CHANGES 218 KB
Newer Older
1
2
3
2080.	[port]		libbind: res_init.c did not compile on older versions
			of Solaris. [RT #16363]

4
5
6
2079.	[bug]		The lame cache was not handling multiple types
			correctly. [RT #16361]

7
8
9
10
11
12
2078.	[bug]		dnssec-checkzone output style "default" was badly
			named.  It is now called "relative". [RT #16326]

2077.	[bug]		'dnssec-signzone -O raw' wasn't outputing the
			complete signed zone. [RT #16326]

13
14
15
2076.	[bug]		Several files were missing #include <config.h>
			causing build failures on OSF. [RT #16341]

16
17
18
2075.	[bug]		The spillat timer event hander could leak memory.
			[RT #16357]

Mark Andrews's avatar
Mark Andrews committed
19
2074.	[bug]		dns_request_createvia2(), dns_request_createvia3(),
20
21
22
			dns_request_createraw2() and dns_request_createraw3()
			failed to send multiple UDP requests. [RT #16349]

23
24
25
2073.	[bug]		Incorrect semantics check for update policy "wildcard".
			[RT #16353]

26
27
28
2072.	[bug]		We were not generating valid HMAC SHA digests.
			[RT #16320]

29
30
31
2071.	[port]		Test whether gcc accepts -fno-strict-aliasing.
			[RT #16324]

32
33
34
2070.	[bug]		The remote address was not always displayed when
			reporting dispatch failures. [RT #16315]

35
36
2069.	[bug]		Cross compiling was not working. [RT #16330]

37
38
39
2068.	[cleanup]	Lower incremental tuning message to debug 1.
			[RT #16319]

40
41
42
2067.	[bug]		'rndc' could close the socket too early triggering
			a INSIST under Windows. [RT #16317]

Mark Andrews's avatar
Mark Andrews committed
43
44
2066.	[placeholder]	rt16300

45
46
47
2065.	[bug]		libbind: probe for HPUX prototypes for
			endprotoent_r() and endservent_r().  [RT 16313]

48
49
2064.	[bug]		libbind: silence AIX compiler warnings. [RT #16218]

50
51
52
2063.	[bug]		Change #1955 introduced a bug which caused the first
			'rndc flush' call to not free memory. [RT #16244]

Mark Andrews's avatar
Mark Andrews committed
53
2062.	[bug]		'dig +nssearch' was reusing a buffer before it had
54
55
			been returned by the socket code. [RT #16307]

56
57
2061.	[bug]		Accept expired wildcard message reversed. [RT #16296]

58
59
60
2060.	[bug]		Enabling DLZ support could leave views partially
			configured. [RT #16295]

61
62
63
2059.	[bug]		Search into cache rbtdb could trigger an INSIST
			failure while cleaning up a stale rdataset.
			[RT #16292]
64

65
2058.	[bug]		Adjust how we calculate rtt estimates in the presence
Mark Andrews's avatar
Mark Andrews committed
66
			of authoritative servers that drop EDNS and/or CD
67
68
69
			requests.  Also fallback to EDNS/512 and plain DNS
			faster for zones with less than 3 servers.  [RT #16187]

70
71
72
2057.	[bug]		Make setting "ra" dependent on both allow-query-cache
			and allow-recursion. [RT #16290]

73
74
75
2056.	[bug]		dig: ixfr= was not being treated case insensitively
			at all times. [RT #15955]

76
77
78
2055.	[bug]		Missing goto after dropping multicast query.
			[RT #15944]

79
80
81
2054.	[port]		freebsd: do not explicitly link against -lpthread.
			[RT #16170]

82
83
2053.	[port]		netbsd:libbind: silence compiler warnings. [RT #16220]

84
85
86
2052.	[bug]		'rndc' improve connect failed message to report
			the failing address. [RT #15978]

87
88
2051.	[port]		More strtol() fixes. [RT #16249]

89
90
91
2050.	[bug]		Parsing of NSAP records was not case insensitive.
			[RT #16287]

92
93
94
95
96
2049.	[bug]		Restore SOA before AXFR when falling back from
			a attempted IXFR when transfering in a zone.
			Allow a initial SOA query before attempting
			a AXFR to be requested. [RT #16156]

97
98
99
100
101
2048.	[bug]		It was possible to loop forever when using
			avoid-v4-udp-ports / avoid-v6-udp-ports when
			the OS always returned the same local port.
			[RT #16182]

102
103
104
2047.	[bug]		Failed to initialise the interface flags to zero.
			[RT #16245]

105
2046.	[bug]		rbtdb.c:rdataset_setadditional() could cause duplicate
106
			cleanup [RT #16247].
107

108
2045.	[func]		Use lock buckets for acache entries to limit memory
109
			consumption. [RT #16183]
110

111
2044.	[port]		Add support for atomic operations for Itanium.
112
			[RT #16179]
113

114
115
116
2043.	[port]		nsupdate/nslookup: Force the flushing of the prompt
			for interactive sessions. [RT#16148]

117
118
119
2042.	[bug]		named-checkconf was incorrectly rejecting the
			logging category "config". [RT #16117]

120
121
122
2041.	[bug]		"configure --with-dlz-bdb=yes" produced a bad
			set of libraries to be linked. [RT #16129]

123
124
2040.	[bug]		rbtdb no_references() could trigger an INSIST
			failure with --enable-atomic.  [RT #16022]
125

126
2039.	[func]		Check that all buffers passed to the socket code
Mark Andrews's avatar
Mark Andrews committed
127
			have been retrieved when the socket event is freed.
128
129
130
131
132
			[RT #16122]

2038.	[bug]		dig/nslookup/host was unlinking from wrong list
			when handling errors. [RT #16122]

133
134
135
136
2037.	[func]		When unlinking the first or last element in a list
			check that the list head points to the element to
			be unlinked. [RT #15959]

137
138
139
2036.	[bug]		'rndc recursing' could cause trigger a REQUIRE.
			[RT #16075]

140
141
142
143
2035.	[func]		Make falling back to TCP on UDP refresh failure
			optional. Default "try-tcp-refresh yes;" for BIND 8
			compatibility. [RT #16123]

144
145
2034.	[bug]		gcc: set -fno-strict-aliasing. [RT #16124]

146
147
148
2033.	[bug]		We wern't creating multiple client memory contexts
			on demand as expected. [RT #16095]

149
150
2032.	[bug]		Remove a INSIST in query_addadditional2(). [RT #16074]

