CHANGES revision ec3b216506b715f10e0b653afc20068ce8c5aa79
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3814. [func] The "masterfile-style" zone option controls the
44863746316be889b13ee5cf893245baa089a75dTinderbox User formatting of dumped zone files. Options are
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 "relative" (multiline format) and "full" (one
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 record per line). The default is "relative".
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3813. [func] "host" now recognizes the "timeout", "attempts" and
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 "debug" options when set in /etc/resolv.conf.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 (Thanks to Adam Tkac at RedHat.) [RT #21885]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3812. [func] Dig now supports sending arbitary EDNS options from
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 the command line (+ednsopt=code[:value]). [RT #35584]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3811. [func] "serial-update-method date;" sets serial number
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 on dynamic update to today's date in YYYYMMDDNN
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 format. (Thanks to Bradley Forschinger.) [RT #24903]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 --- 9.10.0 released ---
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3810. [bug] Work around broken nameservers that fail to ignore
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 unknown EDNS options. [RT #35766]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3809. [doc] Fix SIT and NSID documentation.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3808. [doc] Clean up "prefetch" documentation. [RT #35751]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3807. [bug] Fix sign extention bug in dns_name_fromtext when
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 lowercase is set. [RT #35743]
1bb2f53b9f74a8ca9812cbe9243ef41190b4da14Evan Hunt3806. [test] Improved system test portability. [RT #35625]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3805. [contrib] Added contrib/perftcpdns, a performance testing tool
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 for DNS over TCP. [RT #35710]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews --- 9.10.0rc1 released ---
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3804. [bug] Corrected a race condition in dispatch.c in which
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews portentry could be reset leading to an assertion
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 failure in socket_search(). (Change #3708
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 addressed the same issue but was incomplete.)
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3803. [bug] "named-checkconf -z" incorrectly rejected zones
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 using alternate data sources for not having a "file"
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 option. [RT #35685]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3802. [bug] Various header files were not being installed.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3800. [bug] A pending event on the route socket could cause an
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews assertion failure when shutting down named. [RT #35674]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3799. [bug] Improve named's command line error reporting.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 time. [RT #35659]
7f1785d0ded8897082abacec5219b27feac755afFrancis Dupont3797. [port] netbsd: geoip support probing was broken. [RT #35642]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3795. [bug] Make named-checkconf detect raw masterfiles for
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 hint zones and reject them. [RT #35268]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3793. [bug] zone.c:save_nsec3param() could assert when out of
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews memory. [RT #35621]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3792. [func] Provide links to the alternate statistics views when
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt displaying in a browser. [RT #35605]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3791. [placeholder]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3790. [bug] Handle broken nameservers that send BADVERS in
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews response to unknown EDNS options. Maintain
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews statistics on BADVERS responses.
2fff8b8280779a25fbdb891b2d3d9b435d2084f0Tatuya JINMEI 神明達哉3789. [bug] Null pointer dereference on rbt creation failure.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3788. [bug] dns_peer_getrequestsit was returning request_nsid by
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 --- 9.10.0b2 released ---
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3787. [bug] The code that checks whether "auto-dnssec" is
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt allowed was ignoring "allow-update" ACLs set at
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 the options or view level. [RT #29536]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3786. [func] Provide more detailed error codes when using
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 native PKCS#11. "pkcs11-tokens" now fails robustly
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 rather than asserting when run against an HSM with
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 an incomplete PKCS#11 API implementation. [RT #35479]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3785. [bug] Debugging code dumphex didn't accept arbitrarily long
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 input (only compiled with -DDEBUG). [RT #35544]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3784. [bug] Using "rrset-order fixed" when it had not been
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 enabled at compile time caused inconsistent
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 results. It now works as documented, defaulting
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt to cyclic mode. [RT #28104]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3783. [func] "tsig-keygen" is now available as an alternate
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt command name for "ddns-confgen". It generates
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 a TSIG key in named.conf format without comments.
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3782. [func] Specifying "auto" as the salt when using
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 "rndc signing -nsec3param" causes named to
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 generate a 64-bit salt at random. [RT #35322]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3781. [tuning] Use adaptive mutex locks when available; this
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 has been found to improve performance under load
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 on many systems. "configure --with-locktype=standard"
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 restores conventional mutex locks. [RT #32576]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3780. [bug] $GENERATE handled negative numbers incorrectly.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3779. [cleanup] Clarify the error message when using an option
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 that was not enabled at compile time. [RT #35504]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3778. [bug] Log a warning when the wrong address family is
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 used in "listen-on" or "listen-on-v6". [RT #17848]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3777. [bug] EDNS EXPIRE code could dump core when processing
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 DLZ queries. [RT #35493]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3776. [func] "rndc -q" suppresses output from successful
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 rndc commands. Errors are printed on stderr.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3775. [bug] dlz_dlopen driver could return the wrong error
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 code on API version mismatch, leading to a segfault.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3774. [func] When using "request-nsid", log the NSID value in
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 printable form as well as hex. [RT #20864]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3773. [func] "host", "nslookup" and "nsupdate" now have
dc842cdcb946b3f89448f07a9f024497a50c216aMark Andrews options to print the version number and exit.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews (Based in part on a contribution from Tim Tessier.)
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews3771. [cleanup] Adjusted log level for "using built-in key"
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews messages. [RT #24383]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3770. [bug] "dig +trace" could fail with an assertion when it
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 needed to fall back to TCP due to a truncated
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 response. [RT #24660]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3769. [doc] Improved documentation of "rndc signing -list".
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 algorithm. [RT #34000]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3767. [func] Log explicitly when using rndc.key to configure
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 command channel. [RT #35316]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3766. [cleanup] Fixed problems with building outside the source
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 tree when using native PKCS#11. [RT #35459]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3765. [bug] Fixed a bug in "rndc secroots" that could crash
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 named when dumping an empty keynode. [RT #35469]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3764. [bug] The dnssec-keygen/settime -S and -i options
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 (to set up a successor key and set the prepublication
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 interval) were missing from dnssec-keyfromlabel.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3763. [bug] delve: Cache DNSSEC records to avoid the need to
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 re-fetch them when restarting validation. [RT #35476]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3762. [bug] Address build problems with --pkcs11-native +
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 --with-openssl with ECDSA support. [RT #35467]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3761. [bug] Address dangling reference bug in dns_keytable_add.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3760. [bug] Improve SIT with native PKCS#11 and on Windows.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3759. [port] Enable delve on Windows. [RT #35441]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3758. [port] Enable export library APIs on Windows. [RT #35382]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3757. [port] Enable Python tools (dnssec-coverage,
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 dnssec-checkds) to run on Windows. [RT #34355]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3756. [bug] GSSAPI Kerberos realm checking was broken in
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb check_config leading to spurious messages being
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 logged. [RT #35443]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 --- 9.10.0b1 released ---
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3755. [func] Add stats counters for known EDNS options + others.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3754. [cleanup] win32: Installer now places files in the
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 Program Files area rather than system services.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3753. [bug] allow-notify was ignoring keys. [RT #35425]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3752. [bug] Address potential REQUIRE failure if
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt DNS_STYLEFLAG_COMMENTDATA is set when printing out
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt3751. [tuning] The default setting for the -U option (setting
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt the number of UDP listeners per interface) has
55e5c51e661e23e24573db84114a3837817745c9Evan Hunt been adjusted to improve performance. [RT #35417]
94315060c2b0d9deafabe72d6a0482405fd9d377Evan Hunt3750. [experimental] Partially implement EDNS EXPIRE option as described
94315060c2b0d9deafabe72d6a0482405fd9d377Evan Hunt in draft-andrews-dnsext-expire-00. Retrieval of
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 the remaining time until expiry for slave zones
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews EXPIRE uses an experimental option code (65002),
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews which is subject to change. [RT #35416]
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews3749. [func] "dig +subnet" sends an EDNS client subnet option
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews containing the specified address/prefix when
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 querying. (Thanks to Wilmer van der Gaast.)
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3748. [test] Use delve to test dns_client interfaces. [RT #35383]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3747. [bug] A race condition could lead to a core dump when
39a8abdb83d00eb57e2395dbd3931c129391a951Automatic Updater destroying a resolver fetch object. [RT #35385]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3746. [func] New "max-zone-ttl" option enforces maximum
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 TTLs for zones. If loading a zone containing a
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 higher TTL, the load fails. DDNS updates with
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 higher TTLs are accepted but the TTL is truncated.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 (Note: Currently supported for master zones only;
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 inline-signing slaves will be added.) [RT #38405]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3745. [func] "configure --with-tuning=large" adjusts various
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 compiled-in constants and default settings to
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 values suited to large servers with abundant
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 memory. [RT #29538]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3744. [experimental] SIT: send and process Source Identity Tokens
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 (similar to DNS Cookies by Donald Eastlake 3rd),
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 which are designed to help clients detect off-path
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 spoofed responses and for servers to identify
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 legitimate clients.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 SIT uses an experimental EDNS option code (65001),
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 which will be changed to an IANA-assigned value
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt if the experiment is deemed a success.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 SIT can be enabled via "configure --enable-sit" (or
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 --enable-developer). It is enabled by default in
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 Servers can be configured to send smaller responses
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 to clients that have not identified themselves via
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 SIT. RRL processing has also been updated;
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 legitimate clients are not subject to rate
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 limiting. [RT #35389]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3743. [bug] delegation-only flag wasn't working in forward zone
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 declarations despite being documented. This is
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 needed to support turning off forwarding and turning
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 on delegation only at the same name. [RT #35392]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3742. [port] linux: libcap support: declare curval at start of
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 block. [RT #35387]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3741. [func] "delve" (domain entity lookup and validation engine):
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 A new tool with dig-like semantics for performing DNS
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 lookups, with internal DNSSEC validation, using the
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 same resolver and validator logic as named. This
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 allows easy validation of DNSSEC data in environments
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 with untrustworthy resolvers, and assists with
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 troubleshooting of DNSSEC problems. [RT #32406]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3740. [contrib] Minor fixes to configure --with-dlz-bdb,
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3739. [func] Added per-zone stats counters to track TCP and
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 UDP queries. [RT #35375]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3737. [bug] 'rndc retransfer' could trigger a assertion failure
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt with inline zones. [RT #35353]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3736. [bug] nsupdate: When specifying a server by name,
39a8abdb83d00eb57e2395dbd3931c129391a951Automatic Updater fall back to alternate addresses if the first
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt address for that name is not reachable. [RT #25784]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3735. [cleanup] Merged the libiscpk11 library into libisc
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt to simplify dependencies. [RT #35205]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3734. [bug] Improve building with libtool. [RT #35314]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3733. [func] Improve interface scanning support. Interface
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt information will be automatically updated if the
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt OS supports routing sockets (MacOS, *BSD, Linux).
