CHANGES revision cadf8d687b9719b87c121d5cc8b028b1ddccc642
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User4123. [port] Added %z (size_t) format options to the portable
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater internal printf/sprintf implementation. [RT #39586]
7a42357217528037bdfedcb17eeebfe96ae4266aAutomatic Updater4122. [bug] The server could match a shorter prefix than what was
1167fc7904c5f0a472f8df207ac46dd52c7f1ec8Automatic Updater available in CLIENT-IP policy triggers, and so, an
0c39b3ed9409ecb277d5e32fa763a4e4d6598df8Automatic Updater unexpected action could be taken. This has been
46da3117812814a29432a8d9a9ccf8acdbfdadceAutomatic Updater corrected. [RT #39481]
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater4121. [bug] On servers with one or more policy zones
79b273c187a4aa1016a62181983dfdd0521681aeMark Andrews configured as slaves, if a policy zone updated
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User during regular operation (rather than at
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington startup) using a full zone reload, such as via
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater AXFR, a bug could allow the RPZ summary data to
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User fall out of sync, potentially leading to an
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater assertion failure in rpz.c when further
bbde8dc56605130058a1540609264fa109da3b63Automatic Updater incremental updates were made to the zone, such
bbde8dc56605130058a1540609264fa109da3b63Automatic Updater as via IXFR. [RT #39567]
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater4120. [bug] A bug in RPZ could cause the server to crash if
3cc98b8ecedcbc8465f1cf2740b966b315662430Automatic Updater policy zones were updated while recursion was
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews pending for RPZ processing of an active query.
bbde8dc56605130058a1540609264fa109da3b63Automatic Updater4119. [test] Allow dig to set the message opcode. [RT #39550]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4118. [bug] Teach isc-config.sh about irs. [RT #39213]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4116. [bug] Fix a bug in RPZ that could cause some policy
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater zones that did not specifically require
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson recursion to be treated as if they did;
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater consequently, setting qname-wait-recurse no; was
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User sometimes ineffective. [RT #39229]
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt4115. [func] "rndc -r" now prints the result code (e.g.,
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater running the requested command. [RT #38913]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater4114. [bug] Fix a regression in radix tree implementation
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater introduced by ECS code. This bug was never
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater released, but it was reported by a user testing
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt master. [RT #38983]
2d2dc37599979c83495510f8af8d1756753aa2c5Automatic Updater4113. [test] Check for Net::DNS is some system test
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt prerequisites. [RT #39369]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater4112. [bug] Named failed to load when "root-delegation-only"
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater was used without a list of domains to exclude.
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater4111. [doc] Alphabetize rndc man page. [RT #39360]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater4110. [bug] Address memory leaks / null pointer dereferences
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater on out of memory. [RT #39310]
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews4109. [port] linux: support reading the local port range from
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User4108. [func] An additional NXDOMAIN redirect method (option
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater "nxdomain-redirect") has been added, allowing
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews redirection to a specified DNS namespace instead
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater of a single redirect zone. [RT #37989]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4107. [bug] Address potential deadlock when updating zone content.
930f6069e5aa157cf6987cdafd412f5757a5a558Automatic Updater4106. [port] Improve readline support. [RT #38938]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4105. [port] Misc fixes for Microsoft Visual Studio
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater 2015 CTP6 in 64 bit mode. [RT #39308]
930f6069e5aa157cf6987cdafd412f5757a5a558Automatic Updater4104. [bug] Address uninitialized elements. [RT #39252]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4103. [port] Misc fixes for Microsoft Visual Studio
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater 2015 CTP6. [RT #39267]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4102. [bug] Fix a use after free bug introduced in change
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater #4094. [RT #39281]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4101. [bug] dig: the +split and +rrcomments options didn't
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson work with +short. [RT #39291]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4100. [bug] Inherited owernames on the line immediately following
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson a $INCLUDE were not working. [RT #39268]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User4099. [port] clang: make unknown commandline options hard errors
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater when determining what options are supported.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User4098. [bug] Address use-after-free issue when using a
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews predecessor key with dnssec-settime. [RT #39272]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User4097. [func] Add additional logging about xfrin transfer status.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4096. [bug] Fix a use after free of query->sendevent.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4095. [bug] zone->options2 was not being properly initialized.
24bf1e02f03577db0feb50b80238c4150c96d05dAutomatic Updater4094. [bug] A race during shutdown or reconfiguration could
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews cause an assertion in mem.c. [RT #38979]
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater4093. [func] Dig now learns the SIT value from truncated
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater responses when it retries over TCP. [RT #39047]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
24bf1e02f03577db0feb50b80238c4150c96d05dAutomatic Updater4090. [bug] Fix a crash while parsing malformed CAA RRs in
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater presentation format, i.e., from text such as
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater from master files. Thanks to John Van de
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater Meulebrouck Brendgard for discovering and
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater reporting this problem. [RT #39003]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4089. [bug] Send notifies immediately for slave zones during
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater startup. [RT #38843]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4088. [port] Fixed errors when building with libressl. [RT #38899]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4087. [bug] Fix a crash due to use-after-free due to sequencing
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews of tasks actions. [RT #38495]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater4084. [bug] Fix a possible race in updating stats counters.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4083. [cleanup] Print the number of CPUs and UDP listeners
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User consistently in the log and in "rndc status"
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater output; indicate whether threads are supported
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User in "named -V" output. [RT #38811]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User4082. [bug] Incrementally sign large inline zone deltas.
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater4080. [func] Completed change #4022, adding a "lock-file" option
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User to named.conf to override the default lock file,
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater in addition to the "named -X <filename>" command
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater line option. Setting the lock file to "none"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater using either method disables the check completely.
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater4079. [func] Preserve the case of the ownername of records to
9c446b72069d0ab9f710502f4d7048e50875fccbAutomatic Updater the RRset level. [RT #37442]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
bc0a53583d92309bebcf93c408e2f3247ebd3d3cAutomatic Updater CMSG_SPACE(sizeof(char)). [RT #38621]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4077. [test] Add static-stub regression test for DS NXDOMAIN
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater return making the static stub disappear. [RT #38564]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4076. [bug] Named could crash on shutdown with outstanding
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater reload / reconfig events. [RT #38622]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4075. [placeholder]
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater4073. [cleanup] Add libjson-c version number reporting to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "named -V"; normalize version number formatting.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4072. [func] Add a --enable-querytrace configure switch for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater very verbose query tracelogging. (This option
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater has a negative performance impact and should be
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater used only for debugging.) [RT #37520]
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater4071. [cleanup] Initialize pthread mutex attrs just once, instead of
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater doing it per mutex creation. [RT #38547]
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews4070. [bug] Fix a segfault in nslookup in a query such as
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "nslookup isc.org AMS.SNS-PB.ISC.ORG -all".
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater4069. [doc] Reorganize options in the nsupdate man page.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater4068. [bug] Omit unknown serial number from JSON zone statistics.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4067. [cleanup] Reduce noise from RRL when query logging is
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater disabled. [RT #38648]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4066. [doc] Reorganize options in the dig man page. [RT #38516]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4065. [test] Additional RFC 5011 tests. [RT #38569]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4064. [contrib] dnssec-keyset.sh: Generates a specified number
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of DNSSEC keys with timing set to implement a
7a2a1b8b14fc804ac80612d7b98064095e445be5Automatic Updater pre-publication key rollover strategy. Thanks
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater to Jeffry A. Spain. [RT #38459]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User4063. [bug] Asynchronous zone loads were not handled
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater correctly when the zone load was already in
3e5340279d8875d136a4dd815cccad0044aa2644Automatic Updater progress; this could trigger a crash in zt.c.
cf7e98f59148b559946a7f1ca728471374f1eef3Automatic Updater4062. [bug] Fix an out-of-bounds read in RPZ code. If the
930f6069e5aa157cf6987cdafd412f5757a5a558Automatic Updater read succeeded, it doesn't result in a bug
8ccd7da886e93cd490fcb6f4c4e98a6514f35820Automatic Updater during operation. If the read failed, named
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater could segfault. [RT #38559]
cf7e98f59148b559946a7f1ca728471374f1eef3Automatic Updater4061. [bug] Handle timeout in legacy system test. [RT #38573]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson4060. [bug] dns_rdata_freestruct could be called on a
c3fd32ed29e9e419bb56583f4272a506773b1ea0Automatic Updater uninitialized structure when handling a error.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User4059. [bug] Addressed valgrind warnings. [RT #38549]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User4058. [bug] UDP dispatches could use the wrong pseudorandom
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater number generator context. [RT #38578]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater4056. [bug] Expanded automatic testing of trust anchor
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson management and fixed several small bugs including
e2caa7536302de34de6cc04025abcd53dc3a499aAutomatic Updater a memory leak and a possible loss of key state
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater information. [RT #38458]
0b57424d28c9a67018107133f9fbc0a7dcf057e2Mark Andrews4055. [func] "rndc managed-keys" can be used to check status
0b57424d28c9a67018107133f9fbc0a7dcf057e2Mark Andrews of trust anchors or to force keys to be refreshed,
0b57424d28c9a67018107133f9fbc0a7dcf057e2Mark Andrews Also, the managed keys data file has easier-to-read
dc11390a658e02e1a03accd4dbe14c94fa9de556Automatic Updater comments. [RT #38458]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews4054. [func] Added a new tool 'mdig', a light weight clone of
b109432c3a939bff66a463be86c371bd88efe3aaAutomatic Updater dig able to send multiple pipelined queries.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews4053. [security] Revoking a managed trust anchor and supplying
3351ccbd5c1961404044f8273d54dad405f53960Mark Andrews an untrusted replacement could cause named
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater to crash with an assertion failure.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews (CVE-2015-1349) [RT #38344]
3351ccbd5c1961404044f8273d54dad405f53960Mark Andrews4052. [bug] Fix a leak of query fetchlock. [RT #38454]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater4050. [bug] RPZ could send spurious SERVFAILs in response
0b57424d28c9a67018107133f9fbc0a7dcf057e2Mark Andrews to duplicate queries. [RT #38510]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater4048. [bug] adb hash table was not being grown. [RT #38470]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater4047. [cleanup] "named -V" now reports the current running versions
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater of OpenSSL and the libxml2 libraries, in addition to
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater the versions that were in use at build time.
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater4046. [bug] Accounting of "total use" in memory context
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User statistics was not correct. [RT #38370]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater4045. [bug] Skip to next master on dns_request_createvia4 failure.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4044. [bug] Change 3955 was not complete, resulting in an assertion
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews failure if the timing was just right. [RT #38352]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4043. [func] "rndc modzone" can be used to modify the
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews configuration of an existing zone, using similar
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews syntax to "rndc addzone". [RT #37895]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater4042. [bug] zone.c:iszonesecure was being called too late.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater4041. [func] TCP sockets can now be shared while connecting.
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews (This will be used to enable client-side support
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews of pipelined queries.) [RT #38231]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4040. [func] Added server-side support for pipelined TCP
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington queries. Clients may continue sending queries via
b13d89bd89878137c81b36a36596cca3920f27a4Automatic Updater TCP while previous queries are being processed
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User in parallel. (The new "keep-response-order"
b13d89bd89878137c81b36a36596cca3920f27a4Automatic Updater option allows clients to be specified for which
b13d89bd89878137c81b36a36596cca3920f27a4Automatic Updater the old behavior will still be used.) [RT #37821]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User4038. [bug] Add 'rpz' flag to node and use it to determine whether
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User to call dns_rpz_delete. This should prevent unbalanced
d6317350b1180aa4517f2e8a92fa8fbcbf904ad8Automatic Updater add / delete calls. [RT #36888]
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater4037. [bug] also-notify was ignoring the tsig key when checking
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington for duplicates resulting in some expected notify
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington messages not being sent. [RT #38369]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4036. [bug] Make call to open a temporary file name safe during
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington NZF creation. [RT #38331]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4035. [bug] Close temporary and NZF FILE pointers before moving
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the former into the latter's place, as required on
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Windows. [RT #38332]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4034. [func] When added, negative trust anchors (NTA) are now
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington saved to files (viewname.nta), in order to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington persist across restarts of the named server.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4033. [bug] Missing out of memory check in request.c:req_send.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4032. [bug] Built-in "empty" zones did not correctly inherit the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington "allow-transfer" ACL from the options or view.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4031. [bug] named-checkconf -z failed to report a missing file
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington with a hint zone. [RT #38294]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4030. [func] "rndc delzone" is now applicable to zones that were
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington configured in named.conf, as well as zones that
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington were added via "rndc addzone". (Note, however, that
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington if named.conf is not also modified, the deleted zone
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington will return when named is reloaded.) [RT #37887]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4029. [func] "rndc showzone" displays the current configuration
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of a specified zone. [RT #37887]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4028. [bug] $GENERATE with a zero step was not being caught as a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington error. A $GENERATE with a / but no step was not being
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington caught as a error. [RT #38262]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4025. [port] bsdi: failed to build. [RT #38047]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington dns_rdata_opt_current, dns_rdata_txt_first,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington dns_rdata_txt_next and dns_rdata_txt_current were
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington documented but not implemented. These have now been
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater dns_rdata_spf_first, dns_rdata_spf_next and
56effd2e3f579fd77b1fb37d47871d1bf1286bc4Automatic Updater dns_rdata_spf_current were documented but not
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater implemented. The prototypes for these
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater functions have been removed. [RT #38068]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater4023. [bug] win32: socket handling with explicit ports and
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater invoking named with -4 was broken for some
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater configurations. [RT #38068]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater4022. [func] Stop multiple spawns of named by limiting number of
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater processes to 1. This is done by using a lockfile and
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater checking whether we can listen on any configured
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater TCP interfaces. [RT #37908]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater4021. [bug] Adjust max-recursion-queries to accommodate
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater the need for more queries when the cache is
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater empty. [RT #38104]
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington resulting in updates being sent to the wrong server.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews4019. [func] If named is not configured to validate the answer
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews then allow fallback to plain DNS on timeout even
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington when we know the server supports EDNS. [RT #37978]
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington4018. [placeholder]
348040cb2675f1c3711672dadfc29f5ddfd2bb23Automatic Updater4017. [test] Add system test to check lookups to legacy servers
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington with broken DNS behavior. [RT #37965]
099b86fb8136a7dff81df85cf395978c16eb254cAutomatic Updater4016. [bug] Fix a dig segfault due to bad linked list usage.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4015. [bug] Nameservers that are skipped due to them being
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington CNAMEs were not being logged. They are now logged
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater to category 'cname' as per BIND 8. [RT #37935]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4014. [bug] When including a master file origin_changed was
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater not being properly set leading to a potentially
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater spurious 'inherited owner' warning. [RT #37919]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4013. [func] Add a new tcp-only option to server (config) /
e01f44b37ba11c9d34f4a8394f950efae5c07f33Automatic Updater peer (struct) to use TCP transport to send
e01f44b37ba11c9d34f4a8394f950efae5c07f33Automatic Updater queries (in place of UDP transport with a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater TCP fallback on truncated (TC set) response).
