CHANGES 182 KB
Newer Older
Mark Andrews's avatar
Mark Andrews committed
1
2
3
4
1731.	[placeholder]	rt12581

1730.	[placeholder]	rt12581

Mark Andrews's avatar
Mark Andrews committed
5
6
7
8
9
10
1729.	[placeholder]	rt12634

1728.	[placeholder]	rt12634

1727.	[placeholder]	rt12634

Mark Andrews's avatar
aix5    
Mark Andrews committed
11
12
1726.	[port]		aix5: add support for aix5

Mark Andrews's avatar
Mark Andrews committed
13
14
1725.	[placeholder]	rt12541

Mark Andrews's avatar
Mark Andrews committed
15
16
1724.	[placeholder]	rt12557

17
18
1723.	[cleanup]	Silence compiler warnings from t_tasks.c. [RT #12493]

19
20
1722.	[bug]		Don't commit the journal on malformed ixfr streams.
			[RT #12519]
Mark Andrews's avatar
Mark Andrews committed
21

22
23
1721.	[bug]		Error message from the journal processing were not
			always identifing the relevent journal. [RT #12519]
Mark Andrews's avatar
Mark Andrews committed
24

25
26
1720.	[bug]		'dig +chase' did not terminate on a RFC 2308 Type 1
			negative response. [RT #12506]
Mark Andrews's avatar
Mark Andrews committed
27

28
29
1719.	[bug]		named was not correctly caching a RFC 2308 Type 1
			negative response. [RT #12506]
Mark Andrews's avatar
Mark Andrews committed
30

31
32
33
1718.	[bug]		nsupdate was not handling RFC 2308 Type 3 negative
			responses when looking for the zone / master server.
			[RT #12506]
Mark Andrews's avatar
Mark Andrews committed
34

35
36
37
1717.	[port]		solaris: ifconfig.sh did not support Solaris 10.
			"ifconfig.sh down" didn't work for Solaris 9.

38
39
40
1716.	[doc]		named.conf(5) was being installed in the wrong
			location.  [RT# 12441]

Mark Andrews's avatar
Mark Andrews committed
41
42
1715.	[placeholder]	rt11681

43
44
45
46
1714.	[bug]		dig/host/nslookup were only trying the first
			address when a nameserver was specified by name.
			[RT #12286]

47
48
49
1713.	[port]		linux: extend capset failure message to say:
			please ensure that the capset kernel module is
			loaded.  see insmod(8)
Mark Andrews's avatar
Mark Andrews committed
50

51
52
1712.	[bug]		Missing FULLCHECK for "trusted-key" in dig.

53
1711.	[func]		'rndc unfreeze' has been deprecated by 'rndc thaw'.
Mark Andrews's avatar
Mark Andrews committed
54

Mark Andrews's avatar
Mark Andrews committed
55
56
1710.	[placeholder]	rt9479

57
1709.	[port]		solaris: add SMF support from Sun.
Mark Andrews's avatar
Mark Andrews committed
58

59
60
61
62
1708.	[cleanup]	Replaced dns_fullname_hash() with dns_name_fullhash()
			for conformance to the name space convention.  Binary
			backward compatibility to the old function name is
			provided. [RT #12376]
63

64
65
1707.	[contrib]	sdb/ldap updated to version 1.0-beta.

66
67
1706.	[bug]		'rndc stop' failed to cause zones to be flushed
			sometimes. [RT #12328]
Mark Andrews's avatar
Mark Andrews committed
68

Mark Andrews's avatar
Mark Andrews committed
69
70
1705.	[placeholder]	rt12327

71
72
73
1704.	[port]		lwres needed a snprintf() implementation for
			platforms without snprintf().  Add missing
			"#include <isc/print.h>". [RT #12321]
Mark Andrews's avatar
Mark Andrews committed
74

75
76
1703.	[bug]		named would loop sending NOTIFY messages when it
			failed to receive a response. [RT #12322]
Mark Andrews's avatar
Mark Andrews committed
77

78
79
1702.	[bug]		also-notify should not be applied to builtin zones.
			[RT #12323]
Mark Andrews's avatar
Mark Andrews committed
80

81
82
1701.	[doc]		A minimal named.conf man page.

83
84
85
1700.	[func]		nslookup is no longer to be treated as deprecated.
			Remove "deprecated" warning message.  Add man page.

86
87
1699.	[bug]		dnssec-signzone can generate "not exact" errors
			when resigning. [RT #12281]
Mark Andrews's avatar
Mark Andrews committed
88

89
90
1698.	[doc]		Use reserved IPv6 documentation prefix.

91
92
93
94
1697.	[bug]		xxx-source{,-v6} was not effective when it
			specified one of listening addresses and a
			different port than the listening port. [RT #12257]

95
96
97
98
1696.	[bug]		dnssec-signzone failed to clean out nodes that
			consisted of only NSEC and RRSIG records.
			[RT #12154]

99
100
1695.	[bug]		DS records when forwarding require special handling.
			[RT #12133]
Mark Andrews's avatar
Mark Andrews committed
101

102
103
1694.	[bug]		Report if the builtin views of "_default" / "_bind"
			are defined in named.conf. [RT #12023]
Mark Andrews's avatar
Mark Andrews committed
104

105
106
1693.	[bug]		max-journal-size was not effective for master zones
			with ixfr-from-differences set. [RT# 12024]
Mark Andrews's avatar
Mark Andrews committed
107

Mark Andrews's avatar
Mark Andrews committed
108
1692.	[bug]		Don't set -I, -L and -R flags when libcrypto is in
109
110
			/usr/lib. [RT #11971]

111
112
1691.	[bug]		sdb's attachversion was not complete. [RT #11990]

113
114
1690.	[bug]		Delay detaching view from the client until UPDATE
			processing completes when shutting down. [RT #11714]
Mark Andrews's avatar
Mark Andrews committed
115

116
117
118
1689.	[bug]		DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
			contained gratuitous semicolons. [RT #11707]

119
120
1688.	[bug]		LDFLAGS was not supported.