151
152
153
2031.	[bug]		Emit a error message when "rndc refresh" is called on
			a non slave/stub zone. [RT # 16073]

154
155
156
2030.	[bug]		We were being overly conservative when disabling
			openssl engine support. [RT #16030]

157
158
159
2029.	[bug]		host printed out the server multiple times when
			specified on the command line. [RT #15992]

Mark Andrews's avatar
Mark Andrews committed
160
2028.	[port]		linux: socket.c compatability for old systems.
161
162
			[RT #16015]

Mark Andrews's avatar
Mark Andrews committed
163
2027.	[port]		libbind: Solaris x86 support. [RT #16020]
164

165
166
167
2026.	[bug]		Rate limit the two recursive client exceeded messages.
			[RT #16044]

168
169
2025.	[func]		Update "zone serial unchanged" message. [RT #16026]

170
171
172
2024.	[bug]		named emited spurious "zone serial unchanged"
			messages on reload. [RT #16027]

173
174
175
2023.	[bug]		"make install" should create ${localstatedir}/run and
			${sysconfdir} if they do not exist. [RT #16033]

176
177
178
179
180
2022.	[bug]		If dnssec validation is disabled only assert CD if
			CD was requested. [RT #16037]

2021.	[bug]		dnssec-enable no; triggered a REQUIRE. [RT #16037]

181
182
2020.	[bug]		rdataset_setadditional() could leak memory. [RT #16034]

183
184
185
2019.	[tuning]	Reduce the amount of work performed per quantum
			when cleaning the cache. [RT #15986]

186
187
188
189
2018.	[bug]		Checking if the HMAC MD5 private file was broken.
			[RT #15960]

2017.	[bug]		allow-query default was not correct. [RT #15946]
190

191
192
193
194
2016.	[bug]		Return a partial answer if recursion is not
			allowed but requested and we had the answer
			to the original qname. [RT #15945]

195
196
197
198
199
200
2015.	[cleanup]	use-additional-cache is now acache-enable for
			consistancy.  Default acache-enable off in BIND 9.4
			as it requires memory usage to be configured.
			It may be enabled by default in BIND 9.5 once we
			have more experience with it.

Shane Kerr's avatar
Shane Kerr committed
201
202
203
2014.	[func]		Statistics about acache now recorded and sent
			to log. [RT #15976]

204
205
206
2013.	[bug]		Handle unexpected TSIGs on unsigned AXFR/IXFR
			responses more gracefully. [RT #15941]

207
208
209
2012.	[func]		Don't insert new acache entries if acache is full.
			[RT #15970]

210
211
212
213
2011.	[func]		dnssec-signzone can now update the SOA record of
			the signed zone, either as an increment or as the
			system time(). [RT #15633]

214
215
2010.	[placeholder]	rt15958

216
217
2009.	[bug]		libbind: coverity fixes. [RT #15808]

218
219
220
221
222
223
224
2008.	[func]		It is now posssible to enable/disable DNSSEC
			validation from rndc.  This is useful for the
			mobile hosts where the current connection point
			breaks DNSSEC (firewall/proxy).  [RT #15592]

				rndc validation newstate [view]

225
226
227
228
2007.	[func]		It is now possible to explicitly enable DNSSEC
			validation.  default dnssec-validation no; to
			be changed to yes in 9.5.0.  [RT #15674]

229
230
231
232
233
234
235
236
237
238
239
2006.	[security]	Allow-query-cache and allow-recursion now default
			to the builtin acls "localnets" and "localhost".

			This is being done to make caching servers less
			attractive as reflective amplifying targets for
			spoofed traffic.  This still leave authoritative
			servers exposed.

			The best fix is for full BCP 38 deployment to
			remove spoofed traffic.

240
241
242
243
2005.	[bug]		libbind: Retransmission timeouts should be
			based on which attempt it is to the nameserver
			and not the nameserver itself. [RT #13548]

244
245
246
247
2004.	[bug]		dns_tsig_sign() could pass a NULL pointer to
			dst_context_destroy() when cleaning up after a
			error. [RT #15835]

248
249
250
251
252
2003.	[bug]		libbind: The DNS name/address lookup functions could
			occasionally follow a random pointer due to
			structures not being completely zeroed. [RT #15806]

2002.	[bug]		libbind: tighten the constraints on when
253
254
			struct addrinfo._ai_pad exists.  [RT #15783]

255
256
257
258
2001.	[func]		Check the KSK flag when updating a secure dynamic zone.
			New zone option "update-check-ksk yes;".  [RT #15817]

2000.	[bug]		memmove()/strtol() fix was incomplete. [RT #15812]
259

260
261
1999.	[func]		Implement "rrset-order fixed". [RT #13662]

262
263
264
265
1998.	[bug]		Restrict handling of fifos as sockets to just SunOS.
			This allows named to connect to entropy gathering
			daemons that use fifos instead of sockets. [RT #15840]

266
267
268
269
1997.	[bug]		Named was failing to replace negative cache entries
			when a positive one for the type was learnt.
			[RT #15818]

270
271
272
1996.	[bug]		nsupdate: if a zone has been specified it should
			appear in the output of 'show'. [RT #15797]

273
274
275
1995.	[bug]		'host' was reporting multiple "is an alias" messages.
			[RT #15702]

276
277
1994.	[port]		OpenSSL 0.9.8 support. [RT #15694]

278
279
280
281
1993.	[bug]		Log messsage, via syslog, were missing the space
			after the timestamp if "print-time yes" was specified.
			[RT #15844]

Mark Andrews's avatar
Mark Andrews committed
282
1992.	[bug]		Not all incoming zone transfer messages included the
283
284
			view.  [RT #15825]

285
286
287
288
1991.	[cleanup]	The configuration data, once read, should be treated
			as readonly.  Expand the use of const to enforce this
			at compile time. [RT #15813]

289
290
291
292
1990.	[bug]		libbind:  isc's override of broken gettimeofday()
			implementions was not always effective.
			[RT #15709]

293
294
295
1989.	[bug]		win32: don't check the service password when
			re-installing. [RT #15882]

296
297
298
1988.	[bug]		Remove a bus error from the SHA256/SHA512 support.
			[RT #15878]

299
300
1987.	[func]		DS/DLV SHA256 digest algorithm support. [RT #15608]

301
302
1986.	[func]		Report when a zone is removed. [RT #15849]

303
304
305
306
307
308
309
310
311
312
313
1985.	[protocol]	DLV has now been assigned a official type code of
			32769. [RT #15807]

			Note: care should be taken to ensure you upgrade
			both named and dnssec-signzone at the same time for
			zones with DLV records where named is the master
			server for the zone.  Also any zones that contain
			DLV records should be removed when upgrading a slave
			zone.  You do not however have to upgrade all
			servers for a zone with DLV records simultaniously.