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt Use "automatic-interface-scan no;" to disable.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt Add "rndc scan" to trigger a scan. [RT #23027]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt driver to dump core on 64-bit systems. [RT #35324]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3731. [func] Added a "no-case-compress" ACL, which causes
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt named to use case-insensitive compression
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt (disabling change #3645) for specified
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt clients. (This is useful when dealing
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt with broken client implementations that
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 use case-sensitive name comparisons,
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews rejecting responses that fail to match the
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews capitalization of the query that was sent.)
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews3730. [cleanup] Added "never" as a synonym for "none" when
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 configuring key event dates in the dnssec tools.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3729. [bug] dnssec-keygen could set the publication date
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 incorrectly when only the activation date was
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 specified on the command line. [RT #35278]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3728. [doc] Expanded native-PKCS#11 documentation,
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 specifically pkcs11: URI labels. [RT #35287]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3727. [func] The isc_bitstring API is no longer used and
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 has been removed from libisc. [RT #35284]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3726. [cleanup] Clarified the error message when attempting
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 to configure more than 32 response-policy zones.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3725. [contrib] Updated zkt and nslint to newest versions,
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 cleaned up and rearranged the contrib
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 directory, and added a README.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 --- 9.10.0a2 released ---
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3724. [bug] win32: Fixed a bug that prevented dig and
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 host from exiting properly after completing
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 a UDP query. [RT #35288]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3723. [cleanup] Imported keys are now handled the same way
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews regardless of DNSSEC algorithm. [RT #35215]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3722. [bug] Using geoip ACLs in a blackhole statement
859cfb24bfd7bd7754bb1d9ca68bce861a4b0a40Mark Andrews could cause a segfault. [RT #35272]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3721. [doc] Improved documentation of the EDNS processing
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 enhancements introduced in change #3593. [RT #35275]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3720. [bug] Address compiler warnings. [RT #35261]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3719. [bug] Address memory leak in in peer.c. [RT #35255]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 probing to see if it is possible to set dscp values
39a8abdb83d00eb57e2395dbd3931c129391a951Automatic Updater on a per packet basis. [RT #35252]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3716. [bug] The dns_request code was setting dcsp values when not
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 requested. [RT #35252]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3715. [bug] The region and city databases could fail to
39a8abdb83d00eb57e2395dbd3931c129391a951Automatic Updater initialize when using some versions of libGeoIP,
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 causing assertion failures when named was
39a8abdb83d00eb57e2395dbd3931c129391a951Automatic Updater configured to use them. [RT #35427]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3714. [test] System tests that need to test for cryptography
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 support before running can now use a common
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 "testcrypto.sh" script to do so. [RT #35213]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3713. [bug] Save memory by not storing "also-notify" addresses
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 in zone objects that are configured not to send
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 notify requests. [RT #35195]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3712. [placeholder]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3711. [placeholder]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3710. [bug] Address double dns_zone_detach when switching to
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 using automatic empty zones from regular zones.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3709. [port] Use built-in versions of strptime() and timegm()
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 on all platforms to avoid portability issues.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3708. [bug] Address a portentry locking issue in dispatch.c.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 on a missing resolv.conf file and initializes the
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 structure as if it had been configured with:
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 nameserver ::1
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 nameserver 127.0.0.1
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 Note: Callers will need to be updated to treat
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 ISC_R_FILENOTFOUND as a qualified success or else
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 they will leak memory. The following code fragment
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 will work with both old and new versions without
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 changing the behaviour of the existing code.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 resconf = NULL;
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 result = irs_resconf_load(mctx, "/etc/resolv.conf",
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 if (result != ISC_SUCCESS) {
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 if (resconf != NULL)
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 irs_resconf_destroy(&resconf);
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3706. [contrib] queryperf: Fixed a possible integer overflow when
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 printing results. [RT #35182]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3705. [func] "configure --enable-native-pkcs11" enables BIND
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 to use the PKCS#11 API for all cryptographic
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 functions, so that it can drive a hardware service
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 module directly without the need to use a modified
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 OpenSSL as intermediary (so long as the HSM's vendor
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 provides a complete-enough implementation of the
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 PKCS#11 interface). This has been tested successfully
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 with the Thales nShield HSM and with SoftHSMv2 from
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 the OpenDNSSEC project. [RT #29031]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3703. [func] To improve recursive resolver performance, cache
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 records which are still being requested by clients
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 can now be automatically refreshed from the
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 authoritative server before they expire, reducing
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 or eliminating the time window in which no answer
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 is available in the cache. See the "prefetch" option
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 for more details. [RT #35041]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3702. [func] 'dnssec-coverage -l' option specifies a length
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 of time to check for coverage; events further into
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 the future are ignored. 'dnssec-coverage -z'
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 checks only ZSK events, and 'dnssec-coverage -k'
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 checks only KSK events. (Thanks to Peter Palfrader.)
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3701. [func] named-checkconf can now obscure shared secrets
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt when printing by specifying '-x'. [RT #34465]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3700. [func] Allow access to subgroups of XML statistics via
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt special URLs http://<server>:<port>/xml/v3/server,
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt /zones, /net, /tasks, /mem, and /status. [RT #35115]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3699. [bug] Improvements to statistics channel XSL stylesheet:
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 the stylesheet can now be cached by the browser;
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt section headers are omitted from the stats display
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt when there is no data in those sections to be
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt displayed; counters are now right-justified for
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt easier readability. [RT #35117]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3698. [cleanup] Replaced all uses of memcpy() with memmove().
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3697. [bug] Handle "." as a search list element when IDN support
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt is enabled. [RT #35133]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3696. [bug] dig failed to handle AXFR style IXFR responses which
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb span multiple messages. [RT #35137]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3695. [bug] Address a possible race in dispatch.c. [RT #35107]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3694. [bug] Warn when a key-directory is configured for a zone,
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt but does not exist or is not a directory. [RT #35108]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3693. [security] memcpy was incorrectly called with overlapping
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt ranges resulting in malformed names being generated
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt on some platforms. This could cause INSIST failures
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt when serving NSEC3 signed zones (CVE-2014-0591).
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt was no data at the node. [RT #35080]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3691. [contrib] Address null pointer dereference in LDAP and
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 MySQL DLZ modules.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3690. [bug] Iterative responses could be missed when the source
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt port for an upstream query was the same as the
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt listener port (53). [RT #34925]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3689. [bug] Fixed a bug causing an insecure delegation from one
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 static-stub zone to another to fail with a broken
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 trust chain. [RT #35081]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3688. [bug] loadnode could return a freed node on out of memory.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3687. [bug] Address null pointer dereference in zone_xfrdone.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3686. [func] "dnssec-signzone -Q" drops signatures from keys
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt that are still published but no longer active.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3685. [bug] "rndc refresh" didn't work correctly with slave
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 zones using inline-signing. [RT #35105]
26833735d3d95e731a1cfb2a9b12c9bc10ba208aEvan Hunt3684. [bug] The list of included files would grow on reload.
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3683. [cleanup] Add a more detailed "not found" message to rndc
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 commands which specify a zone name. [RT #35059]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3682. [bug] Correct the behavior of rndc retransfer to allow
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews inline-signing slave zones to retain NSEC3 parameters
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 instead of reverting to NSEC. [RT #34745]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3681. [port] Update the Windows build system to support feature
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 selection and WIN64 builds. This is a work in
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 progress. [RT #34160]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3680. [bug] Ensure buffer space is available in "rndc zonestatus".
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3679. [bug] dig could fail to clean up TCP sockets still
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 waiting on connect(). [RT #35074]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3678. [port] Update config.guess and config.sub. [RT #35060]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews times. [RT #35073]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3676. [bug] "named-checkconf -z" now checks zones of type
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews hint and redirect as well as master. [RT #35046]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3675. [misc] Provide a place for third parties to add version
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt information for their extensions in the version
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt file by setting the EXTENSIONS variable.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt --- 9.10.0a1 released ---
e5d447be8c18eca7b858665323b07907019c0b96Mark Andrews3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3673. [func] New "in-view" zone option allows direct sharing
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 of zones between views. [RT #32968]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3672. [func] Local address can now be specified when using
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews dns_client API. [RT #34811]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3671. [bug] Don't allow dnssec-importkey overwrite a existing
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews non-imported private key.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3670. [bug] Address read after free in server side of
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt lwres_getrrsetbyname. [RT #29075]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3667. [test] dig: add support to keep the TCP socket open between
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt successive queries (+[no]keepopen). [RT #34918]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3666. [func] Add a tool, named-rrchecker, for checking the syntax
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 of individual resource records. This tool is intended
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 to be called by provisioning systems so that the front
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 end does not need to be upgraded to support new DNS
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 record types. [RT #34778]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3665. [bug] Failure to release lock on error in receive_secure_db.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 locking and other bugs. [RT #34855]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3663. [bug] Address bugs in dns_rdata_fromstruct and
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3661. [bug] Address lock order reversal deadlock with inline zones.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb [RT #34856]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3659. [port] solaris: don't add explict dependencies/rules for
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews python programs as make won't use the implicit rules.
