CHANGES 378 KB
Newer Older
1 2 3
3541.	[bug]		The parts if libdns was not being properly initialized
			in when built in libexport mode. [RT #33028]

4 5
3540.	[bug]		libt_api: t_info and t_assert were not thread safe.

6 7
3539.	[port]		win32: timestamp format didn't match other platforms.

Evan Hunt's avatar
Evan Hunt committed
8 9
3538.	[test]		Running "make test" now requires loopback interfaces
			to be set up. [RT #32452]
10

11 12 13 14
3537.	[tuning]	Slave zones, when updated, now send NOTIFY messages
			to peers before being dumped to disk rather than
			after. [RT #27242]

Evan Hunt's avatar
Evan Hunt committed
15 16 17 18 19 20 21 22 23
3536.	[func]		Add support for setting Differentiated Services Code
			Point (DSCP) values in named.  Most configuration
			options which take a "port" option (e.g.,
			listen-on, forwarders, also-notify, masters,
			notify-source, etc) can now also take a "dscp"
			option specifying a code point for use with
			outgoing traffic, if supported by the underlying
			OS. [RT #27596]

24 25
3535.	[bug]		Minor win32 cleanups. [RT #32962]

26 27 28
3534.	[bug]		Extra text after an embedded NULL was ignored when
			parsing zone files. [RT #32699]

29 30 31 32
3533.	[contrib]	query-loc-0.4.0: memory leaks. [RT #32960]

3532.	[contrib]	zkt: fixed buffer overrun, resource leaks. [RT #32960]

33 34 35
3531.	[bug]		win32: A uninitialized value could be returned on out
			of memory. [RT #32960]

Evan Hunt's avatar
Evan Hunt committed
36 37
3530.	[contrib]	Better RTT tracking in queryperf. [RT #30128]

38 39 40 41 42
3529.	[func]		Named now listens on both IPv4 and IPv6 interfaces
			by default.  Named previously only listened on IPv4
			interfaces by default unless named was running in
			IPv6 only mode.  [RT #32945]

Evan Hunt's avatar
Evan Hunt committed
43 44 45 46 47 48 49
3528.	[func]		New "dnssec-coverage" command scans the timing
			metadata for a set of DNSSEC keys and reports if a
			lapse in signing coverage has been scheduled
			inadvertently. (Note: This tool depends on python;
			it will not be built or installed on systems that
			do not have a python interpreter.) [RT #28098]

50 51 52 53
3527.	[compat]	Add a URI to allow applications to explicitly
			request a particular XML schema from the statistics
			channel, returning 404 if not supported. [RT #32481]

54 55 56
3526.	[cleanup]	Set up dependencies for unit tests correctly during
			build. [RT #32803]

57 58 59 60 61 62 63
3525.	[func]		Support for additional signing algorithms in rndc:
			hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
			The -A option to rndc-confgen can be used to
			select the algorithm for the generated key.
			(The default is still hmac-md5; this may
			change in a future release.) [RT #20363]

64 65 66 67
3524.	[func]		Added an alternate statistics channel in JSON format,
			when the server is built with the json-c library:
			http://[address]:[port]/json.  [RT #32630]

68 69 70 71 72
3523.	[contrib]	Ported filesystem and ldap DLZ drivers to
			dynamically-loadable modules, and added the
			"wildcard" module based on a contribution from
			Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]

73 74 75
3522.	[bug]		DLZ lookups could fail to return SERVFAIL when
			they ought to. [RT #32685]

76 77
3521.	[bug]		Address memory leak in opensslecdsa_link.c. [RT #32249]

78 79 80
3520.	[bug]		'mctx' was not being referenced counted in some places
			where it should have been.  [RT #32794]

81 82 83 84
3519.	[func]		Full replay protection via four-way handshake is
			now mandatory for rndc clients. Very old versions
			of rndc will no longer work. [RT #32798]

85 86 87 88 89
3518.	[bug]		Increase the size of dns_rrl_key.s.rtype by one bit
			so that all dns_rrl_rtype_t enum values fit regardless
			of whether it is teated as signed or unsigned by
			the compiler. [RT #32792]

90 91
3517.	[bug]		Reorder destruction to avoid shutdown race. [RT #32777]

Evan Hunt's avatar
Evan Hunt committed
92 93
3516.	[placeholder]

94 95
3515.	[port]		'%T' is not portable in strftime(). [RT #32763]

Evan Hunt's avatar
Evan Hunt committed
96 97 98 99 100 101
3514.	[bug]		The ranges for valid key sizes in ddns-confgen and
			rndc-confgen were too constrained. Keys up to 512
			bits are now allowed for most algorithms, and up
			to 1024 bits for hmac-sha384 and hmac-sha512.
			[RT #32753]

102 103 104
3513.	[func]		"dig -u" prints times in microseconds rather than
			milliseconds. [RT #32704]

Evan Hunt's avatar
Evan Hunt committed
105 106 107
3512.	[func]		"rndc validation check" reports the current status
			of DNSSEC validation. [RT #21397]

Evan Hunt's avatar
Evan Hunt committed
108 109
3511.	[doc]		Improve documentation of redirect zones. [RT #32756]

110 111 112
3510.	[func]		"rndc status" and XML statistics channel now report
			server start and reconfiguration times. [RT #21048]

113 114 115 116
3509.	[cleanup]	Added a product line to version file to allow for
			easy naming of different products (BIND
			vs BIND ESV, for example). [RT #32755]

117 118 119
3508.	[contrib]	queryperf was incorrectly rejecting the -T option.
			[RT #32338]

120 121 122 123
3507.	[bug]		Statistics channel XSL had a glitch when attempting
			to chart query data before any queries had been
			received. [RT #32620]

124 125 126 127 128 129 130 131 132 133 134 135
3506.	[func]		When setting "max-cache-size" and "max-acache-size",
			the keyword "unlimited" is no longer defined as equal
			to 4 gigabytes (except on 32-bit platforms); it
			means literally unlimited. [RT #32358]

3505.	[bug]		When setting "max-cache-size" and "max-acache-size",
			larger values than 4 gigabytes could not be set
			explicitly, though larger sizes were available
			when setting cache size to 0. This has been
			corrected; the full range is now available.
			[RT #32358]

