CHANGES 188 KB
Newer Older
1
2
3
1789.	[bug]		Prerequisite test for tkey and dnssec could fail
			with "configure --with-libtool".

4
5
6
1788.	[bug]		libbind9.la/libbind9.so needs to link against
			libisccfg.la/libisccfg.so.

7
8
1787.	[port]		HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.

9
10
11
12
1786.	[port]		AIX: libt_api needs to be taught to look for
			T_testlist in the main executable (--with-libtool).
			[RT #13239]

13
14
15
1785.	[bug]		libbind9.la/libbind9.so needs to link against
			libisc.la/libisc.so.

16
17
18
19
1784.	[cleanup]	"libtool -allow-undefined" is the default.
			Leave hooks in configure to allow it to be set
			if needed in the future.

20
21
22
1783.	[cleanup]	We only need one copy of libtool.m4, ltmain.sh in the
			source tree.

23
24
1782.	[port]		OSX: --with-libtool + --enable-libbind broke on
			__evOptMonoTime.  [RT #13219]
Mark Andrews's avatar
Mark Andrews committed
25

26
1781.	[port]		FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
Mark Andrews's avatar
Mark Andrews committed
27

28
29
1780.	[bug]		Update libtool to 1.5.10.

30
31
1779.	[port]		OSF 5.1: libtool didn't handle -pthread correctly.

32
33
34
1778.   [port]   	HUX 11.11: fix broken IN6ADDR_ANY_INIT and
			IN6ADDR_LOOPBACK_INIT macros.

35
36
1777.   [port]   	OSF 5.1: fix broken IN6ADDR_ANY_INIT and
			IN6ADDR_LOOPBACK_INIT macros.
37

38
39
1776.   [port]   	Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
                        IN6ADDR_LOOPBACK_INIT macros.
Mark Andrews's avatar
Mark Andrews committed
40

41
42
1775.	[bug]		Only compile getnetent_r.c when threaded. [RT #13205]

43
44
1774.	[port]		Aix: Silence compiler warnings / build failures.
			[RT #13154]
Mark Andrews's avatar
Mark Andrews committed
45

46
1773.	[bug]		Fast retry on host / net unreachable. [RT #13153]
Mark Andrews's avatar
Mark Andrews committed
47

Mark Andrews's avatar
Mark Andrews committed
48
49
1772.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
50
51
1771.	[placeholder]

52
53
54
1770.	[bug]		named-checkconf failed to report missing a missing
			file clause for rbt{64} master/hint zones. [RT#13009]

55
56
57
1769.	[port]		win32: change compiler flags /MTd ==> /MDd,
			/MT ==> /MD.

58
59
60
1768.	[bug]		nsecnoexistnodata() could be called with a non-NSEC
			rdataset. [RT #12907]

61
62
1767.	[port]		Builds on IPv6 platforms without IPv6 Advanced API
			support for (struct in6_pktinfo) failed.  [RT #13077]
Mark Andrews's avatar
Mark Andrews committed
63

64
65
1766.	[bug]		Update the master file timestamp on successful refresh
			as well as the journal's timestamp. [RT# 13062]
Mark Andrews's avatar
Mark Andrews committed
66

67
68
1765.	[bug]		configure --with-openssl=auto failed. [RT #12937]

69
70
71
1764.	[bug]		dns_zone_replacedb failed to emit a error message
			if there was no SOA record in the replacment db.
			[RT #13016]
Mark Andrews's avatar
Mark Andrews committed
72

73
74
1763.	[func]		Perform sanity checks on NS records which refer to
			'in zone' names. [RT #13002]
Mark Andrews's avatar
Mark Andrews committed
75

76
77
1762.	[bug]		isc_interfaceiter_create() could return ISC_R_SUCCESS
			even when it failed. [RT #12995]
Mark Andrews's avatar
Mark Andrews committed
78

79
80
1761.	[bug]		'rndc dumpdb' didn't report unassociated entries.
			[RT #12971]
Mark Andrews's avatar
Mark Andrews committed
81

82
83
1760.	[bug]		Host / net unreachable was not penalising rtt
			estimates. [RT #12970]
Mark Andrews's avatar
Mark Andrews committed
84

85
86
1759.	[bug]		Named failed to startup if the OS supported IPv6
			but had no IPv6 interfaces configured. [RT #12942]
Mark Andrews's avatar
Mark Andrews committed
87

Mark Andrews's avatar
Mark Andrews committed
88
89
1758.	[placeholder]	rt12933

90
1757.	[func]		host now can turn on memory debugging flags with '-m'.
Mark Andrews's avatar
Mark Andrews committed
91

92
93
1756.	[func]		named-checkconf now checks the logging configuration.
			[RT #12352]
Mark Andrews's avatar
Mark Andrews committed
94

95
96
1755.	[func]		allow-update is now settable at the options / view
			level. [RT #6636]
Mark Andrews's avatar
Mark Andrews committed
97

98
99
100
1754.	[bug]		We wern't always attempting to query the parent
			server for the DS records at the zone cut.
			[RT #12774]
Mark Andrews's avatar
Mark Andrews committed
101

102
103
104
1753.	[bug]		Don't serve a slave zone which has no NS records.
			[RT #12894]

105
106
107
108
1752.	[port]		Move isc_app_start() to after ns_os_daemonise()
			as some fork() implementations unblock the signals
			that are blocked by isc_app_start(). [RT #12810]

109
110
1751.	[bug]		--enable-getifaddrs failed under linux. [RT #12867]

111
112
113
1750.	[port]		lib/bind/make/rules.in:subdirs was not bash friendly.
			[RT #12864]

114
115
1749.	[bug]		'check-names response ignore;' failed to ignore.
			[RT #12866]
Mark Andrews's avatar
Mark Andrews committed
116

117
118
1748.	[func]		dig now returns the byte count for axfr/ixfr.
			
119
120
121
1747.	[bug]		BIND 8 compatability: named/named-checkconf failed
			to parse "host-statistics-max" in named.conf.