314
315
316
1984.	[func]		dig, nslookup and host now advertise a 4096 byte
			EDNS UDP buffer size by default. [RT #15855]

317
318
319
1983.	[func]		Two new update policies.  "selfsub" and "selfwild".
			[RT #12895]

320
321
322
323
1982.	[bug]		DNSKEY was being accepted on the parent side of
			a delegation.  KEY is still accepted there for
			RFC 3007 validated updates. [RT #15620]

324
325
326
1981.	[bug]		win32: condition.c:wait() could fail to reattain
			the mutex lock.

327
328
329
1980.	[func]		dnssec-signzone: output the SOA record as the
			first record in the signed zone. [RT #15758]

330
331
332
1979.	[port]		linux: allow named to drop core after changing
			user ids. [RT #15753]

333
334
335
1978.	[port]		Handle systems which have a broken recvmsg().
			[RT #15742]

336
337
1977.	[bug]		Silence noisy log message. [RT #15704]

338
339
1976.	[bug]		Handle systems with no IPv4 addresses. [RT #15695]

340
341
342
1975.	[bug]		libbind: isc_gethexstring() could misparse multi-line
			hex strings with comments. [RT #15814]

343
344
345
1974.	[doc]		List each of the zone types and associated zone
			options seperately in the ARM.

346
347
348
1973.	[func]		TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
			HMACSHA512 support. [RT #13606]

349
350
351
1972.	[contrib]	DBUS dynamic forwarders integation from
			Jason Vas Dias <jvdias@redhat.com>.

352
1971.	[port]		linux: make detection of missing IF_NAMESIZE more
353
			robust. [RT #15443]
354

355
356
357
1970.	[bug]		nsupdate: adjust UDP timeout when falling back to
			unsigned SOA query. [RT #15775]

358
359
360
1969.	[bug]		win32: the socket code was freeing the socket
			structure too early. [RT #15776]

361
362
1968.	[bug]		Missing lock in resolver.c:validated(). [RT #15739]

363
364
1967.	[func]		dig/nslookup/host: warn about missing "QR". [RT #15779]

Mark Andrews's avatar
Mark Andrews committed
365
1966.	[bug]		Don't set CD when we have fallen back to plain DNS.
366
367
			[RT #15727]

368
369
370
1965.	[func]		Suppress spurious "recusion requested but not
			available" warning with 'dig +qr'. [RT #15780].

371
372
1964.	[func]		Seperate out MX and SRV to CNAME checks. [RT #15723]

373
374
375
1963.	[port]		Tru64 4.0E doesn't support send() and recv(). 
			[RT #15586]

376
377
378
1962.	[bug]		Named failed to clear old update-policy when it
			was removed. [RT #15491]

379
380
381
1961.	[bug]		Check the port and address of responses forwarded
			to dispatch. [RT #15474]

382
383
384
1960.	[bug]		Update code should set NSEC ttls from SOA MINIMUM.
			[RT #15465]

385
386
387
388
1959.	[func]		Control the zeroing of the negative response TTL to
			a soa query.  Defaults "zero-no-soa-ttl yes;" and
			"zero-no-soa-ttl-cache no;". [RT #15460]

389
390
391
1958.	[bug]		Named failed to update the zone's secure state
			until the zone was reloaded. [RT #15412]

392
393
394
1957.	[bug]		Dig mishandled responses to class ANY queries.
			[RT #15402]

395
396
397
398
1956.	[bug]		Improve cross compile support, 'gen' is now built
			by native compiler.  See README for additional
			cross compile support information. [RT #15148]

399
400
1955.	[bug]		Pre-allocate the cache cleaning interator. [RT #14998]

Mark Andrews's avatar
Mark Andrews committed
401
1954.	[func]		Named now falls back to advertising EDNS with a
402
403
404
			512 byte receive buffer if the initial EDNS queries
			fail.  [RT #14852]

Mark Andrews's avatar
Mark Andrews committed
405
1953.	[func]		The maximum EDNS UDP response named will send can
406
407
408
409
			now be set in named.conf (max-udp-size).  This is
			independent of the advertised receive buffer
			(edns-udp-size). [RT #14852]

410
411
412
1952.	[port]		hpux: tell the linker to build a runtime link
			path "-Wl,+b:". [RT #14816].

413
414
415
416
1951.	[security]	Drop queries from particular well known ports.
			Don't return FORMERR to queries from particular
			well known ports.  [RT #15636]
			
417
418
419
420
1950.	[port]		Solaris 2.5.1 and earlier cannot bind() then connect()
			a TCP socket. This prevents the source address being
			set for TCP connections. [RT #15628]

421
422
1949.	[func]		Addition memory leakage checks. [RT #15544]

423
424
425
426
1948.	[bug]		If was possible to trigger a REQUIRE failure in
			xfrin.c:maybe_free() if named ran out of memory.
			[RT #15568]

427
428
429
430
431
1947.	[func]		It is now possible to configure named to accept
			expired RRSIGs.  Default "dnssec-accept-expired no;".
			Setting "dnssec-accept-expired yes;" leaves named
			vulnerable to replay attacks.  [RT #14685]

432
433
434
1946.	[bug]		resume_dslookup() could trigger a REQUIRE failure
			when using forwarders. [RT #15549]

435
1945.	[cleanup]	dnssec-keygen: RSA (RSAMD5) is nolonger recommended.
Mark Andrews's avatar
Mark Andrews committed
436
			To generate a RSAMD5 key you must explicitly request
437
438
			RSAMD5. [RT #13780]
			
439
440
441
1944.	[cleanup]	isc_hash_create() does not need a read/write lock.
			[RT #15522]

Mark Andrews's avatar
Mark Andrews committed
442
1943.	[bug]		Set the loadtime after rolling forward the journal.
443
444
			[RT #15647]

445
446
447
448
1942.	[bug]		If the name of a DNSKEY match that of one in
			trusted-keys do not attempt to validate the DNSKEY
			using the parents DS RRset. [RT #15649]

449
450
451
1941.	[bug]		ncache_adderesult() should set eresult even if no
			rdataset is passed to it. [RT #15642]

452
453
454
1940.	[bug]		Fixed a number of error conditions reported by
			Coverity.

