CHANGES 172 KB
Newer Older
Mark Andrews's avatar
Mark Andrews committed
1
2
1612.	[placeholder]	rt11116

3
4
1611.	[bug]		solaris: IPv6 interface scanning failed to cope with
			no active IPv6 interfaces.
Mark Andrews's avatar
Mark Andrews committed
5

6
7
8
1610.	[bug]		On dual stack machines "dig -b" failed to set the
			address type to be looked up with "@server".
			[RT #11069]
Mark Andrews's avatar
Mark Andrews committed
9

10
11
12
1609.	[func]		dig now has support to chase DNSSEC signature chains.
			Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.

13
14
15
1608.	[func]		dig and host now accept -4/-6 to select IP transport
			to use when making queries.

16
17
18
1607.	[bug]		dig, host and nslookup were still using random()
			to generate query ids. [RT# 11013]

Mark Andrews's avatar
Mark Andrews committed
19
20
21
22
1606.	[placeholder]	rt10440a

1605.	[placeholder]	rt10440a

23
24
25
26
1604.	[bug]		A xfrout_ctx_create() failure would result in
			xfrout_ctx_destroy() being called with a
			partially initaliased structure.
			
27
28
1603.	[bug]		nsupdate: set interactive based on isatty().
			[RT# 10929]
Mark Andrews's avatar
Mark Andrews committed
29

30
31
1602.	[bug]		Logging to a file failed unless a size was specified.
			[RT# 10925]
Mark Andrews's avatar
Mark Andrews committed
32

33
34
35
1601.	[bug]		Silence spurious warning 'both "recursion no;" and 
			"allow-recursion" active' warning from view "_bind".
			[RT# 10920]
Mark Andrews's avatar
Mark Andrews committed
36

37
38
1600.	[bug]		Duplicate zone pre-load checks were not case
			insensitive.
Mark Andrews's avatar
Mark Andrews committed
39

40
1599.	[bug]		Fix memory leak on error path when checking named.conf.
Mark Andrews's avatar
Mark Andrews committed
41

42
43
1598.	[func]		Specify that certain parts of the namespace must
			be secure (dnssec-must-be-secure).
Mark Andrews's avatar
Mark Andrews committed
44

Mark Andrews's avatar
Mark Andrews committed
45
46
1597.	[placeholder]	rt6496a

47
1596.	[func]		Accept 'notify-source' style syntax for query-source.
Mark Andrews's avatar
Mark Andrews committed
48

49
50
1595.	[func]		New notify type 'master-only'.  Enable notify for
			master zones only.
Mark Andrews's avatar
Mark Andrews committed
51

52
53
1594.	[bug]		'rndc dumpdb' could prevent named from answering
			queries while the dump was in progress.  [RT #10565]
Mark Andrews's avatar
Mark Andrews committed
54

55
56
1593.	[bug]		rndc should return "unknown command" to unknown
			commands. [RT# 10642]
Mark Andrews's avatar
Mark Andrews committed
57

Mark Andrews's avatar
Mark Andrews committed
58
1592.	[bug]		configure_view() could leak a dispatch. [RT# 10675]
59

60
61
1591.	[bug]		libbind: updated to BIND 8.4.5.

62
63
1590.	[port]		netbsd: update thread support.

64
65
1589.	[func]		DNSSEC lookaside validation.

66
67
1588.	[bug]		win32: TCP sockets could become blocked. [RT #10115]

68
69
1587.	[bug]		dns_message_settsigkey() failed to clear existing key.
			[RT #10590]
Mark Andrews's avatar
Mark Andrews committed
70

71
72
1586.	[func]		"check-names" is now implemented.

Mark Andrews's avatar
Mark Andrews committed
73
1585.	[placeholder]
Mark Andrews's avatar
Mark Andrews committed
74

Mark Andrews's avatar
Mark Andrews committed
75
1584.	[bug]		"make test" failed with a read only source tree.
76
			[RT #10461]
Mark Andrews's avatar
Mark Andrews committed
77

78
79
1583.	[bug]		Records add via UPDATE failed to get the correct trust
			level. [RT #10452]
Mark Andrews's avatar
Mark Andrews committed
80

81
82
1582.	[bug]		rrset-order failed to work on RRsets with more
			than 32 elements. [RT #10381]
Mark Andrews's avatar
Mark Andrews committed
83

84
1581.	[func]		Disable DNSSEC support by default.  To enable
85
			DNSSEC specify "dnssec-enable yes;" in named.conf.
86

Mark Andrews's avatar
Mark Andrews committed
87
1580.	[bug]		Zone destruction on final detach takes a long time.
88
			[RT #3746]
Mark Andrews's avatar
Mark Andrews committed
89

90
1579.	[bug]		Multiple task managers could not be created.
Mark Andrews's avatar
Mark Andrews committed
91

92
93
1578.	[bug]		Don't use CLASS E IPv4 addresses when resolving.
			[RT #10346]
Mark Andrews's avatar
Mark Andrews committed
94

95
96
1577.	[bug]		Use isc_uint32_t in ultrasparc optimizer bug
			workaround code. [RT #10331]
Mark Andrews's avatar
Mark Andrews committed
97

98
99
1576.	[bug]		Race condition in dns_dispatch_addresponse().
			[RT# 10272]
Mark Andrews's avatar
Mark Andrews committed
100

101
1575.	[func]		Log TSIG name on TSIG verify failure. [RT #4404]
Mark Andrews's avatar
Mark Andrews committed
102

103
104
105
1574.	[bug]		Don't attempt to open the controls socket(s) when
			running tests. [RT #9091]

106
107
108
1573.	[port]		linux: update to libtool 1.5.2 so that
			"make install DESTDIR=/xx" works with
			"configure --with-libtool".  [RT #9941]
Mark Andrews's avatar
Mark Andrews committed
109

110
111
1572.	[bug]		nsupdate: sign the soa query to find the enclosing
			zone if the server is specified. [RT #10148]
Mark Andrews's avatar
Mark Andrews committed
112