Mark Andrews's avatar
Mark Andrews committed
122
1746.	[func]		Make public the function to read a key file,
123
124
			dst_key_read_public(). [RT #12450]

125
126
127
1745.	[bug]		Dig/host/nslookup accept replies from link locals
			regardless of scope if no scope was specified when
			query was sent. [RT #12745]
Mark Andrews's avatar
Mark Andrews committed
128

129
130
131
1744.	[bug]		If tuple2msgname() failed to convert a tuple to
			a name a REQUIRE could be triggered. [RT #12796]

132
1743.	[bug]		If isc_taskmgr_create() was not able to create the
133
134
135
136
			requested number of worker threads then destruction
			of the manager would trigger an INSIST() failure.
			[RT #12790]
			
137
138
139
140
141
1742.	[bug]		Deleting all records at a node then adding a
			previously existing record, in a single UPDATE
			transaction, failed to leave / regenerate the
			associated RRSIG records. [RT #12788]

142
143
144
1741.	[bug]		Deleting all records at a node in a secure zone
			using a update-policy grant failed. [RT #12787]

145
146
147
148
149
150
1740.	[bug]		Replace rbt's hash algorithm as it performed badly
			with certain zones. [RT #12729]
			
			NOTE: a hash context now needs to be established
			via isc_hash_create() if the application was not
			already doing this.
Mark Andrews's avatar
Mark Andrews committed
151

152
153
1739.	[bug]		dns_rbt_deletetree() could incorrectly return
			ISC_R_QUOTA.  [RT #12695]
Mark Andrews's avatar
Mark Andrews committed
154

155
1738.	[bug]		Enable overrun checking by default. [RT #12695]
Mark Andrews's avatar
Mark Andrews committed
156

Mark Andrews's avatar
Mark Andrews committed
157
1737.	[bug]		named failed if more than 16 masters were specified.
158
159
			[RT #12627]

160
161
162
1736.	[bug]		dst_key_fromnamedfile() could fail to read a
			public key. [RT #12687]
			
163
164
165
1735.	[bug]		'dig +sigtrace' could die with a REQUIRE failure.
			[RE #12688]

166
167
168
1734.	[cleanup]	'rndc-confgen -a -t' remove extra '/' in path.
			[RT #12588]

169
170
1733.	[bug]		Return non-zero exit status on initial load failure.
			[RT #12658]
Mark Andrews's avatar
Mark Andrews committed
171

172
173
1732.	[bug]		'rrset-order name "*"' wasn't being applied to ".".
			[RT #12467]
Mark Andrews's avatar
Mark Andrews committed
174

175
176
1731.	[port]		darwin: relax version test in ifconfig.sh.
			[RT #12581]
Mark Andrews's avatar
Mark Andrews committed
177

178
179
1730.	[port]		Determine the length type used by the socket API.
			[RT #12581]
Mark Andrews's avatar
Mark Andrews committed
180

181
1729.	[func]		Improve check-names error messages.
Mark Andrews's avatar
Mark Andrews committed
182

183
1728.	[doc]		Update check-names documentation.
Mark Andrews's avatar
Mark Andrews committed
184

185
186
1727.	[bug]		named-checkzone: check-names support didn't match
			documentation.
Mark Andrews's avatar
Mark Andrews committed
187

Mark Andrews's avatar
aix5    
Mark Andrews committed
188
189
1726.	[port]		aix5: add support for aix5

190
191
1725.	[port]		linux: update error message on interaction of threads,
			capabilities and setuid support (named -u). [RT #12541]
Mark Andrews's avatar
Mark Andrews committed
192

193
194
1724.	[bug]		Look for DNSKEY records with "dig +sigtrace".
			[RT #12557]
Mark Andrews's avatar
Mark Andrews committed
195

196
197
1723.	[cleanup]	Silence compiler warnings from t_tasks.c. [RT #12493]

198
199
1722.	[bug]		Don't commit the journal on malformed ixfr streams.
			[RT #12519]
Mark Andrews's avatar
Mark Andrews committed
200

201
202
1721.	[bug]		Error message from the journal processing were not
			always identifing the relevent journal. [RT #12519]
Mark Andrews's avatar
Mark Andrews committed
203

204
205
1720.	[bug]		'dig +chase' did not terminate on a RFC 2308 Type 1
			negative response. [RT #12506]
Mark Andrews's avatar
Mark Andrews committed
206

207
208
1719.	[bug]		named was not correctly caching a RFC 2308 Type 1
			negative response. [RT #12506]
Mark Andrews's avatar
Mark Andrews committed
209

210
211
212
1718.	[bug]		nsupdate was not handling RFC 2308 Type 3 negative
			responses when looking for the zone / master server.
			[RT #12506]
Mark Andrews's avatar
Mark Andrews committed
213

214
215
216
1717.	[port]		solaris: ifconfig.sh did not support Solaris 10.
			"ifconfig.sh down" didn't work for Solaris 9.

217
218
219
1716.	[doc]		named.conf(5) was being installed in the wrong
			location.  [RT# 12441]

220
221
1715.	[func]		'dig +trace' now randomly selects the next servers
			to try.  Report if there is a bad delegation.
Mark Andrews's avatar
Mark Andrews committed
222

223
224
225
226
1714.	[bug]		dig/host/nslookup were only trying the first
			address when a nameserver was specified by name.
			[RT #12286]

227
228
229
1713.	[port]		linux: extend capset failure message to say:
			please ensure that the capset kernel module is
			loaded.  see insmod(8)
Mark Andrews's avatar
Mark Andrews committed
230

231
232
1712.	[bug]		Missing FULLCHECK for "trusted-key" in dig.