Evan Hunt's avatar
Evan Hunt committed
136 137 138 139
3504.	[func]		Add support for ACLs based on geographic location,
			using MaxMind GeoIP databases. Based on code
			contributed by Ken Brownfield <kb@slide.com>.
			[RT #30681]
Mark Andrews's avatar
Mark Andrews committed
140

Evan Hunt's avatar
Evan Hunt committed
141 142
3503.	[doc]		Clarify size_spec syntax. [RT #32449]

143 144 145
3502.	[func]		zone-statistics: "no" is now a synonym for "none",
			instead of "terse". [RT #29165]

146 147 148 149
3501.	[func]		zone-statistics now takes three options: full,
			terse, and none. "yes" and "no" are retained as
			synonyms for full and terse, respectively. [RT #29165]

Evan Hunt's avatar
Evan Hunt committed
150 151 152 153
3500.	[security]	Support NAPTR regular expression validation on
			all platforms without using libregex, which
			can be vulnerable to memory exhaustion attack
			(CVE-2013-2266). [RT #32688]
154

Evan Hunt's avatar
Evan Hunt committed
155 156 157
3499.	[doc]		Corrected ARM documentation of built-in zones.
			[RT #32694]

158 159 160 161
3498.	[bug]		zone statistics for zones which matched a potential
			empty zone could have their zone-statistics setting
			overridden.

162 163 164 165
3497.	[func]		When deleting a slave/stub zone using 'rndc delzone'
			report the files that were being used so they can
			be cleaned up if desired. [RT #27899]

Evan Hunt's avatar
Evan Hunt committed
166 167
3496.	[placeholder]

168
3495.	[func]		Support multiple response-policy zones (up to 32),
Mark Andrews's avatar
Mark Andrews committed
169
			while improving RPZ performance.  "response-policy"
170 171 172
			syntax now includes a "min-ns-dots" clause, with
			default 1, to exclude top-level domains from
			NSIP and NSDNAME checking. --enable-rpz-nsip and
Mark Andrews's avatar
Mark Andrews committed
173
			--enable-rpz-nsdname are now the default. [RT #32251]
174

Evan Hunt's avatar
Evan Hunt committed
175 176 177 178
3494.	[func]		DNS RRL: Blunt the impact of DNS reflection and
			amplification attacks by rate-limiting substantially-
			identical responses. [RT #28130]

179 180
3493.	[contrib]	Added BDBHPT dynamically-lodable DLZ module,
			contributed by Mark Goldfinch. [RT #32549]
Mark Andrews's avatar
Mark Andrews committed
181

182 183 184
3492.	[bug]		Fixed a regression in zone loading performance
			due to lock contention. [RT #30399]

185 186 187
3491.	[bug]		Slave zones using inline-signing must specify a
			file name. [RT #31946]

188
3490.	[bug]		When logging RDATA during update, truncate if it's
Mark Andrews's avatar
Mark Andrews committed
189
			too long. [RT #32365]
190

191 192 193 194 195
3489.	[bug]		--enable-developer now turns on ISC_LIST_CHECKINIT.
			dns_dlzcreate() failed to properly initialize
			dlzdb.link.  When cloning a rdataset do not copy
			the link contents.  [RT #32651]

196 197
3488.	[bug]		Use after free error with DH generated keys. [RT #32649]

198 199
3487.	[bug]		Change 3444 was not complete.  There was a additional
			place where the NOQNAME proof needed to be saved.
Mark Andrews's avatar
Mark Andrews committed
200
			[RT #32629]
201

Evan Hunt's avatar
Evan Hunt committed
202 203 204
3486.	[bug]		named could crash when using TKEY-negotiated keys
			that had been deleted and then recreated. [RT #32506]

205 206
3485.	[cleanup]	Only compile openssl_gostlink.c if we support GOST.

207 208 209
3484.	[bug]		Some statistics were incorrectly rendered in XML.
			[RT #32587]

Evan Hunt's avatar
Evan Hunt committed
210 211
3483.	[placeholder]

212 213 214 215
3482.	[func]		dig +nssearch now prints name servers that don't
			have address records (missing AAAA or A, or the name
			doesn't exist). [RT #29348]

216 217
3481.	[cleanup]	removed use of const const in atf

Evan Hunt's avatar
Evan Hunt committed
218 219 220
3480.	[bug]		Silence logging noise when setting up zone
			statistics. [RT #32525]

221 222 223
3479.	[bug]		Address potential memory leaks in gssapi support
			code. [RT #32405]

Evan Hunt's avatar
Evan Hunt committed
224 225 226 227
3478.	[port]		Fix a build failure in strict C99 environments
			[RT #32475]

3477.	[func]		Expand logging when adding records via DDNS update
Mark Andrews's avatar
Mark Andrews committed
228 229
			[RT #32365]

230 231 232
3476.	[bug]		"rndc zonestatus" could report a spurious "not
			found" error on inline-signing zones. [RT #29226]

Evan Hunt's avatar
Evan Hunt committed
233 234
3475.	[cleanup]	Changed name of 'map' zone file format (previously
			'fast'). [RT #32458]
235

236 237 238
3474.	[bug]		nsupdate could assert when the local and remote
			address families didn't match. [RT #22897]

Evan Hunt's avatar
Evan Hunt committed
239 240 241 242
3473.	[bug]		dnssec-signzone/verify could incorrectly report
			an error condition due to an empty node above an
			opt-out delegation lacking an NSEC3. [RT #32072]

243 244 245
3472.	[bug]		The active-connections counter in the socket
			statistics could underflow. [RT #31747]

246 247 248 249
3471.	[bug]		The number of UDP dispatches now defaults to
			the number of CPUs even if -n has been set to
			a higher value. [RT #30964]

250 251 252
3470.	[bug]		Slave zones could fail to dump when successfully
			refreshing after an initial failure. [RT #31276]

Evan Hunt's avatar
Evan Hunt committed
253 254 255 256
3469.	[bug]		Handle DLZ lookup failures more gracefully. Improve
			backward compatibility between versions of DLZ dlopen
			API. [RT #32275]

257 258
3468.	[security]	RPZ rules to generate A records (but not AAAA records)
			could trigger an assertion failure when used in
259
			conjunction with DNS64 (CVE-2012-5689). [RT #32141]
260 261 262

3467.	[bug]		Added checks in dnssec-keygen and dnssec-settime
			to check for delete date < inactive date. [RT #31719]
263

