromtext() could accept non digits.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2874. [bug] Cache lack of EDNS support only after the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successfully responds to the query using plain DNS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20930]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2873. [bug] Canceling a dynamic update via the dns/client module
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could trigger an assertion failure. [RT #21133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2872. [bug] Modify dns/client.c:dns_client_createx() to only
cfa64348224b66dd1c9979b809406c4d15b1c137fielding require one of IPv4 or IPv6 rather than both.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21122]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2871. [bug] Type mismatch in mem_api.c between the definition and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the header file, causing build failure with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --enable-exportlib. [RT #21138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20877]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2868. [cleanup] Run "make clean" at the end of configure to ensure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding any changes made by configure are integrated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use --with-make-clean=no to disable. [RT #20994]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding don't like it. [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2866. [bug] Windows does not like the TSIG name being compressed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2865. [bug] memset to zero event.data. [RT #20986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21050]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #21056]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2862. [bug] nsupdate didn't default to the parent zone when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding updating DS records. [RT #20896]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2861. [doc] dnssec-settime man pages didn't correctly document the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inactivation time. [RT #21039]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2860. [bug] named-checkconf's usage was out of date. [RT #21039]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2859. [bug] When canceling validation it was possible to leak
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory. [RT #20800]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2858. [bug] RTT estimates were not being adjusted on ICMP errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20772]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2857. [bug] named-checkconf did not fail on a bad trusted key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20705]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2856. [bug] The size of a memory allocation was not always properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recorded. [RT #20927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2855. [func] nsupdate will now preserve the entered case of domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding names in update requests it sends. [RT #20928]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2854. [func] dig: allow the final soa record in a axfr response to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be suppressed, dig +onesoa. [RT #20929]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2851. [doc] nslookup.1, removed <informalexample> from the docbook
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source as it produced bad nroff. [RT #21007]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2850. [bug] If isc_heap_insert() failed due to memory shortage
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the heap would have corrupted entries. [RT #20951]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2849. [bug] Don't treat errors from the xml2 library as fatal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20945]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding README.rfc5011 into the ARM. [RT #20899]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2846. [bug] EOF on unix domain sockets was not being handled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding correctly. [RT #20731]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2844. [doc] notify-delay default in ARM was wrong. It should have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been five (5) seconds.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding creating key files if there is a chance that the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key ID will collide with an existing one after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding either of the keys has been revoked. (To override
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this in the case of dnssec-keyfromlabel, use the -y
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option. dnssec-keygen will simply create a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding different, non-colliding key, so an override is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not necessary.) [RT #20838]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2842. [func] Added "smartsign" and improved "autosign" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dnssec" regression tests. [RT #20865]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2841. [bug] Change 2836 was not complete. [RT #20883]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2840. [bug] Temporary fixed pkcs11-destroy usage check.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20760]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2839. [bug] A KSK revoked by named could not be deleted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20881]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2838. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2837. [port] Prevent Linux spurious warnings about fwrite().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20812]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2836. [bug] Keys that were scheduled to become active could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be delayed. [RT #20874]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2835. [bug] Key inactivity dates were inadvertently stored in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the private key file with the outdated tag
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "Unpublish" rather than "Inactive". This has been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fixed; however, any existing keys that had Inactive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dates set will now need to have them reset, using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'dnssec-settime -I'. [RT #20868]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2834. [bug] HMAC-SHA* keys that were longer than the algorithm
cfa64348224b66dd1c9979b809406c4d15b1c137fielding digest length were used incorrectly, leading to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interoperability problems with other DNS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementations. This has been corrected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (Note: If an oversize key is in use, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatibility is needed with an older release of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding BIND, the new tool "isc-hmac-fixup" can convert
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the key secret to a form that will work with all
cfa64348224b66dd1c9979b809406c4d15b1c137fielding versions.) [RT #20751]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20851]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to avoid redefinition in some OSs [RT 20831]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2831. [security] Do not attempt to validate or cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding out-of-bailiwick data returned with a secure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answer; it must be re-fetched from its original
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source and validated in that context. [RT #20819]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2830. [bug] Changing the OPTOUT setting could take multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding passes. [RT #20813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2829. [bug] Fixed potential node inconsistency in rbtdb.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20808]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2828. [security] Cached CNAME or DNAME RR could be returned to clients
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without DNSSEC validation. [RT #20737]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being released. [RT #20740]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was in the process of being created was not properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recorded in the zone. [RT #20786]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2824. [bug] "rndc sign" was not being run by the correct task.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20759]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2822. [bug] rbtdb.c:loadnode() could return the wrong result.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2821. [doc] Add note that named-checkconf doesn't automatically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2820. [func] Handle read access failure of OpenSSL configuration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file more user friendly (PKCS#11 engine patch).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20668]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20771]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2818. [cleanup] rndc could return an incorrect error code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a zone was not found. [RT #20767]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2816. [bug] previous_closest_nsec() could fail to return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data for NSEC3 nodes [RT #29730]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2815. [bug] Exclusively lock the task when freezing a zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19838]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2814. [func] Provide a definitive error message when a master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone is not loaded. [RT #20757]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2813. [bug] Better handling of unreadable DNSSEC key files.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20710]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2812. [bug] Make sure updates can't result in a zone with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC-only keys and NSEC3 records. [RT #20748]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
cfa64348224b66dd1c9979b809406c4d15b1c137fielding output. [RT #20733]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2810. [doc] Clarified the process of transitioning an NSEC3 zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to insecure. [RT #20746]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2809. [cleanup] Restored accidentally-deleted text in usage output
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in dnssec-settime and dnssec-revoke [RT #20739]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2808. [bug] Remove the attempt to install atomic.h from lib/isc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding atomic.h is correctly installed by the architecture
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specific subdirectories. [RT #20722]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2807. [bug] Fixed a possible ASSERT when reconfiguring zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys. [RT #20720]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0rc1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when it had changed. [RT #20703]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2805. [bug] Fixed namespace problems encountered when building
cfa64348224b66dd1c9979b809406c4d15b1c137fielding external programs using non-exported BIND9 libraries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (i.e., built without --enable-exportlib). [RT #20679]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2804. [bug] Send notifies when a zone is signed with "rndc sign"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or as a result of a scheduled key change. [RT #20700]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and genrandom under windows. [RT #20670]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2801. [func] Detect and report records that are different according
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to DNSSEC but are semantically equal according to plain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS. Apply plain DNS comparisons rather than DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding comparisons when processing UPDATE requests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signzone now removes such semantically duplicate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records prior to signing the RRset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-checkzone -r {ignore|warn|fail} (default warn)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-compilezone -r {ignore|warn|fail} (default warn)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named.conf: check-dup-records {ignore|warn|fail};
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2800. [func] Reject zones which have NS records which refer to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CNAMEs, DNAMEs or don't have address record (class IN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only). Reject UPDATEs which would cause the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to fail the above checks if committed. [RT #20678]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2799. [cleanup] Changed the "secure-to-insecure" option to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dnssec-secure-to-insecure", and "dnskey-ksk-only"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2798. [bug] Addressed bugs in managed-keys initialization
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and rollover. [RT #20683]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2797. [bug] Don't decrement the dispatch manager's maxbuffers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20613]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2796. [bug] Missing dns_rdataset_disassociate() call in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_nsec3_delnsec3sx(). [RT #20681]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2795. [cleanup] Add text to differentiate "update with no effect"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding log messages. [RT #18889]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2794. [bug] Install <isc/namespace.h>. [RT #20677]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2793. [func] Add "autosign" and "metadata" tests to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding automatic tests. [RT #19946]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2792. [func] "filter-aaaa-on-v4" can now be set in view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options (if compiled in). [RT #20635]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2791. [bug] The installation of isc-config.sh was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20667]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2790. [bug] Handle DS queries to stub zones. [RT #20440]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2788. [bug] dnssec-signzone could sign with keys that were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not requested [RT #20625]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2787. [bug] Spurious log message when zone keys were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dynamically reconfigured. [RT #20659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2786. [bug] Additional could be promoted to answer. [RT #20663]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0b3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2785. [bug] Revoked keys could fail to self-sign [RT #20652]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2784. [bug] TC was not always being set when required glue was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dropped. [RT #20655]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding buffer size of 512 or less. [RT #20654]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2782. [port] win32: use getaddrinfo() for hostname lookups.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20650]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2781. [bug] Inactive keys could be used for signing. [RT #20649]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2780. [bug] dnssec-keygen -A none didn't properly unset the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding activation date in all cases. [RT #20648]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2779. [bug] Dynamic key revocation could fail. [RT #20644]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2778. [bug] dnssec-signzone could fail when a key was revoked
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without deleting the unrevoked version. [RT #20638]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2776. [bug] Change #2762 was not correct. [RT #20647]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in dnssec-keyfromlabel. [RT #20643]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2774. [bug] Existing cache DB wasn't being reused after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reconfiguration. [RT #20629]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2773. [bug] In autosigned zones, the SOA could be signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with the KSK. [RT #20628]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2772. [security] When validating, track whether pending data was from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the additional section or not and only return it if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validates as secure. [RT #20438]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2771. [bug] dnssec-signzone: DNSKEY records could be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding corrupted when importing from key files [RT #20624]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2770. [cleanup] Add log messages to resolver.c to indicate events
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing FORMERR responses. [RT #20526]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2769. [cleanup] Change #2742 was incomplete. [RT #19589]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2767. [bug] named could crash on startup if a zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configured with auto-dnssec and there was no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key-directory. [RT #20615]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2766. [bug] isc_socket_fdwatchpoke() should only update the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding socketmgr state if the socket is not pending on a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding read or write. [RT #20603]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2765. [bug] Skip masters for which the TSIG key cannot be found.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20595]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2762. [bug] DLV validation failed with a local slave DLV zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20577]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2761. [cleanup] Enable internal symbol table for backtrace only for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding systems that are known to work. Currently, BSD
cfa64348224b66dd1c9979b809406c4d15b1c137fielding variants, Linux and Solaris are supported. [RT #20202]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2759. [doc] Add information about .jbk/.jnw files to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the ARM. [RT #20303]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2758. [bug] win32: Added a workaround for a windows 2008 bug
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that could cause the UDP client handler to shut
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down. [RT #19176]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2757. [bug] dig: assertion failure could occur in connect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timeout. [RT #20599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2755. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2754. [bug] Secure-to-insecure transitions failed when zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was signed with NSEC3. [RT #20587]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2753. [bug] Removed an unnecessary warning that could appear when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding building an NSEC chain. [RT #20589]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2752. [bug] Locking violation. [RT #20587]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2750. [bug] dig: assertion failure could occur when a server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding didn't have an address. [RT #20579]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2749. [bug] ixfr-from-differences generated a non-minimal ixfr
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for NSEC3 signed zones. [RT #20452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2748. [func] Identify bad answers from GTLD servers and treat them
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as referrals. [RT #18884]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2747. [bug] Journal roll forwards failed to set the re-signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time of RRSIGs correctly. [RT #20541]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2746. [port] hpux: address signed/unsigned expansion mismatch of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2745. [bug] configure script didn't probe the return type of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gai_strerror(3) correctly. [RT #20573]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2744. [func] Log if a query was over TCP. [RT #19961]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for a insecure delegation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0b2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2742. [cleanup] Clarify some DNSSEC-related log messages in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2741. [func] Allow the dnssec-keygen progress messages to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding suppressed (dnssec-keygen -q). Automatically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding suppress the progress messages when stdin is not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a tty. [RT #20474]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2740. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2739. [cleanup] Clean up API for initializing and clearing trust
cfa64348224b66dd1c9979b809406c4d15b1c137fielding anchors for a view. [RT #20211]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
cfa64348224b66dd1c9979b809406c4d15b1c137fielding test. [RT #20453]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2737. [func] UPDATE requests can leak existence information.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17261]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2736. [func] Improve the performance of NSEC signed zones with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding more than a normal amount of glue below a delegation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20191]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2735. [bug] dnssec-signzone could fail to read keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that were specified on the command line with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding full paths, but weren't in the current
cfa64348224b66dd1c9979b809406c4d15b1c137fielding directory. [RT #20421]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2734. [port] cygwin: arpaname did not compile. [RT #20473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2732. [func] Add optional filter-aaaa-on-v4 option, available
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if built with './configure --enable-filter-aaaa'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Filters out AAAA answers to clients connecting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via IPv4. (This is NOT recommended for general
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use.) [RT #20339]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2731. [func] Additional work on change 2709. The key parser
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will now ignore unrecognized fields when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding minor version number of the private key format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has been increased. It will reject any key with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the major version number increased. [RT #20310]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2730. [func] Have dnssec-keygen display a progress indication
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a la 'openssl genrsa' on standard error. Note
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when the first '.' is followed by a long stop
cfa64348224b66dd1c9979b809406c4d15b1c137fielding one has the choice between slow generation vs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20284]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2729. [func] When constructing a CNAME from a DNAME use the DNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TTL. [RT #20451]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signzone now warn immediately if asked to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding write into a nonexistent directory. [RT #20278]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2727. [func] The 'key-directory' option can now specify a relative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding path. [RT #20154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2726. [func] Added support for SHA-2 DNSSEC algorithms,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RSASHA256 and RSASHA512. [RT #20023]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2725. [doc] Added information about the file "managed-keys.bind"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the ARM. [RT #20235]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2724. [bug] Updates to a existing node in secure zone using NSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were failing. [RT #20448]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_base64_totext(), didn't always mark regions of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory as fully consumed after conversion. [RT #20445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2722. [bug] Ensure that the memory associated with the name of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a node in a rbt tree is not altered during the life
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the node. [RT #20431]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2721. [port] Have dst__entropy_status() prime the random number
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generator. [RT #20369]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2720. [bug] RFC 5011 trust anchor updates could trigger an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assert if the DNSKEY record was unsigned. [RT #20406]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2719. [func] Skip trusted/managed keys for unsupported algorithms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2718. [bug] The space calculations in opensslrsa_todns() were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrect. [RT #20394]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2717. [bug] named failed to update the NSEC/NSEC3 record when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the last private type record was removed as a result
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of completing the signing the zone with a key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2715. [bug] Require OpenSSL support to be explicitly disabled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2713. [bug] powerpc: atomic operations missing asm("ics") /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding __isync() calls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2712. [func] New 'auto-dnssec' zone option allows zone signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be fully automated in zones configured for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dynamic DNS. 'auto-dnssec allow;' permits a zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be signed by creating keys for it in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key-directory and using 'rndc sign <zone>'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'auto-dnssec maintain;' allows that too, plus it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding also keeps the zone's DNSSEC keys up to date
cfa64348224b66dd1c9979b809406c4d15b1c137fielding according to their timing metadata. [RT #19943]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2711. [port] win32: Add the bin/pkcs11 tools into the full
cfa64348224b66dd1c9979b809406c4d15b1c137fielding build. [RT #20372]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone option cause a zone to be signed with only KSKs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing the DNSKEY RRset, not ZSKs. This reduces
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the size of a DNSKEY answer. [RT #20340]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2709. [func] Added some data fields, currently unused, to the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding private key file format, to allow implementation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of explicit key rollover in a future release
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without impairing backward or forward compatibility.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20310]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2708. [func] Insecure to secure and NSEC3 parameter changes via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding update are now fully supported and no longer require
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defines to enable. We now no longer overload the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSEC3PARAM flag field, nor the NSEC OPT bit at the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding apex. Secure to insecure changes are controlled by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by the named.conf option 'secure-to-insecure'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Warning: If you had previously enabled support by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adding defines at compile time to BIND 9.6 you should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ensure that all changes that are in progress have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding completed prior to upgrading to BIND 9.7. BIND 9.7
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not backwards compatible.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2707. [func] dnssec-keyfromlabel no longer require engine name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be specified in the label if there is a default
cfa64348224b66dd1c9979b809406c4d15b1c137fielding engine or the -E option has been used. Also, it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now uses default algorithms as dnssec-keygen does
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20371]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2706. [bug] Loading a zone with a very large NSEC3 salt could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger an assert. [RT #20368]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2705. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2704. [bug] Serial of dynamic and stub zones could be inconsistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with their SOA serial. [RT #19387]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2703. [func] Introduce an OpenSSL "engine" argument with -E
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for all binaries which can take benefit of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding crypto hardware. [RT #20230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2701. [doc] Correction to ARM: hmac-md5 is no longer the only
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported TSIG key algorithm. [RT #18046]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2700. [doc] The match-mapped-addresses option is discouraged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2699. [bug] Missing lock in rbtdb.c. [RT #20037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2698. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding S_IFREG are defined after including <isc/stat.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20309]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2696. [bug] named failed to successfully process some valid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding acl constructs. [RT #20308]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2695. [func] DHCP/DDNS - update fdwatch code for use by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DHCP. Modify the api to isc_sockfdwatch_t (the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding callback function for isc_socket_fdwatchcreate)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to include information about the direction (read
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or write) and add isc_socket_fdwatchpoke.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20253]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2693. [port] Add some noreturn attributes. [RT #20257]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2692. [port] win32: 32/64 bit cleanups. [RT #20335]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding chain when re-signing a previously-signed zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use -u to modify NSEC3 parameters or switch
cfa64348224b66dd1c9979b809406c4d15b1c137fielding between NSEC and NSEC3. [RT #20304]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20315]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2689. [bug] Correctly handle snprintf result. [RT #20306]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to decide to fetch the destination address. [RT #20305]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Also, added warnings when revoking a ZSK, as this is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not defined by protocol (but is legal). [RT #19943]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2686. [bug] dnssec-signzone should clean the old NSEC chain when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing with NSEC3 and vice versa. [RT #20301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2684. [cleanup] dig: formalize +ad and +cd as synonyms for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding +adflag and +cdflag. [RT #19305]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the NSEC3 parameters used to sign the zone change.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20246]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2682. [bug] "configure --enable-symtable=all" failed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding build. [RT #20282]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding decoded. [RT #20269]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2679. [func] dig -k can now accept TSIG keys in named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding format. [RT #20031]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2678. [func] Treat DS queries as if "minimal-response yes;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was set. [RT #20258]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2677. [func] Changes to key metadata behavior:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - Keys without "publish" or "active" dates set will
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no longer be used for smart signing. However,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding those dates will be set to "now" by default when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a key is created; to generate a key but not use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it yet, use dnssec-keygen -G.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - New "inactive" date (dnssec-keygen/settime -I)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sets the time when a key is no longer used for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing but is still published.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - The "unpublished" date (-U) is deprecated in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding favor of "deleted" (-D).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20247]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2676. [bug] --with-export-installdir should have been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --with-export-includedir. [RT #20252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2675. [bug] dnssec-signzone could crash if the key directory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not exist. [RT #20232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0a3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2674. [bug] "dnssec-lookaside auto;" crashed if named was built
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without openssl. [RT #20231]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2673. [bug] The managed-keys.bind zone file could fail to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding load due to a spurious result from sync_keyzone()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #20045]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2672. [bug] Don't enable searching in 'host' when doing reverse
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lookups. [RT #20218]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2671. [bug] Add support for PKCS#11 providers not returning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the public exponent in RSA private keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (OpenCryptoki for instance) in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-keyfromlabel. [RT #19294]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2670. [bug] Unexpected connect failures failed to log enough
cfa64348224b66dd1c9979b809406c4d15b1c137fielding information to be useful. [RT #20205]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2669. [func] Update PKCS#11 support to support Keyper HSM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Update PKCS#11 patch to be against openssl-0.9.8i.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2668. [func] Several improvements to dnssec-* tools, including:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - dnssec-keygen and dnssec-settime can now set key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding metadata fields 0 (to unset a value, use "none")
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - dnssec-revoke sets the revocation date in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addition to the revoke bit
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - dnssec-settime can now print individual metadata
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fields instead of always printing all of them,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and can print them in unix epoch time format for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use by scripts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19942]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2667. [func] Add support for logging stack backtrace on assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure (not available for all platforms). [RT #19780]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2666. [func] Added an 'options' argument to dns_name_fromstring()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (API change from 9.7.0a2). [RT #20196]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2665. [func] Clarify syntax for managed-keys {} statement, add
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ARM documentation about RFC 5011 support. [RT #19874]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2664. [bug] create_keydata() and minimal_update() in zone.c
cfa64348224b66dd1c9979b809406c4d15b1c137fielding didn't properly check return values for some
cfa64348224b66dd1c9979b809406c4d15b1c137fielding functions. [RT #19956]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2663. [func] win32: allow named to run as a service using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "NT AUTHORITY\LocalService" as the account. [RT #19977]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding returned a misleading error code when lwresd was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down. [RT #20028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding creating lwres context. [RT #20029]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2660. [func] Add a new set of DNS libraries for non-BIND9
cfa64348224b66dd1c9979b809406c4d15b1c137fielding applications. See README.libdns. [RT #19369]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2659. [doc] Clarify dnssec-keygen doc: key name must match zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name for DNSSEC keys. [RT #19938]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2658. [bug] dnssec-settime and dnssec-revoke didn't process
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key file paths correctly. [RT #20078]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2657. [cleanup] Lower "journal file <path> does not exist, creating it"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding log level to debug 1. [RT #20058]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2656. [func] win32: add a "tools only" check box to the installer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which causes it to only install dig, host, nslookup,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nsupdate and relevant DLLs. [RT #19998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2655. [doc] Document that key-directory does not affect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2654. [bug] Improve error reporting on duplicated names for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deny-answer-xxx. [RT #20164]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2653. [bug] Treat ENGINE_load_private_key() failures as key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not found rather than out of memory. [RT #18033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2652. [func] Provide more detail about what record is being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deleted. [RT #20061]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2651. [bug] Dates could print incorrectly in K*.key files on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 64-bit systems. [RT #20076]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2650. [bug] Assertion failure in dnssec-signzone when trying
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to read keyset-* files. [RT #20075]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2649. [bug] Set the domain for forward only zones. [RT #19944]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2647. [bug] Remove unnecessary SOA updates when a new KSK is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding added. [RT #19913]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which default to 64 bits. [RT #19927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0a2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2644. [bug] Change #2628 caused a regression on some systems;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named was unable to write the PID file and would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail on startup. [RT #20001]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2643. [bug] Stub zones interacted badly with NSEC3 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19777]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2642. [bug] nsupdate could dump core on solaris when reading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding improperly formatted key files. [RT #20015]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2641. [bug] Fixed an error in parsing update-policy syntax,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding added a regression test to check it. [RT #20007]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2640. [security] A specially crafted update packet will cause named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to exit. [RT #20000]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2638. [bug] Install arpaname. [RT #19957]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19959]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2636. [func] Simplify zone signing and key maintenance with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-* tools. Major changes:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - all dnssec-* tools now take a -K option to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specify a directory in which key files will be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - DNSSEC can now store metadata indicating when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding they are scheduled to be published, activated,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding revoked or removed; these values can be set by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-keygen or overwritten by the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-settime command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - dnssec-signzone -S (for "smart") option reads key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding metadata and uses it to determine automatically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which keys to publish to the zone, use for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signing, revoke, or remove from the zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19816]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19716]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2634. [port] win32: Add support for libxml2, enable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statschannel. [RT #19773]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2633. [bug] Handle 15 bit rand() functions. [RT #19783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2632. [func] util/kit.sh: warn if documentation appears to be out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding date. [RT #19922]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19926 ]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2630. [func] Improved syntax for DDNS autoconfiguration: use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "update-policy local;" to switch on local DDNS in a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. (The "ddns-autoconf" option has been removed.)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19875]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2629. [port] Check for seteuid()/setegid(), use setresuid()/