233
1711.	[func]		'rndc unfreeze' has been deprecated by 'rndc thaw'.
Mark Andrews's avatar
Mark Andrews committed
234

235
236
1710.	[func]		'rndc notify zone [class [view]]' resend the NOTIFY
			messages for the specified zone. [RT #9479]
Mark Andrews's avatar
Mark Andrews committed
237

238
1709.	[port]		solaris: add SMF support from Sun.
Mark Andrews's avatar
Mark Andrews committed
239

240
241
242
243
1708.	[cleanup]	Replaced dns_fullname_hash() with dns_name_fullhash()
			for conformance to the name space convention.  Binary
			backward compatibility to the old function name is
			provided. [RT #12376]
244

245
246
1707.	[contrib]	sdb/ldap updated to version 1.0-beta.

247
248
1706.	[bug]		'rndc stop' failed to cause zones to be flushed
			sometimes. [RT #12328]
Mark Andrews's avatar
Mark Andrews committed
249

250
1705.	[func]		Allow the journal's name to be changed via named.conf.
Mark Andrews's avatar
Mark Andrews committed
251

252
253
254
1704.	[port]		lwres needed a snprintf() implementation for
			platforms without snprintf().  Add missing
			"#include <isc/print.h>". [RT #12321]
Mark Andrews's avatar
Mark Andrews committed
255

256
257
1703.	[bug]		named would loop sending NOTIFY messages when it
			failed to receive a response. [RT #12322]
Mark Andrews's avatar
Mark Andrews committed
258

259
260
1702.	[bug]		also-notify should not be applied to builtin zones.
			[RT #12323]
Mark Andrews's avatar
Mark Andrews committed
261

262
263
1701.	[doc]		A minimal named.conf man page.

264
265
266
1700.	[func]		nslookup is no longer to be treated as deprecated.
			Remove "deprecated" warning message.  Add man page.

267
268
1699.	[bug]		dnssec-signzone can generate "not exact" errors
			when resigning. [RT #12281]
Mark Andrews's avatar
Mark Andrews committed
269

270
271
1698.	[doc]		Use reserved IPv6 documentation prefix.

272
273
274
275
1697.	[bug]		xxx-source{,-v6} was not effective when it
			specified one of listening addresses and a
			different port than the listening port. [RT #12257]

276
277
278
279
1696.	[bug]		dnssec-signzone failed to clean out nodes that
			consisted of only NSEC and RRSIG records.
			[RT #12154]

280
281
1695.	[bug]		DS records when forwarding require special handling.
			[RT #12133]
Mark Andrews's avatar
Mark Andrews committed
282

283
284
1694.	[bug]		Report if the builtin views of "_default" / "_bind"
			are defined in named.conf. [RT #12023]
Mark Andrews's avatar
Mark Andrews committed
285

286
287
1693.	[bug]		max-journal-size was not effective for master zones
			with ixfr-from-differences set. [RT# 12024]
Mark Andrews's avatar
Mark Andrews committed
288

Mark Andrews's avatar
Mark Andrews committed
289
1692.	[bug]		Don't set -I, -L and -R flags when libcrypto is in
290
291
			/usr/lib. [RT #11971]

292
293
1691.	[bug]		sdb's attachversion was not complete. [RT #11990]

294
295
1690.	[bug]		Delay detaching view from the client until UPDATE
			processing completes when shutting down. [RT #11714]
Mark Andrews's avatar
Mark Andrews committed
296

297
298
299
1689.	[bug]		DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
			contained gratuitous semicolons. [RT #11707]

300
301
1688.	[bug]		LDFLAGS was not supported.

302
303
1687.	[bug]		Race condition in dispatch. [RT #10272]

304
305
306
1686.	[bug]		Named sent a extraneous NOTIFY when it received a
			redundant UPDATE request. [RT #11943]

Rob Austein's avatar
Rob Austein committed
307
1685.	[bug]		Change #1679 loop tests weren't quite right.
308

309
310
1684.	[func]		ixfr-from-differences now takes master and slave in
			addition to yes and no at the options and view levels.
Mark Andrews's avatar
Mark Andrews committed
311

312
313
1683.	[bug]		dig +sigchase could leak memory. [RT #11445]

314
315
1682.	[port]		Update configure test for (long long) printf format.
			[RT #5066]
Mark Andrews's avatar
Mark Andrews committed
316

317
318
1681.	[bug]		Only set SO_REUSEADDR when a port is specified in
			isc_socket_bind(). [RT #11742]
Mark Andrews's avatar
Mark Andrews committed
319

320
1680.	[func]		rndc: the source address can now be specified.
Mark Andrews's avatar
Mark Andrews committed
321

322
323
324
1679.	[bug]		When there was a single nameserver with multiple
			addresses for a zone not all addresses were tried.
			[RT #11706]
Mark Andrews's avatar
Mark Andrews committed
325

326
327
1678.	[bug]		RRSIG should use TYPEXXXXX for unknown types.

328
329
1677.	[bug]		dig: +aaonly didn't work, +aaflag undocumented.

330
331
332
333
334
335
1676.	[func]		New option "allow-query-cache".  This lets
			allow-query be used to specify the default zone
			access level rather than having to have every
			zone override the global value.  allow-query-cache
			can be set at both the options and view levels.
			If allow-query-cache is not set allow-query applies.
Mark Andrews's avatar
Mark Andrews committed
336

337
338
339
1675.	[bug]		named would sometimes add extra NSEC records to
			the authority section.
			
340
341
342
1674.	[port]		linux: increase buffer size used to scan
			/proc/net/if_inet6.

343
344
345
1673.	[port]		linux: issue a error messages if IPv6 interface
			scans fails.

Mark Andrews's avatar
Mark Andrews committed
346
1672.	[cleanup]	Tests which only function in a threaded build
347
348
349
350
			now return R:THREADONLY (rather than R:UNTESTED)
			in a non-threaded build.

1671.	[contrib]	queryperf: add NAPTR to the list of known types.
351

352
353
354
355
356
1670.	[func]		Log UPDATE requests to slave zones without an acl as
			"disabled" at debug level 3. [RT# 11657]

1669.	[placeholder]

357
358
1668.	[bug]		DIG_SIGCHASE was making bin/dig/host dump core.