264 265 266
3466.	[contrib]	Corrected the DNS_CLIENTINFOMETHODS_VERSION check
			in DLZ example driver. [RT #32275]

267 268
3465.	[bug]		Handle isolated reserved ports. [RT #31778]

269 270 271
3464.	[maint]		Updates to PKCS#11 openssl patches, supporting
			versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]

272
3463.	[doc]		Clarify managed-keys syntax in ARM. [RT #32232]
273 274 275 276

3462.	[doc]		Clarify server selection behavior of dig when using
			-4 or -6 options. [RT #32181]

277 278 279
3461.	[bug]		Negative responses could incorrectly have AD=1
			set. [RT #32237]

280 281
3460.	[bug]		Only link against readline where needed. [RT #29810]

282 283 284
3459.	[func]		Added -J option to named-checkzone/named-compilezone
			to specify the path to the journal file. [RT #30958]

285 286 287
3458.	[bug]		Return FORMERR when presented with a overly long
			domain named in a request. [RT #29682]

288 289
3457.	[protocol]	Add ILNP records (NID, LP, L32, L64). [RT #31836]

Evan Hunt's avatar
Evan Hunt committed
290
3456.	[port]		g++47: ATF failed to compile. [RT #32012]
291

292 293
3455.	[contrib]	queryperf: fix getopt option list. [RT #32338]

294 295
3454.	[port]		sparc64: improve atomic support. [RT #25182]

296 297 298
3453.	[bug]		'rndc addzone' of a zone with 'inline-signing yes;'
			failed. [RT #31960]

Mark Andrews's avatar
Mark Andrews committed
299
3452.	[bug]		Accept duplicate singleton records. [RT #32329]
300

301 302 303
3451.	[port]		Increase per thread stack size from 64K to 1M.
			[RT #32230]

304 305 306
3450.	[bug]		Stop logfileconfig system test spam system logs.
			[RT #32315]

307 308 309 310
3449.	[bug]		gen.c: use the pre-processor to construct format
			strings so that compiler can perform sanity checks;
			check the snprintf results. [RT #17576]

Evan Hunt's avatar
Evan Hunt committed
311 312 313
3448.	[bug]		The allow-query-on ACL was not processed correctly.
			[RT #29486]

314 315
3447.	[port]		Add support for libxml2-2.9.x [RT #32231]

316 317 318
3446.	[port]		win32: Add source ID (see change #3400) to build.
			[RT #31683]

319 320
3445.	[bug]		Warn about zone files with blank owner names
			immediately after $ORIGIN directives. [RT #31848]
321

322
3444.	[bug]		The NOQNAME proof was not being returned from cached
323 324
			insecure responses. [RT #21409]

325 326 327
3443.	[bug]		ddns-confgen: Some TSIG algorithms were incorrectly
			rejected when generating keys. [RT #31927]

328 329 330
3442.	[port]		Net::DNS 0.69 introduced a non backwards compatible
			change. [RT #32216]

331 332
3441.	[maint]		D.ROOT-SERVERS.NET is now 199.7.91.13.

333 334 335
3440.	[bug]		Reorder get_key_struct to not trigger a assertion when
			cleaning up due to out of memory error. [RT #32131]

Mark Andrews's avatar
Mark Andrews committed
336 337
3439.	[placeholder]

338 339
3438.	[bug]		Don't accept unknown data escape in quotes. [RT #32031]

Mark Andrews's avatar
Mark Andrews committed
340
3437.	[bug]		isc_buffer_init -> isc_buffer_constinit to initialize
341 342
			buffers with constant data. [RT #32064]

343 344
3436.	[bug]		Check malloc/calloc return values. [RT #32088]

345 346 347
3435.	[bug]		Cross compilation support in configure was broken.
			[RT #32078]

348 349 350 351 352 353
3434.	[bug]		Pass client info to the DLZ findzone() entry
			point in addition to lookup().  This makes it
			possible for a database to answer differently
			whether it's authoritative for a name depending
			on the address of the client.  [RT #31775]

354 355 356
3433.	[bug]		dlz_findzone() did not correctly handle
			ISC_R_NOMORE. [RT #31172]

Evan Hunt's avatar
Evan Hunt committed
357 358 359 360 361 362 363 364 365
3432.	[func]		Multiple DLZ databases can now be configured.
			DLZ databases are searched in the order configured,
			unless set to "search no", in which case a
			zone can be configured to be retrieved from a
			particular DLZ database by using a "dlz <name>"
			option in the zone statement.  DLZ databases can
			support type "master" and "redirect" zones.
			[RT #27597]

366 367 368
3431.	[bug]		ddns-confgen: Some valid key algorithms were
			not accepted. [RT #31927]

369 370 371
3430.	[bug]		win32: isc_time_formatISO8601 was missing the
			'T' between the date and time. [RT #32044]

372 373 374
3429.	[bug]		dns_zone_getserial2 could a return success without
			returning a valid serial. [RT #32007]

Evan Hunt's avatar
Evan Hunt committed
375 376
3428.	[cleanup]	dig: Add timezone to date output. [RT #2269]

Mark Andrews's avatar
Mark Andrews committed
377
3427.	[bug]		dig +trace incorrectly displayed name server
Evan Hunt's avatar
Evan Hunt committed
378 379
			addresses instead of names. [RT #31641]

380 381 382
3426.	[bug]		dnssec-checkds: Clearer output when records are not
			found. [RT #31968]

383 384 385
3425.	[bug]		"acacheentry" reference counting was broken resulting
			in use after free. [RT #31908]

386 387 388
3424.	[func]		dnssec-dsfromkey now emits the hash without spaces.
			[RT #31951]

389 390 391 392
3423.	[bug]		"rndc signing -nsec3param" didn't accept the full
			range of possible values.  Address portability issues.
			[RT #31938]

Mark Andrews's avatar
Mark Andrews committed
393
3422.	[bug]		Added a clear error message for when the SOA does not
394 395
			match the referral. [RT #31281]

396 397 398
3421.	[bug]		Named loops when re-signing if all keys are offline.
			[RT #31916]

399 400
3420.	[bug]		Address VPATH compilation issues. [RT #31879]

401 402
3419.	[bug]		Memory leak on validation cancel. [RT #31869]