455
456
457
458
459
460
461
1939.	[bug]		The resolver could dereference a null pointer after
			validation if all the queries have timed out.
			[RT #15528]

1938.	[bug]		The validator was not correctly handling unsecure
			negative responses at or below a SEP. [RT #15528]

462
463
1937.	[bug]		sdlz doesn't handle RRSIG records. [RT #15564]

Mark Andrews's avatar
Mark Andrews committed
464
1936.	[bug]		The validator could leak memory. [RT #15544]
465

466
467
468
469
470
471
1935.	[bug]		'acache' was DO sensitive. [RT #15430]

1934.	[func]		Validate pending NS RRsets, in the authority section,
			prior to returning them if it can be done without
			requiring DNSKEYs to be fetched.  [RT #15430]

Mark Andrews's avatar
Mark Andrews committed
472
1933.	[bug]		dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
473

474
475
1932.	[bug]		hpux: LDFLAGS was getting corrupted. [RT #15530]

476
477
1931.	[bug]		Per-client mctx could require a huge amount of memory,
			particularly for a busy caching server. [RT #15519]
478

479
480
481
482
1930.	[port]		HPUX: ia64 support. [RT #15473]

1929.	[port]		FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.

483
484
1928.	[bug]		Race in rbtdb.c:currentversion(). [RT #15517]

485
486
487
1927.	[bug]		Access to soanode or nsnode in rbtdb violated the
			lock order rule and could cause a dead lock.
			[RT# 15518]
488

489
1926.	[bug]		The Windows installer did not check for empty
490
491
			passwords.  BINDinstall was being installed in
			the wrong place. [RT #15483]
492

493
494
495
1925.	[port]		All outer level AC_TRY_RUNs need cross compiling
			defaults. [RT #15469]

496
497
1924.	[port]		libbind: hpux ia64 support. [RT #15473]

498
499
1923.	[bug]		ns_client_detach() called too early. [RT #15499]

500
501
502
1922.	[bug]		check-tool.c:setup_logging() missing call to
			dns_log_setcontext().

Mark Andrews's avatar
Mark Andrews committed
503
1921.	[bug]		Client memory contexts were not using internal
504
505
			malloc. [RT# 15434]

Mark Andrews's avatar
update    
Mark Andrews committed
506
1920.	[bug]		The cache rbtdb lock array was too small to
507
508
509
			have the desired performance characteristics.
			[RT #15454]

510
511
512
1919.	[contrib]	queryperf: a set of new features: collecting/printing
			response delays, printing intermediate results, and
			adjusting query rate for the "target" qps.
513

514
515
1918.	[bug]		Memory leak when checking acls. [RT #15391]

516
517
518
1917.	[doc]		funcsynopsisinfo wasn't being treated as verbatim
			when generating man pages. [RT #15385]

519
520
1916.	[func]		Integrate contibuted IDN code from JPNIC. [RT #15383]

521
522
1915.	[bug]		dig +ndots was broken. [RT #15215]

523
524
525
526
1914.	[protocol]	DS is required to accept mnemonic algorithms
			(RFC 4034).  Still emit numeric algorithms for
			compatability with RFC 3658. [RT #15354]

527
528
1913.	[func]		Integrate contibuted DLZ code into named. [RT #11382]

Mark Andrews's avatar
Mark Andrews committed
529
1912.	[port]		aix: atomic locking for powerpc. [RT #15020]
530

Mark Andrews's avatar
Mark Andrews committed
531
1911.	[bug]		Update windows socket code. [RT #14965]
532

Mark Andrews's avatar
Mark Andrews committed
533
1910.	[bug]		dig's +sigchase code overhauled. [RT #14933]
534

Mark Andrews's avatar
Mark Andrews committed
535
1909.	[bug]		The DLV code has been re-worked to make no longer
536
537
			query order sensitive. [RT #14933]

Mark Andrews's avatar
Mark Andrews committed
538
1908.	[func]		dig now warns if 'RA' is not set in the answer when
539
540
541
542
			'RD' was set in the query.  host/nslookup skip servers
			that fail to set 'RA' when 'RD' is set unless a server
			is explicitly set.  [RT #15005]

Mark Andrews's avatar
Mark Andrews committed
543
1907.	[func]		host/nslookup now continue (default)/fail on SERVFAIL.
544
545
			[RT #15006]

Mark Andrews's avatar
Mark Andrews committed
546
1906.	[func]		dig now has a '-q queryname' and '+showsearch' options.
547
548
			[RT #15034]

Mark Andrews's avatar
Mark Andrews committed
549
1905.	[bug]		Strings returned from cfg_obj_asstring() should be
550
551
552
553
			treated as read-only.  The prototype for 
			cfg_obj_asstring() has been updated to reflect this.
			[RT #15256]

Mark Andrews's avatar
Mark Andrews committed
554
1904.	[func]		Automatic empty zone creation for D.F.IP6.ARPA and
555
556
557
558
559
560
			friends.  Note: RFC 1918 zones are not yet covered by
			this but are likely to be in a future release.

			New options: empty-server, empty-contact,
			empty-zones-enable and disable-empty-zone.

Mark Andrews's avatar
Mark Andrews committed
561
1903.	[func]		ISC string copy API.
562

Mark Andrews's avatar
Mark Andrews committed
563
1902.	[func]		Attempt to make the amount of work performed in a
564
565
566
567
568
569
			iteration self tuning.  The covers nodes clean from
			the cache per iteration, nodes written to disk when
			rewriting a master file and nodes destroyed per
			iteration when destroying a zone or a cache.
			[RT #14996]

Mark Andrews's avatar
Mark Andrews committed
570
1901.	[cleanup]	Don't add DNSKEY records to the additional section.
571

Mark Andrews's avatar
Mark Andrews committed
572
1900.	[bug]		ixfr-from-differences failed to ensure that the
573
574
			serial number increased. [RT #15036]

Mark Andrews's avatar
Mark Andrews committed
575
1899.	[func]		named-checkconf now validates update-policy entries.
576
577
			[RT #14963]

Mark Andrews's avatar
Mark Andrews committed
578
1898.	[bug]		Extend ISC_SOCKADDR_FORMATSIZE and
579
580
			ISC_NETADDR_FORMATSIZE to allow for scope details.

Mark Andrews's avatar
Mark Andrews committed
581
1897.	[func]		x86 and x86_64 now have seperate atomic locking
582
583
			implementations.