113
1571.	[bug]		rbt:hash_node() could fail leaving the hash table
Mark Andrews's avatar
Mark Andrews committed
114
			in an inconsistent state.  [RT #10208]
Mark Andrews's avatar
Mark Andrews committed
115

116
117
118
1570.	[bug]		nsupdate failed to handle classes other than IN.
			New keyword 'class' which sets the default class.
			[RT #10202]
Mark Andrews's avatar
Mark Andrews committed
119

120
121
1569.	[func]		nsupdate new command 'answer' which displays the
			complete answer message to the last update.
Mark Andrews's avatar
Mark Andrews committed
122

123
1568.	[bug]		nsupdate now reports that the update failed in
Mark Andrews's avatar
Mark Andrews committed
124
			interactive mode. [RT# 10236]
Mark Andrews's avatar
Mark Andrews committed
125

126
127
1567.	[bug]		B.ROOT-SERVERS.NET is now 192.228.79.201.

128
129
130
131
1566.	[port]		Support for the cmsg framework on Solaris and HP/UX.
			This also solved the problem that match-destinations
			for IPv6 addresses did not work on these systems.
			[RT #10221]
132

Mark Andrews's avatar
Mark Andrews committed
133
134
135
1565.	[bug]		CD flag should be copied to outgoing queries unless
			the query is under a secure entry point in which case
			CD should be set.
136

137
138
139
140
141
1564.	[func]		Attempt to provide a fallback entropy source to be
			used if named is running chrooted and named is unable
			to open entropy source within the chroot area.
			[RT #10133]

Mark Andrews's avatar
Mark Andrews committed
142
143
1563.	[bug]		Gracefully fail when unable to obtain neither an IPv4
			nor an IPv6 dispatch. [RT #10230]
144

145
146
147
1562.	[bug]		isc_socket_create() and isc_socket_accept() could
			leak memory under error conditions. [RT #10230]

148
149
150
1561.	[bug]		It was possible to release the same name twice if
			named ran out of memory. [RT #10197]

151
152
153
1560.	[port]		FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
			and EAI_NONAME to the same value.

154
1559.	[port]		named should ignore SIGFSZ.
Mark Andrews's avatar
Mark Andrews committed
155

156
157
158
159
160
161
162
163
164
1558.	[func]		New DNSSEC 'disable-algorithms'.  Support entry into
			child zones for which we don't have a supported
			algorithm.  Such child zones are treated as unsigned.

1557.	[func]		Implement missing DNSSEC tests for
			* NOQNAME proof with wildcard answers.
			* NOWILDARD proof with NXDOMAIN.
			Cache and return NOQNAME with wildcard answers.

Mark Andrews's avatar
Mark Andrews committed
165
1556.	[bug]		nsupdate now treats all names as fully qualified.
166
			[RT #6427]
Mark Andrews's avatar
Mark Andrews committed
167

Mark Andrews's avatar
now->no    
Mark Andrews committed
168
1555.	[func]		'rrset-order cyclic' no longer has a random starting
169
170
			point. [RT #7572]

Mark Andrews's avatar
Mark Andrews committed
171
1554.	[bug]		dig, host, nslookup failed when no nameservers
172
173
			were specified in /etc/resolv.conf. [RT #8232]

174
1553.	[bug]		The windows socket code could stop accepting
Mark Andrews's avatar
Mark Andrews committed
175
			connections. [RT#10115]
176

177
178
1552.	[bug]		Accept NOTIFY requests from mapped masters if
			matched-mapped is set. [RT #10049]
Mark Andrews's avatar
Mark Andrews committed
179

180
181
1551.	[port]		Open "/dev/null" before calling chroot().

182
183
1550.	[port]		Call tzset(), if available, before calling chroot().

184
185
186
1549.	[func]		named-checkzone can now write out the zone contents
			in a easily parsable format (-D and -o).

Mark Andrews's avatar
Mark Andrews committed
187
188
189
1548.	[bug]		When parsing APL records it was possible to silently
			accept out of range ADDRESSFAMILY values. [RT# 9979]

190
191
192
1547.	[bug]		Named wasted memory recording duplicate lame zone
			entries. [RT #9341]

193
194
195
1546.	[bug]		We were rejecting valid secure CNAME to negative
			answers.

196
197
198
199
1545.	[bug]		It was possible to leak memory if named was unable to
			bind to the specified transfer source and TSIG was
			being used. [RT #10120]

200
201
1544.	[bug]		Named would logged a single entry to a file despite it
			being over the specified size limit.
Mark Andrews's avatar
Mark Andrews committed
202

203
1543.	[bug]		Logging using "versions unlimited" did not work.
Mark Andrews's avatar
Mark Andrews committed
204

Mark Andrews's avatar
Mark Andrews committed
205
206
1542.	[placeholder]

207
1541.	[func]		NSEC now uses new bitmap format.
Mark Andrews's avatar
Mark Andrews committed
208

209
210
1540.	[bug]		"rndc reload <dynamiczone>" was silently accepted.
			[RT #8934]
Mark Andrews's avatar
Mark Andrews committed
211

212
213
1539.	[bug]		Open UDP sockets for notify-source and transfer-source
			that use reserved ports at startup. [RT #9475]
Mark Andrews's avatar
Mark Andrews committed
214

Mark Andrews's avatar
Mark Andrews committed
215
216
1538.	[placeholder]	rt9997

217
1537.	[func]		New option "querylog".  If set specify whether query
Mark Andrews's avatar
Mark Andrews committed
218
			logging is to be enabled or disabled at startup.
Mark Andrews's avatar
Mark Andrews committed
219

220
221
1536.	[bug]		Windows socket code failed to log a error description
			when returning ISC_R_UNEXPECTED. [RT #9998]
Mark Andrews's avatar
Mark Andrews committed
222

Mark Andrews's avatar
Mark Andrews committed
223
224
1535.	[placeholder]

225
1534.	[bug]		Race condition when priming cache. [RT# 9940]
Mark Andrews's avatar
Mark Andrews committed
226

Mark Andrews's avatar
Mark Andrews committed
227
1533.	[func]		Warn if both "recursion no;" and "allow-recursion"
228
			are active. [RT# 4389]
Mark Andrews's avatar
Mark Andrews committed
229

230
231
232
1532.	[port]		netbsd: the configure test for <sys/sysctl.h>
			requires <sys/param.h>.