121
122
1687.	[bug]		Race condition in dispatch. [RT #10272]

123
124
125
1686.	[bug]		Named sent a extraneous NOTIFY when it received a
			redundant UPDATE request. [RT #11943]

Rob Austein's avatar
Rob Austein committed
126
1685.	[bug]		Change #1679 loop tests weren't quite right.
127

Mark Andrews's avatar
Mark Andrews committed
128
129
1684.	[placeholder]	rt10704

130
131
1683.	[bug]		dig +sigchase could leak memory. [RT #11445]

132
133
1682.	[port]		Update configure test for (long long) printf format.
			[RT #5066]
Mark Andrews's avatar
Mark Andrews committed
134

135
136
1681.	[bug]		Only set SO_REUSEADDR when a port is specified in
			isc_socket_bind(). [RT #11742]
Mark Andrews's avatar
Mark Andrews committed
137

138
1680.	[func]		rndc: the source address can now be specified.
Mark Andrews's avatar
Mark Andrews committed
139

140
141
142
1679.	[bug]		When there was a single nameserver with multiple
			addresses for a zone not all addresses were tried.
			[RT #11706]
Mark Andrews's avatar
Mark Andrews committed
143

144
145
1678.	[bug]		RRSIG should use TYPEXXXXX for unknown types.

146
147
1677.	[bug]		dig: +aaonly didn't work, +aaflag undocumented.

Mark Andrews's avatar
Mark Andrews committed
148
149
1676.	[placeholder]	rt10864

150
151
152
1675.	[bug]		named would sometimes add extra NSEC records to
			the authority section.
			
153
154
155
1674.	[port]		linux: increase buffer size used to scan
			/proc/net/if_inet6.

156
157
158
1673.	[port]		linux: issue a error messages if IPv6 interface
			scans fails.

Mark Andrews's avatar
Mark Andrews committed
159
1672.	[cleanup]	Tests which only function in a threaded build
160
161
162
163
			now return R:THREADONLY (rather than R:UNTESTED)
			in a non-threaded build.

1671.	[contrib]	queryperf: add NAPTR to the list of known types.
164

165
166
167
168
169
1670.	[func]		Log UPDATE requests to slave zones without an acl as
			"disabled" at debug level 3. [RT# 11657]

1669.	[placeholder]

170
171
1668.	[bug]		DIG_SIGCHASE was making bin/dig/host dump core.

172
173
1667.	[port]		linux: not all versions have IF_NAMESIZE.

174
175
1666.	[bug]		The optional port on hostnames in dual-stack-servers
			was being ignored.
Mark Andrews's avatar
Mark Andrews committed
176

177
178
1665.	[func]		rndc now allows addresses to be set in the
			server clauses.
Mark Andrews's avatar
Mark Andrews committed
179

Rob Austein's avatar
1664    
Rob Austein committed
180
181
1664.	[bug]		nsupdate needed KEY for SIG(0), not DNSKEY.

182
1663.	[func]		Look for OpenSSL by default.
Mark Andrews's avatar
Mark Andrews committed
183

Mark Andrews's avatar
wording    
Mark Andrews committed
184
185
1662.	[bug]		Change #1658 failed to change one use of 'type'
			to 'keytype'.
186

187
188
1661.	[bug]		Restore dns_name_concatenate() call in
			adb.c:set_target().  [RT #11582]
Mark Andrews's avatar
Mark Andrews committed
189

190
191
1660.	[bug]		win32: connection_reset_fix() was being called
			unconditionally.  [RT #11595]
Mark Andrews's avatar
Mark Andrews committed
192

193
194
195
196
197
198
199
1659.	[cleanup]	Cleanup some messages that were referring to KEY vs
			DNSKEY, NXT vs NSEC and SIG vs RRSIG.

1658.	[func]		Update dnssec-keygen to default to KEY for HMAC-MD5
			and DH.  Tighten which options apply to KEY and
			DNSKEY records.

200
201
202
203
204
1657.	[doc]		ARM: document query log output.

1656.	[doc]		Update DNSSEC description in ARM to cover DS, NSEC
			DNSKEY and RRSIG.  [RT #11542]

205
206
1655.	[bug]		Logging multiple versions w/o a size was broken.
			[RT #11446]
Mark Andrews's avatar
Mark Andrews committed
207

208
209
1654.	[bug]		isc_result_totext() contained array bounds read
			error.
Mark Andrews's avatar
Mark Andrews committed
210

211
212
213
1653.	[func]		Add key type checking to dst_key_fromfilename(),
			DST_TYPE_KEY should be used to read TSIG, TKEY and
			SIG(0) keys.
Mark Andrews's avatar
Mark Andrews committed
214

215
1652.	[bug]		TKEY still uses KEY.
Mark Andrews's avatar
Mark Andrews committed
216

217
218
219
220
1651.	[bug]		dig: process multiple dash options.

1650.	[bug]		dig, nslookup: flush standard out after each command.

221
222
1649.	[bug]		Silence "unexpected non-minimal diff" message.
			[RT #11206]
Mark Andrews's avatar
Mark Andrews committed
223

224
225
226
1648.	[func]		Update dnssec-lookaside named.conf syntax to support
			multiple dnssec-lookaside namespaces (not yet
			implemented).  
Mark Andrews's avatar
Mark Andrews committed
227

228
229
230
1647.	[bug]		It was possible trigger a INSIST when chasing a DS
			record that required walking back over a empty node.
			[RT #11445]
Mark Andrews's avatar
Mark Andrews committed
231

232
233
1646.	[bug]		win32: logging file versions didn't work with
			non-UNC filenames.  [RT#11486]
Mark Andrews's avatar
Mark Andrews committed
234

235
236
237
1645.	[bug]		named could trigger a REQUIRE failure if multiple
			masters with keys are specified.