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3658. [port] linux: Address platform specific compilation issue
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews when libcap-devel is installed. [RT #34838]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3657. [port] Some readline clones don't accept NULL pointers when
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb calling add_history. [RT #34842]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3656. [security] Treat an all zero netmask as invalid when generating
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews the localnets acl. (The prior behavior could
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews allow unexpected matches when using some versions
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews of Winsock: CVE-2013-6320.) [RT #34687]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3655. [cleanup] Simplify TCP message processing when requesting a
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb zone transfer. [RT #34825]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3654. [bug] Address race condition with manual notify requests.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb [RT #34806]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3653. [func] Create delegations for all "children" of empty zones
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 except "forward first". [RT #34826]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3651. [tuning] Adjust when a master server is deemed unreachable.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb [RT #27075]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3650. [tuning] Use separate rate limiting queues for refresh and
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb notify requests. [RT #30589]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3649. [cleanup] Include a comment in .nzf files, giving the name of
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb the associated view. [RT #34765]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3648. [test] Updated the ATF test framework to version 0.17.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb [RT #25627]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3647. [bug] Address a race condition when shutting down a zone.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3646. [bug] Journal filename string could be set incorrectly,
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt causing garbage in log messages. [RT #34738]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3645. [protocol] Use case sensitive compression when responding to
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt queries. [RT #34737]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3644. [protocol] Check that EDNS subnet client options are well formed.
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3643. [doc] Clarify RRL "slip" documentation.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3642. [func] Allow externally generated DNSKEY to be imported
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb into the DNSKEY management framework. A new tool
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews dnssec-importkey is used to do this. [RT #34698]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3641. [bug] Handle changes to sig-validity-interval settings
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews better. [RT #34625]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3640. [bug] ndots was not being checked when searching. Only
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews continue searching on NXDOMAIN responses. Add the
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews ability to specify ndots to nslookup. [RT #34711]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews in a key zone. [RT #34238]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews encountered. [RT #34668]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3637. [bug] 'allow-query-on' was checking the source address
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt rather than the destination address. [RT #34590]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3636. [bug] Automatic empty zones now behave better with
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews forward only "zones" beneath them. [RT #34583]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3635. [bug] Signatures were not being removed from a zone with
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews only KSK keys for a algorithm. [RT #34439]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3634. [func] Report build-id in rndc status. Report build-id
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews when building from a git repository. [RT #20422]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3633. [cleanup] Refactor OPT processing in named to make it easier
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews to support new EDNS options. [RT #34414]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3632. [bug] Signature from newly inactive keys were not being
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt removed. [RT #32178]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3631. [bug] Remove spurious warning about missing signatures when
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews qtype is SIG. [RT #34600]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3629. [func] Allow the printing of cryptographic fields in DNSSEC
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb records by dig to be suppressed (dig +nocrypto).
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3628. [func] Report DNSKEY key id's when dumping the cache.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3626. [func] dig: NSID output now easier to read. [RT #21160]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3625. [bug] Don't send notify messages to machines outside of the
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3624. [bug] Look for 'json_object_new_int64' when looking for a
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt the json library. [RT #34449]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3623. [placeholder]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3622. [tuning] Eliminate an unnecessary lock when incrementing
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews cache statistics. [RT #34339]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3621. [security] Incorrect bounds checking on private type 'keydata'
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb can lead to a remotely triggerable REQUIRE failure
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews (CVE-2013-4854). [RT #34238]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3620. [func] Added "rpz-client-ip" policy triggers, enabling
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews RPZ responses to be configured on the basis of
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews the client IP address; this can be used, for
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews example, to blacklist misbehaving recursive
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews or stub resolvers. [RT #33605]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3618. [func] "rndc reload" now checks modification times of
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews include files as well as master files to determine
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews whether to skip reloading a zone. [RT #33936]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3617. [bug] Named was failing to answer queries during
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews "rndc reload" [RT #34098]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3616. [bug] Change #3613 was incomplete. [RT #34177]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3615. [cleanup] "configure" now finishes by printing a summary
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews of optional BIND features and whether they are
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews active or inactive. ("configure --enable-full-report"
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews increases the verbosity of the summary.) [RT #31777]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3614. [port] Check for <linux/types.h>. [RT #34162]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3613. [bug] named could crash when deleting inline-signing
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews zones with "rndc delzone". [RT #34066]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3611. [bug] Improved resistance to a theoretical authentication
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews attack based on differential timing. [RT #33939]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3610. [cleanup] win32: Some executables had been omitted from the
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews installer. [RT #34116]
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews3609. [bug] Corrected a possible deadlock in applications using
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews the export version of the isc_app API. [RT #33967]
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews3608. [port] win32: added todos.pl script to ensure all text files
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews the win32 build depends on are converted to DOS
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt newline format. [RT #22067]
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews message. [RT #34045]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3606. [func] "rndc flushtree" now flushes matching
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews records in the address database and bad cache
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews as well as the DNS cache. (Previously only the
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews DNS cache was flushed.) [RT #33970]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3605. [port] win32: Addressed several compatibility issues
80fa3ef8517ff046a72c4cb1e785f30c9ef9ee75Mark Andrews with newer versions of Visual Studio. [RT #33916]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3604. [bug] Fixed a compile-time error when building with
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews JSON but not XML. [RT #33959]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3603. [bug] Install <isc/stat.h>. [RT #33956]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews integrate with named and serve DNS data.
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews (Contributed by John Eaglesham of Yahoo.)
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3601. [bug] Added to PKCS#11 openssl patches a value len
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt attribute in DH derive key. [RT #33928]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3600. [cleanup] dig: Fixed a typo in the warning output when receiving
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt an oversized response. [RT #33910]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3599. [tuning] Check for pointer equivalence in name comparisons.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3598. [cleanup] Improved portability of map file code. [RT #33820]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3597. [bug] Ensure automatic-resigning heaps are reconstructed
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews when loading zones in map format. [RT #33381]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3596. [port] Updated win32 build documentation, added
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews dnssec-verify. [RT #22067]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3595. [port] win32: Fix build problems introduced by change #3550.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb [RT #33807]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3594. [maint] Update config.guess and config.sub. [RT #33816]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3593. [func] Update EDNS processing to better track remote server
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews capabilities. [RT #30655]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3592. [doc] Moved documentation of rndc command options to the
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews rndc man page. [RT #33506]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3591. [func] Use CRC-64 to detect map file corruption at load
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews time. [RT #33746]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3590. [bug] When using RRL on recursive servers, defer
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews rate-limiting until after recursion is complete;
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews also, use correct rcode for slipped NXDOMAIN
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews responses. [RT #33604]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3589. [func] Report serial numbers in when starting zone transfers.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt Report accepted NOTIFY requests including serial.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3588. [bug] dig: addressed a memory leak in the sigchase code
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews that could cause a shutdown crash. [RT #33733]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3587. [func] 'named -g' now checks the logging configuration but
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt does not use it. [RT #33473]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3585. [func] "rndc delzone -clean" option removes zone files
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews when deleting a zone. [RT #33570]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3584. [security] Caching data from an incompletely signed zone could
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb trigger an assertion failure in resolver.c
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb (CVE-2013-3919). [RT #33690]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3583. [bug] Address memory leak in GSS-API processing [RT #33574]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3582. [bug] Silence false positive warning regarding missing file
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt directive for inline slave zones. [RT #33662]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3580. [bug] Addressed a possible race in acache.c [RT #33602]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3579. [maint] Updates to PKCS#11 openssl patches, supporting
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3577. [bug] Handle zero TTL values better. [RT #33411]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3576. [bug] Address a shutdown race when validating. [RT #33573]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3575. [func] Changed the logging category for RRL events from
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb 'queries' to 'query-errors'. [RT #33540]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3574. [doc] The 'hostname' keyword was missing from server-id
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews description in the named.conf man page. [RT #33476]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 zone names containing punctuation marks and other
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt nonstandard characters. [RT #33419]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3572. [func] Threads are now enabled by default on most
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt operating systems. [RT #25483]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3571. [bug] Address race condition in dns_client_startresolve().