Mark Andrews's avatar
Mark Andrews committed
233
1531.	[port]		AIX more libtool fixes.
234

235
1530.	[bug]		It was possible to trigger a INSIST() failure if a
Mark Andrews's avatar
grammar    
Mark Andrews committed
236
			slave master file was removed at just the correct
237
238
			moment. [RT #9462]

Mark Andrews's avatar
Mark Andrews committed
239
1529.	[bug]		"notify explicit;" failed to log that NOTIFY messages
Mark Andrews's avatar
Mark Andrews committed
240
			were being sent for the zone. [RT# 9442]
Mark Andrews's avatar
Mark Andrews committed
241

242
243
1528.	[cleanup]	Simplify some dns_name_ functions based on the
			deprecation of bitstring labels.
244

245
246
1527.	[cleanup]	Reduce the number of gettimeofday() calls without
			losing necessary timer granularity.
247

248
249
1526.	[placeholder]

Mark Andrews's avatar
Mark Andrews committed
250
251
1525.	[bug]		dns_cache_create() could trigger a REQUIRE
			failure in isc_mem_put() during error cleanup.
252
			[RT# 9360]
253

254
255
256
1524.	[port]		AIX needs to be able to resolve all symbols when
			creating shared libraries (--with-libtool).

257
258
1523.	[bug]		Fix race condition in rbtdb. [RT# 9189]

259
260
261
1522.	[bug]		dns_db_findnode() relax the requirements on 'name'.
			[RT# 9286]

262
263
264
1521.	[bug]		dns_view_createresolver() failed to check the
			result from isc_mem_create(). [RT# 9294]

265
266
1520.	[protocol]	Add SSHFP (SSH Finger Print) type.

267
268
269
1519.	[bug]		dnssec-signzone:nsec_setbit() computed the wrong
			length of the new bitmap.

Mark Andrews's avatar
Mark Andrews committed
270
1518.	[bug]		dns_nsec_buildrdata(), and hence dns_nsec_build(),
271
272
273
			contained a off-by-one error when working out the
			number of octets in the bitmap.

Mark Andrews's avatar
Mark Andrews committed
274
275
1517.	[port]		Support for IPv6 interface scanning on HP/UX and
			TrueUNIX 5.1.
276

Mark Andrews's avatar
Mark Andrews committed
277
1516.	[func]		Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
278

Mark Andrews's avatar
Mark Andrews committed
279
280
1515.	[func]		Allow transfer source to be set in a server statement.
			[RT #6496]
281

Mark Andrews's avatar
Mark Andrews committed
282
283
1514.	[bug]		named: isc_hash_destroy() was being called too early.
			[RT #9160]
284

Mark Andrews's avatar
Mark Andrews committed
285
1513.	[doc]		Add "US" to root-delegation-only exclude list.
286

Mark Andrews's avatar
Mark Andrews committed
287
288
1512.	[bug]		Extend the delegation-only logging to return query
			type, class and responding nameserver.
289

Mark Andrews's avatar
Mark Andrews committed
290
291
1511.	[bug]		delegation-only was generating false positives
			on negative answers from subzones.
292

Mark Andrews's avatar
Mark Andrews committed
293
294
295
296
297
1510.	[func]		New view option "root-delegation-only".  Apply
			delegation-only check to all TLDs and root.
			Note there are some TLDs that are NOT delegation
			only (e.g. DE, LV, US and MUSEUM) these can be excluded
			from the checks by using exclude.
298

Mark Andrews's avatar
Mark Andrews committed
299
300
301
			root-delegation-only exclude {
				"DE"; "LV"; "US"; "MUSEUM";
			};
302

Mark Andrews's avatar
Mark Andrews committed
303
304
1509.	[bug]		Hint zones should accept delegation-only.  Forward
			zone should not accept delegation-only.
305

Mark Andrews's avatar
Mark Andrews committed
306
307
1508.	[bug]		Don't apply delegation-only checks to answers from
			forwarders.
308

Mark Andrews's avatar
Mark Andrews committed
309
310
1507.	[bug]		Handle BIND 8 style returns to NS queries to parents
			when making delegation-only checks.
311

Mark Andrews's avatar
Mark Andrews committed
312
1506.	[bug]		Wrong return type for dns_view_isdelegationonly().
313

Mark Andrews's avatar
Mark Andrews committed
314
1505.	[bug]		Uninitialized rdataset in sdb. [RT #8750]
315

Mark Andrews's avatar
Mark Andrews committed
316
1504.	[func]		New zone type "delegation-only".
317

Mark Andrews's avatar
Mark Andrews committed
318
1503.	[port]		win32: install libeay32.dll outside of system32.
319

Mark Andrews's avatar
Mark Andrews committed
320
1502.	[bug]		nsupdate: adjust timeouts for UPDATE requests over TCP.
321

Mark Andrews's avatar
Mark Andrews committed
322
323
1501.	[func]		Allow TCP queue length to be specified via
			named.conf, tcp-listen-queue.
324

Mark Andrews's avatar
Mark Andrews committed
325
326
1500.	[bug]		host failed to lookup MX records.  Also look up
			AAAA records.
327

Mark Andrews's avatar
Mark Andrews committed
328
329
1499.	[bug]		isc_random need to be seeded better if arc4random()
			is not used.
330