238
239
1644.	[bug]		Update the journal modification time after a
			sucessfull refresh query. [RT #11436]
Mark Andrews's avatar
Mark Andrews committed
240

241
242
243
1643.	[bug]		dns_db_closeversion() could leak memory / node
			references. [RT #11163]

244
245
246
1642.	[port]		Support OpenSSL implementations which don't have
			DSA support. [RT #11360]

247
248
1641.	[bug]		Update the check-names description in ARM. [RT #11389]

249
250
251
1640.	[bug]		win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
			incorrectly closing the socket.  [RT #11291]

252
253
1639.	[func]		Initial dlv system test.

254
255
256
1638.	[bug]		"ixfr-from-differences" could generate a REQUIRE
			failure if the journal open failed. [RT #11347]
			
257
258
1637.	[bug]		Node reference leak on error in addnoqname().

259
260
261
262
1636.	[bug]		The dump done callback could get ISC_R_SUCCESS even if
			a error had occured.  The database version no longer
			matched the version of the database that was dumped.

263
264
1635.	[bug]		Memory leak on error in query_addds().

265
266
1634.	[bug]		named didn't supply a useful error message when it
			detected duplicate views.  [RT #11208]
Mark Andrews's avatar
Mark Andrews committed
267

268
269
270
1633.	[bug]		named should return NOTIMP to update requests to a
			slaves without a allow-update-forwarding acl specified.
			[RT #11331]
Mark Andrews's avatar
Mark Andrews committed
271

272
273
1632.	[bug]		nsupdate failed to send prerequisite only UPDATE
			messages. [RT #11288]
Mark Andrews's avatar
Mark Andrews committed
274

275
276
277
1631.	[bug]		dns_journal_compact() could sometimes corrupt the
			journal. [RT #11124]

278
1630.	[contrib]	queryperf: add support for IPv6 transport.
279

280
281
1629.	[func]		dig now supports IPv6 scoped addresses with the
			extended format in the local-server part. [RT #8753]
282

283
284
1628.	[bug]		Typo in Compaq Trucluster support. [RT# 11264]

285
286
287
1627.	[bug]		win32: sockets were not being closed when the
			last external reference was removed. [RT# 11179]

288
289
1626.	[bug]		--enable-getifaddrs was broken. [RT#11259]

290
291
1625.	[bug]		named failed to load/transfer RFC2535 signed zones
			which contained CNAMES. [RT# 11237]
Mark Andrews's avatar
Mark Andrews committed
292

293
294
1624.	[bug]		zonemgr_putio() call should be locked. [RT# 11163]

295
296
297
1623.	[bug]		A serial number of zero was being displayed in the
			"sending notifies" log message when also-notify was
			used. [RT #11177]
Mark Andrews's avatar
Mark Andrews committed
298

299
300
1622.	[func]		probe the system to see if IPV6_(RECV)PKTINFO is
			available, and suppress wildcard binding if not.
301

302
303
1621.	[bug]		match-destinations did not work for IPv6 TCP queries.
			[RT# 11156]
304

305
1620.	[func]		When loading a zone report if it is signed. [RT #11149]
Mark Andrews's avatar
Mark Andrews committed
306

307
308
309
1619.	[bug]		Missing ISC_LIST_UNLINK in end_reserved_dispatches().
			[RT# 11118]

310
311
312
1618.	[bug]		Fencepost errors in dns_name_ishostname() and
			dns_name_ismailbox() could trigger a INSIST().

313
314
1617.	[port]		win32: VC++ 6.0 support.

315
316
1616.	[compat]	Ensure that named's version is visible in the core
			dump. [RT #11127]
Mark Andrews's avatar
Mark Andrews committed
317

318
319
320
1615.	[port]		Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
			it is defined.

321
1614.	[port]		win32: silence resource limit messages. [RT# 11101]
Mark Andrews's avatar
Mark Andrews committed
322

323
324
325
1613.	[bug]		Builds would fail on machines w/o a if_nametoindex().
			Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
			[RT #11119]
Mark Andrews's avatar
Mark Andrews committed
326

327
328
1612.	[bug]		check-names at the option/view level could trigger
			an INSIST. [RT# 11116]
Mark Andrews's avatar
Mark Andrews committed
329

330
331
1611.	[bug]		solaris: IPv6 interface scanning failed to cope with
			no active IPv6 interfaces.
Mark Andrews's avatar
Mark Andrews committed
332

333
334
335
1610.	[bug]		On dual stack machines "dig -b" failed to set the
			address type to be looked up with "@server".
			[RT #11069]
Mark Andrews's avatar
Mark Andrews committed
336

337
338
339
1609.	[func]		dig now has support to chase DNSSEC signature chains.
			Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.

340
341
342
1608.	[func]		dig and host now accept -4/-6 to select IP transport
			to use when making queries.

343
344
345
1607.	[bug]		dig, host and nslookup were still using random()
			to generate query ids. [RT# 11013]

Mark Andrews's avatar
Mark Andrews committed
346
1606.	[bug]	 	DLV insecurity proof was failing.
347
348

1605.	[func]		New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
Mark Andrews's avatar
Mark Andrews committed
349

350
351
352
353
1604.	[bug]		A xfrout_ctx_create() failure would result in
			xfrout_ctx_destroy() being called with a
			partially initaliased structure.
			