cfa64348224b66dd1c9979b809406c4d15b1c137fielding setresgid() if not present. [RT #19932]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2628. [port] linux: Allow /var/run/named/named.pid to be opened
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at startup with reduced capabilities in operation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19884]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2627. [bug] Named aborted if the same key was included in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trusted-keys more than once. [RT #19918]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2626. [bug] Multiple trusted-keys could trigger an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #19914]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2624. [func] 'named-checkconf -p' will print out the parsed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuration. [RT #18871]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2623. [bug] Named started searches for DS non-optimally. [RT #19915]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2621. [doc] Made copyright boilerplate consistent. [RT #19833]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2620. [bug] Delay thawing the zone until the reload of it has
cfa64348224b66dd1c9979b809406c4d15b1c137fielding completed successfully. [RT #19750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2619. [func] Add support for RFC 5011, automatic trust anchor
cfa64348224b66dd1c9979b809406c4d15b1c137fielding maintenance. The new "managed-keys" statement can
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be used in place of "trusted-keys" for zones which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support this protocol. (Note: this syntax is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding expected to change prior to 9.7.0 final.) [RT #19248]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2618. [bug] The sdb and sdlz db_interator_seek() methods could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loop infinitely. [RT #19847]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2617. [bug] ifconfig.sh failed to emit an error message when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding run from the wrong location. [RT #19375]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2616. [bug] 'host' used the nameservers from resolv.conf even
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a explicit nameserver was specified. [RT #19852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2615. [bug] "__attribute__((unused))" was in the wrong place
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for ia64 gcc builds. [RT #19854]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2614. [port] win32: 'named -v' should automatically be executed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the foreground. [RT #19844]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2613. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.7.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2612. [func] Add default values for the arguments to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-keygen. Without arguments, it will now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generate a 1024-bit RSASHA1 zone-signing key,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or with the -f KSK option, a 2048-bit RSASHA1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key-signing key. [RT #19300]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2611. [func] Add -l option to dnssec-dsfromkey to generate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DLV records instead of DS records. [RT #19300]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2610. [port] sunos: Change #2363 was not complete. [RT #19796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2609. [func] Simplify the configuration of dynamic zones:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add ddns-confgen command to generate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuration text for named.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add zone option "ddns-autoconf yes;", which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causes named to generate a TSIG session key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and allow updates to the zone using that key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding - add '-l' (localhost) option to nsupdate, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causes nsupdate to connect to a locally-running
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named process using the session key generated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19284]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2608. [func] Perform post signing verification checks in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signzone. These can be disabled with -P.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The post sign verification test ensures that for each
cfa64348224b66dd1c9979b809406c4d15b1c137fielding algorithm in use there is at least one non revoked
cfa64348224b66dd1c9979b809406c4d15b1c137fielding self signed KSK key. That all revoked KSK keys are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding self signed. That all records in the zone are signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by the algorithm. [RT #19653]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2607. [bug] named could incorrectly delete NSEC3 records for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding empty nodes when processing a update request.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19749]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2606. [bug] "delegation-only" was not being accepted in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegation-only type zones. [RT #19717]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2605. [bug] Accept DS responses from delegation only zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT # 19296]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2604. [func] Add support for DNS rebinding attack prevention through
cfa64348224b66dd1c9979b809406c4d15b1c137fielding new options, deny-answer-addresses and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deny-answer-aliases. Based on contributed code from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding JD Nurmi, Google. [RT #18192]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2603. [port] win32: handle .exe extension of named-checkzone and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-comilezone argv[0] names under windows.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19767]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2602. [port] win32: fix debugging command line build of libisccfg.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19767]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2601. [doc] Mention file creation mode mask in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named manual page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2600. [doc] ARM: miscellaneous reformatting for different
cfa64348224b66dd1c9979b809406c4d15b1c137fielding page widths. [RT #19574]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2599. [bug] Address rapid memory growth when validation fails.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19654]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2598. [func] Reserve the -F flag. [RT #19657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2597. [bug] Handle a validation failure with a insecure delegation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from a NSEC3 signed master/slave zone. [RT #19464]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
cfa64348224b66dd1c9979b809406c4d15b1c137fielding long, leading to inefficient memory usage or rejecting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding newer cache entries in the worst case. [RT #19563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2594. [func] Have rndc warn if using its default configuration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file when the key file also exists. [RT #19424]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2591. [bug] named could die when processing a update in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removed_orphaned_ds(). [RT #19507]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2590. [func] Report zone/class of "update with no effect".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19626]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2588. [bug] SO_REUSEADDR could be set unconditionally after failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of bind(2) call. This should be rare and mostly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding harmless, but may cause interference with other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding processes that happen to use the same port. [RT #19642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2587. [func] Improve logging by reporting serial numbers for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when zone serial has gone backwards or unchanged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or SDB. [RT #19577]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2585. [bug] Uninitialized socket name could be referenced via a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics channel, triggering an assertion failure in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding XML rendering. [RT #19427]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2584. [bug] alpha: gcc optimization could break atomic operations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19227]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2583. [port] netbsd: provide a control to not add the compile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding date to the version string, -DNO_VERSION_DATE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2582. [bug] Don't emit warning log message when we attempt to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding remove non-existent journal. [RT #19516]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Requires MySQL 5.0.19 or later. [RT #19084]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2580. [bug] UpdateRej statistics counter could be incremented twice
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for one rejection. [RT #19476]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2579. [bug] DNSSEC lookaside validation failed to handle unknown
cfa64348224b66dd1c9979b809406c4d15b1c137fielding algorithms. [RT #19479]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2578. [bug] Changed default sig-signing-type to 65534, because
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 65535 turns out to be reserved. [RT #19477]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2577. [doc] Clarified some statistics counters. [RT #19454]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2576. [bug] NSEC record were not being correctly signed when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a zone transitions from insecure to secure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Handle such incorrectly signed zones. [RT #19114]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2575. [func] New functions dns_name_fromstring() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_tostring(), to simplify conversion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of a string to a dns_name structure and vice
cfa64348224b66dd1c9979b809406c4d15b1c137fielding versa. [RT #19451]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2574. [doc] Document nsupdate -g and -o. [RT #19351]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2573. [bug] Replacing a non-CNAME record with a CNAME record in a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding single transaction in a signed zone failed. [RT #19397]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2572. [func] Simplify DLV configuration, with a new option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dnssec-lookaside auto;" This is the equivalent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of "dnssec-lookaside . trust-anchor dlv.isc.org;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding plus setting a trusted-key for dlv.isc.org.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: The trusted key is hard-coded into named,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but is also stored in (and can be overridden
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by) $sysconfdir/bind.keys. As the ISC DLV key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rolls over it can be kept up to date by replacing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the bind.keys file with a key downloaded from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2571. [func] Add a new tool "arpaname" which translates IP addresses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18976]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2570. [func] Log the destination address the query was sent to.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19209]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2569. [func] Move journalprint, nsec3hash, and genrandom
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "make install" will put them in $sbindir. [RT #19301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2568. [bug] Report when the write to indicate a otherwise
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successful start fails. [RT #19360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2567. [bug] dst__privstruct_writefile() could miss write errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding write_public_key() could miss write errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-dsfromkey could miss write errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2566. [cleanup] Clarify logged message when an insecure DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response arrives from a zone thought to be secure:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "insecurity proof failed" instead of "not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding insecure". [RT #19400]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2565. [func] Add support for HIP record. Includes new functions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdata_hip_first(), dns_rdata_hip_next()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and dns_rdata_hip_current(). [RT #19384]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2564. [bug] Only take EDNS fallback steps when processing timeouts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19405]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2563. [bug] Dig could leak a socket causing it to wait forever
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to exit. [RT #19359]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2562. [doc] ARM: miscellaneous improvements, reorganization,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and some new content.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2559. [bug] dnssec-dsfromkey could compute bad DS records when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reading from a K* files. [RT #19357]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2558. [func] Set the ownership of missing directories created
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for pid-file if -u has been specified on the command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding line. [RT #19328]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2557. [cleanup] PCI compliance:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * new libisc log module file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * isc_dir_chroot() now also changes the working
cfa64348224b66dd1c9979b809406c4d15b1c137fielding directory to "/".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * additional INSISTs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * additional logging when files can't be removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error checks in the correct order resulting in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong error code sometimes being returned. [RT #19249]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2555. [func] dig: when emitting a hex dump also display the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding corresponding characters. [RT #19258]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2554. [bug] Validation of uppercase queries from NSEC3 zones could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail. [RT #19297]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2552. [bug] zero-no-soa-ttl-cache was not being honored.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19340]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2551. [bug] Potential Reference leak on return. [RT #19341]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19343]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2549. [port] linux: define NR_OPEN if not currently defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19344]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2548. [bug] Install iterated_hash.h. [RT #19335]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2547. [bug] openssl_link.c:mem_realloc() could reference an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding out-of-range area of the source buffer. New public
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function isc_mem_reallocate() was introduced to address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this bug. [RT #19313]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2546. [func] Add --enable-openssl-hash configure flag to use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OpenSSL (in place of internal routine) for hash
cfa64348224b66dd1c9979b809406c4d15b1c137fielding functions (MD5, SHA[12] and HMAC). [RT #18815]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2545. [doc] ARM: Legal hostname checking (check-names) is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for SRV RDATA too. [RT #19304]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2542. [doc] Update the description of dig +adflag. [RT #19290]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2541. [bug] Conditionally update dispatch manager statistics.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19247]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2539. [security] Update the interaction between recursion, allow-query,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-cache and allow-recursion. [RT #19198]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2538. [bug] cache/ADB memory could grow over max-cache-size,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding especially with threads and smaller max-cache-size
cfa64348224b66dd1c9979b809406c4d15b1c137fielding values. [RT #19240]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2537. [func] Added more statistics counters including those on socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding I/O events and query RTT histograms. [RT #18802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2536. [cleanup] Silence some warnings when -Werror=format-security is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified. [RT #19083]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2534. [func] Check NAPTR records regular expressions and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding replacement strings to ensure they are syntactically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding valid and consistent. [RT #18168]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2533. [doc] ARM: document @ (at-sign). [RT #17144]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2532. [bug] dig: check the question section of the response to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding see if it matches the asked question. [RT #18495]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2531. [bug] Change #2207 was incomplete. [RT #19098]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2530. [bug] named failed to reject insecure to secure transitions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via UPDATE. [RT #19101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2529. [cleanup] Upgrade libtool to silence complaints from recent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding version of autoconf. [RT #18657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2528. [cleanup] Silence spurious configure warning about
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --datarootdir [RT #19096]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2527. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2526. [func] New named option "attach-cache" that allows multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding views to share a single cache to save memory and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding improve lookup efficiency. Based on contributed code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from Barclay Osborn, Google. [RT #18905]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2525. [func] New logging category "query-errors" to provide detailed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding internal information about query failures, especially
cfa64348224b66dd1c9979b809406c4d15b1c137fielding about server failures. [RT #19027]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2523. [bug] Random type rdata freed by dns_nsec_typepresent().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19112]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2521. [bug] Improve epoll cross compilation support. [RT #19047]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2520. [bug] Update xml statistics version number to 2.0 as change
cfa64348224b66dd1c9979b809406c4d15b1c137fielding #2388 made the schema incompatible to the previous
cfa64348224b66dd1c9979b809406c4d15b1c137fielding version. [RT #19080]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2519. [bug] dig/host with -4 or -6 didn't work if more than two
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nameserver addresses of the excluded address family
cfa64348224b66dd1c9979b809406c4d15b1c137fielding preceded in resolv.conf. [RT #19081]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2518. [func] Add support for the new CERT types from RFC 4398.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19077]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2517. [bug] dig +trace with -4 or -6 failed when it chose a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nameserver address of the excluded address type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18843]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2516. [bug] glue sort for responses was performed even when not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding needed. [RT #19039]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19063]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a nameserver of the excluded address family.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18848]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2513. [bug] Fix windows cli build. [RT #19062]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2512. [func] Print a summary of the cached records which make up
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the negative response. [RT #18885]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18885]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2509. [bug] Specifying a fixed query source port was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19051]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2508. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2507. [func] Log the recursion quota values when killing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding oldest query or refusing to recurse due to quota.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #19022]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2506. [port] solaris: Check at configure time if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hack_shutup_pthreadonceinit is needed. [RT #19037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2505. [port] Treat amd64 similarly to x86_64 when determining
cfa64348224b66dd1c9979b809406c4d15b1c137fielding atomic operation support. [RT #19031]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2504. [bug] Address race condition in the socket code. [RT #18899]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2503. [port] linux: improve compatibility with Linux Standard
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Base. [RT #18793]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2502. [cleanup] isc_radix: Improve compliance with coding style,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding document function in <isc/radix.h>. [RT #18534]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2501. [func] $GENERATE now supports all rdata types. Multi-field
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdata types need to be quoted. See the ARM for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding details. [RT #18368]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function. [RT #18582]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18837]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.6.0rc1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2498. [bug] Removed a bogus function argument used with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_SOCKET_USE_POLLWATCH: it could cause compiler
cfa64348224b66dd1c9979b809406c4d15b1c137fielding warning or crash named with the debug 1 level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of logging. [RT #18917]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2496. [bug] Add sanity length checks to NSID option. [RT #18813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2495. [bug] Tighten RRSIG checks. [RT #18795]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding installed. [RT #18826]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2493. [bug] The linux capabilities code was not correctly cleaning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding up after itself. [RT #18767]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2492. [func] Rndc status now reports the number of cpus discovered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and the number of worker threads when running
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multi-threaded. [RT #18273]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2491. [func] Attempt to re-use a local port if we are already using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the port. [RT #18548]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is cleared when IPV6_V6ONLY is set. [RT #18785]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2489. [port] solaris: Workaround Solaris's kernel bug about
cfa64348224b66dd1c9979b809406c4d15b1c137fielding http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Define ISC_SOCKET_USE_POLLWATCH at build time to enable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this workaround. [RT #18870]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from keyset and .key files. [RT #18694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2487. [bug] Give TCP connections longer to complete. [RT #18675]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2486. [func] The default locations for named.pid and lwresd.pid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This allows the owner of the containing directory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be set, for "named -u" support, and allows there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be a permanent symbolic link in the path, for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "named -t" support. [RT #18306]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2485. [bug] Change update's the handling of obscured RRSIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records. Not all orphaned DS records were being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removed. [RT #18828]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2484. [bug] It was possible to trigger a REQUIRE failure when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adding NSEC3 proofs to the response in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query_addwildcardproof(). [RT #18828]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2483. [port] win32: chroot() is not supported. [RT #18805]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2482. [port] libxml2: support versions 2.7.* in addition
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 2.6.*. [RT #18806]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.6.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding collisions. [RT #18812]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2480. [bug] named could fail to emit all the required NSEC3
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records. [RT #18812]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2478. [bug] 'addresses' could be used uninitialized in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configure_forward(). [RT #18800]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2477. [bug] dig: the global option to print the command line is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding +cmd not print_cmd. Update the output to reflect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this. [RT #17008]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2476. [doc] ARM: improve documentation for max-journal-size and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ixfr-from-differences. [RT #15909] [RT #18541]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2475. [bug] LRU cache cleanup under overmem condition could purge
cfa64348224b66dd1c9979b809406c4d15b1c137fielding particular entries more aggressively. [RT #17628]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2474. [bug] ACL structures could be allocated with insufficient
cfa64348224b66dd1c9979b809406c4d15b1c137fielding space, causing an array overrun. [RT #18765]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2473. [port] linux: raise the limit on open files to the possible
cfa64348224b66dd1c9979b809406c4d15b1c137fielding maximum value before spawning threads; 'files'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified in named.conf doesn't seem to work with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding threads as expected. [RT #18784]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2472. [port] linux: check the number of available cpu's before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding calling chroot as it depends on "/proc". [RT #16923]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2471. [bug] named-checkzone was not reporting missing mandatory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding glue when sibling checks were disabled. [RT #18768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2470. [bug] Elements of the isc_radix_node_t could be incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding overwritten. [RT #18719]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2469. [port] solaris: Work around Solaris's select() limitations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18769]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2468. [bug] Resolver could try unreachable servers multiple times.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18739]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18302]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2465. [bug] Adb's handling of lame addresses was different
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for IPv4 and IPv6. [RT #18738]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2464. [port] linux: check that a capability is present before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trying to set it. [RT #18135]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding API and glibc hides parts of the IPv6 Advanced Socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding API as a result. This is stupid as it breaks how the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding two halves (Basic and Advanced) of the IPv6 Socket API
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were designed to be used but we have to live with it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding API. [RT #18388]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2462. [doc] Document -m (enable memory usage debugging)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option for dig. [RT #18757]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2461. [port] sunos: Change #2363 was not complete. [RT #17513]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.6.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18697]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2458. [doc] ARM: update and correction for max-cache-size.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18294]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2457. [tuning] max-cache-size is reverted to 0, the previous
cfa64348224b66dd1c9979b809406c4d15b1c137fielding default. It should be safe because expired cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding entries are also purged. [RT #18684]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address, regardless of family. They now correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding distinguish IPv4 from IPv6. [RT #18559]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2455. [bug] Stop metadata being transferred via axfr/ixfr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18639]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2453. [bug] Remove NULL pointer dereference in dns_journal_print().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18316]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2452. [func] Improve bin/test/journalprint. [RT #18316]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2451. [port] solaris: handle runtime linking better. [RT #18356]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2450. [doc] Fix lwresd docbook problem for manual page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18672]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2449. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2448. [func] Add NSEC3 support. [RT #15452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2447. [cleanup] libbind has been split out as a separate product.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2446. [func] Add a new log message about build options on startup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding A new command-line option '-V' for named is also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding provided to show this information. [RT #18645]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2445. [doc] ARM out-of-date on empty reverse zones (list includes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC1918 address, but these are not yet compiled in).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18578]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (clear DF) for UDP responses and requests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2443. [bug] win32: UDP connect() would not generate an event,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and so connected UDP sockets would never clean up.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Fix this by doing an immediate WSAConnect() rather
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than an io completion port type for UDP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2442. [bug] A lock could be destroyed twice. [RT #18626]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2441. [bug] isc_radix_insert() could copy radix tree nodes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incompletely. [RT #18573]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2440. [bug] named-checkconf used an incorrect test to determine
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if an ACL was set to none.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18559]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2438. [bug] Timeouts could be logged incorrectly under win32.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2437. [bug] Sockets could be closed too early, leading to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inconsistent states in the socket module. [RT #18298]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2435. [bug] Fixed an ACL memory leak affecting win32.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2434. [bug] Fixed a minor error-reporting bug in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2433. [tuning] Set initial timeout to 800ms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2432. [bug] More Windows socket handling improvements. Stop
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using I/O events and use IO Completion Ports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding throughout. Rewrite the receive path logic to make
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it easier to support multiple simultaneous
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requesters in the future. Add stricter consistency
cfa64348224b66dd1c9979b809406c4d15b1c137fielding checking as a compile-time option (define
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2431. [bug] Acl processing could leak memory. [RT #18323]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2430. [bug] win32: isc_interval_set() could round down to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zero if the input was less than NS_INTERVAL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nanoseconds. Round up instead. [RT #18549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2429. [doc] nsupdate should be in section 1 of the man pages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18283]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2428. [bug] dns_iptable_merge() mishandled merges of negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding tables. [RT #18409]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was set. [RT #18528]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2426. [bug] libbind: inet_net_pton() can sometimes return the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong value if excessively large net masks are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supplied. [RT #18512]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2425. [bug] named didn't detect unavailable query source addresses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at load time. [RT #18536]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2424. [port] configure now probes for a working epoll
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementation. Allow the use of kqueue,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding epoll and /dev/poll to be selected at compile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time. [RT #18277]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2423. [security] Randomize server selection on queries, so as to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding make forgery a little more difficult. Instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding always preferring the server with the lowest RTT,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pick a server with RTT within the same 128
cfa64348224b66dd1c9979b809406c4d15b1c137fielding millisecond band. [RT #18441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2422. [bug] Handle the special return value of a empty node as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if it was a NXRRSET in the validator. [RT #18447]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2421. [func] Add new command line option '-S' for named to specify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the max number of sockets. [RT #18493]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use caution: this option may not work for some
cfa64348224b66dd1c9979b809406c4d15b1c137fielding operating systems without rebuilding named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2420. [bug] Windows socket handling cleanup. Let the io
cfa64348224b66dd1c9979b809406c4d15b1c137fielding completion event send out canceled read/write
cfa64348224b66dd1c9979b809406c4d15b1c137fielding done events, which keeps us from writing to memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding we no longer have ownership of. Add debugging
cfa64348224b66dd1c9979b809406c4d15b1c137fielding socket_log() function. Rework TCP socket handling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to not leak sockets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should not be used for isc_sockettype_fdwatch sockets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18521]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18430]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2417. [bug] Connecting UDP sockets for outgoing queries could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unexpectedly fail with an 'address already in use'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #18411]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2416. [func] Log file descriptors that cause exceeding the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding internal maximum. [RT #18460]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2415. [bug] 'rndc dumpdb' could trigger various assertion failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in rbtdb.c. [RT #18455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2414. [bug] A masterdump context held the database lock too long,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing various troubles such as dead lock and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recursive lock acquisition. [RT #18311, #18456]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2412. [bug] win32: address a resource leak. [RT #18374]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at compilation time. [RT #18433]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: with changes #2469 and #2421 above, there is no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2410. [bug] Correctly delete m_versionInfo. [RT #18432]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2409. [bug] Only log that we disabled EDNS processing if we were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding subsequently successful. [RT #18029]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2408. [bug] A duplicate TCP dispatch event could be sent, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could then trigger an assertion failure in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resquery_response(). [RT #18275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2406. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2405. [cleanup] The default value for dnssec-validation was changed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "yes" in 9.5.0-P1 and all subsequent releases; this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was inadvertently omitted from CHANGES at the time.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2404. [port] hpux: files unlimited support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2403. [bug] TSIG context leak. [RT #18341]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2402. [port] Support Solaris 2.11 and over. [RT #18362]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2401. [bug] Expect to get E[MN]FILE errno internal_accept()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (from accept() or fcntl() system calls). [RT #18358]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18297]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2399. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2398. [bug] Improve file descriptor management. New,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding temporary, named.conf option reserved-sockets,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding default 512. [RT #18344]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2397. [bug] gssapi_functions had too many elements. [RT #18355]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2396. [bug] Don't set SO_REUSEADDR for randomized ports.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2395. [port] Avoid warning and no effect from "files unlimited"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on Linux when running as root. [RT #18335]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2394. [bug] Default configuration options set the limit for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding open files to 'unlimited' as described in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding documentation. [RT #18331]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2393. [bug] nested acls containing keys could trigger an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion in acl.c. [RT #18166]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2392. [bug] remove 'grep -q' from acl test script, some platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding don't support it. [RT #18253]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2391. [port] hpux: cover additional recvmsg() error codes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2390. [bug] dispatch.c could make a false warning on 'odd socket'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18301].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2389. [bug] Move the "working directory writable" check to after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the ns_os_changeuser() call. [RT #18326]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2388. [bug] Avoid using tables for layout purposes in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics XSL [RT #18159].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2387. [bug] Silence compiler warnings in lib/isc/radix.c.