Mark Andrews's avatar
Mark Andrews committed
584
1896.	[bug]		Recursive clients soft quota support wasn't working
585
586
			as expected. [RT #15103]

Mark Andrews's avatar
Mark Andrews committed
587
1895.	[bug]		A escaped character is, potentially, converted to
588
589
			the output character set too early. [RT #14666]

Mark Andrews's avatar
Mark Andrews committed
590
1894.	[doc]		Review ARM for BIND 9.4.
591

Mark Andrews's avatar
Mark Andrews committed
592
1893.	[port]		Use uintptr_t if available. [RT #14606]
593

Mark Andrews's avatar
Mark Andrews committed
594
1892.	[func]		Support for SPF rdata type. [RT #15033]
595

Mark Andrews's avatar
Mark Andrews committed
596
1891.	[port]		freebsd: pthread_mutex_init can fail if it runs out
597
598
			of memory. [RT #14995]

Mark Andrews's avatar
Mark Andrews committed
599
1890.	[func]		Raise the UDP recieve buffer size to 32k if it is
600
601
			less than 32k. [RT #14953]

Mark Andrews's avatar
Mark Andrews committed
602
1889.	[port]		sunos: non blocking i/o support. [RT #14951]
603

Mark Andrews's avatar
Mark Andrews committed
604
1888.	[func]		Support for IPSECKEY rdata type. [RT #14967]
605

Mark Andrews's avatar
Mark Andrews committed
606
1887.	[bug]		The cache could delete expired records too fast for
607
608
			clients with a virtual time in the past. [RT #14991]

Mark Andrews's avatar
Mark Andrews committed
609
1886.	[bug]		fctx_create() could return success even though it
610
611
			failed. [RT #14993]

Mark Andrews's avatar
Mark Andrews committed
612
1885.	[func]		dig: report the number of extra bytes still left in
613
614
			the packet after processing all the records.

Mark Andrews's avatar
Mark Andrews committed
615
1884.	[cleanup]	dighost.c: move external declarations into <dig/dig.h>.
616

Mark Andrews's avatar
Mark Andrews committed
617
1883.	[bug]		dnssec-signzone, dnssec-keygen: handle negative debug
618
619
			levels. [RT #14962]

Mark Andrews's avatar
Mark Andrews committed
620
1882.	[func]		Limit the number of recursive clients that can be
621
622
623
624
			waiting for a single query (<qname,qtype,qclass>) to
			resolve.  New options clients-per-query and
			max-clients-per-query.

Mark Andrews's avatar
Mark Andrews committed
625
1881.	[func]		Add a system test for named-checkconf. [RT #14931]
626

Mark Andrews's avatar
Mark Andrews committed
627
1880.	[func]		The lame cache is now done on a <qname,qclass,qtype>
628
629
630
			basis as some servers only appear to be lame for
			certain query types.  [RT #14916]

Mark Andrews's avatar
Mark Andrews committed
631
1879.	[func]		"USE INTERNAL MALLOC" is now runtime selectable.
632
633
			[RT #14892]

Mark Andrews's avatar
Mark Andrews committed
634
1878.	[func]		Detect duplicates of UDP queries we are recursing on
635
			and drop them.  New stats category "duplicates".
636
			[RT #2471]
637

Mark Andrews's avatar
Mark Andrews committed
638
1877.	[bug]		Fix unreasonably low quantum on call to
639
640
641
			dns_rbt_destroy2().  Remove unnecessay unhash_node()
			call. [RT #14919]

Mark Andrews's avatar
Mark Andrews committed
642
1876.	[func]		Additional memory debugging support to track size
Mark Andrews's avatar
Mark Andrews committed
643
			and mctx arguments. [RT #14814]
644

Mark Andrews's avatar
Mark Andrews committed
645
1875.	[bug]		process_dhtkey() was using the wrong memory context
646
647
			to free some memory. [RT #14890]

Mark Andrews's avatar
Mark Andrews committed
648
1874.	[port]		sunos: portability fixes. [RT #14814]
649

Mark Andrews's avatar
Mark Andrews committed
650
1873.	[port]		win32: isc__errno2result() now reports its caller.
651
652
			[RT #13753]

Mark Andrews's avatar
Mark Andrews committed
653
1872.	[port]		win32: Handle ERROR_NETNAME_DELETED.  [RT #13753]
654

Mark Andrews's avatar
Mark Andrews committed
655
1871.	[placeholder]
656

Mark Andrews's avatar
Mark Andrews committed
657
1870.	[func]		Added framework for handling multiple EDNS versions.
658
			[RT #14873]
659

Mark Andrews's avatar
Mark Andrews committed
660
1869.	[func]		dig can now specify the EDNS version when making
661
			a query. [RT #14873]
662

663
664
1868.	[func]		edns-udp-size can now be overridden on a per
			server basis. [RT #14851]
Mark Andrews's avatar
Mark Andrews committed
665

666
667
1867.	[bug]		It was possible to trigger a INSIST in
			dlv_validatezonekey(). [RT #14846]
Mark Andrews's avatar
Mark Andrews committed
668

669
670
1866.	[bug]		resolv.conf parse errors were being ignored by
			dig/host/nslookup. [RT #14841]
Mark Andrews's avatar
Mark Andrews committed
671

672
673
1865.	[bug]		Silently ignore nameservers in /etc/resolv.conf with
			bad addresses. [RT #14841]
Mark Andrews's avatar
Mark Andrews committed
674

675
676
677
1864.	[bug]		Don't try the alternative transfer source if you
			got a answer / transfer with the main source
			address. [RT #14802]
Mark Andrews's avatar
Mark Andrews committed
678

679
680
1863.	[bug]		rrset-order "fixed" error messages not complete.