359
360
1667.	[port]		linux: not all versions have IF_NAMESIZE.

361
362
1666.	[bug]		The optional port on hostnames in dual-stack-servers
			was being ignored.
Mark Andrews's avatar
Mark Andrews committed
363

364
365
1665.	[func]		rndc now allows addresses to be set in the
			server clauses.
Mark Andrews's avatar
Mark Andrews committed
366

Rob Austein's avatar
1664    
Rob Austein committed
367
368
1664.	[bug]		nsupdate needed KEY for SIG(0), not DNSKEY.

369
1663.	[func]		Look for OpenSSL by default.
Mark Andrews's avatar
Mark Andrews committed
370

Mark Andrews's avatar
wording    
Mark Andrews committed
371
372
1662.	[bug]		Change #1658 failed to change one use of 'type'
			to 'keytype'.
373

374
375
1661.	[bug]		Restore dns_name_concatenate() call in
			adb.c:set_target().  [RT #11582]
Mark Andrews's avatar
Mark Andrews committed
376

377
378
1660.	[bug]		win32: connection_reset_fix() was being called
			unconditionally.  [RT #11595]
Mark Andrews's avatar
Mark Andrews committed
379

380
381
382
383
384
385
386
1659.	[cleanup]	Cleanup some messages that were referring to KEY vs
			DNSKEY, NXT vs NSEC and SIG vs RRSIG.

1658.	[func]		Update dnssec-keygen to default to KEY for HMAC-MD5
			and DH.  Tighten which options apply to KEY and
			DNSKEY records.

387
388
389
390
391
1657.	[doc]		ARM: document query log output.

1656.	[doc]		Update DNSSEC description in ARM to cover DS, NSEC
			DNSKEY and RRSIG.  [RT #11542]

392
393
1655.	[bug]		Logging multiple versions w/o a size was broken.
			[RT #11446]
Mark Andrews's avatar
Mark Andrews committed
394

395
396
1654.	[bug]		isc_result_totext() contained array bounds read
			error.
Mark Andrews's avatar
Mark Andrews committed
397

398
399
400
1653.	[func]		Add key type checking to dst_key_fromfilename(),
			DST_TYPE_KEY should be used to read TSIG, TKEY and
			SIG(0) keys.
Mark Andrews's avatar
Mark Andrews committed
401

402
1652.	[bug]		TKEY still uses KEY.
Mark Andrews's avatar
Mark Andrews committed
403

404
405
406
407
1651.	[bug]		dig: process multiple dash options.

1650.	[bug]		dig, nslookup: flush standard out after each command.

408
409
1649.	[bug]		Silence "unexpected non-minimal diff" message.
			[RT #11206]
Mark Andrews's avatar
Mark Andrews committed
410

411
412
413
1648.	[func]		Update dnssec-lookaside named.conf syntax to support
			multiple dnssec-lookaside namespaces (not yet
			implemented).  
Mark Andrews's avatar
Mark Andrews committed
414

415
416
417
1647.	[bug]		It was possible trigger a INSIST when chasing a DS
			record that required walking back over a empty node.
			[RT #11445]
Mark Andrews's avatar
Mark Andrews committed
418

419
420
1646.	[bug]		win32: logging file versions didn't work with
			non-UNC filenames.  [RT#11486]
Mark Andrews's avatar
Mark Andrews committed
421

422
423
424
1645.	[bug]		named could trigger a REQUIRE failure if multiple
			masters with keys are specified.

425
426
1644.	[bug]		Update the journal modification time after a
			sucessfull refresh query. [RT #11436]
Mark Andrews's avatar
Mark Andrews committed
427

428
429
430
1643.	[bug]		dns_db_closeversion() could leak memory / node
			references. [RT #11163]

431
432
433
1642.	[port]		Support OpenSSL implementations which don't have
			DSA support. [RT #11360]

434
435
1641.	[bug]		Update the check-names description in ARM. [RT #11389]

436
437
438
1640.	[bug]		win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
			incorrectly closing the socket.  [RT #11291]

439
440
1639.	[func]		Initial dlv system test.

441
442
443
1638.	[bug]		"ixfr-from-differences" could generate a REQUIRE
			failure if the journal open failed. [RT #11347]
			
444
445
1637.	[bug]		Node reference leak on error in addnoqname().

446
447
448
449
1636.	[bug]		The dump done callback could get ISC_R_SUCCESS even if
			a error had occured.  The database version no longer
			matched the version of the database that was dumped.

450
451
1635.	[bug]		Memory leak on error in query_addds().

452
453
1634.	[bug]		named didn't supply a useful error message when it
			detected duplicate views.  [RT #11208]
Mark Andrews's avatar
Mark Andrews committed
454

455
456
457
1633.	[bug]		named should return NOTIMP to update requests to a
			slaves without a allow-update-forwarding acl specified.
			[RT #11331]
Mark Andrews's avatar
Mark Andrews committed
458

459
460
1632.	[bug]		nsupdate failed to send prerequisite only UPDATE
			messages. [RT #11288]
Mark Andrews's avatar
Mark Andrews committed
461

462
463
464
1631.	[bug]		dns_journal_compact() could sometimes corrupt the
			journal. [RT #11124]

465
1630.	[contrib]	queryperf: add support for IPv6 transport.
466

467
468
1629.	[func]		dig now supports IPv6 scoped addresses with the
			extended format in the local-server part. [RT #8753]
469

470
471
1628.	[bug]		Typo in Compaq Trucluster support. [RT# 11264]

472
473
474
1627.	[bug]		win32: sockets were not being closed when the
			last external reference was removed. [RT# 11179]

475
476
1626.	[bug]		--enable-getifaddrs was broken. [RT#11259]

477
478
1625.	[bug]		named failed to load/transfer RFC2535 signed zones
			which contained CNAMES. [RT# 11237]
Mark Andrews's avatar
Mark Andrews committed
479

480
481
1624.	[bug]		zonemgr_putio() call should be locked. [RT# 11163]

