Context Navigation

CHANGES @ 17664

Visit:

Revision 17664, 128.9 KB checked in by ghudson, 23 years ago (diff)
This commit was generated by cvs2svn to compensate for changes in r17663, which included commits to RCS files with non-trunk default branches.

Line
1
2	--- 9.2.1 released ---
3
4	1271. [port] win32: a make file contained absolute version specific
5	references.
6
7	1269. [bug] Missing masters clause was not handled gracefully.
8	[RT #2703]
9
10	1244. [bug] Receiving a TCP message from a blackhole address would
11	prevent further messages being received over that
12	interface.
13
14	1178. [bug] Follow and cache (if appropriate) A6 and other
15	data chains to completion in the additional section.
16
17	--- 9.2.1rc2 released ---
18
19	1240. [bug] It was possible to leak zone references by
20	specifying an incorrect zone to rndc.
21
22	1239. [bug] Under certain circumstances named could continue to
23	use a name after it had been freed triggering
24	INSIST() failures. [RT #2614]
25
26	1238. [bug] It is possible to lockup the server when shutting down
27	if notifies are being processed. [RT #2591]
28
29	1237. [bug] nslookup: "set q=type" failed.
30
31	1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
32	NULL terminated text regions. [RT #2588]
33
34	1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
35
36	1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
37
38	1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
39
40	1229. [bug] named would crash if it received a TSIG signed
41	query as part of an AXFR response. [RT #2570]
42
43	1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
44
45	1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
46	if a number was expected and some other token was
47	found. [RT#2532]
48
49	1222. [bug] Specifying 'port *' did not always result in a system
50	selected (non-reserved) port being used. [RT #2537]
51
52	1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
53	compared case insensitively. [RT #2542]
54
55	1218. [bug] Named incorrectly returned SERVFAIL rather than
56	NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
57
58	1216. [bug] Multiple server clauses for the same server were not
59	reported. [RT #2514]
60
61	1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
62
63	1214. [bug] Win32: isc_file_renameunique() could leave zero length
64	files behind.
65
66	1212. [port] libbind: 64k answer buffers were causing stack space
67	to be exceeded for certian OS. Use heap space instead.
68
69	1211. [bug] dns_name_fromtext() incorrectly handled certain
70	valid octal bitlabels. [RT #2483]
71
72	1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
73	compatible addresses. [RT #2461]
74
75	1208. [bug] dns_master_load*() failed to log a error message if
76	an error was detected when parsing the ownername of
77	a record. [RT #2448]
78
79	--- 9.2.1rc1 released ---
80
81	1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
82	an invalid pointer.
83
84	1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
85	trigger a non-EDNS retry.
86
87	1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
88	of the message. [RT #2449]
89
90	1204. [bug] libbind: res_nupdate() failed to update the name
91	server addresses before sending the update.
92
93	1201. [bug] Require that if 'callbacks' is passed to
94	dns_rdata_fromtext(), callbacks->error and
95	callbacks->warn are initialized.
96
97	1200. [bug] Log 'errno' that we are unable to convert to
98	isc_result_t. [RT #2404]
99
100	1198. [bug] OPT printing style was not consistant with the way the
101	header fields are printed. The DO bit was not reported
102	if set. Report if any of the MBZ bits are set.
103
104	1197. [bug] Attempts to define the same acl multiple times were not
105	detected.
106
107	1196. [contrib] update mdnkit to 2.2.3.
108
109	1195. [bug] Attempts to redefine builtin acls should be caught.
110	[RT #2403]
111
112	1194. [bug] Not all duplicate zone definitions were being detected
113	at the named.conf checking stage. [RT #2431]
114
115	1193. [bug] Best effort parsing didn't handle packet truncation.
116
117	1191. [bug] A dynamic update removing the last non-apex name in
118	a secure zone would fail. [RT #2399]
119
120	1189. [bug] On some systems, malloc(0) returns NULL, which
121	could cause the caller to report an out of memory
122	error. [RT #2398]
123
124	1188. [bug] Dynamic updates of a signed zone would fail if
125	some of the zone private keys were unavailable.
126
127	1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
128	EOL token when reading to end of line.
129
130	1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
131	unless RES_INIT is set when calling res_*init().
132
133	1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
134	when res_*init() is called.
135
136	1183. [bug] Handle ENOSR error when writing to the internal
137	control pipe. [RT #2395]
138
139	1182. [bug] The server could throw an assertion failure when
140	constructing a negative response packet.
141
142	1176. [doc] Document that allow-v6-synthesis is only performed
143	for clients that are supplied recursive service.