681
682
683
684
685
686
687
1862.	[func]		Add additional zone data constancy checks.
			named-checkzone has extended checking of NS, MX and 
			SRV record and the hosts they reference.
			named has extended post zone load checks.
			New zone options: check-mx and integrity-check. 
			[RT #4940]

688
689
1861.	[bug]		dig could trigger a INSIST on certain malformed
			responses. [RT #14801]
Mark Andrews's avatar
Mark Andrews committed
690

691
692
1860.	[port]		solaris 2.8: hack_shutup_pthreadmutexinit was
			incorrectly set. [RT #14775]
Mark Andrews's avatar
Mark Andrews committed
693

694
1859.	[func]		Add support for CH A record. [RT #14695]
Mark Andrews's avatar
Mark Andrews committed
695

696
697
698
1858.	[bug]		The flush-zones-on-shutdown option wasn't being
			parsed. [RT #14686]

699
700
1857.	[bug]		named could trigger a INSIST() if reconfigured /
			reloaded too fast.  [RT #14673]
Mark Andrews's avatar
Mark Andrews committed
701

Rob Austein's avatar
regen    
Rob Austein committed
702
703
704
1856.	[doc]		Switch Docbook toolchain from DSSSL to XSL.
			[RT #11398]

705
706
707
1855.	[bug]		ixfr-from-differences was failing to detect changes
			of ttl due to dns_diff_subtract() was ignoring the ttl
			of records.  [RT #14616]
Mark Andrews's avatar
Mark Andrews committed
708

709
710
711
1854.	[bug]		lwres also needs to know the print format for
			(long long).  [RT #13754]

712
713
714
1853.	[bug]		Rework how DLV interacts with proveunsecure().
			[RT #13605]

715
716
717
1852.	[cleanup]	Remove last vestiges of dnssec-signkey and
			dnssec-makekeyset (removed from Makefile years ago).

718
719
1851.	[doc]		Doxygen comment markup. [RT #11398]

720
721
1850.	[bug]		Memory leak in lwres_getipnodebyaddr(). [RT #14591]

722
723
724
1849.	[doc]		All forms of the man pages (docbook, man, html) should
			have consistant copyright dates.

725
726
1848.	[bug]		Improve SMF integration. [RT #13238]

727
1847.	[bug]		isc_ondestroy_init() is called too late in
Mark Andrews's avatar
Mark Andrews committed
728
			dns_rbtdb_create()/dns_rbtdb64_create(). 
729
730
			[RT #13661]
			
731
732
733
1846.	[contrib]	query-loc-0.3.0 from Stephane Bortzmeyer
			<bortzmeyer@nic.fr>.

734
735
736
1845.	[bug]		Improve error reporting to distingish between
			accept()/fcntl() and socket()/fcntl() errors.
			[RT #13745]
Mark Andrews's avatar
Mark Andrews committed
737

738
739
740
741
742
743
1844.	[bug]		inet_pton() accepted more that 4 hexadecimal digits
			for each 16 bit piece of the IPv6 address.  The text
			representation of a IPv6 address has been tighted
			to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
			[RT #5662]

744
745
746
747
748
1843.	[cleanup]	CINCLUDES takes precedence over CFLAGS.  This helps
			when CFLAGS contains "-I /usr/local/include"
			resulting in old header files being used.

1842.	[port]		cmsg_len() could produce incorrect results on
749
750
			some platform. [RT #13744]

751
752
1841.	[bug]		"dig +nssearch" now makes a recursive query to
			find the list of nameservers to query. [RT #13694]
Mark Andrews's avatar
Mark Andrews committed
753

Mark Andrews's avatar
Mark Andrews committed
754
1840.	[func]		dnssec-signzone can now randomize signature end times
755
756
			(dnssec-signzone -j jitter). [RT #13609]

757
758
1839.	[bug]		<isc/hash.h> was not being installed.

759
760
1838.	[cleanup]	Don't allow Linux capabilities to be inherited.
			[RT #13707]
Mark Andrews's avatar
Mark Andrews committed
761

762
763
1837.	[bug]		Compile time option ISC_FACILITY was not effective
			for 'named -u <user>'.  [RT #13714]
Mark Andrews's avatar
Mark Andrews committed
764

765
766
1836.	[cleanup]	Silence compiler warnings in hash_test.c.

767
768
1835.	[bug]		Update dnssec-signzone's usage message. [RT #13657]

769
770
1834.	[bug]		Bad memset in rdata_test.c. [RT #13658]

771
772
1833.	[bug]		Race condition in isc_mutex_lock_profile(). [RT #13660]

773
774
775
1832.	[bug]		named fails to return BADKEY on unknown TSIG algorithm.
			[RT #13620]

776
777
1831.	[doc]		Update named-checkzone documentation. [RT#13604]

778
779
1830.	[bug]		adb lame cache has sence of test reversed. [RT #13600]

780
781
1829.	[bug]		win32: "pid-file none;" broken. [RT #13563]

782
783
784
1828.	[bug]		isc_rwlock_init() failed to properly cleanup if it
			encountered a error. [RT #13549]

785
786
1827.	[bug]		host: update usage message for '-a'. [RT #37116]

787
788
789
790
791
1826.	[bug]		Missing DESTROYLOCK() in isc_mem_createx() on out
			of memory error. [RT #13537]

1825.	[bug]		Missing UNLOCK() on out of memory error from in
			rbtdb.c:subtractrdataset(). [RT #13519]
792

793
794
795
1824.	[bug]		Memory leak on dns_zone_setdbtype() failure.
			[RT #13510]

796
797
798
1823.	[bug]		Wrong macro used to check for point to point interface.
			[RT#13418]

799
800
1822.	[bug]		check-names test for RT was reversed. [RT #13382]

Mark Andrews's avatar
Mark Andrews committed
801
802
1821.	[placeholder]

803
1820.	[bug]		Gracefully handle acl loops. [RT #13659]
Mark Andrews's avatar
Mark Andrews committed
804

805
806
807
808
1819.	[bug]		The validator needed to check both the algorithm and
			digest types of the DS to determine if it could be
			used to introduce a secure zone. [RT #13593]

809
810
1818.	[bug]		'named-checkconf -z' triggered an INSIST. [RT #13599]

811
1817.	[func]		Add support for additional zone file formats for
812
813
			improving loading performance.  The masterfile-format
			option in named.conf can be used to specify a
814
			non-default format.  A separate command
815
			named-compilezone was provided to generate zone files
816
817
818
			in the new format.  Additionally, the -I and -O options
			for dnssec-signzone specify the input and output
			formats.
819

820
821
1816.	[port]		UnixWare: failed to compile lib/isc/unix/net.c.
			[RT #13597]
Mark Andrews's avatar
Mark Andrews committed
822

823
824
825
1815.	[bug]		nsupdate triggered a REQUIRE if the server was set
			without also setting the zone and it encountered
			a CNAME and was using TSIG.  [RT #13086]
Mark Andrews's avatar
Mark Andrews committed
826

827
1814.	[func]		UNIX domain controls are now supported.
Mark Andrews's avatar
Mark Andrews committed
828

829
830
831
832
1813.	[func]		Restructured the data locking framework using
			architecture dependent atomic operations (when
			available), improving response performance on
			multi-processor machines significantly.
833
			x86, x86_64, alpha, powerpc, and mips are currently
834
			supported.
835