482
483
484
1623.	[bug]		A serial number of zero was being displayed in the
			"sending notifies" log message when also-notify was
			used. [RT #11177]
Mark Andrews's avatar
Mark Andrews committed
485

486
487
1622.	[func]		probe the system to see if IPV6_(RECV)PKTINFO is
			available, and suppress wildcard binding if not.
488

489
490
1621.	[bug]		match-destinations did not work for IPv6 TCP queries.
			[RT# 11156]
491

492
1620.	[func]		When loading a zone report if it is signed. [RT #11149]
Mark Andrews's avatar
Mark Andrews committed
493

494
495
496
1619.	[bug]		Missing ISC_LIST_UNLINK in end_reserved_dispatches().
			[RT# 11118]

497
498
499
1618.	[bug]		Fencepost errors in dns_name_ishostname() and
			dns_name_ismailbox() could trigger a INSIST().

500
501
1617.	[port]		win32: VC++ 6.0 support.

502
503
1616.	[compat]	Ensure that named's version is visible in the core
			dump. [RT #11127]
Mark Andrews's avatar
Mark Andrews committed
504

505
506
507
1615.	[port]		Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
			it is defined.

508
1614.	[port]		win32: silence resource limit messages. [RT# 11101]
Mark Andrews's avatar
Mark Andrews committed
509

510
511
512
1613.	[bug]		Builds would fail on machines w/o a if_nametoindex().
			Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
			[RT #11119]
Mark Andrews's avatar
Mark Andrews committed
513

514
515
1612.	[bug]		check-names at the option/view level could trigger
			an INSIST. [RT# 11116]
Mark Andrews's avatar
Mark Andrews committed
516

517
518
1611.	[bug]		solaris: IPv6 interface scanning failed to cope with
			no active IPv6 interfaces.
Mark Andrews's avatar
Mark Andrews committed
519

520
521
522
1610.	[bug]		On dual stack machines "dig -b" failed to set the
			address type to be looked up with "@server".
			[RT #11069]
Mark Andrews's avatar
Mark Andrews committed
523

524
525
526
1609.	[func]		dig now has support to chase DNSSEC signature chains.
			Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.

Mark Andrews's avatar
Mark Andrews committed
527
528
529
530
			DNSSEC validation code in dig coded by Olivier Courtay
			(olivier.courtay@irisa.fr) for the IDsA project
			(http://idsa.irisa.fr).

531
532
533
1608.	[func]		dig and host now accept -4/-6 to select IP transport
			to use when making queries.

534
535
536
1607.	[bug]		dig, host and nslookup were still using random()
			to generate query ids. [RT# 11013]

Mark Andrews's avatar
Mark Andrews committed
537
1606.	[bug]	 	DLV insecurity proof was failing.
538
539

1605.	[func]		New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
Mark Andrews's avatar
Mark Andrews committed
540

541
542
543
544
1604.	[bug]		A xfrout_ctx_create() failure would result in
			xfrout_ctx_destroy() being called with a
			partially initaliased structure.
			
545
546
1603.	[bug]		nsupdate: set interactive based on isatty().
			[RT# 10929]
Mark Andrews's avatar
Mark Andrews committed
547

548
549
1602.	[bug]		Logging to a file failed unless a size was specified.
			[RT# 10925]
Mark Andrews's avatar
Mark Andrews committed
550

551
552
553
1601.	[bug]		Silence spurious warning 'both "recursion no;" and 
			"allow-recursion" active' warning from view "_bind".
			[RT# 10920]
Mark Andrews's avatar
Mark Andrews committed
554

555
556
1600.	[bug]		Duplicate zone pre-load checks were not case
			insensitive.
Mark Andrews's avatar
Mark Andrews committed
557

558
1599.	[bug]		Fix memory leak on error path when checking named.conf.
Mark Andrews's avatar
Mark Andrews committed
559

560
561
1598.	[func]		Specify that certain parts of the namespace must
			be secure (dnssec-must-be-secure).
Mark Andrews's avatar
Mark Andrews committed
562

Mark Andrews's avatar
Mark Andrews committed
563
564
1597.	[placeholder]	rt6496a

565
1596.	[func]		Accept 'notify-source' style syntax for query-source.
Mark Andrews's avatar
Mark Andrews committed
566

567
568
1595.	[func]		New notify type 'master-only'.  Enable notify for
			master zones only.
Mark Andrews's avatar
Mark Andrews committed
569

570
571
1594.	[bug]		'rndc dumpdb' could prevent named from answering
			queries while the dump was in progress.  [RT #10565]
Mark Andrews's avatar
Mark Andrews committed
572

573
574
1593.	[bug]		rndc should return "unknown command" to unknown
			commands. [RT# 10642]
Mark Andrews's avatar
Mark Andrews committed
575

Mark Andrews's avatar
Mark Andrews committed
576
1592.	[bug]		configure_view() could leak a dispatch. [RT# 10675]
577

578
579
1591.	[bug]		libbind: updated to BIND 8.4.5.

580
581
1590.	[port]		netbsd: update thread support.

582
583
1589.	[func]		DNSSEC lookaside validation.

584
585
1588.	[bug]		win32: TCP sockets could become blocked. [RT #10115]

586
587
1587.	[bug]		dns_message_settsigkey() failed to clear existing key.
			[RT #10590]
Mark Andrews's avatar
Mark Andrews committed
588

589
590
1586.	[func]		"check-names" is now implemented.