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3570. [bug] Check internal pointers are valid when loading map
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt files. [RT #33403]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews module, and added multithread support. [RT #33394]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3568. [cleanup] Add a product description line to the version file,
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb to be reported by named -v/-V. [RT #33366]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3567. [bug] Silence clang static analyzer warnings. [RT #33365]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3566. [func] Log when forwarding updates to master. [RT #33240]
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt3565. [placeholder]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3564. [bug] Improved handling of corrupted map files. [RT #33380]
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt3562. [func] Update map file header format to include a SHA-1 hash
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt of the database content, so that corrupted map files
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews can be rejected at load time. [RT #32459]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb or NOTIMP. Adjust usage message. [RT #33363]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3560. [bug] isc-config.sh did not honor includedir and libdir
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb when set via configure. [RT #33345]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3559. [func] Check that both forms of Sender Policy Framework
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt records exist or do not exist. [RT #33355]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3557. [bug] Reloading redirect zones was broken. [RT #33292]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3555. [bug] Address theoretical race conditions in acache.c
3ff75c89eb7b8c4f8c7dd375beec2981d147c791Evan Hunt (change #3553 was incomplete). [RT #33252]
3ff75c89eb7b8c4f8c7dd375beec2981d147c791Evan Hunt3554. [bug] RRL failed to correctly rate-limit upward
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews referrals and failed to count dropped error
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb responses in the statistics. [RT #33225]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3553. [bug] Address suspected double free in acache. [RT #33252]
40a7e85f3ee3bd66a8f87bf8af674e1e48b05396Evan Hunt3552. [bug] Wrong getopt option string for 'nsupdate -r'.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3550. [func] Unified the internal and export versions of the
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt BIND libraries, allowing external clients to use
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt the same libraries as BIND. [RT #33131]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3549. [doc] Documentation for "request-nsid" was missing.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3548. [bug] The NSID request code in resolver.c was broken
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb resulting in invalid EDNS options being sent.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb [RT #33153]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3547. [bug] Some malformed unknown rdata records were not properly
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb detected and rejected. [RT #33129]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3546. [func] Add EUI48 and EUI64 types. [RT #33082]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3545. [bug] RRL slip behavior was incorrect when set to 1.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb [RT #33111]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3544. [contrib] check5011.pl: Script to report the status of
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb managed keys as recorded in managed-keys.bind.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb Contributed by Tony Finch <dot@dotat.at>
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3543. [bug] Update socket structure before attaching to socket
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews manager after accept. [RT #33084]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3542. [placeholder]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3541. [bug] Parts of libdns were not properly initialized when
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb built in libexport mode. [RT #33028]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3540. [test] libt_api: t_info and t_assert were not thread safe.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3539. [port] win32: timestamp format didn't match other platforms.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3538. [test] Running "make test" now requires loopback interfaces
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt to be set up. [RT #32452]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3537. [tuning] Slave zones, when updated, now send NOTIFY messages
4f9f8fa0528ce843a3bdf7993e94463508d8320eEvan Hunt to peers before being dumped to disk rather than
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 after. [RT #27242]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3536. [func] Add support for setting Differentiated Services Code
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews Point (DSCP) values in named. Most configuration
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 options which take a "port" option (e.g.,
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 listen-on, forwarders, also-notify, masters,
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews notify-source, etc) can now also take a "dscp"
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt option specifying a code point for use with
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 outgoing traffic, if supported by the underlying
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 OS. [RT #27596]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3535. [bug] Minor win32 cleanups. [RT #32962]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3534. [bug] Extra text after an embedded NULL was ignored when
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 parsing zone files. [RT #32699]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3531. [bug] win32: A uninitialized value could be returned on out
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews of memory. [RT #32960]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3529. [func] Named now listens on both IPv4 and IPv6 interfaces
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 by default. Named previously only listened on IPv4
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 interfaces by default unless named was running in
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt IPv6 only mode. [RT #32945]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3528. [func] New "dnssec-coverage" command scans the timing
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt metadata for a set of DNSSEC keys and reports if a
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews lapse in signing coverage has been scheduled
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews inadvertently. (Note: This tool depends on python;
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt it will not be built or installed on systems that
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt do not have a python interpreter.) [RT #28098]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3527. [compat] Add a URI to allow applications to explicitly
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt request a particular XML schema from the statistics
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt channel, returning 404 if not supported. [RT #32481]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3526. [cleanup] Set up dependencies for unit tests correctly during
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt build. [RT #32803]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3525. [func] Support for additional signing algorithms in rndc:
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt The -A option to rndc-confgen can be used to
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt select the algorithm for the generated key.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt (The default is still hmac-md5; this may
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt change in a future release.) [RT #20363]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3524. [func] Added an alternate statistics channel in JSON format,
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt when the server is built with the json-c library:
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt http://[address]:[port]/json. [RT #32630]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3523. [contrib] Ported filesystem and ldap DLZ drivers to
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt dynamically-loadable modules, and added the
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt "wildcard" module based on a contribution from
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3522. [bug] DLZ lookups could fail to return SERVFAIL when
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt they ought to. [RT #32685]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3520. [bug] 'mctx' was not being referenced counted in some places
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt where it should have been. [RT #32794]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3519. [func] Full replay protection via four-way handshake is
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt now mandatory for rndc clients. Very old versions
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt of rndc will no longer work. [RT #32798]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt so that all dns_rrl_rtype_t enum values fit regardless
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt of whether it is teated as signed or unsigned by
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt the compiler. [RT #32792]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3516. [placeholder]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3515. [port] '%T' is not portable in strftime(). [RT #32763]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3514. [bug] The ranges for valid key sizes in ddns-confgen and
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt rndc-confgen were too constrained. Keys up to 512
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt bits are now allowed for most algorithms, and up
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt to 1024 bits for hmac-sha384 and hmac-sha512.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3513. [func] "dig -u" prints times in microseconds rather than
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt milliseconds. [RT #32704]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3512. [func] "rndc validation check" reports the current status
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt of DNSSEC validation. [RT #21397]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3511. [doc] Improve documentation of redirect zones. [RT #32756]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3510. [func] "rndc status" and XML statistics channel now report
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt server start and reconfiguration times. [RT #21048]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3509. [cleanup] Added a product line to version file to allow for
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt easy naming of different products (BIND
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt vs BIND ESV, for example). [RT #32755]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3508. [contrib] queryperf was incorrectly rejecting the -T option.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3507. [bug] Statistics channel XSL had a glitch when attempting
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt to chart query data before any queries had been
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt received. [RT #32620]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3506. [func] When setting "max-cache-size" and "max-acache-size",
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt the keyword "unlimited" is no longer defined as equal
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt to 4 gigabytes (except on 32-bit platforms); it
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt means literally unlimited. [RT #32358]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3505. [bug] When setting "max-cache-size" and "max-acache-size",
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt larger values than 4 gigabytes could not be set
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt explicitly, though larger sizes were available
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt when setting cache size to 0. This has been
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt corrected; the full range is now available.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3504. [func] Add support for ACLs based on geographic location,
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt using MaxMind GeoIP databases. Based on code
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt contributed by Ken Brownfield <kb@slide.com>.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3503. [doc] Clarify size_spec syntax. [RT #32449]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3502. [func] zone-statistics: "no" is now a synonym for "none",
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt instead of "terse". [RT #29165]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3501. [func] zone-statistics now takes three options: full,
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt terse, and none. "yes" and "no" are retained as
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt synonyms for full and terse, respectively. [RT #29165]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3500. [security] Support NAPTR regular expression validation on
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 all platforms without using libregex, which
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt can be vulnerable to memory exhaustion attack
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt (CVE-2013-2266). [RT #32688]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3499. [doc] Corrected ARM documentation of built-in zones.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb [RT #32694]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3498. [bug] zone statistics for zones which matched a potential
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt empty zone could have their zone-statistics setting
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3497. [func] When deleting a slave/stub zone using 'rndc delzone'
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt report the files that were being used so they can
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt be cleaned up if desired. [RT #27899]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3496. [placeholder]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3495. [func] Support multiple response-policy zones (up to 32),
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt while improving RPZ performance. "response-policy"
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt syntax now includes a "min-ns-dots" clause, with
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt default 1, to exclude top-level domains from
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt NSIP and NSDNAME checking. --enable-rpz-nsip and
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt --enable-rpz-nsdname are now the default. [RT #32251]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3494. [func] DNS RRL: Blunt the impact of DNS reflection and
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb amplification attacks by rate-limiting substantially-
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb identical responses. [RT #28130]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews contributed by Mark Goldfinch. [RT #32549]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3492. [bug] Fixed a regression in zone loading performance
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews due to lock contention. [RT #30399]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3491. [bug] Slave zones using inline-signing must specify a
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews file name. [RT #31946]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3490. [bug] When logging RDATA during update, truncate if it's
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb too long. [RT #32365]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb dns_dlzcreate() failed to properly initialize
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews dlzdb.link. When cloning a rdataset do not copy
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt the link contents. [RT #32651]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3488. [bug] Use after free error with DH generated keys. [RT #32649]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3487. [bug] Change 3444 was not complete. There was a additional
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews place where the NOQNAME proof needed to be saved.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3486. [bug] named could crash when using TKEY-negotiated keys
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb that had been deleted and then recreated. [RT #32506]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉3484. [bug] Some statistics were incorrectly rendered in XML.
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉3483. [placeholder]
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉3482. [func] dig +nssearch now prints name servers that don't
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews have address records (missing AAAA or A, or the name
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt doesn't exist). [RT #29348]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3481. [cleanup] Removed use of const const in atf.
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉3480. [bug] Silence logging noise when setting up zone
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews statistics. [RT #32525]
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt3479. [bug] Address potential memory leaks in gssapi support
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt code. [RT #32405]
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt3478. [port] Fix a build failure in strict C99 environments
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3477. [func] Expand logging when adding records via DDNS update
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3476. [bug] "rndc zonestatus" could report a spurious "not
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt found" error on inline-signing zones. [RT #29226]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3475. [cleanup] Changed name of 'map' zone file format (previously
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt 'fast'). [RT #32458]
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt3474. [bug] nsupdate could assert when the local and remote
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt address families didn't match. [RT #22897]
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt3473. [bug] dnssec-signzone/verify could incorrectly report
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt an error condition due to an empty node above an
b748b5e2c2fa40f758e3b35ad4f1fde99ab5e11fEvan Hunt opt-out delegation lacking an NSEC3. [RT #32072]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3472. [bug] The active-connections counter in the socket
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews statistics could underflow. [RT #31747]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3471. [bug] The number of UDP dispatches now defaults to
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 the number of CPUs even if -n has been set to
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt a higher value. [RT #30964]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3470. [bug] Slave zones could fail to dump when successfully
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt refreshing after an initial failure. [RT #31276]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3469. [bug] Handle DLZ lookup failures more gracefully. Improve
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt backward compatibility between versions of DLZ dlopen
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt API. [RT #32275]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3468. [security] RPZ rules to generate A records (but not AAAA records)
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt could trigger an assertion failure when used in
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt conjunction with DNS64 (CVE-2012-5689). [RT #32141]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3467. [bug] Added checks in dnssec-keygen and dnssec-settime
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 to check for delete date < inactive date. [RT #31719]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt in DLZ example driver. [RT #32275]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3465. [bug] Handle isolated reserved ports. [RT #31778]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3464. [maint] Updates to PKCS#11 openssl patches, supporting
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3462. [doc] Clarify server selection behavior of dig when using
7ee225cf90fd06de61682b442600af88b68b99dbMark Andrews -4 or -6 options. [RT #32181]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3461. [bug] Negative responses could incorrectly have AD=1
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews set. [RT #32237]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3460. [bug] Only link against readline where needed. [RT #29810]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3459. [func] Added -J option to named-checkzone/named-compilezone
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews to specify the path to the journal file. [RT #30958]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3458. [bug] Return FORMERR when presented with a overly long
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews domain named in a request. [RT #29682]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3456. [port] g++47: ATF failed to compile. [RT #32012]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3455. [contrib] queryperf: fix getopt option list. [RT #32338]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3454. [port] sparc64: improve atomic support. [RT #25182]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 failed. [RT #31960]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3452. [bug] Accept duplicate singleton records. [RT #32329]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3451. [port] Increase per thread stack size from 64K to 1M.
7ee225cf90fd06de61682b442600af88b68b99dbMark Andrews3450. [bug] Stop logfileconfig system test spam system logs.
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3449. [bug] gen.c: use the pre-processor to construct format
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 strings so that compiler can perform sanity checks;
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 check the snprintf results. [RT #17576]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3448. [bug] The allow-query-on ACL was not processed correctly.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3447. [port] Add support for libxml2-2.9.x [RT #32231]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3446. [port] win32: Add source ID (see change #3400) to build.