354
355
1603.	[bug]		nsupdate: set interactive based on isatty().
			[RT# 10929]
Mark Andrews's avatar
Mark Andrews committed
356

357
358
1602.	[bug]		Logging to a file failed unless a size was specified.
			[RT# 10925]
Mark Andrews's avatar
Mark Andrews committed
359

360
361
362
1601.	[bug]		Silence spurious warning 'both "recursion no;" and 
			"allow-recursion" active' warning from view "_bind".
			[RT# 10920]
Mark Andrews's avatar
Mark Andrews committed
363

364
365
1600.	[bug]		Duplicate zone pre-load checks were not case
			insensitive.
Mark Andrews's avatar
Mark Andrews committed
366

367
1599.	[bug]		Fix memory leak on error path when checking named.conf.
Mark Andrews's avatar
Mark Andrews committed
368

369
370
1598.	[func]		Specify that certain parts of the namespace must
			be secure (dnssec-must-be-secure).
Mark Andrews's avatar
Mark Andrews committed
371

Mark Andrews's avatar
Mark Andrews committed
372
373
1597.	[placeholder]	rt6496a

374
1596.	[func]		Accept 'notify-source' style syntax for query-source.
Mark Andrews's avatar
Mark Andrews committed
375

376
377
1595.	[func]		New notify type 'master-only'.  Enable notify for
			master zones only.
Mark Andrews's avatar
Mark Andrews committed
378

379
380
1594.	[bug]		'rndc dumpdb' could prevent named from answering
			queries while the dump was in progress.  [RT #10565]
Mark Andrews's avatar
Mark Andrews committed
381

382
383
1593.	[bug]		rndc should return "unknown command" to unknown
			commands. [RT# 10642]
Mark Andrews's avatar
Mark Andrews committed
384

Mark Andrews's avatar
Mark Andrews committed
385
1592.	[bug]		configure_view() could leak a dispatch. [RT# 10675]
386

387
388
1591.	[bug]		libbind: updated to BIND 8.4.5.

389
390
1590.	[port]		netbsd: update thread support.

391
392
1589.	[func]		DNSSEC lookaside validation.

393
394
1588.	[bug]		win32: TCP sockets could become blocked. [RT #10115]

395
396
1587.	[bug]		dns_message_settsigkey() failed to clear existing key.
			[RT #10590]
Mark Andrews's avatar
Mark Andrews committed
397

398
399
1586.	[func]		"check-names" is now implemented.

Mark Andrews's avatar
Mark Andrews committed
400
1585.	[placeholder]
Mark Andrews's avatar
Mark Andrews committed
401

Mark Andrews's avatar
Mark Andrews committed
402
1584.	[bug]		"make test" failed with a read only source tree.
403
			[RT #10461]
Mark Andrews's avatar
Mark Andrews committed
404

405
406
1583.	[bug]		Records add via UPDATE failed to get the correct trust
			level. [RT #10452]
Mark Andrews's avatar
Mark Andrews committed
407

408
409
1582.	[bug]		rrset-order failed to work on RRsets with more
			than 32 elements. [RT #10381]
Mark Andrews's avatar
Mark Andrews committed
410

411
1581.	[func]		Disable DNSSEC support by default.  To enable
412
			DNSSEC specify "dnssec-enable yes;" in named.conf.
413

Mark Andrews's avatar
Mark Andrews committed
414
1580.	[bug]		Zone destruction on final detach takes a long time.
415
			[RT #3746]
Mark Andrews's avatar
Mark Andrews committed
416

417
1579.	[bug]		Multiple task managers could not be created.
Mark Andrews's avatar
Mark Andrews committed
418

419
420
1578.	[bug]		Don't use CLASS E IPv4 addresses when resolving.
			[RT #10346]
Mark Andrews's avatar
Mark Andrews committed
421

422
423
1577.	[bug]		Use isc_uint32_t in ultrasparc optimizer bug
			workaround code. [RT #10331]
Mark Andrews's avatar
Mark Andrews committed
424

425
426
1576.	[bug]		Race condition in dns_dispatch_addresponse().
			[RT# 10272]
Mark Andrews's avatar
Mark Andrews committed
427

428
1575.	[func]		Log TSIG name on TSIG verify failure. [RT #4404]
Mark Andrews's avatar
Mark Andrews committed
429

430
431
432
1574.	[bug]		Don't attempt to open the controls socket(s) when
			running tests. [RT #9091]

433
434
435
1573.	[port]		linux: update to libtool 1.5.2 so that
			"make install DESTDIR=/xx" works with
			"configure --with-libtool".  [RT #9941]
Mark Andrews's avatar
Mark Andrews committed
436

437
438
1572.	[bug]		nsupdate: sign the soa query to find the enclosing
			zone if the server is specified. [RT #10148]
Mark Andrews's avatar
Mark Andrews committed
439

440
1571.	[bug]		rbt:hash_node() could fail leaving the hash table
Mark Andrews's avatar
Mark Andrews committed
441
			in an inconsistent state.  [RT #10208]
Mark Andrews's avatar
Mark Andrews committed
442

443
444
445
1570.	[bug]		nsupdate failed to handle classes other than IN.
			New keyword 'class' which sets the default class.
			[RT #10202]
Mark Andrews's avatar
Mark Andrews committed
446

447
448
1569.	[func]		nsupdate new command 'answer' which displays the
			complete answer message to the last update.
Mark Andrews's avatar
Mark Andrews committed
449

450
1568.	[bug]		nsupdate now reports that the update failed in
Mark Andrews's avatar
Mark Andrews committed
451
			interactive mode. [RT# 10236]
Mark Andrews's avatar
Mark Andrews committed
452

453
454
1567.	[bug]		B.ROOT-SERVERS.NET is now 192.228.79.201.

455
456
457
458
1566.	[port]		Support for the cmsg framework on Solaris and HP/UX.
			This also solved the problem that match-destinations
			for IPv6 addresses did not work on these systems.
			[RT #10221]
459

Mark Andrews's avatar
Mark Andrews committed
460
461
462
1565.	[bug]		CD flag should be copied to outgoing queries unless
			the query is under a secure entry point in which case
			CD should be set.
463

464
465
466
467
468
1564.	[func]		Attempt to provide a fallback entropy source to be
			used if named is running chrooted and named is unable
			to open entropy source within the chroot area.
			[RT #10133]

Mark Andrews's avatar
Mark Andrews committed
469
470
1563.	[bug]		Gracefully fail when unable to obtain neither an IPv4
			nor an IPv6 dispatch. [RT #10230]
471

472
473
474
1562.	[bug]		isc_socket_create() and isc_socket_accept() could
			leak memory under error conditions. [RT #10230]

475
476
477
1561.	[bug]		It was possible to release the same name twice if
			named ran out of memory. [RT #10197]

478
479
480
1560.	[port]		FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
			and EAI_NONAME to the same value.