144	[RT #2260]
145
146	1175. [bug] named-checkzone failed to call dns_result_register()
147	at startup which could result in runtime
148	exceptions when printing "out of memory" errors.
149	[RT #2335]
150
151	1174. [bug] Win32: add WSAECONNRESET to the expected errors
152	from connect(). [RT #2308]
153
154	1173. [bug] Potential memory leaks in isc_log_create() and
155	isc_log_settag(). [RT #2336]
156
157	1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
158	table of RR types in ARM.
159
160	1170. [bug] Don't attempt to print the token when a I/O error
161	occurs when parsing named.conf. [RT #2275]
162
163	1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
164
165	1167. [contrib] nslint-2.1a3 (from author).
166
167	1166. [bug] "Not Implemented" should be reported as NOTIMP,
168	not NOTIMPL. [RT #2281]
169
170	1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
171
172	1164. [bug] Empty masters clauses in slave / stub zones were not
173	handled gracefully. [RT #2262]
174
175	1162. [bug] The allow-notify option was not accepted in slave
176	zone statements.
177
178	1161. [bug] named-checkzone looped on unbalanced brackets.
179	[RT #2248]
180
181	1160. [bug] Generating Diffie-Hellman keys longer than 1024
182	bits could fail. [RT #2241]
183
184	1156. [port] The configure test for strsep() incorrectly
185	succeeded on certain patched versions of
186	AIX 4.3.3. [RT #2190]
187
188	1154. [bug] Don't attempt to obtain the netmask of a interface
189	if there is no address configured. [RT #2176]
190
191	1152. [bug] libbind: read buffer overflows.
192
193	1144. [bug] rndc-confgen would crash if both the -a and -t
194	options were specified. [RT #2159]
195
196	1142. [bug] dnssec-signzone would fail to delete temporary files
197	in some failure cases. [RT #2144]
198
199	1141. [bug] When named rejected a control message, it would
200	leak a file descriptor and memory. It would also
201	fail to respond, causing rndc to hang.
202	[RT #2139, #2164]
203
204	1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
205	to the -s option. [RT #2138]
206
207	1136. [bug] CNAME records synthesized from DNAMEs did not
208	have a TTL of zero as required by RFC2672.
209	[RT #2129]
210
211	1125. [bug] rndc: -k option was missing from usage message.
212	[RT #2057]
213
214	1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
215	are now documented. [RT #2052]
216
217	1123. [bug] dig +[no]fail did not match description. [RT #2052]
218
219	1109. [bug] nsupdate accepted illegal ttl values.
220
221	1108. [bug] On Win32, rndc was hanging when named was not running
222	due to failure to select for exceptional conditions
223	in select(). [RT #1870]
224
225	1081. [bug] Multicast queries were incorrectly identified
226	based on the source address, not the destination
227	address.
228
229	1072. [bug] The TCP client quota could be exceeded when
230	recursion occurred. [RT #1937]
231
232	1071. [bug] Sockets listening for TCP DNS connections
233	specified an excessive listen backlog. [RT #1937]
234
235	1070. [bug] Copy DNSSEC OK (DO) to response as specified by
236	draft-ietf-dnsext-dnssec-okbit-03.txt.
237
238	1014. [bug] Some queries would cause statistics counters to
239	increment more than once or not at all. [RT #1321]
240
241	1012. [bug] The -p option to named did not behave as documented.
242
243	988. [bug] 'additional-from-auth no;' did not work reliably
244	in the case of queries answered from the cache.
245	[RT #1436]
246
247	995. [bug] dig, host, nslookup: using a raw IPv6 address as a
248	target address should be fatal on a IPv4 only system.
249
250	--- 9.2.0 released ---
251
252	1134. [bug] Multithreaded servers could deadlock in ferror()
253	when reloading zone files. [RT #1951, #1998]
254
255	1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
256	platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
257
258	--- 9.2.0rc10 released ---
259
260	1131. [bug] The match-destinations view option did not work with
261	IPv6 destinations. [RT #2073, #2074]
262
263	1130. [bug] Log messages reporting an out-of-range serial number
264	did not include the out-of-range number but the
265	following token. [RT #2076]
266
267	1129. [bug] Multithreaded servers could crash under heavy
268	resolution load due to a race condition. [RT #2018]
269
270	1126. [bug] The server could access a freed event if shut
271	down while a client start event was pending
272	delivery. [RT #2061]
273
274	1121. [bug] The server could attempt to access a NULL zone
275	table if shut down while resolving.