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater4012. [cleanup] Check returned status of OpenSSL digest and HMAC
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater functions when they return one. Note this applies
3de6db3208d51de1e138b63b9670430c03f99694Automatic Updater only to FIPS capable OpenSSL libraries put in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater FIPS mode and MD5. [RT #37944]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater4011. [bug] master's list port and dscp inheritance was not
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington properly implemented. [RT #37792]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4010. [cleanup] Clear the prefetchable state when initiating a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington prefetch. [RT #37399]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4009. [func] delv: added a +tcp option. [RT #37855]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4007. [doc] Remove acl forward reference restriction. [RT #37772]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4006. [security] A flaw in delegation handling could be exploited
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to put named into an infinite loop. This has
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington been addressed by placing limits on the number
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of levels of recursion named will allow (default 7),
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and the number of iterative queries that it will
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington send (default 50) before terminating a recursive
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington query (CVE-2014-8500).
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews The recursion depth limit is configured via the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington "max-recursion-depth" option, and the query limit
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington via the "max-recursion-queries" option. [RT #37580]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater4005. [func] The buffer used for returning text from rndc
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater commands is now dynamically resizable, allowing
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater arbitrarily large amounts of text to be sent back
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to the client. (Prior to this change, it was
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater possible for the output of "rndc tsig-list" to be
79cea03ba823e2d3a34895f0ba91d7fb5ad799e7Automatic Updater truncated.) [RT #37731]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4004. [bug] When delegations had AAAA glue but not A, a
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews reference could be leaked causing an assertion
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews failure on shutdown. [RT #37796]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4003. [security] When geoip-directory was reconfigured during
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington named run-time, the previously loaded GeoIP
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington data could remain, potentially causing wrong
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington ACLs to be used or wrong results to be served
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington based on geolocation (CVE-2014-8680). [RT #37720]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4002. [security] Lookups in GeoIP databases that were not
b7aab05edae933e169d5f83c653935b17c7f0a8bMark Andrews loaded could cause an assertion failure
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington (CVE-2014-8680). [RT #37679]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington4001. [security] The caching of GeoIP lookups did not always
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews handle address families correctly, potentially
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews resulting in an assertion failure (CVE-2014-8680).
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington from the redirect zone. [RT #37722]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3999. [func] "mkeys" and "nzf" files are now named after
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater their corresponding views, unless the view name
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington contains characters that would be incompatible
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington with use in a filename (i.e., slash, backslash,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington or capital letters). If a view name does contain
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington these characters, the files will still be named
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington using a cryptographic hash of the view name.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Regardless of this, if a file using the old name
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington format is found to exist, it will continue to be
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington used. [RT #37704]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3998. [bug] isc_radix_search was returning matches that were
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater too precise. [RT #37680]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3996. [bug] Address use after free on out of memory error in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater keyring_add. [RT #37639]
56effd2e3f579fd77b1fb37d47871d1bf1286bc4Automatic Updater3995. [bug] receive_secure_serial holds the zone lock for too
42bee07ebb8152a6ec2f87f4790d87368c24704cAutomatic Updater long. [RT #37626]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3994. [func] Dig now supports setting the last unassigned DNS
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater header flag bit (dig +zflag). [RT #37421]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews3993. [func] Dig now supports EDNS negotiation by default.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington (dig +[no]ednsnegotiation).
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Note: This is disabled by default in BIND 9.10
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews and enabled by default in BIND 9.11. [RT #37604]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews3992. [func] DiG can now send queries without questions
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews (dig +header-only). [RT #37599]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3991. [func] Add the ability to buffer logging output by specifying
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington "buffered yes;" when defining a channel. [RT #26561]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3990. [testing] Add tests for unknown DNSSEC algorithm handling.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3988. [func] Allow the zone serial of a dynamically updatable
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington zone to be updated via "rndc signing -serial".
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater3987. [func] Handle future Visual Studio 14 incompatible changes.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3986. [doc] Add the BIND version number to page footers
79cea03ba823e2d3a34895f0ba91d7fb5ad799e7Automatic Updater in the ARM. [RT #37398]
8ccd7da886e93cd490fcb6f4c4e98a6514f35820Automatic Updater3985. [doc] Describe how +ndots and +search interact in dig.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3984. [func] Accept 256 byte long PINs in native PKCS#11
84a18c72b9f05a7d2aabbc50886de494251d1719Automatic Updater crypto. [RT #37410]
b0d566a2ce0f5a67f537ee7f8233f82f2584cc61Automatic Updater3983. [bug] Change #3940 was incomplete: negative trust anchors
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater could be set to last up to a week, but the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "nta-lifetime" and "nta-recheck" options were
1fdd58445074579ee3b65c871137a7a1740eb542Mark Andrews still limited to one day. [RT #37522]
cc5a9ce75af9870f2cb9e2bf00548c2f7e6398d6Automatic Updater3982. [doc] Include release notes in product documentation.
cc5a9ce75af9870f2cb9e2bf00548c2f7e6398d6Automatic Updater3981. [bug] Cache DS/NXDOMAIN independently of other query types.
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater size. [RT #37187]
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater3979. [bug] Negative trust anchor fetches were not properly
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater managed. [RT #37488]
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater3978. [test] Added a unit test for Diffie-Hellman key
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater computation, completing change #3974. [RT #37477]
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater3977. [cleanup] "rndc secroots" reported a "not found" error when
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater there were no negative trust anchors set. [RT #37506]
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater3976. [bug] When refreshing managed-key trust anchors, clear
9c446b72069d0ab9f710502f4d7048e50875fccbAutomatic Updater any cached trust so that they will always be
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater revalidated with the current set of secure
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater roots. [RT #37506]
9c446b72069d0ab9f710502f4d7048e50875fccbAutomatic Updater3975. [bug] Don't populate or use the bad cache for queries that
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater don't request or use recursion. [RT #37466]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3974. [bug] Handle DH_compute_key() failure correctly in
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3973. [test] Added hooks for Google Performance Tools CPU profiler,
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater including real-time/wall-clock profiling. Use
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater "configure --with-gperftools-profiler" to enable.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3972. [bug] Fix host's usage statement. [RT #37397]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3971. [bug] Reduce the cascading failures due to a bad $TTL line
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater in named-checkconf / named-checkzone. [RT #37138]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3969. [test] Added 'delv' system test. [RT #36901]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3968. [bug] Silence spurious log messages when using 'named -[46]'.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3967. [test] Add test for inlined signed zone in multiple views
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater with different DNSKEY sets. [RT #35759]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3965. [func] Log outgoing packets and improve packet logging to
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater support logging the remote address. [RT #36624]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3964. [func] nsupdate now performs check-names processing.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3963. [test] Added NXRRSET test cases to the "dlzexternal"
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater system test. [RT #37344]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater conditions. [RT #34663]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater BADSIG. [RT #37216]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3959. [bug] Updates could be lost if they arrived immediately
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater after a rndc thaw. [RT #37233]
24bf1e02f03577db0feb50b80238c4150c96d05dAutomatic Updater3958. [bug] Detect when writeable files have multiple references
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews and ECDSAP384SHA384. [RT #37183]
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews3956. [func] Notify messages are now rate limited by notify-rate and
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater startup-notify-rate instead of serial-query-rate.
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3955. [bug] Notify messages due to changes are no longer queued
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater behind startup notify messages. [RT #24454]
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
4ea3649f028ea6a1e42377082a7ccf8f789fb950Automatic Updater3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
40072ce70bc4125329addb4aaa56d18a1230bc17Automatic Updater two name pointers were the same. [RT #37176]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3951. [func] Add the ability to set yet-to-be-defined EDNS flags
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater to dig (+ednsflags=#). [RT #37142]
60d5d17479b47c03b9c7c86f54269718103750b8Automatic Updater3950. [port] Changed the bin/python Makefile to work around a
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3949. [experimental] Experimental support for draft-andrews-edns1 by sending
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater building). Add support for limiting the EDNS version
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater advertised to servers: server { edns-version 0; };
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater Log the EDNS version received in the query log.
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater --with-tuning=large. [RT #37059]
19dbf2e20df03f2b81ed1f347e27718084374059Automatic Updater3947. [cleanup] Set the executable bit on libraries when using
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater libtool. [RT #36786]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3946. [cleanup] Improved "configure" search for a python interpreter.
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater3945. [bug] Invalid wildcard expansions could be incorrectly
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater accepted by the validator. [RT #37093]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3944. [test] Added a regression test for "server-id". [RT #37057]
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater3943. [func] SERVFAIL responses can now be cached for a
016614bf32c25cbd3f2b39f68455b8c98a1a22b3Automatic Updater limited time (configured by "servfail-ttl",
7dd02af3c9350553e1d52d980a7812425b3f1295Automatic Updater default 10 seconds, limit 30). This can reduce
7dd02af3c9350553e1d52d980a7812425b3f1295Automatic Updater the frequency of retries when an authoritative
01f91b9cd440833f66e7476e43659655cb52ad10Automatic Updater server is known to be failing, e.g., due to
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington ongoing DNSSEC validation problems. [RT #21347]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3942. [bug] Wildcard responses from a optout range should be
01f91b9cd440833f66e7476e43659655cb52ad10Automatic Updater marked as insecure. [RT #37072]
3e5b24a74c03d5b52f32d138e64e427bd2cbc8f3Automatic Updater3941. [doc] Include the BIND version number in the ARM. [RT #37067]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3940. [func] "rndc nta" now allows negative trust anchors to be
80af59ad4dcdf8370354fb45a049f1768e1a13c4Automatic Updater set for up to one week. [RT #37069]
789875a1bd6d50c00d3bd883cad17ead1d3c21cdMark Andrews3939. [func] Improve UPDATE forwarding performance by allowing TCP
789875a1bd6d50c00d3bd883cad17ead1d3c21cdMark Andrews connections to be shared. [RT #37039]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3938. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3937. [func] Added some debug logging to better indicate the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater conditions causing SERVFAILs when resolving.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3936. [func] Added authoritative support for the EDNS Client
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Subnet (ECS) option.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ACLs can now include "ecs" elements which specify
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater an address or network prefix; if an ECS option is
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater included in a DNS query, then the address encoded
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater in the option will be matched against "ecs" ACL
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Also, if an ECS address is included in a query,
ff62ab3c2e6274f19190ded15548c723d38bbbe3Automatic Updater then it will be used instead of the client source
ff62ab3c2e6274f19190ded15548c723d38bbbe3Automatic Updater address when matching "geoip" ACL elements. This
ff62ab3c2e6274f19190ded15548c723d38bbbe3Automatic Updater behavior can be overridden with "geoip-use-ecs no;".
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (Note: to enable "geoip" ACLs, use "configure
45c349c278fd83acd4dcb91eec3482401a623e47Automatic Updater --with-geoip". This requires libGeoIP version
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 1.5.0 or higher.)
d9f94d668f4b9342e9367d80e9fc6e81fab303a0Mark Andrews When "ecs" or "geoip" ACL elements are used to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater select a view for a query, the response will include
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User an ECS option to indicate which client network the
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater answer is valid for.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater (Thanks to Vincent Bernat.) [RT #36781]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3935. [bug] "geoip asnum" ACL elements would not match unless
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the full organization name was specified. They
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater can now match against the AS number alone (e.g.,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater AS1234). [RT #36945]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater sit-secret documentation. [RT #36980]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3933. [bug] Corrected the implementation of dns_rdata_casecompare()
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for the HIP rdata type. [RT #36911]
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater3932. [test] Improved named-checkconf tests. [RT #36911]
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater3930. [bug] "rndc nta -r" could cause a server hang if the
88d58d79c5bc7ce3c20a42461a5070116c736836Automatic Updater NTA was not found. [RT #36909]
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3928. [test] Improve rndc system test. [RT #36898]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3927. [bug] dig: report PKCS#11 error codes correctly when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater compiled with --enable-native-pkcs11. [RT #36956]
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater3926. [doc] Added doc for geoip-directory. [RT #36877]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3923. [bug] Sanity check the xml2-config output. [RT #22246]
9fa39c73fc1d8bc44fdbbb79a1d26b837e7dd555Mark Andrews3922. [bug] When resigning, dnssec-signzone was removing
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater all signatures from delegation nodes. It now
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater retains DS and (if applicable) NSEC signatures.
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater3920. [doc] Added doc for masterfile-style. [RT #36823]
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater3919. [bug] dig: continue to next line if a address lookup fails
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater in batch mode. [RT #36755]
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater3918. [doc] Update check-spf documentation. [RT #36910]
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews3917. [bug] dig, nslookup and host now continue on names that are
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews too long after applying a search list elements.
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews3916. [contrib] zone2sqlite checked wrong result code. Address
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews compiler warnings. [RT #36931]
6e26c3b13483e042e44d213bc9995957720e5e15Automatic Updater3915. [bug] Address a assertion if a route event arrived while
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater shutting down. [RT #36887]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater3914. [bug] Allow the URI target and CAA value fields to
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User be zero length. [RT #36737]
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User3913. [bug] Address race issue in dispatch. [RT #36731]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater3911. [func] Implement EDNS EXPIRE option client side, allowing
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis Dupont a slave server to set the expiration timer correctly
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis Dupont when transferring zone data from another slave
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis Dupont server. [RT #35925]
4dca64bb8991502db368028aeeba2f832d3b971dAutomatic Updater3910. [bug] Fix races to free event during shutdown. [RT #36720]
4dca64bb8991502db368028aeeba2f832d3b971dAutomatic Updater3909. [bug] When computing the number of elements required for a
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater acl count_acl_elements could have a short count leading
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater to a assertion failure. Also zero out new acl elements
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater in dns_acl_merge. [RT #36675]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater3908. [bug] rndc now differentiates between a zone in multiple
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater views and a zone that doesn't exist at all. [RT #36691]
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User3907. [cleanup] Alphabetize rndc help. [RT #36683]
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User3906. [protocol] Update URI record format to comply with
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater draft-faltstrom-uri-08. [RT #36642]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater3904. [func] Add the RPZ SOA to the additional section. [RT36507]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater3903. [bug] Improve the accuracy of DiG's reported round trip
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater time. [RT 36611]
765c97d56ccddc9d7904c7d9ff2e2d825d9687e4Automatic Updater3902. [bug] liblwres wasn't handling link-local addresses in
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater nameserver clauses in resolv.conf. [RT #36039]
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic Updater3901. [protocol] Added support for CAA record type (RFC 6844).
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic Updater3899. [bug] "request-ixfr" is only applicable to slave and redirect
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater zones. [RT #36608]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater3898. [bug] Too small a buffer in tohexstr() calls in test code.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3897. [bug] RPZ summary information was not properly being updated
af9cf290cea6ada6ce27b51c724ab77ad5d73fa0Tinderbox User after a AXFR resulting in changes sometimes being
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ignored. [RT #35885]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3896. [bug] Address performance issues with DSCP code on some
2da2220fe7af2c45724b50b0187523b1fab0cf08Rob Austein platforms. [RT #36534]
e171a4137c6ba348957e61b7c4c3541493c0da02Automatic Updater3895. [func] Add the ability to set the DSCP code point to dig.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3894. [bug] Buffers in isc_print_vsnprintf were not properly
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater initialized leading to potential overflows when
5acd63107041b5b0bed444e2bc29f4bca0c13e28Automatic Updater printing out quad values. [RT #36505]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3893. [bug] Peer DSCP values could be returned without being set.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater3892. [bug] Setting '-t aaaa' in .digrc had unintended side
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater effects. [RT #36452]
af9cf290cea6ada6ce27b51c724ab77ad5d73fa0Tinderbox User3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater to install python programs.