Mark Andrews's avatar
Mark Andrews committed
403 404 405 406 407 408
3418.	[func]		New XML schema (version 3.0) for the statistics channel
			adds query type statistics at the zone level, and
			flattens the XML tree and uses compressed format to
			optimize parsing. Includes new XSL that permits
			charting via the Google Charts API on browsers that
			support javascript in XSL.  The old XML schema has been
409 410
			deprecated. [RT #30023]

Mark Andrews's avatar
Mark Andrews committed
411
3417.	[placeholder]
412

413 414 415
3416.	[bug]		Named could die on shutdown if running with 128 UDP
			dispatches per interface. [RT #31743]

Mark Andrews's avatar
Mark Andrews committed
416
3415.	[bug]		named could die with a REQUIRE failure if a valdation
417 418
			was canceled. [RT #31804]

419 420
3414.	[bug]		Address locking issues found by Coverity. [RT #31626]

421 422 423
3413.	[func]		Record the number of DNS64 AAAA RRsets that have been
			synthesized. [RT #27636]

424 425 426
3412.	[bug]		Copy timeval structure from control message data.
			[RT #31548]

427 428 429
3411.	[tuning]	Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
			to UDP. [RT #31690]

430 431
3410.	[bug]		Addressed Coverity warnings. [RT #31626]

Evan Hunt's avatar
Evan Hunt committed
432 433 434 435 436
3409.	[contrib]	contrib/dane/mkdane.sh: Tool to generate TLSA RR's
			from X.509 certificates, for use with DANE
			(DNS-based Authentication of Named Entities).
			[RT #30513]

437 438 439 440 441
3408.	[bug]		Some DNSSEC-related options (update-check-ksk,
			dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
			are now legal in slave zones as long as
			inline-signing is in use. [RT #31078]

Mark Andrews's avatar
Mark Andrews committed
442 443
3407.	[placeholder]

444 445
3406.	[bug]		mem.c: Fix compilation errors when building with
			ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
Mark Andrews's avatar
Mark Andrews committed
446
			Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
447

448 449
3405.	[bug]		Handle time going backwards in acache. [RT #31253]

450
3404.	[bug]		dnssec-signzone: When re-signing a zone, remove
Mark Andrews's avatar
Mark Andrews committed
451
			RRSIG and NSEC records from nodes that used to be
452 453
			in-zone but are now below a zone cut. [RT #31556]

Evan Hunt's avatar
Evan Hunt committed
454 455
3403.	[bug]		Silence noisy OpenSSL logging. [RT #31497]

Evan Hunt's avatar
Evan Hunt committed
456
3402.	[test]		The IPv6 interface numbers used for system
Mark Andrews's avatar
Mark Andrews committed
457
			tests were incorrect on some platforms. [RT #25085]
Curtis Blackburn's avatar
Curtis Blackburn committed
458

Evan Hunt's avatar
Evan Hunt committed
459 460
3401.	[bug]		Addressed Coverity warnings. [RT #31484]

Evan Hunt's avatar
Evan Hunt committed
461 462 463 464
3400.	[cleanup]	"named -V" can now report a source ID string, defined
			in the "srcid" file in the build tree and normally set
			to the most recent git hash.  [RT #31494]

465 466 467
3399.	[port]		netbsd: rename 'bool' parameter to avoid namespace
			clash.  [RT #31515]

468 469 470 471
3398.	[bug]		SOA parameters were not being updated with inline
			signed zones if the zone was modified while the
			server was offline. [RT #29272]

472
3397.	[bug]		dig crashed when using +nssearch with +tcp. [RT #25298]
Mark Andrews's avatar
Mark Andrews committed
473

474 475 476
3396.	[bug]		OPT records were incorrectly removed from signed,
			truncated responses. [RT #31439]

477 478 479 480
3395.	[protocol]	Add RFC 6598 reverse zones to built in empty zones
			list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
			[RT #31336]

Mark Andrews's avatar
Mark Andrews committed
481
3394.	[bug]		Adjust 'successfully validated after lower casing
482 483
			signer' log level and category. [RT #31414]

484 485 486
3393.	[bug]		'host -C' could core dump if REFUSED was received.
			[RT #31381]

487 488
3392.	[func]		Keep statistics on REFUSED responses. [RT #31412]

Mark Andrews's avatar
Mark Andrews committed
489 490
3391.	[bug]		A DNSKEY lookup that encountered a CNAME failed.
			[RT #31262]
491

492 493
3390.	[bug]		Silence clang compiler warnings. [RT #30417]

494 495
3389.	[bug]		Always return NOERROR (not 0) in TSIG. [RT #31275]

496 497 498 499 500 501
3388.	[bug]		Fixed several Coverity warnings.
			Note: This change includes a fix for a bug that
			was subsequently determined to be an exploitable
			security vulnerability, CVE-2012-5688: named could
			die on specific queries with dns64 enabled.
			[RT #30996]
Evan Hunt's avatar
Evan Hunt committed
502

503 504
3387.	[func]		DS digest can be disabled at runtime with
			disable-ds-digests. [RT #21581]
505

506 507 508
3386.	[bug]		Address locking violation when generating new NSEC /
			NSEC3 chains. [RT #31224]

509 510 511
3385.	[bug]		named-checkconf didn't detect missing master lists
			in also-notify clauses. [RT #30810]

Evan Hunt's avatar
Evan Hunt committed
512 513
3384.	[bug]		Improved logging of crypto errors. [RT #30963]

Evan Hunt's avatar
typo  
Evan Hunt committed
514
3383.	[security]	A certain combination of records in the RBT could
Mark Andrews's avatar
Mark Andrews committed
515 516
			cause named to hang while populating the additional
			section of a response. [RT #31090]
Evan Hunt's avatar
Evan Hunt committed
517

Evan Hunt's avatar
Evan Hunt committed
518 519 520 521
3382.	[bug]		SOA query from slave used use-v6-udp-ports range,
			if set, regardless of the address family in use.
			[RT #24173]

Evan Hunt's avatar
Evan Hunt committed
522 523 524
3381.	[contrib]	Update queryperf to support more RR types.
			[RT #30762]

525 526 527
3380.	[bug]		named could die if a non-existant master list was
			referenced in a also-notify. [RT #31004]