276	[RT #1587, #2054]
277
278	1120. [bug] Errors in options were not fatal. [RT #2002]
279
280	1118. [bug] On multithreaded servers, a race condition
281	could cause an assertion failure in resolver.c
282	during resolver shutdown. [RT #2029]
283
284	1117. [port] The configure check for in6addr_loopback incorrectly
285	succeeded on AIX 4.3 when compiling with -O2
286	because the test code was optimized away.
287	[RT #2016]
288
289	1116. [bug] Setting transfers in a server clause, transfers-in,
290	or transfers-per-ns to a value greater than
291	2147483647 disabled transfers. [RT #2002]
292
293	1114. [port] Ignore more accept() errors. [RT #2021]
294
295	1113. [bug] The allow-update-forwarding option was ignored
296	when specified in a view. [RT #2014]
297
298	1111. [bug] Multithreaded servers could deadlock processing
299	recursive queries due to a locking hieararchy
300	violation in adb.c. [RT #2017]
301
302	--- 9.2.0rc9 released ---
303
304	1107. [bug] nsupdate could catch an assertion failure if an
305	invalid domain name was given as the argument to
306	the "zone" command.
307
308	1106. [bug] After seeing an out of range TTL, nsupdate would
309	treat all TTLs as out of range. [RT #2001]
310
311	1104. [bug] Invalid arguments to the transfer-format option
312	could cause an assertion failure. [RT #1995]
313
314	1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
315
316	1102. [doc] Note that query logging is enabled by directing the
317	queries category to a channel.
318
319	1101. [bug] Array bounds read error in lwres_gai_strerror.
320
321	1100. [bug] libbind: DNSSEC key ids were computed incorrectly.
322
323	1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
324	compile time errors.
325
326	1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
327
328	1093. [doc] libbind: miscellaneous nroff fixes.
329
330	1092. [bug] libbind: getby() failed to check if res_init() had
331	been called.
332
333	1091. [bug] libbind: misplaced va_end().
334
335	1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
336	the amount of memory consumed resulting in garbage
337	address being returned. Alignment calculations were
338	wasting space. We weren't suppressing duplicate
339	addresses.
340
341	1088. [port] libbind: MPE/iX C.70 (incomplete)
342
343	1087. [bug] libbind: struct __res_state too large on 64 bit arch.
344
345	1086. [port] libbind: sunos: old sprintf.
346
347	1085. [port] libbind: solaris: sys_nerr and sys_errlist do not
348	exist when compiling in 64 bit mode.
349
350	1084. [cleanup] libbind: gai_strerror() rewritten.
351
352	1083. [bug] The default control channel listened on the
353	wildcard adress, not the loopback as documented.
354	[RT #1975]
355
356	1082. [bug] The -g option to named incorrectly caused logging
357	to be sent to syslog in addition to stderr.
358	[RT #1974]
359
360	1078. [bug] We failed to correct bad tv_usec values in one case.
361	[RT #1966]
362
363	1076. [bug] A badly defined global key could trigger an assertion
364	on load/reload if views were used. [RT #1947]
365
366	1075. [bug] Out-of-range network prefix lengths were not
367	reported. [RT #1954]
368
369	1074. [bug] Running out of memory in dump_rdataset() could
370	cause an assertion failure. [RT #1946]
371
372	--- 9.2.0rc8 released ---
373
374	1068. [bug] errno could be overwritten by catgets(). [RT #1921]
375
376	1066. [bug] Provide a thread safe wrapper for strerror().
377	[RT #1689]
378
379	1064. [bug] Do not shut down active network interfaces if we
380	are unable to scan the interface list. [RT #1921]
381
382	1063. [bug] libbind: "make install" was failing on IRIX.
383
384	1062. [bug] If the control channel listener socket was shut
385	down before server exit, the listener object could
386	be freed twice. [RT #1916]
387
388	1061. [bug] If periodic cache cleaning happened to start
389	while cleaning due to reaching the configured
390	maximum cache size was in progress, the server
391	could catch an assertion failure. [RT #1912]
392
393	1057. [bug] Reloading the server after adding a "file" clause
394	to a zone statement could cause the server to
395	crash due to a typo in change 1016.
396
397	1056. [bug] Rndc could catch an assertion failure on SIGINT due
398	to an uninitialized variable. [RT #1908]
399
400	--- 9.2.0rc7 released ---
401
402	1054. [bug] On Win32, cfg_categories and cfg_modules need to be
403	exported from the libisccfg DLL.
404
405	1053. [bug] Dig did not increase its timeout when receiving
406	AXFRs unless the +time option was used. [RT #1904]
407
408	1052. [bug] Journals were not being created in binary mode
409	resulting in "journal format not recognized" error
410	under Win32. [RT #1889]
411
412	1051. [bug] Do not ignore a network interface completely just
413	because it has a noncontiguous netmask. Instead,
414	omit it from the localnets ACL and issue a warning.