35c7d65bfb91baf5d930a1d287329e8b37e0235cmjc [RT #18147] [RT #18258]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2386. [func] Add warning about too small 'open files' limit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18269]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2385. [bug] A condition variable in socket.c could leak in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rare error handling [RT #17968].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2384. [security] Fully randomize UDP query ports to improve
cfa64348224b66dd1c9979b809406c4d15b1c137fielding forgery resilience. [RT #17949, #18098]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2383. [bug] named could double queries when they resulted in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SERVFAIL due to overkilling EDNS0 failure detection.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18182]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2381. [port] dlz/mysql: support multiple install layouts for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding mysql. <prefix>/include/{,mysql/}mysql.h and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <prefix>/lib/{,mysql/}. [RT #18152]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
cfa64348224b66dd1c9979b809406c4d15b1c137fielding proofs which, in turn, caused validation failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for insecure zones immediately below a secure zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the server was authoritative for. [RT #18112]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TLDs and supported RRs with TTLs [RT #17972]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18169]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2376. [bug] Change #2144 was not complete.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2375. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2374. [bug] "blackhole" ACLs could cause named to segfault due
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to some uninitialized memory. [RT #18095]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2373. [bug] Default values of zone ACLs were re-parsed each time a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding new zone was configured, causing an overconsumption
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory. [RT #18092]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2371. [doc] Add +nsid option to dig man page. [RT #18039]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2370. [bug] "rndc freeze" could trigger an assertion in named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when called on a nonexistent zone. [RT #18050]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2369. [bug] libbind: Array bounds overrun on read in bitncmp().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18054]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2368. [port] Linux: use libcap for capability management if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding possible. [RT #18026]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2367. [bug] Improve counting of dns_resstatscounter_retry
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #18030]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2366. [bug] Adb shutdown race. [RT #18021]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2365. [bug] Fix a bug that caused dns_acl_isany() to return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding spurious results. [RT #18000]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2364. [bug] named could trigger a assertion when serving a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding malformed signed zone. [RT #17828]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17513]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2362. [cleanup] Make "rrset-order fixed" a compile-time option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding settable by "./configure --enable-fixed-rrset".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Disabled by default. [RT #17977]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2361. [bug] "recursion" statistics counter could be counted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multiple times for a single query. [RT #17990]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2360. [bug] Fix a condition where we release a database version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (which may acquire a lock) while holding the lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2359. [bug] Fix NSID bug. [RT #17942]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2358. [doc] Update host's default query description. [RT #17934]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2357. [port] Don't use OpenSSL's engine support in versions before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OpenSSL 0.9.7f. [RT #17922]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2356. [bug] Built in mutex profiler was not scalable enough.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17436]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2355. [func] Extend the number statistics counters available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2354. [bug] Failed to initialize some rdatasetheader_t elements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2353. [func] Add support for Name Server ID (RFC 5001).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'dig +nsid' requests NSID from server.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'request-nsid yes;' causes recursive server to send
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NSID requests to upstream servers. Server responds
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to NSID requests with the string configured by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'server-id' option. [RT #17091]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2352. [bug] Various GSS_API fixups. [RT #17729]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2350. [port] win32: IPv6 support. [RT #17797]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2349. [func] Provide incremental re-signing support for secure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dynamic zones. [RT #1091]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Documentation is in the new README.pkcs11 file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New tool, dnssec-keyfromlabel, which takes the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding label of a key pair in a HSM and constructs a DNS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key pair for use by named and dnssec-signzone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16844]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2347. [bug] Delete now traverses the RB tree in the canonical
cfa64348224b66dd1c9979b809406c4d15b1c137fielding order. [RT #17451]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2346. [func] Memory statistics now cover all active memory contexts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in increased detail. [RT #17580]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2345. [bug] named-checkconf failed to detect when forwarders
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were set at both the options/view level and in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a root zone. [RT #17671]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2344. [bug] Improve "logging{ file ...; };" documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17888]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2343. [bug] (Seemingly) duplicate IPv6 entries could be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding created in ADB. [RT #17837]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2341. [bug] libbind: add missing -I../include for off source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding tree builds. [RT #17606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2340. [port] openbsd: interface configuration. [RT #17700]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2339. [port] tru64: support for libbind. [RT #17589]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2338. [bug] check_ds() could be called with a non DS rdataset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17598]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2336. [func] If "named -6" is specified then listen on all IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interfaces if there are not listen-on-v6 clauses in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2335. [port] sunos: libbind and *printf() support for long long.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17513]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bug in fromstruct_txt(). [RT #17609]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2333. [bug] Fix off by one error in isc_time_nowplusinterval().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17608]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2332. [contrib] query-loc-0.4.0. [RT #17602]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2331. [bug] Failure to regenerate any signatures was not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reported nor being past back to the UPDATE client.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17570]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2330. [bug] Remove potential race condition when handling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding over memory events. [RT #17572]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding WARNING: API CHANGE: over memory callback
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function now needs to call isc_mem_waterack().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding See <isc/mem.h> for details.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2329. [bug] Clearer help text for dig's '-x' and '-i' options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2327. [bug] It was possible to dereference a NULL pointer in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rbtdb.c. Implement dead node processing in zones as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding we do for caches. [RT #17312]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2326. [bug] It was possible to trigger a INSIST in the acache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding processing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2325. [port] Linux: use capset() function if available. [RT #17557]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2323. [port] tru64: namespace clash. [RT #17547]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2322. [port] MacOS: work around the limitation of setrlimit()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for RLIMIT_NOFILE. [RT #17526]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2321. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2320. [func] Make statistics counters thread-safe for platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that support certain atomic operations. [RT #17466]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2319. [bug] Silence Coverity warnings in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2318. [port] sunos fixes for libbind. [RT #17514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17513]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2315. [bug] Used incorrect address family for mapped IPv4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses in acl.c. [RT #17519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2314. [bug] Uninitialized memory use on error path in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2313. [cleanup] Silence Coverity warnings. Handle private stacks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17447] [RT #17478]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17458]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2311. [bug] IPv6 addresses could match IPv4 ACL entries and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding vice versa. [RT #17462]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2310. [bug] dig, host, nslookup: flush stdout before emitting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding debug/fatal messages. [RT #17501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17495]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2306. [bug] Remove potential race from lib/dns/resolver.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17470]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2305. [security] inet_network() buffer overflow. CVE-2008-0122.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2304. [bug] Check returns from all dns_rdata_tostruct() calls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17460]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17471]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2301. [bug] Remove resource leak and fix error messages in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2300. [bug] Fixed failure to close open file in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2299. [bug] Remove unnecessary NULL check in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2298. [bug] isc_mutex_lock() failure not caught in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2297. [bug] isc_entropy_createfilesource() failure not caught in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2296. [port] Allow docbook stylesheet location to be specified to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configure. [RT #17457]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17459]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2294. [func] Allow the experimental statistics channels to have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multiple connections and ACL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: the stats-server and stats-server-v6 options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available in the previous beta releases are replaced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with the generic statistics-channels statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2293. [func] Add ACL regression test. [RT #17375]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2292. [bug] Log if the working directory is not writable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17312]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure to set PR_SET_DUMPABLE. [RT #17312]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2290. [bug] Let AD in the query signal that the client wants AD
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set in the response. [RT #17301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2289. [func] named-checkzone now reports the out-of-zone CNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found. [RT #17309]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2288. [port] win32: mark service as running when we have finished
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loading. [RT #17441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2286. [func] Allow a TCP connection to be used as a weak
cfa64348224b66dd1c9979b809406c4d15b1c137fielding authentication method for reverse zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New update-policy methods tcp-self and 6to4-self.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17378]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2285. [func] Test framework for client memory context management.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17377]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2284. [bug] Memory leak in UPDATE prerequisite processing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17377]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2283. [bug] TSIG keys were not attaching to the memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding context. TSIG keys should use the rings
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory context rather than the clients memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding context. [RT #17377]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2281. [bug] Attempts to use undefined acls were not being logged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17307]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2280. [func] Allow the experimental http server to be reached
cfa64348224b66dd1c9979b809406c4d15b1c137fielding over IPv6 as well as IPv4. [RT #17332]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to protect applications from receiving spurious
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIGPIPE signals when using the resolver.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2278. [bug] win32: handle the case where Windows returns no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding search list or DNS suffix. [RT #17354]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2277. [bug] Empty zone names were not correctly being caught at
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the post parse checks. [RT #17357]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2276. [bug] Install <dst/gssapi.h>. [RT #17359]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2275. [func] Add support to dig to perform IXFR queries over UDP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17235]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2274. [func] Log zone transfer statistics. [RT #17336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2273. [bug] Adjust log level to WARNING when saving inconsistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding stub/slave master and journal files. [RT #17279]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17262]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2271. [bug] Fix a memory leak in http server code [RT #17100]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2270. [bug] dns_db_closeversion() version->writer could be reset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before it is tested. [RT #17290]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2267. [bug] Radix tree node_num value could be set incorrectly,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing positive ACL matches to look like negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ones. [RT #17311]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2266. [bug] client.c:get_clientmctx() returned the same mctx
cfa64348224b66dd1c9979b809406c4d15b1c137fielding once the pool of mctx's was filled. [RT #17218]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2265. [bug] Test that the memory context's basic_table is non NULL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before freeing. [RT #17265]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2264. [bug] Server prefix length was being ignored. [RT #17308]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2263. [bug] "named-checkconf -z" failed to set default value
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for "check-integrity". [RT #17306]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2262. [bug] Error status from all but the last view could be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lost. [RT #17292]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2260. [bug] Reported wrong clients-per-query when increasing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding value. [RT #17236]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2259. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a7 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17241]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2257. [bug] win32: Use the full path to vcredist_x86.exe when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding calling it. [RT #17222]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2256. [bug] win32: Correctly register the installation location of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2254. [bug] timer.c:dispatch() failed to lock timer->lock
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when reading timer->idle allowing it to see
cfa64348224b66dd1c9979b809406c4d15b1c137fielding intermediate values as timer->idle was reset by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_timer_touch(). [RT #17243]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2253. [func] "max-cache-size" defaults to 32M.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "max-acache-size" defaults to 16M.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2252. [bug] Fixed errors in sortlist code [RT #17216]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2251. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2250. [func] New flag 'memstatistics' to state whether the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory statistics file should be written or not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Additionally named's -m option will cause the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics file to be written. [RT #17113]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2249. [bug] Only set Authentic Data bit if client requested
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSSEC, per RFC 3655 [RT #17175]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2247. [doc] Sort doc/misc/options. [RT #17067]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2246. [bug] Make the startup of test servers (ans.pl) more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding robust. [RT #17147]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2245. [bug] Validating lack of DS records at trust anchors wasn't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding working. [RT #17151]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2244. [func] Allow the check of nameserver names against the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SOA MNAME field to be disabled by specifying
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'notify-to-soa yes;'. [RT #17073]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2243. [func] Configuration files without a newline at the end now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parse without error. [RT #17120]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
cfa64348224b66dd1c9979b809406c4d15b1c137fielding library could require a source of random data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17127]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a number of INSIST()s into plain fatal() errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which report the triggering result code.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The 'key' command wasn't disabling GSS-TSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2238. [bug] It was possible to trigger a REQUIRE when a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation was canceled. [RT #17106]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2236. [bug] dnssec-signzone failed to preserve the case of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of wildcard owner names. [RT #17085]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2233. [func] Add support for O(1) ACL processing, based on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding radix tree code originally written by Kevin
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Brintnall. [RT #16288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2232. [bug] dns_adb_findaddrinfo() could fail and return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_R_SUCCESS. [RT #17137]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17088]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2230. [bug] We could INSIST reading a corrupted journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17132]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2229. [bug] Null pointer dereference on query pool creation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #17133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2228. [contrib] contrib: Change 2188 was incomplete.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2227. [cleanup] Tidied up the FAQ. [RT #17121]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2226. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2225. [bug] More support for systems with no IPv4 addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17111]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2224. [bug] Defer journal compaction if a xfrin is in progress.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17119]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2223. [bug] Make a new journal when compacting. [RT #17119]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2222. [func] named-checkconf now checks server key references.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17097]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2221. [bug] Set the event result code to reflect the actual
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record turned to caller when a cache update is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rejected due to a more credible answer existing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17017]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2220. [bug] win32: Address a race condition in final shutdown of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the Windows socket code. [RT #17028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2219. [bug] Apply zone consistency checks to additions, not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding removals, when updating. [RT #17049]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16976]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2217. [func] Adjust update log levels. [RT #17092]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2216. [cleanup] Fix a number of errors reported by Coverity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17094]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2214. [bug] Deregister OpenSSL lock callback when cleaning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding up. Reorder OpenSSL cleanup so that RAND_cleanup()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is called before the locks are destroyed. [RT #17098]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2213. [bug] SIG0 diagnostic failure messages were looking at the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong status code. [RT #17101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2212. [func] 'host -m' now causes memory statistics and active
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory to be printed at exit. [RT 17028]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2211. [func] Update "dynamic update temporarily disabled" message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #17065]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2210. [bug] Deleting class specific records via UPDATE could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail. [RT #17074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2209. [port] osx: linking against user supplied static OpenSSL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding libraries failed as the system ones were still being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found. [RT #17078]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2208. [port] win32: make sure both build methods produce the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding same output. [RT #17058]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2207. [port] Some implementations of getaddrinfo() fail to set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ai_canonname correctly. [RT #17061]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a6 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2206. [security] "allow-query-cache" and "allow-recursion" now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cross inherit from each other.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If allow-query-cache is not set in named.conf then
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-recursion is used if set, otherwise allow-query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is used if set, otherwise the default (localnets;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding localhost;) is used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If allow-recursion is not set in named.conf then
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-cache is used if set, otherwise allow-query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is used if set, otherwise the default (localnets;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding localhost;) is used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16987]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2204. [bug] "rndc flushname name unknown-view" caused named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to crash. [RT #16984]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2203. [security] Query id generation was cryptographically weak.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT # 16915]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2202. [security] The default acls for allow-query-cache and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-recursion were not being applied. [RT #16960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2201. [bug] The build failed in a separate object directory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16943]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2200. [bug] The search for cached NSEC records was stopping to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding early leading to excessive DLV queries. [RT #16930]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2199. [bug] win32: don't call WSAStartup() while loading dlls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16911]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2198. [bug] win32: RegCloseKey() could be called when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RegOpenKeyEx() failed. [RT #16911]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2197. [bug] Add INSIST to catch negative responses which are
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not setting the event result code appropriately.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16909]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2196. [port] win32: yield processor while waiting for once to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to complete. [RT #16958]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2195. [func] dnssec-keygen now defaults to nametype "ZONE"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when generating DNSKEYs. [RT #16954]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2194. [bug] Close journal before calling 'done' in xfrin.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a5 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2193. [port] win32: BINDInstall.exe is now linked statically.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16906]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2192. [port] win32: use vcredist_x86.exe to install Visual
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Studio's redistributable dlls if building with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Visual Stdio 2005 or later.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2191. [func] named-checkzone now allows dumping to stdout (-).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-checkconf now has -h for help.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-checkzone now has -h for help.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc now has -h for help.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Better handling of '-?' for usage summaries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16707]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2190. [func] Make fallback to plain DNS from EDNS due to timeouts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding more visible. New logging category "edns-disabled".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16871]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2189. [bug] Handle socket() returning EINTR. [RT #15949]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2188. [contrib] queryperf: autoconf changes to make the search for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding libresolv or libbind more robust. [RT #16299]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2187. [bug] query_addds(), query_addwildcardproof() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query_addnxrrsetnsec() should take a version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding argument. [RT #16368]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2186. [port] cygwin: libbind: check for struct sockaddr_storage
cfa64348224b66dd1c9979b809406c4d15b1c137fielding independently of IPv6. [RT #16482]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2185. [port] sunos: libbind: check for ssize_t, memmove() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memchr(). [RT #16463]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2184. [bug] bind9.xsl.h didn't build out of the source tree.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16830]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2183. [bug] dnssec-signzone didn't handle offline private keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding well. [RT #16832]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could return ISC_R_SUCCESS when they ran out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory. [RT #16365]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2180. [cleanup] Remove bit test from 'compress_test' as they
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are no longer needed. [RT #16497]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2179. [func] 'rndc command zone' will now find 'zone' if it is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unique to all the views. [RT #16821]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2178. [bug] 'rndc reload' of a slave or stub zone resulted in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a reference leak. [RT #16867]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2177. [bug] Array bounds overrun on read (rcodetext) at
cfa64348224b66dd1c9979b809406c4d15b1c137fielding debug level 10+. [RT #16798]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2176. [contrib] dbus update to handle race condition during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding initialization (Bugzilla 235809). [RT #16842]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2175. [bug] win32: windows broadcast condition variable support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was broken. [RT #16592]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2174. [bug] I/O errors should always be fatal when reading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding master files. [RT #16825]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2173. [port] win32: When compiling with MSVS 2005 SP1 we also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a4 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2172. [bug] query_addsoa() was being called with a non zone db.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16834]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2171. [bug] Handle breaks in DNSSEC trust chains where the parent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers are not DS aware (DS queries to the parent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding return a referral to the child).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2170. [func] Add acache processing to test suite. [RT #16711]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2169. [bug] host, nslookup: when reporting NXDOMAIN report the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding given name and not the last name searched for.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16763]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2168. [bug] nsupdate: in non-interactive mode treat syntax errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as fatal errors. [RT #16785]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2167. [bug] When re-using a automatic zone named failed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding attach it to the new view. [RT #16786]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2166. [bug] When running in batch mode, dig could misinterpret
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a server address as a name to be looked up, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unexpected output. [RT #16743]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2165. [func] Allow the destination address of a query to determine
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if we will answer the query or recurse.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-on, allow-recursion-on and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query-cache-on. [RT #16291]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2164. [bug] The code to determine how named-checkzone /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-compilezone was called failed under windows.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16764]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2163. [bug] If only one of query-source and query-source-v6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified a port the query pools code broke (change
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 2129). [RT #16768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2162. [func] Allow "rrset-order fixed" to be disabled at compile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time. [RT #16665]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2161. [bug] Fix which log messages are emitted for 'rndc flush'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16698]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from getifaddrs(). [RT #16708]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2159. [bug] Array bounds overrun in acache processing. [RT #16710]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2158. [bug] ns_client_isself() failed to initialize key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding leading to a REQUIRE failure. [RT #16688]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2157. [func] dns_db_transfernode() created. [RT #16685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolver.c:validated() and resolver.c:cache_name().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Fix a memory leak in rbtdb.c:free_noqname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Make lookup.c:lookup_find() robust against
cfa64348224b66dd1c9979b809406c4d15b1c137fielding event leaks. [RT #16685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matched in acls by omitting the scope. [RT #16599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2153. [bug] nsupdate could leak memory. [RT #16691]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2152. [cleanup] Use sizeof(buf) instead of fixed number in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dighost.c:get_trusted_key(). [RT #16678]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2151. [bug] Missing newline in usage message for journalprint.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16679]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2150. [bug] 'rrset-order cyclic' uniformly distribute the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding starting point for the first response for a given
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRset. [RT #16655]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2149. [bug] isc_mem_checkdestroyed() failed to abort on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there were still active memory contexts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16672]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2148. [func] Add positive logging for rndc commands. [RT #14623]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2147. [bug] libbind: remove potential buffer overflow from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SO_BSDCOMPAT" message. [RT #16641]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2145. [bug] Check DS/DLV digest lengths for known digests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16622]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16619]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2143. [bug] We failed to restart the IPv6 client when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding kernel failed to return the destination the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding packet was sent to. [RT #16613]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2142. [bug] Handle master files with a modification time that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matches the epoch. [RT #16612]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding equivalent of LDH checks). [RT #16609]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2140. [bug] libbind: missing unlock on pthread_key_create()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failures. [RT #16654]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2139. [bug] dns_view_find() was being called with wrong type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in adb.c. [RT #16670]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2138. [bug] Lock order reversal in resolver.c. [RT #16653]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2137. [port] Mips little endian and/or mips 64 bit are now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported for atomic operations. [RT #16648]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2136. [bug] nslookup/host looped if there was no search list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and the host didn't exist. [RT #16657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2134. [func] Additional statistics support. [RT #16666]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2133. [port] powerpc: Support both IBM and MacOS Power PC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assembler syntaxes. [RT #16647]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2132. [bug] Missing unlock on out of memory in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_dispatchmgr_setudp().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2130. [func] Log if CD or DO were set. [RT #16640]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2129. [func] Provide a pool of UDP sockets for queries to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding made over. See use-queryport-pool, queryport-pool-ports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and queryport-pool-updateinterval. [RT #16415]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2126. [security] Serialize validation of type ANY responses. [RT #16555]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was defined. [RT #16574]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2124. [security] It was possible to dereference a freed fetch
cfa64348224b66dd1c9979b809406c4d15b1c137fielding context. [RT #16584]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.5.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2123. [func] Use Doxygen to generate internal documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2122. [func] Experimental http server and statistics support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for named via xml.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
cfa64348224b66dd1c9979b809406c4d15b1c137fielding second timeout. [RT #16553]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2120. [doc] Fix markup on nsupdate man page. [RT #16556]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2119. [compat] libbind: allow res_init() to succeed enough to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding return the default domain even if it was unable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to allocate memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2118. [bug] Handle response with long chains of domain name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compression pointers which point to other compression
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pointers. [RT #16427]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which could lead to validation failures. named didn't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding handle negative DS responses that were in the process
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of being validated. Check CNAME bit before accepting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NODATA proof. To be able to ignore a child NSEC there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding must be SOA (and NS) set in the bitmap. [RT #16399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2116. [bug] 'rndc reload' could cause the cache to continually
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be cleaned. [RT #16401]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2115. [bug] 'rndc reconfig' could trigger a INSIST if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding number of masters for a zone was reduced. [RT #16444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2114. [bug] dig/host/nslookup: searches for names with multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding labels were failing. [RT #16447]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2113. [bug] nsupdate: if a zone is specified it should be used
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for server discover. [RT #16455]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2112. [security] Warn if weak RSA exponent is used. [RT #16460]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2111. [bug] Fix a number of errors reported by Coverity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16507]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
cfa64348224b66dd1c9979b809406c4d15b1c137fielding priming queries. [RT #16491]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2108. [func] DHCID support. [RT #16456]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2106. [func] 'rndc status' now reports named's version. [RT #16426]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2105. [func] GSS-TSIG support (RFC 3645).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2104. [port] Fix Solaris SMF error message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2103. [port] Add /usr/sfw to list of locations for OpenSSL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding under Solaris.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2102. [port] Silence Solaris 10 warnings.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2101. [bug] OpenSSL version checks were not quite right.