Mark Andrews's avatar
Mark Andrews committed
591
1585.	[placeholder]
Mark Andrews's avatar
Mark Andrews committed
592

Mark Andrews's avatar
Mark Andrews committed
593
1584.	[bug]		"make test" failed with a read only source tree.
594
			[RT #10461]
Mark Andrews's avatar
Mark Andrews committed
595

596
597
1583.	[bug]		Records add via UPDATE failed to get the correct trust
			level. [RT #10452]
Mark Andrews's avatar
Mark Andrews committed
598

599
600
1582.	[bug]		rrset-order failed to work on RRsets with more
			than 32 elements. [RT #10381]
Mark Andrews's avatar
Mark Andrews committed
601

602
1581.	[func]		Disable DNSSEC support by default.  To enable
603
			DNSSEC specify "dnssec-enable yes;" in named.conf.
604

Mark Andrews's avatar
Mark Andrews committed
605
1580.	[bug]		Zone destruction on final detach takes a long time.
606
			[RT #3746]
Mark Andrews's avatar
Mark Andrews committed
607

608
1579.	[bug]		Multiple task managers could not be created.
Mark Andrews's avatar
Mark Andrews committed
609

610
611
1578.	[bug]		Don't use CLASS E IPv4 addresses when resolving.
			[RT #10346]
Mark Andrews's avatar
Mark Andrews committed
612

613
614
1577.	[bug]		Use isc_uint32_t in ultrasparc optimizer bug
			workaround code. [RT #10331]
Mark Andrews's avatar
Mark Andrews committed
615

616
617
1576.	[bug]		Race condition in dns_dispatch_addresponse().
			[RT# 10272]
Mark Andrews's avatar
Mark Andrews committed
618

619
1575.	[func]		Log TSIG name on TSIG verify failure. [RT #4404]
Mark Andrews's avatar
Mark Andrews committed
620

621
622
623
1574.	[bug]		Don't attempt to open the controls socket(s) when
			running tests. [RT #9091]

624
625
626
1573.	[port]		linux: update to libtool 1.5.2 so that
			"make install DESTDIR=/xx" works with
			"configure --with-libtool".  [RT #9941]
Mark Andrews's avatar
Mark Andrews committed
627

628
629
1572.	[bug]		nsupdate: sign the soa query to find the enclosing
			zone if the server is specified. [RT #10148]
Mark Andrews's avatar
Mark Andrews committed
630

631
1571.	[bug]		rbt:hash_node() could fail leaving the hash table
Mark Andrews's avatar
Mark Andrews committed
632
			in an inconsistent state.  [RT #10208]
Mark Andrews's avatar
Mark Andrews committed
633

634
635
636
1570.	[bug]		nsupdate failed to handle classes other than IN.
			New keyword 'class' which sets the default class.
			[RT #10202]
Mark Andrews's avatar
Mark Andrews committed
637

638
639
1569.	[func]		nsupdate new command 'answer' which displays the
			complete answer message to the last update.
Mark Andrews's avatar
Mark Andrews committed
640

641
1568.	[bug]		nsupdate now reports that the update failed in
Mark Andrews's avatar
Mark Andrews committed
642
			interactive mode. [RT# 10236]
Mark Andrews's avatar
Mark Andrews committed
643

644
645
1567.	[bug]		B.ROOT-SERVERS.NET is now 192.228.79.201.

646
647
648
649
1566.	[port]		Support for the cmsg framework on Solaris and HP/UX.
			This also solved the problem that match-destinations
			for IPv6 addresses did not work on these systems.
			[RT #10221]
650

Mark Andrews's avatar
Mark Andrews committed
651
652
653
1565.	[bug]		CD flag should be copied to outgoing queries unless
			the query is under a secure entry point in which case
			CD should be set.
654

655
656
657
658
659
1564.	[func]		Attempt to provide a fallback entropy source to be
			used if named is running chrooted and named is unable
			to open entropy source within the chroot area.
			[RT #10133]

Mark Andrews's avatar
Mark Andrews committed
660
661
1563.	[bug]		Gracefully fail when unable to obtain neither an IPv4
			nor an IPv6 dispatch. [RT #10230]
662

663
664
665
1562.	[bug]		isc_socket_create() and isc_socket_accept() could
			leak memory under error conditions. [RT #10230]

666
667
668
1561.	[bug]		It was possible to release the same name twice if
			named ran out of memory. [RT #10197]

669
670
671
1560.	[port]		FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
			and EAI_NONAME to the same value.

672
1559.	[port]		named should ignore SIGFSZ.
Mark Andrews's avatar
Mark Andrews committed
673

674
675
676
677
678
679
680
681
682
1558.	[func]		New DNSSEC 'disable-algorithms'.  Support entry into
			child zones for which we don't have a supported
			algorithm.  Such child zones are treated as unsigned.

1557.	[func]		Implement missing DNSSEC tests for
			* NOQNAME proof with wildcard answers.
			* NOWILDARD proof with NXDOMAIN.
			Cache and return NOQNAME with wildcard answers.

Mark Andrews's avatar
Mark Andrews committed
683
1556.	[bug]		nsupdate now treats all names as fully qualified.
684
			[RT #6427]
Mark Andrews's avatar
Mark Andrews committed
685

Mark Andrews's avatar
now->no    
Mark Andrews committed
686
1555.	[func]		'rrset-order cyclic' no longer has a random starting
687
688
			point. [RT #7572]

Mark Andrews's avatar
Mark Andrews committed
689
1554.	[bug]		dig, host, nslookup failed when no nameservers
690
691
			were specified in /etc/resolv.conf. [RT #8232]

692
1553.	[bug]		The windows socket code could stop accepting
Mark Andrews's avatar
Mark Andrews committed
693
			connections. [RT#10115]
694

695
696
1552.	[bug]		Accept NOTIFY requests from mapped masters if
			matched-mapped is set. [RT #10049]
Mark Andrews's avatar
Mark Andrews committed
697

698
699
1551.	[port]		Open "/dev/null" before calling chroot().

700
701
1550.	[port]		Call tzset(), if available, before calling chroot().

702
703
704
1549.	[func]		named-checkzone can now write out the zone contents
			in a easily parsable format (-D and -o).

Mark Andrews's avatar
Mark Andrews committed
705
706
707
1548.	[bug]		When parsing APL records it was possible to silently
			accept out of range ADDRESSFAMILY values. [RT# 9979]

708
709
710
1547.	[bug]		Named wasted memory recording duplicate lame zone
			entries. [RT #9341]

711
712
713
1546.	[bug]		We were rejecting valid secure CNAME to negative
			answers.

