CHANGES 263 KB
Newer Older
1 2 3 4
2534.	[func]		Check NAPTR records regular expressions and
			replacement strings to ensure they are syntaxically
			valid and consistant. [RT #18168]

5 6
2533.	[doc]		ARM: document @ (at-sign). [RT #17144]

7 8 9
2532.	[bug]		dig: check the question section of the response to
			see if it matches the asked question. [RT #18495]

10 11
2531.	[bug]		Change #2207 was incomplete. [RT #19098]

12 13 14
2530.	[bug]		named failed to reject insecure to secure transitions
			via UPDATE. [RT #19101]

15 16 17
2529.	[cleanup]	Upgrade libtool to silence complaints from recent
			version of autoconf. [RT #18657]

18 19 20
2528.   [cleanup]       Silence spurious configure warning about
                        --datarootdir [RT #19096]

21 22
2527.	[placeholder]

23 24
2526.	[func]		New named option "attach-cache" that allows multiple
			views to share a single cache to save memory and
25 26
			improve lookup efficiency.  Based on contributed code
			from Barclay Osborn, Google. [RT #18905]
27

28 29 30 31
2525.	[func]		New logging category "query-errors" to provide detailed
			internal information about query failures, especially
			about server failures. [RT #19027]

32 33
2524.	[port]		sunos: dnssec-signzone needs strtoul(). [RT #19129]

34 35 36
2523.	[bug]		Random type rdata freed by dns_nsec_typepresent().
			[RT #19112]

Francis Dupont's avatar
Francis Dupont committed
37
2522.	[security]	Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
Mark Andrews's avatar
Mark Andrews committed
38

39 40
2521.	[bug]		Improve epoll cross compilation support. [RT #19047]

41 42 43
2520.	[bug]		Update xml statistics version number to 2.0 as change
			#2388 made the schema incompatible to the previous
			version. [RT #19080]
44

45 46 47 48
2519.	[bug]		dig/host with -4 or -6 didn't work if more than two
			nameserver addresses of the excluded address family
			preceded in resolv.conf. [RT #19081]

49 50 51
2518.	[func]		Add support for the new CERT types from RFC 4398.
			[RT #19077]

52
2517.	[bug]		dig +trace with -4 or -6 failed when it chose a
53
			nameserver address of the excluded address.
54 55
			[RT #18843]

56 57 58
2516.	[bug]		glue sort for responses was performed even when not
			needed. [RT #19039]

59 60 61
2515.	[port]		win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
			[RT #19063]

62
2514.	[bug]		dig/host failed with -4 or -6 when resolv.conf contains
63
			a nameserver of the excluded address family.
64 65 66
			[RT #18848]

2513.	[bug]		Fix windows cli build. [RT #19062]
67

68 69 70
2512.	[func]		Print a summary of the cached records which make up
			the negative response.  [RT #18885]

71 72 73
2511.	[cleanup]	dns_rdata_tofmttext() add const to linebreak.
			[RT #18885]

Mark Andrews's avatar
reword  
Mark Andrews committed
74 75
2510.	[bug]		"dig +sigchase" could trigger REQUIRE failures.
			[RT #19033]
76

77 78 79
2509.	[bug]		Specifying a fixed query source port was broken.
			[RT #19051]

80 81
2508.	[placeholder]

82 83 84 85
2507.	[func]		Log the recursion quota values when killing the
			oldest query or refusing to recurse due to quota.
			[RT #19022]

86 87 88
2506.	[port]		solaris: Check at configure time if 
			hack_shutup_pthreadonceinit is needed. [RT #19037]

89 90 91
2505.	[port]		Treat amd64 similarly to x86_64 when determining
			atomic operation support. [RT #19031]

92 93
2504.	[bug]		Address race condition in the socket code. [RT #18899]

94 95 96
2503.	[port]		linux: improve compatibility with Linux Standard
			Base. [RT #18793]

97 98 99
2502.	[cleanup]	isc_radix: Improve compliance with coding style,
			document function in <isc/radix.h>. [RT #18534]

100 101 102 103
2501.	[func]		$GENERATE now supports all rdata types.  Multi-field
			rdata types need to be quoted.  See the ARM for
			details. [RT #18368]

Francis Dupont's avatar
Francis Dupont committed
104
2500.	[contrib]	contrib/sdb/pgsql/zonetodb.c called non-existent
105 106
			function. [RT #18582]

107 108
2499.	[port]		solaris: lib/lwres/getaddrinfo.c namespace clash.
			[RT #18837]
Mark Andrews's avatar
Mark Andrews committed
109 110 111

	--- 9.6.0rc1 released ---

112 113 114 115 116
2498.	[bug]		Removed a bogus function argument used with
			ISC_SOCKET_USE_POLLWATCH: it could cause compiler
			warning or crash named with the debug 1 level
			of logging. [RT #18917]

117 118 119
2497.	[bug]		Don't add RRSIG bit to NSEC3 bit map for insecure
			delegation.

120 121
2496.	[bug]		Add sanity length checks to NSID option. [RT #18813]

122 123
2495.	[bug]		Tighten RRSIG checks. [RT #18795]

124 125 126
2494.	[bug]		isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
			installed. [RT #18826]

127
2493.	[bug]		The linux capabilities code was not correctly cleaning
128 129
			up after itself. [RT #18767]

Mark Andrews's avatar
Mark Andrews committed
130
2492.	[func]		Rndc status now reports the number of cpus discovered
131 132 133
			and the number of worker threads when running
			multi-threaded. [RT #18273]

134 135 136
2491.	[func]		Attempt to re-use a local port if we are already using
			the port. [RT #18548]

137 138 139
2490.	[port]		aix: work around a kernel bug where IPV6_RECVPKTINFO
			is cleared when IPV6_V6ONLY is set. [RT #18785]

140 141 142 143 144 145
2489.	[port]		solaris: Workaround Solaris's kernel bug about
			/dev/poll:
			http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
			Define ISC_SOCKET_USE_POLLWATCH at build time to enable
			this workaround. [RT #18870]

146 147 148
2488.	[func]		Added a tool, dnssec-dsfromkey, to generate DS records
			from keyset and .key files. [RT #18694]

149 150
2487.	[bug]		Give TCP connections longer to complete. [RT #18675]

151 152 153 154 155 156 157 158 159
2486.	[func]		The default locations for named.pid and lwresd.pid
			are now /var/run/named/named.pid and
			/var/run/lwresd/lwresd.pid respectively.