0d24ea1c99d2267096caaf0843c7e5a1ac6b7c0bmjc [RT #16476]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2100. [port] win32: copy libeay32.dll to Build\Debug.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Copy Debug\named-checkzone to Debug\named-compilezone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2099. [port] win32: more manifest issues.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2098. [bug] Race in rbtdb.c:no_references(), which occasionally
cfa64348224b66dd1c9979b809406c4d15b1c137fielding triggered an INSIST failure about the node lock
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reference. [RT #16411]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2097. [bug] named could reference a destroyed memory context
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after being reloaded / reconfigured. [RT #16428]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2096. [bug] libbind: handle applications that fail to detect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding res_init() failures better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding net_cidr_ntop_ipv6(). [RT #16388]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2094. [contrib] Update named-bootconf. [RT #16404]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2093. [bug] named-checkzone -s was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2092. [bug] win32: dig, host, nslookup. Use registry config
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if resolv.conf does not exist or no nameservers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listed. [RT #15877]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2091. [port] dighost.c: race condition on cleanup. [RT #16417]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2090. [port] win32: Visual C++ 2005 command line manifest support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16417]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2089. [security] Raise the minimum safe OpenSSL versions to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prior to these have known security flaws which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are (potentially) exploitable in named. [RT #16391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2088. [security] Change the default RSA exponent from 3 to 65537.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2086. [port] libbind: FreeBSD now has get*by*_r() functions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16403]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2085. [doc] win32: added index.html and README to zip. [RT #16201]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2084. [contrib] dbus update for 9.3.3rc2.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2083. [port] win32: Visual C++ 2005 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2082. [doc] Document 'cache-file' as a test only option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2080. [port] libbind: res_init.c did not compile on older versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of Solaris. [RT #16363]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2079. [bug] The lame cache was not handling multiple types
cfa64348224b66dd1c9979b809406c4d15b1c137fielding correctly. [RT #16361]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2078. [bug] dnssec-checkzone output style "default" was badly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named. It is now called "relative". [RT #16326]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding complete signed zone. [RT #16326]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2076. [bug] Several files were missing #include <config.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing build failures on OSF. [RT #16341]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2075. [bug] The spillat timer event hander could leak memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16357]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_request_createraw2() and dns_request_createraw3()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to send multiple UDP requests. [RT #16349]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2073. [bug] Incorrect semantics check for update policy "wildcard".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16353]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2072. [bug] We were not generating valid HMAC SHA digests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16320]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2071. [port] Test whether gcc accepts -fno-strict-aliasing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16324]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2070. [bug] The remote address was not always displayed when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reporting dispatch failures. [RT #16315]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2069. [bug] Cross compiling was not working. [RT #16330]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2068. [cleanup] Lower incremental tuning message to debug 1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16319]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2067. [bug] 'rndc' could close the socket too early triggering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a INSIST under Windows. [RT #16317]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2066. [security] Handle SIG queries gracefully. [RT #16300]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2065. [bug] libbind: probe for HPUX prototypes for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding endprotoent_r() and endservent_r(). [RT 16313]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2063. [bug] Change #1955 introduced a bug which caused the first
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'rndc flush' call to not free memory. [RT #16244]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2062. [bug] 'dig +nssearch' was reusing a buffer before it had
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been returned by the socket code. [RT #16307]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2061. [bug] Accept expired wildcard message reversed. [RT #16296]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2060. [bug] Enabling DLZ support could leave views partially
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configured. [RT #16295]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2059. [bug] Search into cache rbtdb could trigger an INSIST
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure while cleaning up a stale rdataset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16292]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2058. [bug] Adjust how we calculate rtt estimates in the presence
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of authoritative servers that drop EDNS and/or CD
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requests. Also fallback to EDNS/512 and plain DNS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding faster for zones with less than 3 servers. [RT #16187]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2057. [bug] Make setting "ra" dependent on both allow-query-cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and allow-recursion. [RT #16290]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2056. [bug] dig: ixfr= was not being treated case insensitively
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at all times. [RT #15955]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2055. [bug] Missing goto after dropping multicast query.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15944]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2054. [port] freebsd: do not explicitly link against -lpthread.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16170]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2052. [bug] 'rndc' improve connect failed message to report
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the failing address. [RT #15978]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2051. [port] More strtol() fixes. [RT #16249]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2050. [bug] Parsing of NSAP records was not case insensitive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16287]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2049. [bug] Restore SOA before AXFR when falling back from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a attempted IXFR when transferring in a zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Allow a initial SOA query before attempting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a AXFR to be requested. [RT #16156]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2048. [bug] It was possible to loop forever when using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding avoid-v4-udp-ports / avoid-v6-udp-ports when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the OS always returned the same local port.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16182]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2047. [bug] Failed to initialize the interface flags to zero.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16245]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cleanup [RT #16247].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2045. [func] Use lock buckets for acache entries to limit memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consumption. [RT #16183]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2044. [port] Add support for atomic operations for Itanium.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16179]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2043. [port] nsupdate/nslookup: Force the flushing of the prompt
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for interactive sessions. [RT #16148]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2042. [bug] named-checkconf was incorrectly rejecting the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding logging category "config". [RT #16117]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set of libraries to be linked. [RT #16129]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2040. [bug] rbtdb no_references() could trigger an INSIST
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure with --enable-atomic. [RT #16022]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2039. [func] Check that all buffers passed to the socket code
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have been retrieved when the socket event is freed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16122]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2038. [bug] dig/nslookup/host was unlinking from wrong list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when handling errors. [RT #16122]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2037. [func] When unlinking the first or last element in a list
cfa64348224b66dd1c9979b809406c4d15b1c137fielding check that the list head points to the element to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be unlinked. [RT #15959]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16075]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2035. [func] Make falling back to TCP on UDP refresh failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding optional. Default "try-tcp-refresh yes;" for BIND 8
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatibility. [RT #16123]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2033. [bug] We weren't creating multiple client memory contexts
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on demand as expected. [RT #16095]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2031. [bug] Emit a error message when "rndc refresh" is called on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a non slave/stub zone. [RT # 16073]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2030. [bug] We were being overly conservative when disabling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding openssl engine support. [RT #16030]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2029. [bug] host printed out the server multiple times when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified on the command line. [RT #15992]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2028. [port] linux: socket.c compatibility for old systems.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16015]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2027. [port] libbind: Solaris x86 support. [RT #16020]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2026. [bug] Rate limit the two recursive client exceeded messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #16044]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2025. [func] Update "zone serial unchanged" message. [RT #16026]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2024. [bug] named emitted spurious "zone serial unchanged"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages on reload. [RT #16027]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2023. [bug] "make install" should create ${localstatedir}/run and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ${sysconfdir} if they do not exist. [RT #16033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2022. [bug] If dnssec validation is disabled only assert CD if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CD was requested. [RT #16037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2019. [tuning] Reduce the amount of work performed per quantum
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when cleaning the cache. [RT #15986]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2018. [bug] Checking if the HMAC MD5 private file was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15960]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2017. [bug] allow-query default was not correct. [RT #15946]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2016. [bug] Return a partial answer if recursion is not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allowed but requested and we had the answer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the original qname. [RT #15945]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2015. [cleanup] use-additional-cache is now acache-enable for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consistency. Default acache-enable off in BIND 9.4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as it requires memory usage to be configured.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding It may be enabled by default in BIND 9.5 once we
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have more experience with it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2014. [func] Statistics about acache now recorded and sent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to log. [RT #15976]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses more gracefully. [RT #15941]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2012. [func] Don't insert new acache entries if acache is full.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2011. [func] dnssec-signzone can now update the SOA record of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the signed zone, either as an increment or as the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding system time(). [RT #15633]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2010. [placeholder] rt15958
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2009. [bug] libbind: Coverity fixes. [RT #15808]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2008. [func] It is now possible to enable/disable DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation from rndc. This is useful for the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding mobile hosts where the current connection point
cfa64348224b66dd1c9979b809406c4d15b1c137fielding breaks DNSSEC (firewall/proxy). [RT #15592]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc validation newstate [view]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2007. [func] It is now possible to explicitly enable DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation. default dnssec-validation no; to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be changed to yes in 9.5.0. [RT #15674]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2006. [security] Allow-query-cache and allow-recursion now default
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the built in acls "localnets" and "localhost".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This is being done to make caching servers less
cfa64348224b66dd1c9979b809406c4d15b1c137fielding attractive as reflective amplifying targets for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding spoofed traffic. This still leave authoritative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers exposed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding The best fix is for full BCP 38 deployment to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding remove spoofed traffic.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2005. [bug] libbind: Retransmission timeouts should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding based on which attempt it is to the nameserver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and not the nameserver itself. [RT #13548]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2004. [bug] dns_tsig_sign() could pass a NULL pointer to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dst_context_destroy() when cleaning up after a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #15835]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2003. [bug] libbind: The DNS name/address lookup functions could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding occasionally follow a random pointer due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structures not being completely zeroed. [RT #15806]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2002. [bug] libbind: tighten the constraints on when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding struct addrinfo._ai_pad exists. [RT #15783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2001. [func] Check the KSK flag when updating a secure dynamic zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New zone option "update-check-ksk yes;". [RT #15817]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1999. [func] Implement "rrset-order fixed". [RT #13662]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1998. [bug] Restrict handling of fifos as sockets to just SunOS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This allows named to connect to entropy gathering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding daemons that use fifos instead of sockets. [RT #15840]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1997. [bug] Named was failing to replace negative cache entries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a positive one for the type was learnt.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15818]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1996. [bug] nsupdate: if a zone has been specified it should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding appear in the output of 'show'. [RT #15797]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1995. [bug] 'host' was reporting multiple "is an alias" messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15702]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1994. [port] OpenSSL 0.9.8 support. [RT #15694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1993. [bug] Log messages, via syslog, were missing the space
cfa64348224b66dd1c9979b809406c4d15b1c137fielding after the timestamp if "print-time yes" was specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15844]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1992. [bug] Not all incoming zone transfer messages included the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding view. [RT #15825]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1991. [cleanup] The configuration data, once read, should be treated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as read only. Expand the use of const to enforce this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at compile time. [RT #15813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1990. [bug] libbind: isc's override of broken gettimeofday()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementations was not always effective.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15709]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1989. [bug] win32: don't check the service password when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding re-installing. [RT #15882]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1988. [bug] Remove a bus error from the SHA256/SHA512 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15878]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1986. [func] Report when a zone is removed. [RT #15849]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1985. [protocol] DLV has now been assigned a official type code of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 32769. [RT #15807]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note: care should be taken to ensure you upgrade
cfa64348224b66dd1c9979b809406c4d15b1c137fielding both named and dnssec-signzone at the same time for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones with DLV records where named is the master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server for the zone. Also any zones that contain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DLV records should be removed when upgrading a slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. You do not however have to upgrade all
cfa64348224b66dd1c9979b809406c4d15b1c137fielding servers for a zone with DLV records simultaneously.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1984. [func] dig, nslookup and host now advertise a 4096 byte
cfa64348224b66dd1c9979b809406c4d15b1c137fielding EDNS UDP buffer size by default. [RT #15855]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1983. [func] Two new update policies. "selfsub" and "selfwild".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12895]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1982. [bug] DNSKEY was being accepted on the parent side of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a delegation. KEY is still accepted there for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RFC 3007 validated updates. [RT #15620]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1981. [bug] win32: condition.c:wait() could fail to reattain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the mutex lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1980. [func] dnssec-signzone: output the SOA record as the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding first record in the signed zone. [RT #15758]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1979. [port] linux: allow named to drop core after changing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding user ids. [RT #15753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1978. [port] Handle systems which have a broken recvmsg().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15742]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1977. [bug] Silence noisy log message. [RT #15704]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1975. [bug] libbind: isc_gethexstring() could misparse multi-line
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hex strings with comments. [RT #15814]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1974. [doc] List each of the zone types and associated zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options separately in the ARM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding HMACSHA512 support. [RT #13606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1972. [contrib] DBUS dynamic forwarders integration from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Jason Vas Dias <jvdias@redhat.com>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1971. [port] linux: make detection of missing IF_NAMESIZE more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding robust. [RT #15443]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1970. [bug] nsupdate: adjust UDP timeout when falling back to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unsigned SOA query. [RT #15775]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1969. [bug] win32: the socket code was freeing the socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structure too early. [RT #15776]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1966. [bug] Don't set CD when we have fallen back to plain DNS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15727]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1965. [func] Suppress spurious "recursion requested but not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available" warning with 'dig +qr'. [RT #15780].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1963. [port] Tru64 4.0E doesn't support send() and recv().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15586]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1962. [bug] Named failed to clear old update-policy when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was removed. [RT #15491]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1961. [bug] Check the port and address of responses forwarded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to dispatch. [RT #15474]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15465]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1959. [func] Control the zeroing of the negative response TTL to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a soa query. Defaults "zero-no-soa-ttl yes;" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "zero-no-soa-ttl-cache no;". [RT #15460]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1958. [bug] Named failed to update the zone's secure state
cfa64348224b66dd1c9979b809406c4d15b1c137fielding until the zone was reloaded. [RT #15412]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1957. [bug] Dig mishandled responses to class ANY queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15402]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1956. [bug] Improve cross compile support, 'gen' is now built
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by native compiler. See README for additional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cross compile support information. [RT #15148]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1954. [func] Named now falls back to advertising EDNS with a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 512 byte receive buffer if the initial EDNS queries
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail. [RT #14852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1953. [func] The maximum EDNS UDP response named will send can
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now be set in named.conf (max-udp-size). This is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding independent of the advertised receive buffer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (edns-udp-size). [RT #14852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1952. [port] hpux: tell the linker to build a runtime link
cfa64348224b66dd1c9979b809406c4d15b1c137fielding path "-Wl,+b:". [RT #14816].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1951. [security] Drop queries from particular well known ports.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Don't return FORMERR to queries from particular
cfa64348224b66dd1c9979b809406c4d15b1c137fielding well known ports. [RT #15636]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a TCP socket. This prevents the source address being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set for TCP connections. [RT #15628]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1949. [func] Addition memory leakage checks. [RT #15544]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1948. [bug] If was possible to trigger a REQUIRE failure in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding xfrin.c:maybe_free() if named ran out of memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15568]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1947. [func] It is now possible to configure named to accept
cfa64348224b66dd1c9979b809406c4d15b1c137fielding expired RRSIGs. Default "dnssec-accept-expired no;".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Setting "dnssec-accept-expired yes;" leaves named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding vulnerable to replay attacks. [RT #14685]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1946. [bug] resume_dslookup() could trigger a REQUIRE failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when using forwarders. [RT #15549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding To generate a RSAMD5 key you must explicitly request
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RSAMD5. [RT #13780]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1944. [cleanup] isc_hash_create() does not need a read/write lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15522]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1943. [bug] Set the loadtime after rolling forward the journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15647]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1942. [bug] If the name of a DNSKEY match that of one in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trusted-keys do not attempt to validate the DNSKEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using the parents DS RRset. [RT #15649]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1941. [bug] ncache_adderesult() should set eresult even if no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataset is passed to it. [RT #15642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1940. [bug] Fixed a number of error conditions reported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1939. [bug] The resolver could dereference a null pointer after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation if all the queries have timed out.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15528]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1938. [bug] The validator was not correctly handling unsecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative responses at or below a SEP. [RT #15528]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1936. [bug] The validator could leak memory. [RT #15544]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1935. [bug] 'acache' was DO sensitive. [RT #15430]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1934. [func] Validate pending NS RRsets, in the authority section,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prior to returning them if it can be done without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requiring DNSKEYs to be fetched. [RT #15430]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1931. [bug] Per-client mctx could require a huge amount of memory,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding particularly for a busy caching server. [RT #15519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1930. [port] HPUX: ia64 support. [RT #15473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1927. [bug] Access to soanode or nsnode in rbtdb violated the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lock order rule and could cause a dead lock.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15518]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1926. [bug] The Windows installer did not check for empty
cfa64348224b66dd1c9979b809406c4d15b1c137fielding passwords. BINDinstall was being installed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the wrong place. [RT #15483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1925. [port] All outer level AC_TRY_RUNs need cross compiling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defaults. [RT #15469]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1924. [port] libbind: hpux ia64 support. [RT #15473]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1923. [bug] ns_client_detach() called too early. [RT #15499]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1922. [bug] check-tool.c:setup_logging() missing call to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_log_setcontext().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1921. [bug] Client memory contexts were not using internal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding malloc. [RT #15434]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1920. [bug] The cache rbtdb lock array was too small to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have the desired performance characteristics.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15454]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1919. [contrib] queryperf: a set of new features: collecting/printing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding response delays, printing intermediate results, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adjusting query rate for the "target" qps.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1918. [bug] Memory leak when checking acls. [RT #15391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when generating man pages. [RT #15385]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1915. [bug] dig +ndots was broken. [RT #15215]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1914. [protocol] DS is required to accept mnemonic algorithms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (RFC 4034). Still emit numeric algorithms for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatibility with RFC 3658. [RT #15354]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1913. [func] Integrate contributed DLZ code into named. [RT #11382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1912. [port] aix: atomic locking for powerpc. [RT #15020]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1911. [bug] Update windows socket code. [RT #14965]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1910. [bug] dig's +sigchase code overhauled. [RT #14933]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1909. [bug] The DLV code has been re-worked to make no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query order sensitive. [RT #14933]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1908. [func] dig now warns if 'RA' is not set in the answer when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'RD' was set in the query. host/nslookup skip servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that fail to set 'RA' when 'RD' is set unless a server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is explicitly set. [RT #15005]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15006]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1906. [func] dig now has a '-q queryname' and '+showsearch' options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1905. [bug] Strings returned from cfg_obj_asstring() should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding treated as read-only. The prototype for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cfg_obj_asstring() has been updated to reflect this.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #15256]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding friends. Note: RFC 1918 zones are not yet covered by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this but are likely to be in a future release.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New options: empty-server, empty-contact,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding empty-zones-enable and disable-empty-zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1903. [func] ISC string copy API.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1902. [func] Attempt to make the amount of work performed in a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding iteration self tuning. The covers nodes clean from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the cache per iteration, nodes written to disk when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rewriting a master file and nodes destroyed per
cfa64348224b66dd1c9979b809406c4d15b1c137fielding iteration when destroying a zone or a cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14996]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1901. [cleanup] Don't add DNSKEY records to the additional section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1900. [bug] ixfr-from-differences failed to ensure that the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding serial number increased. [RT #15036]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1899. [func] named-checkconf now validates update-policy entries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14963]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_NETADDR_FORMATSIZE to allow for scope details.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1897. [func] x86 and x86_64 now have separate atomic locking
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implementations.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1896. [bug] Recursive clients soft quota support wasn't working
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as expected. [RT #15103]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1895. [bug] A escaped character is, potentially, converted to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the output character set too early. [RT #14666]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1894. [doc] Review ARM for BIND 9.4.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1893. [port] Use uintptr_t if available. [RT #14606]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1892. [func] Support for SPF rdata type. [RT #15033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1891. [port] freebsd: pthread_mutex_init can fail if it runs out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory. [RT #14995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1890. [func] Raise the UDP receive buffer size to 32k if it is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding less than 32k. [RT #14953]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1889. [port] sunos: non blocking i/o support. [RT #14951]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1888. [func] Support for IPSECKEY rdata type. [RT #14967]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1887. [bug] The cache could delete expired records too fast for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clients with a virtual time in the past. [RT #14991]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1886. [bug] fctx_create() could return success even though it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed. [RT #14993]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1885. [func] dig: report the number of extra bytes still left in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the packet after processing all the records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
cfa64348224b66dd1c9979b809406c4d15b1c137fielding levels. [RT #14962]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1882. [func] Limit the number of recursive clients that can be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding waiting for a single query (<qname,qtype,qclass>) to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolve. New options clients-per-query and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-clients-per-query.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1881. [func] Add a system test for named-checkconf. [RT #14931]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1880. [func] The lame cache is now done on a <qname,qclass,qtype>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding basis as some servers only appear to be lame for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding certain query types. [RT #14916]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14892]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1878. [func] Detect duplicates of UDP queries we are recursing on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and drop them. New stats category "duplicate".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1877. [bug] Fix unreasonably low quantum on call to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rbt_destroy2(). Remove unnecessary unhash_node()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding call. [RT #14919]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1876. [func] Additional memory debugging support to track size
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and mctx arguments. [RT #14814]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1875. [bug] process_dhtkey() was using the wrong memory context
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to free some memory. [RT #14890]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1874. [port] sunos: portability fixes. [RT #14814]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1873. [port] win32: isc__errno2result() now reports its caller.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1871. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1870. [func] Added framework for handling multiple EDNS versions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #14873]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1869. [func] dig can now specify the EDNS version when making
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a query. [RT #14873]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1868. [func] edns-udp-size can now be overridden on a per
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server basis. [RT #14851]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1867. [bug] It was possible to trigger a INSIST in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dlv_validatezonekey(). [RT #14846]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1866. [bug] resolv.conf parse errors were being ignored by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bad addresses. [RT #14841]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1864. [bug] Don't try the alternative transfer source if you
cfa64348224b66dd1c9979b809406c4d15b1c137fielding got a answer / transfer with the main source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address. [RT #14802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1863. [bug] rrset-order "fixed" error messages not complete.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1862. [func] Add additional zone data constancy checks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-checkzone has extended checking of NS, MX and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SRV record and the hosts they reference.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named has extended post zone load checks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New zone options: check-mx and integrity-check.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1861. [bug] dig could trigger a INSIST on certain malformed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses. [RT #14801]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly set. [RT #14775]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1859. [func] Add support for CH A record. [RT #14695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1858. [bug] The flush-zones-on-shutdown option wasn't being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding parsed. [RT #14686]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1857. [bug] named could trigger a INSIST() if reconfigured /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reloaded too fast. [RT #14673]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1855. [bug] ixfr-from-differences was failing to detect changes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of ttl due to dns_diff_subtract() was ignoring the ttl
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of records. [RT #14616]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1854. [bug] lwres also needs to know the print format for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (long long). [RT #13754]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1853. [bug] Rework how DLV interacts with proveunsecure().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13605]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1852. [cleanup] Remove last vestiges of dnssec-signkey and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-makekeyset (removed from Makefile years ago).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1851. [doc] Doxygen comment markup. [RT #11398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1849. [doc] All forms of the man pages (docbook, man, html) should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have consistent copyright dates.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1848. [bug] Improve SMF integration. [RT #13238]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1847. [bug] isc_ondestroy_init() is called too late in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rbtdb_create()/dns_rbtdb64_create().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13661]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <bortzmeyer@nic.fr>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1845. [bug] Improve error reporting to distinguish between
cfa64348224b66dd1c9979b809406c4d15b1c137fielding accept()/fcntl() and socket()/fcntl() errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13745]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for each 16 bit piece of the IPv6 address. The text
cfa64348224b66dd1c9979b809406c4d15b1c137fielding representation of a IPv6 address has been tightened
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when CFLAGS contains "-I /usr/local/include"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in old header files being used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1842. [port] cmsg_len() could produce incorrect results on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some platform. [RT #13744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1841. [bug] "dig +nssearch" now makes a recursive query to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding find the list of nameservers to query. [RT #13694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1840. [func] dnssec-signzone can now randomize signature end times
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (dnssec-signzone -j jitter). [RT #13609]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1839. [bug] <isc/hash.h> was not being installed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1838. [cleanup] Don't allow Linux capabilities to be inherited.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13707]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1837. [bug] Compile time option ISC_FACILITY was not effective
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for 'named -u <user>'. [RT #13714]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1836. [cleanup] Silence compiler warnings in hash_test.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1834. [bug] Bad memset in rdata_test.c. [RT #13658]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13620]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1831. [doc] Update named-checkzone documentation. [RT #13604]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1829. [bug] win32: "pid-file none;" broken. [RT #13563]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1828. [bug] isc_rwlock_init() failed to properly cleanup if it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding encountered a error. [RT #13549]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1827. [bug] host: update usage message for '-a'. [RT #37116]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory error. [RT #13537]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1825. [bug] Missing UNLOCK() on out of memory error from in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rbtdb.c:subtractrdataset(). [RT #13519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1824. [bug] Memory leak on dns_zone_setdbtype() failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13510]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1823. [bug] Wrong macro used to check for point to point interface.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13418]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1822. [bug] check-names test for RT was reversed. [RT #13382]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1821. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1820. [bug] Gracefully handle acl loops. [RT #13659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1819. [bug] The validator needed to check both the algorithm and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding digest types of the DS to determine if it could be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used to introduce a secure zone. [RT #13593]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1817. [func] Add support for additional zone file formats for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding improving loading performance. The masterfile-format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option in named.conf can be used to specify a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-default format. A separate command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named-compilezone was provided to generate zone files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the new format. Additionally, the -I and -O options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for dnssec-signzone specify the input and output