528 529 530
3379.	[bug]		isc_interval_zero and isc_time_epoch should be
			"const (type)* const". [RT #31069]

531 532 533
3378.	[bug]		Handle missing 'managed-keys-directory' better.
			[RT #30625]

Evan Hunt's avatar
Evan Hunt committed
534 535 536
3377.	[bug]		Removed spurious newline from NSEC3 multiline
			output. [RT #31044]

537 538 539
3376.	[bug]		Lack of EDNS support was being recorded without a
			successful response. [RT #30811]

540 541
3375.	[bug]		'rndc dumpdb' failed on empty caches. [RT #30808]

Mark Andrews's avatar
Mark Andrews committed
542 543
3374.	[bug]		isc_parse_uint32 failed to return a range error on
			systems with 64 bit longs. [RT #30232]
544

Mark Andrews's avatar
Mark Andrews committed
545
3373.	[bug]		win32: open raw files in binary mode. [RT #30944]
546

547 548 549
3372.	[bug]		Silence spurious "deleted from unreachable cache"
			messages.  [RT #30501]

550 551 552 553
3371.	[bug]		AD=1 should behave like DO=1 when deciding whether to
			add NS RRsets to the additional section or not.
			[RT #30479]

554 555 556
3370.	[bug]		Address use after free while shutting down. [RT #30241]

3369.	[bug]		nsupdate terminated unexpectedly in interactive mode
557 558
			if built with readline support. [RT #29550]

559
3368.	[bug]		<dns/iptable.h>, <dns/private.h> and <dns/zone.h>
Evan Hunt's avatar
Evan Hunt committed
560
			were not C++ safe.
561

562 563 564
3367.	[bug]		dns_dnsseckey_create() result was not being checked.
			[RT #30685]

Mark Andrews's avatar
Mark Andrews committed
565
3366.	[bug]		Fixed Read-After-Write dependency violation for IA64
566 567
			atomic operations. [RT #25181]

568 569 570
3365.	[bug]		Removed spurious newlines from log messages in
			zone.c [RT #30675]

571 572 573
3364.	[security]	Named could die on specially crafted record.
			[RT #30416]

574 575 576 577
3363.	[bug]		Need to allow "forward" and "fowarders" options
			in static-stub zones; this had been overlooked.
			[RT #30482]

578 579 580 581
3362.	[bug]		Setting some option values to 0 in named.conf
			could trigger an assertion failure on startup.
			[RT #27730]

582 583
3361.	[bug]		"rndc signing -nsec3param" didn't work correctly
			when salt was set to '-' (no salt). [RT #30099]
Mark Andrews's avatar
Mark Andrews committed
584

585 586
3360.	[bug]		'host -w' could die.  [RT #18723]

587
3359.	[bug]		An improperly-formed TSIG secret could cause a
Mark Andrews's avatar
Mark Andrews committed
588
			memory leak. [RT #30607]
589

Mark Andrews's avatar
Mark Andrews committed
590 591
3358.	[placeholder]

592 593
3357.	[port]		Add support for libxml2-2.8.x [RT #30440]

Mark Andrews's avatar
Mark Andrews committed
594
3356.	[bug]		Cap the TTL of signed RRsets when RRSIGs are
595 596 597
			approaching their expiry, so they don't remain
			in caches after expiry. [RT #26429]

598 599
3355.	[port]		Use more portable awk in verify system test.

600 601
3354.	[func]		Improve OpenSSL error logging. [RT #29932]

602 603 604
3353.	[bug]		Use a single task for task exclusive operations.
			[RT #29872]

605 606 607
3352.	[bug]		Ensure that learned server attributes timeout of the
			adb cache. [RT #29856]

608 609 610 611
3351.	[bug]		isc_mem_put and isc_mem_putanddetach didn't report
			caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
			memory debugging flags are set. [RT #30243]

612 613 614 615
3350.	[bug]		Memory read overrun in isc___mem_reallocate if
			ISC_MEM_DEBUGCTX memory debugging flag is set.
			[RT #30240]

Mark Andrews's avatar
Mark Andrews committed
616 617
3349.	[bug]		Change #3345 was incomplete. [RT #30233]

Mark Andrews's avatar
Mark Andrews committed
618 619 620 621
3348.	[bug]		Prevent RRSIG data from being cached if a negative
			record matching the covering type exists at a higher
			trust level. Such data already can't be retrieved from
			the cache since change 3218 -- this prevents it
Mark Andrews's avatar
Mark Andrews committed
622
			being inserted into the cache as well. [RT #26809]
Mark Andrews's avatar
Mark Andrews committed
623 624 625

3347.	[bug]		dnssec-settime: Issue a warning when writing a new
			private key file would cause a change in the
Evan Hunt's avatar
Evan Hunt committed
626
			permissions of the existing file. [RT #27724]
Curtis Blackburn's avatar
Curtis Blackburn committed
627

Evan Hunt's avatar
Evan Hunt committed
628 629 630
3346.	[security]	Bad-cache data could be used before it was
			initialized, causing an assert. [RT #30025]

631 632 633 634
3345.	[bug]		Addressed race condition when removing the last item
			or inserting the first item in an ISC_QUEUE.
			[RT #29539]

Mark Andrews's avatar
Mark Andrews committed
635 636 637 638 639 640 641 642 643
3344.	[func]		New "dnssec-checkds" command checks a zone to
			determine which DS records should be published
			in the parent zone, or which DLV records should be
			published in a DLV zone, and queries the DNS to
			ensure that it exists. (Note: This tool depends
			on python; it will not be built or installed on
			systems that do not have a python interpreter.)
			[RT #28099]

Mark Andrews's avatar
Mark Andrews committed
644 645
3343.	[placeholder]

646 647 648 649
3342.	[bug]		Change #3314 broke saving of stub zones to disk
			resulting in excessive cpu usage in some cases.
			[RT #29952]

650 651 652 653
3341.	[func]		New "dnssec-verify" command checks a signed zone
			to ensure correctness of signatures and of NSEC/NSEC3
			chains. [RT #23673]

Evan Hunt's avatar
Evan Hunt committed
654
3340.	[func]		Added new 'map' zone file format, which is an image
Mark Andrews's avatar
Mark Andrews committed
655 656 657 658
			of a zone database that can be loaded directly into
			memory via mmap(), allowing much faster zone loading.
			(Note: Because of pointer sizes and other
			considerations, this file format is platform-dependent;
Evan Hunt's avatar
Evan Hunt committed
659
			'map' zone files cannot always be transferred from one
Curtis Blackburn's avatar
Curtis Blackburn committed
660 661
			server to another.) [RT #25419]