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3445. [bug] Warn about zone files with blank owner names
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews immediately after $ORIGIN directives. [RT #31848]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3444. [bug] The NOQNAME proof was not being returned from cached
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews insecure responses. [RT #21409]
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb rejected when generating keys. [RT #31927]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3442. [port] Net::DNS 0.69 introduced a non backwards compatible
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews change. [RT #32216]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3440. [bug] Reorder get_key_struct to not trigger a assertion when
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt cleaning up due to out of memory error. [RT #32131]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3439. [placeholder]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt buffers with constant data. [RT #32064]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3436. [bug] Check malloc/calloc return values. [RT #32088]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3435. [bug] Cross compilation support in configure was broken.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3434. [bug] Pass client info to the DLZ findzone() entry
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt point in addition to lookup(). This makes it
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt possible for a database to answer differently
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt whether it's authoritative for a name depending
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt on the address of the client. [RT #31775]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3433. [bug] dlz_findzone() did not correctly handle
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt ISC_R_NOMORE. [RT #31172]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3432. [func] Multiple DLZ databases can now be configured.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt DLZ databases are searched in the order configured,
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt unless set to "search no", in which case a
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt zone can be configured to be retrieved from a
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt particular DLZ database by using a "dlz <name>"
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt option in the zone statement. DLZ databases can
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt support type "master" and "redirect" zones.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3431. [bug] ddns-confgen: Some valid key algorithms were
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt not accepted. [RT #31927]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3430. [bug] win32: isc_time_formatISO8601 was missing the
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt 'T' between the date and time. [RT #32044]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3429. [bug] dns_zone_getserial2 could a return success without
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt returning a valid serial. [RT #32007]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3428. [cleanup] dig: Add timezone to date output. [RT #2269]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3427. [bug] dig +trace incorrectly displayed name server
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt addresses instead of names. [RT #31641]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3426. [bug] dnssec-checkds: Clearer output when records are not
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt found. [RT #31968]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3425. [bug] "acacheentry" reference counting was broken resulting
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt in use after free. [RT #31908]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3424. [func] dnssec-dsfromkey now emits the hash without spaces.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3423. [bug] "rndc signing -nsec3param" didn't accept the full
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt range of possible values. Address portability issues.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3422. [bug] Added a clear error message for when the SOA does not
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt match the referral. [RT #31281]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3421. [bug] Named loops when re-signing if all keys are offline.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3420. [bug] Address VPATH compilation issues. [RT #31879]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3419. [bug] Memory leak on validation cancel. [RT #31869]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3418. [func] New XML schema (version 3.0) for the statistics channel
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt adds query type statistics at the zone level, and
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt flattens the XML tree and uses compressed format to
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt optimize parsing. Includes new XSL that permits
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt charting via the Google Charts API on browsers that
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt support javascript in XSL. The old XML schema has been
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt deprecated. [RT #30023]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3417. [placeholder]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3416. [bug] Named could die on shutdown if running with 128 UDP
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt dispatches per interface. [RT #31743]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3415. [bug] named could die with a REQUIRE failure if a validation
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt was canceled. [RT #31804]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3414. [bug] Address locking issues found by Coverity. [RT #31626]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3413. [func] Record the number of DNS64 AAAA RRsets that have been
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt synthesized. [RT #27636]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3412. [bug] Copy timeval structure from control message data.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt to UDP. [RT #31690]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3410. [bug] Addressed Coverity warnings. [RT #31626]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt from X.509 certificates, for use with DANE
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt (DNS-based Authentication of Named Entities).
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3408. [bug] Some DNSSEC-related options (update-check-ksk,
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt are now legal in slave zones as long as
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt inline-signing is in use. [RT #31078]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3407. [placeholder]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3406. [bug] mem.c: Fix compilation errors when building with
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3405. [bug] Handle time going backwards in acache. [RT #31253]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3404. [bug] dnssec-signzone: When re-signing a zone, remove
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt RRSIG and NSEC records from nodes that used to be
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt in-zone but are now below a zone cut. [RT #31556]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3402. [test] The IPv6 interface numbers used for system
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt tests were incorrect on some platforms. [RT #25085]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3401. [bug] Addressed Coverity warnings. [RT #31484]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3400. [cleanup] "named -V" can now report a source ID string, defined
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt in the "srcid" file in the build tree and normally set
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt to the most recent git hash. [RT #31494]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3399. [port] netbsd: rename 'bool' parameter to avoid namespace
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt clash. [RT #31515]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3398. [bug] SOA parameters were not being updated with inline
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt signed zones if the zone was modified while the
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt server was offline. [RT #29272]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3396. [bug] OPT records were incorrectly removed from signed,
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt truncated responses. [RT #31439]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3394. [bug] Adjust 'successfully validated after lower casing
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt signer' log level and category. [RT #31414]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3393. [bug] 'host -C' could core dump if REFUSED was received.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3392. [func] Keep statistics on REFUSED responses. [RT #31412]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3390. [bug] Silence clang compiler warnings. [RT #30417]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3388. [bug] Fixed several Coverity warnings.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt Note: This change includes a fix for a bug that
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt was subsequently determined to be an exploitable
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt security vulnerability, CVE-2012-5688: named could
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt die on specific queries with dns64 enabled.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3387. [func] DS digest can be disabled at runtime with
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt disable-ds-digests. [RT #21581]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3386. [bug] Address locking violation when generating new NSEC /
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt NSEC3 chains. [RT #31224]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3385. [bug] named-checkconf didn't detect missing master lists
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt in also-notify clauses. [RT #30810]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3384. [bug] Improved logging of crypto errors. [RT #30963]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3383. [security] A certain combination of records in the RBT could
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt cause named to hang while populating the additional
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt section of a response. [RT #31090]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3382. [bug] SOA query from slave used use-v6-udp-ports range,
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt if set, regardless of the address family in use.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3381. [contrib] Update queryperf to support more RR types.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3380. [bug] named could die if a nonexistent master list was
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt referenced in a also-notify. [RT #31004]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3379. [bug] isc_interval_zero and isc_time_epoch should be
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt "const (type)* const". [RT #31069]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3378. [bug] Handle missing 'managed-keys-directory' better.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3377. [bug] Removed spurious newline from NSEC3 multiline
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt output. [RT #31044]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3376. [bug] Lack of EDNS support was being recorded without a
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt successful response. [RT #30811]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3374. [bug] isc_parse_uint32 failed to return a range error on
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt systems with 64 bit longs. [RT #30232]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3373. [bug] win32: open raw files in binary mode. [RT #30944]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3372. [bug] Silence spurious "deleted from unreachable cache"
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt messages. [RT #30501]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3371. [bug] AD=1 should behave like DO=1 when deciding whether to
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt add NS RRsets to the additional section or not.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3370. [bug] Address use after free while shutting down. [RT #30241]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3369. [bug] nsupdate terminated unexpectedly in interactive mode
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt if built with readline support. [RT #29550]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt were not C++ safe.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3367. [bug] dns_dnsseckey_create() result was not being checked.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3366. [bug] Fixed Read-After-Write dependency violation for IA64
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt atomic operations. [RT #25181]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3365. [bug] Removed spurious newlines from log messages in
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3364. [security] Named could die on specially crafted record.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3363. [bug] Need to allow "forward" and "fowarders" options
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt in static-stub zones; this had been overlooked.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3362. [bug] Setting some option values to 0 in named.conf
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt could trigger an assertion failure on startup.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3361. [bug] "rndc signing -nsec3param" didn't work correctly
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt when salt was set to '-' (no salt). [RT #30099]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3360. [bug] 'host -w' could die. [RT #18723]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3359. [bug] An improperly-formed TSIG secret could cause a
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt memory leak. [RT #30607]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3358. [placeholder]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3357. [port] Add support for libxml2-2.8.x [RT #30440]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt approaching their expiry, so they don't remain
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt in caches after expiry. [RT #26429]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3355. [port] Use more portable awk in verify system test.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3354. [func] Improve OpenSSL error logging. [RT #29932]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3353. [bug] Use a single task for task exclusive operations.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3352. [bug] Ensure that learned server attributes timeout of the
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt adb cache. [RT #29856]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt memory debugging flags are set. [RT #30243]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3350. [bug] Memory read overrun in isc___mem_reallocate if
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt ISC_MEM_DEBUGCTX memory debugging flag is set.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3349. [bug] Change #3345 was incomplete. [RT #30233]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3348. [bug] Prevent RRSIG data from being cached if a negative
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt record matching the covering type exists at a higher
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt trust level. Such data already can't be retrieved from
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt the cache since change 3218 -- this prevents it
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt being inserted into the cache as well. [RT #26809]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3347. [bug] dnssec-settime: Issue a warning when writing a new
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt private key file would cause a change in the
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt permissions of the existing file. [RT #27724]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3346. [security] Bad-cache data could be used before it was
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt initialized, causing an assert. [RT #30025]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3345. [bug] Addressed race condition when removing the last item
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt or inserting the first item in an ISC_QUEUE.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3344. [func] New "dnssec-checkds" command checks a zone to
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt determine which DS records should be published
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt in the parent zone, or which DLV records should be
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt published in a DLV zone, and queries the DNS to
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt ensure that it exists. (Note: This tool depends
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt on python; it will not be built or installed on
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt systems that do not have a python interpreter.)
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3343. [placeholder]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3342. [bug] Change #3314 broke saving of stub zones to disk
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt resulting in excessive cpu usage in some cases.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3341. [func] New "dnssec-verify" command checks a signed zone
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt to ensure correctness of signatures and of NSEC/NSEC3
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt chains. [RT #23673]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3340. [func] Added new 'map' zone file format, which is an image
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt of a zone database that can be loaded directly into
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt memory via mmap(), allowing much faster zone loading.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt (Note: Because of pointer sizes and other
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt considerations, this file format is platform-dependent;
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt 'map' zone files cannot always be transferred from one
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt server to another.) [RT #25419]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3339. [func] Allow the maximum supported rsa exponent size to be
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt specified: "max-rsa-exponent-size <value>;" [RT #29228]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3338. [bug] Address race condition in units tests: asyncload_zone
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt and asyncload_zt. [RT #26100]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3337. [bug] Change #3294 broke support for the multiple keys
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt in controls. [RT #29694]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3336. [func] Maintain statistics for RRsets tagged as "stale".