			This allows the owner of the containing directory
			to be set, for "named -u" support, and allows there
			to be a permanent symbolic link in the path, for
			"named -t" support.  [RT #18306]

160
2485.	[bug]		Change update's the handling of obscured RRSIG
161
			records.  Not all orphaned DS records were being
162 163
			removed. [RT #18828]

164 165 166 167
2484.	[bug]		It was possible to trigger a REQUIRE failure when
			adding NSEC3 proofs to the response in
			query_addwildcardproof().  [RT #18828]

Francis Dupont's avatar
Francis Dupont committed
168 169
2483.	[port]		win32: chroot() is not supported. [RT #18805]

Francis Dupont's avatar
Francis Dupont committed
170 171
2482.	[port]		libxml2: support versions 2.7.* in addition
			to 2.6.*. [RT #18806]
Mark Andrews's avatar
9.6.0b1  
Mark Andrews committed
172 173 174

	--- 9.6.0b1 released ---

175 176 177 178 179 180
2481.	[bug]		rbtdb.c:matchparams() failed to handle NSEC3 chain
			collisions.  [RT #18812]

2480.	[bug]		named could fail to emit all the required NSEC3
			records.  [RT #18812]

181
2479.	[bug]		xfrout:covers was not properly initialized. [RT #18801]
182

183
2478.	[bug]		'addresses' could be used uninitialized in
Mark Andrews's avatar
Mark Andrews committed
184
			configure_forward(). [RT #18800]
185 186
	
2477.	[bug]		dig: the global option to print the command line is
187 188 189
			+cmd not print_cmd.  Update the output to reflect
			this. [RT #17008]

190 191 192
2476.	[doc]		ARM: improve documentation for max-journal-size and
			ixfr-from-differences. [RT #15909] [RT #18541]

193
2475.	[bug]		LRU cache cleanup under overmem condition could purge
Mark Andrews's avatar
Mark Andrews committed
194
			particular entries more aggressively. [RT #17628]
195

196 197 198
2474.	[bug]		ACL structures could be allocated with insufficient
			space, causing an array overrun. [RT #18765]

199 200 201 202 203
2473.	[port]		linux: raise the limit on open files to the possible
			maximum value before spawning threads; 'files'
		        specified in named.conf doesn't seem to work with
			threads as expected. [RT #18784]

204
2472.	[port]		linux: check the number of available cpu's before
Mark Andrews's avatar
Mark Andrews committed
205
			calling chroot as it depends on "/proc". [RT #16923]
206

Mark Andrews's avatar
Mark Andrews committed
207
2471.	[bug]		named-checkzone was not reporting missing mandatory
208 209
			glue when sibling checks were disabled. [RT #18768]

210
2470.	[bug]		Elements of the isc_radix_node_t could be incorrectly
Mark Andrews's avatar
Mark Andrews committed
211
			overwritten.  [RT# 18719]
212

213 214 215
2469.	[port]		solaris: Work around Solaris's select() limitations.
			[RT #18769]

216 217 218
2468.	[bug]		Resolver could try unreachable servers multiple times.
			[RT #18739]

219 220
2467.	[bug]		Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]

221 222 223
2466.	[doc]		ARM: explain max-cache-ttl 0 SERVFAIL issue.
			[RT #18302]

224 225 226
2465.	[bug]		Adb's handling of lame addresses was different
			for IPv4 and IPv6. [RT #18738]

227 228 229
2464.	[port]		linux: check that a capability is present before
			trying to set it. [RT #18135]

230 231 232
2463.   [port]          linux: POSIX doesn't include the IPv6 Advanced Socket
			API and glibc hides parts of the IPv6 Advanced Socket
			API as a result.  This is stupid as it breaks how the
233 234
			two halves (Basic and Advanced) of the IPv6 Socket API
			were designed to be used but we have to live with it.
235 236 237
			Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
			API. [RT #18388]

238 239 240
2462.	[doc]		Document -m (enable memory usage debugging)
			option for dig. [RT #18757]

241 242
2461.	[port]		sunos: Change #2363 was not complete. [RT #17513]

Mark Andrews's avatar
Mark Andrews committed
243 244 245 246 247
	--- 9.6.0a1 released ---

2460.	[bug]		Don't call dns_db_getnsec3parameters() on the cache.
			[RT #18697]

248 249
2459.	[contrib]	Import dnssec-zkt to contrib/zkt. [RT #18448]

250 251 252
2458.	[doc]		ARM: update and correction for max-cache-size.
			[RT #18294]

253 254
2457.	[tuning]	max-cache-size is reverted to 0, the previous
			default.  It should be safe because expired cache
Tatuya JINMEI 神明達哉's avatar
Tatuya JINMEI 神明達哉 committed
255
			entries are also purged. [RT #18684]
256

257 258 259 260
2456.	[bug]		In ACLs, ::/0 and 0.0.0.0/0 would both match any
			address, regardless of family.  They now correctly
			distinguish IPv4 from IPv6.  [RT #18559]
                        
Mark Andrews's avatar
Mark Andrews committed
261
2455.	[bug]		Stop metadata being transferred via axfr/ixfr.
262 263
			[RT #18639]

264 265
2454.	[func]		nsupdate: you can now set a default ttl. [RT #18317]

266 267 268 269 270
2453.	[bug]		Remove NULL pointer dereference in dns_journal_print().
			[RT #18316]

2452.	[func]		Improve bin/test/journalprint. [RT #18316]

271 272
2451.	[port]		solaris: handle runtime linking better. [RT #18356]

273 274 275
2450.	[doc]		Fix lwresd docbook problem for manual page.
			[RT #18672]

Mark Andrews's avatar
Mark Andrews committed
276 277
2449.	[placeholder]

278 279
2448.	[func]		Add NSEC3 support. [RT #15452]

Mark Andrews's avatar
Mark Andrews committed
280
2447.	[cleanup]	libbind has been split out as a separate product.
281

282 283 284 285
2446.	[func]		Add a new log message about build options on startup.
			A new command-line option '-V' for named is also
			provided to show this information. [RT# 18645]

286 287 288 289
2445.	[doc]		ARM out-of-date on empty reverse zones (list includes
			RFC1918 address, but these are not yet compiled in).
			[RT #18578]

Mark Andrews's avatar
Mark Andrews committed
290
2444.	[port]		Linux, FreeBSD, AIX: Turn off path mtu discovery
291 292
			(clear DF) for UDP responses and requests.

293 294 295 296 297
2443.	[bug]		win32: UDP connect() would not generate an event,
			and so connected UDP sockets would never clean up.
			Fix this by doing an immediate WSAConnect() rather
			than an io completion port type for UDP.

298 299
2442.	[bug]		A lock could be destroyed twice. [RT# 18626]

300 301 302 303 304 305 306 307 308
2441.   [bug]           isc_radix_insert() could copy radix tree nodes
			incompletely. [RT #18573]

2440.   [bug]		named-checkconf used an incorrect test to determine
			if an ACL was set to none.