662 663 664
3339.	[func]		Allow the maximum supported rsa exponent size to be
			specified: "max-rsa-exponent-size <value>;" [RT #29228]

665 666 667
3338.	[bug]		Address race condition in units tests: asyncload_zone
			and asyncload_zt. [RT #26100]

668 669 670
3337.	[bug]		Change #3294 broke support for the multiple keys
			in controls. [RT #29694]

671 672 673
3336.	[func]		Maintain statistics for RRsets tagged as "stale".
			[RT #29514]

674 675 676
3335.	[func]		nslookup: return a nonzero exit code when unable
			to get an answer. [RT #29492]

677
3334.	[bug]		Hold a zone table reference while performing a
Mark Andrews's avatar
Mark Andrews committed
678
			asynchronous load of a zone. [RT #28326]
679

680
3333.	[bug]		Setting resolver-query-timeout too low can cause
Mark Andrews's avatar
Mark Andrews committed
681
			named to not recover if it loses connectivity.
682 683
			[RT #29623]

Mark Andrews's avatar
add #  
Mark Andrews committed
684
3332.	[bug]		Re-use cached DS rrsets if possible. [RT #29446]
685

Mark Andrews's avatar
Mark Andrews committed
686
3331.	[security]	dns_rdataslab_fromrdataset could produce bad
687
			rdataslabs. [RT #29644]
Mark Andrews's avatar
Mark Andrews committed
688

Vernon Schryver's avatar
Vernon Schryver committed
689
3330.	[func]		Fix missing signatures on NOERROR results despite
Mark Andrews's avatar
Mark Andrews committed
690
			RPZ rewriting.  Also
Vernon Schryver's avatar
Vernon Schryver committed
691 692 693 694 695 696 697 698 699 700 701 702 703
			 - add optional "recursive-only yes|no" to the
			   response-policy statement
			 - add optional "max-policy-ttl" to the response-policy
			    statement to limit the false data that
			    "recursive-only no" can introduce into
			    resolvers' caches
			 - add a RPZ performance test to bin/tests/system/rpz
			     when queryperf is available.
			 - the encoding of PASSTHRU action to "rpz-passthru".
			     (The old encoding is still accepted.)
		       [RT #26172]


704 705 706 707 708 709
3329.	[bug]		Handle RRSIG signer-name case consistently: We
			generate RRSIG records with the signer-name in
			lower case.  We accept them with any case, but if
			they fail to validate, we try again in lower case.
			[RT #27451]

Mark Andrews's avatar
Mark Andrews committed
710 711
3328.	[bug]		Fixed inconsistent data checking in dst_parse.c.
			[RT #29401]
Evan Hunt's avatar
Evan Hunt committed
712

Evan Hunt's avatar
Evan Hunt committed
713 714 715 716 717
3327.	[func]		Added 'filter-aaaa-on-v6' option; this is similar
			to 'filter-aaaa-on-v4' but applies to IPv6
			connections.  (Use "configure --enable-filter-aaaa"
			to enable this option.)  [RT #27308]

718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743
3326.	[func]		Added task list statistics: task model, worker
			threads, quantum, tasks running, tasks ready.
			[RT #27678]

3325.	[func]		Report cache statistics: memory use, number of
			nodes, number of hash buckets, hit and miss counts.
			[RT #27056]

3324.	[test]		Add better tests for ADB stats [RT #27057]

3323.	[func]		Report the number of buckets the resolver is using.
			[RT #27020]

3322.	[func]		Monitor the number of active TCP and UDP dispatches.
			[RT #27055]

3321.	[func]		Monitor the number of recursive fetches and the
			number of open sockets, and report these values in
			the statistics channel. [RT #27054]

3320.	[func]		Added support for monitoring of recursing client
			count. [RT #27009]

3319.	[func]		Added support for monitoring of ADB entry count and
			hash size. [RT #27057]

744
3318.	[tuning]	Reduce the amount of work performed while holding a
Mark Andrews's avatar
Mark Andrews committed
745
			bucket lock when finished with a fetch context.
746 747
			[RT #29239]

Mark Andrews's avatar
Mark Andrews committed
748
3317.	[func]		Add ECDSA support (RFC 6605). [RT #21918]
749

750 751 752
3316.	[tuning]	Improved locking performance when recursing.
			[RT #28836]

753 754 755 756 757
3315.	[tuning]	Use multiple dispatch objects for sending upstream
			queries; this can improve performance on busy
			multiprocessor systems by reducing lock contention.
			[RT #28605]

758 759 760
3314.	[bug]		The masters list could be updated while refesh_callback
			and stub_callback were using it. [RT #26732]

761 762
3313.	[protocol]	Add TLSA record type. [RT #28989]

763 764 765
3312.	[bug]		named-checkconf didn't detect a bad dns64 clients acl.
			[RT #27631]

766 767 768
3311.	[bug]		Abort the zone dump if zone->db is NULL in
			zone.c:zone_gotwritehandle. [RT #29028]

769 770
3310.	[test]		Increase table size for mutex profiling. [RT #28809]

Mark Andrews's avatar
Mark Andrews committed
771
3309.	[bug]		resolver.c:fctx_finddone() was not thread safe.
772 773
			[RT #27995]

Mark Andrews's avatar
Mark Andrews committed
774 775
3308.	[placeholder]

776 777
3307.	[bug]		Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
			[RT #28956]
778

779 780 781 782
3306.	[bug]		Improve DNS64 reverse zone performance. [RT #28563]

3305.	[func]		Add wire format lookup method to sdb. [RT #28563]

783 784
3304.	[bug]		Use hmctx, not mctx when freeing rbtdb->heaps.
			[RT #28571]
785

786 787
3303.	[bug]		named could die when reloading. [RT #28606]

788 789 790 791
3302.	[bug]		dns_dnssec_findmatchingkeys could fail to find
			keys if the zone name contained character that
			required special mappings. [RT #28600]

792 793 794
3301.	[contrib]	Update queryperf to build on darwin.  Add -R flag
			for non-recursive queries. [RT #28565]