415	[RT #1891]
416
417	1050. [bug] Log messages reporting malformed IP addresses in
418	address lists such as that of the forwarders option
419	failed to include the correct error code, file
420	name, and line number. [RT #1890]
421
422	1048. [bug] Servers built with -DISC_MEM_USE_INTERNAL_MALLOC=1
423	didn't work.
424
425	1047. [bug] named was incorrectly refusing all requests signed
426	with a TSIG key derived from an unsigned TKEY
427	negotiation with a NOERROR response. [RT #1886]
428
429	1046. [bug] The help message for the --with-openssl configure
430	option was inaccurate. [RT #1880]
431
432	1045. [bug] It was possible to skip saving glue for a nameserver
433	for a stub zone.
434
435	1044. [bug] Specifying allow-transfer, notify-source, or
436	notify-source-v6 in a stub zone was not treated
437	as an error.
438
439	1043. [bug] Specifying a transfer-source or transfer-source-v6
440	option in the zone statement for a master zone was
441	not treated as an error. [RT #1876]
442
443	1042. [bug] The "config" logging category did not work properly.
444	[RT #1873]
445
446	1041. [bug] Dig/host/nslookup could catch an assertion failure
447	on SIGINT due to an uninitialized variable. [RT #1867]
448
449	1040. [bug] Multiple listen-on-v6 options with different ports
450	were not accepted. [RT #1875]
451
452	1039. [bug] Negative responses with CNAMEs in the answer section
453	were cached incorrectly. [RT #1862]
454
455	1038. [bug] In servers configured with a tkey-domain option,
456	TKEY queries with an owner name other than the root
457	could cause an assertion failure. [RT #1866, #1869]
458
459	1033. [bug] Always respond to requests with an unsupported opcode
460	with NOTIMP, even if we don't have a matching view
461	or cannot determine the class.
462
463	--- 9.2.0rc6 released ---
464
465	1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
466	[RT #1858]
467
468	1030. [bug] On systems with no resolv.conf file, nsupdate
469	exited with an error rather than defaulting
470	to using the loopback address. [RT #1836]
471
472	1029. [bug] Some named.conf errors did not cause the loading
473	of the configuration file to return a failure
474	status even though they were logged. [RT #1847]
475
476	1028. [bug] On Win32, dig/host/nslookup looked for resolv.conf
477	in the wrong directory. [RT #1833]
478
479	1027. [bug] RRs having the reserved type 0 should be rejected.
480	[RT #1471]
481
482	1026. [port] Recognize OpenUNIX 8 in config.guess. [RT #1830]
483
484	1022. [bug] Don't report empty root hints as "extra data".
485	[RT #1802]
486
487	--- 9.2.0rc5 released ---
488
489	1021. [bug] On Win32, log message timestamps were one month
490	later than they should have been, and the server
491	would exhibit unspecified behavior in December.
492
493	1020. [bug] IXFR log messages did not distinguish between
494	true IXFRs, AXFR-style IXFRs, and mere version
495	polls. [RT #1811]
496
497	1019. [bug] The value of the lame-ttl option was limited to 18000
498	seconds, not 1800 seconds as documented. [RT #1803]
499
500	1018. [bug] The default log channel was not always initialized
501	correctly. [RT #1813]
502
503	1017. [bug] When specifying TSIG keys to dig and nsupdate using
504	the -k option, they must be HMAC-MD5 keys. [RT #1810]
505
506	1016. [bug] Slave zones with no backup file were re-transferred
507	on every server reload.
508
509	1015. [bug] Log channels that had a "versions" option but no
510	"size" option failed to create numbered log
511	files. [RT #1783]
512
513	--- 9.2.0rc4 released ---
514
515
516	1013. [bug] It was possible to cancel a query twice when marking
517	a server as bogus or by having a blackhole acl.
518	[RT #1776]
519
520	1010. [bug] The server could attempt to execute a command channel
521	command after initiating server shutdown, causing
522	an assertion failure. [RT #1766]
523
524	1006. [bug] If a KEY RR was found missing during DNSSEC validation,
525	an assertion failure could subsequently be triggered
526	in the resolver. [RT #1763]
527
528	1005. [bug] Don't copy nonzero RCODEs from request to response.
529	[RT #1765]
530
531	1004. [port] Deal with recvfrom() returning EHOSTDOWN. [RT #1770]
532
533	1002. [bug] When reporting an unknown class name in named.conf,
534	including the file name and line number. [RT #1759]
535
536	1001. [bug] win32 socket code doio_recv was not catching a
537	WSACONNRESET error when a client was timing out
538	the request and closing its socket. [RT #1745]
539
540	1000. [bug] BIND 8 compatibility: accept "HESIOD" as an alias
541	for class "HS". [RT #1759]
542
543	--- 9.2.0rc3 released ---
544
545	990. [bug] The rndc-confgen man page was not installed.