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13597]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1815. [bug] nsupdate triggered a REQUIRE if the server was set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without also setting the zone and it encountered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a CNAME and was using TSIG. [RT #13086]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1814. [func] UNIX domain controls are now supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1813. [func] Restructured the data locking framework using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding architecture dependent atomic operations (when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available), improving response performance on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multi-processor machines significantly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding x86, x86_64, alpha, powerpc, and mips are currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13453]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1811. [func] Preserve the case of domain names in rdata during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone transfers. [RT #13547]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1810. [bug] configure, lib/bind/configure make different default
cfa64348224b66dd1c9979b809406c4d15b1c137fielding decisions about whether to do a threaded build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13212]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1809. [bug] "make distclean" failed for libbind if the platform
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1808. [bug] zone.c:notify_zone() contained a race condition,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone->db could change underneath it. [RT #13511]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1807. [bug] When forwarding (forward only) set the active domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the forward zone name. [RT #13526]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1806. [bug] The resolver returned the wrong result when a CNAME /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNAME was encountered when fetching glue from a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding secure namespace. [RT #13501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1805. [bug] Pending status was not being cleared when DLV was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding active. [RT #13501]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1804. [bug] Ensure that if we are queried for glue that it fits
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the additional section or TC is set to tell the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding client to retry using TCP. [RT #10114]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1803. [bug] dnssec-signzone sometimes failed to remove old
cfa64348224b66dd1c9979b809406c4d15b1c137fielding RRSIGs. [RT #13483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1802. [bug] Handle connection resets better. [RT #11280]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1801. [func] Report differences between hints and real NS rrset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and associated address records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1800. [bug] Changes #1719 allowed a INSIST to be triggered.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13428]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1799. [bug] 'rndc flushname' failed to flush negative cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding entries. [RT #13438]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1798. [func] The server syntax has been extended to support a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding range of servers. [RT #11132]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1797. [func] named-checkconf now check acls to verify that they
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only refer to existing acls. [RT #13101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1795. [bug] "rndc dumpdb" was not fully documented. Minor
cfa64348224b66dd1c9979b809406c4d15b1c137fielding formating issues with "rndc dumpdb -all". [RT #13396]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1794. [func] Named and named-checkzone can now both check for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-terminal wildcard records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1793. [func] Extend adjusting TTL warning messages. [RT #13378]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1792. [func] New zone option "notify-delay". Specify a minimum
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delay between sets of NOTIFY messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1791. [bug] 'host -t a' still printed out AAAA and MX records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow parallel make to succeed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1789. [bug] Prerequisite test for tkey and dnssec could fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with "configure --with-libtool".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1788. [bug] libbind9.la/libbind9.so needs to link against
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1786. [port] AIX: libt_api needs to be taught to look for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding T_testlist in the main executable (--with-libtool).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13239]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1785. [bug] libbind9.la/libbind9.so needs to link against
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1784. [cleanup] "libtool -allow-undefined" is the default.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Leave hooks in configure to allow it to be set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if needed in the future.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source tree.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1782. [port] OSX: --with-libtool + --enable-libbind broke on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding __evOptMonoTime. [RT #13219]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1780. [bug] Update libtool to 1.5.10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_LOOPBACK_INIT macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_LOOPBACK_INIT macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_LOOPBACK_INIT macros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1774. [port] Aix: Silence compiler warnings / build failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1773. [bug] Fast retry on host / net unreachable. [RT #13153]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1772. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1771. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1770. [bug] named-checkconf failed to report missing a missing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file clause for rbt{64} master/hint zones. [RT #13009]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1769. [port] win32: change compiler flags /MTd ==> /MDd,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding /MT ==> /MD.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataset. [RT #12907]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support for (struct in6_pktinfo) failed. [RT #13077]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1766. [bug] Update the master file timestamp on successful refresh
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as well as the journal's timestamp. [RT #13062]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1765. [bug] configure --with-openssl=auto failed. [RT #12937]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1764. [bug] dns_zone_replacedb failed to emit a error message
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there was no SOA record in the replacement db.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #13016]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1763. [func] Perform sanity checks on NS records which refer to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'in zone' names. [RT #13002]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding even when it failed. [RT #12995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12971]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1760. [bug] Host / net unreachable was not penalising rtt
cfa64348224b66dd1c9979b809406c4d15b1c137fielding estimates. [RT #12970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1759. [bug] Named failed to startup if the OS supported IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding but had no IPv6 interfaces configured. [RT #12942]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1758. [func] Don't send notify messages to self. [RT #12933]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1757. [func] host now can turn on memory debugging flags with '-m'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1756. [func] named-checkconf now checks the logging configuration.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12352]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1755. [func] allow-update is now settable at the options / view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level. [RT #6636]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1754. [bug] We weren't always attempting to query the parent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server for the DS records at the zone cut.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12774]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1753. [bug] Don't serve a slave zone which has no NS records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12894]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1752. [port] Move isc_app_start() to after ns_os_daemonise()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as some fork() implementations unblock the signals
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that are blocked by isc_app_start(). [RT #12810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12864]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1749. [bug] 'check-names response ignore;' failed to ignore.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12866]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1748. [func] dig now returns the byte count for axfr/ixfr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1747. [bug] BIND 8 compatibility: named/named-checkconf failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to parse "host-statistics-max" in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1746. [func] Make public the function to read a key file,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dst_key_read_public(). [RT #12450]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1745. [bug] Dig/host/nslookup accept replies from link locals
cfa64348224b66dd1c9979b809406c4d15b1c137fielding regardless of scope if no scope was specified when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query was sent. [RT #12745]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1744. [bug] If tuple2msgname() failed to convert a tuple to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a name a REQUIRE could be triggered. [RT #12796]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1743. [bug] If isc_taskmgr_create() was not able to create the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding requested number of worker threads then destruction
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the manager would trigger an INSIST() failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12790]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1742. [bug] Deleting all records at a node then adding a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding previously existing record, in a single UPDATE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transaction, failed to leave / regenerate the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding associated RRSIG records. [RT #12788]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1741. [bug] Deleting all records at a node in a secure zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using a update-policy grant failed. [RT #12787]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1740. [bug] Replace rbt's hash algorithm as it performed badly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with certain zones. [RT #12729]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NOTE: a hash context now needs to be established
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via isc_hash_create() if the application was not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding already doing this.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1739. [bug] dns_rbt_deletetree() could incorrectly return
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_R_QUOTA. [RT #12695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1738. [bug] Enable overrun checking by default. [RT #12695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1737. [bug] named failed if more than 16 masters were specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12627]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1736. [bug] dst_key_fromnamedfile() could fail to read a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding public key. [RT #12687]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RE #12688]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1733. [bug] Return non-zero exit status on initial load failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12658]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12467]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1731. [port] darwin: relax version test in ifconfig.sh.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12581]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1730. [port] Determine the length type used by the socket API.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12581]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1729. [func] Improve check-names error messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1728. [doc] Update check-names documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1727. [bug] named-checkzone: check-names support didn't match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding documentation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1726. [port] aix5: add support for aix5.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1725. [port] linux: update error message on interaction of threads,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding capabilities and setuid support (named -u). [RT #12541]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1724. [bug] Look for DNSKEY records with "dig +sigtrace".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12557]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1722. [bug] Don't commit the journal on malformed ixfr streams.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1721. [bug] Error message from the journal processing were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding always identifying the relevant journal. [RT #12519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative response. [RT #12506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1719. [bug] named was not correctly caching a RFC 2308 Type 1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative response. [RT #12506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses when looking for the zone / master server.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12506]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1717. [port] solaris: ifconfig.sh did not support Solaris 10.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "ifconfig.sh down" didn't work for Solaris 9.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1716. [doc] named.conf(5) was being installed in the wrong
cfa64348224b66dd1c9979b809406c4d15b1c137fielding location. [RT #12441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1715. [func] 'dig +trace' now randomly selects the next servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to try. Report if there is a bad delegation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1714. [bug] dig/host/nslookup were only trying the first
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address when a nameserver was specified by name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12286]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1713. [port] linux: extend capset failure message to say:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding please ensure that the capset kernel module is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loaded. see insmod(8)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages for the specified zone. [RT #9479]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1709. [port] solaris: add SMF support from Sun.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for conformance to the name space convention. Binary
cfa64348224b66dd1c9979b809406c4d15b1c137fielding backward compatibility to the old function name is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding provided. [RT #12376]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1707. [contrib] sdb/ldap updated to version 1.0-beta.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1706. [bug] 'rndc stop' failed to cause zones to be flushed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sometimes. [RT #12328]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1705. [func] Allow the journal's name to be changed via named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1704. [port] lwres needed a snprintf() implementation for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms without snprintf(). Add missing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "#include <isc/print.h>". [RT #12321]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1703. [bug] named would loop sending NOTIFY messages when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to receive a response. [RT #12322]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1702. [bug] also-notify should not be applied to built in zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12323]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1701. [doc] A minimal named.conf man page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1700. [func] nslookup is no longer to be treated as deprecated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Remove "deprecated" warning message. Add man page.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1699. [bug] dnssec-signzone can generate "not exact" errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when resigning. [RT #12281]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1698. [doc] Use reserved IPv6 documentation prefix.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1697. [bug] xxx-source{,-v6} was not effective when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified one of listening addresses and a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding different port than the listening port. [RT #12257]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1696. [bug] dnssec-signzone failed to clean out nodes that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding consisted of only NSEC and RRSIG records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12154]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1695. [bug] DS records when forwarding require special handling.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #12133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1694. [bug] Report if the builtin views of "_default" / "_bind"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are defined in named.conf. [RT #12023]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1693. [bug] max-journal-size was not effective for master zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with ixfr-from-differences set. [RT #12024]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding /usr/lib. [RT #11971]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1691. [bug] sdb's attachversion was not complete. [RT #11990]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1690. [bug] Delay detaching view from the client until UPDATE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding processing completes when shutting down. [RT #11714]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained gratuitous semicolons. [RT #11707]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1688. [bug] LDFLAGS was not supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1687. [bug] Race condition in dispatch. [RT #10272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1686. [bug] Named sent a extraneous NOTIFY when it received a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding redundant UPDATE request. [RT #11943]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1685. [bug] Change #1679 loop tests weren't quite right.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1684. [func] ixfr-from-differences now takes master and slave in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addition to yes and no at the options and view levels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1683. [bug] dig +sigchase could leak memory. [RT #11445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1682. [port] Update configure test for (long long) printf format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1681. [bug] Only set SO_REUSEADDR when a port is specified in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_socket_bind(). [RT #11742]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1680. [func] rndc: the source address can now be specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1679. [bug] When there was a single nameserver with multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses for a zone not all addresses were tried.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11706]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1676. [func] New option "allow-query-cache". This lets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding allow-query be used to specify the default zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding access level rather than having to have every
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone override the global value. allow-query-cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can be set at both the options and view levels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If allow-query-cache is not set allow-query applies.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1675. [bug] named would sometimes add extra NSEC records to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the authority section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1674. [port] linux: increase buffer size used to scan
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1673. [port] linux: issue a error messages if IPv6 interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scans fails.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1672. [cleanup] Tests which only function in a threaded build
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now return R:THREADONLY (rather than R:UNTESTED)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a non-threaded build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1671. [contrib] queryperf: add NAPTR to the list of known types.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1670. [func] Log UPDATE requests to slave zones without an acl as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "disabled" at debug level 3. [RT #11657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1669. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1667. [port] linux: not all versions have IF_NAMESIZE.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1666. [bug] The optional port on hostnames in dual-stack-servers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was being ignored.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1665. [func] rndc now allows addresses to be set in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server clauses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1663. [func] Look for OpenSSL by default.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1662. [bug] Change #1658 failed to change one use of 'type'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to 'keytype'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1661. [bug] Restore dns_name_concatenate() call in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding adb.c:set_target(). [RT #11582]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1660. [bug] win32: connection_reset_fix() was being called
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unconditionally. [RT #11595]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1659. [cleanup] Cleanup some messages that were referring to KEY vs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY, NXT vs NSEC and SIG vs RRSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and DH. Tighten which options apply to KEY and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1657. [doc] ARM: document query log output.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSKEY and RRSIG. [RT #11542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1655. [bug] Logging multiple versions w/o a size was broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11446]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1654. [bug] isc_result_totext() contained array bounds read
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1653. [func] Add key type checking to dst_key_fromfilename(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DST_TYPE_KEY should be used to read TSIG, TKEY and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SIG(0) keys.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1652. [bug] TKEY still uses KEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1651. [bug] dig: process multiple dash options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1650. [bug] dig, nslookup: flush standard out after each command.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1649. [bug] Silence "unexpected non-minimal diff" message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11206]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1648. [func] Update dnssec-lookaside named.conf syntax to support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding multiple dnssec-lookaside namespaces (not yet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding implemented).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1647. [bug] It was possible trigger a INSIST when chasing a DS
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record that required walking back over a empty node.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1646. [bug] win32: logging file versions didn't work with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-UNC filenames. [RT #11486]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1645. [bug] named could trigger a REQUIRE failure if multiple
cfa64348224b66dd1c9979b809406c4d15b1c137fielding masters with keys are specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1644. [bug] Update the journal modification time after a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding successful refresh query. [RT #11436]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1643. [bug] dns_db_closeversion() could leak memory / node
cfa64348224b66dd1c9979b809406c4d15b1c137fielding references. [RT #11163]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1642. [port] Support OpenSSL implementations which don't have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DSA support. [RT #11360]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1641. [bug] Update the check-names description in ARM. [RT #11389]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incorrectly closing the socket. [RT #11291]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1639. [func] Initial dlv system test.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1638. [bug] "ixfr-from-differences" could generate a REQUIRE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure if the journal open failed. [RT #11347]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1637. [bug] Node reference leak on error in addnoqname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a error had occurred. The database version no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matched the version of the database that was dumped.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1635. [bug] Memory leak on error in query_addds().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1634. [bug] named didn't supply a useful error message when it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding detected duplicate views. [RT #11208]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1633. [bug] named should return NOTIMP to update requests to a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding slaves without a allow-update-forwarding acl specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11331]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1632. [bug] nsupdate failed to send prerequisite only UPDATE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages. [RT #11288]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1631. [bug] dns_journal_compact() could sometimes corrupt the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding journal. [RT #11124]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1630. [contrib] queryperf: add support for IPv6 transport.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1629. [func] dig now supports IPv6 scoped addresses with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding extended format in the local-server part. [RT #8753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1628. [bug] Typo in Compaq Trucluster support. [RT #11264]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1627. [bug] win32: sockets were not being closed when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding last external reference was removed. [RT #11179]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1626. [bug] --enable-getifaddrs was broken. [RT #11259]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1625. [bug] named failed to load/transfer RFC2535 signed zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which contained CNAMES. [RT #11237]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1624. [bug] zonemgr_putio() call should be locked. [RT #11163]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1623. [bug] A serial number of zero was being displayed in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "sending notifies" log message when also-notify was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used. [RT #11177]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding available, and suppress wildcard binding if not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1621. [bug] match-destinations did not work for IPv6 TCP queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11156]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1620. [func] When loading a zone report if it is signed. [RT #11149]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11118]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1618. [bug] Fencepost errors in dns_name_ishostname() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_name_ismailbox() could trigger a INSIST().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1617. [port] win32: VC++ 6.0 support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1616. [compat] Ensure that named's version is visible in the core
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dump. [RT #11127]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it is defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1614. [port] win32: silence resource limit messages. [RT #11101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1613. [bug] Builds would fail on machines w/o a if_nametoindex().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11119]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1612. [bug] check-names at the option/view level could trigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an INSIST. [RT #11116]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1611. [bug] solaris: IPv6 interface scanning failed to cope with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no active IPv6 interfaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1610. [bug] On dual stack machines "dig -b" failed to set the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address type to be looked up with "@server".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #11069]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1609. [func] dig now has support to chase DNSSEC signature chains.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSSEC validation code in dig coded by Olivier Courtay
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (olivier.courtay@irisa.fr) for the IDsA project
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1608. [func] dig and host now accept -4/-6 to select IP transport
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to use when making queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1607. [bug] dig, host and nslookup were still using random()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to generate query ids. [RT #11013]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1606. [bug] DLV insecurity proof was failing.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1604. [bug] A xfrout_ctx_create() failure would result in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding xfrout_ctx_destroy() being called with a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding partially initialized structure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1603. [bug] nsupdate: set interactive based on isatty().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10929]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1602. [bug] Logging to a file failed unless a size was specified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10925]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1601. [bug] Silence spurious warning 'both "recursion no;" and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "allow-recursion" active' warning from view "_bind".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10920]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1600. [bug] Duplicate zone pre-load checks were not case
cfa64348224b66dd1c9979b809406c4d15b1c137fielding insensitive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1599. [bug] Fix memory leak on error path when checking named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1598. [func] Specify that certain parts of the namespace must
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be secure (dnssec-must-be-secure).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1597. [func] Allow notify-source and query-source to be specified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on a per server basis similar to transfer-source.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1596. [func] Accept 'notify-source' style syntax for query-source.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1595. [func] New notify type 'master-only'. Enable notify for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding master zones only.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1594. [bug] 'rndc dumpdb' could prevent named from answering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries while the dump was in progress. [RT #10565]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1593. [bug] rndc should return "unknown command" to unknown
cfa64348224b66dd1c9979b809406c4d15b1c137fielding commands. [RT #10642]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1592. [bug] configure_view() could leak a dispatch. [RT #10675]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1591. [bug] libbind: updated to BIND 8.4.5.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1590. [port] netbsd: update thread support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1589. [func] DNSSEC lookaside validation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1587. [bug] dns_message_settsigkey() failed to clear existing key.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1586. [func] "check-names" is now implemented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1585. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1584. [bug] "make test" failed with a read only source tree.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10461]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1583. [bug] Records add via UPDATE failed to get the correct trust
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level. [RT #10452]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1582. [bug] rrset-order failed to work on RRsets with more
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than 32 elements. [RT #10381]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1581. [func] Disable DNSSEC support by default. To enable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNSSEC specify "dnssec-enable yes;" in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1580. [bug] Zone destruction on final detach takes a long time.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1579. [bug] Multiple task managers could not be created.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10346]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
cfa64348224b66dd1c9979b809406c4d15b1c137fielding workaround code. [RT #10331]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1576. [bug] Race condition in dns_dispatch_addresponse().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10272]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1574. [bug] Don't attempt to open the controls socket(s) when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding running tests. [RT #9091]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1573. [port] linux: update to libtool 1.5.2 so that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "make install DESTDIR=/xx" works with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "configure --with-libtool". [RT #9941]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1572. [bug] nsupdate: sign the soa query to find the enclosing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone if the server is specified. [RT #10148]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1571. [bug] rbt:hash_node() could fail leaving the hash table
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in an inconsistent state. [RT #10208]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1570. [bug] nsupdate failed to handle classes other than IN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding New keyword 'class' which sets the default class.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10202]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1569. [func] nsupdate new command 'answer' which displays the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding complete answer message to the last update.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1568. [bug] nsupdate now reports that the update failed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interactive mode. [RT #10236]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1566. [port] Support for the cmsg framework on Solaris and HP/UX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This also solved the problem that match-destinations
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for IPv6 addresses did not work on these systems.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10221]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1565. [bug] CD flag should be copied to outgoing queries unless
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the query is under a secure entry point in which case
cfa64348224b66dd1c9979b809406c4d15b1c137fielding CD should be set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1564. [func] Attempt to provide a fallback entropy source to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used if named is running chrooted and named is unable
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to open entropy source within the chroot area.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #10133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1563. [bug] Gracefully fail when unable to obtain neither an IPv4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nor an IPv6 dispatch. [RT #10230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1562. [bug] isc_socket_create() and isc_socket_accept() could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding leak memory under error conditions. [RT #10230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1561. [bug] It was possible to release the same name twice if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named ran out of memory. [RT #10197]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and EAI_NONAME to the same value.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1559. [port] named should ignore SIGFSZ.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
cfa64348224b66dd1c9979b809406c4d15b1c137fielding child zones for which we don't have a supported
cfa64348224b66dd1c9979b809406c4d15b1c137fielding algorithm. Such child zones are treated as unsigned.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1557. [func] Implement missing DNSSEC tests for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * NOQNAME proof with wildcard answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding * NOWILDARD proof with NXDOMAIN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Cache and return NOQNAME with wildcard answers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1556. [bug] nsupdate now treats all names as fully qualified.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1555. [func] 'rrset-order cyclic' no longer has a random starting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding point per query. [RT #7572]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1554. [bug] dig, host, nslookup failed when no nameservers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were specified in /etc/resolv.conf. [RT #8232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1553. [bug] The windows socket code could stop accepting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding connections. [RT #10115]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1552. [bug] Accept NOTIFY requests from mapped masters if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding matched-mapped is set. [RT #10049]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1551. [port] Open "/dev/null" before calling chroot().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1550. [port] Call tzset(), if available, before calling chroot().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1549. [func] named-checkzone can now write out the zone contents
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a easily parsable format (-D and -o).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1548. [bug] When parsing APL records it was possible to silently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding accept out of range ADDRESSFAMILY values. [RT #9979]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1547. [bug] Named wasted memory recording duplicate lame zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding entries. [RT #9341]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1546. [bug] We were rejecting valid secure CNAME to negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1545. [bug] It was possible to leak memory if named was unable to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bind to the specified transfer source and TSIG was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being used. [RT #10120]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1544. [bug] Named would logged a single entry to a file despite it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding being over the specified size limit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1543. [bug] Logging using "versions unlimited" did not work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1542. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1541. [func] NSEC now uses new bitmap format.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1539. [bug] Open UDP sockets for notify-source and transfer-source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that use reserved ports at startup. [RT #9475]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1538. [placeholder] rt9997
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1537. [func] New option "querylog". If set specify whether query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding logging is to be enabled or disabled at startup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1536. [bug] Windows socket code failed to log a error description
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when returning ISC_R_UNEXPECTED. [RT #9998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1535. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1534. [bug] Race condition when priming cache. [RT #9940]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1533. [func] Warn if both "recursion no;" and "allow-recursion"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are active. [RT #4389]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1532. [port] netbsd: the configure test for <sys/sysctl.h>
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1531. [port] AIX more libtool fixes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1530. [bug] It was possible to trigger a INSIST() failure if a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding slave master file was removed at just the correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding moment. [RT #9462]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1529. [bug] "notify explicit;" failed to log that NOTIFY messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were being sent for the zone. [RT #9442]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1528. [cleanup] Simplify some dns_name_ functions based on the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deprecation of bitstring labels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1527. [cleanup] Reduce the number of gettimeofday() calls without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding losing necessary timer granularity.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1526. [func] Implemented "additional section caching (or acache)",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an internal cache framework for additional section
cfa64348224b66dd1c9979b809406c4d15b1c137fielding content to improve response performance. Several
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuration options were provided to control the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1525. [bug] dns_cache_create() could trigger a REQUIRE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure in isc_mem_put() during error cleanup.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1524. [port] AIX needs to be able to resolve all symbols when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding creating shared libraries (--with-libtool).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1523. [bug] Fix race condition in rbtdb. [RT #9189]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1522. [bug] dns_db_findnode() relax the requirements on 'name'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1521. [bug] dns_view_createresolver() failed to check the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result from isc_mem_create(). [RT #9294]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1520. [protocol] Add SSHFP (SSH Finger Print) type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
cfa64348224b66dd1c9979b809406c4d15b1c137fielding length of the new bitmap.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained a off-by-one error when working out the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding number of octets in the bitmap.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1517. [port] Support for IPv6 interface scanning on HP/UX and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TrueUNIX 5.1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1515. [func] Allow transfer source to be set in a server statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1514. [bug] named: isc_hash_destroy() was being called too early.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1513. [doc] Add "US" to root-delegation-only exclude list.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1512. [bug] Extend the delegation-only logging to return query
cfa64348224b66dd1c9979b809406c4d15b1c137fielding type, class and responding nameserver.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1511. [bug] delegation-only was generating false positives
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on negative answers from sub-zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1510. [func] New view option "root-delegation-only". Apply
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delegation-only check to all TLDs and root.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Note there are some TLDs that are NOT delegation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only (e.g. DE, LV, US and MUSEUM) these can be excluded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from the checks by using exclude.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding root-delegation-only exclude {