2439.   [bug]		Potential NULL dereference in dns_acl_isanyornone().
			[RT #18559]

309
2438.   [bug]		Timeouts could be logged incorrectly under win32.
Evan Hunt's avatar
Evan Hunt committed
310

Evan Hunt's avatar
Evan Hunt committed
311 312 313
2437.	[bug]		Sockets could be closed too early, leading to
			inconsistent states in the socket module. [RT #18298]

314
2436.	[security]	win32: UDP client handler can be shutdown. [RT #18576]
Mark Andrews's avatar
Mark Andrews committed
315

316 317
2435.	[bug]		Fixed an ACL memory leak affecting win32.

318 319
2434.	[bug]		Fixed a minor error-reporting bug in
			lib/isc/win32/socket.c.
Evan Hunt's avatar
Evan Hunt committed
320

321 322
2433.	[tuning]	Set initial timeout to 800ms.

323 324 325 326
2432.   [bug]		More Windows socket handling improvements.  Stop
			using I/O events and use IO Completion Ports
			throughout.  Rewrite the receive path logic to make
			it easier to support multiple simultaneous
Mark Andrews's avatar
Mark Andrews committed
327
			requesters in the future.  Add stricter consistency
328 329
			checking as a compile-time option (define
			ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
Evan Hunt's avatar
Evan Hunt committed
330

331 332
2431.	[bug]		Acl processing could leak memory. [RT #18323]

333 334 335 336
2430.	[bug]		win32: isc_interval_set() could round down to
			zero if the input was less than NS_INTERVAL
			nanoseconds.  Round up instead. [RT #18549]

337 338 339
2429.	[doc]		nsupdate should be in section 1 of the man pages.
			[RT #18283]

340 341 342
2428.	[bug]		dns_iptable_merge() mishandled merges of negative
			tables. [RT #18409]

343 344 345
2427.	[func]		Treat DNSKEY queries as if "minimal-response yes;"
			was set. [RT #18528]

346
2426.	[bug]		libbind: inet_net_pton() can sometimes return the
Mark Andrews's avatar
Mark Andrews committed
347
			wrong value if excessively large net masks are
348 349
			supplied. [RT #18512]

350 351 352
2425.	[bug]		named didn't detect unavailable query source addresses
			at load time. [RT #18536]

353 354 355 356 357
2424.	[port]		configure now probes for a working epoll
			implementation.  Allow the use of kqueue,
			epoll and /dev/poll to be selected at compile
			time. [RT #18277]
			
358
2423.   [security]	Randomize server selection on queries, so as to
Evan Hunt's avatar
Evan Hunt committed
359 360 361 362 363 364
                        make forgery a little more difficult.  Instead of
                        always preferring the server with the lowest RTT,
                        pick a server with RTT within the same 128
                        millisecond band.  [RT #18441]

2422.	[bug]		Handle the special return value of a empty node as
365 366
			if it was a NXRRSET in the validator. [RT #18447]

Evan Hunt's avatar
Evan Hunt committed
367
2421.	[func]		Add new command line option '-S' for named to specify
368 369 370 371
			the max number of sockets. [RT #18493]
			Use caution: this option may not work for some
			operating systems without rebuilding named.

372
2420.   [bug]		Windows socket handling cleanup.  Let the io
373
			completion event send out canceled read/write
Mark Andrews's avatar
Mark Andrews committed
374
			done events, which keeps us from writing to memory
375 376 377
			we no longer have ownership of.  Add debugging
			socket_log() function.  Rework TCP socket handling
			to not leak sockets.
Evan Hunt's avatar
Evan Hunt committed
378

379 380 381 382
2419.	[cleanup]	Document that isc_socket_create() and isc_socket_open()
			should not be used for isc_sockettype_fdwatch sockets.
			[RT #18521]

383 384 385
2418.	[bug]		AXFR request on a DLZ could trigger a REQUIRE failure
			[RT #18430]

386 387 388 389
2417.	[bug]		Connecting UDP sockets for outgoing queries could
			unexpectedly fail with an 'address already in use'
			error. [RT #18411]

390 391 392
2416.	[func]		Log file descriptors that cause exceeding the
			internal maximum. [RT #18460]

393 394 395
2415.	[bug]		'rndc dumpdb' could trigger various assertion failures
			in rbtdb.c. [RT #18455]

396 397 398 399
2414.	[bug]		A masterdump context held the database lock too long,
			causing various troubles such as dead lock and
			recursive lock acquisition. [RT #18311, #18456]

400 401
2413.	[bug]		Fixed an unreachable code path in socket.c. [RT #18442]

402
2412.	[bug]		win32: address a resource leak. [RT #18374]
403

404 405 406 407
2411.	[bug]		Allow using a larger number of sockets than FD_SETSIZE
			for select().  To enable this, set ISC_SOCKET_MAXSOCKETS
			at compilation time.  [RT #18433]

408 409 410 411
			Note: with changes #2469 and #2421 above, there is no
			need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
			any more.

412 413
2410.	[bug]		Correctly delete m_versionInfo. [RT #18432]

Mark Andrews's avatar
Mark Andrews committed
414
2409.	[bug]		Only log that we disabled EDNS processing if we were
415 416
			subsequently successful.  [RT #18029]

417 418 419 420
2408.	[bug]		A duplicate TCP dispatch event could be sent, which
			could then trigger an assertion failure in
			resquery_response().  [RT #18275]

421 422
2407.	[port]		hpux: test for sys/dyntune.h. [RT #18421]

Evan Hunt's avatar
Evan Hunt committed
423
2406.	[placeholder]
424

425 426 427 428
2405.   [cleanup]       The default value for dnssec-validation was changed to
                        "yes" in 9.5.0-P1 and all subsequent releases; this
                        was inadvertently omitted from CHANGES at the time.

429 430
2404.	[port]		hpux: files unlimited support.