836
837
838
1812.	[port]		win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
			[RT #13453]

839
840
1811.	[func]		Preserve the case of domain names in rdata during
			zone transfers. [RT #13547]
Mark Andrews's avatar
Mark Andrews committed
841

842
843
844
1810.	[bug]		configure, lib/bind/configure make different default
			decisions about whether to do a threaded build.
			[RT #13212]
Mark Andrews's avatar
Mark Andrews committed
845

846
847
1809.	[bug]		"make distclean" failed for libbind if the platform
			is not supported.
Mark Andrews's avatar
Mark Andrews committed
848

849
850
1808.	[bug]		zone.c:notify_zone() contained a race condition,
			zone->db could change underneath it.  [RT #13511]
Mark Andrews's avatar
Mark Andrews committed
851

852
853
1807.	[bug]		When forwarding (forward only) set the active domain
			from the forward zone name. [RT #13526]
Mark Andrews's avatar
Mark Andrews committed
854

855
856
857
1806.	[bug]		The resolver returned the wrong result when a CNAME /
			DNAME was encountered when fetching glue from a
			secure namespace. [RT #13501]
Mark Andrews's avatar
Mark Andrews committed
858

859
860
1805.	[bug]		Pending status was not being cleared when DLV was
			active. [RT #13501]
Mark Andrews's avatar
Mark Andrews committed
861

862
863
864
1804.	[bug]		Ensure that if we are queried for glue that it fits
			in the additional section or TC is set to tell the
			client to retry using TCP. [RT #10114]
Mark Andrews's avatar
Mark Andrews committed
865

866
867
1803.	[bug]		dnssec-signzone sometimes failed to remove old
			RRSIGs. [RT #13483]
Mark Andrews's avatar
Mark Andrews committed
868

869
1802.	[bug]		Handle connection resets better. [RT #11280]
Mark Andrews's avatar
Mark Andrews committed
870

871
872
1801.	[func]		Report differences between hints and real NS rrset
			and associated address records.
Mark Andrews's avatar
Mark Andrews committed
873

874
875
876
1800.	[bug]		Changes #1719 allowed a INSIST to be triggered.
			[RT #13428]

877
878
1799.	[bug]		'rndc flushname' failed to flush negative cache
			entries. [RT #13438]
Mark Andrews's avatar
Mark Andrews committed
879

880
881
1798.	[func]		The server syntax has been extended to support a
			range of servers.  [RT #11132]
Mark Andrews's avatar
Mark Andrews committed
882

883
884
885
1797.	[func]		named-checkconf now check acls to verify that they
			only refer to existing acls. [RT #13101]

886
1796.	[func]		"rndc freeze/thaw" now freezes/thaws all zones.
Mark Andrews's avatar
Mark Andrews committed
887

Mark Andrews's avatar
Mark Andrews committed
888
1795.	[bug]		"rndc dumpdb" was not fully documented.  Minor
889
			formating issues with "rndc dumpdb -all".  [RT #13396]
Mark Andrews's avatar
Mark Andrews committed
890

891
892
1794.	[func]		Named and named-checkzone can now both check for
			non-terminal wildcard records.
Mark Andrews's avatar
Mark Andrews committed
893

894
1793.	[func]		Extend adjusting TTL warning messages. [RT #13378]
Mark Andrews's avatar
Mark Andrews committed
895

896
897
1792.	[func]		New zone option "notify-delay".  Specify a minimum
			delay between sets of NOTIFY messages.
Mark Andrews's avatar
Mark Andrews committed
898

899
900
1791.	[bug]		'host -t a' still printed out AAAA and MX records.
			[RT #13230]
Mark Andrews's avatar
Mark Andrews committed
901

902
903
904
1790.	[cleanup]	Move lib/dns/sec/dst up into lib/dns.  This should
			allow parallel make to succeed.

905
906
907
1789.	[bug]		Prerequisite test for tkey and dnssec could fail
			with "configure --with-libtool".

908
909
910
1788.	[bug]		libbind9.la/libbind9.so needs to link against
			libisccfg.la/libisccfg.so.

911
912
1787.	[port]		HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.

913
914
915
916
1786.	[port]		AIX: libt_api needs to be taught to look for
			T_testlist in the main executable (--with-libtool).
			[RT #13239]

917
918
919
1785.	[bug]		libbind9.la/libbind9.so needs to link against
			libisc.la/libisc.so.

920
921
922
923
1784.	[cleanup]	"libtool -allow-undefined" is the default.
			Leave hooks in configure to allow it to be set
			if needed in the future.

924
925
926
1783.	[cleanup]	We only need one copy of libtool.m4, ltmain.sh in the
			source tree.

927
928
1782.	[port]		OSX: --with-libtool + --enable-libbind broke on
			__evOptMonoTime.  [RT #13219]
Mark Andrews's avatar
Mark Andrews committed
929

930
1781.	[port]		FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
Mark Andrews's avatar
Mark Andrews committed
931

932
933
1780.	[bug]		Update libtool to 1.5.10.

934
935
1779.	[port]		OSF 5.1: libtool didn't handle -pthread correctly.

936
1778.	[port]		HUX 11.11: fix broken IN6ADDR_ANY_INIT and
937
938
			IN6ADDR_LOOPBACK_INIT macros.

939
1777.	[port]		OSF 5.1: fix broken IN6ADDR_ANY_INIT and
940
			IN6ADDR_LOOPBACK_INIT macros.
941

942
943
1776.	[port]		Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
			IN6ADDR_LOOPBACK_INIT macros.
Mark Andrews's avatar
Mark Andrews committed
944

945
946
1775.	[bug]		Only compile getnetent_r.c when threaded. [RT #13205]

947
948
1774.	[port]		Aix: Silence compiler warnings / build failures.
			[RT #13154]
Mark Andrews's avatar
Mark Andrews committed
949

950
1773.	[bug]		Fast retry on host / net unreachable. [RT #13153]
Mark Andrews's avatar
Mark Andrews committed
951

Mark Andrews's avatar
Mark Andrews committed
952
953
1772.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
954
955
1771.	[placeholder]

956
957
958
1770.	[bug]		named-checkconf failed to report missing a missing
			file clause for rbt{64} master/hint zones. [RT#13009]

959
960
961
1769.	[port]		win32: change compiler flags /MTd ==> /MDd,
			/MT ==> /MD.