714
715
716
717
1545.	[bug]		It was possible to leak memory if named was unable to
			bind to the specified transfer source and TSIG was
			being used. [RT #10120]

718
719
1544.	[bug]		Named would logged a single entry to a file despite it
			being over the specified size limit.
Mark Andrews's avatar
Mark Andrews committed
720

721
1543.	[bug]		Logging using "versions unlimited" did not work.
Mark Andrews's avatar
Mark Andrews committed
722

Mark Andrews's avatar
Mark Andrews committed
723
724
1542.	[placeholder]

725
1541.	[func]		NSEC now uses new bitmap format.
Mark Andrews's avatar
Mark Andrews committed
726

727
728
1540.	[bug]		"rndc reload <dynamiczone>" was silently accepted.
			[RT #8934]
Mark Andrews's avatar
Mark Andrews committed
729

730
731
1539.	[bug]		Open UDP sockets for notify-source and transfer-source
			that use reserved ports at startup. [RT #9475]
Mark Andrews's avatar
Mark Andrews committed
732

Mark Andrews's avatar
Mark Andrews committed
733
734
1538.	[placeholder]	rt9997

735
1537.	[func]		New option "querylog".  If set specify whether query
Mark Andrews's avatar
Mark Andrews committed
736
			logging is to be enabled or disabled at startup.
Mark Andrews's avatar
Mark Andrews committed
737

738
739
1536.	[bug]		Windows socket code failed to log a error description
			when returning ISC_R_UNEXPECTED. [RT #9998]
Mark Andrews's avatar
Mark Andrews committed
740

Mark Andrews's avatar
Mark Andrews committed
741
742
1535.	[placeholder]

743
1534.	[bug]		Race condition when priming cache. [RT# 9940]
Mark Andrews's avatar
Mark Andrews committed
744

Mark Andrews's avatar
Mark Andrews committed
745
1533.	[func]		Warn if both "recursion no;" and "allow-recursion"
746
			are active. [RT# 4389]
Mark Andrews's avatar
Mark Andrews committed
747

748
749
750
1532.	[port]		netbsd: the configure test for <sys/sysctl.h>
			requires <sys/param.h>.

Mark Andrews's avatar
Mark Andrews committed
751
1531.	[port]		AIX more libtool fixes.
752

753
1530.	[bug]		It was possible to trigger a INSIST() failure if a
Mark Andrews's avatar
grammar    
Mark Andrews committed
754
			slave master file was removed at just the correct
755
756
			moment. [RT #9462]

Mark Andrews's avatar
Mark Andrews committed
757
1529.	[bug]		"notify explicit;" failed to log that NOTIFY messages
Mark Andrews's avatar
Mark Andrews committed
758
			were being sent for the zone. [RT# 9442]
Mark Andrews's avatar
Mark Andrews committed
759

760
761
1528.	[cleanup]	Simplify some dns_name_ functions based on the
			deprecation of bitstring labels.
762

763
764
1527.	[cleanup]	Reduce the number of gettimeofday() calls without
			losing necessary timer granularity.
765

766
767
1526.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
768
769
1525.	[bug]		dns_cache_create() could trigger a REQUIRE
			failure in isc_mem_put() during error cleanup.
770
			[RT# 9360]
771

772
773
774
1524.	[port]		AIX needs to be able to resolve all symbols when
			creating shared libraries (--with-libtool).

775
776
1523.	[bug]		Fix race condition in rbtdb. [RT# 9189]

777
778
779
1522.	[bug]		dns_db_findnode() relax the requirements on 'name'.
			[RT# 9286]

780
781
782
1521.	[bug]		dns_view_createresolver() failed to check the
			result from isc_mem_create(). [RT# 9294]

783
784
1520.	[protocol]	Add SSHFP (SSH Finger Print) type.

785
786
787
1519.	[bug]		dnssec-signzone:nsec_setbit() computed the wrong
			length of the new bitmap.

Mark Andrews's avatar
Mark Andrews committed
788
1518.	[bug]		dns_nsec_buildrdata(), and hence dns_nsec_build(),
789
790
791
			contained a off-by-one error when working out the
			number of octets in the bitmap.

Mark Andrews's avatar
Mark Andrews committed
792
793
1517.	[port]		Support for IPv6 interface scanning on HP/UX and
			TrueUNIX 5.1.
794

Mark Andrews's avatar
Mark Andrews committed
795
1516.	[func]		Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
796

Mark Andrews's avatar
Mark Andrews committed
797
798
1515.	[func]		Allow transfer source to be set in a server statement.
			[RT #6496]
799

Mark Andrews's avatar
Mark Andrews committed
800
801
1514.	[bug]		named: isc_hash_destroy() was being called too early.
			[RT #9160]
802

Mark Andrews's avatar
Mark Andrews committed
803
1513.	[doc]		Add "US" to root-delegation-only exclude list.
804

Mark Andrews's avatar
Mark Andrews committed
805
806
1512.	[bug]		Extend the delegation-only logging to return query
			type, class and responding nameserver.
807

Mark Andrews's avatar
Mark Andrews committed
808
809
1511.	[bug]		delegation-only was generating false positives
			on negative answers from subzones.
810

Mark Andrews's avatar
Mark Andrews committed
811
812
813
814
815
1510.	[func]		New view option "root-delegation-only".  Apply
			delegation-only check to all TLDs and root.
			Note there are some TLDs that are NOT delegation
			only (e.g. DE, LV, US and MUSEUM) these can be excluded
			from the checks by using exclude.
816

Mark Andrews's avatar
Mark Andrews committed
817
818
819
			root-delegation-only exclude {
				"DE"; "LV"; "US"; "MUSEUM";
			};
820

Mark Andrews's avatar
Mark Andrews committed
821
822
1509.	[bug]		Hint zones should accept delegation-only.  Forward
			zone should not accept delegation-only.
823