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "DE"; "LV"; "US"; "MUSEUM";
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1509. [bug] Hint zones should accept delegation-only. Forward
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone should not accept delegation-only.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1508. [bug] Don't apply delegation-only checks to answers from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding forwarders.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1507. [bug] Handle BIND 8 style returns to NS queries to parents
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when making delegation-only checks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1506. [bug] Wrong return type for dns_view_isdelegationonly().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1504. [func] New zone type "delegation-only".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1503. [port] win32: install libeay32.dll outside of system32.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1501. [func] Allow TCP queue length to be specified via
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named.conf, tcp-listen-queue.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1500. [bug] host failed to lookup MX records. Also look up
cfa64348224b66dd1c9979b809406c4d15b1c137fielding AAAA records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1499. [bug] isc_random need to be seeded better if arc4random()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not used.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1498. [port] bsdos: 5.x support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1497. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1496. [port] test for pthread_attr_setstacksize().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1495. [cleanup] Replace hash functions with universal hash.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1494. [security] Turn on RSA BLINDING as a precaution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1493. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1492. [cleanup] Preserve rwlock quota context when upgrading /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding downgrading. [RT #5599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lines. [RT #6206]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1490. [bug] Accept reading state as well as working state in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ns_client_next(). [RT #6813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1489. [compat] Treat 'allow-update' on slave zones as a warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1488. [bug] Don't override trust levels for glue addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1487. [bug] A REQUIRE() failure could be triggered if a zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queued for transfer and the zone was then removed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1486. [bug] isc_print_snprintf() '%%' consumed one too many format
cfa64348224b66dd1c9979b809406c4d15b1c137fielding characters. [RT #8230]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1485. [bug] gen failed to handle high type values. [RT #6225]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1484. [bug] The number of records reported after a AXFR was wrong.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1483. [bug] dig axfr failed if the message id in the answer failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to match that in the request. Only the id in the first
cfa64348224b66dd1c9979b809406c4d15b1c137fielding message is required to match. [RT #8138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1482. [bug] named could fail to start if the kernel supports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 but no interfaces are configured. Similarly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for IPv4. [RT #6229]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1481. [bug] Refresh and stub queries failed to use masters keys
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if specified. [RT #7391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1480. [bug] Provide replay protection for rndc commands. Full
cfa64348224b66dd1c9979b809406c4d15b1c137fielding replay protection requires both rndc and named to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be updated. Partial replay protection (limited
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exposure after restart) is provided if just named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is updated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1479. [bug] cfg_create_tuple() failed to handle out of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding memory cleanup. parse_list() would leak memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on syntax errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1478. [port] ifconfig.sh didn't account for other virtual
cfa64348224b66dd1c9979b809406c4d15b1c137fielding interfaces. It now takes a optional argument
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to specify the first interface number. [RT #3907]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1477. [bug] memory leak using stub zones and TSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1476. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1475. [port] Probe for old sprintf().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1474. [port] Provide strtoul() and memmove() for platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding without them.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1473. [bug] create_map() and create_string() failed to handle out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of memory cleanup. [RT #6813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1471. [bug] libbind: updated to BIND 8.4.0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1470. [bug] Incorrect length passed to snprintf. [RT #5966]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1469. [func] Log end of outgoing zone transfer at same level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as the start of transfer is logged. [RT #4441]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1468. [func] Internal zones are no longer counted for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'rndc status'. [RT #4706]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1467. [func] $GENERATES now supports optional class and ttl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1466. [bug] lwresd configuration errors resulted in memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and lock leaks. [RT #5228]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to check that trailing bits were zero allowing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some invalid base64 strings to be accepted. [RT #5397]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1464. [bug] Preserve "out of zone" data for outgoing zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transfers. [RT #5192]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NXT bit maps. [RT #5577]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1462. [bug] parse_sizeval() failed to check the token type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1460. [bug] inet_pton() failed to reject certain malformed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 literals.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1459. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1458. [cleanup] sprintf() -> snprintf().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1457. [port] Provide strlcat() and strlcpy() for platforms without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1455. [bug] <netaddr> missing from server grammar in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1454. [port] Use getifaddrs() if available for interface scanning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --disable-getifaddrs to override. Glibc currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has a getifaddrs() that does not support IPv6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Use --enable-getifaddrs=glibc to force the use of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding this version under linux machines.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1452. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1451. [bug] rndc-confgen didn't exit with a error code for all
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failures. [RT #5209]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1450. [bug] Fetching expired glue failed under certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding circumstances. [RT #5124]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1449. [bug] query_addbestns() didn't handle running out of memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gracefully.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1448. [bug] Handle empty wildcards labels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1447. [bug] We were casting (unsigned int) to and from (void *).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rdataset->private4 is now rdataset->privateuint4
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to reflect a type change.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1446. [func] Implemented undocumented alternate transfer sources
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from BIND 8. See use-alt-transfer-source,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding alt-transfer-source and alt-transfer-source-v6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SECURITY: use-alt-transfer-source is ENABLED unless
cfa64348224b66dd1c9979b809406c4d15b1c137fielding you are using views. This may cause a security risk
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in accidental disclosure of wrong zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding content if the master supplying different source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding content based on IP address. If you are not certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC recommends setting use-alt-transfer-source no;
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been replaced with DNS_ADBFIND_STARTATZONE which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causes the search to start using the closest zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1444. [func] dns_view_findzonecut2() allows you to specify if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache should be searched for zone cuts.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1443. [func] Masters lists can now be specified and referenced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in zone masters clauses and other masters lists.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1442. [func] New functions for manipulating port lists:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_portlist_create(), dns_portlist_add(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_portlist_remove(), dns_portlist_match(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_portlist_attach() and dns_portlist_detach().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1441. [func] It is now possible to tell dig to bind to a specific
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source port.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1440. [func] It is now possible to tell named to avoid using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding certain source ports (avoid-v4-udp-ports,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding avoid-v6-udp-ports).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1439. [bug] Named could return NOERROR with certain NOTIFY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failures. Return NOTAUTH if the NOTIFY zone is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not being served.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1438. [func] Log TSIG (if any) when logging NOTIFY requests.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1437. [bug] Leave space for stdio to work in. [RT #5033]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1436. [func] dns_zonemgr_resumexfrs() can be used to restart
cfa64348224b66dd1c9979b809406c4d15b1c137fielding stalled transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1435. [bug] zmgr_resume_xfrs() was being called read locked
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rather than write locked. zmgr_resume_xfrs()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not being called if the zone was being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1434. [bug] "rndc reconfig" failed to initiate the initial
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone transfer of new slave zones.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1433. [bug] named could trigger a REQUIRE failure if it could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not get a file descriptor when attempting to write
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a master file. [RT #4347]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1432. [func] The advertised EDNS UDP buffer size can now be set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via named.conf (edns-udp-size).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1431. [bug] isc_print_snprintf() "%s" with precision could walk off
cfa64348224b66dd1c9979b809406c4d15b1c137fielding end of argument. [RT #5191]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1430. [port] linux: IPv6 interface scanning support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1429. [bug] Prevent the cache getting locked to old servers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1428. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1427. [bug] Race condition in adb with threaded build.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1426. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1425. [port] linux/libbind: define __USE_MISC when testing *_r()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function prototypes in netdb.h. [RT #4921]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1424. [bug] EDNS version not being correctly printed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1423. [contrib] queryperf: added A6 and SRV.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1422. [func] Log name/type/class when denying a query. [RT #4663]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1421. [func] Differentiate updates that don't succeed due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prerequisites (unsuccessful) vs other reasons
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1420. [port] solaris: work around gcc optimizer bug.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1419. [port] openbsd: use /dev/arandom. [RT #4950]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1418. [bug] 'rndc reconfig' did not cause new slaves to load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1417. [func] ID.SERVER/CHAOS is now a built in zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding See "server-id" for how to configure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from SOA MINIMUM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1414. [func] Support for KSK flag.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1413. [func] Explicitly request the (re-)generation of DS records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from keysets (dnssec-signzone -g).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1412. [func] You can now specify servers to be tried if a nameserver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has IPv6 address and you only support IPv4 or the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reverse. See dual-stack-servers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1410. [func] Handle records that live in the parent zone, e.g. DS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1408. [bug] "make distclean" was not complete. [RT #4700]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1407. [bug] lfsr incorrectly implements the shift register.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1406. [bug] dispatch initializes one of the LFSR's with a incorrect
cfa64348224b66dd1c9979b809406c4d15b1c137fielding polynomial. [RT #4617]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1405. [func] Use arc4random() if available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dnssec-signkey now report their version in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding usage message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1402. [cleanup] A6 has been moved to experimental and is no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fully supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1401. [bug] adb wasn't clearing state when the timer expired.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1400. [bug] Block the addition of wildcard NS records by IXFR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or UPDATE. [RT #3502]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1399. [bug] Use serial number arithmetic when testing SIG
cfa64348224b66dd1c9979b809406c4d15b1c137fielding timestamps. [RT #4268]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1398. [doc] ARM: notify-also should have been also-notify.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1396. [func] dnssec-signzone: adjust the default signing time by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 1 hour to allow for clock skew.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have a working implementation. [RT #4079]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1394. [func] It is now possible to check if a particular element is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in a acl. Remove duplicate entries from the localnets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is not available in the kernel to prevent accidently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listening on IPv4 interfaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1392. [bug] named-checkzone: update usage.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1391. [func] Add support for IPv6 scoped addresses in named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1390. [func] host now supports ixfr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1389. [bug] named could fail to rotate long log files. [RT #3666]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defining HAVE_IFLIST_SYSCTL. [RT #3770]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1387. [bug] named could crash due to an access to invalid memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding space (which caused an assertion failure) in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incremental cleaning. [RT #3588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1386. [bug] named-checkzone -z stopped on errors in a zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1385. [bug] Setting serial-query-rate to 10 would trigger a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding REQUIRE failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1384. [bug] host was incompatible with BIND 8 in its exit code and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the output with the -l option. [RT #3536]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1383. [func] Track the serial number in a IXFR response and log if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a mismatch occurs. This is a more specific error than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "not exact". [RT #3445]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1382. [bug] make install failed with --enable-libbind. [RT #3656]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1381. [bug] named failed to correctly process answers that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding contained DNAME records where the resulting CNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulted in a negative answer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1380. [func] 'rndc recursing' dump recursing queries to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'recursing-file = "named.recursing";'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1379. [func] 'rndc status' now reports tcp and recursion quota
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1377. [func] dns_zone_load{new}() now reports if the zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding loaded, queued for loading to up to date.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1376. [func] New function dns_zone_logc() to log to specified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1374. [func] dns_adb_dump() now logs the lame zones associated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with each server.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1373. [bug] Recovery from expired glue failed under certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding circumstances.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1372. [bug] named crashes with an assertion failure on exit when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sharing the same port for listening and querying, and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding changing listening addresses several times. [RT #3509]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1371. [bug] notify-source-v6, transfer-source-v6 and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query-source-v6 with explicit addresses and using the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding same ports as named was listening on could interfere
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with named's ability to answer queries sent to those
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1370. [bug] dig '+[no]recurse' was incorrectly documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1369. [bug] Adding an NS record as the lexicographically last
cfa64348224b66dd1c9979b809406c4d15b1c137fielding record in a secure zone didn't work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1368. [func] remove support for bitstring labels.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1367. [func] Use response times to select forwarders.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1365. [func] "localhost" and "localnets" acls now include IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses / prefixes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1364. [func] Log file name when unable to open memory statistics
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and dump database files. [RT #3437]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1363. [func] Listen-on-v6 now supports specific addresses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1362. [bug] remove IFF_RUNNING test when scanning interfaces.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1361. [func] log the reason for rejecting a server when resolving
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1360. [bug] --enable-libbind would fail when not built in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding source tree for certain OS's.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1359. [security] Support patches OpenSSL libraries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1358. [bug] It was possible to trigger a INSIST when debugging
cfa64348224b66dd1c9979b809406c4d15b1c137fielding large dynamic updates. [RT #3390]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1357. [bug] nsupdate was extremely wasteful of memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1356. [tuning] Reduce the number of events / quantum for zone tasks.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1354. [doc] lwres man pages had illegal nroff.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1353. [contrib] sdb/ldap to version 0.9.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1352. [bug] dig, host, nslookup when falling back to TCP use the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding current search entry (if any). [RT #3374]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1351. [bug] lwres_getipnodebyname() returned the wrong name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1350. [bug] dns_name_fromtext() failed to handle too many labels
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gracefully.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1348. [port] win32: Rewrote code to use I/O Completion Ports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in socket.c and eliminating a host of socket
cfa64348224b66dd1c9979b809406c4d15b1c137fielding errors. Performance is enhanced.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1347. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1346. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1345. [port] Use a explicit -Wformat with gcc. Not all versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding include it in -Wall.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1344. [func] Log if the serial number on the master has gone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding If you have multiple machines specified in the masters
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clause you may want to set 'multi-master yes;' to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding suppress this warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1343. [func] Log successful notifies received (info). Adjust log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level for failed notifies to notice.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1342. [func] Log remote address with TCP dispatch failures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1341. [func] Allow a rate limiter to be stalled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1340. [bug] Delay and spread out the startup refresh load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lookups. Bit string lookups are no longer attempted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1338. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1337. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1336. [func] Nibble lookups under IP6.ARPA are now supported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_byaddr_create(). dns_byaddr_createptrname() is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding deprecated, use dns_byaddr_createptrname2() instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1335. [bug] When performing a nonexistence proof, the validator
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should discard parent NXTs from higher in the DNS.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1334. [bug] When signing/verifying rdatasets, duplicate rdatas
cfa64348224b66dd1c9979b809406c4d15b1c137fielding need to be suppressed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1333. [contrib] queryperf now reports a summary of returned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rcodes (-c), rcodes are printed in mnemonic form (-v).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1332. [func] Report the current serial with periodic commits when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rolling forward the journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1331. [func] Generate DNSSEC wildcard proofs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1330. [bug] When processing events (non-threaded) only allow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the task one chance to use to use its quantum.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1329. [func] named-checkzone will now check if nameservers that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding appear to be IP addresses. Available modes "fail",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "warn" (default) and "ignore" the results of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1328. [bug] The validator could incorrectly verify an invalid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negative proof.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1327. [bug] The validator would incorrectly mark data as insecure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when seeing a bogus signature before a correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1326. [bug] DNAME/CNAME signatures were not being cached when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation was not being performed. [RT #3284]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1325. [bug] If the tcpquota was exhausted it was possible to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to trigger a INSIST() failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1324. [port] darwin: ifconfig.sh now supports darwin.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1322. [bug] dnssec-signzone usage message was misleading.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding would incorrectly duplicate its output and sign it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1320. [doc] query-source-v6 was missing from options section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1319. [func] libbind: log attempts to exploit #1318.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1318. [bug] libbind: Remote buffer overrun.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding element name.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1316. [bug] libbind: gethostans() could get out of sync parsing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the response if there was a very long CNAME chain.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1315. [bug] Options should apply to the internal _bind view.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1314. [port] Handle ECONNRESET from sendmsg() [unix].
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1313. [func] Query log now says if the query was signed (S) or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if EDNS was used (E).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1312. [func] Log TSIG key used w/ outgoing zone transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1310. [bug] 'rndc stop' failed to cause zones to be flushed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sometimes. [RT #3157]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1309. [func] Log that a zone transfer was covered by a TSIG.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1308. [func] DS (delegation signer) support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1307. [bug] nsupdate: allow white space base64 key data.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1306. [bug] Badly encoded LOC record when the size, horizontal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding precision or vertical precision was 0.1m.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1305. [bug] Document that internal zones are included in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rndc status results.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1304. [func] New function: dns_zone_name().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1302. [func] Extended rndc dumpdb to support dumping of zones and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding view selection: 'dumpdb [-all|-zones|-cache] [view]'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1301. [func] New category 'update-security'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1300. [port] Compaq Trucluster support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1299. [bug] Set AI_ADDRCONFIG when looking up addresses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via getaddrinfo() (affects dig, host, nslookup, rndc
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and nsupdate).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could be left with a trailing "\" after configure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has been run.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1297. [port] linux: make handling EINVAL from socket() no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding conditional on #ifdef LINUX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1296. [bug] isc_log_closefilelogs() needed to lock the log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1295. [bug] isc_log_setdebuglevel() needed to lock the log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1294. [func] libbind: no longer attempts bit string labels for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for nibble style resolution.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1292. [func] Enable IPv6 support when using ioctl style interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scanning and OS supports SIOCGLIFADDR using struct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if_laddrreq.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1291. [func] Enable IPv6 support when using sysctl style interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1290. [func] "dig axfr" now reports the number of messages
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as well as the number of records.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reflect written requirements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a rdataset to a zone db in the rbtdb implementation of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addrdataset.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1286. [bug] dns_name_downcase() enforce requirement that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding target != NULL or name->buffer != NULL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1285. [func] lwres: probe the system to see what address families
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are currently in use.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1284. [bug] The RTT estimate on unused servers was not aged.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1283. [func] Use "dataready" accept filter if available.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1282. [port] libbind: hpux 11.11 interface scanning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1281. [func] Log zone when unable to get private keys to update
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone. Log zone when NXT records are missing from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding secure zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1280. [bug] libbind: escape '(' and ')' when converting to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding presentation form.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1278. [func] dig: now supports +[no]cl +[no]ttlid.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1277. [func] You can now create your own customized printing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding styles: dns_master_stylecreate() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_master_styledestroy().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1276. [bug] libbind: const pointer conflicts in res_debug.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1274. [bug] Memory leak in lwres_gnbarequest_parse().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1273. [port] libbind: solaris: 64 bit binary compatibility.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1272. [contrib] Berkeley DB 4.0 sdb implementation from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1271. [bug] "recursion available: {denied,approved}" was too
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1270. [bug] Check that system inet_pton() and inet_ntop() support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1269. [port] Openserver: ifconfig.sh support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1268. [port] Openserver: the value FD_SETSIZE depends on whether
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <sys/param.h> is included or not. Be consistent.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1267. [func] isc_file_openunique() now creates file using mode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 0666 rather than 0600.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding __ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are not C++ compatible, use *_TYPE versions instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1264. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1263. [bug] Reference after free error if dns_dispatchmgr_create()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
cfa64348224b66dd1c9979b809406c4d15b1c137fielding support for compressed TSIG owner names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1260. [func] libbind: res_update can now update IPv6 servers,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding new function res_findzonecut2().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding w/o sa_len.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1258. [bug] libbind: res_nametotype() and res_nametoclass() were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1257. [bug] Failure to write pid-file should not be fatal on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reload. [RT #2861]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1255. [bug] When verifying that an NXT proves nonexistence, check
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the rcode of the message and only do the matching NXT
cfa64348224b66dd1c9979b809406c4d15b1c137fielding check. That is, for NXDOMAIN responses, check that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the name is in the range between the NXT owner and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding next name, and for NOERROR NODATA responses, check
cfa64348224b66dd1c9979b809406c4d15b1c137fielding that the type is not present in the NXT bitmap.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1254. [func] preferred-glue option from BIND 8.3.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1253. [bug] The dnssec system test failed to remove the correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1252. [bug] Dig, host and nslookup were not checking the address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the answer was coming from against the address it was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sent to. [RT #2692]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1251. [port] win32: a make file contained absolute version specific
cfa64348224b66dd1c9979b809406c4d15b1c137fielding references.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1250. [func] Nsupdate will report the address the update was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1249. [bug] Missing masters clause was not handled gracefully.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1248. [bug] DESTDIR was not being propagated between makes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1247. [bug] Don't reset the interface index for link/site local
cfa64348224b66dd1c9979b809406c4d15b1c137fielding addresses. [RT #2576]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1246. [func] New functions isc_sockaddr_issitelocal(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and isc_netaddr_islinklocal().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1244. [bug] Receiving a TCP message from a blackhole address would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prevent further messages being received over that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1243. [bug] It was possible to trigger a REQUIRE() in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_message_findtype(). [RT #2659]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1241. [bug] Drop received UDP messages with a zero source port
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as these are invariably forged. [RT #2621]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1240. [bug] It was possible to leak zone references by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specifying an incorrect zone to rndc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1239. [bug] Under certain circumstances named could continue to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use a name after it had been freed triggering
cfa64348224b66dd1c9979b809406c4d15b1c137fielding INSIST() failures. [RT #2614]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1238. [bug] It is possible to lockup the server when shutting down
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if notifies were being processed. [RT #2591]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1237. [bug] nslookup: "set q=type" failed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NULL terminated text regions. [RT #2588]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1235. [func] Report 'out of memory' errors from openssl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1234. [bug] contrib/sdb: 'zonetodb' failed to call
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_result_register(). DNS_R_SEENINCLUDE should not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1233. [bug] The flags field of a KEY record can be expressed in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hex as well as decimal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1229. [bug] named would crash if it received a TSIG signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding query as part of an AXFR response. [RT #2570]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if a number was expected and some other token was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding found. [RT #2532]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1226. [func] Use EDNS for zone refresh queries. [RT #2551]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1225. [func] dns_message_setopt() no longer requires that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_message_renderbegin() to have been called.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1224. [bug] 'rrset-order' and 'sortlist' should be additive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not exclusive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are supported.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1222. [bug] Specifying 'port *' did not always result in a system
cfa64348224b66dd1c9979b809406c4d15b1c137fielding selected (non-reserved) port being used. [RT #2537]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compared case insensitively. [RT #2542]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1220. [func] Support for APL rdata type.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1219. [func] Named now reports the TSIG extended error code when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding signature verification fails. [RT #1651]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1218. [bug] Named incorrectly returned SERVFAIL rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1217. [func] Report locations of previous key definition when a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding duplicate is detected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1216. [bug] Multiple server clauses for the same server were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reported. [RT #2514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1214. [bug] Win32: isc_file_renameunique() could leave zero length
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files behind.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1213. [func] Report view associated with client if it is not a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding standard view (_default or _bind).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1212. [port] libbind: 64k answer buffers were causing stack space
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be exceeded for certain OS. Use heap space instead.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1211. [bug] dns_name_fromtext() incorrectly handled certain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding valid octal bitlabels. [RT #2483]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compatible addresses. [RT #2461]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1209. [bug] Dig, host, nslookup were not checking the message ids
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on the responses. [RT #2454]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1208. [bug] dns_master_load*() failed to log a error message if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an error was detected when parsing the owner name of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a record. [RT #2448]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an invalid pointer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trigger a non-EDNS retry.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the message. [RT #2449]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1204. [bug] libbind: res_nupdate() failed to update the name
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server addresses before sending the update.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1203. [func] Report locations of previous acl and zone definitions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when a duplicate is detected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1202. [func] New functions: cfg_obj_line() and cfg_obj_file().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1201. [bug] Require that if 'callbacks' is passed to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_rdata_fromtext(), callbacks->error and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding callbacks->warn are initialized.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1200. [bug] Log 'errno' that we are unable to convert to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_result_t. [RT #2404]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1198. [bug] OPT printing style was not consistent with the way the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding header fields are printed. The DO bit was not reported
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if set. Report if any of the MBZ bits are set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1197. [bug] Attempts to define the same acl multiple times were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1196. [contrib] update mdnkit to 2.2.3.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1195. [bug] Attempts to redefine builtin acls should be caught.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1194. [bug] Not all duplicate zone definitions were being detected
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at the named.conf checking stage. [RT #2431]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1193. [bug] dig +besteffort parsing didn't handle packet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding truncation. dns_message_parse() has new flag
cfa64348224b66dd1c9979b809406c4d15b1c137fielding DNS_MESSAGE_IGNORETRUNCATION.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1192. [bug] The seconds fields in LOC records were restricted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to three decimal places. More decimal places should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be allowed but warned about.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1191. [bug] A dynamic update removing the last non-apex name in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a secure zone would fail. [RT #2399]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1189. [bug] On some systems, malloc(0) returns NULL, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause the caller to report an out of memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding error. [RT #2398]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1188. [bug] Dynamic updates of a signed zone would fail if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some of the zone private keys were unavailable.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1187. [bug] named was incorrectly returning DNSSEC records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in negative responses when the DO bit was not set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding EOL token when reading to end of line.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding unless RES_INIT is set when calling res_*init().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when res_*init() is called.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1183. [bug] Handle ENOSR error when writing to the internal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding control pipe. [RT #2395]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1182. [bug] The server could throw an assertion failure when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding constructing a negative response packet.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1181. [func] Add the "key-directory" configuration statement,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding which allows the server to look for online signing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys in alternate directories.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1180. [func] dnssec-keygen should always generate keys with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding protocol 3 (DNSSEC), since it's less confusing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1179. [func] Add SIG(0) support to nsupdate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1178. [bug] Follow and cache (if appropriate) A6 and other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding data chains to completion in the additional section.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1177. [func] Report view when loading zones if it is not a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding standard view (_default or _bind). [RT #2270]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1176. [doc] Document that allow-v6-synthesis is only performed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for clients that are supplied recursive service.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1175. [bug] named-checkzone and named-checkconf failed to call