481
1559.	[port]		named should ignore SIGFSZ.
Mark Andrews's avatar
Mark Andrews committed
482

483
484
485
486
487
488
489
490
491
1558.	[func]		New DNSSEC 'disable-algorithms'.  Support entry into
			child zones for which we don't have a supported
			algorithm.  Such child zones are treated as unsigned.

1557.	[func]		Implement missing DNSSEC tests for
			* NOQNAME proof with wildcard answers.
			* NOWILDARD proof with NXDOMAIN.
			Cache and return NOQNAME with wildcard answers.

Mark Andrews's avatar
Mark Andrews committed
492
1556.	[bug]		nsupdate now treats all names as fully qualified.
493
			[RT #6427]
Mark Andrews's avatar
Mark Andrews committed
494

Mark Andrews's avatar
now->no    
Mark Andrews committed
495
1555.	[func]		'rrset-order cyclic' no longer has a random starting
496
497
			point. [RT #7572]

Mark Andrews's avatar
Mark Andrews committed
498
1554.	[bug]		dig, host, nslookup failed when no nameservers
499
500
			were specified in /etc/resolv.conf. [RT #8232]

501
1553.	[bug]		The windows socket code could stop accepting
Mark Andrews's avatar
Mark Andrews committed
502
			connections. [RT#10115]
503

504
505
1552.	[bug]		Accept NOTIFY requests from mapped masters if
			matched-mapped is set. [RT #10049]
Mark Andrews's avatar
Mark Andrews committed
506

507
508
1551.	[port]		Open "/dev/null" before calling chroot().

509
510
1550.	[port]		Call tzset(), if available, before calling chroot().

511
512
513
1549.	[func]		named-checkzone can now write out the zone contents
			in a easily parsable format (-D and -o).

Mark Andrews's avatar
Mark Andrews committed
514
515
516
1548.	[bug]		When parsing APL records it was possible to silently
			accept out of range ADDRESSFAMILY values. [RT# 9979]

517
518
519
1547.	[bug]		Named wasted memory recording duplicate lame zone
			entries. [RT #9341]

520
521
522
1546.	[bug]		We were rejecting valid secure CNAME to negative
			answers.

523
524
525
526
1545.	[bug]		It was possible to leak memory if named was unable to
			bind to the specified transfer source and TSIG was
			being used. [RT #10120]

527
528
1544.	[bug]		Named would logged a single entry to a file despite it
			being over the specified size limit.
Mark Andrews's avatar
Mark Andrews committed
529

530
1543.	[bug]		Logging using "versions unlimited" did not work.
Mark Andrews's avatar
Mark Andrews committed
531

Mark Andrews's avatar
Mark Andrews committed
532
533
1542.	[placeholder]

534
1541.	[func]		NSEC now uses new bitmap format.
Mark Andrews's avatar
Mark Andrews committed
535

536
537
1540.	[bug]		"rndc reload <dynamiczone>" was silently accepted.
			[RT #8934]
Mark Andrews's avatar
Mark Andrews committed
538

539
540
1539.	[bug]		Open UDP sockets for notify-source and transfer-source
			that use reserved ports at startup. [RT #9475]
Mark Andrews's avatar
Mark Andrews committed
541

Mark Andrews's avatar
Mark Andrews committed
542
543
1538.	[placeholder]	rt9997

544
1537.	[func]		New option "querylog".  If set specify whether query
Mark Andrews's avatar
Mark Andrews committed
545
			logging is to be enabled or disabled at startup.
Mark Andrews's avatar
Mark Andrews committed
546

547
548
1536.	[bug]		Windows socket code failed to log a error description
			when returning ISC_R_UNEXPECTED. [RT #9998]
Mark Andrews's avatar
Mark Andrews committed
549

Mark Andrews's avatar
Mark Andrews committed
550
551
1535.	[placeholder]

552
1534.	[bug]		Race condition when priming cache. [RT# 9940]
Mark Andrews's avatar
Mark Andrews committed
553

Mark Andrews's avatar
Mark Andrews committed
554
1533.	[func]		Warn if both "recursion no;" and "allow-recursion"
555
			are active. [RT# 4389]
Mark Andrews's avatar
Mark Andrews committed
556

557
558
559
1532.	[port]		netbsd: the configure test for <sys/sysctl.h>
			requires <sys/param.h>.

Mark Andrews's avatar
Mark Andrews committed
560
1531.	[port]		AIX more libtool fixes.
561

562
1530.	[bug]		It was possible to trigger a INSIST() failure if a
Mark Andrews's avatar
grammar    
Mark Andrews committed
563
			slave master file was removed at just the correct
564
565
			moment. [RT #9462]

Mark Andrews's avatar
Mark Andrews committed
566
1529.	[bug]		"notify explicit;" failed to log that NOTIFY messages
Mark Andrews's avatar
Mark Andrews committed
567
			were being sent for the zone. [RT# 9442]
Mark Andrews's avatar
Mark Andrews committed
568

569
570
1528.	[cleanup]	Simplify some dns_name_ functions based on the
			deprecation of bitstring labels.
571

572
573
1527.	[cleanup]	Reduce the number of gettimeofday() calls without
			losing necessary timer granularity.
574

575
576
1526.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
577
578
1525.	[bug]		dns_cache_create() could trigger a REQUIRE
			failure in isc_mem_put() during error cleanup.
579
			[RT# 9360]
580

581
582
583
1524.	[port]		AIX needs to be able to resolve all symbols when
			creating shared libraries (--with-libtool).

584
585
1523.	[bug]		Fix race condition in rbtdb. [RT# 9189]

586
587
588
1522.	[bug]		dns_db_findnode() relax the requirements on 'name'.
			[RT# 9286]

589
590
591
1521.	[bug]		dns_view_createresolver() failed to check the
			result from isc_mem_create(). [RT# 9294]

592
593
1520.	[protocol]	Add SSHFP (SSH Finger Print) type.