546
547	989. [bug] Report filename if $INCLUDE fails for file related
548	errors. [RT #1736]
549
550	987. [bug] "dig -help" didn't show "+[no]stats".
551
552	986. [bug] "dig +noall" failed to clear stats and command
553	printing.
554
555	984. [bug] Multithreading should be enabled by default on
556	Solaris 2.7 and newer, but it wasn't.
557
558	--- 9.2.0rc2 released ---
559
560	980. [bug] Incoming zone transfers restarting after an error
561	could trigger an assertion failure. [RT #1692]
562
563	978. [bug] dns_db_attachversion() had an invalid REQUIRE()
564	condition.
565
566	977. [bug] Improve "not at top of zone" error message.
567
568	975. [bug] "max-cache-size default;" as a view option
569	caused an assertion failure.
570
571	974. [bug] "max-cache-size unlimited;" as a global option
572	was not accepted.
573
574	973. [bug] Failed to log the question name when logging:
575	"bad zone transfer request: non-authoritative zone
576	(NOTAUTH)".
577
578	972. [bug] The file modification time code in zone.c was using the
579	wrong epoch. [RT #1667]
580
581	968. [bug] On win32, the isc_time_now() function was unnecessarily
582	calling strtime(). [RT #1671]
583
584	967. [bug] On win32, the link for bindevt was not including the
585	required resource file to enable the event viewer
586	to interpret the error messages in the event log,
587	[RT #1668]
588
589	966. [placeholder]
590
591	965. [bug] Including data other than root server NS and A
592	records in the root hint file could cause a rbtdb
593	node reference leak. [RT #1581, #1618]
594
595	964. [func] Warn if data other than root server NS and A records
596	are found in the root hint file. [RT #1581, #1618]
597
598	963. [bug] Bad ISC_LANG_ENDDECLS. [RT #1645]
599
600	962. [bug] libbind: bad "#undef", don't attempt to install
601	non-existant nlist.h. [RT #1640]
602
603	961. [bug] Tried to use a IPV6 feature when ISC_PLATFORM_HAVEIPV6
604	was not defined. [RT #1482]
605
606	960. [port] liblwres failed to build on systems with support for
607	getrrsetbyname() in the OS. [RT #1592]
608
609	959. [port] On FreeBSD, determine the number of CPUs by calling
610	sysctlbyname(). [RT #1584]
611
612	958. [port] ssize_t is not available on all platforms. [RT #1607]
613
614	957. [bug] sys/select.h inclusion was broken on older platforms.
615	[RT #1607]
616
617	956. [bug] ns_g_autorndcfile changed to ns_g_keyfile
618	in named/win32/os.c due to code changes in
619	change #953. win32 .make file for rndc-confgen
620	updated to add include path for os.h header.
621
622	--- 9.2.0rc1 released ---
623
624	955. [bug] When using views, the zone's class was not being
625	inherited from the view's class. [RT #1583]
626
627	954. [bug] When requesting AXFRs or IXFRs using dig, host, or
628	nslookup, the RD bit should not be set as zone
629	transfers are inherently nonrecursive. [RT #1575]
630
631	953. [func] The /var/run/named.key file from change #843
632	has been replaced by /etc/rndc.key. Both
633	named and rndc will look for this file and use
634	it to configure a default control channel key
635	if not already configured using a different
636	method (rndc.conf / controls). Unlike
637	named.key, rndc.key is not created automatically;
638	it must be created by manually running
639	"rndc-confgen -a".
640
641	952. [bug] The server required manual intervention to serve the
642	affected zones if it died between creating a journal
643	and committing the first change to it.
644
645	951. [bug] CFLAGS was not passed to the linker when
646	linking some of the test programs under
647	bin/tests. [RT #1555].
648
649	950. [bug] Explicit TTLs did not properly override $TTL
650	due to a bug in change 834. [RT #1558]
651
652	949. [bug] host was unable to print records larger than 512
653	bytes. [RT #1557]
654
655	--- 9.2.0b2 released ---
656
657	948. [port] Integrated support for building on Windows NT /
658	Windows 2000.
659
660	947. [bug] dns_rdata_soa_t had a badly named element "mname" which
661	was really the RNAME field from RFC1035. To avoid
662	confusion and silent errors that would occur it the
663	"origin" and "mname" elements were given their correct
664	names "mname" and "rname" respectively, the "mname"
665	element is renamed to "contact".