6671e343b8c7e44ac10a7900fde59555fbc71571Automatic Updater3890. [bug] RRSIG sets that were not loaded in a single transaction
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater at start up where not being correctly added to
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater re-signing heaps. [RT #36302]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater3889. [port] hurd: configure fixes as per:
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater3888. [func] 'rndc status' now reports the number of automatic
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater zones. [RT #36015]
4104e236f71eb5108fcfda6711878a97f6f4a8e7Automatic Updater3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater they are easier to use in a debugger. [RT #36373]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater3886. [bug] rbtdb_write_header should use a once to initialize
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater FILE_VERSION. [RT #36374]
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater3885. [port] Use 'open()' rather than 'file()' to open files in
c53a6f37deaa396660adb6a4ca600c4a58adfd3fAutomatic Updater3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic Updater3883. [placeholder]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater3882. [func] By default, negative trust anchors will be tested
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater periodically to see whether data below them can be
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater validated, and if so, they will be allowed to
e628576d3b3d91c8954679077f4c208f1e43b433Automatic Updater expire early. The "rndc nta -force" option
f8a9a38ee40c139a8d145ac76ecbff3a0f986453Mark Andrews overrides this behavior. The default NTA lifetime
e628576d3b3d91c8954679077f4c208f1e43b433Automatic Updater and the recheck frequency can be configured by the
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater "nta-lifetime" and "nta-recheck" options. [RT #36146]
9d80d23172c30fd63e5046a7e69b8445e564ff31Automatic Updater3881. [bug] Address memory leak with UPDATE error handling.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User3880. [test] Update ans.pl to work with new TSIG support in
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User Net::DNS; add additional Net::DNS version prerequisite
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User checks. [RT #36327]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User3879. [func] Add version printing option to various BIND utilities.
bea3208b417a0700bd524807082875b7d09585e4Automatic Updater3878. [bug] Using the incorrect filename for a DLZ module
bea3208b417a0700bd524807082875b7d09585e4Automatic Updater caused a segmentation fault on startup. [RT #36286]
9d9d2b1450380caab764a1254c1687f0613fc94aAutomatic Updater3877. [bug] Inserting and deleting parent and child nodes
bea3208b417a0700bd524807082875b7d09585e4Automatic Updater in response policy zones could trigger an assertion
bea3208b417a0700bd524807082875b7d09585e4Automatic Updater failure. [RT #36272]
e85565067cf73f8cc21ee29b11761659f1d47ee9Automatic Updater3876. [bug] Improve efficiency of DLZ redirect zones by
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User suppressing unnecessary database lookups. [RT #35835]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews3875. [cleanup] Clarify log message when unable to read private
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews key files. [RT #24702]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews3874. [test] Check that only "check-names master" is needed for
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews updates to be accepted.
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews3872. [bug] Address issues found by static analysis. [RT #36209]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews3871. [bug] Don't publish an activated key automatically before
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews its publish time. [RT #35063]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3870. [func] Updated the random number generator used in
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User the resolver to use the updated ChaCha based one
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User (similar to OpenBSD's changes). Also moved the
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater RNG to libisc and added unit tests for it.
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater3869. [doc] Document that in-view zones cannot be used for
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews response policy zones. [RT #35941]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3868. [bug] isc_mem_setwater incorrectly cleared hi_called
8c9c79e5fea0cb698026a74821695907c8312a46Mark Andrews potentially leaving over memory cleaner running.
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3867. [func] "rndc nta" can now be used to set a temporary
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User negative trust anchor, which disables DNSSEC
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater validation below a specified name for a specified
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater period of time (not exceeding 24 hours). This
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater can be used when validation for a domain is known
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater to be failing due to a configuration error on
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater the part of the domain owner rather than a
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User spoofing attack. [RT #29358]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3866. [bug] Named could die on disk full in generate_session_key.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3865. [test] Improved testability of the red-black tree
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington implementation and added unit tests. [RT #35904]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3864. [bug] RPZ didn't work well when being used as forwarder.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3863. [bug] The "E" flag was missing from the query log as a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater unintended side effect of code rearrangement to
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater support EDNS EXPIRE. [RT #36117]
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater3862. [cleanup] Return immediately if we are not going to log the
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User message in ns_client_dumpmessage.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3861. [security] Missing isc_buffer_availablelength check results
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington in a REQUIRE assertion when printing out a packet
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (CVE-2014-3859). [RT #36078]
bbf7c3fd96ae5e02cb84743c581862e35327032aAutomatic Updater3860. [bug] ioctl(DP_POLL) array size needs to be determined
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater at run time as it is limited to {OPEN_MAX}.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3859. [placeholder]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3858. [bug] Disable GCC 4.9 "delete null pointer check".
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User3857. [bug] Make it harder for a incorrect NOEDNS classification
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater to be made. [RT #36020]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User3856. [bug] Configuring libjson without also configuring libxml
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater resulted in a REQUIRE assertion when retrieving
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater statistics using json. [RT #36009]
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater3855. [bug] Limit smoothed round trip time aging to no more than
06795359e2bc153a46f9f2f793a732b0e508f61dAutomatic Updater once a second. [RT #32909]
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater3854. [cleanup] Report unrecognized options, if any, in the final
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater configure summary. [RT #36014]
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
5e1503eb9464c2284bb782228d4c315087a2415fAutomatic Updater the handling of a rdataset with no records. [RT #35968]
08d53af7d51409036462fa80fb1bde7a8c2ac123Automatic Updater3852. [func] Increase the default number of clients available
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater for servicing lightweight resolver queries, and
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater make them configurable via the "lwres-tasks" and
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater "lwres-clients" options. (Thanks to Tomas Hozza.)
07d9d0dbcc0c79deb3c34f4a8af05ac68a6800e4Mark Andrews3851. [func] Allow libseccomp based system-call filtering
07d9d0dbcc0c79deb3c34f4a8af05ac68a6800e4Mark Andrews on Linux; use "configure --enable-seccomp" to
a66012b52c20200f118781463db4e4ee44454298Automatic Updater turn it on. Thanks to Loganaden Velvindron
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater of AFRINIC for the contribution. [RT #35347]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User3849. [doc] Alphabetized dig's +options. [RT #35992]
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater3848. [bug] Adjust 'statistics-channels specified but not effective'
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater error message to account for JSON support. [RT #36008]
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater3847. [bug] 'configure --with-dlz-postgres' failed to fail when
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater there is not support available.
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ixfr query. [RT #35980]
e2e3f655d133f08056c9035412d4c013aab234e7Automatic Updater3845. [placeholder]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3844. [bug] Use the x64 version of the Microsoft Visual C++
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Redistributable when built for 64 bit Windows.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3842. [bug] Adjust RRL log-only logging category. [RT #35945]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater3840. [port] Check for arc4random_addrandom() before using it;
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater it's been removed from OpenBSD 5.5. [RT #35907]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater3839. [test] Use only posix-compatible shell in system tests.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3837. [security] A NULL pointer is passed to query_prefetch resulting
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a REQUIRE assertion failure when a fetch is actually
bbb069be941f649228760edcc241122933c066d2Automatic Updater initiated (CVE-2014-3214). [RT #35899]
e062b72f783cdb436a1a57a630bdff471dbb3038Mark Andrews3836. [bug] Address C++ keyword usage in header file.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3835. [bug] Geoip ACL elements didn't work correctly when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater referenced via named or nested ACLs. [RT #35879]
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater3834. [bug] The re-signing heaps were not being updated soon enough
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater leading to multiple re-generations of the same RRSIG
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when a zone transfer was in progress. [RT #35273]
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic Updater3833. [bug] Cross compiling was broken due to calling genrandom at
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews build time. [RT #35869]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3832. [func] "named -L <filename>" causes named to send log
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater messages to the specified file by default instead
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of to the system log. (Thanks to Tony Finch.)
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic Updater3831. [cleanup] Reduce logging noise when EDNS state changes occur.
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater3830. [func] When query logging is enabled, log query errors at
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the same level ('info') as the queries themselves.
24e0e8d17df315d5d494ca933874e545eadce773Automatic Updater3829. [func] "dig +ttlunits" causes dig to print TTL values
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater with time-unit suffixes: w, d, h, m, s for
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater weeks, days, hours, minutes, and seconds. (Thanks
79242b4b2baccf73f007645983fccad02747af13Automatic Updater to Tony Finch.) [RT #35823]
da82e232161d67b77df2d67898bdac693f647be1Automatic Updater3828. [func] "dnssec-signzone -N date" updates serial number
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater to the current date in YYYYMMDDNN format.
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater3827. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater3825. [bug] Address sign extension bug in isc_regex_validate.
0c7657e9302e7f9a8fe4f32fe561dc7e7e7ee6b5Automatic Updater3824. [bug] A collision between two flag values could cause
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater problems with cache cleaning when SIT was enabled.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3823. [func] Log the rpz cname target when rewriting. [RT #35667]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews3822. [bug] Log the correct type of static-stub zones when
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater removing them. [RT #35842]
55f7099aade5630f3b10b5f007536c60e80cced2Automatic Updater3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
55f7099aade5630f3b10b5f007536c60e80cced2Automatic Updater update and transaction support. Thanks to Marty
8ccd7da886e93cd490fcb6f4c4e98a6514f35820Automatic Updater Lee for the contribution. [RT #35656]
8ccd7da886e93cd490fcb6f4c4e98a6514f35820Automatic Updater3820. [func] The DLZ API doesn't pass the database version to
cd839f5cf5f84cf163f55ff05cb88ce37efd24d1Automatic Updater the lookup() function; this can cause DLZ modules
8ccd7da886e93cd490fcb6f4c4e98a6514f35820Automatic Updater that allow dynamic updates to mishandle prerequisite
55f7099aade5630f3b10b5f007536c60e80cced2Automatic Updater checks. This has been corrected by adding a
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User 'dbversion' field to the dns_clientinfo_t
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater structure. [RT #35656]
fd8fb4df8499e292daeac765f599ac7c507d9ca3Mark Andrews3819. [bug] NSEC3 hashes need to be able to be entered and
9ee40883ee29fa1b2d0fa30f223053360e27d1cbAutomatic Updater displayed without padding. This is not a issue for
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater currently defined algorithms but may be for future
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater hash algorithms. [RT #27925]
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater3818. [bug] Stop lying to the optimizer that 'void *arg' is a
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater constant in isc_event_allocate.
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater3817. [func] The "delve" command is now spelled "delv" to avoid
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater a namespace collision with the Xapian project.
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater3816. [func] "dig +qr" now reports query size. (Thanks to
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater Tony Finch.) [RT #35822]
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater3814. [func] The "masterfile-style" zone option controls the
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox User formatting of dumped zone files. Options are
45c349c278fd83acd4dcb91eec3482401a623e47Automatic Updater "relative" (multiline format) and "full" (one
45c349c278fd83acd4dcb91eec3482401a623e47Automatic Updater record per line). The default is "relative".
45c349c278fd83acd4dcb91eec3482401a623e47Automatic Updater3813. [func] "host" now recognizes the "timeout", "attempts" and
45c349c278fd83acd4dcb91eec3482401a623e47Automatic Updater "debug" options when set in /etc/resolv.conf.
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews (Thanks to Adam Tkac at RedHat.) [RT #21885]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3812. [func] Dig now supports sending arbitrary EDNS options from
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater the command line (+ednsopt=code[:value]). [RT #35584]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3811. [func] "serial-update-method date;" sets serial number
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater on dynamic update to today's date in YYYYMMDDNN
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater format. (Thanks to Bradley Forschinger.) [RT #24903]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3810. [bug] Work around broken nameservers that fail to ignore
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater unknown EDNS options. [RT #35766]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3809. [doc] Fix SIT and NSID documentation.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3808. [doc] Clean up "prefetch" documentation. [RT #35751]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3807. [bug] Fix sign extension bug in dns_name_fromtext when
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater lowercase is set. [RT #35743]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3806. [test] Improved system test portability. [RT #35625]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3805. [contrib] Added contrib/perftcpdns, a performance testing tool
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater for DNS over TCP. [RT #35710]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater --- 9.10.0rc1 released ---
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3804. [bug] Corrected a race condition in dispatch.c in which
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater portentry could be reset leading to an assertion
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater failure in socket_search(). (Change #3708
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater addressed the same issue but was incomplete.)
6de27e27ad6056d7c049feb912df5a6b9a56d1b8Automatic Updater3803. [bug] "named-checkconf -z" incorrectly rejected zones
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater using alternate data sources for not having a "file"
6de27e27ad6056d7c049feb912df5a6b9a56d1b8Automatic Updater option. [RT #35685]
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater3802. [bug] Various header files were not being installed.
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic Updater3800. [bug] A pending event on the route socket could cause an
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater assertion failure when shutting down named. [RT #35674]
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater3799. [bug] Improve named's command line error reporting.
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic Updater3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater time. [RT #35659]
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater3797. [port] netbsd: geoip support probing was broken. [RT #35642]
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater3795. [bug] Make named-checkconf detect raw masterfiles for
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater hint zones and reject them. [RT #35268]
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater3793. [bug] zone.c:save_nsec3param() could assert when out of
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater memory. [RT #35621]
da82e232161d67b77df2d67898bdac693f647be1Automatic Updater3792. [func] Provide links to the alternate statistics views when
da82e232161d67b77df2d67898bdac693f647be1Automatic Updater displaying in a browser. [RT #35605]
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User3791. [placeholder]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3790. [bug] Handle broken nameservers that send BADVERS in
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater response to unknown EDNS options. Maintain
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater statistics on BADVERS responses.
bde1625cbc0256920625797a2cd4f05312f02ffaMark Andrews3789. [bug] Null pointer dereference on rbt creation failure.