Mark Andrews's avatar
Mark Andrews committed
331
1498.	[port]		bsdos: 5.x support.
Mark Andrews's avatar
Mark Andrews committed
332

Mark Andrews's avatar
Mark Andrews committed
333
1497.	[placeholder]
334

Mark Andrews's avatar
Mark Andrews committed
335
1496.	[port]		test for pthread_attr_setstacksize().
336

Mark Andrews's avatar
Mark Andrews committed
337
1495.	[cleanup]	Replace hash functions with universal hash.
338

Mark Andrews's avatar
Mark Andrews committed
339
1494.	[security]	Turn on RSA BLINDING as a precaution.
Mark Andrews's avatar
Mark Andrews committed
340

Mark Andrews's avatar
Mark Andrews committed
341
1493.	[placeholder]
342

Mark Andrews's avatar
Mark Andrews committed
343
344
1492.	[cleanup]	Preserve rwlock quota context when upgrading /
			downgrading. [RT #5599]
345

Mark Andrews's avatar
Mark Andrews committed
346
347
1491.	[bug]		dns_master_dump*() would produce extraneous $ORIGIN
			lines. [RT #6206]
348

Mark Andrews's avatar
Mark Andrews committed
349
350
1490.	[bug]		Accept reading state as well as working state in
			ns_client_next(). [RT #6813]
351

Mark Andrews's avatar
Mark Andrews committed
352
353
1489.	[compat]	Treat 'allow-update' on slave zones as a warning.
			[RT #3469]
354

Mark Andrews's avatar
Mark Andrews committed
355
356
1488.	[bug]		Don't override trust levels for glue addresses.
			[RT #5764]
357

Mark Andrews's avatar
Mark Andrews committed
358
359
360
1487.	[bug]		A REQUIRE() failure could be triggered if a zone was
			queued for transfer and the zone was then removed.
			[RT #6189]
361

Mark Andrews's avatar
Mark Andrews committed
362
363
1486.	[bug]		isc_print_snprintf() '%%' consumed one too many format
			characters. [RT# 8230]
364

Mark Andrews's avatar
Mark Andrews committed
365
1485.	[bug]		gen failed to handle high type values. [RT #6225]
366

Mark Andrews's avatar
Mark Andrews committed
367
368
1484.	[bug]		The number of records reported after a AXFR was wrong.
			[RT #6229]
369

Mark Andrews's avatar
Mark Andrews committed
370
371
372
1483.	[bug]		dig axfr failed if the message id in the answer failed
			to match that in the request.  Only the id in the first
			message is required to match. [RT #8138]
Mark Andrews's avatar
Mark Andrews committed
373

Mark Andrews's avatar
Mark Andrews committed
374
375
376
1482.	[bug]		named could fail to start if the kernel supports
			IPv6 but no interfaces are configured.  Similarly
			for IPv4. [RT #6229]
377

Mark Andrews's avatar
Mark Andrews committed
378
379
1481.	[bug]		Refresh and stub queries failed to use masters keys
			if specified. [RT #7391]
380

Mark Andrews's avatar
Mark Andrews committed
381
382
383
384
385
1480.	[bug]		Provide replay protection for rndc commands.  Full
			replay protection requires both rndc and named to
			be updated.  Partial replay protection (limited
			exposure after restart) is provided if just named
			is updated.
386

Mark Andrews's avatar
Mark Andrews committed
387
388
389
1479.	[bug]		cfg_create_tuple() failed to handle out of
			memory cleanup.  parse_list() would leak memory
			on syntax errors.
Mark Andrews's avatar
Mark Andrews committed
390

Mark Andrews's avatar
Mark Andrews committed
391
1478.	[port]		ifconfig.sh didn't account for other virtual
Mark Andrews's avatar
Mark Andrews committed
392
			interfaces.  It now takes a optional argument
Mark Andrews's avatar
Mark Andrews committed
393
			to specify the first interface number. [RT #3907]
394

Mark Andrews's avatar
Mark Andrews committed
395
1477.	[bug]		memory leak using stub zones and TSIG.
Mark Andrews's avatar
Mark Andrews committed
396

Mark Andrews's avatar
Mark Andrews committed
397
1476.	[placeholder]
398

Mark Andrews's avatar
Mark Andrews committed
399
1475.	[port]		Probe for old sprintf().
400

Mark Andrews's avatar
Mark Andrews committed
401
402
1474.	[port]		Provide strtoul() and memmove() for platforms
			without them.
403

Mark Andrews's avatar
Mark Andrews committed
404
405
1473.	[bug]		create_map() and create_string() failed to handle out
			of memory cleanup.  [RT #6813]
406

Mark Andrews's avatar
Mark Andrews committed
407
1472.	[contrib]	idnkit-1.0 from JPNIC, replaces mdnkit.
408

Mark Andrews's avatar
Mark Andrews committed
409
1471.	[bug]		libbind: updated to BIND 8.4.0.
410

Mark Andrews's avatar
Mark Andrews committed
411
1470.	[bug]		Incorrect length passed to snprintf. [RT #5966]
412

Mark Andrews's avatar
Mark Andrews committed
413
414
1469.	[func]		Log end of outgoing zone transfer at same level
			as the start of transfer is logged. [RT #4441]
415

Mark Andrews's avatar
Mark Andrews committed
416
417
1468.	[func]		Internal zones are no longer counted for
			'rndc status'.  [RT #4706]
418

Mark Andrews's avatar
Mark Andrews committed
419
1467.	[func]		$GENERATES now supports optional class and ttl.
420

Mark Andrews's avatar
Mark Andrews committed
421
422
1466.	[bug]		lwresd configuration errors resulted in memory
			and lock leaks.  [RT #5228]
423

Mark Andrews's avatar
Mark Andrews committed
424
425
426
1465.	[bug]		isc_base64_decodestring() and isc_base64_tobuffer()
			failed to check that trailing bits were zero allowing
			some invalid base64 strings to be accepted.  [RT #5397]
427