666
667	946. [cleanup] doc/misc/options is now machine-generated from the
668	configuration parser syntax tables, and therefore
669	more likely to be correct.
670
671	945. [func] Add the new view-specific options
672	"match-destinations" and "match-recursive-only".
673
674	944. [func] Check for expired signatures on load.
675
676	943. [bug] The server could crash when receiving a command
677	via rndc if the configuration file listed only
678	nonexistent keys in the controls statement. [RT #1530]
679
680	942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly
681	defined on some platforms.
682
683	941. [bug] The configuration checker crashed if a slave
684	zone didn't contain a masters statement. [RT #1514]
685
686	940. [bug] Double zone locking failure on error path. [RT #1510]
687
688	--- 9.2.0b1 released ---
689
690	939. [port] Add the --disable-linux-caps option to configure for
691	systems that manage capabilities outside of named.
692	[RT #1503]
693
694	938. [placeholder]
695
696	937. [bug] A race when shutting down a zone could trigger a
697	INSIST() failure. [RT #1034]
698
699	936. [func] Warn about IPv4 addresses that are not complete
700	dotted quads. [RT #1084]
701
702	935. [bug] inet_pton failed to reject leading zeros.
703
704	934. [port] Deal with systems where accept() spuriously returns
705	ECONNRESET.
706
707	933. [bug] configure failed doing libbind on platforms not
708	supported by BIND 8. [RT #1496]
709
710	--- 9.2.0a3 released ---
711
712	932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
713	when installing isc-config.sh.
714	[RT #198, #1466]
715
716	931. [bug] The controls statement only attempted to verify
717	messages using the first key in the key list.
718	(9.2.0a1/a2 only).
719
720	930. [func] Query performance testing tool added as
721	contrib/queryperf.
722
723	929. [placeholder]
724
725	928. [bug] nsupdate would send empty update packets if the
726	send (or empty line) command was run after
727	another send but before any new updates or
728	prerequisites were specified. It should simply
729	ignore this command.
730
731	927. [bug] Don't hold the zone lock for the entire dump to disk.
732	[RT #1423]
733
734	926. [bug] The resolver could deadlock with the ADB when
735	shutting down (multithreaded builds only).
736	[RT #1324]
737
738	925. [cleanup] Remove openssl from the distribution; require that
739	--with-openssl be specified if DNSSEC is needed.
740
741	924. [port] Extend support for pre-RFC2133 IPv6 implementation.
742	[RT #987]
743
744	923. [bug] Multiline TSIG secrets (and other multiline strings)
745	were not accepted in named.conf. [RT #1469]
746
747	922. [func] Added two new lwres_getrrsetbyname() result codes,
748	ERR_NONAME and ERR_NODATA.
749
750	921. [bug] lwres returned an incorrect error code if it received
751	a truncated message.
752
753	920. [func] Increase the lwres receive buffer size to 16K.
754	[RT #1451]
755
756	919. [placeholder]
757
758	918. [func] In nsupdate, TSIG errors are no longer treated as
759	fatal errors.
760
761	917. [func] New nsupdate command 'key', allowing TSIG keys to
762	be specified in the nsupdate command stream rather
763	than the command line.
764
765	916. [bug] Specifying type ixfr to dig without specifying
766	a serial number failed in unexpected ways.
767
768	915. [func] The named-checkconf and named-checkzone programs
769	now have a '-v' option for printing their version.
770	[RT #1151]
771
772	914. [bug] Global 'server' statements were rejected when
773	using views, even though they were accepted
774	in 9.1. [RT #1368]
775
776	913. [bug] Cache cleaning was not sufficiently aggressive.
777	[RT #1441, #1444]
778
779	912. [bug] Attempts to set the 'additional-from-cache' or
780	'additional-from-auth' option to 'no' in a
781	server with recursion enabled will now
782	be ignored and cause a warning message.
783	[RT #1145]
784
785	911. [placeholder]
786
787	910. [port] Some pre-RFC2133 IPv6 implementations do not define
788	IN6ADDR_ANY_INIT. [RT #1416]
789
790	908. [func] New program, rndc-confgen, to simplify setting up rndc.
791
792	907. [func] The ability to get entropy from either the
793	random device, a user-provided file or from
794	the keyboard was migrated from the DNSSEC tools
795	to libisc as isc_entropy_usebestsource().
796
797	906. [port] Separated the system independent portion of
798	lib/isc/unix/entropy.c into lib/isc/entropy.c
799	and added lib/isc/win32/entropy.c.