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater3788. [bug] dns_peer_getrequestsit was returning request_nsid by
cbb14fdb1f8eeab80c47205609b10a9969ab1df1Mark Andrews --- 9.10.0b2 released ---
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater3787. [bug] The code that checks whether "auto-dnssec" is
afaa290bb6acc504e93a0adbf20b6dd6c64e6d63Vernon Schryver allowed was ignoring "allow-update" ACLs set at
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater the options or view level. [RT #29536]
afaa290bb6acc504e93a0adbf20b6dd6c64e6d63Vernon Schryver3786. [func] Provide more detailed error codes when using
afaa290bb6acc504e93a0adbf20b6dd6c64e6d63Vernon Schryver native PKCS#11. "pkcs11-tokens" now fails robustly
afaa290bb6acc504e93a0adbf20b6dd6c64e6d63Vernon Schryver rather than asserting when run against an HSM with
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater an incomplete PKCS#11 API implementation. [RT #35479]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3785. [bug] Debugging code dumphex didn't accept arbitrarily long
5645e0c82a55b05abb975bd91b9566823dc5efb0Evan Hunt input (only compiled with -DDEBUG). [RT #35544]
5645e0c82a55b05abb975bd91b9566823dc5efb0Evan Hunt3784. [bug] Using "rrset-order fixed" when it had not been
5645e0c82a55b05abb975bd91b9566823dc5efb0Evan Hunt enabled at compile time caused inconsistent
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater results. It now works as documented, defaulting
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox User to cyclic mode. [RT #28104]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3783. [func] "tsig-keygen" is now available as an alternate
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews command name for "ddns-confgen". It generates
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews a TSIG key in named.conf format without comments.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3782. [func] Specifying "auto" as the salt when using
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews "rndc signing -nsec3param" causes named to
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews generate a 64-bit salt at random. [RT #35322]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3781. [tuning] Use adaptive mutex locks when available; this
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews has been found to improve performance under load
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews on many systems. "configure --with-locktype=standard"
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews restores conventional mutex locks. [RT #32576]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3780. [bug] $GENERATE handled negative numbers incorrectly.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3779. [cleanup] Clarify the error message when using an option
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews that was not enabled at compile time. [RT #35504]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3778. [bug] Log a warning when the wrong address family is
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews used in "listen-on" or "listen-on-v6". [RT #17848]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3777. [bug] EDNS EXPIRE code could dump core when processing
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater DLZ queries. [RT #35493]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3776. [func] "rndc -q" suppresses output from successful
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater rndc commands. Errors are printed on stderr.
f8b9948a4116226ac41b5509cca152849006c66cAutomatic Updater3775. [bug] dlz_dlopen driver could return the wrong error
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater code on API version mismatch, leading to a segfault.
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater3774. [func] When using "request-nsid", log the NSID value in
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater printable form as well as hex. [RT #20864]
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater3773. [func] "host", "nslookup" and "nsupdate" now have
4d813066e967a36c407ee641155ada0c614d4dc6Automatic Updater options to print the version number and exit.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (Based in part on a contribution from Tim Tessier.)
f55369d776907119cd8699a4119d9c80daa7cae4Mark Andrews3771. [cleanup] Adjusted log level for "using built-in key"
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater messages. [RT #24383]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater3770. [bug] "dig +trace" could fail with an assertion when it
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater needed to fall back to TCP due to a truncated
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater response. [RT #24660]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater3769. [doc] Improved documentation of "rndc signing -list".
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater algorithm. [RT #34000]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater3767. [func] Log explicitly when using rndc.key to configure
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater command channel. [RT #35316]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater3766. [cleanup] Fixed problems with building outside the source
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater tree when using native PKCS#11. [RT #35459]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater3765. [bug] Fixed a bug in "rndc secroots" that could crash
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater named when dumping an empty keynode. [RT #35469]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater3764. [bug] The dnssec-keygen/settime -S and -i options
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater (to set up a successor key and set the prepublication
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater interval) were missing from dnssec-keyfromlabel.
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater3763. [bug] delve: Cache DNSSEC records to avoid the need to
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater re-fetch them when restarting validation. [RT #35476]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater3762. [bug] Address build problems with --pkcs11-native +
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater --with-openssl with ECDSA support. [RT #35467]
29b33908adf234dbe677e2c0e152e74e2b1be13dTinderbox User3761. [bug] Address dangling reference bug in dns_keytable_add.
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3760. [bug] Improve SIT with native PKCS#11 and on Windows.
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3759. [port] Enable delve on Windows. [RT #35441]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3758. [port] Enable export library APIs on Windows. [RT #35382]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3757. [port] Enable Python tools (dnssec-coverage,
059cd1994d4ac5c1b967ce777d2c7409dc829a42Tinderbox User dnssec-checkds) to run on Windows. [RT #34355]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3756. [bug] GSSAPI Kerberos realm checking was broken in
f55369d776907119cd8699a4119d9c80daa7cae4Mark Andrews check_config leading to spurious messages being
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater logged. [RT #35443]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.10.0b1 released ---
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater3755. [func] Add stats counters for known EDNS options + others.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3754. [cleanup] win32: Installer now places files in the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Program Files area rather than system services.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3753. [bug] allow-notify was ignoring keys. [RT #35425]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3752. [bug] Address potential REQUIRE failure if
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater DNS_STYLEFLAG_COMMENTDATA is set when printing out
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater3751. [tuning] The default setting for the -U option (setting
dfd613f037c1385db661f17e086d34ea57fea9b0Automatic Updater the number of UDP listeners per interface) has
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater been adjusted to improve performance. [RT #35417]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3750. [experimental] Partially implement EDNS EXPIRE option as described
94d0b4bd411a66a2c5a7ebc8722579a59cf9640bAutomatic Updater in draft-andrews-dnsext-expire-00. Retrieval of
3e5340279d8875d136a4dd815cccad0044aa2644Automatic Updater the remaining time until expiry for slave zones
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater EXPIRE uses an experimental option code (65002),
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater which is subject to change. [RT #35416]
94d0b4bd411a66a2c5a7ebc8722579a59cf9640bAutomatic Updater3749. [func] "dig +subnet" sends an EDNS client subnet option
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater containing the specified address/prefix when
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater querying. (Thanks to Wilmer van der Gaast.)
879391501ee0ffba072433120bf1baa4087f8899Automatic Updater3748. [test] Use delve to test dns_client interfaces. [RT #35383]
ace530234c82bbfcd03bbfd4ba6c6a04293d497fMark Andrews3747. [bug] A race condition could lead to a core dump when
879391501ee0ffba072433120bf1baa4087f8899Automatic Updater destroying a resolver fetch object. [RT #35385]
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater3746. [func] New "max-zone-ttl" option enforces maximum
8f536463f9fdfa7da6a8310e4f4895373beb2961Mark Andrews TTLs for zones. If loading a zone containing a
099b86fb8136a7dff81df85cf395978c16eb254cAutomatic Updater higher TTL, the load fails. DDNS updates with
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater higher TTLs are accepted but the TTL is truncated.
879391501ee0ffba072433120bf1baa4087f8899Automatic Updater (Note: Currently supported for master zones only;
da82e232161d67b77df2d67898bdac693f647be1Automatic Updater inline-signing slaves will be added.) [RT #38405]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3745. [func] "configure --with-tuning=large" adjusts various
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater compiled-in constants and default settings to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater values suited to large servers with abundant
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater memory. [RT #29538]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3744. [experimental] SIT: send and process Source Identity Tokens
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (similar to DNS Cookies by Donald Eastlake 3rd),
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater which are designed to help clients detect off-path
dfd613f037c1385db661f17e086d34ea57fea9b0Automatic Updater spoofed responses and for servers to identify
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater legitimate clients.
63654fea53d6a58a65112234bc8d0c322e0c81b5Automatic Updater SIT uses an experimental EDNS option code (65001),
6df47a264d60318acf64a2f7ce9c1bb41ee05a98Automatic Updater which will be changed to an IANA-assigned value
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington if the experiment is deemed a success.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington SIT can be enabled via "configure --enable-sit" (or
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington --enable-developer). It is enabled by default in
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater Servers can be configured to send smaller responses
63654fea53d6a58a65112234bc8d0c322e0c81b5Automatic Updater to clients that have not identified themselves via
63654fea53d6a58a65112234bc8d0c322e0c81b5Automatic Updater SIT. RRL processing has also been updated;
27aa770222192dda4ba4ff4b76defd4b8c846226Automatic Updater legitimate clients are not subject to rate
d630ef2ff74445949a482660938e9fa9da52ca14Automatic Updater limiting. [RT #35389]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3743. [bug] delegation-only flag wasn't working in forward zone
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater declarations despite being documented. This is
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater needed to support turning off forwarding and turning
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater on delegation only at the same name. [RT #35392]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3742. [port] linux: libcap support: declare curval at start of
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater block. [RT #35387]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3741. [func] "delve" (domain entity lookup and validation engine):
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater A new tool with dig-like semantics for performing DNS
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater lookups, with internal DNSSEC validation, using the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater same resolver and validator logic as named. This
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User allows easy validation of DNSSEC data in environments
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater with untrustworthy resolvers, and assists with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater troubleshooting of DNSSEC problems. [RT #32406]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3740. [contrib] Minor fixes to configure --with-dlz-bdb,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3739. [func] Added per-zone stats counters to track TCP and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater UDP queries. [RT #35375]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater3737. [bug] 'rndc retransfer' could trigger a assertion failure
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater with inline zones. [RT #35353]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater3736. [bug] nsupdate: When specifying a server by name,
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater fall back to alternate addresses if the first
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater address for that name is not reachable. [RT #25784]
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User3735. [cleanup] Merged the libiscpk11 library into libisc
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User to simplify dependencies. [RT #35205]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3734. [bug] Improve building with libtool. [RT #35314]
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater3733. [func] Improve interface scanning support. Interface
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater information will be automatically updated if the
183b6c7fca54001820078f324d102fc33e64bbc6Automatic Updater OS supports routing sockets (MacOS, *BSD, Linux).
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater Use "automatic-interface-scan no;" to disable.
7be29b99f8c13c432db3822102412a32bc1dbaa4Automatic Updater Add "rndc scan" to trigger a scan. [RT #23027]
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater driver to dump core on 64-bit systems. [RT #35324]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3731. [func] Added a "no-case-compress" ACL, which causes
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater named to use case-insensitive compression
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (disabling change #3645) for specified
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater clients. (This is useful when dealing
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater with broken client implementations that
24e0e8d17df315d5d494ca933874e545eadce773Automatic Updater use case-sensitive name comparisons,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater rejecting responses that fail to match the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater capitalization of the query that was sent.)
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater3730. [cleanup] Added "never" as a synonym for "none" when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater configuring key event dates in the dnssec tools.
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater3729. [bug] dnssec-keygen could set the publication date
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater incorrectly when only the activation date was
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater specified on the command line. [RT #35278]
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater3728. [doc] Expanded native-PKCS#11 documentation,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater specifically pkcs11: URI labels. [RT #35287]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater3727. [func] The isc_bitstring API is no longer used and
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater has been removed from libisc. [RT #35284]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater3726. [cleanup] Clarified the error message when attempting
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater to configure more than 32 response-policy zones.
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater3725. [contrib] Updated zkt and nslint to newest versions,
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater cleaned up and rearranged the contrib
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater directory, and added a README.
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater --- 9.10.0a2 released ---
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater3724. [bug] win32: Fixed a bug that prevented dig and
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater host from exiting properly after completing
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater a UDP query. [RT #35288]
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater3723. [cleanup] Imported keys are now handled the same way
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater regardless of DNSSEC algorithm. [RT #35215]
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater3722. [bug] Using geoip ACLs in a blackhole statement
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater could cause a segfault. [RT #35272]
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater3721. [doc] Improved documentation of the EDNS processing
de73ef7ecdb9e009155993a6fa8dee5cd1bde319Mark Andrews enhancements introduced in change #3593. [RT #35275]
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater3720. [bug] Address compiler warnings. [RT #35261]
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater3719. [bug] Address memory leak in in peer.c. [RT #35255]
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater probing to see if it is possible to set dscp values
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater on a per packet basis. [RT #35252]
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater3716. [bug] The dns_request code was setting dcsp values when not
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater requested. [RT #35252]
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater3715. [bug] The region and city databases could fail to
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater initialize when using some versions of libGeoIP,
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater causing assertion failures when named was
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater configured to use them. [RT #35427]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3714. [test] System tests that need to test for cryptography
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington support before running can now use a common
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington "testcrypto.sh" script to do so. [RT #35213]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3713. [bug] Save memory by not storing "also-notify" addresses
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater in zone objects that are configured not to send
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User notify requests. [RT #35195]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3712. [placeholder]
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater3711. [placeholder]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3710. [bug] Address double dns_zone_detach when switching to
4d95e549ed8f84373e5eb7346a0c7ab7f3b0e9a8Automatic Updater using automatic empty zones from regular zones.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3709. [port] Use built-in versions of strptime() and timegm()
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater on all platforms to avoid portability issues.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3708. [bug] Address a portentry locking issue in dispatch.c.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews on a missing resolv.conf file and initializes the
dfd613f037c1385db661f17e086d34ea57fea9b0Automatic Updater structure as if it had been configured with:
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews nameserver ::1
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater nameserver 127.0.0.1
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater Note: Callers will need to be updated to treat
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater ISC_R_FILENOTFOUND as a qualified success or else
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater they will leak memory. The following code fragment
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater will work with both old and new versions without
56334ccb2d4b5a04fc12b70b5852049db5d24088Evan Hunt changing the behaviour of the existing code.
56334ccb2d4b5a04fc12b70b5852049db5d24088Evan Hunt resconf = NULL;
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater result = irs_resconf_load(mctx, "/etc/resolv.conf",
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater if (result != ISC_SUCCESS) {
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater if (resconf != NULL)
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater irs_resconf_destroy(&resconf);
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3706. [contrib] queryperf: Fixed a possible integer overflow when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater printing results. [RT #35182]
3a9593055ead76cbbb417aee2d2e656c2c92cf46Automatic Updater3705. [func] "configure --enable-native-pkcs11" enables BIND
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater to use the PKCS#11 API for all cryptographic
3a9593055ead76cbbb417aee2d2e656c2c92cf46Automatic Updater functions, so that it can drive a hardware service
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater module directly without the need to use a modified
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater OpenSSL as intermediary (so long as the HSM's vendor
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson provides a complete-enough implementation of the
a8a1d4629ed697be4b0c0bb96b3c59d494450eedAutomatic Updater PKCS#11 interface). This has been tested successfully
7932a7637170550bc53b38c35db9a0187dcb3d3bAutomatic Updater with the Thales nShield HSM and with SoftHSMv2 from
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson the OpenDNSSEC project. [RT #29031]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic Updater3703. [func] To improve recursive resolver performance, cache
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater records which are still being requested by clients
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater can now be automatically refreshed from the
c3fd32ed29e9e419bb56583f4272a506773b1ea0Automatic Updater authoritative server before they expire, reducing
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews or eliminating the time window in which no answer
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater is available in the cache. See the "prefetch" option
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater for more details. [RT #35041]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3702. [func] 'dnssec-coverage -l' option specifies a length
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of time to check for coverage; events further into
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the future are ignored. 'dnssec-coverage -z'
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater checks only ZSK events, and 'dnssec-coverage -k'
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater checks only KSK events. (Thanks to Peter Palfrader.)
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews3701. [func] named-checkconf can now obscure shared secrets
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews when printing by specifying '-x'. [RT #34465]
0ca8fddd5b5e26d8a05f0936fc4b2666a025b9c0Mark Andrews3700. [func] Allow access to subgroups of XML statistics via
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews special URLs http://<server>:<port>/xml/v3/server,
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews /zones, /net, /tasks, /mem, and /status. [RT #35115]
0ca8fddd5b5e26d8a05f0936fc4b2666a025b9c0Mark Andrews3699. [bug] Improvements to statistics channel XSL stylesheet:
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater the stylesheet can now be cached by the browser;
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews section headers are omitted from the stats display
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater when there is no data in those sections to be
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater displayed; counters are now right-justified for
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews easier readability. [RT #35117]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater3698. [cleanup] Replaced all uses of memcpy() with memmove().