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_result_register() at startup which could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result in runtime exceptions when printing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "out of memory" errors. [RT #2335]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1174. [bug] Win32: add WSAECONNRESET to the expected errors
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from connect(). [RT #2308]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1173. [bug] Potential memory leaks in isc_log_create() and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_log_settag(). [RT #2336]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding table of RR types in ARM.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1171. [func] Added function isc_region_compare(), updated files in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lib/dns to use this function instead of local one.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1170. [bug] Don't attempt to print the token when a I/O error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding occurs when parsing named.conf. [RT #2275]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1169. [func] Identify recursive queries in the query log.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1167. [contrib] nslint-2.1a3 (from author).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1166. [bug] "Not Implemented" should be reported as NOTIMP,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not NOTIMPL. [RT #2281]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1164. [bug] Empty masters clauses in slave / stub zones were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding handled gracefully. [RT #2262]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1163. [func] isc_time_formattimestamp() now includes the year.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1162. [bug] The allow-notify option was not accepted in slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone statements.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1161. [bug] named-checkzone looped on unbalanced brackets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1160. [bug] Generating Diffie-Hellman keys longer than 1024
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bits could fail. [RT #2241]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1159. [bug] MD and MF are not permitted to be loaded by RFC1123.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1158. [func] Report the client's address when logging notify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1157. [func] match-clients and match-destinations now accept
cfa64348224b66dd1c9979b809406c4d15b1c137fielding keys. [RT #2045]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1156. [port] The configure test for strsep() incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding succeeded on certain patched versions of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding AIX 4.3.3. [RT #2190]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1155. [func] Recover from master files being removed from under
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1154. [bug] Don't attempt to obtain the netmask of a interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if there is no address configured. [RT #2176]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1153. [func] 'rndc {stop|halt} -p' now reports the process id
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the instance of named being shutdown.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1152. [bug] libbind: read buffer overflows.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1151. [bug] nslookup failed to check that the arguments to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the port, timeout, and retry options were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding valid integers and in range. [RT #2099]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1150. [bug] named incorrectly accepted TTL values
cfa64348224b66dd1c9979b809406c4d15b1c137fielding containing plus or minus signs, such as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1149. [func] New function isc_parse_uint32().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1148. [func] 'rndc-confgen -a' now provides positive feedback.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the OS. listen-on-v6 { any; }; should no longer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result in IPv4 queries be accepted. Similarly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding control { inet :: ... }; should no longer result
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in IPv4 connections being accepted. This can be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding overridden at compile time by defining
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ISC_ALLOW_MAPPED=1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported by the OS by a new function
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_socket_ipv6only().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1145. [func] "host" no longer reports a NOERROR/NODATA response
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by printing nothing. [RT #2065]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1144. [bug] rndc-confgen would crash if both the -a and -t
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options were specified. [RT #2159]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1143. [bug] When a trusted-keys statement was present and named
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was built without crypto support, it would leak memory.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1142. [bug] dnssec-signzone would fail to delete temporary files
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in some failure cases. [RT #2144]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1141. [bug] When named rejected a control message, it would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding leak a file descriptor and memory. It would also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail to respond, causing rndc to hang.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #2139, #2164]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to the -s option. [RT #2138]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1139. [func] It is now possible to flush a given name from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache(s) via 'rndc flushname name [view]'. [RT #2051]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1138. [func] It is now possible to flush a given name from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache by calling the new function
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_cache_flushname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1137. [func] It is now possible to flush a given name from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ADB by calling the new function dns_adb_flushname().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1136. [bug] CNAME records synthesized from DNAMEs did not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding have a TTL of zero as required by RFC2672.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1135. [func] You can now override the default syslog() facility for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named/lwresd at compile time. [RT #1982]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1134. [bug] Multi-threaded servers could deadlock in ferror()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when reloading zone files. [RT #1951, #1998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1132. [func] Improve UPDATE prerequisite failure diagnostic messages.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1131. [bug] The match-destinations view option did not work with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv6 destinations. [RT #2073, #2074]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1130. [bug] Log messages reporting an out-of-range serial number
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not include the out-of-range number but the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding following token. [RT #2076]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1129. [bug] Multi-threaded servers could crash under heavy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resolution load due to a race condition. [RT #2018]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1128. [func] sdb drivers can now provide RR data in either text
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or wire format, the latter using the new functions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_sdb_putrdata() and dns_sdb_putnamedrdata().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1127. [func] rndc: If the server to contact has multiple addresses,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding try all of them.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1126. [bug] The server could access a freed event if shut
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down while a client start event was pending
cfa64348224b66dd1c9979b809406c4d15b1c137fielding delivery. [RT #2061]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1125. [bug] rndc: -k option was missing from usage message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are now documented. [RT #2052]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1123. [bug] dig +[no]fail did not match description. [RT #2052]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1122. [tuning] Resolution timeout reduced from 90 to 30 seconds.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1121. [bug] The server could attempt to access a NULL zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding table if shut down while resolving.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1587, #2054]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1120. [bug] Errors in options were not fatal. [RT #2002]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1119. [func] Added support in Win32 for NTFS file/directory ACL's
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for access control.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1118. [bug] On multi-threaded servers, a race condition
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause an assertion failure in resolver.c
cfa64348224b66dd1c9979b809406c4d15b1c137fielding during resolver shutdown. [RT #2029]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1117. [port] The configure check for in6addr_loopback incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding succeeded on AIX 4.3 when compiling with -O2
cfa64348224b66dd1c9979b809406c4d15b1c137fielding because the test code was optimized away.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1116. [bug] Setting transfers in a server clause, transfers-in,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or transfers-per-ns to a value greater than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 2147483647 disabled transfers. [RT #2002]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1115. [func] Set maximum values for cleaning-interval,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding heartbeat-interval, interface-interval,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-transfer-idle-in, max-transfer-idle-out,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding max-transfer-time-in, max-transfer-time-out,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics-interval of 28 days and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sig-validity-interval of 3660 days. [RT #2002]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1114. [port] Ignore more accept() errors. [RT #2021]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1113. [bug] The allow-update-forwarding option was ignored
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when specified in a view. [RT #2014]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1112. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1111. [bug] Multi-threaded servers could deadlock processing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recursive queries due to a locking hierarchy
cfa64348224b66dd1c9979b809406c4d15b1c137fielding violation in adb.c. [RT #2017]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1110. [bug] dig should only accept valid abbreviations of +options.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1109. [bug] nsupdate accepted illegal ttl values.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1108. [bug] On Win32, rndc was hanging when named was not running
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to failure to select for exceptional conditions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in select(). [RT #1870]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1107. [bug] nsupdate could catch an assertion failure if an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding invalid domain name was given as the argument to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the "zone" command.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1106. [bug] After seeing an out of range TTL, nsupdate would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding treat all TTLs as out of range. [RT #2001]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1105. [port] OpenUNIX 8 enable threads by default. [RT #1970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1104. [bug] Invalid arguments to the transfer-format option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause an assertion failure. [RT #1995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1102. [doc] Note that query logging is enabled by directing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries category to a channel.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1101. [bug] Array bounds read error in lwres_gai_strerror.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1100. [bug] libbind: DNSSEC key ids were computed incorrectly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
cfa64348224b66dd1c9979b809406c4d15b1c137fielding compile time errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1097. [func] libbind: RES_PRF_TRUNC for dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1096. [func] libbind: "DNSSEC OK" (DO) support.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1095. [func] libbind: resolver option: no-tld-query. disables
cfa64348224b66dd1c9979b809406c4d15b1c137fielding trying unqualified as a tld. no_tld_query is also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported for FreeBSD compatibility.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1094. [func] libbind: add support gcc's format string checking.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1093. [doc] libbind: miscellaneous nroff fixes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1092. [bug] libbind: get*by*() failed to check if res_init() had
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been called.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1091. [bug] libbind: misplaced va_end().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the amount of memory consumed resulting in garbage
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address being returned. Alignment calculations were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wasting space. We weren't suppressing duplicate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1089. [func] libbind: inet_{cidr,net}_{pton,ntop}() now have IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1088. [port] libbind: MPE/iX C.70 (incomplete)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1087. [bug] libbind: struct __res_state too large on 64 bit arch.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1086. [port] libbind: sunos: old sprintf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1085. [port] libbind: solaris: sys_nerr and sys_errlist do not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exist when compiling in 64 bit mode.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1084. [cleanup] libbind: gai_strerror() rewritten.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1083. [bug] The default control channel listened on the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wildcard address, not the loopback as documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1082. [bug] The -g option to named incorrectly caused logging
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be sent to syslog in addition to stderr.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1081. [bug] Multicast queries were incorrectly identified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding based on the source address, not the destination
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1080. [bug] BIND 8 compatibility: accept bare IP prefixes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as the second element of a two-element top level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sort list statement. [RT #1964]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1079. [bug] BIND 8 compatibility: accept bare elements at top
cfa64348224b66dd1c9979b809406c4d15b1c137fielding level of sort list treating them as if they were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a single element list. [RT #1963]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1078. [bug] We failed to correct bad tv_usec values in one case.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1077. [func] Do not accept further recursive clients when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the total number of recursive lookups being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding processed exceeds max-recursive-clients, even
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if some of the lookups are internally generated.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1915, #1938]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1076. [bug] A badly defined global key could trigger an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on load/reload if views were used. [RT #1947]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1075. [bug] Out-of-range network prefix lengths were not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reported. [RT #1954]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1074. [bug] Running out of memory in dump_rdataset() could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause an assertion failure. [RT #1946]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1073. [bug] The ADB cache cleaning should also be space driven.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1915, #1938]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1072. [bug] The TCP client quota could be exceeded when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recursion occurred. [RT #1937]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1071. [bug] Sockets listening for TCP DNS connections
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specified an excessive listen backlog. [RT #1937]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1070. [bug] Copy DNSSEC OK (DO) to response as specified by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1069. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1068. [bug] errno could be overwritten by catgets(). [RT #1921]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1067. [func] Allow quotas to be soft, isc_quota_soft().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1066. [bug] Provide a thread safe wrapper for strerror().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1065. [func] Runtime support to select new / old style interface
cfa64348224b66dd1c9979b809406c4d15b1c137fielding scanning using ioctls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1064. [bug] Do not shut down active network interfaces if we
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are unable to scan the interface list. [RT #1921]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1063. [bug] libbind: "make install" was failing on IRIX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1062. [bug] If the control channel listener socket was shut
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down before server exit, the listener object could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be freed twice. [RT #1916]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1061. [bug] If periodic cache cleaning happened to start
cfa64348224b66dd1c9979b809406c4d15b1c137fielding while cleaning due to reaching the configured
cfa64348224b66dd1c9979b809406c4d15b1c137fielding maximum cache size was in progress, the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could catch an assertion failure. [RT #1912]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1060. [func] Move refresh, stub and notify UDP retry processing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding into dns_request.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1059. [func] dns_request now support will now retry UDP queries,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_request_createvia2() and dns_request_createraw2().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1058. [func] Limited lifetime ticker timers are now available,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_timertype_limited.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1057. [bug] Reloading the server after adding a "file" clause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to a zone statement could cause the server to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding crash due to a typo in change 1016.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1056. [bug] Rndc could catch an assertion failure on SIGINT due
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to an uninitialized variable. [RT #1908]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1055. [func] Version and hostname queries can now be disabled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using "version none;" and "hostname none;",
cfa64348224b66dd1c9979b809406c4d15b1c137fielding respectively.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1054. [bug] On Win32, cfg_categories and cfg_modules need to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exported from the libisccfg DLL.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1053. [bug] Dig did not increase its timeout when receiving
cfa64348224b66dd1c9979b809406c4d15b1c137fielding AXFRs unless the +time option was used. [RT #1904]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1052. [bug] Journals were not being created in binary mode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding resulting in "journal format not recognized" error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding under Win32. [RT #1889]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1051. [bug] Do not ignore a network interface completely just
cfa64348224b66dd1c9979b809406c4d15b1c137fielding because it has a noncontiguous netmask. Instead,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding omit it from the localnets ACL and issue a warning.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1050. [bug] Log messages reporting malformed IP addresses in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address lists such as that of the forwarders option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failed to include the correct error code, file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name, and line number. [RT #1890]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1049. [func] "pid-file none;" will disable writing a pid file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1048. [bug] Servers built with -DISC_MEM_USE_INTERNAL_MALLOC=1
cfa64348224b66dd1c9979b809406c4d15b1c137fielding didn't work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1047. [bug] named was incorrectly refusing all requests signed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with a TSIG key derived from an unsigned TKEY
cfa64348224b66dd1c9979b809406c4d15b1c137fielding negotiation with a NOERROR response. [RT #1886]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1046. [bug] The help message for the --with-openssl configure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option was inaccurate. [RT #1880]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1045. [bug] It was possible to skip saving glue for a nameserver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for a stub zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1044. [bug] Specifying allow-transfer, notify-source, or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding notify-source-v6 in a stub zone was not treated
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as an error.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1043. [bug] Specifying a transfer-source or transfer-source-v6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option in the zone statement for a master zone was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not treated as an error. [RT #1876]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1042. [bug] The "config" logging category did not work properly.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1041. [bug] Dig/host/nslookup could catch an assertion failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on SIGINT due to an uninitialized variable. [RT #1867]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1040. [bug] Multiple listen-on-v6 options with different ports
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were not accepted. [RT #1875]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1039. [bug] Negative responses with CNAMEs in the answer section
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were cached incorrectly. [RT #1862]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1038. [bug] In servers configured with a tkey-domain option,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TKEY queries with an owner name other than the root
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause an assertion failure. [RT #1866, #1869]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1037. [bug] Negative responses whose authority section contain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding SOA or NS records whose owner names are not equal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding equal to or parents of the query name should be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rejected. [RT #1862]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1036. [func] Silently drop requests received via multicast as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding long as there is no final multicast DNS standard.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1035. [bug] If we respond to multicast queries (which we
cfa64348224b66dd1c9979b809406c4d15b1c137fielding currently do not), respond from a unicast address
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as specified in RFC 1123. [RT #137]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1034. [bug] Ignore the RD bit on multicast queries as specified
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in RFC 1123. [RT #137]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1033. [bug] Always respond to requests with an unsupported opcode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with NOTIMP, even if we don't have a matching view
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or cannot determine the class.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1032. [func] hostname.bind/txt/chaos now returns the name of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the machine hosting the nameserver. This is useful
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in diagnosing problems with anycast servers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1030. [bug] On systems with no resolv.conf file, nsupdate
cfa64348224b66dd1c9979b809406c4d15b1c137fielding exited with an error rather than defaulting
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to using the loopback address. [RT #1836]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1029. [bug] Some named.conf errors did not cause the loading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the configuration file to return a failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding status even though they were logged. [RT #1847]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1028. [bug] On Win32, dig/host/nslookup looked for resolv.conf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the wrong directory. [RT #1833]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1027. [bug] RRs having the reserved type 0 should be rejected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1026. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1025. [bug] Don't use multicast addresses to resolve iterative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding queries. [RT #101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1024. [port] Compilation failed on HP-UX 11.11 due to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding incompatible use of the SIOCGLIFCONF macro
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name. [RT #1831]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1023. [func] Accept hints without TTLs.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1022. [bug] Don't report empty root hints as "extra data".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1021. [bug] On Win32, log message timestamps were one month
cfa64348224b66dd1c9979b809406c4d15b1c137fielding later than they should have been, and the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding would exhibit unspecified behavior in December.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1020. [bug] IXFR log messages did not distinguish between
cfa64348224b66dd1c9979b809406c4d15b1c137fielding true IXFRs, AXFR-style IXFRs, and mere version
cfa64348224b66dd1c9979b809406c4d15b1c137fielding polls. [RT #1811]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1019. [bug] The value of the lame-ttl option was limited to 18000
cfa64348224b66dd1c9979b809406c4d15b1c137fielding seconds, not 1800 seconds as documented. [RT #1803]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1018. [bug] The default log channel was not always initialized
cfa64348224b66dd1c9979b809406c4d15b1c137fielding correctly. [RT #1813]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1017. [bug] When specifying TSIG keys to dig and nsupdate using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the -k option, they must be HMAC-MD5 keys. [RT #1810]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1016. [bug] Slave zones with no backup file were re-transferred
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on every server reload.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1015. [bug] Log channels that had a "versions" option but no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "size" option failed to create numbered log
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files. [RT #1783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1014. [bug] Some queries would cause statistics counters to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding increment more than once or not at all. [RT #1321]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1013. [bug] It was possible to cancel a query twice when marking
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a server as bogus or by having a blackhole acl.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1012. [bug] The -p option to named did not behave as documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1011. [cleanup] Removed isc_dir_current().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1010. [bug] The server could attempt to execute a command channel
cfa64348224b66dd1c9979b809406c4d15b1c137fielding command after initiating server shutdown, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure. [RT #1766]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1009. [port] OpenUNIX 8 support. [RT #1728]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1008. [port] libtool.m4, ltmain.sh from libtool-1.4.2.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1007. [port] config.guess, config.sub from autoconf-2.52.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1006. [bug] If a KEY RR was found missing during DNSSEC validation,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure could subsequently be triggered
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the resolver. [RT #1763]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1005. [bug] Don't copy nonzero RCODEs from request to response.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1004. [port] Deal with recvfrom() returning EHOSTDOWN. [RT #1770]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1003. [func] Add the +retry option to dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1002. [bug] When reporting an unknown class name in named.conf,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding including the file name and line number. [RT #1759]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1001. [bug] win32 socket code doio_recv was not catching a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding WSACONNRESET error when a client was timing out
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the request and closing its socket. [RT #1745]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding1000. [bug] BIND 8 compatibility: accept "HESIOD" as an alias
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for class "HS". [RT #1759]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 999. [func] "rndc retransfer zone [class [view]]" added.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 998. [func] named-checkzone now has arguments to specify the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding chroot directory (-t) and working directory (-w).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 997. [func] Add support for RSA-SHA1 keys (RFC3110).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 996. [func] Issue warning if the configuration filename contains
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the chroot path.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 995. [bug] dig, host, nslookup: using a raw IPv6 address as a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding target address should be fatal on a IPv4 only system.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 994. [func] Treat non-authoritative responses to queries for type
cfa64348224b66dd1c9979b809406c4d15b1c137fielding NS as referrals even if the NS records are in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answer section, because BIND 8 servers incorrectly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding send them that way. This is necessary for DNSSEC
cfa64348224b66dd1c9979b809406c4d15b1c137fielding validation of the NS records of a secure zone to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding succeed when the parent is a BIND 8 server. [RT #1706]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 993. [func] dig: -v now reports the version.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 992. [doc] dig: ~/.digrc is now documented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 991. [func] Lower UDP refresh timeout messages to level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 990. [bug] The rndc-confgen man page was not installed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 989. [bug] Report filename if $INCLUDE fails for file related
cfa64348224b66dd1c9979b809406c4d15b1c137fielding errors. [RT #1736]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 988. [bug] 'additional-from-auth no;' did not work reliably
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in the case of queries answered from the cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 987. [bug] "dig -help" didn't show "+[no]stats".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 986. [bug] "dig +noall" failed to clear stats and command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 985. [func] Consider network interfaces to be up iff they have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a nonzero IP address rather than based on the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IFF_UP flag. [RT #1160]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 984. [bug] Multi-threading should be enabled by default on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Solaris 2.7 and newer, but it wasn't.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 983. [func] The server now supports generating IXFR difference
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sequences for non-dynamic zones by comparing zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding versions, when enabled using the new config
cfa64348224b66dd1c9979b809406c4d15b1c137fielding option "ixfr-from-differences". [RT #1727]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 982. [func] If "memstatistics-file" is set in options the memory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding statistics will be written to it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 981. [func] The dnssec tools can now take multiple '-r randomfile'
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 980. [bug] Incoming zone transfers restarting after an error
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could trigger an assertion failure. [RT #1692]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 979. [func] Incremental master file dumping. dns_master_dumpinc(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_master_dumptostreaminc(), dns_dumpctx_attach(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_dumpctx_detach(), dns_dumpctx_cancel(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dns_dumpctx_db() and dns_dumpctx_version().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 978. [bug] dns_db_attachversion() had an invalid REQUIRE()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 977. [bug] Improve "not at top of zone" error message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 976. [func] named-checkconf can now test load master zones
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (named-checkconf -z). [RT #1468]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 975. [bug] "max-cache-size default;" as a view option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding caused an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 974. [bug] "max-cache-size unlimited;" as a global option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not accepted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 973. [bug] Failed to log the question name when logging:
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "bad zone transfer request: non-authoritative zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (NOTAUTH)".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 972. [bug] The file modification time code in zone.c was using the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding wrong epoch. [RT #1667]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 971. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 970. [func] 'max-journal-size' can now be used to set a target
cfa64348224b66dd1c9979b809406c4d15b1c137fielding size for a journal.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 969. [func] dig now supports the undocumented dig 8 feature
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of allowing arbitrary labels, not just dotted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding decimal quads, with the -x option. This can be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding used to conveniently look up RFC2317 names as in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 968. [bug] On win32, the isc_time_now() function was unnecessarily
cfa64348224b66dd1c9979b809406c4d15b1c137fielding calling strtime(). [RT #1671]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 967. [bug] On win32, the link for bindevt was not including the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding required resource file to enable the event viewer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to interpret the error messages in the event log,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 966. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 965. [bug] Including data other than root server NS and A
cfa64348224b66dd1c9979b809406c4d15b1c137fielding records in the root hint file could cause a rbtdb
cfa64348224b66dd1c9979b809406c4d15b1c137fielding node reference leak. [RT #1581, #1618]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 964. [func] Warn if data other than root server NS and A records
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are found in the root hint file. [RT #1581, #1618]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 963. [bug] Bad ISC_LANG_ENDDECLS. [RT #1645]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 962. [bug] libbind: bad "#undef", don't attempt to install
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-existent nlist.h. [RT #1640]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 961. [bug] Tried to use a IPV6 feature when ISC_PLATFORM_HAVEIPV6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was not defined. [RT #1482]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 960. [port] liblwres failed to build on systems with support for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding getrrsetbyname() in the OS. [RT #1592]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 959. [port] On FreeBSD, determine the number of CPUs by calling
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sysctlbyname(). [RT #1584]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 958. [port] ssize_t is not available on all platforms. [RT #1607]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 957. [bug] sys/select.h inclusion was broken on older platforms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 956. [bug] ns_g_autorndcfile changed to ns_g_keyfile
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in named/win32/os.c due to code changes in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding change #953. win32 .make file for rndc-confgen
cfa64348224b66dd1c9979b809406c4d15b1c137fielding updated to add include path for os.h header.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0rc1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 955. [bug] When using views, the zone's class was not being
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inherited from the view's class. [RT #1583]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 954. [bug] When requesting AXFRs or IXFRs using dig, host, or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nslookup, the RD bit should not be set as zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transfers are inherently non-recursive. [RT #1575]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 953. [func] The /var/run/named.key file from change #843
cfa64348224b66dd1c9979b809406c4d15b1c137fielding has been replaced by /etc/rndc.key. Both
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named and rndc will look for this file and use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it to configure a default control channel key
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if not already configured using a different
cfa64348224b66dd1c9979b809406c4d15b1c137fielding method (rndc.conf / controls). Unlike
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it must be created by manually running
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "rndc-confgen -a".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 952. [bug] The server required manual intervention to serve the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding affected zones if it died between creating a journal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and committing the first change to it.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 951. [bug] CFLAGS was not passed to the linker when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding linking some of the test programs under
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 950. [bug] Explicit TTLs did not properly override $TTL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to a bug in change 834. [RT #1558]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 949. [bug] host was unable to print records larger than 512
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bytes. [RT #1557]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0b2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 948. [port] Integrated support for building on Windows NT /
cfa64348224b66dd1c9979b809406c4d15b1c137fielding Windows 2000.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 947. [bug] dns_rdata_soa_t had a badly named element "mname" which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was really the RNAME field from RFC1035. To avoid
cfa64348224b66dd1c9979b809406c4d15b1c137fielding confusion and silent errors that would occur it the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "origin" and "mname" elements were given their correct
cfa64348224b66dd1c9979b809406c4d15b1c137fielding names "mname" and "rname" respectively, the "mname"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding element is renamed to "contact".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 946. [cleanup] doc/misc/options is now machine-generated from the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding configuration parser syntax tables, and therefore
cfa64348224b66dd1c9979b809406c4d15b1c137fielding more likely to be correct.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 945. [func] Add the new view-specific options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "match-destinations" and "match-recursive-only".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 944. [func] Check for expired signatures on load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 943. [bug] The server could crash when receiving a command
cfa64348224b66dd1c9979b809406c4d15b1c137fielding via rndc if the configuration file listed only
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nonexistent keys in the controls statement. [RT #1530]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding defined on some platforms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 941. [bug] The configuration checker crashed if a slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zone didn't contain a masters statement. [RT #1514]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 940. [bug] Double zone locking failure on error path. [RT #1510]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0b1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 939. [port] Add the --disable-linux-caps option to configure for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding systems that manage capabilities outside of named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 938. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 937. [bug] A race when shutting down a zone could trigger a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding INSIST() failure. [RT #1034]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 936. [func] Warn about IPv4 addresses that are not complete
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dotted quads. [RT #1084]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 935. [bug] inet_pton failed to reject leading zeros.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 934. [port] Deal with systems where accept() spuriously returns
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ECONNRESET.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 933. [bug] configure failed doing libbind on platforms not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding supported by BIND 8. [RT #1496]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0a3 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when installing isc-config.sh.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #198, #1466]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 931. [bug] The controls statement only attempted to verify
cfa64348224b66dd1c9979b809406c4d15b1c137fielding messages using the first key in the key list.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (9.2.0a1/a2 only).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 930. [func] Query performance testing tool added as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 929. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 928. [bug] nsupdate would send empty update packets if the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding send (or empty line) command was run after
cfa64348224b66dd1c9979b809406c4d15b1c137fielding another send but before any new updates or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding prerequisites were specified. It should simply
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ignore this command.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 927. [bug] Don't hold the zone lock for the entire dump to disk.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 926. [bug] The resolver could deadlock with the ADB when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding shutting down (multi-threaded builds only).