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3335. [func] nslookup: return a nonzero exit code when unable
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt to get an answer. [RT #29492]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3334. [bug] Hold a zone table reference while performing a
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt asynchronous load of a zone. [RT #28326]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3333. [bug] Setting resolver-query-timeout too low can cause
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt named to not recover if it loses connectivity.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3331. [security] dns_rdataslab_fromrdataset could produce bad
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt rdataslabs. [RT #29644]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3330. [func] Fix missing signatures on NOERROR results despite
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt RPZ rewriting. Also
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt - add optional "recursive-only yes|no" to the
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt response-policy statement
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt - add optional "max-policy-ttl" to the response-policy
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt statement to limit the false data that
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt "recursive-only no" can introduce into
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt resolvers' caches
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt - add a RPZ performance test to bin/tests/system/rpz
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt when queryperf is available.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt - the encoding of PASSTHRU action to "rpz-passthru".
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt (The old encoding is still accepted.)
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3329. [bug] Handle RRSIG signer-name case consistently: We
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt generate RRSIG records with the signer-name in
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt lower case. We accept them with any case, but if
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt they fail to validate, we try again in lower case.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3328. [bug] Fixed inconsistent data checking in dst_parse.c.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt to 'filter-aaaa-on-v4' but applies to IPv6
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt connections. (Use "configure --enable-filter-aaaa"
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt to enable this option.) [RT #27308]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3326. [func] Added task list statistics: task model, worker
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt threads, quantum, tasks running, tasks ready.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3325. [func] Report cache statistics: memory use, number of
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt nodes, number of hash buckets, hit and miss counts.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3324. [test] Add better tests for ADB stats [RT #27057]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3323. [func] Report the number of buckets the resolver is using.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3322. [func] Monitor the number of active TCP and UDP dispatches.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3321. [func] Monitor the number of recursive fetches and the
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt number of open sockets, and report these values in
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt the statistics channel. [RT #27054]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3320. [func] Added support for monitoring of recursing client
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt count. [RT #27009]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3319. [func] Added support for monitoring of ADB entry count and
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt hash size. [RT #27057]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3318. [tuning] Reduce the amount of work performed while holding a
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt bucket lock when finished with a fetch context.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3316. [tuning] Improved locking performance when recursing.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3315. [tuning] Use multiple dispatch objects for sending upstream
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt queries; this can improve performance on busy
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt multiprocessor systems by reducing lock contention.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3314. [bug] The masters list could be updated while stub_callback
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt or refresh_callback were using it. [RT #26732]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3313. [protocol] Add TLSA record type. [RT #28989]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3311. [bug] Abort the zone dump if zone->db is NULL in
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt zone.c:zone_gotwritehandle. [RT #29028]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3310. [test] Increase table size for mutex profiling. [RT #28809]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3309. [bug] resolver.c:fctx_finddone() was not thread safe.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3308. [placeholder]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3305. [func] Add wire format lookup method to sdb. [RT #28563]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3303. [bug] named could die when reloading. [RT #28606]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3302. [bug] dns_dnssec_findmatchingkeys could fail to find
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt keys if the zone name contained character that
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt required special mappings. [RT #28600]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3301. [contrib] Update queryperf to build on darwin. Add -R flag
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt for non-recursive queries. [RT #28565]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3300. [bug] Named could die if gssapi was enabled in named.conf
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt but was not compiled in. [RT #28338]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3299. [bug] Make SDB handle errors from database drivers better.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3298. [bug] Named could dereference a NULL pointer in
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt zmgr_start_xfrin_ifquota if the zone was being removed.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3297. [bug] Named could die on a malformed master file. [RT #28467]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3296. [bug] Named could die with a INSIST failure in
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt client.c:exit_check. [RT #28346]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3295. [bug] Adjust isc_time_secondsastimet range check to be more
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt portable. [RT # 26542]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt error. [RT #28265]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3293. [func] nsupdate: list supported type. [RT #28261]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3292. [func] Log messages in the axfr stream at debug 10.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3291. [port] Fixed a build error on systems without ENOTSUP.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3288. [bug] dlz_destroy() function wasn't correctly registered
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt by the DLZ dlopen driver. [RT #28056]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3286. [bug] Managed key maintenance timer could fail to start
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt after 'rndc reconfig'. [RT #26786]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3285. [bug] val-frdataset was incorrectly disassociated in
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt proveunsecure after calling startfinddlvsep.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3284. [bug] Address race conditions with the handling of
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3283. [bug] Raw zones with with more than 512 records in a RRset
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt failed to load. [RT #27863]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3282. [bug] Restrict the TTL of NS RRset to no more than that
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt of the old NS RRset when replacing it.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt [RT #27792] [RT #27884]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3281. [bug] SOA refresh queries could be treated as cancelled
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt despite succeeding over the loopback interface.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3280. [bug] Potential double free of a rdataset on out of memory
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt with DNS64. [RT #27762]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3279. [bug] Hold a internal reference to the zone while performing
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt a asynchronous load. Address potential memory leak
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt if the asynchronous is cancelled. [RT #27750]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3278. [bug] Make sure automatic key maintenance is started
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt when "auto-dnssec maintain" is turned on during
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt "rndc reconfig". [RT #26805]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3276. [bug] win32: ns_os_openfile failed to return NULL on
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt safe_open failure. [RT #27696]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt option had been misspelled as '-clear'. (To avoid
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt future confusion, both options now work.) [RT #27173]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3274. [placeholder]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3273. [bug] AAAA responses could be returned in the additional
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt section even when filter-aaaa-on-v4 was in use.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3272. [func] New "rndc zonestatus" command prints information
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt about the specified zone. [RT #21671]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3271. [port] darwin: mksymtbl is not always stable, loop several
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt times before giving up. mksymtbl was using non
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt portable perl to covert 64 bit hex strings. [RT #27653]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt --- 9.9.0rc2 released ---
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3270. [bug] "rndc reload" didn't reuse existing zones correctly
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt when inline-signing was in use. [RT #27650]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3269. [port] darwin 11 and later now built threaded by default.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt out the earliest expiry time. [RT #23311]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3267. [bug] Memory allocation failures could be mis-reported as
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt unexpected error. New ISC_R_UNSET result code.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3266. [bug] The maximum number of NSEC3 iterations for a
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt DNSKEY RRset was not being properly computed.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3265. [bug] Corrected a problem with lock ordering in the
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt inline-signing code. [RT #27557]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3264. [bug] Automatic regeneration of signatures in an
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt inline-signing zone could stall when the server
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt was restarted. [RT #27344]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3263. [bug] "rndc sync" did not affect the unsigned side of an
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt inline-signing zone. [RT #27337]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3262. [bug] Signed responses were handled incorrectly by RPZ.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3261. [func] RRset ordering now defaults to random. [RT #27174]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3260. [bug] "rrset-order cyclic" could appear not to rotate
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt for some query patterns. [RT #27170/27185]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt --- 9.9.0rc1 released ---
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3259. [bug] named-compilezone: Suppress "dump zone to <file>"
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt message when writing to stdout. [RT #27109]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3258. [test] Add "forcing full sign with unreadable keys" test.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3257. [bug] Do not generate a error message when calling fsync()
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt in a pipe or socket. [RT #27109]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3255. [func] No longer require that a empty zones be explicitly
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt enabled or that a empty zone is disabled for
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt RFC 1918 empty zones to be configured. [RT #27139]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt too long. [RT #26956]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3252. [bug] When master zones using inline-signing were
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt updated while the server was offline, the source
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt zone could fall out of sync with the signed
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt copy. They can now resynchronize. [RT #26676]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt memory dns_sdlz_putrr() can allocate per record to
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt prevent run away memory consumption on ISC_R_NOSPACE.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3250. [func] 'configure --enable-developer'; turn on various
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt configure options, normally off by default, that
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt we want developers to build and test with. [RT #27103]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3249. [bug] Update log message when saving slave zones files for
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt analysis after load failures. [RT #27087]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3248. [bug] Configure options --enable-fixed-rrset and
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt --enable-exportlib were incompatible with each
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt other. [RT #27087]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3247. [bug] 'raw' format zones failed to preserve load order
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt breaking 'fixed' sort order. [RT #27087]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3246. [bug] Named failed to start with a empty also-notify list.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3245. [bug] Don't report a error unchanged serials unless there
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt were other changes when thawing a zone with
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt ixfr-fromdifferences. [RT #26845]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3244. [func] Added readline support to nslookup and nsupdate.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt Also simplified nsupdate syntax to make "update"
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt and "prereq" optional. [RT #24659]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt being properly set.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3242. [func] Extended the header of raw-format master files to
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt include the serial number of the zone from which
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt they were generated, if different (as in the case
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt of inline-signing zones). This is to be used in
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt inline-signing zones, to track changes between the
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt unsigned and signed versions of the zone, which may
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt have different serial numbers.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt (Note: raw zonefiles generated by this version of
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt BIND are no longer compatible with prior versions.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt To generate a backward-compatible raw zonefile
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt using dnssec-signzone or named-compilezone, specify
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt output format "raw=0" instead of simply "raw".)