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3697. [bug] Handle "." as a search list element when IDN support
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater is enabled. [RT #35133]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater3696. [bug] dig failed to handle AXFR style IXFR responses which
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater span multiple messages. [RT #35137]
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater3695. [bug] Address a possible race in dispatch.c. [RT #35107]
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater3694. [bug] Warn when a key-directory is configured for a zone,
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater but does not exist or is not a directory. [RT #35108]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews3693. [security] memcpy was incorrectly called with overlapping
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews ranges resulting in malformed names being generated
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater on some platforms. This could cause INSIST failures
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews when serving NSEC3 signed zones (CVE-2014-0591).
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews was no data at the node. [RT #35080]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews3691. [contrib] Address null pointer dereference in LDAP and
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews MySQL DLZ modules.
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater3690. [bug] Iterative responses could be missed when the source
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater port for an upstream query was the same as the
24bf1e02f03577db0feb50b80238c4150c96d05dAutomatic Updater listener port (53). [RT #34925]
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater3689. [bug] Fixed a bug causing an insecure delegation from one
24bf1e02f03577db0feb50b80238c4150c96d05dAutomatic Updater static-stub zone to another to fail with a broken
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater trust chain. [RT #35081]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater3688. [bug] loadnode could return a freed node on out of memory.
2ec4ab21838e218863d052ebfa3e106e04f50820Evan Hunt3687. [bug] Address null pointer dereference in zone_xfrdone.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3686. [func] "dnssec-signzone -Q" drops signatures from keys
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews that are still published but no longer active.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3685. [bug] "rndc refresh" didn't work correctly with slave
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews zones using inline-signing. [RT #35105]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3684. [bug] The list of included files would grow on reload.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3683. [cleanup] Add a more detailed "not found" message to rndc
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews commands which specify a zone name. [RT #35059]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3682. [bug] Correct the behavior of rndc retransfer to allow
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews inline-signing slave zones to retain NSEC3 parameters
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews instead of reverting to NSEC. [RT #34745]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3681. [port] Update the Windows build system to support feature
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews selection and WIN64 builds. This is a work in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews progress. [RT #34160]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3680. [bug] Ensure buffer space is available in "rndc zonestatus".
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3679. [bug] dig could fail to clean up TCP sockets still
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews waiting on connect(). [RT #35074]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3678. [port] Update config.guess and config.sub. [RT #35060]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews times. [RT #35073]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3676. [bug] "named-checkconf -z" now checks zones of type
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews hint and redirect as well as master. [RT #35046]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3675. [misc] Provide a place for third parties to add version
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews information for their extensions in the version
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews file by setting the EXTENSIONS variable.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews --- 9.10.0a1 released ---
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3673. [func] New "in-view" zone option allows direct sharing
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of zones between views. [RT #32968]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3672. [func] Local address can now be specified when using
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dns_client API. [RT #34811]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3671. [bug] Don't allow dnssec-importkey overwrite a existing
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews non-imported private key.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3670. [bug] Address read after free in server side of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews lwres_getrrsetbyname. [RT #29075]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3667. [test] dig: add support to keep the TCP socket open between
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews successive queries (+[no]keepopen). [RT #34918]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3666. [func] Add a tool, named-rrchecker, for checking the syntax
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of individual resource records. This tool is intended
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to be called by provisioning systems so that the front
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews end does not need to be upgraded to support new DNS
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews record types. [RT #34778]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3665. [bug] Failure to release lock on error in receive_secure_db.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews locking and other bugs. [RT #34855]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3663. [bug] Address bugs in dns_rdata_fromstruct and
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3661. [bug] Address lock order reversal deadlock with inline zones.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3659. [port] solaris: don't add explicit dependencies/rules for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews python programs as make won't use the implicit rules.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3658. [port] linux: Address platform specific compilation issue
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews when libcap-devel is installed. [RT #34838]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3657. [port] Some readline clones don't accept NULL pointers when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews calling add_history. [RT #34842]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3656. [security] Treat an all zero netmask as invalid when generating
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the localnets acl. (The prior behavior could
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews allow unexpected matches when using some versions
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of Winsock: CVE-2013-6320.) [RT #34687]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3655. [cleanup] Simplify TCP message processing when requesting a
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews zone transfer. [RT #34825]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3654. [bug] Address race condition with manual notify requests.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3653. [func] Create delegations for all "children" of empty zones
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews except "forward first". [RT #34826]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3651. [tuning] Adjust when a master server is deemed unreachable.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3650. [tuning] Use separate rate limiting queues for refresh and
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews notify requests. [RT #30589]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3649. [cleanup] Include a comment in .nzf files, giving the name of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the associated view. [RT #34765]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3648. [test] Updated the ATF test framework to version 0.17.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3647. [bug] Address a race condition when shutting down a zone.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3646. [bug] Journal filename string could be set incorrectly,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews causing garbage in log messages. [RT #34738]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3645. [protocol] Use case sensitive compression when responding to
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews queries. [RT #34737]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3644. [protocol] Check that EDNS subnet client options are well formed.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3643. [doc] Clarify RRL "slip" documentation.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3642. [func] Allow externally generated DNSKEY to be imported
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews into the DNSKEY management framework. A new tool
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dnssec-importkey is used to do this. [RT #34698]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3641. [bug] Handle changes to sig-validity-interval settings
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater better. [RT #34625]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3640. [bug] ndots was not being checked when searching. Only
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews continue searching on NXDOMAIN responses. Add the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews ability to specify ndots to nslookup. [RT #34711]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews in a key zone. [RT #34238]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews encountered. [RT #34668]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3637. [bug] 'allow-query-on' was checking the source address
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews rather than the destination address. [RT #34590]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3636. [bug] Automatic empty zones now behave better with
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews forward only "zones" beneath them. [RT #34583]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3635. [bug] Signatures were not being removed from a zone with
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews only KSK keys for a algorithm. [RT #34439]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3634. [func] Report build-id in rndc status. Report build-id
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews when building from a git repository. [RT #20422]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3633. [cleanup] Refactor OPT processing in named to make it easier
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to support new EDNS options. [RT #34414]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3632. [bug] Signature from newly inactive keys were not being
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews removed. [RT #32178]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3631. [bug] Remove spurious warning about missing signatures when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews qtype is SIG. [RT #34600]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3629. [func] Allow the printing of cryptographic fields in DNSSEC
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews records by dig to be suppressed (dig +nocrypto).
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3628. [func] Report DNSKEY key id's when dumping the cache.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews3626. [func] dig: NSID output now easier to read. [RT #21160]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3625. [bug] Don't send notify messages to machines outside of the
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews3624. [bug] Look for 'json_object_new_int64' when looking for a
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews the json library. [RT #34449]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews3623. [placeholder]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews3622. [tuning] Eliminate an unnecessary lock when incrementing
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews cache statistics. [RT #34339]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews3621. [security] Incorrect bounds checking on private type 'keydata'
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews can lead to a remotely triggerable REQUIRE failure
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews (CVE-2013-4854). [RT #34238]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews3620. [func] Added "rpz-client-ip" policy triggers, enabling
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews RPZ responses to be configured on the basis of
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews the client IP address; this can be used, for
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews example, to blacklist misbehaving recursive
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews or stub resolvers. [RT #33605]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews3618. [func] "rndc reload" now checks modification times of
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews include files as well as master files to determine
78cb74fab4665da2e2641ba909c6f59f74cc4193Automatic Updater whether to skip reloading a zone. [RT #33936]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater3617. [bug] Named was failing to answer queries during
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater "rndc reload" [RT #34098]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater3616. [bug] Change #3613 was incomplete. [RT #34177]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater3615. [cleanup] "configure" now finishes by printing a summary
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater of optional BIND features and whether they are
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater active or inactive. ("configure --enable-full-report"
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater increases the verbosity of the summary.) [RT #31777]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater3614. [port] Check for <linux/types.h>. [RT #34162]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater3613. [bug] named could crash when deleting inline-signing
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater zones with "rndc delzone". [RT #34066]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
309b912841e8b97bf0b0df0d96c3eaf16990c080Automatic Updater3611. [bug] Improved resistance to a theoretical authentication
66d24a46538c7c2d29fdb5611ab1173e83685b1dTinderbox User attack based on differential timing. [RT #33939]
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson3610. [cleanup] win32: Some executables had been omitted from the
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson installer. [RT #34116]
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews3609. [bug] Corrected a possible deadlock in applications using
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews the export version of the isc_app API. [RT #33967]
94df856897945fe58f130ba78765c57308bc5400Automatic Updater3608. [port] win32: added todos.pl script to ensure all text files
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark Andrews the win32 build depends on are converted to DOS
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater newline format. [RT #22067]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater message. [RT #34045]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews3606. [func] "rndc flushtree" now flushes matching
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews records in the address database and bad cache
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews as well as the DNS cache. (Previously only the
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater DNS cache was flushed.) [RT #33970]
da93950363b307b718d156514b95b9df93a63776Mark Andrews3605. [port] win32: Addressed several compatibility issues
35bc7055d1b9b816e68a4180d46a49963e45c233Automatic Updater with newer versions of Visual Studio. [RT #33916]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3604. [bug] Fixed a compile-time error when building with
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater JSON but not XML. [RT #33959]
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater3603. [bug] Install <isc/stat.h>. [RT #33956]
e23256e740b238bddb4ba41ffac5f81a01c92245Automatic Updater3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater integrate with named and serve DNS data.
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater (Contributed by John Eaglesham of Yahoo.)
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater3601. [bug] Added to PKCS#11 openssl patches a value len
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater attribute in DH derive key. [RT #33928]
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater3600. [cleanup] dig: Fixed a typo in the warning output when receiving
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater an oversized response. [RT #33910]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3599. [tuning] Check for pointer equivalence in name comparisons.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3598. [cleanup] Improved portability of map file code. [RT #33820]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3597. [bug] Ensure automatic-resigning heaps are reconstructed
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater when loading zones in map format. [RT #33381]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3596. [port] Updated win32 build documentation, added
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater dnssec-verify. [RT #22067]
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater3595. [port] win32: Fix build problems introduced by change #3550.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3594. [maint] Update config.guess and config.sub. [RT #33816]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3593. [func] Update EDNS processing to better track remote server
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater capabilities. [RT #30655]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3592. [doc] Moved documentation of rndc command options to the
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater rndc man page. [RT #33506]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3591. [func] Use CRC-64 to detect map file corruption at load
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater time. [RT #33746]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3590. [bug] When using RRL on recursive servers, defer
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater rate-limiting until after recursion is complete;
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater also, use correct rcode for slipped NXDOMAIN
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater responses. [RT #33604]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3589. [func] Report serial numbers in when starting zone transfers.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater Report accepted NOTIFY requests including serial.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3588. [bug] dig: addressed a memory leak in the sigchase code
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater that could cause a shutdown crash. [RT #33733]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3587. [func] 'named -g' now checks the logging configuration but
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater does not use it. [RT #33473]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3585. [func] "rndc delzone -clean" option removes zone files
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater when deleting a zone. [RT #33570]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3584. [security] Caching data from an incompletely signed zone could
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater trigger an assertion failure in resolver.c
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater (CVE-2013-3919). [RT #33690]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3583. [bug] Address memory leak in GSS-API processing [RT #33574]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3582. [bug] Silence false positive warning regarding missing file
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater directive for inline slave zones. [RT #33662]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater3580. [bug] Addressed a possible race in acache.c [RT #33602]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3579. [maint] Updates to PKCS#11 openssl patches, supporting
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3577. [bug] Handle zero TTL values better. [RT #33411]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3576. [bug] Address a shutdown race when validating. [RT #33573]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3575. [func] Changed the logging category for RRL events from
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater 'queries' to 'query-errors'. [RT #33540]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3574. [doc] The 'hostname' keyword was missing from server-id
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater description in the named.conf man page. [RT #33476]
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater zone names containing punctuation marks and other
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater nonstandard characters. [RT #33419]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater3572. [func] Threads are now enabled by default on most
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater operating systems. [RT #25483]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater3571. [bug] Address race condition in dns_client_startresolve().
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3570. [bug] Check internal pointers are valid when loading map
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater files. [RT #33403]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater module, and added multithread support. [RT #33394]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3568. [cleanup] Add a product description line to the version file,
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater to be reported by named -v/-V. [RT #33366]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3567. [bug] Silence clang static analyzer warnings. [RT #33365]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3566. [func] Log when forwarding updates to master. [RT #33240]
782b50b4ebbd48d570831f66d8ffc550e0db340cAutomatic Updater3565. [placeholder]
0ece47f7c1cf03718726d9dff183b02fa35115e6Mark Andrews3564. [bug] Improved handling of corrupted map files. [RT #33380]
c6a0f4ae1d7183a16ffb196b86b647f870694796Automatic Updater3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3562. [func] Update map file header format to include a SHA-1 hash
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater of the database content, so that corrupted map files
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater can be rejected at load time. [RT #32459]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater or NOTIMP. Adjust usage message. [RT #33363]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3560. [bug] isc-config.sh did not honor includedir and libdir
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater when set via configure. [RT #33345]
09091b4f0f69cca36f74a291fa3eb496686aeb1eAutomatic Updater3559. [func] Check that both forms of Sender Policy Framework
0429fc942ef48b8ab07a01648b22f98174a2ae6fAutomatic Updater records exist or do not exist. [RT #33355]
4ea3649f028ea6a1e42377082a7ccf8f789fb950Automatic Updater3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
644973f327e9db74779e7c0426db90909173b284Automatic Updater3557. [bug] Reloading redirect zones was broken. [RT #33292]
418cc932318b1d67f88a36904d88d8a5a0a2ba09Automatic Updater3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3555. [bug] Address theoretical race conditions in acache.c
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater (change #3553 was incomplete). [RT #33252]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3554. [bug] RRL failed to correctly rate-limit upward
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater referrals and failed to count dropped error
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater responses in the statistics. [RT #33225]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3553. [bug] Address suspected double free in acache. [RT #33252]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3552. [bug] Wrong getopt option string for 'nsupdate -r'.