594
595
596
1519.	[bug]		dnssec-signzone:nsec_setbit() computed the wrong
			length of the new bitmap.

Mark Andrews's avatar
Mark Andrews committed
597
1518.	[bug]		dns_nsec_buildrdata(), and hence dns_nsec_build(),
598
599
600
			contained a off-by-one error when working out the
			number of octets in the bitmap.

Mark Andrews's avatar
Mark Andrews committed
601
602
1517.	[port]		Support for IPv6 interface scanning on HP/UX and
			TrueUNIX 5.1.
603

Mark Andrews's avatar
Mark Andrews committed
604
1516.	[func]		Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
605

Mark Andrews's avatar
Mark Andrews committed
606
607
1515.	[func]		Allow transfer source to be set in a server statement.
			[RT #6496]
608

Mark Andrews's avatar
Mark Andrews committed
609
610
1514.	[bug]		named: isc_hash_destroy() was being called too early.
			[RT #9160]
611

Mark Andrews's avatar
Mark Andrews committed
612
1513.	[doc]		Add "US" to root-delegation-only exclude list.
613

Mark Andrews's avatar
Mark Andrews committed
614
615
1512.	[bug]		Extend the delegation-only logging to return query
			type, class and responding nameserver.
616

Mark Andrews's avatar
Mark Andrews committed
617
618
1511.	[bug]		delegation-only was generating false positives
			on negative answers from subzones.
619

Mark Andrews's avatar
Mark Andrews committed
620
621
622
623
624
1510.	[func]		New view option "root-delegation-only".  Apply
			delegation-only check to all TLDs and root.
			Note there are some TLDs that are NOT delegation
			only (e.g. DE, LV, US and MUSEUM) these can be excluded
			from the checks by using exclude.
625

Mark Andrews's avatar
Mark Andrews committed
626
627
628
			root-delegation-only exclude {
				"DE"; "LV"; "US"; "MUSEUM";
			};
629

Mark Andrews's avatar
Mark Andrews committed
630
631
1509.	[bug]		Hint zones should accept delegation-only.  Forward
			zone should not accept delegation-only.
632

Mark Andrews's avatar
Mark Andrews committed
633
634
1508.	[bug]		Don't apply delegation-only checks to answers from
			forwarders.
635

Mark Andrews's avatar
Mark Andrews committed
636
637
1507.	[bug]		Handle BIND 8 style returns to NS queries to parents
			when making delegation-only checks.
638

Mark Andrews's avatar
Mark Andrews committed
639
1506.	[bug]		Wrong return type for dns_view_isdelegationonly().
640

Mark Andrews's avatar
Mark Andrews committed
641
1505.	[bug]		Uninitialized rdataset in sdb. [RT #8750]
642

Mark Andrews's avatar
Mark Andrews committed
643
1504.	[func]		New zone type "delegation-only".
644

Mark Andrews's avatar
Mark Andrews committed
645
1503.	[port]		win32: install libeay32.dll outside of system32.
646

Mark Andrews's avatar
Mark Andrews committed
647
1502.	[bug]		nsupdate: adjust timeouts for UPDATE requests over TCP.
648

Mark Andrews's avatar
Mark Andrews committed
649
650
1501.	[func]		Allow TCP queue length to be specified via
			named.conf, tcp-listen-queue.
651

Mark Andrews's avatar
Mark Andrews committed
652
653
1500.	[bug]		host failed to lookup MX records.  Also look up
			AAAA records.
654

Mark Andrews's avatar
Mark Andrews committed
655
656
1499.	[bug]		isc_random need to be seeded better if arc4random()
			is not used.
657

Mark Andrews's avatar
Mark Andrews committed
658
1498.	[port]		bsdos: 5.x support.
Mark Andrews's avatar
Mark Andrews committed
659

Mark Andrews's avatar
Mark Andrews committed
660
1497.	[placeholder]
661

Mark Andrews's avatar
Mark Andrews committed
662
1496.	[port]		test for pthread_attr_setstacksize().
663

Mark Andrews's avatar
Mark Andrews committed
664
1495.	[cleanup]	Replace hash functions with universal hash.
665

Mark Andrews's avatar
Mark Andrews committed
666
1494.	[security]	Turn on RSA BLINDING as a precaution.
Mark Andrews's avatar
Mark Andrews committed
667

Mark Andrews's avatar
Mark Andrews committed
668
1493.	[placeholder]
669

Mark Andrews's avatar
Mark Andrews committed
670
671
1492.	[cleanup]	Preserve rwlock quota context when upgrading /
			downgrading. [RT #5599]
672

Mark Andrews's avatar
Mark Andrews committed
673
674
1491.	[bug]		dns_master_dump*() would produce extraneous $ORIGIN
			lines. [RT #6206]
675

Mark Andrews's avatar
Mark Andrews committed
676
677
1490.	[bug]		Accept reading state as well as working state in
			ns_client_next(). [RT #6813]
678

Mark Andrews's avatar
Mark Andrews committed
679
680
1489.	[compat]	Treat 'allow-update' on slave zones as a warning.
			[RT #3469]
681

Mark Andrews's avatar
Mark Andrews committed
682
683
1488.	[bug]		Don't override trust levels for glue addresses.
			[RT #5764]
684

Mark Andrews's avatar
Mark Andrews committed
685
686
687
1487.	[bug]		A REQUIRE() failure could be triggered if a zone was
			queued for transfer and the zone was then removed.
			[RT #6189]
688

Mark Andrews's avatar
Mark Andrews committed
689
690
1486.	[bug]		isc_print_snprintf() '%%' consumed one too many format
			characters. [RT# 8230]
691

Mark Andrews's avatar
Mark Andrews committed
692
1485.	[bug]		gen failed to handle high type values. [RT #6225]
693

Mark Andrews's avatar
Mark Andrews committed
694
695
1484.	[bug]		The number of records reported after a AXFR was wrong.
			[RT #6229]
696