Mark Andrews's avatar
Mark Andrews committed
428
429
1464.	[bug]		Preserve "out of zone" data for outgoing zone
			transfers. [RT #5192]
430

Mark Andrews's avatar
Mark Andrews committed
431
432
1463.	[bug]		dns_rdata_from{wire,struct}() failed to catch bad
			NXT bit maps. [RT #5577]
433

Mark Andrews's avatar
Mark Andrews committed
434
435
1462.	[bug]		parse_sizeval() failed to check the token type.
			[RT #5586]
436

Mark Andrews's avatar
Mark Andrews committed
437
1461.	[bug]		Remove deadlock from rbtdb code. [RT #5599]
438

Mark Andrews's avatar
Mark Andrews committed
439
440
1460.	[bug]		inet_pton() failed to reject certain malformed
			IPv6 literals.
Mark Andrews's avatar
Mark Andrews committed
441

Mark Andrews's avatar
Mark Andrews committed
442
1459.	[placeholder]
443

Mark Andrews's avatar
Mark Andrews committed
444
1458.	[cleanup]	sprintf() -> snprintf().
445

Mark Andrews's avatar
Mark Andrews committed
446
447
1457.	[port]		Provide strlcat() and strlcpy() for platforms without
			them.
448

Mark Andrews's avatar
Mark Andrews committed
449
1456.	[contrib]	gen-data-queryperf.py from Stephane Bortzmeyer.
450

Mark Andrews's avatar
Mark Andrews committed
451
452
1455.	[bug]		<netaddr> missing from server grammar in
			doc/misc/options. [RT #5616]
453

Mark Andrews's avatar
Mark Andrews committed
454
455
456
457
458
1454.	[port]		Use getifaddrs() if available for interface scanning.
			--disable-getifaddrs to override.  Glibc currently
			has a getifaddrs() that does not support IPv6.
			Use --enable-getifaddrs=glibc to force the use of
			this version under linux machines.
459

Mark Andrews's avatar
Mark Andrews committed
460
1453.	[doc]		ARM: $GENERATE example wasn't accurate. [RT #5298]
Mark Andrews's avatar
Mark Andrews committed
461

Mark Andrews's avatar
Mark Andrews committed
462
1452.	[placeholder]
463

Mark Andrews's avatar
Mark Andrews committed
464
465
1451.	[bug]		rndc-confgen didn't exit with a error code for all
			failures. [RT #5209]
466

Mark Andrews's avatar
Mark Andrews committed
467
468
1450.	[bug]		Fetching expired glue failed under certain
			circumstances.  [RT #5124]
469

Mark Andrews's avatar
Mark Andrews committed
470
471
1449.	[bug]		query_addbestns() didn't handle running out of memory
			gracefully.
472

Mark Andrews's avatar
Mark Andrews committed
473
1448.	[bug]		Handle empty wildcards labels.
474

Mark Andrews's avatar
Mark Andrews committed
475
476
477
1447.	[bug]		We were casting (unsigned int) to and from (void *).
			rdataset->private4 is now rdataset->privateuint4
			to reflect a type change.
478

Mark Andrews's avatar
Mark Andrews committed
479
480
481
1446.	[func]		Implemented undocumented alternate transfer sources
			from BIND 8.  See use-alt-transfer-source,
			alt-transfer-source and alt-transfer-source-v6.
482

Mark Andrews's avatar
Mark Andrews committed
483
484
485
486
487
488
			SECURITY: use-alt-transfer-source is ENABLED unless
			you are using views.  This may cause a security risk
			resulting in accidental disclosure of wrong zone
			content if the master supplying different source
			content based on IP address.  If you are not certain
			ISC recommends setting use-alt-transfer-source no;
489

Mark Andrews's avatar
Mark Andrews committed
490
491
492
1445.	[bug]		DNS_ADBFIND_STARTATROOT broke stub zones.  This has
			been replaced with DNS_ADBFIND_STARTATZONE which
			causes the search to start using the closest zone.
493

Mark Andrews's avatar
Mark Andrews committed
494
495
1444.	[func]		dns_view_findzonecut2() allows you to specify if the
			cache should be searched for zone cuts.
496

Mark Andrews's avatar
Mark Andrews committed
497
498
1443.	[func]		Masters lists can now be specified and referenced
			in zone masters clauses and other masters lists.
499

Mark Andrews's avatar
Mark Andrews committed
500
501
502
503
1442.	[func]		New functions for manipulating port lists:
			dns_portlist_create(), dns_portlist_add(),
			dns_portlist_remove(), dns_portlist_match(),
			dns_portlist_attach() and dns_portlist_detach().
504

Mark Andrews's avatar
Mark Andrews committed
505
506
1441.	[func]		It is now possible to tell dig to bind to a specific
			source port.
507

Mark Andrews's avatar
Mark Andrews committed
508
509
510
1440.	[func]		It is now possible to tell named to avoid using
			certain source ports (avoid-v4-udp-ports,
			avoid-v6-udp-ports).
511

Mark Andrews's avatar
Mark Andrews committed
512
513
514
1439.	[bug]		Named could return NOERROR with certain NOTIFY
			failures.  Return NOTAUTH if the NOTIFY zone is
			not being served.
515

Mark Andrews's avatar
Mark Andrews committed
516
1438.	[func]		Log TSIG (if any) when logging NOTIFY requests.
517

Mark Andrews's avatar
Mark Andrews committed
518
1437.	[bug]		Leave space for stdio to work in. [RT #5033]
519

Mark Andrews's avatar
Mark Andrews committed
520
521
1436.	[func]		dns_zonemgr_resumexfrs() can be used to restart
			stalled transfers.
522

Mark Andrews's avatar
Mark Andrews committed
523
524
525
526
1435.	[bug]		zmgr_resume_xfrs() was being called read locked
			rather than write locked.  zmgr_resume_xfrs()
			was not being called if the zone was being
			shutdown.
527