800
801	905. [bug] Configuring a forward "zone" for the root domain
802	did not work. [RT #1418]
803
804	904. [bug] The server would leak memory if attempting to use
805	an expired TSIG key. [RT #1406]
806
807	903. [bug] dig should not crash when receiving a TCP packet
808	of length 0.
809
810	902. [bug] The -d option was ignored if both -t and -g were also
811	specified.
812
813	901. [placeholder]
814
815	900. [bug] A config.guess update changed the system identification
816	string of FreeBSD systems; configure and
817	bin/tests/system/ifconfig.sh now recognize the new
818	string.
819
820	--- 9.2.0a2 released ---
821
822	899. [bug] lib/dns/soa.c failed to compile on many platforms
823	due to inappropriate use of a void value.
824	[RT #1372, #1373, #1386, #1387, #1395]
825
826	898. [bug] "dig" failed to set a nonzero exit status
827	on UDP query timeout. [RT #1323]
828
829	897. [bug] A config.guess update changed the system identification
830	string of UnixWare systems; configure now recognizes
831	the new string.
832
833	896. [bug] If a configuration file is set on named's command line
834	and it has a relative pathname, the current directory
835	(after any possible jailing resulting from named -t)
836	will be prepended to it so that reloading works
837	properly even when a directory option is present.
838
839	895. [func] New function, isc_dir_current(), akin to POSIX's
840	getcwd().
841
842	894. [bug] When using the DNSSEC tools, a message intended to warn
843	when the keyboard was being used because of the lack
844	of a suitable random device was not being printed.
845
846	893. [func] Removed isc_file_test() and added isc_file_exists()
847	for the basic functionality that was being added
848	with isc_file_test().
849
850	892. [placeholder]
851
852	891. [bug] Return an error when a SIG(0) signed response to
853	an unsigned query is seen. This should actually
854	do the verification, but it's not currently
855	possible. [RT #1391]
856
857	890. [cleanup] The man pages no longer require the mandoc macros
858	and should now format cleanly using most versions of
859	nroff, and HTML versions of the man pages have been
860	added. Both are generated from DocBook source.
861
862	889. [port] Eliminated blank lines before .TH in nroff man
863	pages since they cause problems with some versions
864	of nroff. [RT #1390]
865
866	888. [bug] Don't die when using TKEY to delete a nonexistent
867	TSIG key. [RT #1392]
868
869	887. [port] Detect broken compilers that can't call static
870	functions from inline functions. [RT #1212]
871
872	866. [func] Close debug only file channels when debug is set to
873	zero. [RT #1246]
874
875	865. [bug] The new configuration parser did not allow
876	the optional debug level in a "severity debug"
877	clause of a logging channel to be omitted.
878	This is now allowed and treated as "severity
879	debug 1;" like it does in BIND 8.2.4, not as
880	"severity debug 0;" like it did in BIND 9.1.
881	[RT #1367]
882
883	864. [cleanup] Multithreading is now enabled by default on
884	OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.
885
886	863. [bug] If an error occurred while an outgoing zone transfer
887	was starting up, the server could access a domain
888	name that had already been freed when logging a
889	message saying that the transfer was starting.
890	[RT #1383]
891
892	862. [bug] Use after realloc(), non portable pointer arithmetic in
893	grmerge().
894
895	861. [port] Add support for Mac OS X, by making it equivalent
896	to Darwin. This was derived from the config.guess
897	file shipped with Mac OS X. [RT #1355]
898
899	860. [func] Drop cross class glue in zone transfers.
900
901	859. [bug] Cache cleaning now won't swamp the CPU if there
902	is a persistent overlimit condition.
903
904	858. [func] isc_mem_setwater() no longer requires that when the
905	callback function is non-NULL then its hi_water
906	argument must be greater than its lo_water argument
907	(they can now be equal) or that they be non-zero.
908
909	857. [cleanup] Use ISC_MAGIC() to define all magic numbers for
910	structs, for our friends in EBCDIC-land.
911
912	856. [func] Allow partial rdatasets to be returned in answer and
913	authority sections to help non-TCP capable clients
914	recover from truncation. [RT #1301]
915
916	855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.
917
918	854. [bug] The config parser didn't properly handle config
919	options that were specified in units of time other
920	than seconds. [RT #1372]
921
922	853. [bug] configure_view_acl() failed to detach existing acls.
923	[RT #1374]
924
925	852. [bug] Handle responses from servers which do not know
926	about IXFR.
927
928	851. [cleanup] The obsolete support-ixfr option was not properly
929	ignored.
930
931	--- 9.2.0a1 released ---
932
933	850. [bug] dns_rbt_findnode() would not find nodes that were
934	split on a bitstring label somewhere other than in
935	the last label of the node. [RT #1351]
936
937	849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
938
939	848. [func] A minimum max-cache-size of two megabytes is enforced
940	by the cache cleaner.