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 925. [cleanup] Remove openssl from the distribution; require that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --with-openssl be specified if DNSSEC is needed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 924. [port] Extend support for pre-RFC2133 IPv6 implementation.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 923. [bug] Multiline TSIG secrets (and other multiline strings)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were not accepted in named.conf. [RT #1469]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 922. [func] Added two new lwres_getrrsetbyname() result codes,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ERR_NONAME and ERR_NODATA.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 921. [bug] lwres returned an incorrect error code if it received
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a truncated message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 920. [func] Increase the lwres receive buffer size to 16K.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 919. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 918. [func] In nsupdate, TSIG errors are no longer treated as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fatal errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 917. [func] New nsupdate command 'key', allowing TSIG keys to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be specified in the nsupdate command stream rather
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than the command line.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 916. [bug] Specifying type ixfr to dig without specifying
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a serial number failed in unexpected ways.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 915. [func] The named-checkconf and named-checkzone programs
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now have a '-v' option for printing their version.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 914. [bug] Global 'server' statements were rejected when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding using views, even though they were accepted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in 9.1. [RT #1368]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 913. [bug] Cache cleaning was not sufficiently aggressive.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1441, #1444]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 912. [bug] Attempts to set the 'additional-from-cache' or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'additional-from-auth' option to 'no' in a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server with recursion enabled will now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be ignored and cause a warning message.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 911. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 910. [port] Some pre-RFC2133 IPv6 implementations do not define
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IN6ADDR_ANY_INIT. [RT #1416]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 909. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 908. [func] New program, rndc-confgen, to simplify setting up rndc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 907. [func] The ability to get entropy from either the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding random device, a user-provided file or from
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the keyboard was migrated from the DNSSEC tools
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to libisc as isc_entropy_usebestsource().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 906. [port] Separated the system independent portion of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 905. [bug] Configuring a forward "zone" for the root domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not work. [RT #1418]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 904. [bug] The server would leak memory if attempting to use
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an expired TSIG key. [RT #1406]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 903. [bug] dig should not crash when receiving a TCP packet
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of length 0.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 902. [bug] The -d option was ignored if both -t and -g were also
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 901. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 900. [bug] A config.guess update changed the system identification
cfa64348224b66dd1c9979b809406c4d15b1c137fielding string of FreeBSD systems; configure and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bin/tests/system/ifconfig.sh now recognize the new
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0a2 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 899. [bug] lib/dns/soa.c failed to compile on many platforms
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to inappropriate use of a void value.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1372, #1373, #1386, #1387, #1395]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 898. [bug] "dig" failed to set a nonzero exit status
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on UDP query timeout. [RT #1323]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 897. [bug] A config.guess update changed the system identification
cfa64348224b66dd1c9979b809406c4d15b1c137fielding string of UnixWare systems; configure now recognizes
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the new string.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 896. [bug] If a configuration file is set on named's command line
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and it has a relative pathname, the current directory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (after any possible jailing resulting from named -t)
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will be prepended to it so that reloading works
cfa64348224b66dd1c9979b809406c4d15b1c137fielding properly even when a directory option is present.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 895. [func] New function, isc_dir_current(), akin to POSIX's
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 894. [bug] When using the DNSSEC tools, a message intended to warn
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when the keyboard was being used because of the lack
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of a suitable random device was not being printed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 893. [func] Removed isc_file_test() and added isc_file_exists()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for the basic functionality that was being added
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with isc_file_test().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 892. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 891. [bug] Return an error when a SIG(0) signed response to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an unsigned query is seen. This should actually
cfa64348224b66dd1c9979b809406c4d15b1c137fielding do the verification, but it's not currently
cfa64348224b66dd1c9979b809406c4d15b1c137fielding possible. [RT #1391]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 890. [cleanup] The man pages no longer require the mandoc macros
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and should now format cleanly using most versions of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding nroff, and HTML versions of the man pages have been
cfa64348224b66dd1c9979b809406c4d15b1c137fielding added. Both are generated from DocBook source.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 889. [port] Eliminated blank lines before .TH in nroff man
cfa64348224b66dd1c9979b809406c4d15b1c137fielding pages since they cause problems with some versions
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of nroff. [RT #1390]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 888. [bug] Don't die when using TKEY to delete a nonexistent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TSIG key. [RT #1392]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 887. [port] Detect broken compilers that can't call static
cfa64348224b66dd1c9979b809406c4d15b1c137fielding functions from inline functions. [RT #1212]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 886. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 885. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 884. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 883. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 882. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 881. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 880. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 879. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 878. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 877. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 876. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 875. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 874. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 873. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 872. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 871. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 870. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 869. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 868. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 867. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 866. [func] Close debug only file channels when debug is set to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zero. [RT #1246]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 865. [bug] The new configuration parser did not allow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the optional debug level in a "severity debug"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clause of a logging channel to be omitted.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This is now allowed and treated as "severity
cfa64348224b66dd1c9979b809406c4d15b1c137fielding debug 1;" like it does in BIND 8.2.4, not as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "severity debug 0;" like it did in BIND 9.1.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 864. [cleanup] Multi-threading is now enabled by default on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 863. [bug] If an error occurred while an outgoing zone transfer
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was starting up, the server could access a domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name that had already been freed when logging a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding message saying that the transfer was starting.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 862. [bug] Use after realloc(), non portable pointer arithmetic in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 861. [port] Add support for Mac OS X, by making it equivalent
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to Darwin. This was derived from the config.guess
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file shipped with Mac OS X. [RT #1355]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 860. [func] Drop cross class glue in zone transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 859. [bug] Cache cleaning now won't swamp the CPU if there
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is a persistent over limit condition.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 858. [func] isc_mem_setwater() no longer requires that when the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding callback function is non-NULL then its hi_water
cfa64348224b66dd1c9979b809406c4d15b1c137fielding argument must be greater than its lo_water argument
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (they can now be equal) or that they be non-zero.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 857. [cleanup] Use ISC_MAGIC() to define all magic numbers for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding structs, for our friends in EBCDIC-land.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 856. [func] Allow partial rdatasets to be returned in answer and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding authority sections to help non-TCP capable clients
cfa64348224b66dd1c9979b809406c4d15b1c137fielding recover from truncation. [RT #1301]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 854. [bug] The config parser didn't properly handle config
cfa64348224b66dd1c9979b809406c4d15b1c137fielding options that were specified in units of time other
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than seconds. [RT #1372]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 853. [bug] configure_view_acl() failed to detach existing acls.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 852. [bug] Handle responses from servers which do not know
cfa64348224b66dd1c9979b809406c4d15b1c137fielding about IXFR.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 851. [cleanup] The obsolete support-ixfr option was not properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --- 9.2.0a1 released ---
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 850. [bug] dns_rbt_findnode() would not find nodes that were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding split on a bitstring label somewhere other than in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the last label of the node. [RT #1351]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 848. [func] A minimum max-cache-size of two megabytes is enforced
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by the cache cleaner.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 847. [func] Added isc_file_test(), which currently only has
cfa64348224b66dd1c9979b809406c4d15b1c137fielding some very basic functionality to test for the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding existence of a file, whether a pathname is absolute,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or whether a pathname is the fundamental representation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of the current directory. It is intended that this
cfa64348224b66dd1c9979b809406c4d15b1c137fielding function can be expanded to test other things a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding programmer might want to know about a file.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 846. [func] A non-zero 'param' to dst_key_generate() when making an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hmac-md5 key means that good entropy is not required.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 845. [bug] The access rights on the public file of a symmetric
cfa64348224b66dd1c9979b809406c4d15b1c137fielding key are now restricted as soon as the file is opened,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rather than after it has been written and closed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding just as <lwres/net.h> does.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 843. [func] If no controls statement is present in named.conf,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or if any inet phrase of a controls statement is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lacking a keys clause, then a key will be automatically
cfa64348224b66dd1c9979b809406c4d15b1c137fielding generated by named and an rndc.conf-style file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding named named.key will be written that uses it. rndc
cfa64348224b66dd1c9979b809406c4d15b1c137fielding will use this file only if its normal configuration
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file, or one provided on the command line, does not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 842. [func] 'rndc flush' now takes an optional view.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 841. [bug] When sdb modules were not declared threadsafe, their
cfa64348224b66dd1c9979b809406c4d15b1c137fielding create and destroy functions were not serialized.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 840. [bug] The config file parser could print the wrong file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding name if an error was detected after an included file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding was parsed. [RT #1353]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 839. [func] Dump packets for which there was no view or that the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding class could not be determined to category "unmatched".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 838. [port] UnixWare 7.x.x is now suported by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 837. [cleanup] Multi-threading is now enabled by default only on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding OSF1, Solaris 2.7 and newer, and AIX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 836. [func] Upgraded libtool to 1.4.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 835. [bug] The dispatcher could enter a busy loop if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it got an I/O error receiving on a UDP socket.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 834. [func] Accept (but warn about) master files beginning with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an SOA record without an explicit TTL field and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lacking a $TTL directive, by using the SOA MINTTL
cfa64348224b66dd1c9979b809406c4d15b1c137fielding as a default TTL. This is for backwards compatibility
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with old versions of BIND 8, which accepted such
cfa64348224b66dd1c9979b809406c4d15b1c137fielding files without warning although they are illegal
cfa64348224b66dd1c9979b809406c4d15b1c137fielding according to RFC1035.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding <dns/soa.h>, and extended them to support
cfa64348224b66dd1c9979b809406c4d15b1c137fielding all the integer-valued fields of the SOA RR.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 832. [bug] The default location for named.conf in named-checkconf
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should depend on --sysconfdir like it does in named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 831. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 830. [func] Implement 'rndc status'.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 829. [bug] The DNS_R_ZONECUT result code should only be returned
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when an ANY query is made with DNS_DBFIND_GLUEOK set.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding In all other ANY query cases, returning the delegation
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 828. [bug] The errno value from recvfrom() could be overwritten
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by logging code. [RT #1293]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 827. [bug] When an IXFR protocol error occurs, the slave
cfa64348224b66dd1c9979b809406c4d15b1c137fielding should retry with AXFR.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 826. [bug] Some IXFR protocol errors were not detected.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 825. [bug] zone.c:ns_query() detached from the wrong zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reference. [RT #1264]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 824. [bug] Correct line numbers reported by dns_master_load().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 823. [func] The output of "dig -h" now goes to stdout so that it
cfa64348224b66dd1c9979b809406c4d15b1c137fielding can easily be piped through "more". [RT #1254]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 822. [bug] Sending nxrrset prerequisites would crash nsupdate.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 821. [bug] The program name used when logging to syslog should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be stripped of leading path components.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #1178, #1232]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 820. [bug] Name server address lookups failed to follow
cfa64348224b66dd1c9979b809406c4d15b1c137fielding A6 chains into the glue of local authoritative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 819. [bug] In certain cases, the resolver's attempts to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding restart an address lookup at the root could cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the fetch to deadlock (with itself) instead of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding restarting. [RT #1225]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 818. [bug] Certain pathological responses to ANY queries could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cause an assertion failure. [RT #1218]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 817. [func] Adjust timeouts for dialup zone queries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 816. [bug] Report potential problems with log file accessibility
cfa64348224b66dd1c9979b809406c4d15b1c137fielding at configuration time, since such problems can't
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reliably be reported at the time they actually occur.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 815. [bug] If a log file was specified with a path separator
cfa64348224b66dd1c9979b809406c4d15b1c137fielding character (i.e. "/") in its name and the directory
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not exist, the log file's name was treated as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding though it were the directory name. [RT #1189]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 814. [bug] Socket objects left over from accept() failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were incorrectly destroyed, causing corruption
cfa64348224b66dd1c9979b809406c4d15b1c137fielding of socket manager data structures.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 813. [bug] File descriptors exceeding FD_SETSIZE were handled
cfa64348224b66dd1c9979b809406c4d15b1c137fielding badly. [RT #1192]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 812. [bug] dig sometimes printed incomplete IXFR responses
cfa64348224b66dd1c9979b809406c4d15b1c137fielding due to an uninitialized variable. [RT #1188]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 810. [bug] The signer name in SIG records was not properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding down-cased when signing/verifying records. [RT #1186]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 809. [bug] Configuring a non-local address as a transfer-source
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause an assertion failure during load.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 808. [func] Add 'rndc flush' to flush the server's cache.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 807. [bug] When setting up TCP connections for incoming zone
cfa64348224b66dd1c9979b809406c4d15b1c137fielding transfers, the transfer-source port was not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding ignored like it should be.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the calling stack to the zone maintenance level,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causing zones to not reload when an included file was
cfa64348224b66dd1c9979b809406c4d15b1c137fielding touched but the top-level zone file was not.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 805. [bug] When using "forward only", missing root hints should
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not cause queries to fail. [RT #1143]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 804. [bug] Attempting to obtain entropy could fail in some
cfa64348224b66dd1c9979b809406c4d15b1c137fielding situations. This would be most common on systems
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with user-space threads. [RT #1131]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 803. [bug] Treat all SIG queries as if they have the CD bit set,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding otherwise no data will be returned [RT #749]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 802. [bug] DNSSEC key tags were computed incorrectly in almost
cfa64348224b66dd1c9979b809406c4d15b1c137fielding all cases. [RT #1146]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 801. [bug] nsupdate should treat lines beginning with ';' as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding comments. [RT #1139]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 800. [bug] dnssec-signzone produced incorrect statistics for
cfa64348224b66dd1c9979b809406c4d15b1c137fielding large zones. [RT #1133]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 799. [bug] The ADB didn't find AAAA glue in a zone unless A6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding glue was also present.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 798. [bug] nsupdate should be able to reject bad input lines
cfa64348224b66dd1c9979b809406c4d15b1c137fielding and continue. [RT #1130]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 797. [func] Issue a warning if the 'directory' option contains
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a relative path. [RT #269]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 796. [func] When a size limit is associated with a log file,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding only roll it when the size is reached, not every
cfa64348224b66dd1c9979b809406c4d15b1c137fielding time the log file is opened. [RT #1096]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 795. [func] Add the +multiline option to dig. [RT #1095]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 794. [func] Implement the "port" and "default-port" statements
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 793. [cleanup] The DNSSEC tools could create filenames that were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding illegal or contained shell meta-characters. They
cfa64348224b66dd1c9979b809406c4d15b1c137fielding now use a different text encoding of names that
cfa64348224b66dd1c9979b809406c4d15b1c137fielding doesn't have these problems. [RT #1101]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 792. [cleanup] Replace the OMAPI command channel protocol with a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding simpler one.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 791. [bug] The command channel now works over IPv6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 790. [bug] Wildcards created using dynamic update or IXFR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could fail to match. [RT #1111]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 789. [bug] The "localhost" and "localnets" ACLs did not match
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when used as the second element of a two-element
cfa64348224b66dd1c9979b809406c4d15b1c137fielding sortlist item.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 788. [func] Add the "match-mapped-addresses" option, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding causes IPv6 v4mapped addresses to be treated as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding IPv4 addresses for the purpose of acl matching.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 787. [bug] The DNSSEC tools failed to downcase domain
cfa64348224b66dd1c9979b809406c4d15b1c137fielding names when mapping them into file names.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 786. [bug] When DNSSEC signing/verifying data, owner names were
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not properly down-cased.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 785. [bug] A race condition in the resolver could cause
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure. [RT #673, #872, #1048]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 784. [bug] nsupdate and other programs would not quit properly
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if some signals were blocked by the caller. [RT #1081]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 783. [bug] Following CNAMEs could cause an assertion failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when either using an sdb database or under very
cfa64348224b66dd1c9979b809406c4d15b1c137fielding rare conditions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 782. [func] Implement the "serial-query-rate" option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 781. [func] Avoid error packet loops by dropping duplicate FORMERR
cfa64348224b66dd1c9979b809406c4d15b1c137fielding responses. [RT #1006]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 780. [bug] Error handling code dealing with out of memory or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding other rare errors could lead to assertion failures
cfa64348224b66dd1c9979b809406c4d15b1c137fielding by calling functions on uninitialized names. [RT #1065]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 779. [func] Added the "minimal-responses" option.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 778. [bug] When starting cache cleaning, cleaning_timer_action()
cfa64348224b66dd1c9979b809406c4d15b1c137fielding returned without first pausing the iterator, which
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause deadlock. [RT #998]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 777. [bug] An empty forwarders list in a zone failed to override
cfa64348224b66dd1c9979b809406c4d15b1c137fielding global forwarders. [RT #995]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 776. [func] Improved error reporting in denied messages. [RT #252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 775. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 774. [func] max-cache-size is implemented.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 773. [func] Added isc_rwlock_trylock() to attempt to lock without
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 772. [bug] Owner names could be incorrectly omitted from cache
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dumps in the presence of negative caching entries.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 771. [cleanup] TSIG errors related to unsynchronized clocks
cfa64348224b66dd1c9979b809406c4d15b1c137fielding are logged better. [RT #919]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 770. [func] Add the "edns yes_or_no" statement to the server
cfa64348224b66dd1c9979b809406c4d15b1c137fielding clause. [RT #524]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 769. [func] Improved error reporting when parsing rdata. [RT #740]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 768. [bug] The server did not emit an SOA when a CNAME
cfa64348224b66dd1c9979b809406c4d15b1c137fielding or DNAME chain ended in NXDOMAIN in an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding authoritative zone.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 767. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 766. [bug] A few cases in query_find() could leak fname.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding This would trigger the mpctx->allocated == 0
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion when the server exited.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #739, #776, #798, #812, #818, #821, #845,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding #892, #935, #966]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 765. [func] ACL names are once again case insensitive, like
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in BIND 8. [RT #252]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 764. [func] Configuration files now allow "include" directives
cfa64348224b66dd1c9979b809406c4d15b1c137fielding in more places, such as inside the "view" statement.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #377, #728, #860]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 763. [func] Configuration files no longer have reserved words.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #731, #753]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 762. [cleanup] The named.conf and rndc.conf file parsers have
cfa64348224b66dd1c9979b809406c4d15b1c137fielding been completely rewritten.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 761. [bug] _REENTRANT was still defined when building with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding --disable-threads.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 760. [contrib] Significant enhancements to the pgsql sdb driver.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 759. [bug] The resolver didn't turn off "avoid fetches" mode
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when restarting, possibly causing resolution
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to fail when it should not. This bug only affected
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms which support both IPv4 and IPv6. [RT #927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 758. [bug] The "avoid fetches" code did not treat negative
cfa64348224b66dd1c9979b809406c4d15b1c137fielding cache entries correctly, causing fetches that would
cfa64348224b66dd1c9979b809406c4d15b1c137fielding be useful to be avoided. This bug only affected
cfa64348224b66dd1c9979b809406c4d15b1c137fielding platforms which support both IPv4 and IPv6. [RT #927]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 757. [func] Log zone transfers.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 756. [bug] dns_zone_load() could "return" success when no master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding file was configured.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 755. [bug] Fix incorrectly formatted log messages in zone.c.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 754. [bug] Certain failure conditions sending UDP packets
cfa64348224b66dd1c9979b809406c4d15b1c137fielding could cause the server to retry the transmission
cfa64348224b66dd1c9979b809406c4d15b1c137fielding indefinitely. [RT #902]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 753. [bug] dig, host, and nslookup would fail to contact a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding remote server if getaddrinfo() returned an IPv6
cfa64348224b66dd1c9979b809406c4d15b1c137fielding address on a system that doesn't support IPv6.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 752. [func] Correct bad tv_usec elements returned by
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gettimeofday().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 751. [func] Log successful zone loads / transfers. [RT #898]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 750. [bug] A query should not match a DNAME whose trust level
cfa64348224b66dd1c9979b809406c4d15b1c137fielding is pending. [RT #916]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 749. [bug] When a query matched a DNAME in a secure zone, the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server did not return the signature of the DNAME.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 748. [doc] List supported RFCs in doc/misc/rfc-compliance.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 747. [bug] The code to determine whether an IXFR was possible
cfa64348224b66dd1c9979b809406c4d15b1c137fielding did not properly check for a database that could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not have a journal. [RT #865, #908]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 746. [bug] The sdb didn't clone rdatasets properly, causing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a crash when the server followed delegations. [RT #905]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 745. [func] Report the owner name of records that fail
cfa64348224b66dd1c9979b809406c4d15b1c137fielding semantic checks while loading.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding result of an ANY or SIG query, the resolver failed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to setup the return event's rdatasets, causing an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failure in the query code. [RT #881]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 743. [bug] Receiving a large number of certain malformed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding answers could cause named to stop responding.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 742. [placeholder]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 741. [port] Support openssl-engine. [RT #709]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 740. [port] Handle openssl library mismatches slightly better.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 739. [port] Look for /dev/random in configure, rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assuming it will be there for only a predefined
cfa64348224b66dd1c9979b809406c4d15b1c137fielding set of OSes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 738. [bug] If a non-threadsafe sdb driver supported AXFR and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding received an AXFR request, it would deadlock or die
cfa64348224b66dd1c9979b809406c4d15b1c137fielding with an assertion failure. [RT #852]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 737. [port] stdtime.c failed to compile on certain platforms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 736. [func] New functions isc_task_{begin,end}exclusive().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 735. [doc] Add BIND 4 migration notes.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 734. [bug] An attempt to re-lock the zone lock could occur if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the server was shutdown during a zone transfer.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 733. [bug] Reference counts of dns_acl_t objects need to be
cfa64348224b66dd1c9979b809406c4d15b1c137fielding locked but were not. [RT #801, #821]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 731. [bug] Certain zone errors could cause named-checkzone to
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fail ungracefully. [RT #819]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 730. [bug] lwres_getaddrinfo() returns the correct result when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding it fails to contact a server. [RT #768]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 729. [port] pthread_setconcurrency() needs to be called on Solaris.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 728. [bug] Fix comment processing on master file directives.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 727. [port] Work around OS bug where accept() succeeds but
cfa64348224b66dd1c9979b809406c4d15b1c137fielding fails to fill in the peer address of the accepted
cfa64348224b66dd1c9979b809406c4d15b1c137fielding connection, by treating it as an error rather than
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an assertion failure. [RT #809]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 726. [func] Implement the "trace" and "notrace" commands in rndc.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 725. [bug] Installing man pages could fail.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 724. [func] New libisc functions isc_netaddr_any(),
cfa64348224b66dd1c9979b809406c4d15b1c137fielding isc_netaddr_any6().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to return DNS_R_SERVFAIL. [RT #783]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 722. [func] Allow incremental loads to be canceled.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 721. [cleanup] Load manager and dns_master_loadfilequota() are no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 720. [bug] Server could enter infinite loop in
cfa64348224b66dd1c9979b809406c4d15b1c137fielding dispatch.c:do_cancel(). [RT #733]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 719. [bug] Rapid reloads could trigger an assertion failure.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #743, #763]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 718. [cleanup] "internal" is no longer a reserved word in named.conf.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #753, #731]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 717. [bug] Certain TKEY processing failure modes could
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reference an uninitialized variable, causing the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding server to crash. [RT #750]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 716. [bug] The first line of a $INCLUDE master file was lost if
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an origin was specified. [RT #744]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 715. [bug] Resolving some A6 chains could cause an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure in adb.c. [RT #738]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 714. [bug] Preserve interval timers across reloads unless changed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 713. [func] named-checkconf takes '-t directory' similar to named.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 712. [bug] Sending a large signed update message caused an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding assertion failure. [RT #718]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 711. [bug] The libisc and liblwres implementations of
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inet_ntop contained an off by one error.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 710. [func] The forwarders statement now takes an optional
cfa64348224b66dd1c9979b809406c4d15b1c137fielding port. [RT #418]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 709. [bug] ANY or SIG queries for data with a TTL of 0
cfa64348224b66dd1c9979b809406c4d15b1c137fielding would return SERVFAIL. [RT #620]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 708. [bug] When building with --with-openssl, the openssl headers
cfa64348224b66dd1c9979b809406c4d15b1c137fielding included with BIND 9 should not be used. [RT #702]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 707. [func] The "filename" argument to named-checkzone is no
cfa64348224b66dd1c9979b809406c4d15b1c137fielding longer optional, to reduce confusion. [RT #612]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 706. [bug] Zones with an explicit "allow-update { none; };"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding were considered dynamic and therefore not reloaded
cfa64348224b66dd1c9979b809406c4d15b1c137fielding on SIGHUP or "rndc reload".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 705. [port] Work out resource limit type for use where rlim_t is
cfa64348224b66dd1c9979b809406c4d15b1c137fielding not available. [RT #695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 704. [port] RLIMIT_NOFILE is not available on all platforms.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 703. [port] sys/select.h is needed on older platforms. [RT #695]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 702. [func] If the address 0.0.0.0 is seen in resolv.conf,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding use 127.0.0.1 instead. [RT #693]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 701. [func] Root hints are now fully optional. Class IN
cfa64348224b66dd1c9979b809406c4d15b1c137fielding views use compiled-in hints by default, as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding before. Non-IN views with no root hints now
cfa64348224b66dd1c9979b809406c4d15b1c137fielding provide authoritative service but not recursion.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding A warning is logged if a view has neither root
cfa64348224b66dd1c9979b809406c4d15b1c137fielding hints nor authoritative data for the root. [RT #696]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 700. [bug] $GENERATE range check was wrong. [RT #688]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 699. [bug] The lexer mishandled empty quoted strings. [RT #694]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 698. [bug] Aborting nsupdate with ^C would lead to several
cfa64348224b66dd1c9979b809406c4d15b1c137fielding race conditions.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 697. [bug] nsupdate was not compatible with the undocumented
cfa64348224b66dd1c9979b809406c4d15b1c137fielding BIND 8 behavior of ignoring TTLs in "update delete"
cfa64348224b66dd1c9979b809406c4d15b1c137fielding commands. [RT #693]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 696. [bug] lwresd would die with an assertion failure when passed
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a zero-length name. [RT #692]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 695. [bug] If the resolver attempted to query a blackholed or
cfa64348224b66dd1c9979b809406c4d15b1c137fielding bogus server, the resolution would fail immediately.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 694. [bug] $GENERATE did not produce the last entry.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding [RT #682, #683]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 693. [bug] An empty lwres statement in named.conf caused
cfa64348224b66dd1c9979b809406c4d15b1c137fielding the server to crash while loading.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 692. [bug] Deal with systems that have getaddrinfo() but not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding gai_strerror(). [RT #679]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 691. [bug] Configuring per-view forwarders caused an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #675, #734]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 690. [func] $GENERATE now supports DNAME. [RT #654]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 689. [doc] man pages are now installed. [RT #210]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 688. [func] "make tags" now works on systems with the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding "Exuberant Ctags" etags.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 687. [bug] Only say we have IPv6, with sufficient functionality,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding if it has actually been tested. [RT #586]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 686. [bug] dig and nslookup can now be properly aborted during
cfa64348224b66dd1c9979b809406c4d15b1c137fielding blocking operations. [RT #568]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 685. [bug] nslookup should use the search list/domain options
cfa64348224b66dd1c9979b809406c4d15b1c137fielding from resolv.conf by default. [RT #405, #630]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 684. [bug] Memory leak with view forwarders. [RT #656]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 683. [bug] File descriptor leak in isc_lex_openfile().
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 682. [bug] nslookup displayed SOA records incorrectly. [RT #665]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 681. [bug] $GENERATE specifying output format was broken. [RT #653]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 680. [bug] dns_rdata_fromstruct() mishandled options bigger
cfa64348224b66dd1c9979b809406c4d15b1c137fielding than 255 octets.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 679. [bug] $INCLUDE could leak memory and file descriptors on
cfa64348224b66dd1c9979b809406c4d15b1c137fielding reload. [RT #639]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 678. [bug] "transfer-format one-answer;" could trigger an assertion
cfa64348224b66dd1c9979b809406c4d15b1c137fielding failure. [RT #646]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 677. [bug] dnssec-signzone would occasionally use the wrong ttl
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for database operations and fail. [RT #643]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 676. [bug] Log messages about lame servers to category
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 'lame-servers' rather than 'resolver', so as not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding to be gratuitously incompatible with BIND 8.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 675. [bug] TKEY queries could cause the server to leak
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 674. [func] Allow messages to be TSIG signed / verified using
cfa64348224b66dd1c9979b809406c4d15b1c137fielding a offset from the current time.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 673. [func] The server can now convert RFC1886-style recursive
cfa64348224b66dd1c9979b809406c4d15b1c137fielding lookup requests into RFC2874-style lookups, when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding enabled using the new option "allow-v6-synthesis".
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 672. [bug] The wrong time was in the "time signed" field when
cfa64348224b66dd1c9979b809406c4d15b1c137fielding replying with BADTIME error.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 671. [bug] The message code was failing to parse a message with
cfa64348224b66dd1c9979b809406c4d15b1c137fielding no question section and a TSIG record. [RT #628]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 670. [bug] The lwres replacements for getaddrinfo and
cfa64348224b66dd1c9979b809406c4d15b1c137fielding getipnodebyname didn't properly check for the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding existence of the sockaddr sa_len field.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 669. [bug] dnssec-keygen now makes the public key file
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-world-readable for symmetric keys. [RT #403]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 668. [func] named-checkzone now reports multiple errors in master
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 667. [bug] On Linux, running named with the -u option and a
cfa64348224b66dd1c9979b809406c4d15b1c137fielding non-world-readable configuration file didn't work.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 666. [bug] If a request sent by dig is longer than 512 bytes,
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 665. [bug] Signed responses were not sent when the size of the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding TSIG + question exceeded the maximum message size.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 664. [bug] The t_tasks and t_timers module tests are now skipped
cfa64348224b66dd1c9979b809406c4d15b1c137fielding when building without threads, since they require
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 663. [func] Accept a size_spec, not just an integer, in the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (unimplemented and ignored) max-ixfr-log-size option
cfa64348224b66dd1c9979b809406c4d15b1c137fielding for compatibility with recent versions of BIND 8.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 662. [bug] dns_rdata_fromtext() failed to log certain errors.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 661. [bug] Certain UDP IXFR requests caused an assertion failure
cfa64348224b66dd1c9979b809406c4d15b1c137fielding (mpctx->allocated == 0). [RT #355, #394, #623]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 660. [port] Detect multiple CPUs on HP-UX and IRIX.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 659. [performance] Rewrite the name compression code to be much faster.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 658. [cleanup] Remove all vestiges of 16 bit global compression.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 657. [bug] When a listen-on statement in an lwres block does not
cfa64348224b66dd1c9979b809406c4d15b1c137fielding specify a port, use 921, not 53. Also update the
cfa64348224b66dd1c9979b809406c4d15b1c137fielding listen-on documentation. [RT #616]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 656. [func] Treat an unescaped newline in a quoted string as
cfa64348224b66dd1c9979b809406c4d15b1c137fielding an error. This means that TXT records with missing
cfa64348224b66dd1c9979b809406c4d15b1c137fielding close quotes should have meaningful errors printed.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 655. [bug] Improve error reporting on unexpected eof when loading
cfa64348224b66dd1c9979b809406c4d15b1c137fielding zones. [RT #611]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 654. [bug] Origin was being forgotten in TCP retries in dig.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 653. [bug] +defname option in dig was reversed in sense.
cfa64348224b66dd1c9979b809406c4d15b1c137fielding 652. [bug] zone_saveunique() did not report the new name.
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which