Mark Andrews's avatar
Mark Andrews committed
528
529
1434.	[bug]		"rndc reconfig" failed to initiate the initial
			zone transfer of new slave zones.
530

Mark Andrews's avatar
Mark Andrews committed
531
532
533
1433.	[bug]		named could trigger a REQUIRE failure if it could
			not get a file descriptor when attempting to write
			a master file. [RT #4347]
534

Mark Andrews's avatar
Mark Andrews committed
535
536
1432.	[func]		The advertised EDNS UDP buffer size can now be set
			via named.conf (edns-udp-size).
537

Mark Andrews's avatar
Mark Andrews committed
538
539
1431.	[bug]		isc_print_snprintf() "%s" with precision could walk off
			end of argument. [RT #5191]
540

Mark Andrews's avatar
Mark Andrews committed
541
1430.	[port]		linux: IPv6 interface scanning support.
542

Mark Andrews's avatar
Mark Andrews committed
543
1429.	[bug]		Prevent the cache getting locked to old servers.
Mark Andrews's avatar
Mark Andrews committed
544

Mark Andrews's avatar
Mark Andrews committed
545
1428.	[placeholder]
546

Mark Andrews's avatar
Mark Andrews committed
547
1427.	[bug]		Race condition in adb with threaded build.
Mark Andrews's avatar
Mark Andrews committed
548

Mark Andrews's avatar
Mark Andrews committed
549
1426.	[placeholder]
550

Mark Andrews's avatar
Mark Andrews committed
551
552
1425.	[port]		linux/libbind: define __USE_MISC when testing *_r()
			function prototypes in netdb.h.  [RT #4921]
553

Mark Andrews's avatar
Mark Andrews committed
554
1424.	[bug]		EDNS version not being correctly printed.
555

Mark Andrews's avatar
Mark Andrews committed
556
1423.	[contrib]	queryperf: added A6 and SRV.
557

Mark Andrews's avatar
Mark Andrews committed
558
1422.	[func]		Log name/type/class when denying a query.  [RT #4663]
559

Mark Andrews's avatar
Mark Andrews committed
560
561
562
1421.	[func]		Differentiate updates that don't succeed due to
			prerequisites (unsuccessful) vs other reasons
			(failed).
563

Mark Andrews's avatar
Mark Andrews committed
564
1420.	[port]		solaris: work around gcc optimizer bug.
565

Mark Andrews's avatar
Mark Andrews committed
566
1419.	[port]		openbsd: use /dev/arandom. [RT #4950]
567

Mark Andrews's avatar
Mark Andrews committed
568
1418.	[bug]		'rndc reconfig' did not cause new slaves to load.
569

Mark Andrews's avatar
Mark Andrews committed
570
571
1417.	[func]		ID.SERVER/CHAOS is now a built in zone.
			See "server-id" for how to configure.
572

Mark Andrews's avatar
Mark Andrews committed
573
574
1416.	[bug]		Empty node should return NOERROR NODATA, not NXDOMAIN.
			[RT #4715]
575

Mark Andrews's avatar
Mark Andrews committed
576
577
1415.	[func]		DS TTL now derived from NS ttl.  NXT TTL now derived
			from SOA MINIMUM.
578

Mark Andrews's avatar
Mark Andrews committed
579
1414.	[func]		Support for KSK flag.
580

Mark Andrews's avatar
Mark Andrews committed
581
582
1413.	[func]		Explictly request the (re-)generation of DS records from
			keysets (dnssec-signzone -g).
583

Mark Andrews's avatar
Mark Andrews committed
584
585
586
1412.	[func]		You can now specify servers to be tried if a nameserver
			has IPv6 address and you only support IPv4 or the
			reverse. See dual-stack-servers.
587

Mark Andrews's avatar
Mark Andrews committed
588
1411.	[bug]		empty nodes should stop wildcard matches. [RT #4802]
589

Mark Andrews's avatar
Mark Andrews committed
590
1410.	[func]		Handle records that live in the parent zone, e.g. DS.
591

Mark Andrews's avatar
Mark Andrews committed
592
1409.	[bug]		DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
593

Mark Andrews's avatar
Mark Andrews committed
594
1408.	[bug]		"make distclean" was not complete. [RT #4700]
595

Mark Andrews's avatar
Mark Andrews committed
596
597
1407.	[bug]		lfsr incorrectly implements the shift register.
			[RT #4617]
598

Mark Andrews's avatar
Mark Andrews committed
599
1406.	[bug]		dispatch initializes one of the LFSR's with a incorrect
Mark Andrews's avatar
Mark Andrews committed
600
			polynomial.  [RT #4617]
601

Mark Andrews's avatar
Mark Andrews committed
602
1405.	[func]		Use arc4random() if available.
Mark Andrews's avatar
Mark Andrews committed
603

Mark Andrews's avatar
Mark Andrews committed
604
605
1404.	[bug]		libbind: ns_name_ntol() could overwrite a zero length
			buffer.
606

Mark Andrews's avatar
Mark Andrews committed
607
608
609
1403.	[func]		dnssec-signzone, dnssec-keygen, dnssec-makekeyset
			dnssec-signkey now report their version in the
			usage message.
610

Mark Andrews's avatar
Mark Andrews committed
611
612
1402.	[cleanup]	A6 has been moved to experimental and is no longer
			fully supported.
613

Mark Andrews's avatar
Mark Andrews committed
614
1401.	[bug]		adb wasn't clearing state when the timer expired.
615

Mark Andrews's avatar
Mark Andrews committed
616
617
1400.	[bug]		Block the addition of wildcard NS records by IXFR
			or UPDATE. [RT #3502]
618

Mark Andrews's avatar
Mark Andrews committed
619
620
1399.	[bug]		Use serial number arithmetic when testing SIG
			timestamps. [RT #4268]
621

Mark Andrews's avatar
Mark Andrews committed
622
623
1398.	[doc]		ARM: notify-also should have been also-notify.
			[RT #4345]
624