Mark Andrews's avatar
Mark Andrews committed
824
825
1508.	[bug]		Don't apply delegation-only checks to answers from
			forwarders.
826

Mark Andrews's avatar
Mark Andrews committed
827
828
1507.	[bug]		Handle BIND 8 style returns to NS queries to parents
			when making delegation-only checks.
829

Mark Andrews's avatar
Mark Andrews committed
830
1506.	[bug]		Wrong return type for dns_view_isdelegationonly().
831

Mark Andrews's avatar
Mark Andrews committed
832
1505.	[bug]		Uninitialized rdataset in sdb. [RT #8750]
833

Mark Andrews's avatar
Mark Andrews committed
834
1504.	[func]		New zone type "delegation-only".
835

Mark Andrews's avatar
Mark Andrews committed
836
1503.	[port]		win32: install libeay32.dll outside of system32.
837

Mark Andrews's avatar
Mark Andrews committed
838
1502.	[bug]		nsupdate: adjust timeouts for UPDATE requests over TCP.
839

Mark Andrews's avatar
Mark Andrews committed
840
841
1501.	[func]		Allow TCP queue length to be specified via
			named.conf, tcp-listen-queue.
842

Mark Andrews's avatar
Mark Andrews committed
843
844
1500.	[bug]		host failed to lookup MX records.  Also look up
			AAAA records.
845

Mark Andrews's avatar
Mark Andrews committed
846
847
1499.	[bug]		isc_random need to be seeded better if arc4random()
			is not used.
848

Mark Andrews's avatar
Mark Andrews committed
849
1498.	[port]		bsdos: 5.x support.
Mark Andrews's avatar
Mark Andrews committed
850

Mark Andrews's avatar
Mark Andrews committed
851
1497.	[placeholder]
852

Mark Andrews's avatar
Mark Andrews committed
853
1496.	[port]		test for pthread_attr_setstacksize().
854

Mark Andrews's avatar
Mark Andrews committed
855
1495.	[cleanup]	Replace hash functions with universal hash.
856

Mark Andrews's avatar
Mark Andrews committed
857
1494.	[security]	Turn on RSA BLINDING as a precaution.
Mark Andrews's avatar
Mark Andrews committed
858

Mark Andrews's avatar
Mark Andrews committed
859
1493.	[placeholder]
860

Mark Andrews's avatar
Mark Andrews committed
861
862
1492.	[cleanup]	Preserve rwlock quota context when upgrading /
			downgrading. [RT #5599]
863

Mark Andrews's avatar
Mark Andrews committed
864
865
1491.	[bug]		dns_master_dump*() would produce extraneous $ORIGIN
			lines. [RT #6206]
866

Mark Andrews's avatar
Mark Andrews committed
867
868
1490.	[bug]		Accept reading state as well as working state in
			ns_client_next(). [RT #6813]
869

Mark Andrews's avatar
Mark Andrews committed
870
871
1489.	[compat]	Treat 'allow-update' on slave zones as a warning.
			[RT #3469]
872

Mark Andrews's avatar
Mark Andrews committed
873
874
1488.	[bug]		Don't override trust levels for glue addresses.
			[RT #5764]
875

Mark Andrews's avatar
Mark Andrews committed
876
877
878
1487.	[bug]		A REQUIRE() failure could be triggered if a zone was
			queued for transfer and the zone was then removed.
			[RT #6189]
879

Mark Andrews's avatar
Mark Andrews committed
880
881
1486.	[bug]		isc_print_snprintf() '%%' consumed one too many format
			characters. [RT# 8230]
882

Mark Andrews's avatar
Mark Andrews committed
883
1485.	[bug]		gen failed to handle high type values. [RT #6225]
884

Mark Andrews's avatar
Mark Andrews committed
885
886
1484.	[bug]		The number of records reported after a AXFR was wrong.
			[RT #6229]
887

Mark Andrews's avatar
Mark Andrews committed
888
889
890
1483.	[bug]		dig axfr failed if the message id in the answer failed
			to match that in the request.  Only the id in the first
			message is required to match. [RT #8138]
Mark Andrews's avatar
Mark Andrews committed
891

Mark Andrews's avatar
Mark Andrews committed
892
893
894
1482.	[bug]		named could fail to start if the kernel supports
			IPv6 but no interfaces are configured.  Similarly
			for IPv4. [RT #6229]
895

Mark Andrews's avatar
Mark Andrews committed
896
897
1481.	[bug]		Refresh and stub queries failed to use masters keys
			if specified. [RT #7391]
898

Mark Andrews's avatar
Mark Andrews committed
899
900
901
902
903
1480.	[bug]		Provide replay protection for rndc commands.  Full
			replay protection requires both rndc and named to
			be updated.  Partial replay protection (limited
			exposure after restart) is provided if just named
			is updated.
904

Mark Andrews's avatar
Mark Andrews committed
905
906
907
1479.	[bug]		cfg_create_tuple() failed to handle out of
			memory cleanup.  parse_list() would leak memory
			on syntax errors.
Mark Andrews's avatar
Mark Andrews committed
908

Mark Andrews's avatar
Mark Andrews committed
909
1478.	[port]		ifconfig.sh didn't account for other virtual
Mark Andrews's avatar
Mark Andrews committed
910
			interfaces.  It now takes a optional argument
Mark Andrews's avatar
Mark Andrews committed
911
			to specify the first interface number. [RT #3907]
912

Mark Andrews's avatar
Mark Andrews committed
913
1477.	[bug]		memory leak using stub zones and TSIG.
Mark Andrews's avatar
Mark Andrews committed
914

Mark Andrews's avatar
Mark Andrews committed
915
1476.	[placeholder]
916

Mark Andrews's avatar
Mark Andrews committed
917
1475.	[port]		Probe for old sprintf().
918

Mark Andrews's avatar
Mark Andrews committed
919
920
1474.	[port]		Provide strtoul() and memmove() for platforms
			without them.
921