795 796 797
3300.	[bug]		Named could die if gssapi was enabled in named.conf
			but was not compiled in. [RT #28338]

798 799 800
3299.	[bug]		Make SDB handle errors from database drivers better.
			[RT #28534]

801 802 803 804
3298.	[bug]		Named could dereference a NULL pointer in
			zmgr_start_xfrin_ifquota if the zone was being removed.
			[RT #28419]

805 806
3297.	[bug]		Named could die on a malformed master file. [RT #28467]

807 808 809
3296.	[bug]		Named could die with a INSIST failure in
			client.c:exit_check. [RT #28346]

810 811 812
3295.	[bug]		Adjust isc_time_secondsastimet range check to be more
			portable. [RT # 26542]

813 814 815
3294.	[bug]		isccc/cc.c:table_fromwire failed to free alist on
			error. [RT #28265]

816 817
3293.	[func]		nsupdate: list supported type. [RT #28261]

818 819 820
3292.	[func]		Log messages in the axfr stream at debug 10.
			[RT #28040]

821 822 823
3291.	[port]		Fixed a build error on systems without ENOTSUP.
			[RT #28200]

824 825
3290.	[bug]		<isc/hmacsha.h> was not being installed. [RT #28169]

826 827
3289.	[bug]		'rndc retransfer' failed for inline zones. [RT #28036]

828 829 830
3288.	[bug]		dlz_destroy() function wasn't correctly registered
			by the DLZ dlopen driver. [RT #28056]

831 832
3287.	[port]		Update ans.pl to work with Net::DNS 0.68. [RT #28028]

833 834 835
3286.	[bug]		Managed key maintenance timer could fail to start
			after 'rndc reconfig'. [RT #26786]

836 837 838 839
3285.	[bug]		val-frdataset was incorrectly disassociated in
			proveunsecure after calling startfinddlvsep.
			[RT #27928]

840 841 842
3284.	[bug]		Address race conditions with the handling of
			rbtnode.deadlink. [RT #27738]

843 844 845
3283.	[bug]		Raw zones with with more than 512 records in a RRset
			failed to load. [RT #27863]

846
3282.	[bug]		Restrict the TTL of NS RRset to no more than that
Mark Andrews's avatar
extend:  
Mark Andrews committed
847 848
			of the old NS RRset when replacing it.
			[RT #27792] [RT #27884]
849

850 851 852 853
3281.	[bug]		SOA refresh queries could be treated as cancelled
			despite succeeding over the loopback interface.
			[RT #27782]

854 855 856
3280.	[bug]		Potential double free of a rdataset on out of memory
			with DNS64. [RT #27762]

Mark Andrews's avatar
Mark Andrews committed
857
3279.	[bug]		Hold a internal reference to the zone while performing
858 859 860
			a asynchronous load.  Address potential memory leak
			if the asynchronous is cancelled. [RT #27750]

Mark Andrews's avatar
Mark Andrews committed
861
3278.	[bug]		Make sure automatic key maintenance is started
862 863 864
			when "auto-dnssec maintain" is turned on during
			"rndc reconfig". [RT #26805]

Mark Andrews's avatar
Mark Andrews committed
865
3277.	[bug]		win32: isc_socket_dup is not implemented. [RT #27696]
866 867 868 869

3276.	[bug]		win32: ns_os_openfile failed to return NULL on
			safe_open failure. [RT #27696]

870
3275.	[bug]		Corrected rndc -h output; the 'rndc sync -clean'
871
			option had been misspelled as '-clear'.  (To avoid
872 873
			future confusion, both options now work.) [RT #27173]

Mark Andrews's avatar
Mark Andrews committed
874
3274.	[placeholder]
Mark Andrews's avatar
Mark Andrews committed
875

Mark Andrews's avatar
Mark Andrews committed
876 877 878
3273.	[bug]		AAAA responses could be returned in the additional
			section even when filter-aaaa-on-v4 was in use.
			[RT #27292]
879 880 881 882

3272.	[func]		New "rndc zonestatus" command prints information
			about the specified zone. [RT #21671]

883 884 885 886
3271.	[port]		darwin: mksymtbl is not always stable, loop several
			times before giving up.  mksymtbl was using non
			portable perl to covert 64 bit hex strings. [RT #27653]

Evan Hunt's avatar
Evan Hunt committed
887
	--- 9.9.0rc2 released ---
Evan Hunt's avatar
Evan Hunt committed
888

889 890 891
3270.	[bug]		"rndc reload" didn't reuse existing zones correctly
			when inline-signing was in use. [RT #27650]

892 893
3269.	[port]		darwin 11 and later now built threaded by default.

894 895 896
3268.	[bug]		Convert RRSIG expiry times to 64 timestamps to work
			out the earliest expiry time. [RT #23311]

897 898 899 900
3267.	[bug]		Memory allocation failures could be mis-reported as
			unexpected error.  New ISC_R_UNSET result code.
			[RT #27336]

901 902 903 904
3266.	[bug]		The maximum number of NSEC3 iterations for a
			DNSKEY RRset was not being properly computed.
			[RT #26543]

Evan Hunt's avatar
Evan Hunt committed
905 906
3265.	[bug]		Corrected a problem with lock ordering in the
			inline-signing code. [RT #27557]
907

908 909 910 911 912 913 914
3264.	[bug]		Automatic regeneration of signatures in an
			inline-signing zone could stall when the server
			was restarted. [RT #27344]

3263.	[bug]		"rndc sync" did not affect the unsigned side of an
			inline-signing zone. [RT #27337]

915 916 917
3262.	[bug]		Signed responses were handled incorrectly by RPZ.
			[RT #27316]

918 919
3261.	[func]		RRset ordering now defaults to random. [RT #27174]

920 921
3260.	[bug]		"rrset-order cyclic" could appear not to rotate
			for some query patterns.  [RT #27170/27185]
922

Evan Hunt's avatar
Evan Hunt committed
923 924
	--- 9.9.0rc1 released ---

925 926 927
3259.	[bug]		named-compilezone: Suppress "dump zone to <file>"
			message when writing to stdout. [RT #27109]

928 929 930
3258.	[test]		Add "forcing full sign with unreadable keys" test.
			[RT #27153]