Mark Andrews's avatar
Mark Andrews committed
625
1397.	[bug]		J.ROOT-SERVERS.NET is now 192.58.128.30.
626

Mark Andrews's avatar
Mark Andrews committed
627
628
1396.	[func]		dnssec-signzone: adjust the default signing time by
			1 hour to allow for clock skew.
629

Mark Andrews's avatar
Mark Andrews committed
630
631
1395.	[port]		OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
			have a working implementation.  [RT #4079]
632

Mark Andrews's avatar
Mark Andrews committed
633
634
635
1394.	[func]		It is now possible to check if a particular element is
			in a acl.  Remove duplicate entries from the localnets
			acl.
636

Mark Andrews's avatar
Mark Andrews committed
637
638
639
1393.	[port]		Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
			is not available in the kernel to prevent accidently
			listening on IPv4 interfaces.
640

Mark Andrews's avatar
Mark Andrews committed
641
1392.	[bug]		named-checkzone: update usage.
642

Mark Andrews's avatar
Mark Andrews committed
643
1391.	[func]		Add support for IPv6 scoped addresses in named.
644

Mark Andrews's avatar
Mark Andrews committed
645
1390.	[func]		host now supports ixfr.
646

Mark Andrews's avatar
Mark Andrews committed
647
1389.	[bug]		named could fail to rotate long log files.  [RT #3666]
648

Mark Andrews's avatar
Mark Andrews committed
649
650
1388.	[port]		irix: check for sys/sysctl.h and NET_RT_IFLIST before
			defining HAVE_IFLIST_SYSCTL. [RT #3770]
651

Mark Andrews's avatar
Mark Andrews committed
652
653
654
1387.	[bug]		named could crash due to an access to invalid memory
			space (which caused an assertion failure) in
			incremental cleaning.  [RT #3588]
655

Mark Andrews's avatar
Mark Andrews committed
656
657
1386.	[bug]		named-checkzone -z stopped on errors in a zone.
			[RT #3653]
658

Mark Andrews's avatar
Mark Andrews committed
659
660
1385.	[bug]		Setting serial-query-rate to 10 would trigger a
			REQUIRE failure.
661

Mark Andrews's avatar
Mark Andrews committed
662
663
1384.	[bug]		host was incompatible with BIND 8 in its exit code and
			in the output with the -l option.  [RT #3536]
664

Mark Andrews's avatar
Mark Andrews committed
665
666
667
1383.	[func]		Track the serial number in a IXFR response and log if
			a mismatch occurs.  This is a more specific error than
			"not exact". [RT #3445]
668

Mark Andrews's avatar
Mark Andrews committed
669
1382.	[bug]		make install failed with --enable-libbind. [RT #3656]
670

Mark Andrews's avatar
Mark Andrews committed
671
672
673
1381.	[bug]		named failed to correctly process answers that
			contained DNAME records where the resulting CNAME
			resulted in a negative answer.
674

Mark Andrews's avatar
Mark Andrews committed
675
676
1380.	[func]		'rndc recursing' dump recursing queries to
			'recursing-file = "named.recursing";'.
677

Mark Andrews's avatar
Mark Andrews committed
678
679
1379.	[func]		'rndc status' now reports tcp and recursion quota
			states.
680

Mark Andrews's avatar
Mark Andrews committed
681
1378.	[func]		Improved positive feedback for 'rndc {reload|refresh}.
682

Mark Andrews's avatar
Mark Andrews committed
683
684
1377.	[func]		dns_zone_load{new}() now reports if the zone was
			loaded, queued for loading to up to date.
685

Mark Andrews's avatar
Mark Andrews committed
686
687
1376.	[func]		New function dns_zone_logc() to log to specified
			category.
688

Mark Andrews's avatar
Mark Andrews committed
689
690
1375.	[func]		'rndc dumpdb' now dumps the adb cache along with the
			data cache.
691

Mark Andrews's avatar
Mark Andrews committed
692
693
1374.	[func]		dns_adb_dump() now logs the lame zones associated
			with each server.
694

Mark Andrews's avatar
Mark Andrews committed
695
696
1373.	[bug]		Recovery from expired glue failed under certain
			circumstances.
697

Mark Andrews's avatar
Mark Andrews committed
698
699
700
1372.	[bug]		named crashes with an assertion failure on exit when
			sharing the same port for listening and querying, and
			changing listening addresses several times. [RT# 3509]
Mark Andrews's avatar
Mark Andrews committed
701

Mark Andrews's avatar
Mark Andrews committed
702
703
704
1371.	[bug]		notify-source-v6, transfer-source-v6 and
			query-source-v6 with explicit addresses and using the
			same ports as named was listening on could interfere
Mark Andrews's avatar
Mark Andrews committed
705
			with named's ability to answer queries sent to those
Mark Andrews's avatar
Mark Andrews committed
706
			addresses.
Mark Andrews's avatar
Mark Andrews committed
707

Mark Andrews's avatar
Mark Andrews committed
708
1370.	[bug]		dig '+[no]recurse' was incorrectly documented.
Mark Andrews's avatar
Mark Andrews committed
709

Mark Andrews's avatar
Mark Andrews committed
710
711
1369.	[bug]		Adding an NS record as the lexicographically last
			record in a secure zone didn't work.
Mark Andrews's avatar
Mark Andrews committed
712

Mark Andrews's avatar
Mark Andrews committed
713
1368.	[func]		remove support for bitstring labels.
Mark Andrews's avatar
Mark Andrews committed
714

Mark Andrews's avatar
Mark Andrews committed
715
1367.	[func]		Use response times to select forwarders.
Mark Andrews's avatar
Mark Andrews committed
716

Mark Andrews's avatar
Mark Andrews committed
717
1366.	[contrib]	queryperf usage was incomplete.  Add '-h' for help.
Mark Andrews's avatar
Mark Andrews committed
718