Mark Andrews's avatar
Mark Andrews committed
697
698
699
1483.	[bug]		dig axfr failed if the message id in the answer failed
			to match that in the request.  Only the id in the first
			message is required to match. [RT #8138]
Mark Andrews's avatar
Mark Andrews committed
700

Mark Andrews's avatar
Mark Andrews committed
701
702
703
1482.	[bug]		named could fail to start if the kernel supports
			IPv6 but no interfaces are configured.  Similarly
			for IPv4. [RT #6229]
704

Mark Andrews's avatar
Mark Andrews committed
705
706
1481.	[bug]		Refresh and stub queries failed to use masters keys
			if specified. [RT #7391]
707

Mark Andrews's avatar
Mark Andrews committed
708
709
710
711
712
1480.	[bug]		Provide replay protection for rndc commands.  Full
			replay protection requires both rndc and named to
			be updated.  Partial replay protection (limited
			exposure after restart) is provided if just named
			is updated.
713

Mark Andrews's avatar
Mark Andrews committed
714
715
716
1479.	[bug]		cfg_create_tuple() failed to handle out of
			memory cleanup.  parse_list() would leak memory
			on syntax errors.
Mark Andrews's avatar
Mark Andrews committed
717

Mark Andrews's avatar
Mark Andrews committed
718
1478.	[port]		ifconfig.sh didn't account for other virtual
Mark Andrews's avatar
Mark Andrews committed
719
			interfaces.  It now takes a optional argument
Mark Andrews's avatar
Mark Andrews committed
720
			to specify the first interface number. [RT #3907]
721

Mark Andrews's avatar
Mark Andrews committed
722
1477.	[bug]		memory leak using stub zones and TSIG.
Mark Andrews's avatar
Mark Andrews committed
723

Mark Andrews's avatar
Mark Andrews committed
724
1476.	[placeholder]
725

Mark Andrews's avatar
Mark Andrews committed
726
1475.	[port]		Probe for old sprintf().
727

Mark Andrews's avatar
Mark Andrews committed
728
729
1474.	[port]		Provide strtoul() and memmove() for platforms
			without them.
730

Mark Andrews's avatar
Mark Andrews committed
731
732
1473.	[bug]		create_map() and create_string() failed to handle out
			of memory cleanup.  [RT #6813]
733

Mark Andrews's avatar
Mark Andrews committed
734
1472.	[contrib]	idnkit-1.0 from JPNIC, replaces mdnkit.
735

Mark Andrews's avatar
Mark Andrews committed
736
1471.	[bug]		libbind: updated to BIND 8.4.0.
737

Mark Andrews's avatar
Mark Andrews committed
738
1470.	[bug]		Incorrect length passed to snprintf. [RT #5966]
739

Mark Andrews's avatar
Mark Andrews committed
740
741
1469.	[func]		Log end of outgoing zone transfer at same level
			as the start of transfer is logged. [RT #4441]
742

Mark Andrews's avatar
Mark Andrews committed
743
744
1468.	[func]		Internal zones are no longer counted for
			'rndc status'.  [RT #4706]
745

Mark Andrews's avatar
Mark Andrews committed
746
1467.	[func]		$GENERATES now supports optional class and ttl.
747

Mark Andrews's avatar
Mark Andrews committed
748
749
1466.	[bug]		lwresd configuration errors resulted in memory
			and lock leaks.  [RT #5228]
750

Mark Andrews's avatar
Mark Andrews committed
751
752
753
1465.	[bug]		isc_base64_decodestring() and isc_base64_tobuffer()
			failed to check that trailing bits were zero allowing
			some invalid base64 strings to be accepted.  [RT #5397]
754

Mark Andrews's avatar
Mark Andrews committed
755
756
1464.	[bug]		Preserve "out of zone" data for outgoing zone
			transfers. [RT #5192]
757

Mark Andrews's avatar
Mark Andrews committed
758
759
1463.	[bug]		dns_rdata_from{wire,struct}() failed to catch bad
			NXT bit maps. [RT #5577]
760

Mark Andrews's avatar
Mark Andrews committed
761
762
1462.	[bug]		parse_sizeval() failed to check the token type.
			[RT #5586]
763

Mark Andrews's avatar
Mark Andrews committed
764
1461.	[bug]		Remove deadlock from rbtdb code. [RT #5599]
765

Mark Andrews's avatar
Mark Andrews committed
766
767
1460.	[bug]		inet_pton() failed to reject certain malformed
			IPv6 literals.
Mark Andrews's avatar
Mark Andrews committed
768

Mark Andrews's avatar
Mark Andrews committed
769
1459.	[placeholder]
770

Mark Andrews's avatar
Mark Andrews committed
771
1458.	[cleanup]	sprintf() -> snprintf().
772

Mark Andrews's avatar
Mark Andrews committed
773
774
1457.	[port]		Provide strlcat() and strlcpy() for platforms without
			them.
775

Mark Andrews's avatar
Mark Andrews committed
776
1456.	[contrib]	gen-data-queryperf.py from Stephane Bortzmeyer.
777

Mark Andrews's avatar
Mark Andrews committed
778
779
1455.	[bug]		<netaddr> missing from server grammar in
			doc/misc/options. [RT #5616]
780

Mark Andrews's avatar
Mark Andrews committed
781
782
783
784
785
1454.	[port]		Use getifaddrs() if available for interface scanning.
			--disable-getifaddrs to override.  Glibc currently
			has a getifaddrs() that does not support IPv6.
			Use --enable-getifaddrs=glibc to force the use of
			this version under linux machines.
786

Mark Andrews's avatar
Mark Andrews committed
787
1453.	[doc]		ARM: $GENERATE example wasn't accurate. [RT #5298]
Mark Andrews's avatar
Mark Andrews committed
788

Mark Andrews's avatar
Mark Andrews committed
789
1452.	[placeholder]
790

Mark Andrews's avatar
Mark Andrews committed
791
792
1451.	[bug]		rndc-confgen didn't exit with a error code for all
			failures. [RT #5209]
793