962
963
964
1768.	[bug]		nsecnoexistnodata() could be called with a non-NSEC
			rdataset. [RT #12907]

965
966
1767.	[port]		Builds on IPv6 platforms without IPv6 Advanced API
			support for (struct in6_pktinfo) failed.  [RT #13077]
Mark Andrews's avatar
Mark Andrews committed
967

968
969
1766.	[bug]		Update the master file timestamp on successful refresh
			as well as the journal's timestamp. [RT# 13062]
Mark Andrews's avatar
Mark Andrews committed
970

971
972
1765.	[bug]		configure --with-openssl=auto failed. [RT #12937]

973
974
975
1764.	[bug]		dns_zone_replacedb failed to emit a error message
			if there was no SOA record in the replacment db.
			[RT #13016]
Mark Andrews's avatar
Mark Andrews committed
976

977
978
1763.	[func]		Perform sanity checks on NS records which refer to
			'in zone' names. [RT #13002]
Mark Andrews's avatar
Mark Andrews committed
979

980
981
1762.	[bug]		isc_interfaceiter_create() could return ISC_R_SUCCESS
			even when it failed. [RT #12995]
Mark Andrews's avatar
Mark Andrews committed
982

983
984
1761.	[bug]		'rndc dumpdb' didn't report unassociated entries.
			[RT #12971]
Mark Andrews's avatar
Mark Andrews committed
985

986
987
1760.	[bug]		Host / net unreachable was not penalising rtt
			estimates. [RT #12970]
Mark Andrews's avatar
Mark Andrews committed
988

989
990
1759.	[bug]		Named failed to startup if the OS supported IPv6
			but had no IPv6 interfaces configured. [RT #12942]
Mark Andrews's avatar
Mark Andrews committed
991

992
1758.	[func]		Don't send notify messages to self. [RT #12933]
Mark Andrews's avatar
Mark Andrews committed
993

994
1757.	[func]		host now can turn on memory debugging flags with '-m'.
Mark Andrews's avatar
Mark Andrews committed
995

996
997
1756.	[func]		named-checkconf now checks the logging configuration.
			[RT #12352]
Mark Andrews's avatar
Mark Andrews committed
998

999
1000
1755.	[func]		allow-update is now settable at the options / view
			level. [RT #6636]
Mark Andrews's avatar
Mark Andrews committed
1001

1002
1003
1004
1754.	[bug]		We wern't always attempting to query the parent
			server for the DS records at the zone cut.
			[RT #12774]
Mark Andrews's avatar
Mark Andrews committed
1005

1006
1007
1008
1753.	[bug]		Don't serve a slave zone which has no NS records.
			[RT #12894]

1009
1010
1011
1012
1752.	[port]		Move isc_app_start() to after ns_os_daemonise()
			as some fork() implementations unblock the signals
			that are blocked by isc_app_start(). [RT #12810]

1013
1014
1751.	[bug]		--enable-getifaddrs failed under linux. [RT #12867]

1015
1016
1017
1750.	[port]		lib/bind/make/rules.in:subdirs was not bash friendly.
			[RT #12864]

1018
1019
1749.	[bug]		'check-names response ignore;' failed to ignore.
			[RT #12866]
Mark Andrews's avatar
Mark Andrews committed
1020

1021
1022
1748.	[func]		dig now returns the byte count for axfr/ixfr.
			
1023
1024
1025
1747.	[bug]		BIND 8 compatability: named/named-checkconf failed
			to parse "host-statistics-max" in named.conf.

Mark Andrews's avatar
Mark Andrews committed
1026
1746.	[func]		Make public the function to read a key file,
1027
1028
			dst_key_read_public(). [RT #12450]

1029
1030
1031
1745.	[bug]		Dig/host/nslookup accept replies from link locals
			regardless of scope if no scope was specified when
			query was sent. [RT #12745]
Mark Andrews's avatar
Mark Andrews committed
1032

1033
1034
1035
1744.	[bug]		If tuple2msgname() failed to convert a tuple to
			a name a REQUIRE could be triggered. [RT #12796]

1036
1743.	[bug]		If isc_taskmgr_create() was not able to create the
1037
1038
1039
1040
			requested number of worker threads then destruction
			of the manager would trigger an INSIST() failure.
			[RT #12790]
			
1041
1042
1043
1044
1045
1742.	[bug]		Deleting all records at a node then adding a
			previously existing record, in a single UPDATE
			transaction, failed to leave / regenerate the
			associated RRSIG records. [RT #12788]

1046
1047
1048
1741.	[bug]		Deleting all records at a node in a secure zone
			using a update-policy grant failed. [RT #12787]

1049
1050
1051
1052
1053
1054
1740.	[bug]		Replace rbt's hash algorithm as it performed badly
			with certain zones. [RT #12729]
			
			NOTE: a hash context now needs to be established
			via isc_hash_create() if the application was not
			already doing this.
Mark Andrews's avatar
Mark Andrews committed
1055

1056
1057
1739.	[bug]		dns_rbt_deletetree() could incorrectly return
			ISC_R_QUOTA.  [RT #12695]
Mark Andrews's avatar
Mark Andrews committed
1058

1059
1738.	[bug]		Enable overrun checking by default. [RT #12695]
Mark Andrews's avatar
Mark Andrews committed
1060

Mark Andrews's avatar
Mark Andrews committed
1061
1737.	[bug]		named failed if more than 16 masters were specified.
1062
1063
			[RT #12627]

1064
1065
1066
1736.	[bug]		dst_key_fromnamedfile() could fail to read a
			public key. [RT #12687]
			
1067
1068
1069
1735.	[bug]		'dig +sigtrace' could die with a REQUIRE failure.
			[RE #12688]

1070
1071
1072
1734.	[cleanup]	'rndc-confgen -a -t' remove extra '/' in path.
			[RT #12588]

1073
1074
1733.	[bug]		Return non-zero exit status on initial load failure.
			[RT #12658]
Mark Andrews's avatar
Mark Andrews committed
1075

1076
1077
1732.	[bug]		'rrset-order name "*"' wasn't being applied to ".".
			[RT #12467]
Mark Andrews's avatar
Mark Andrews committed
1078

1079
1080
1731.	[port]		darwin: relax version test in ifconfig.sh.
			[RT #12581]
Mark Andrews's avatar
Mark Andrews committed
1081

1082
1083
1730.	[port]		Determine the length type used by the socket API.
			[RT #12581]
Mark Andrews's avatar
Mark Andrews committed
1084

1085
1729.	[func]		Improve check-names error messages.
Mark Andrews's avatar
Mark Andrews committed
1086