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3241. [bug] Address race conditions in the resolver code.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3240. [bug] DNSKEY state change events could be missed. [RT #26874]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt timestamp. [RT #26883]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3238. [bug] keyrdata was not being reinitialized in
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt lib/dns/rbtdb.c:iszonesecure. [RT#26913]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3237. [bug] dig -6 didn't work with +trace. [RT #26906]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3236. [bug] Backed out changes #3182 and #3202, related to
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt EDNS(0) fallback behavior. [RT #26416]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3235. [func] dns_db_diffx, a extended dns_db_diff which returns
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt the generated diff and optionally writes it to a
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt journal. [RT #26386]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3232. [bug] Zero zone->curmaster before return in
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt dns_zone_setmasterswithkeys(). [RT #26732]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3231. [bug] named could fail to send a incompressible zone.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3230. [bug] 'dig axfr' failed to properly handle a multi-message
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt axfr with a serial of 0. [RT #26796]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3229. [bug] Fix local variable to struct var assignment
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt found by CLANG warning.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3228. [tuning] Dynamically grow symbol table to improve zone
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt loading performance. [RT #26523]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3227. [bug] Interim fix to make WKS's use of getprotobyname()
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt and getservbyname() self thread safe. [RT #26232]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3226. [bug] Address minor resource leakages. [RT #26624]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt messages. [RT #26507]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3223. [bug] 'task_test privilege_drop' generated false positives.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3222. [cleanup] Replace dns_journal_{get,set}_bitws with
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt dns_journal_{get,set}_sourceserial. [RT #26634]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3221. [bug] Fixed a potential core dump on shutdown due to
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt referencing fetch context after it's been freed.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 --- 9.9.0b2 released ---
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt could fail to set the database version correctly,
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt causing an assertion failure. [RT #26180]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3219. [bug] Disable NOEDNS caching following a timeout.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3218. [security] Cache lookup could return RRSIG data associated with
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 nonexistent records, leading to an assertion
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 failure. [RT #26590]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3214. [func] Add 'named -U' option to set the number of UDP
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt listener threads per interface. [RT #26485]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt list prior to adding a reference to it leading a
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt possible assertion failure. [RT #23219]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt option prints in single-line-per-record format.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3210. [bug] Canceling the oldest query due to recursive-client
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt overload could trigger an assertion failure. [RT #26463]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3208. [bug] 'dig -y' handle unknown tsig algorithm better.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3206. [cleanup] Add ISC information to log at start time. [RT #25484]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3205. [func] Upgrade dig's defaults to better reflect modern
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt nameserver behavior. Enable "dig +adflag" and
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt "dig +edns=0" by default. Enable "+dnssec" when
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt running "dig +trace". [RT #23497]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3204. [bug] When a master server that has been marked as
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews unreachable sends a NOTIFY, mark it reachable
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews again. [RT #25960]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3203. [bug] Increase log level to 'info' for validation failures
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 from expired or not-yet-valid RRSIGs. [RT #21796]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3202. [bug] NOEDNS caching on timeout was too aggressive.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3201. [func] 'rndc querylog' can now be given an on/off parameter
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb instead of only being used as a toggle. [RT #18351]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3200. [doc] Some rndc functions were undocumented or were
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 missing from 'rndc -h' output. [RT #25555]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3199. [func] When logging client information, include the name
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 being queried. [RT #25944]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3198. [doc] Clarified that dnssec-settime can alter keyfile
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 permissions. [RT #24866]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3197. [bug] Don't try to log the filename and line number when
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 the config parser can't open a file. [RT #22263]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3196. [bug] nsupdate: return nonzero exit code when target zone
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 doesn't exist. [RT #25783]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3195. [cleanup] Silence "file not found" warnings when loading
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 managed-keys zone. [RT #26340]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3194. [doc] Updated RFC references in the 'empty-zones-enable'
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 documentation. [RT #25203]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3192. [bug] A query structure could be used after being freed.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3191. [bug] Print NULL records using "unknown" format. [RT #26392]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3190. [bug] Underflow in error handling in isc_mutexblock_init.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3189. [test] Added a summary report after system tests. [RT #25517]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3188. [bug] zone.c:zone_refreshkeys() could fail to detach
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 references correctly when errors occurred, causing
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 a hang on shutdown. [RT #26372]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3187. [port] win32: support for Visual Studio 2008. [RT #26356]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 --- 9.9.0b1 released ---
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3186. [bug] Version/db mis-match in rpz code. [RT #26180]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3185. [func] New 'rndc signing' option for auto-dnssec zones:
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 - 'rndc signing -list' displays the current
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 state of signing operations
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 - 'rndc signing -clear' clears the signing state
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 records for keys that have fully signed the zone
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 - 'rndc signing -nsec3param' sets the NSEC3
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 parameters for the zone
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 The 'rndc keydone' syntax is removed. [RT #23729]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3184. [bug] named had excessive cpu usage when a redirect zone was
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 configured. [RT #26013]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3182. [bug] Auth servers behind firewalls which block packets
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 greater than 512 bytes may cause other servers to
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 perform poorly. Now, adb retains edns information
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 and caches noedns servers. [RT #23392/24964]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3181. [func] Inline-signing is now supported for master zones.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3180. [func] Local copies of slave zones are now saved in raw
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 format by default, to improve startup performance.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 'masterfile-format text;' can be used to override
2f012d936b5ccdf6520c96a4de23721dc58a2221Automatic Updater the default, if desired. [RT #25867]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3179. [port] kfreebsd: build issues. [RT #26273]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3178. [bug] A race condition introduced by change #3163 could
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 cause an assertion failure on shutdown. [RT #26271]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3177. [func] 'rndc keydone', remove the indicator record that
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 named has finished signing the zone with the
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 corresponding key. [RT #26206]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3176. [doc] Corrected example code and added a README to the
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 sample external DLZ module in contrib/dlz/example.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3175. [bug] Fix how DNSSEC positive wildcard responses from a
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 NSEC3 signed zone are validated. Stop sending a
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 unnecessary NSEC3 record when generating such
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 responses. [RT #26200]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3174. [bug] Always compute to revoked key tag from scratch.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3173. [port] Correctly validate root DS responses. [RT #25726]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3172. [port] darwin 10.* and freebsd [89] are now built threaded by
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3171. [bug] Exclusively lock the task when adding a zone using
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 'rndc addzone'. [RT #25600]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 --- 9.9.0a3 released ---
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3170. [func] RPZ update:
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 - fix precedence among competing rules
240e53b13217af266abb3dae8ba103614daf2bf7Mark Andrews - improve ARM text including documenting rule precedence
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 - try to rewrite CNAME chains until first hit
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 - new "rpz" logging channel
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 - RDATA for CNAME rules can include wildcards
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 - replace "NO-OP" named.conf policy override with
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 "PASSTHRU" and add "DISABLED" override ("NO-OP"
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 is still recognized)
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3169. [func] Catch db/version mis-matches when calling dns_db_*().
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3168. [bug] Nxdomain redirection could trigger an assert with
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt a ANY query. [RT #26017]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3167. [bug] Negative answers from forwarders were not being
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt correctly tagged making them appear to not be cached.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3166. [bug] Upgrading a zone to support inline-signing failed.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3165. [bug] dnssec-signzone could generate new signatures when
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt resigning, even when valid signatures were already
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt present. [RT #26025]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3164. [func] Enable DLZ modules to retrieve client information,
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt so that responses can be changed depending on the
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt source address of the query. [RT #25768]
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3163. [bug] Use finer-grained locking in client.c to address
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt concurrency problems with large numbers of threads.
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3162. [test] start.pl: modified to allow for "named.args" in
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt ns*/ subdirectory to override stock arguments to
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt named. Largely from RT#26044, but no separate ticket.
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt3161. [bug] zone.c:del_sigs failed to always reset rdata leading
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt assertion failures. [RT #25880]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3160. [bug] When printing out a NSEC3 record in multiline form
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt the newline was not being printed causing type codes
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt to be run together. [RT #25873]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3159. [bug] On some platforms, named could assert on startup
feb067b25a8e33db62e2a7bf2e83bbb7f6eee845Evan Hunt when running in a chrooted environment without
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 /proc. [RT #25863]
789252d55f025db52ee02aa933c9f09a4aadfa97Evan Hunt3158. [bug] Recursive servers would prefer a particular UDP
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 socket instead of using all available sockets.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 the config file before pausing the server. [RT #21373]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3156. [placeholder]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 --- 9.9.0a2 released ---
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3155. [bug] Fixed a build failure when using contrib DLZ
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 drivers (e.g., mysql, postgresql, etc). [RT #25710]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3154. [bug] Attempting to print an empty rdataset could trigger
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 an assert. [RT #25452]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3153. [func] Extend request-ixfr to zone level and remove the
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 side effect of forcing an AXFR. [RT #25156]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3152. [cleanup] Some versions of gcc and clang failed due to
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 incorrect use of __builtin_expect. [RT #25183]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3151. [bug] Queries for type RRSIG or SIG could be handled
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 incorrectly. [RT #21050]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3150. [func] Improved startup and reconfiguration time by
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 enabling zones to load in multiple threads. [RT #25333]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3149. [placeholder]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3148. [bug] Processing of normal queries could be stalled when
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 forwarding a UPDATE message. [RT #24711]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3147. [func] Initial inline signing support. [RT #23657]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 --- 9.9.0a1 released ---
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3145. [test] Capture output of ATF unit tests in "./atf.out" if
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 there were any errors while running them. [RT #25527]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3144. [bug] dns_dbiterator_seek() could trigger an assert when
2f012d936b5ccdf6520c96a4de23721dc58a2221Automatic Updater used with a nonexistent database node. [RT #25358]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3143. [bug] Silence clang compiler warnings. [RT #25174]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3142. [bug] NAPTR is class agnostic. [RT #25429]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3141. [bug] Silence spurious "zone serial (0) unchanged" messages
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 associated with empty zones. [RT #25079]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3140. [func] New command "rndc flushtree <name>" clears the
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 specified name from the server cache along with
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 all names under it. [RT #19970]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 for the hashing algorithms (md5, sha1 - sha512, and
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 their hmac counterparts). [RT #25067]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3138. [bug] Address memory leaks and out-of-order operations when
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 shutting named down. [RT #25210]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3137. [func] Improve hardware scalability by allowing multiple
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 worker threads to process incoming UDP packets.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 This can significantly increase query throughput
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 on some systems. [RT #22992]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3136. [func] Add RFC 1918 reverse zones to the list of built-in
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 empty zones switched on by the 'empty-zones-enable'
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 option. [RT #24990]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3134. [bug] Improve the accuracy of dnssec-signzone's signing