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3550. [func] Unified the internal and export versions of the
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater BIND libraries, allowing external clients to use
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater the same libraries as BIND. [RT #33131]
7349698120e3f6f51162a2fdb5613f9aecbc78c3Automatic Updater3549. [doc] Documentation for "request-nsid" was missing.
dc11390a658e02e1a03accd4dbe14c94fa9de556Automatic Updater3548. [bug] The NSID request code in resolver.c was broken
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews resulting in invalid EDNS options being sent.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews3547. [bug] Some malformed unknown rdata records were not properly
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews detected and rejected. [RT #33129]
90863a6f9bfb06062c7fdf269bb675e7b674fc31Mark Andrews3546. [func] Add EUI48 and EUI64 types. [RT #33082]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews3545. [bug] RRL slip behavior was incorrect when set to 1.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews3544. [contrib] check5011.pl: Script to report the status of
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews managed keys as recorded in managed-keys.bind.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews Contributed by Tony Finch <dot@dotat.at>
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews3543. [bug] Update socket structure before attaching to socket
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews manager after accept. [RT #33084]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews3542. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3541. [bug] Parts of libdns were not properly initialized when
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews built in libexport mode. [RT #33028]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3540. [test] libt_api: t_info and t_assert were not thread safe.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews3539. [port] win32: timestamp format didn't match other platforms.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews3538. [test] Running "make test" now requires loopback interfaces
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User to be set up. [RT #32452]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3537. [tuning] Slave zones, when updated, now send NOTIFY messages
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to peers before being dumped to disk rather than
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater after. [RT #27242]
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews3536. [func] Add support for setting Differentiated Services Code
cff0e0b52cf0928123bad6f3bccf56e22bbc07f5Automatic Updater Point (DSCP) values in named. Most configuration
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews options which take a "port" option (e.g.,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater listen-on, forwarders, also-notify, masters,
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews notify-source, etc) can now also take a "dscp"
872a5b83f68b8058945298715b0fa53442aad52fAutomatic Updater option specifying a code point for use with
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews outgoing traffic, if supported by the underlying
bdcada7d31335e05ebca757eb789e57166fb2a02Tinderbox User OS. [RT #27596]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews3535. [bug] Minor win32 cleanups. [RT #32962]
90eba8a49d580f9e718983fa39d8e5ee483558c9Automatic Updater3534. [bug] Extra text after an embedded NULL was ignored when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington parsing zone files. [RT #32699]
7a42357217528037bdfedcb17eeebfe96ae4266aAutomatic Updater3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3531. [bug] win32: A uninitialized value could be returned on out
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of memory. [RT #32960]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3529. [func] Named now listens on both IPv4 and IPv6 interfaces
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington by default. Named previously only listened on IPv4
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington interfaces by default unless named was running in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington IPv6 only mode. [RT #32945]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3528. [func] New "dnssec-coverage" command scans the timing
cff0e0b52cf0928123bad6f3bccf56e22bbc07f5Automatic Updater metadata for a set of DNSSEC keys and reports if a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater lapse in signing coverage has been scheduled
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater inadvertently. (Note: This tool depends on python;
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater it will not be built or installed on systems that
644973f327e9db74779e7c0426db90909173b284Automatic Updater do not have a python interpreter.) [RT #28098]
c28a1243429dfaf8dc5f6c1db0dccdc6ce386baeMark Andrews3527. [compat] Add a URI to allow applications to explicitly
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater request a particular XML schema from the statistics
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews channel, returning 404 if not supported. [RT #32481]
5f7e0eb1cb917b788906d3e2aa01bfc4885dcae4Mark Andrews3526. [cleanup] Set up dependencies for unit tests correctly during
bf1263835e8e35421960f65088c043f42aacef13Mark Andrews build. [RT #32803]
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews3525. [func] Support for additional signing algorithms in rndc:
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater The -A option to rndc-confgen can be used to
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User select the algorithm for the generated key.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (The default is still hmac-md5; this may
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User change in a future release.) [RT #20363]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3524. [func] Added an alternate statistics channel in JSON format,
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater when the server is built with the json-c library:
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater http://[address]:[port]/json. [RT #32630]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3523. [contrib] Ported filesystem and ldap DLZ drivers to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dynamically-loadable modules, and added the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "wildcard" module based on a contribution from
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3522. [bug] DLZ lookups could fail to return SERVFAIL when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater they ought to. [RT #32685]
10640b2e3efc7bc8034108136d7487f7407fbf37Andreas Gustafsson3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
10640b2e3efc7bc8034108136d7487f7407fbf37Andreas Gustafsson3520. [bug] 'mctx' was not being referenced counted in some places
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater where it should have been. [RT #32794]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3519. [func] Full replay protection via four-way handshake is
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater now mandatory for rndc clients. Very old versions
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User of rndc will no longer work. [RT #32798]
9c446b72069d0ab9f710502f4d7048e50875fccbAutomatic Updater3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User so that all dns_rrl_rtype_t enum values fit regardless
09091b4f0f69cca36f74a291fa3eb496686aeb1eAutomatic Updater of whether it is teated as signed or unsigned by
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater the compiler. [RT #32792]
bbde8dc56605130058a1540609264fa109da3b63Automatic Updater3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater3516. [placeholder]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3515. [port] '%T' is not portable in strftime(). [RT #32763]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3514. [bug] The ranges for valid key sizes in ddns-confgen and
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater rndc-confgen were too constrained. Keys up to 512
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User bits are now allowed for most algorithms, and up
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User to 1024 bits for hmac-sha384 and hmac-sha512.
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User3513. [func] "dig -u" prints times in microseconds rather than
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User milliseconds. [RT #32704]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3512. [func] "rndc validation check" reports the current status
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater of DNSSEC validation. [RT #21397]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User3511. [doc] Improve documentation of redirect zones. [RT #32756]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3510. [func] "rndc status" and XML statistics channel now report
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater server start and reconfiguration times. [RT #21048]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater3509. [cleanup] Added a product line to version file to allow for
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater easy naming of different products (BIND
3e5340279d8875d136a4dd815cccad0044aa2644Automatic Updater vs BIND ESV, for example). [RT #32755]
3e5340279d8875d136a4dd815cccad0044aa2644Automatic Updater3508. [contrib] queryperf was incorrectly rejecting the -T option.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3507. [bug] Statistics channel XSL had a glitch when attempting
9c446b72069d0ab9f710502f4d7048e50875fccbAutomatic Updater to chart query data before any queries had been
bea3208b417a0700bd524807082875b7d09585e4Automatic Updater received. [RT #32620]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3506. [func] When setting "max-cache-size" and "max-acache-size",
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User the keyword "unlimited" is no longer defined as equal
bbde8dc56605130058a1540609264fa109da3b63Automatic Updater to 4 gigabytes (except on 32-bit platforms); it
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater means literally unlimited. [RT #32358]
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater3505. [bug] When setting "max-cache-size" and "max-acache-size",
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater larger values than 4 gigabytes could not be set
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User explicitly, though larger sizes were available
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when setting cache size to 0. This has been
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater corrected; the full range is now available.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3504. [func] Add support for ACLs based on geographic location,
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User using MaxMind GeoIP databases. Based on code
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater contributed by Ken Brownfield <kb@slide.com>.
02b3e44a996e9753d86306b6a1b6b579a73787fcTinderbox User3503. [doc] Clarify size_spec syntax. [RT #32449]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3502. [func] zone-statistics: "no" is now a synonym for "none",
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater instead of "terse". [RT #29165]
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater3501. [func] zone-statistics now takes three options: full,
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater terse, and none. "yes" and "no" are retained as
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater synonyms for full and terse, respectively. [RT #29165]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User3500. [security] Support NAPTR regular expression validation on
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater all platforms without using libregex, which
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater can be vulnerable to memory exhaustion attack
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater (CVE-2013-2266). [RT #32688]
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater3499. [doc] Corrected ARM documentation of built-in zones.
c453a50776145e9c1c3fc9c846cfa11f42505081Automatic Updater3498. [bug] zone statistics for zones which matched a potential
4ea3649f028ea6a1e42377082a7ccf8f789fb950Automatic Updater empty zone could have their zone-statistics setting
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3497. [func] When deleting a slave/stub zone using 'rndc delzone'
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater report the files that were being used so they can
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater be cleaned up if desired. [RT #27899]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User3496. [placeholder]
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater3495. [func] Support multiple response-policy zones (up to 32),
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater while improving RPZ performance. "response-policy"
ca904804e43f663f08eb1ac9d6d617930b9a3cd3Automatic Updater syntax now includes a "min-ns-dots" clause, with
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater default 1, to exclude top-level domains from
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater NSIP and NSDNAME checking. --enable-rpz-nsip and
713a5e3080f112b3efde9235e9c92035056ff966Automatic Updater --enable-rpz-nsdname are now the default. [RT #32251]
129090f0f6f91753b4a085ab635e28549fd018adAutomatic Updater3494. [func] DNS RRL: Blunt the impact of DNS reflection and
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User amplification attacks by rate-limiting substantially-
3e5340279d8875d136a4dd815cccad0044aa2644Automatic Updater identical responses. [RT #28130]
02b3e44a996e9753d86306b6a1b6b579a73787fcTinderbox User3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
f8b9948a4116226ac41b5509cca152849006c66cAutomatic Updater contributed by Mark Goldfinch. [RT #32549]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3492. [bug] Fixed a regression in zone loading performance
c243d779731a410f8dc2d2feeed20c15f299b6e3Automatic Updater due to lock contention. [RT #30399]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater3491. [bug] Slave zones using inline-signing must specify a
099b86fb8136a7dff81df85cf395978c16eb254cAutomatic Updater file name. [RT #31946]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3490. [bug] When logging RDATA during update, truncate if it's
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater too long. [RT #32365]
572cb2c1c931f6bc6a4a019c103ae88239b0eb96Automatic Updater3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
02b3e44a996e9753d86306b6a1b6b579a73787fcTinderbox User dns_dlzcreate() failed to properly initialize
3e5340279d8875d136a4dd815cccad0044aa2644Automatic Updater dlzdb.link. When cloning a rdataset do not copy
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the link contents. [RT #32651]
f22980c16f244b7d7f33b5248f2d38bd4885f108Automatic Updater3488. [bug] Use after free error with DH generated keys. [RT #32649]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3487. [bug] Change 3444 was not complete. There was a additional
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User place where the NOQNAME proof needed to be saved.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3486. [bug] named could crash when using TKEY-negotiated keys
d630ef2ff74445949a482660938e9fa9da52ca14Automatic Updater that had been deleted and then recreated. [RT #32506]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3484. [bug] Some statistics were incorrectly rendered in XML.
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater3483. [placeholder]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater3482. [func] dig +nssearch now prints name servers that don't
f4029eb7463e99df00618de89f0bee5ac062a237Automatic Updater have address records (missing AAAA or A, or the name
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater doesn't exist). [RT #29348]
3e79333aa37d3b88959372431a02af8a3eb7cfd9Automatic Updater3481. [cleanup] Removed use of const const in atf.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3480. [bug] Silence logging noise when setting up zone
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User statistics. [RT #32525]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3479. [bug] Address potential memory leaks in gssapi support
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User code. [RT #32405]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3478. [port] Fix a build failure in strict C99 environments
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User3477. [func] Expand logging when adding records via DDNS update
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3476. [bug] "rndc zonestatus" could report a spurious "not
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater found" error on inline-signing zones. [RT #29226]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3475. [cleanup] Changed name of 'map' zone file format (previously
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User 'fast'). [RT #32458]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3474. [bug] nsupdate could assert when the local and remote
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater address families didn't match. [RT #22897]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3473. [bug] dnssec-signzone/verify could incorrectly report
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User an error condition due to an empty node above an
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User opt-out delegation lacking an NSEC3. [RT #32072]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3472. [bug] The active-connections counter in the socket
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater statistics could underflow. [RT #31747]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3471. [bug] The number of UDP dispatches now defaults to
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User the number of CPUs even if -n has been set to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a higher value. [RT #30964]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3470. [bug] Slave zones could fail to dump when successfully
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User refreshing after an initial failure. [RT #31276]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3469. [bug] Handle DLZ lookup failures more gracefully. Improve
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater backward compatibility between versions of DLZ dlopen
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User API. [RT #32275]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3468. [security] RPZ rules to generate A records (but not AAAA records)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater could trigger an assertion failure when used in
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater conjunction with DNS64 (CVE-2012-5689). [RT #32141]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3467. [bug] Added checks in dnssec-keygen and dnssec-settime
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to check for delete date < inactive date. [RT #31719]
59b277af9d9aac08d16be63aed5ae60ac9eef0d5Automatic Updater3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User in DLZ example driver. [RT #32275]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3465. [bug] Handle isolated reserved ports. [RT #31778]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3464. [maint] Updates to PKCS#11 openssl patches, supporting
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3462. [doc] Clarify server selection behavior of dig when using
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater -4 or -6 options. [RT #32181]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3461. [bug] Negative responses could incorrectly have AD=1
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater set. [RT #32237]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3460. [bug] Only link against readline where needed. [RT #29810]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3459. [func] Added -J option to named-checkzone/named-compilezone
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater to specify the path to the journal file. [RT #30958]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3458. [bug] Return FORMERR when presented with a overly long
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater domain named in a request. [RT #29682]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3456. [port] g++47: ATF failed to compile. [RT #32012]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3455. [contrib] queryperf: fix getopt option list. [RT #32338]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3454. [port] sparc64: improve atomic support. [RT #25182]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater failed. [RT #31960]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3452. [bug] Accept duplicate singleton records. [RT #32329]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3451. [port] Increase per thread stack size from 64K to 1M.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3450. [bug] Stop logfileconfig system test spam system logs.
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3449. [bug] gen.c: use the pre-processor to construct format
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater strings so that compiler can perform sanity checks;
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater check the snprintf results. [RT #17576]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3448. [bug] The allow-query-on ACL was not processed correctly.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3447. [port] Add support for libxml2-2.9.x [RT #32231]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3446. [port] win32: Add source ID (see change #3400) to build.
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3445. [bug] Warn about zone files with blank owner names
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater immediately after $ORIGIN directives. [RT #31848]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3444. [bug] The NOQNAME proof was not being returned from cached
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User insecure responses. [RT #21409]
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User rejected when generating keys. [RT #31927]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3442. [port] Net::DNS 0.69 introduced a non backwards compatible
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater change. [RT #32216]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3440. [bug] Reorder get_key_struct to not trigger a assertion when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater cleaning up due to out of memory error. [RT #32131]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3439. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater buffers with constant data. [RT #32064]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3436. [bug] Check malloc/calloc return values. [RT #32088]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3435. [bug] Cross compilation support in configure was broken.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3434. [bug] Pass client info to the DLZ findzone() entry
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater point in addition to lookup(). This makes it
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater possible for a database to answer differently
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater whether it's authoritative for a name depending
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater on the address of the client. [RT #31775]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3433. [bug] dlz_findzone() did not correctly handle
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater ISC_R_NOMORE. [RT #31172]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3432. [func] Multiple DLZ databases can now be configured.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater DLZ databases are searched in the order configured,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater unless set to "search no", in which case a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater zone can be configured to be retrieved from a
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User particular DLZ database by using a "dlz <name>"
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater option in the zone statement. DLZ databases can
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User support type "master" and "redirect" zones.
e2e3f655d133f08056c9035412d4c013aab234e7Automatic Updater3431. [bug] ddns-confgen: Some valid key algorithms were
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater not accepted. [RT #31927]
2178b22c8f4a20a0dfc17c93f67789d58530b6e6Automatic Updater3430. [bug] win32: isc_time_formatISO8601 was missing the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User 'T' between the date and time. [RT #32044]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3429. [bug] dns_zone_getserial2 could a return success without
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User returning a valid serial. [RT #32007]
0d3490f93bb980fde704055e74c1b508987a5fe4Mark Andrews3428. [cleanup] dig: Add timezone to date output. [RT #2269]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3427. [bug] dig +trace incorrectly displayed name server
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater addresses instead of names. [RT #31641]
099b86fb8136a7dff81df85cf395978c16eb254cAutomatic Updater3426. [bug] dnssec-checkds: Clearer output when records are not
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User found. [RT #31968]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3425. [bug] "acacheentry" reference counting was broken resulting
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater in use after free. [RT #31908]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3424. [func] dnssec-dsfromkey now emits the hash without spaces.