931 932 933
3257.	[bug]		Do not generate a error message when calling fsync()
			in a pipe or socket. [RT #27109]

934 935 936 937 938 939
3256.	[bug]		Disable empty zones for lwresd -C. [RT #27139]

3255.	[func]		No longer require that a empty zones be explicitly
			enabled or that a empty zone is disabled for
			RFC 1918 empty zones to be configured. [RT #27139]

940 941 942
3254.	[bug]		Set isc_socket_ipv6only() on the IPv6 control channels.
			[RT #22249]

943 944 945
3253.	[bug]		Return DNS_R_SYNTAX when the input to a text field is
			too long. [RT #26956]

946 947 948 949 950
3252.	[bug]		When master zones using inline-signing were
			updated while the server was offline, the source
			zone could fall out of sync with the signed
			copy. They can now resynchronize. [RT #26676]

951 952 953 954 955
3251.	[bug]		Enforce a upper bound (65535 bytes) on the amount of
			memory dns_sdlz_putrr() can allocate per record to
			prevent run away memory consumption on ISC_R_NOSPACE.
			[RT #26956]

956 957 958 959
3250.	[func]		'configure --enable-developer'; turn on various
			configure options, normally off by default, that
			we want developers to build and test with. [RT #27103]

960 961 962 963 964 965 966 967 968 969 970 971 972
3249.	[bug]		Update log message when saving slave zones files for
			analysis after load failures. [RT #27087]

3248.	[bug]		Configure options --enable-fixed-rrset and
			--enable-exportlib were incompatible with each
			other. [RT #27087]

3247.	[bug]		'raw' format zones failed to preserve load order
			breaking 'fixed' sort order. [RT #27087]

3246.	[bug]		Named failed to start with a empty also-notify list.
			[RT #27087]

973 974 975 976
3245.	[bug]		Don't report a error unchanged serials unless there
			were other changes when thawing a zone with
			ixfr-fromdifferences. [RT #26845]

977
3244.	[func]		Added readline support to nslookup and nsupdate.
Mark Andrews's avatar
Mark Andrews committed
978
			Also simplified nsupdate syntax to make "update"
979 980
			and "prereq" optional. [RT #24659]

981 982 983
3243.	[port]		freebsd,netbsd,bsdi: the thread defaults were not
			being properly set.

Mark Andrews's avatar
Mark Andrews committed
984
3242.	[func]		Extended the header of raw-format master files to
985 986 987 988 989 990
			include the serial number of the zone from which
			they were generated, if different (as in the case
			of inline-signing zones).  This is to be used in
			inline-signing zones, to track changes between the
			unsigned and signed versions of the zone, which may
			have different serial numbers.
Mark Andrews's avatar
Mark Andrews committed
991

992
			(Note: raw zonefiles generated by this version of
Mark Andrews's avatar
Mark Andrews committed
993
			BIND are no longer compatible with prior versions.
994 995 996 997 998
			To generate a backward-compatible raw zonefile
			using dnssec-signzone or named-compilezone, specify
			output format "raw=0" instead of simply "raw".)
			[RT #26587]

999 1000 1001
3241.	[bug]		Address race conditions in the resolver code.
			[RT #26889]

1002 1003
3240.	[bug]		DNSKEY state change events could be missed. [RT #26874]

1004 1005 1006 1007
3239.	[bug]		dns_dnssec_findmatchingkeys needs to use a consistent
			timestamp. [RT #26883]

3238.	[bug]		keyrdata was not being reinitialized in
1008 1009
			lib/dns/rbtdb.c:iszonesecure. [RT#26913]

1010 1011
3237.	[bug]		dig -6 didn't work with +trace. [RT #26906]

Evan Hunt's avatar
Evan Hunt committed
1012 1013 1014
3236.	[bug]		Backed out changes #3182 and #3202, related to
			EDNS(0) fallback behavior. [RT #26416]

1015 1016 1017 1018
3235.	[func]		dns_db_diffx, a extended dns_db_diff which returns
			the generated diff and optionally writes it to a
			journal. [RT #26386]

1019 1020
3234.	[bug]		'make depend' produced invalid makefiles. [RT #26830]

1021 1022 1023
3233.	[bug]		'rndc freeze/thaw' didn't work for inline zones.
			[RT #26632]

1024 1025 1026
3232.	[bug]		Zero zone->curmaster before return in
			dns_zone_setmasterswithkeys(). [RT #26732]

Mark Andrews's avatar
Mark Andrews committed
1027
3231.	[bug]		named could fail to send a incompressible zone.
1028 1029
			[RT #26796]

Mark Andrews's avatar
[ -> ]  
Mark Andrews committed
1030
3230.	[bug]		'dig axfr' failed to properly handle a multi-message
1031 1032
			axfr with a serial of 0. [RT #26796]

1033 1034 1035
3229.	[bug]		Fix local variable to struct var assignment
			found by CLANG warning.

Mark Andrews's avatar
Mark Andrews committed
1036 1037
3228.	[tuning]	Dynamically grow symbol table to improve zone
			loading performance. [RT #26523]
1038

1039 1040 1041
3227.	[bug]		Interim fix to make WKS's use of getprotobyname()
			and getservbyname() self thread safe. [RT #26232]

1042 1043
3226.	[bug]		Address minor resource leakages. [RT #26624]

1044 1045 1046
3225.	[bug]		Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
			messages. [RT #26507]

1047 1048
3224.	[bug]		'rndc signing' argument parsing was broken. [RT #26684]

1049 1050 1051
3223.	[bug]		'task_test privilege_drop' generated false positives.
			[RT #26766]

1052 1053 1054
3222.	[cleanup]	Replace dns_journal_{get,set}_bitws with
			dns_journal_{get,set}_sourceserial. [RT #26634]

Mark Andrews's avatar
Mark Andrews committed
1055
3221.	[bug]		Fixed a potential core dump on shutdown due to
1056 1057 1058
			referencing fetch context after it's been freed.
			[RT #26720]

Mark Andrews's avatar
Mark Andrews committed
1059 1060
	--- 9.9.0b2 released ---

1061
3220.	[bug]		Change #3186 was incomplete; dns_db_rpz_findips()
Mark Andrews's avatar
Mark Andrews committed
1062 1063
			could fail to set the database version correctly,
			causing an assertion failure. [RT #26180]
1064

Mark Andrews's avatar