431 432
2403.	[bug]		TSIG context leak. [RT #18341]

433 434
2402.	[port]		Support Solaris 2.11 and over. [RT #18362]

435 436 437
2401.	[bug]		Expect to get E[MN]FILE errno internal_accept()
			(from accept() or fcntl() system calls). [RT #18358]

Tatuya JINMEI 神明達哉's avatar
Tatuya JINMEI 神明達哉 committed
438
2400.	[bug]		Log if kqueue()/epoll_create()/open(/dev/poll) fails.
439 440
			[RT #18297]

441 442
2399.	[placeholder]

443
2398.	[bug]           Improve file descriptor management.  New,
444 445 446
			temporary, named.conf option reserved-sockets,
			default 512. [RT #18344]

447 448
2397.	[bug]		gssapi_functions had too many elements. [RT #18355]

449 450 451
2396.	[bug]		Don't set SO_REUSEADDR for randomized ports.
			[RT #18336]

452 453 454
2395.	[port]		Avoid warning and no effect from "files unlimited"
			on Linux when running as root. [RT #18335]

455 456 457
2394.	[bug]		Default configuration options set the limit for
			open files to 'unlimited' as described in the
			documentation. [RT #18331]
458

459 460 461 462 463
2393.	[bug]		nested acls containing keys could trigger an
			assertion in acl.c. [RT #18166]

2392.	[bug]		remove 'grep -q' from acl test script, some platforms
			don't support it. [RT #18253]
464 465

2391.	[port]		hpux: cover additional recvmsg() error codes.
466 467
			[RT #18301]

468
2390.	[bug]		dispatch.c could make a false warning on 'odd socket'.
469 470
			[RT #18301].

471
2389.	[bug]		Move the "working directory writable" check to after
Mark Andrews's avatar
Mark Andrews committed
472
			the ns_os_changeuser() call. [RT #18326]
473

474 475 476
2388.	[bug]		Avoid using tables for layout purposes in
			statistics XSL [RT #18159].

477 478 479
2387.	[bug]		Silence compiler warnings in lib/isc/radix.c.
			[RT #18147] [RT #18258]

480 481
2386.	[func]		Add warning about too small 'open files' limit.
			[RT #18269]
482

483 484 485
2385.	[bug]		A condition variable in socket.c could leak in
			rare error handling [RT #17968].

486 487 488
2384.	[security]	Fully randomize UDP query ports to improve
			forgery resilience. [RT #17949, #18098]

489 490
2383.	[bug]		named could double queries when they resulted in
			SERVFAIL due to overkilling EDNS0 failure detection.
Tatuya JINMEI 神明達哉's avatar
Tatuya JINMEI 神明達哉 committed
491
			[RT #18182]
492

493 494 495
2382.	[doc]		Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
			to ARM.

496 497 498 499
2381.	[port]		dlz/mysql: support multiple install layouts for
			mysql.  <prefix>/include/{,mysql/}mysql.h and
			<prefix>/lib/{,mysql/}. [RT #18152]

500 501 502 503 504
2380.	[bug]		dns_view_find() was not returning NXDOMAIN/NXRRSET
			proofs which, in turn, caused validation failures
			for insecure zones immediately below a secure zone
			the server was authoritative for. [RT #18112] 

505 506 507
2379.	[contrib]	queryperf/gen-data-queryperf.py: removed redundant
			TLDs and supported RRs with TTLs [RT #17972]

508 509 510
2378.	[bug]		gssapi_functions{} had a redundant member in BIND 9.5.
			[RT #18169]

511 512
2377.	[bug]		Address race condition in dnssec-signzone. [RT #18142]

Mark Andrews's avatar
Mark Andrews committed
513
2376.	[bug]		Change #2144 was not complete.
514

515
2375.	[placeholder]
Mark Andrews's avatar
Mark Andrews committed
516 517

2374.	[bug]		"blackhole" ACLs could cause named to segfault due
518 519
			to some uninitialized memory. [RT #18095]

Mark Andrews's avatar
Mark Andrews committed
520
2373.	[bug]		Default values of zone ACLs were re-parsed each time a
521 522
			new zone was configured, causing an overconsumption
			of memory. [RT #18092]
523

Mark Andrews's avatar
Mark Andrews committed
524
2372.	[bug]		Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
525

Mark Andrews's avatar
Mark Andrews committed
526
2371.	[doc]		Add +nsid option to dig man page. [RT #18039]
527

Mark Andrews's avatar
Mark Andrews committed
528 529
2370.	[bug]		"rndc freeze" could trigger an assertion in named
			when called on a nonexistent zone. [RT #18050]
530

531 532 533
2369.	[bug]		libbind: Array bounds overrun on read in bitncmp().
			[RT #18054]

Mark Andrews's avatar
Mark Andrews committed
534 535
2368.	[port]		Linux: use libcap for capability management if
			possible. [RT# 18026]
536

Mark Andrews's avatar
Mark Andrews committed
537 538
2367.	[bug]		Improve counting of dns_resstatscounter_retry
			[RT #18030]
539

540 541
2366.	[bug]		Adb shutdown race. [RT #18021]

Mark Andrews's avatar
Mark Andrews committed
542 543
2365.	[bug]		Fix a bug that caused dns_acl_isany() to return
			spurious results. [RT #18000]
544

545 546 547
2364.	[bug]		named could trigger a assertion when serving a
			malformed signed zone. [RT #17828]

548 549 550
2363.	[port]		sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
			[RT #17513]

Mark Andrews's avatar
Mark Andrews committed
551 552 553
2362.   [cleanup]	Make "rrset-order fixed" a compile-time option.
			settable by "./configure --enable-fixed-rrset".
			Disabled by default. [RT #17977]
554

555 556 557
2361.	[bug]		"recursion" statistics counter could be counted
			multiple times for a single query.  [RT #17990]

558 559 560
2360.	[bug]		Fix a condition where we release a database version
			(which may acquire a lock) while holding the lock.

561 562
2359.	[bug]		Fix NSID bug. [RT #17942]

563 564
2358.	[doc]		Update host's default query description. [RT #17934]

565 566 567
2357.	[port]		Don't use OpenSSL's engine support in versions before
			OpenSSL 0.9.7f. [RT #17922]

Mark Andrews's avatar
Mark Andrews committed
568
2356.	[bug]		Built in mutex profiler was not scalable enough.
569 570
			[RT #17436]

571 572 573
2355.	[func]		Extend the number statistics counters available.
			[RT #17590]

Mark Andrews's avatar
Mark Andrews committed
574
2354.	[bug]		Failed to initialize some rdatasetheader_t elements.
575 576
			[RT #17927]

577 578 579 580 581 582 583
2353.	[func]		Add support for Name Server ID (RFC 5001).
			'dig +nsid' requests NSID from server.
			'request-nsid yes;' causes recursive server to send
			NSID requests to upstream servers.  Server responds
			to NSID requests with the string configured by
			'server-id' option.  [RT #17091]

584 585
2352.	[bug]		Various GSS_API fixups. [RT #17729]

586 587
2351.	[bug]		convertxsl.pl generated very long lines. [RT #17906]

588 589
2350.	[port]		win32: IPv6 support. [RT #17797]

590 591 592
2349.	[func]		Provide incremental re-signing support for secure
			dynamic zones. [RT #1091]