Mark Andrews's avatar
Mark Andrews committed
719
720
1365.	[func]		"localhost" and "localnets" acls now include IPv6
			addresses / prefixes.
Mark Andrews's avatar
Mark Andrews committed
721

Mark Andrews's avatar
Mark Andrews committed
722
723
1364.	[func]		Log file name when unable to open memory statistics
			and dump database files. [RT# 3437]
Mark Andrews's avatar
Mark Andrews committed
724

Mark Andrews's avatar
Mark Andrews committed
725
1363.	[func]		Listen-on-v6 now supports specific addresses.
Mark Andrews's avatar
Mark Andrews committed
726

Mark Andrews's avatar
Mark Andrews committed
727
1362.	[bug]		remove IFF_RUNNING test when scanning interfaces.
728

Mark Andrews's avatar
Mark Andrews committed
729
730
1361.	[func]		log the reason for rejecting a server when resolving
			queries.
731

Mark Andrews's avatar
Mark Andrews committed
732
733
1360.	[bug]		--enable-libbind would fail when not built in the
			source tree for certain OS's.
734

Mark Andrews's avatar
Mark Andrews committed
735
736
1359.	[security]	Support patches OpenSSL libraries.
			http://www.cert.org/advisories/CA-2002-23.html
737

Mark Andrews's avatar
Mark Andrews committed
738
739
1358.	[bug]		It was possible to trigger a INSIST when debugging
			large dynamic updates. [RT #3390]
740

Mark Andrews's avatar
Mark Andrews committed
741
1357.	[bug]		nsupdate was extremely wasteful of memory.
742

Mark Andrews's avatar
Mark Andrews committed
743
1356.	[tuning]	Reduce the number of events / quantum for zone tasks.
744

Mark Andrews's avatar
Mark Andrews committed
745
1355.	[bug]		Fix DNSSEC wildcard proof for CNAME/DNAME.
746

Mark Andrews's avatar
Mark Andrews committed
747
1354.	[doc]		lwres man pages had illegal nroff.
748

Mark Andrews's avatar
Mark Andrews committed
749
1353.	[contrib]	sdb/ldap to version 0.9.
750

Mark Andrews's avatar
Mark Andrews committed
751
752
1352.	[bug]		dig, host, nslookup when falling back to TCP use the
			current search entry (if any). [RT #3374]
753

Mark Andrews's avatar
Mark Andrews committed
754
755
756
1351.	[bug]		lwres_getipnodebyname() returned the wrong name
			when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
			was set.
757

Mark Andrews's avatar
Mark Andrews committed
758
759
1350.	[bug]		dns_name_fromtext() failed to handle too many labels
			gracefully.
760

Mark Andrews's avatar
Mark Andrews committed
761
762
1349.	[security]	Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
			http://www.cert.org/advisories/CA-2002-23.html
763

Mark Andrews's avatar
Mark Andrews committed
764
765
766
1348.	[port]		win32: Rewrote code to use I/O Completion Ports
			in socket.c and eliminating a host of socket
			errors. Performance is enhanced.
767

Mark Andrews's avatar
Mark Andrews committed
768
1347.	[placeholder]
Danny Mayer's avatar
Danny Mayer committed
769

Mark Andrews's avatar
Mark Andrews committed
770
1346.	[placeholder]
771

Mark Andrews's avatar
Mark Andrews committed
772
773
1345.	[port]		Use a explicit -Wformat with gcc.  Not all versions
			include it in -Wall.
774

Mark Andrews's avatar
Mark Andrews committed
775
776
777
778
779
1344.	[func]		Log if the serial number on the master has gone
			backwards.
			If you have multiple machines specified in the masters
			clause you may want to set 'multi-master yes;' to
			suppress this warning.
780

Mark Andrews's avatar
Mark Andrews committed
781
782
1343.	[func]		Log successful notifies received (info).  Adjust log
			level for failed notifies to notice.
783

Mark Andrews's avatar
Mark Andrews committed
784
1342.	[func]		Log remote address with TCP dispatch failures.
785

Mark Andrews's avatar
Mark Andrews committed
786
1341.	[func]		Allow a rate limiter to be stalled.
787

Mark Andrews's avatar
Mark Andrews committed
788
1340.	[bug]		Delay and spread out the startup refresh load.
789

Mark Andrews's avatar
Mark Andrews committed
790
791
1339.	[func]		dig, host and nslookup now use IP6.ARPA for nibble
			lookups.  Bit string lookups are no longer attempted.
792

Mark Andrews's avatar
Mark Andrews committed
793
1338.	[placeholder]
794

Mark Andrews's avatar
Mark Andrews committed
795
1337.	[placeholder]
796

Mark Andrews's avatar
Mark Andrews committed
797
798
799
1336.	[func]		Nibble lookups under IP6.ARPA are now supported by
			dns_byaddr_create().  dns_byaddr_createptrname() is
			deprecated, use dns_byaddr_createptrname2() instead.
800

Mark Andrews's avatar
Mark Andrews committed
801
802
1335.	[bug]		When performing a nonexistence proof, the validator
			should discard parent NXTs from higher in the DNS.
803

Mark Andrews's avatar
Mark Andrews committed
804
805
1334.	[bug]		When signing/verifying rdatasets, duplicate rdatas
			need to be suppressed.
806

Mark Andrews's avatar
Mark Andrews committed
807
808
1333.	[contrib]	queryperf now reports a summary of returned
			rcodes (-c), rcodes are printed in mnemonic form (-v).
809

Mark Andrews's avatar
Mark Andrews committed
810
811
1332.	[func]		Report the current serial with periodic commits when
			rolling forward the journal.
812

Mark Andrews's avatar
Mark Andrews committed
813
1331.	[func]		Generate DNSSEC wildcard proofs.
814

Mark Andrews's avatar
Mark Andrews committed
815
816
1330.	[bug]		When processing events (non-threaded) only allow
			the task one chance to use to use its quantum.
817