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User3423. [bug] "rndc signing -nsec3param" didn't accept the full
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User range of possible values. Address portability issues.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3422. [bug] Added a clear error message for when the SOA does not
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater match the referral. [RT #31281]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3421. [bug] Named loops when re-signing if all keys are offline.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3420. [bug] Address VPATH compilation issues. [RT #31879]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3419. [bug] Memory leak on validation cancel. [RT #31869]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3418. [func] New XML schema (version 3.0) for the statistics channel
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater adds query type statistics at the zone level, and
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews flattens the XML tree and uses compressed format to
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews optimize parsing. Includes new XSL that permits
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews charting via the Google Charts API on browsers that
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater support javascript in XSL. The old XML schema has been
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater deprecated. [RT #30023]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3417. [placeholder]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3416. [bug] Named could die on shutdown if running with 128 UDP
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater dispatches per interface. [RT #31743]
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater3415. [bug] named could die with a REQUIRE failure if a validation
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater was canceled. [RT #31804]
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater3414. [bug] Address locking issues found by Coverity. [RT #31626]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3413. [func] Record the number of DNS64 AAAA RRsets that have been
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User synthesized. [RT #27636]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3412. [bug] Copy timeval structure from control message data.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User to UDP. [RT #31690]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3410. [bug] Addressed Coverity warnings. [RT #31626]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
5b10b473e94d11cddac29340317ec3ad2a856598Automatic Updater from X.509 certificates, for use with DANE
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (DNS-based Authentication of Named Entities).
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson3408. [bug] Some DNSSEC-related options (update-check-ksk,
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
992616aaf75643a0c9f84826f0a1ed5a27e84328Mark Andrews are now legal in slave zones as long as
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater inline-signing is in use. [RT #31078]
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson3407. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3406. [bug] mem.c: Fix compilation errors when building with
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
f132a836c4e386b1af045dd8fe7106ae61b90bffAutomatic Updater Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3405. [bug] Handle time going backwards in acache. [RT #31253]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3404. [bug] dnssec-signzone: When re-signing a zone, remove
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User RRSIG and NSEC records from nodes that used to be
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater in-zone but are now below a zone cut. [RT #31556]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3402. [test] The IPv6 interface numbers used for system
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater tests were incorrect on some platforms. [RT #25085]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3401. [bug] Addressed Coverity warnings. [RT #31484]
47ff70af9e842bf0f69d209433995216f560fe4aAutomatic Updater3400. [cleanup] "named -V" can now report a source ID string, defined
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater in the "srcid" file in the build tree and normally set
8a507eb20351ee478e8c05620c6899f0a04c1853Automatic Updater to the most recent git hash. [RT #31494]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3399. [port] netbsd: rename 'bool' parameter to avoid namespace
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater clash. [RT #31515]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3398. [bug] SOA parameters were not being updated with inline
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater signed zones if the zone was modified while the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User server was offline. [RT #29272]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3396. [bug] OPT records were incorrectly removed from signed,
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User truncated responses. [RT #31439]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3394. [bug] Adjust 'successfully validated after lower casing
da24e725ff982595d74da7e75e9fbd6a696367ccAutomatic Updater signer' log level and category. [RT #31414]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3393. [bug] 'host -C' could core dump if REFUSED was received.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3392. [func] Keep statistics on REFUSED responses. [RT #31412]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3390. [bug] Silence clang compiler warnings. [RT #30417]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3388. [bug] Fixed several Coverity warnings.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater Note: This change includes a fix for a bug that
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater was subsequently determined to be an exploitable
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater security vulnerability, CVE-2012-5688: named could
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User die on specific queries with dns64 enabled.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3387. [func] DS digest can be disabled at runtime with
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater disable-ds-digests. [RT #21581]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater3386. [bug] Address locking violation when generating new NSEC /
603cf17f33da24d460616389ec40d6f2a6e110a0Automatic Updater NSEC3 chains. [RT #31224]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3385. [bug] named-checkconf didn't detect missing master lists
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater in also-notify clauses. [RT #30810]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3384. [bug] Improved logging of crypto errors. [RT #30963]
55aec75784a22e9d06d52b2b8a7d5aa42d31dc00Automatic Updater3383. [security] A certain combination of records in the RBT could
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater cause named to hang while populating the additional
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater section of a response. [RT #31090]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater3382. [bug] SOA query from slave used use-v6-udp-ports range,
93bd88e172a36b549938bce1731df7c10a8f3fb5Automatic Updater if set, regardless of the address family in use.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3381. [contrib] Update queryperf to support more RR types.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater3380. [bug] named could die if a nonexistent master list was
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater referenced in a also-notify. [RT #31004]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3379. [bug] isc_interval_zero and isc_time_epoch should be
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater "const (type)* const". [RT #31069]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater3378. [bug] Handle missing 'managed-keys-directory' better.
3c02671513da2af836b985c5e70c8e44583359afAutomatic Updater3377. [bug] Removed spurious newline from NSEC3 multiline
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater output. [RT #31044]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3376. [bug] Lack of EDNS support was being recorded without a
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater successful response. [RT #30811]
47ff70af9e842bf0f69d209433995216f560fe4aAutomatic Updater3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3374. [bug] isc_parse_uint32 failed to return a range error on
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater systems with 64 bit longs. [RT #30232]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3373. [bug] win32: open raw files in binary mode. [RT #30944]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater3372. [bug] Silence spurious "deleted from unreachable cache"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater messages. [RT #30501]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3371. [bug] AD=1 should behave like DO=1 when deciding whether to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater add NS RRsets to the additional section or not.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater3370. [bug] Address use after free while shutting down. [RT #30241]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater3369. [bug] nsupdate terminated unexpectedly in interactive mode
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater if built with readline support. [RT #29550]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater were not C++ safe.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3367. [bug] dns_dnsseckey_create() result was not being checked.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3366. [bug] Fixed Read-After-Write dependency violation for IA64
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User atomic operations. [RT #25181]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3365. [bug] Removed spurious newlines from log messages in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3364. [security] Named could die on specially crafted record.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3363. [bug] Need to allow "forward" and "fowarders" options
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater in static-stub zones; this had been overlooked.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3362. [bug] Setting some option values to 0 in named.conf
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater could trigger an assertion failure on startup.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3361. [bug] "rndc signing -nsec3param" didn't work correctly
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User when salt was set to '-' (no salt). [RT #30099]
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater3360. [bug] 'host -w' could die. [RT #18723]
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater3359. [bug] An improperly-formed TSIG secret could cause a
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater memory leak. [RT #30607]
e705db6d5d886dc14f4a75a2046a075c0750e7eeAutomatic Updater3358. [placeholder]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3357. [port] Add support for libxml2-2.8.x [RT #30440]
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater approaching their expiry, so they don't remain
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater in caches after expiry. [RT #26429]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3355. [port] Use more portable awk in verify system test.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3354. [func] Improve OpenSSL error logging. [RT #29932]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3353. [bug] Use a single task for task exclusive operations.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3352. [bug] Ensure that learned server attributes timeout of the
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater adb cache. [RT #29856]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater memory debugging flags are set. [RT #30243]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater3350. [bug] Memory read overrun in isc___mem_reallocate if
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ISC_MEM_DEBUGCTX memory debugging flag is set.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3349. [bug] Change #3345 was incomplete. [RT #30233]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3348. [bug] Prevent RRSIG data from being cached if a negative
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater record matching the covering type exists at a higher
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User trust level. Such data already can't be retrieved from
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User the cache since change 3218 -- this prevents it
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater being inserted into the cache as well. [RT #26809]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater3347. [bug] dnssec-settime: Issue a warning when writing a new
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater private key file would cause a change in the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User permissions of the existing file. [RT #27724]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3346. [security] Bad-cache data could be used before it was
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater initialized, causing an assert. [RT #30025]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater3345. [bug] Addressed race condition when removing the last item
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater or inserting the first item in an ISC_QUEUE.
8a507eb20351ee478e8c05620c6899f0a04c1853Automatic Updater3344. [func] New "dnssec-checkds" command checks a zone to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater determine which DS records should be published
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in the parent zone, or which DLV records should be
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater published in a DLV zone, and queries the DNS to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ensure that it exists. (Note: This tool depends
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater on python; it will not be built or installed on
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater systems that do not have a python interpreter.)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3343. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3342. [bug] Change #3314 broke saving of stub zones to disk
681beefc668253b3e469a1de282fbc33a3752422Automatic Updater resulting in excessive cpu usage in some cases.
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater3341. [func] New "dnssec-verify" command checks a signed zone
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User to ensure correctness of signatures and of NSEC/NSEC3
b16e2045ac28229c31f1ea3ebad15cbcb13e1d24Automatic Updater chains. [RT #23673]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3340. [func] Added new 'map' zone file format, which is an image
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater of a zone database that can be loaded directly into
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater memory via mmap(), allowing much faster zone loading.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (Note: Because of pointer sizes and other
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater considerations, this file format is platform-dependent;
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 'map' zone files cannot always be transferred from one
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater server to another.) [RT #25419]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3339. [func] Allow the maximum supported rsa exponent size to be
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater specified: "max-rsa-exponent-size <value>;" [RT #29228]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater3338. [bug] Address race condition in units tests: asyncload_zone
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and asyncload_zt. [RT #26100]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3337. [bug] Change #3294 broke support for the multiple keys
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater in controls. [RT #29694]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3336. [func] Maintain statistics for RRsets tagged as "stale".
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3335. [func] nslookup: return a nonzero exit code when unable
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User to get an answer. [RT #29492]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater3334. [bug] Hold a zone table reference while performing a
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater asynchronous load of a zone. [RT #28326]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3333. [bug] Setting resolver-query-timeout too low can cause
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User named to not recover if it loses connectivity.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3331. [security] dns_rdataslab_fromrdataset could produce bad
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User rdataslabs. [RT #29644]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3330. [func] Fix missing signatures on NOERROR results despite
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User RPZ rewriting. Also
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User - add optional "recursive-only yes|no" to the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User response-policy statement
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User - add optional "max-policy-ttl" to the response-policy
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User statement to limit the false data that
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User "recursive-only no" can introduce into
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User resolvers' caches
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User - add a RPZ performance test to bin/tests/system/rpz
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User when queryperf is available.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater - the encoding of PASSTHRU action to "rpz-passthru".
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater (The old encoding is still accepted.)
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater3329. [bug] Handle RRSIG signer-name case consistently: We
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User generate RRSIG records with the signer-name in
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User lower case. We accept them with any case, but if
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User they fail to validate, we try again in lower case.
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater3328. [bug] Fixed inconsistent data checking in dst_parse.c.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to 'filter-aaaa-on-v4' but applies to IPv6
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater connections. (Use "configure --enable-filter-aaaa"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to enable this option.) [RT #27308]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3326. [func] Added task list statistics: task model, worker
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater threads, quantum, tasks running, tasks ready.
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater3325. [func] Report cache statistics: memory use, number of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater nodes, number of hash buckets, hit and miss counts.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3324. [test] Add better tests for ADB stats [RT #27057]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3323. [func] Report the number of buckets the resolver is using.
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater3322. [func] Monitor the number of active TCP and UDP dispatches.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3321. [func] Monitor the number of recursive fetches and the
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater number of open sockets, and report these values in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the statistics channel. [RT #27054]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3320. [func] Added support for monitoring of recursing client
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater count. [RT #27009]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3319. [func] Added support for monitoring of ADB entry count and
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater hash size. [RT #27057]
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater3318. [tuning] Reduce the amount of work performed while holding a
6a6965084d061016f7ba44637c7c50e096cac36aAutomatic Updater bucket lock when finished with a fetch context.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3316. [tuning] Improved locking performance when recursing.
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater3315. [tuning] Use multiple dispatch objects for sending upstream
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater queries; this can improve performance on busy
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater multiprocessor systems by reducing lock contention.
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater3314. [bug] The masters list could be updated while stub_callback
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User or refresh_callback were using it. [RT #26732]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3313. [protocol] Add TLSA record type. [RT #28989]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
098097efb95046a4a5285b6dae95dea3e3b70853Automatic Updater3311. [bug] Abort the zone dump if zone->db is NULL in
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User zone.c:zone_gotwritehandle. [RT #29028]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3310. [test] Increase table size for mutex profiling. [RT #28809]
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater3309. [bug] resolver.c:fctx_finddone() was not thread safe.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3308. [placeholder]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3305. [func] Add wire format lookup method to sdb. [RT #28563]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3303. [bug] named could die when reloading. [RT #28606]
a382ca49c874d38ad3ac8995b49f9f27128e4ca9Automatic Updater3302. [bug] dns_dnssec_findmatchingkeys could fail to find
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater keys if the zone name contained character that
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater required special mappings. [RT #28600]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3301. [contrib] Update queryperf to build on darwin. Add -R flag
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for non-recursive queries. [RT #28565]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater3300. [bug] Named could die if gssapi was enabled in named.conf
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater but was not compiled in. [RT #28338]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3299. [bug] Make SDB handle errors from database drivers better.
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater3298. [bug] Named could dereference a NULL pointer in
40696c4c389a780082fb77840c173b201ce696d6Automatic Updater zmgr_start_xfrin_ifquota if the zone was being removed.
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater3297. [bug] Named could die on a malformed master file. [RT #28467]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3296. [bug] Named could die with a INSIST failure in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater client.c:exit_check. [RT #28346]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3295. [bug] Adjust isc_time_secondsastimet range check to be more
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User portable. [RT # 26542]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater error. [RT #28265]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3293. [func] nsupdate: list supported type. [RT #28261]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3292. [func] Log messages in the axfr stream at debug 10.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3291. [port] Fixed a build error on systems without ENOTSUP.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3288. [bug] dlz_destroy() function wasn't correctly registered
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater by the DLZ dlopen driver. [RT #28056]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater3286. [bug] Managed key maintenance timer could fail to start
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson after 'rndc reconfig'. [RT #26786]
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson3285. [bug] val-frdataset was incorrectly disassociated in
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater proveunsecure after calling startfinddlvsep.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3284. [bug] Address race conditions with the handling of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3283. [bug] Raw zones with with more than 512 records in a RRset
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater failed to load. [RT #27863]
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater3282. [bug] Restrict the TTL of NS RRset to no more than that
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater of the old NS RRset when replacing it.
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic Updater [RT #27792] [RT #27884]
e5fe07a7ebff18f7ed4ac434b37daff6c8ee5d5bAutomatic Updater3281. [bug] SOA refresh queries could be treated as cancelled
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater despite succeeding over the loopback interface.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3280. [bug] Potential double free of a rdataset on out of memory
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater with DNS64. [RT #27762]
9c446b72069d0ab9f710502f4d7048e50875fccbAutomatic Updater3279. [bug] Hold a internal reference to the zone while performing
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater a asynchronous load. Address potential memory leak
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson if the asynchronous is cancelled. [RT #27750]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3278. [bug] Make sure automatic key maintenance is started
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when "auto-dnssec maintain" is turned on during
f262aa9daa94e94de066f1720a90cc2898af38fbAutomatic Updater "rndc reconfig". [RT #26805]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3276. [bug] win32: ns_os_openfile failed to return NULL on
a9638b6e8997c3c96a23a7df973aa126061ff34fAutomatic Updater safe_open failure. [RT #27696]
bde521789ec55f11ac6966d16bcd187e8fa1d4bfAutomatic Updater3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User option had been misspelled as '-clear'. (To avoid
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater future confusion, both options now work.) [RT #27173]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3274. [placeholder]
a900e4f99ff134b567b6df5ac2c841c7d0c551d3Automatic Updater3273. [bug] AAAA responses could be returned in the additional
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater section even when filter-aaaa-on-v4 was in use.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3272. [func] New "rndc zonestatus" command prints information
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater about the specified zone. [RT #21671]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3271. [port] darwin: mksymtbl is not always stable, loop several
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater times before giving up. mksymtbl was using non
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater portable perl to covert 64 bit hex strings. [RT #27653]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.9.0rc2 released ---
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3270. [bug] "rndc reload" didn't reuse existing zones correctly
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User when inline-signing was in use. [RT #27650]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3269. [port] darwin 11 and later now built threaded by default.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater out the earliest expiry time. [RT #23311]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3267. [bug] Memory allocation failures could be mis-reported as
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater unexpected error. New ISC_R_UNSET result code.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3266. [bug] The maximum number of NSEC3 iterations for a
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews DNSKEY RRset was not being properly computed.