Francis Dupont's avatar
Francis Dupont committed
593 594
2348.	[func]		Use the EVP interface to OpenSSL. Add PKCS#11 support.
			Documentation is in the new README.pkcs11 file.
595
			New tool, dnssec-keyfromlabel, which takes the
596 597 598
			label of a key pair in a HSM and constructs a DNS
			key pair for use by named and dnssec-signzone.
			[RT #16844]
Francis Dupont's avatar
Francis Dupont committed
599

Francis Dupont's avatar
Francis Dupont committed
600 601 602
2347.	[bug]		Delete now traverses the RB tree in the canonical
			order. [RT #17451]

603 604 605
2346.	[func]		Memory statistics now cover all active memory contexts
			in increased detail. [RT #17580]

606 607 608 609
2345.	[bug]		named-checkconf failed to detect when forwarders
			were set at both the options/view level and in
			a root zone. [RT #17671]

610 611 612
2344.	[bug]		Improve "logging{ file ...; };" documentation.
			[RT #17888]

613 614 615
2343.	[bug]		(Seemingly) duplicate IPv6 entries could be
			created in ADB. [RT #17837]

616 617
2342.	[func]		Use getifaddrs() if available under Linux. [RT #17224]

618 619 620
2341.	[bug]		libbind: add missing -I../include for off source
			tree builds. [RT #17606]

621 622
2340.	[port]		openbsd: interface configuration. [RT #17700]

623 624
2339.	[port]		tru64: support for libbind. [RT #17589]

Mark Andrews's avatar
Mark Andrews committed
625
2338.	[bug]		check_ds() could be called with a non DS rdataset.
626 627
			[RT #17598]

Mark Andrews's avatar
Mark Andrews committed
628
2337.	[bug]		BUILD_LDFLAGS was not being correctly set.  [RT #17614]
629

630 631 632 633
2336.	[func]		If "named -6" is specified then listen on all IPv6
			interfaces if there are not listen-on-v6 clauses in
			named.conf.  [RT #17581]

634 635 636
2335.	[port]		sunos:  libbind and *printf() support for long long. 
			[RT #17513]

637 638 639
2334.	[bug]		Bad REQUIRES in fromstruct_in_naptr(),  off by one
			bug in fromstruct_txt(). [RT #17609]
			
640 641 642
2333.	[bug]		Fix off by one error in isc_time_nowplusinterval().
			[RT #17608]

643 644
2332.	[contrib]	query-loc-0.4.0. [RT #17602]

Mark Andrews's avatar
80 cols  
Mark Andrews committed
645
2331.	[bug]		Failure to regenerate any signatures was not being
Mark Andrews's avatar
Mark Andrews committed
646 647
			reported nor being past back to the UPDATE client.
			[RT #17570]
648

649 650 651 652 653 654 655
2330.	[bug]		Remove potential race condition when handling
			over memory events. [RT #17572]

			WARNING: API CHANGE: over memory callback
			function now needs to call isc_mem_waterack().
			See <isc/mem.h> for details.

656 657
2329.	[bug]		Clearer help text for dig's '-x' and '-i' options.

658
2328.	[maint]		Add AAAA addresses for A.ROOT-SERVERS.NET,
659 660 661 662
			F.ROOT-SERVERS.NET, H.ROOT-SERVERS.NET,
			J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET and
			M.ROOT-SERVERS.NET.

Mark Andrews's avatar
Mark Andrews committed
663
2327.	[bug]		It was possible to dereference a NULL pointer in
Mark Andrews's avatar
Mark Andrews committed
664
			rbtdb.c.  Implement dead node processing in zones as
Mark Andrews's avatar
Mark Andrews committed
665
			we do for caches. [RT #17312]
666

667 668 669
2326.	[bug]		It was possible to trigger a INSIST in the acache
			processing.

670 671
2325.	[port]		Linux: use capset() function if available. [RT #17557]

Mark Andrews's avatar
80 cols  
Mark Andrews committed
672
2324.	[bug]		Fix IPv6 matching against "any;". [RT #17533]
673

674 675
2323.	[port]		tru64: namespace clash. [RT #17547]

676 677 678
2322.	[port]		MacOS: work around the limitation of setrlimit()
			for RLIMIT_NOFILE. [RT #17526]

Mark Andrews's avatar
Mark Andrews committed
679 680
2321.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
681
2320.	[func]		Make statistics counters thread-safe for platforms
682 683
			that support certain atomic operations. [RT #17466]

684
2319.	[bug]		Silence Coverity warnings in 
Evan Hunt's avatar
Evan Hunt committed
685
			lib/dns/rdata/in_1/apl_42.c. [RT #17469]
686

687
2318.	[port]		sunos fixes for libbind.  [RT #17514]
688

689 690
2317.	[bug]		"make distclean" removed bind9.xsl.h. [RT #17518]

691 692 693
2316.	[port]		Missing #include <isc/print.h> in lib/dns/gssapictx.c.
			[RT #17513]

694 695 696
2315.   [bug]           Used incorrect address family for mapped IPv4
                        addresses in acl.c. [RT #17519]

697 698 699
2314.	[bug]		Uninitialized memory use on error path in
			bin/named/lwdnoop.c.  [RT #17476]

700 701 702
2313.	[cleanup]	Silence Coverity warnings. Handle private stacks.
			[RT #17447] [RT #17478]

703 704 705
2312.	[cleanup]	Silence Coverity warning in lib/isc/unix/socket.c.
			[RT #17458]

706 707 708
2311.   [bug]           IPv6 addresses could match IPv4 ACL entries and
                        vice versa. [RT #17462]

Mark Andrews's avatar
Mark Andrews committed
709
2310.	[bug]		dig, host, nslookup: flush stdout before emitting
710
			debug/fatal messages.  [RT #17501]
711

712 713 714
2309.   [cleanup]       Fix Coverity warnings in lib/dns/acl.c and iptable.c.
                        [RT #17455]

715 716 717
2308.	[cleanup]	Silence Coverity warning in bin/named/controlconf.c.
			[RT #17495]

718 719
2307.	[bug]		Remove infinite loop from lib/dns/sdb.c. [RT #17496]

720 721 722
2306.	[bug]		Remove potential race from lib/dns/resolver.c.
			[RT #17470]

723 724
2305.	[security]	inet_network() buffer overflow. CVE-2008-0122.