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 statistics. [RT #16030]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3133. [bug] Change #3114 was incomplete. [RT #24577]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3132. [placeholder]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉3131. [tuning] Improve scalability by allocating one zone task
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 per 100 zones at startup time, rather than using a
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 fixed-size task table. [RT #24406]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3130. [func] Support alternate methods for managing a dynamic
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 zone's serial number. Two methods are currently
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 defined using serial-update-method, "increment"
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 (default) and "unixtime". [RT #23849]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3129. [bug] Named could crash on 'rndc reconfig' when
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 allow-new-zones was set to yes and named ACLs
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 were used. [RT #22739]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3128. [func] Inserting an NSEC3PARAM via dynamic update in an
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 auto-dnssec zone that has not been signed yet
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 will cause it to be signed with the specified NSEC3
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 parameters when keys are activated. The
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 NSEC3PARAM record will not appear in the zone until
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 it is signed, but the parameters will be stored.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3127. [bug] 'rndc thaw' will now remove a zone's journal file
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 if the zone serial number has been changed and
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 ixfr-from-differences is not in use. [RT #24687]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3126. [security] Using DNAME record to generate replacements caused
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 RPZ to exit with a assertion failure. [RT #24766]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3125. [security] Using wildcard CNAME records as a replacement with
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 RPZ caused named to exit with a assertion failure.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3124. [bug] Use an rdataset attribute flag to indicate
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 negative-cache records rather than using rrtype 0;
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 this will prevent problems when that rrtype is
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 used in actual DNS packets. [RT #24777]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3123. [security] Change #2912 exposed a latent flaw in
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 dns_rdataset_totext() that could cause named to
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 crash with an assertion failure. [RT #24777]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3121. [security] An authoritative name server sending a negative
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 response containing a very large RRset could
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 trigger an off-by-one error in the ncache code
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 and crash named. [RT #24650]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3120. [bug] Named could fail to validate zones listed in a DLV
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb that validated insecure without using DLV and had
aecadaf3b1bbbe0bd58f703989baf38eedd0ffcackb DS records in the parent zone. [RT #24631]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3119. [bug] When rolling to a new DNSSEC key, a private-type
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 record could be created and never marked complete.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3118. [bug] nsupdate could dump core on shutdown when using
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 SIG(0) keys. [RT #24604]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3117. [cleanup] Remove doc and parser references to the
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 never-implemented 'auto-dnssec create' option.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3116. [func] New 'dnssec-update-mode' option controls updates
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 of DNSSEC records in signed dynamic zones. Set to
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 'no-resign' to disable automatic RRSIG regeneration
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 while retaining the ability to sign new or changed
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 data. [RT #24533]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3115. [bug] Named could fail to return requested data when
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 following a CNAME that points into the same zone.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3114. [bug] Retain expired RRSIGs in dynamic zones if key is
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 inactive and there is no replacement key. [RT #23136]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3113. [doc] Document the relationship between serial-query-rate
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 and NOTIFY messages.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3112. [doc] Add missing descriptions of the update policy name
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 types "ms-self", "ms-subdomain", "krb5-self" and
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 "krb5-subdomain", which allow machines to update
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 their own records, to the BIND 9 ARM.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3111. [bug] Improved consistency checks for dnssec-enable and
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 dnssec-validation, added test cases to the
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 checkconf system test. [RT #24398]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3110. [bug] dnssec-signzone: Wrong error message could appear
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 when attempting to sign with no KSK. [RT #24369]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3109. [func] The also-notify option now uses the same syntax
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 as a zone's masters clause. This means it is
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 now possible to specify a TSIG key to use when
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 sending notifies to a given server, or to include
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 an explicit named masters list in an also-notify
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 statement. [RT #23508]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3108. [cleanup] dnssec-signzone: Clarified some error and
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 code (use -P instead). [RT #20852]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3107. [bug] dnssec-signzone: Report the correct number of ZSKs
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 when using -x. [RT #20852]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3106. [func] When logging client requests, include the name of
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 the TSIG key if any. [RT #23619]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3105. [bug] GOST support can be suppressed by "configure
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 --without-gost" [RT #24367]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3104. [bug] Better support for cross-compiling. [RT #24367]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3103. [bug] Configuring 'dnssec-validation auto' in a view
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 instead of in the options statement could trigger
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 an assertion failure in named-checkconf. [RT #24382]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3102. [func] New 'dnssec-loadkeys-interval' option configures
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 how often, in minutes, to check the key repository
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 for updates when using automatic key maintenance.
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 Default is every 60 minutes (formerly hard-coded
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 to 12 hours). [RT #23744]
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉3101. [bug] Zones using automatic key maintenance could fail
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews to check the key repository for updates. [RT #23744]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3100. [security] Certain response policy zone configurations could
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews trigger an INSIST when receiving a query of type
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews RRSIG. [RT #24280]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3099. [test] "dlz" system test now runs but gives R:SKIPPED if
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews not compiled with --with-dlz-filesystem. [RT #24146]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3098. [bug] DLZ zones were answering without setting the AA bit.
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3097. [test] Add a tool to test handling of malformed packets.
2fff8b8280779a25fbdb891b2d3d9b435d2084f0Tatuya JINMEI 神明達哉3096. [bug] Set KRB5_KTNAME before calling log_cred() in
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews dst_gssapi_acceptctx(). [RT #24004]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3095. [bug] Handle isolated reserved ports in the port range.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3094. [doc] Expand dns64 documentation.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3092. [bug] Signatures for records at the zone apex could go
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews stale due to an incorrect timer setting. [RT #23769]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3091. [bug] Fixed a bug in which zone keys that were published
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews and then subsequently activated could fail to trigger
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews automatic signing. [RT #22911]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3090. [func] Make --with-gssapi default [RT #23738]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews standard input "dnssec-dsfromkey -f -". [RT# 20662]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews and add setup.sh in order to resolve changing
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews named.conf issue. [RT #23687]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews type "external" could cause a crash. [RT #23735]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3086. [bug] Running dnssec-settime -f on an old-style key will
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt now force an update to the new key format even if no
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews other change has been specified, using "-P now -A now"
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews as default values. [RT #22474]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3085. [func] New '-R' option in dnssec-signzone forces removal
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt of signatures which have not yet expired but
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews were generated by a key that no longer exists.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3084. [func] A new command "rndc sync" dumps pending changes in
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews a dynamic zone to disk; "rndc sync -clean" also
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt removes the journal file after syncing. Also,
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt "rndc freeze" no longer removes journal files.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3083. [bug] NOTIFY messages were not being sent when generating
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews a NSEC3 chain incrementally. [RT #23702]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3082. [port] strtok_r is threads only. [RT #23747]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3081. [bug] Failure of DNAME substitution did not return
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews YXDOMAIN. [RT #23591]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3079. [bug] Handle isc_event_allocate failures in t_tasks.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3078. [func] Added a new include file with function typedefs
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt for the DLZ "dlopen" driver. [RT #23629]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3077. [bug] zone.c:zone_refreshkeys() incorrectly called
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt dns_zone_attach(), use zone->irefs instead. [RT #23303]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt dnssec-keyfromlabel sets the default TTL of the
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt key. When possible, automatic signing will use that
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt TTL when the key is published. [RT #23304]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt timestamp when determining which keys are active.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3074. [bug] Make the adb cache read through for zone data and
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews glue learn for zone named is authoritative for.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3073. [bug] managed-keys changes were not properly being recorded.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3071. [bug] has_nsec could be used uninitialized in
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews update.c:next_active. [RT #20256]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉3069. [cleanup] Silence warnings messages from clang static analysis.
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉3068. [bug] Named failed to build with a OpenSSL without engine
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 support. [RT #23473]
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉3067. [bug] ixfr-from-differences {master|slave}; failed to
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt select the master/slave zones. [RT #23580]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3066. [func] The DLZ "dlopen" driver is now built by default,
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt no longer requiring a configure option. To
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt disable it, use "configure --without-dlopen".
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt Driver also supported on win32. [RT #23467]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3065. [bug] RRSIG could have time stamps too far in the future.
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3064. [bug] powerpc: add sync instructions to the end of atomic
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt operations. [RT #23469]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3062. [func] Made several changes to enhance human readability
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt of DNSSEC data in dig output and in generated
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews - DNSKEY record comments are more verbose, no
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 longer used in multiline mode only
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt - multiline RRSIG records reformatted
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews - multiline output mode for NSEC3PARAM records
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews - "dig +norrcomments" suppresses DNSKEY comments
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉 - "dig +split=X" breaks hex/base64 records into
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews fields of width X; "dig +nosplit" disables this.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3061. [func] New option "dnssec-signzone -D", only write out
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews generated DNSSEC records. [RT #22896]
d9059b0c38bd630c367d81424d72b1308cd74b04Tatuya JINMEI 神明達哉3060. [func] New option "dnssec-signzone -X <date>" allows
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews specification of a separate expiration date
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3059. [test] Added a regression test for change #3023.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews reload to fail, if a log file specified in the conf
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews file isn't a plain file. [RT #22771]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3057. [bug] "rndc secroots" would abort after the first error
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews and so could miss some views. [RT #23488]
dd2a0a6d2dec1c23787351e51b434a838dec5603Evan Hunt3056. [func] Added support for URI resource record. [RT #23386]
8ac908b38a2fd9b780ae3a27ff26932a17823ae0Mark Andrews3055. [placeholder]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3054. [bug] Added elliptic curve support check in
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews GOST OpenSSL engine detection. [RT #23485]
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews3053. [bug] Under a sustained high query load with a finite
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews max-cache-size, it was possible for cache memory
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews to be exhausted and not recovered. [RT #23371]
named.pid at startup. [RT #23290]
validator.c. Tests added to dnssec system test.
3038. [bug] Install <dns/rpz.h>. [RT #23342]
3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
3026. [bug] lib/isc/httpd.c: check that we have enough space
to 10. Allow setting this in named.conf using the new
in the named.conf options. [RT #21727]
3000. [bug] More TKEY/GSS fixes:
2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
2987. [func] Improve ease of configuring TKEY/GSS updates by
zone, but the nameserver names and/or their IP
2978. [port] hpux: look for <devpoll.h> [RT #21919]
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
2973. [bug] bind.keys.h was being removed by the "make clean"
(e.g. "%-1c"). [RT #22270]
2962. [port] win32: add more dependencies to BINDBuild.dsw.
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
interfaces at reboot. See bin/tests/system/README
support for addzone/delzone feature (see change
new-zone-file in named.conf; this happens
2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
option at the view or options level in named.conf.
into named.conf in the appropriate view. (Note:
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
was specified in named.conf. [RT #21416]
2903. [bug] managed-keys-directory missing from namedconf.c.
2893. [bug] Improve managed keys support. New named.conf option
2873. [bug] Canceling a dynamic update via the dns/client module
2872. [bug] Modify dns/client.c:dns_client_createx() to only
2871. [bug] Type mismatch in mem_api.c between the definition and
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2865. [bug] memset to zero event.data. [RT #20986]
2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which