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews inline-signing code. [RT #27557]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews3264. [bug] Automatic regeneration of signatures in an
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews inline-signing zone could stall when the server
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews was restarted. [RT #27344]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews inline-signing zone. [RT #27337]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3261. [func] RRset ordering now defaults to random. [RT #27174]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews3260. [bug] "rrset-order cyclic" could appear not to rotate
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews for some query patterns. [RT #27170/27185]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews --- 9.9.0rc1 released ---
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews message when writing to stdout. [RT #27109]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3258. [test] Add "forcing full sign with unreadable keys" test.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3257. [bug] Do not generate a error message when calling fsync()
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews in a pipe or socket. [RT #27109]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3255. [func] No longer require that a empty zones be explicitly
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews enabled or that a empty zone is disabled for
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews RFC 1918 empty zones to be configured. [RT #27139]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews too long. [RT #26956]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3252. [bug] When master zones using inline-signing were
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews updated while the server was offline, the source
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews zone could fall out of sync with the signed
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews copy. They can now resynchronize. [RT #26676]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater memory dns_sdlz_putrr() can allocate per record to
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User prevent run away memory consumption on ISC_R_NOSPACE.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3250. [func] 'configure --enable-developer'; turn on various
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater configure options, normally off by default, that
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater we want developers to build and test with. [RT #27103]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3249. [bug] Update log message when saving slave zones files for
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater analysis after load failures. [RT #27087]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3248. [bug] Configure options --enable-fixed-rrset and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --enable-exportlib were incompatible with each
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater other. [RT #27087]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3247. [bug] 'raw' format zones failed to preserve load order
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater breaking 'fixed' sort order. [RT #27087]
02973ab41430678c285ef7ae6d1183003469a3bcAutomatic Updater3246. [bug] Named failed to start with a empty also-notify list.
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater3245. [bug] Don't report a error unchanged serials unless there
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater were other changes when thawing a zone with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ixfr-fromdifferences. [RT #26845]
713c3d5b18463f2479973e4d14f73248e60a5df7Mark Andrews3244. [func] Added readline support to nslookup and nsupdate.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Also simplified nsupdate syntax to make "update"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and "prereq" optional. [RT #24659]
45c349c278fd83acd4dcb91eec3482401a623e47Automatic Updater3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater being properly set.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3242. [func] Extended the header of raw-format master files to
992616aaf75643a0c9f84826f0a1ed5a27e84328Mark Andrews include the serial number of the zone from which
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater they were generated, if different (as in the case
2fd97723b2ec7fc1975672780ab0c1c9a8c369d6Automatic Updater of inline-signing zones). This is to be used in
2fd97723b2ec7fc1975672780ab0c1c9a8c369d6Automatic Updater inline-signing zones, to track changes between the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User unsigned and signed versions of the zone, which may
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater have different serial numbers.
9fa6e3bdb4ec36d8734c63c4366375a681aa3a4dAutomatic Updater (Note: raw zonefiles generated by this version of
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater BIND are no longer compatible with prior versions.
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson To generate a backward-compatible raw zonefile
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User using dnssec-signzone or named-compilezone, specify
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User output format "raw=0" instead of simply "raw".)
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3241. [bug] Address race conditions in the resolver code.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3240. [bug] DNSKEY state change events could be missed. [RT #26874]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews timestamp. [RT #26883]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3238. [bug] keyrdata was not being reinitialized in
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews lib/dns/rbtdb.c:iszonesecure. [RT #26913]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3237. [bug] dig -6 didn't work with +trace. [RT #26906]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3236. [bug] Backed out changes #3182 and #3202, related to
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater EDNS(0) fallback behavior. [RT #26416]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews the generated diff and optionally writes it to a
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews journal. [RT #26386]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3232. [bug] Zero zone->curmaster before return in
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3231. [bug] named could fail to send a incompressible zone.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews axfr with a serial of 0. [RT #26796]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3229. [bug] Fix local variable to struct var assignment
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews found by CLANG warning.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3228. [tuning] Dynamically grow symbol table to improve zone
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews loading performance. [RT #26523]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3227. [bug] Interim fix to make WKS's use of getprotobyname()
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater and getservbyname() self thread safe. [RT #26232]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3226. [bug] Address minor resource leakages. [RT #26624]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater messages. [RT #26507]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3223. [bug] 'task_test privilege_drop' generated false positives.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3222. [cleanup] Replace dns_journal_{get,set}_bitws with
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater dns_journal_{get,set}_sourceserial. [RT #26634]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3221. [bug] Fixed a potential core dump on shutdown due to
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater referencing fetch context after it's been freed.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater --- 9.9.0b2 released ---
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater could fail to set the database version correctly,
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater causing an assertion failure. [RT #26180]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3218. [security] Cache lookup could return RRSIG data associated with
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews nonexistent records, leading to an assertion
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater failure. [RT #26590]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3214. [func] Add 'named -U' option to set the number of UDP
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews listener threads per interface. [RT #26485]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews list prior to adding a reference to it leading a
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews possible assertion failure. [RT #23219]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews option prints in single-line-per-record format.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3210. [bug] Canceling the oldest query due to recursive-client
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews overload could trigger an assertion failure. [RT #26463]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3208. [bug] 'dig -y' handle unknown tsig algorithm better.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews nameserver behavior. Enable "dig +adflag" and
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews "dig +edns=0" by default. Enable "+dnssec" when
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews running "dig +trace". [RT #23497]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3204. [bug] When a master server that has been marked as
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews unreachable sends a NOTIFY, mark it reachable
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews again. [RT #25960]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3203. [bug] Increase log level to 'info' for validation failures
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3202. [bug] NOEDNS caching on timeout was too aggressive.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater instead of only being used as a toggle. [RT #18351]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3200. [doc] Some rndc functions were undocumented or were
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater missing from 'rndc -h' output. [RT #25555]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3199. [func] When logging client information, include the name
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews being queried. [RT #25944]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews permissions. [RT #24866]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3197. [bug] Don't try to log the filename and line number when
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews the config parser can't open a file. [RT #22263]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews doesn't exist. [RT #25783]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3195. [cleanup] Silence "file not found" warnings when loading
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews managed-keys zone. [RT #26340]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews documentation. [RT #25203]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3192. [bug] A query structure could be used after being freed.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3191. [bug] Print NULL records using "unknown" format. [RT #26392]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3190. [bug] Underflow in error handling in isc_mutexblock_init.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3189. [test] Added a summary report after system tests. [RT #25517]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3188. [bug] zone.c:zone_refreshkeys() could fail to detach
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater references correctly when errors occurred, causing
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater a hang on shutdown. [RT #26372]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3187. [port] win32: support for Visual Studio 2008. [RT #26356]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews --- 9.9.0b1 released ---
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3186. [bug] Version/db mis-match in rpz code. [RT #26180]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3185. [func] New 'rndc signing' option for auto-dnssec zones:
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - 'rndc signing -list' displays the current
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews state of signing operations
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews - 'rndc signing -clear' clears the signing state
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews records for keys that have fully signed the zone
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews - 'rndc signing -nsec3param' sets the NSEC3
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews parameters for the zone
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews The 'rndc keydone' syntax is removed. [RT #23729]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3184. [bug] named had excessive cpu usage when a redirect zone was
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews configured. [RT #26013]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3182. [bug] Auth servers behind firewalls which block packets
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews greater than 512 bytes may cause other servers to
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews perform poorly. Now, adb retains edns information
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater and caches noedns servers. [RT #23392/24964]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3181. [func] Inline-signing is now supported for master zones.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3180. [func] Local copies of slave zones are now saved in raw
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews format by default, to improve startup performance.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews 'masterfile-format text;' can be used to override
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater the default, if desired. [RT #25867]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3179. [port] kfreebsd: build issues. [RT #26273]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3178. [bug] A race condition introduced by change #3163 could
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews cause an assertion failure on shutdown. [RT #26271]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3177. [func] 'rndc keydone', remove the indicator record that
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews named has finished signing the zone with the
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews corresponding key. [RT #26206]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3176. [doc] Corrected example code and added a README to the
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews sample external DLZ module in contrib/dlz/example.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3175. [bug] Fix how DNSSEC positive wildcard responses from a
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater NSEC3 signed zone are validated. Stop sending a
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews unnecessary NSEC3 record when generating such
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews responses. [RT #26200]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3174. [bug] Always compute to revoked key tag from scratch.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3173. [port] Correctly validate root DS responses. [RT #25726]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3172. [port] darwin 10.* and freebsd [89] are now built threaded by
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3171. [bug] Exclusively lock the task when adding a zone using
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews 'rndc addzone'. [RT #25600]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews --- 9.9.0a3 released ---
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3170. [func] RPZ update:
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - fix precedence among competing rules
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - improve ARM text including documenting rule precedence
9876f11b26bdb27d145fdf9e7d996894398066aeAutomatic Updater - try to rewrite CNAME chains until first hit
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews - new "rpz" logging channel
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - RDATA for CNAME rules can include wildcards
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - replace "NO-OP" named.conf policy override with
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater "PASSTHRU" and add "DISABLED" override ("NO-OP"
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater is still recognized)
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3169. [func] Catch db/version mis-matches when calling dns_db_*().
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3168. [bug] Nxdomain redirection could trigger an assert with
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater a ANY query. [RT #26017]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3167. [bug] Negative answers from forwarders were not being
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews correctly tagged making them appear to not be cached.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3166. [bug] Upgrading a zone to support inline-signing failed.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3165. [bug] dnssec-signzone could generate new signatures when
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews resigning, even when valid signatures were already
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews present. [RT #26025]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3164. [func] Enable DLZ modules to retrieve client information,
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews so that responses can be changed depending on the
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews source address of the query. [RT #25768]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3163. [bug] Use finer-grained locking in client.c to address
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews concurrency problems with large numbers of threads.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3162. [test] start.pl: modified to allow for "named.args" in
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews ns*/ subdirectory to override stock arguments to
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews named. Largely from RT #26044, but no separate ticket.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews assertion failures. [RT #25880]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3160. [bug] When printing out a NSEC3 record in multiline form
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews the newline was not being printed causing type codes
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews to be run together. [RT #25873]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3159. [bug] On some platforms, named could assert on startup
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews when running in a chrooted environment without
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater /proc. [RT #25863]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews3158. [bug] Recursive servers would prefer a particular UDP
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater socket instead of using all available sockets.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater the config file before pausing the server. [RT #21373]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater3156. [placeholder]
990743075cd7b0ee4bc0c8bf013bb1d9662a3167Mark Andrews --- 9.9.0a2 released ---
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater drivers (e.g., mysql, postgresql, etc). [RT #25710]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater3154. [bug] Attempting to print an empty rdataset could trigger
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater an assert. [RT #25452]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3153. [func] Extend request-ixfr to zone level and remove the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User side effect of forcing an AXFR. [RT #25156]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3152. [cleanup] Some versions of gcc and clang failed due to
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User incorrect use of __builtin_expect. [RT #25183]
7a2a1b8b14fc804ac80612d7b98064095e445be5Automatic Updater3151. [bug] Queries for type RRSIG or SIG could be handled
af9dbf1ccdd53933aaae9300d13ce0965d39b067Evan Hunt incorrectly. [RT #21050]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3150. [func] Improved startup and reconfiguration time by
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User enabling zones to load in multiple threads. [RT #25333]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3149. [placeholder]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3148. [bug] Processing of normal queries could be stalled when
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User forwarding a UPDATE message. [RT #24711]
af9dbf1ccdd53933aaae9300d13ce0965d39b067Evan Hunt3147. [func] Initial inline signing support. [RT #23657]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User --- 9.9.0a1 released ---
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
09091b4f0f69cca36f74a291fa3eb496686aeb1eAutomatic Updater3145. [test] Capture output of ATF unit tests in "./atf.out" if
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater there were any errors while running them. [RT #25527]
63d98873e29dee9608c27f40613cb69d130a56e7Mark Andrews3144. [bug] dns_dbiterator_seek() could trigger an assert when
46da3117812814a29432a8d9a9ccf8acdbfdadceAutomatic Updater used with a nonexistent database node. [RT #25358]
ca9a8f6d0b0f2a400a96f868193471510364336fMark Andrews3143. [bug] Silence clang compiler warnings. [RT #25174]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3142. [bug] NAPTR is class agnostic. [RT #25429]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3141. [bug] Silence spurious "zone serial (0) unchanged" messages
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User associated with empty zones. [RT #25079]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3140. [func] New command "rndc flushtree <name>" clears the
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User specified name from the server cache along with
3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
and add setup.sh in order to resolve changing
named.conf issue. [RT #23687]
3077. [bug] zone.c:zone_refreshkeys() incorrectly called
update.c:next_active. [RT #20256]
select the master/slave zones. [RT #23580]
- "dig +split=X" breaks hex/base64 records into
named.pid at startup. [RT #23290]
validator.c. Tests added to dnssec system test.
3038. [bug] Install <dns/rpz.h>. [RT #23342]
3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
3026. [bug] lib/isc/httpd.c: check that we have enough space
to 10. Allow setting this in named.conf using the new
in the named.conf options. [RT #21727]
3000. [bug] More TKEY/GSS fixes:
2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
2987. [func] Improve ease of configuring TKEY/GSS updates by
zone, but the nameserver names and/or their IP
2978. [port] hpux: look for <devpoll.h> [RT #21919]
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
2973. [bug] bind.keys.h was being removed by the "make clean"
(e.g. "%-1c"). [RT #22270]
2962. [port] win32: add more dependencies to BINDBuild.dsw.
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
interfaces at reboot. See bin/tests/system/README
support for addzone/delzone feature (see change
new-zone-file in named.conf; this happens
2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
option at the view or options level in named.conf.
into named.conf in the appropriate view. (Note:
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
was specified in named.conf. [RT #21416]
2903. [bug] managed-keys-directory missing from namedconf.c.
2893. [bug] Improve managed keys support. New named.conf option
2873. [bug] Canceling a dynamic update via the dns/client module
2872. [bug] Modify dns/client.c:dns_client_createx() to only
2871. [bug] Type mismatch in mem_api.c between the definition and
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2865. [bug] memset to zero event.data. [RT #20986]
2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT #17359]
stub/slave master and journal files. [RT #17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT #13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which