725 726 727
2304.	[bug]		Check returns from all dns_rdata_tostruct() calls.
			[RT #17460]

728 729 730
2303.	[bug]		Remove unnecessary code from bin/named/lwdgnba.c.
			[RT #17471]

731 732
2302.	[bug]		Fix memset() calls in lib/tests/t_api.c. [RT #17472]

733 734 735
2301.	[bug]		Remove resource leak and fix error messages in
			bin/tests/system/lwresd/lwtest.c. [RT #17474]

736 737 738
2300.	[bug]		Fixed failure to close open file in 
			bin/tests/names/t_names.c. [RT #17473]

739 740 741
2299.	[bug]		Remove unnecessary NULL check in
			bin/nsupdate/nsupdate.c. [RT #17475]

742 743 744
2298.	[bug]		isc_mutex_lock() failure not caught in
			bin/tests/timers/t_timers.c. [RT #17468]

745 746 747
2297.	[bug]		isc_entropy_createfilesource() failure not caught in
			bin/tests/dst/t_dst.c. [RT #17467]

748 749 750
2296.	[port]		Allow docbook stylesheet location to be specified to
			configure. [RT #17457]

751 752 753
2295.	[bug]		Silence static overrun error in bin/named/lwaddr.c.
			[RT #17459]

754 755 756 757
2294.	[func]		Allow the experimental statistics channels to have
			multiple connections and ACL.
			Note: the stats-server and stats-server-v6 options
			available in the previous beta releases are replaced
Mark Andrews's avatar
Mark Andrews committed
758
			with the generic statistics-channels statement.
759

760 761
2293.	[func]		Add ACL regression test. [RT #17375]

762 763 764 765 766 767
2292.	[bug]		Log if the working directory is not writable.
			[RT #17312]

2291.   [bug]           PR_SET_DUMPABLE may be set too late.  Also report
			failure to set PR_SET_DUMPABLE. [RT #17312]

768 769 770
2290.	[bug]		Let AD in the query signal that the client wants AD
			set in the response. [RT #17301]

771 772 773
2289.	[func]		named-checkzone now reports the out-of-zone CNAME
			found. [RT #17309]

774 775 776
2288.	[port]		win32: mark service as running when we have finished
			loading.  [RT #17441]

777 778
2287.	[bug]		Use 'volatile' if the compiler supports it. [RT #17413]

779 780 781 782 783
2286.	[func]		Allow a TCP connection to be used as a weak
			authentication method for reverse zones.
			New update-policy methods tcp-self and 6to4-self.
			[RT #17378]

784 785 786
2285.	[func]		Test framework for client memory context management.
			[RT #17377]

787 788 789
2284.	[bug]		Memory leak in UPDATE prerequisite processing.
			[RT #17377]

790 791 792 793 794
2283.	[bug]		TSIG keys were not attaching to the memory
			context.  TSIG keys should use the rings
			memory context rather than the clients memory
			context. [RT #17377]

795
2282.	[bug]		Acl code fixups. [RT #17346] [RT #17374]
796

797 798 799
2281.	[bug]		Attempts to use undefined acls were not being logged.
			[RT #17307]

800 801 802
2280.	[func]		Allow the experimental http server to be reached
			over IPv6 as well as IPv4. [RT #17332]

803 804 805 806
2279.   [bug]           Use setsockopt(SO_NOSIGPIPE), when available,
			to protect applications from receiving spurious
			SIGPIPE signals when using the resolver.

807
2278.	[bug]		win32: handle the case where Windows returns no
Mark Andrews's avatar
Mark Andrews committed
808
			search list or DNS suffix. [RT #17354]
809

810 811 812
2277.	[bug]		Empty zone names were not correctly being caught at
			in the post parse checks. [RT #17357]

813 814
2276.	[bug]		Install <dst/gssapi.h>.  [RT# 17359]

815 816 817
2275.	[func]		Add support to dig to perform IXFR queries over UDP.
			[RT #17235]

Mark Andrews's avatar
Mark Andrews committed
818
2274.	[func]		Log zone transfer statistics. [RT #17336]
819

Mark Andrews's avatar
Mark Andrews committed
820
2273.	[bug]		Adjust log level to WARNING when saving inconsistent
821 822
			stub/slave master and journal files. [RT# 17279]

823 824 825
2272.	[bug]		Handle illegal dnssec-lookaside trust-anchor names.
			[RT #17262]

Michael Graff's avatar
Michael Graff committed
826 827
2271.	[bug]		Fix a memory leak in http server code [RT #17100]

828 829 830
2270.	[bug]		dns_db_closeversion() version->writer could be reset
			before it is tested. [RT #17290]

831 832
2269.	[contrib]	dbus memory leaks and missing va_end calls. [RT #17232]

833 834 835
2268.	[bug]		0.IN-ADDR.ARPA was missing from the empty zones
			list.

836 837
	--- 9.5.0b1 released ---

838 839 840 841
2267.   [bug]           Radix tree node_num value could be set incorrectly,
                        causing positive ACL matches to look like negative
                        ones.  [RT #17311]

842 843 844
2266.	[bug]		client.c:get_clientmctx() returned the same mctx
			once the pool of mctx's was filled. [RT #17218]

845 846 847
2265.	[bug]		Test that the memory context's basic_table is non NULL
			before freeing.  [RT #17265]

848 849
2264.	[bug]		Server prefix length was being ignored. [RT #17308]

850 851 852
2263.	[bug]		"named-checkconf -z" failed to set default value
			for "check-integrity".  [RT #17306]

853 854 855
2262.	[bug]		Error status from all but the last view could be
			lost. [RT #17292]

856 857
2261.   [bug]           Fix memory leak with "any" and "none" ACLs [RT #17272]

858
2260.	[bug]		Reported wrong clients-per-query when increasing the
859
                        value. [RT #17236]
Mark Andrews's avatar
Mark Andrews committed
860

861 862
2259.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
863 864
	--- 9.5.0a7 released ---

865 866 867
2258.	[bug]		Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
			[RT #17241]

868 869 870
2257.	[bug]		win32: Use the full path to vcredist_x86.exe when
			calling it. [RT #17222]

871 872 873
2256.	[bug]		win32: Correctly register the installation location of
			bindevt.dll. [RT #17159]

874
2255.	[maint]		L.ROOT-SERVERS.NET is now 199.7.83.42.
875

876 877 878 879 880
2254.	[bug]		timer.c:dispatch() failed to lock timer->lock
			when reading timer->idle allowing it to see
			intermediate values as timer->idle was reset by
			isc_timer_touch(). [RT #17243]

Mark Andrews's avatar
Mark Andrews committed
881
2253.	[func]	 	"max-cache-size" defaults to 32M.
Mark Andrews's avatar
Mark Andrews committed
882 883
			"max-acache-size" defaults to 16M.