Mark Andrews's avatar
Mark Andrews committed
794
795
1450.	[bug]		Fetching expired glue failed under certain
			circumstances.  [RT #5124]
796

Mark Andrews's avatar
Mark Andrews committed
797
798
1449.	[bug]		query_addbestns() didn't handle running out of memory
			gracefully.
799

Mark Andrews's avatar
Mark Andrews committed
800
1448.	[bug]		Handle empty wildcards labels.
801

Mark Andrews's avatar
Mark Andrews committed
802
803
804
1447.	[bug]		We were casting (unsigned int) to and from (void *).
			rdataset->private4 is now rdataset->privateuint4
			to reflect a type change.
805

Mark Andrews's avatar
Mark Andrews committed
806
807
808
1446.	[func]		Implemented undocumented alternate transfer sources
			from BIND 8.  See use-alt-transfer-source,
			alt-transfer-source and alt-transfer-source-v6.
809

Mark Andrews's avatar
Mark Andrews committed
810
811
812
813
814
815
			SECURITY: use-alt-transfer-source is ENABLED unless
			you are using views.  This may cause a security risk
			resulting in accidental disclosure of wrong zone
			content if the master supplying different source
			content based on IP address.  If you are not certain
			ISC recommends setting use-alt-transfer-source no;
816

Mark Andrews's avatar
Mark Andrews committed
817
818
819
1445.	[bug]		DNS_ADBFIND_STARTATROOT broke stub zones.  This has
			been replaced with DNS_ADBFIND_STARTATZONE which
			causes the search to start using the closest zone.
820

Mark Andrews's avatar
Mark Andrews committed
821
822
1444.	[func]		dns_view_findzonecut2() allows you to specify if the
			cache should be searched for zone cuts.
823

Mark Andrews's avatar
Mark Andrews committed
824
825
1443.	[func]		Masters lists can now be specified and referenced
			in zone masters clauses and other masters lists.
826

Mark Andrews's avatar
Mark Andrews committed
827
828
829
830
1442.	[func]		New functions for manipulating port lists:
			dns_portlist_create(), dns_portlist_add(),
			dns_portlist_remove(), dns_portlist_match(),
			dns_portlist_attach() and dns_portlist_detach().
831

Mark Andrews's avatar
Mark Andrews committed
832
833
1441.	[func]		It is now possible to tell dig to bind to a specific
			source port.
834

Mark Andrews's avatar
Mark Andrews committed
835
836
837
1440.	[func]		It is now possible to tell named to avoid using
			certain source ports (avoid-v4-udp-ports,
			avoid-v6-udp-ports).
838

Mark Andrews's avatar
Mark Andrews committed
839
840
841
1439.	[bug]		Named could return NOERROR with certain NOTIFY
			failures.  Return NOTAUTH if the NOTIFY zone is
			not being served.
842

Mark Andrews's avatar
Mark Andrews committed
843
1438.	[func]		Log TSIG (if any) when logging NOTIFY requests.
844

Mark Andrews's avatar
Mark Andrews committed
845
1437.	[bug]		Leave space for stdio to work in. [RT #5033]
846

Mark Andrews's avatar
Mark Andrews committed
847
848
1436.	[func]		dns_zonemgr_resumexfrs() can be used to restart
			stalled transfers.
849

Mark Andrews's avatar
Mark Andrews committed
850
851
852
853
1435.	[bug]		zmgr_resume_xfrs() was being called read locked
			rather than write locked.  zmgr_resume_xfrs()
			was not being called if the zone was being
			shutdown.
854

Mark Andrews's avatar
Mark Andrews committed
855
856
1434.	[bug]		"rndc reconfig" failed to initiate the initial
			zone transfer of new slave zones.
857

Mark Andrews's avatar
Mark Andrews committed
858
859
860
1433.	[bug]		named could trigger a REQUIRE failure if it could
			not get a file descriptor when attempting to write
			a master file. [RT #4347]
861

Mark Andrews's avatar
Mark Andrews committed
862
863
1432.	[func]		The advertised EDNS UDP buffer size can now be set
			via named.conf (edns-udp-size).
864

Mark Andrews's avatar
Mark Andrews committed
865
866
1431.	[bug]		isc_print_snprintf() "%s" with precision could walk off
			end of argument. [RT #5191]
867

Mark Andrews's avatar
Mark Andrews committed
868
1430.	[port]		linux: IPv6 interface scanning support.
869

Mark Andrews's avatar
Mark Andrews committed
870
1429.	[bug]		Prevent the cache getting locked to old servers.
Mark Andrews's avatar
Mark Andrews committed
871

Mark Andrews's avatar
Mark Andrews committed
872
1428.	[placeholder]
873

Mark Andrews's avatar
Mark Andrews committed
874
1427.	[bug]		Race condition in adb with threaded build.
Mark Andrews's avatar
Mark Andrews committed
875

Mark Andrews's avatar
Mark Andrews committed
876
1426.	[placeholder]
877

Mark Andrews's avatar
Mark Andrews committed
878
879
1425.	[port]		linux/libbind: define __USE_MISC when testing *_r()
			function prototypes in netdb.h.  [RT #4921]
880

Mark Andrews's avatar
Mark Andrews committed
881
1424.	[bug]		EDNS version not being correctly printed.
882

Mark Andrews's avatar
Mark Andrews committed
883
1423.	[contrib]	queryperf: added A6 and SRV.
884

Mark Andrews's avatar
Mark Andrews committed
885
1422.	[func]		Log name/type/class when denying a query.  [RT #4663]
886

Mark Andrews's avatar
Mark Andrews committed
887
888
889
1421.	[func]		Differentiate updates that don't succeed due to
			prerequisites (unsuccessful) vs other reasons
			(failed).
890

Mark Andrews's avatar
Mark Andrews committed
891
1420.	[port]		solaris: work around gcc optimizer bug.