884
2252.   [bug]           Fixed errors in sortlist code [RT #17216]
885

886 887 888 889 890 891 892
2251.	[placeholder]

2250.	[func]		New flag 'memstatistics' to state whether the
			memory statistics file should be written or not.
			Additionally named's -m option will cause the
			statistics file to be written. [RT #17113]
			
893 894 895
2249.   [bug]           Only set Authentic Data bit if client requested
                        DNSSEC, per RFC 3655 [RT #17175]

896 897
2248.   [cleanup]       Fix several errors reported by Coverity. [RT #17160]

898 899
2247.	[doc]		Sort doc/misc/options. [RT #17067]

900 901 902
2246.	[bug]		Make the startup of test servers (ans.pl) more
			robust. [RT #17147]

903 904 905
2245.	[bug]		Validating lack of DS records at trust anchors wasn't
			working. [RT #17151]

906 907 908 909
2244.	[func]		Allow the check of nameserver names against the
			SOA MNAME field to be disabled by specifying
			'notify-to-soa yes;'.  [RT #17073]

910 911 912
2243.	[func]		Configuration files without a newline at the end now
			parse without error. [RT #17120]

913 914 915 916
2242.	[bug]		nsupdate: GSS-TSIG support using the Heimdal Kerberos
			library could require a source of random data.
			[RT #17127]

Mark Andrews's avatar
Mark Andrews committed
917
2241.	[func]		nsupdate: add a interactive 'help' command. [RT #17099]
918 919 920 921 922 923 924

2240.	[bug]		Cleanup nsupdates GSS-TSIG support.  Convert
			a number of INSIST()s into plain fatal() errors
			which report the triggering result code.
			The 'key' command wasn't disabling GSS-TSIG.
			[RT #17099]

Mark Andrews's avatar
Mark Andrews committed
925
2239.	[func]		Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
926

927
2238.	[bug]		It was possible to trigger a REQUIRE when a
Mark Andrews's avatar
Mark Andrews committed
928
			validation was canceled. [RT #17106]
929

930 931
2237.	[bug]		libbind: res_init() was not thread aware. [RT #17123]

Mark Andrews's avatar
Mark Andrews committed
932
2236.	[bug]		dnssec-signzone failed to preserve the case of
Mark Andrews's avatar
Mark Andrews committed
933
			of wildcard owner names. [RT #17085]
934

935 936
2235.	[bug]		<isc/atomic.h> was not being installed. [RT #17135]

Evan Hunt's avatar
Evan Hunt committed
937 938
2234.   [port]          Correct some compiler warnings on SCO OSr5 [RT #17134]
  
939
2233.   [func]          Add support for O(1) ACL processing, based on
Mark Andrews's avatar
Mark Andrews committed
940 941
                        radix tree code originally written by Kevin
                        Brintnall. [RT #16288]
942

943 944 945
2232.	[bug]		dns_adb_findaddrinfo() could fail and return
			ISC_R_SUCCESS. [RT #17137]

946 947 948
2231.	[bug]		Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
			[RT #17088]

949 950 951
2230.	[bug]		We could INSIST reading a corrupted journal.
			[RT #17132]

Mark Andrews's avatar
Mark Andrews committed
952
2229.	[bug]		Null pointer dereference on query pool creation
953 954
			failure. [RT #17133]

Mark Andrews's avatar
Mark Andrews committed
955
2228.	[contrib]	contrib: Change 2188 was incomplete.
956

957 958
2227.	[cleanup]	Tidied up the FAQ. [RT #17121]

Mark Andrews's avatar
Mark Andrews committed
959 960
2226.	[placeholder]

961 962 963
2225.	[bug]		More support for systems with no IPv4 addresses.
		        [RT #17111]

964 965 966 967 968
2224.	[bug]		Defer journal compaction if a xfrin is in progress.
			[RT #17119]

2223.	[bug]		Make a new journal when compacting. [RT #17119]

969 970 971
2222.	[func]		named-checkconf now checks server key references.
		        [RT #17097]

972
2221.	[bug]		Set the event result code to reflect the actual
Mark Andrews's avatar
Mark Andrews committed
973 974 975
			record turned to caller when a cache update is
			rejected due to a more credible answer existing.
			[RT #17017]
976

977 978 979
2220.	[bug]		win32: Address a race condition in final shutdown of
			the Windows socket code. [RT #17028]
			
Mark Andrews's avatar
Mark Andrews committed
980
2219.	[bug]		Apply zone consistency checks to additions, not
Mark Andrews's avatar
Mark Andrews committed
981
			removals, when updating. [RT #17049]
982

983 984 985
2218.	[bug]		Remove unnecessary REQUIRE from dns_validator_create().
			[RT #16976]

986 987
2217.	[func]		Adjust update log levels. [RT #17092]

988 989 990
2216.	[cleanup]	Fix a number of errors reported by Coverity.
		        [RT #17094]

991 992
2215.	[bug]		Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]

993 994 995 996
2214.	[bug]		Deregister OpenSSL lock callback when cleaning
			up.  Reorder OpenSSL cleanup so that RAND_cleanup()
			is called before the locks are destroyed. [RT #17098]

997 998 999
2213.	[bug]		SIG0 diagnostic failure messages were looking at the
			wrong status code. [RT #17101]

Mark Andrews's avatar
Mark Andrews committed
1000
2212.	[func]		'host -m' now causes memory statistics and active
1001 1002
			memory to be printed at exit. [RT 17028]

1003 1004 1005
2211.	[func]		Update "dynamic update temporarily disabled" message.
			[RT #17065]

1006 1007 1008
2210.	[bug]		Deleting class specific records via UPDATE could
			fail.  [RT #17074]

1009 1010 1011 1012
2209.	[port]		osx: linking against user supplied static OpenSSL
			libraries failed as the system ones were still being
			found. [RT #17078]

1013 1014 1015
2208.	[port]		win32: make sure both build methods produce the
			same output. [RT #17058]

1016 1017
2207.	[port]		Some implementations of getaddrinfo() fail to set
			ai_canonname correctly. [RT #17061]
Mark Andrews's avatar
Mark Andrews committed
1018 1019 1020

	--- 9.5.0a6 released ---

1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035
2206.	[security]	"allow-query-cache" and "allow-recursion" now
			cross inherit from each other.

			If allow-query-cache is not set in named.conf then
			allow-recursion is used if set, otherwise allow-query
			is used if set, otherwise the default (localnets;
			localhost;) is used.

			If allow-recursion is not set in named.conf then
			allow-query-cache is used if set, otherwise allow-query
			is used if set, otherwise the default (localnets;
			localhost;) is used.

			[RT #16987]
	
1036 1037
2205.	[bug]		libbind: change #2119 broke thread support. [RT #16982]

Mark Andrews's avatar
Mark Andrews committed
1038
2204.	[bug]		"rndc flushanme name unknown-view" caused named
1039
			to crash. [RT #16984]
Mark Andrews's avatar
9.5.0a6  
Mark Andrews committed
1040

1041 1042 1043
2203.	[security]	Query id generation was cryptographically weak.
			[RT # 16915]

1044 1045 1046
2202.	[security]	The default acls for allow-query-cache and
			allow-recursion were not being applied. [RT #16960]

Mark Andrews's avatar
Mark Andrews committed
1047
2201.	[bug]		The build failed in a separate object directory.
1048 1049
			[RT #16943]

1050 1051 1052
2200.	[bug]		The search for cached NSEC records was stopping to
			early leading to excessive DLV queries. [RT #16930]

1053 1054 1055
2199.	[bug]		win32: don't call WSAStartup() while loading dlls.
			[RT #16911]

1056 1057 1058
2198.	[bug]		win32: RegCloseKey() could be called when
			RegOpenKeyEx() failed. [RT #16911]

1059 1060 1061 1062
2197.	[bug]		Add INSIST to catch negative responses which are
			not setting the event result code appropriately.
			[RT #16909]

1063
2196.	[port]		win32: yield processor while waiting for once to
1064
			to complete. [RT #16958]
1065

1066 1067 1068
2195.	[func]		dnssec-keygen now defaults to nametype "ZONE"
			when generating DNSKEYs. [RT #16954]

1069
2194.	[bug]		Close journal before calling 'done' in xfrin.c.
Mark Andrews's avatar
9.5.0a5  
Mark Andrews committed
1070 1071 1072

	--- 9.5.0a5 released ---

Mark Andrews's avatar
Mark Andrews committed
1073 1074 1075
2193.	[port]		win32: BINDInstall.exe is now linked statically.
			[RT #16906]

1076 1077 1078 1079
2192.	[port]		win32: use vcredist_x86.exe to install Visual
			Studio's redistributable dlls if building with
			Visual Stdio 2005 or later.

1080 1081 1082
2191.	[func]		named-checkzone now allows dumping to stdout (-).
			named-checkconf now has -h for help.
			named-checkzone now has -h for help.
Mark Andrews's avatar
Mark Andrews committed
1083
			rndc now has -h for help.
1084 1085 1086
			Better handling of '-?' for usage summaries.
			[RT #16707]

1087 1088 1089 1090
2190.	[func]		Make fallback to plain DNS from EDNS due to timeouts
			more visible.  New logging category "edns-disabled".
			[RT #16871]

1091 1092
2189.	[bug]		Handle socket() returning EINTR. [RT #15949]

Mark Andrews's avatar
Mark Andrews committed
1093
2188.	[contrib]	queryperf: autoconf changes to make the search for
1094 1095
			libresolv or libbind more robust. [RT #16299]

1096 1097
2187.	[bug]		query_addds(), query_addwildcardproof() and
			query_addnxrrsetnsec() should take a version
Mark Andrews's avatar
Mark Andrews committed
1098
			argument. [RT #16368]
1099

1100 1101 1102
2186.	[port]		cygwin: libbind: check for struct sockaddr_storage
			independently of IPv6. [RT #16482]

1103 1104 1105
2185.	[port]		sunos: libbind: check for ssize_t, memmove() and
			memchr(). [RT #16463]

1106 1107 1108
2184.	[bug]		bind9.xsl.h didn't build out of the source tree.
			[RT #16830]

1109 1110 1111
2183.	[bug]		dnssec-signzone didn't handle offline private keys
			well.  [RT #16832]

1112 1113 1114 1115
2182.	[bug]		dns_dispatch_createtcp() and dispatch_createudp()
			could return ISC_R_SUCCESS when they ran out of
			memory. [RT #16365]

1116 1117
2181.	[port]		sunos: libbind: add paths.h from BIND 8. [RT #16462]

1118 1119 1120
2180.	[cleanup]	Remove bit test from 'compress_test' as they
			are no longer needed. [RT #16497]

1121 1122 1123
2179.	[func]		'rndc command zone' will now find 'zone' if it is
			unique to all the views. [RT #16821]

1124 1125 1126
2178.	[bug]		'rndc reload' of a slave or stub zone resulted in
			a reference leak. [RT #16867]

1127 1128
2177.	[bug]		Array bounds overrun on read (rcodetext) at
			debug level 10+. [RT #16798]
1129

1130
2176.	[contrib]	dbus update to handle race condition during
Mark Andrews's avatar
Mark Andrews committed
1131
			initialization (Bugzilla 235809). [RT #16842]
1132

Mark Andrews's avatar
Mark Andrews committed
1133
2175.	[bug]		win32: windows broadcast condition variable support
1134 1135
			was broken. [RT #16592]

1136 1137 1138
2174.	[bug]		I/O errors should always be fatal when reading
			master files. [RT #16825]

1139 1140
2173.	[port]		win32: When compiling with MSVS 2005 SP1 we also
			need to ship Microsoft.VC80.MFCLOC.
Mark Andrews's avatar
9.5.0a4  
Mark Andrews committed
1141 1142 1143

	--- 9.5.0a4 released ---

1144 1145 1146
2172.	[bug]		query_addsoa() was being called with a non zone db.
			[RT #16834]

1147 1148 1149 1150
2171.	[bug]		Handle breaks in DNSSEC trust chains where the parent
			servers are not DS aware (DS queries to the parent
			return a referral to the child).

1151 1152
2170.	[func]		Add acache processing to test suite. [RT #16711]

1153 1154 1155
2169.	[bug]		host, nslookup: when reporting NXDOMAIN report the
			given name and not the last name searched for.
			[RT #16763]
1156

1157 1158 1159
2168.	[bug]		nsupdate: in non-interactive mode treat syntax errors
			as fatal errors. [RT #16785]

1160 1161
2167.	[bug]		When re-using a automatic zone named failed to
			attach it to the new view. [RT #16786]
Evan Hunt's avatar
9.5.0a3  
Evan Hunt committed
1162 1163 1164

	--- 9.5.0a3 released ---

1165 1166 1167 1168
2166.	[bug]		When running in batch mode, dig could misinterpret
			a server address as a name to be looked up, causing
			unexpected output. [RT #16743]

1169 1170 1171 1172 1173
2165.	[func]		Allow the destination address of a query to determine
			if we will answer the query or recurse.
			allow-query-on, allow-recursion-on and
			allow-query-cache-on. [RT #16291]

1174 1175 1176 1177
2164.	[bug]		The code to determine how named-checkzone / 
			named-compilezone was called failed under windows.
			[RT #16764]

1178 1179 1180 1181
2163.	[bug]		If only one of query-source and query-source-v6
			specified a port the query pools code broke (change
			2129).  [RT #16768]

1182