941
942	847. [func] Added isc_file_test(), which currently only has
943	some very basic functionality to test for the
944	existence of a file, whether a pathname is absolute,
945	or whether a pathname is the fundamental representation
946	of the current directory. It is intended that this
947	function can be expanded to test other things a
948	programmer might want to know about a file.
949
950	846. [func] A non-zero 'param' to dst_key_generate() when making an
951	hmac-md5 key means that good entropy is not required.
952
953	845. [bug] The access rights on the public file of a symmetric
954	key are now restricted as soon as the file is opened,
955	rather than after it has been written and closed.
956
957	844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
958	just as <lwres/net.h> does.
959
960	843. [func] If no controls statement is present in named.conf,
961	or if any inet phrase of a controls statement is
962	lacking a keys clause, then a key will be automatically
963	generated by named and an rndc.conf-style file
964	named named.key will be written that uses it. rndc
965	will use this file only if its normal configuration
966	file, or one provided on the command line, does not
967	exist.
968
969	842. [func] 'rndc flush' now takes an optional view.
970
971	841. [bug] When sdb modules were not declared threadsafe, their
972	create and destroy functions were not serialized.
973
974	840. [bug] The config file parser could print the wrong file
975	name if an error was detected after an included file
976	was parsed. [RT #1353]
977
978	839. [func] Dump packets for which there was no view or that the
979	class could not be determined to category "unmatched".
980
981	838. [port] UnixWare 7.x.x is now suported by
982	bin/tests/system/ifconfig.sh.
983
984	837. [cleanup] Multithreading is now enabled by default only on
985	OSF1, Solaris 2.7 and newer, and AIX.
986
987	836. [func] Upgraded libtool to 1.4.
988
989	835. [bug] The dispatcher could enter a busy loop if
990	it got an I/O error receiving on a UDP socket.
991	[RT #1293]
992
993	834. [func] Accept (but warn about) master files beginning with
994	an SOA record without an explicit TTL field and
995	lacking a $TTL directive, by using the SOA MINTTL
996	as a default TTL. This is for backwards compatibility
997	with old versions of BIND 8, which accepted such
998	files without warning although they are illegal
999	according to RFC1035.
1000
1001	833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
1002	<dns/soa.h>, and extended them to support
1003	all the integer-valued fields of the SOA RR.
1004
1005	832. [bug] The default location for named.conf in named-checkconf
1006	should depend on --sysconfdir like it does in named.
1007	[RT #1258]
1008
1009	831. [placeholder]
1010
1011	830. [func] Implement 'rndc status'.
1012
1013	829. [bug] The DNS_R_ZONECUT result code should only be returned
1014	when an ANY query is made with DNS_DBFIND_GLUEOK set.
1015	In all other ANY query cases, returning the delegation
1016	is better.
1017
1018	828. [bug] The errno value from recvfrom() could be overwritten
1019	by logging code. [RT #1293]
1020
1021	827. [bug] When an IXFR protocol error occurs, the slave
1022	should retry with AXFR.
1023
1024	826. [bug] Some IXFR protocol errors were not detected.
1025
1026	825. [bug] zone.c:ns_query() detached from the wrong zone
1027	reference. [RT #1264]
1028
1029	824. [bug] Correct line numbers reported by dns_master_load().
1030	[RT #1263]
1031
1032	823. [func] The output of "dig -h" now goes to stdout so that it
1033	can easily be piped through "more". [RT #1254]
1034
1035	822. [bug] Sending nxrrset prerequisites would crash nsupdate.
1036	[RT #1248]
1037
1038	821. [bug] The program name used when logging to syslog should
1039	be stripped of leading path components.
1040	[RT #1178, #1232]
1041
1042	820. [bug] Name server address lookups failed to follow
1043	A6 chains into the glue of local authoritative
1044	zones.
1045
1046	819. [bug] In certain cases, the resolver's attempts to
1047	restart an address lookup at the root could cause
1048	the fetch to deadlock (with itself) instead of
1049	restarting. [RT #1225]
1050
1051	818. [bug] Certain pathological responses to ANY queries could
1052	cause an assertion failure. [RT #1218]
1053
1054	817. [func] Adjust timeouts for dialup zone queries.
1055
1056	816. [bug] Report potential problems with log file accessibility
1057	at configuration time, since such problems can't
1058	reliably be reported at the time they actually occur.
1059
1060	815. [bug] If a log file was specified with a path separator
1061	character (i.e. "/") in its name and the directory
1062	did not exist, the log file's name was treated as
1063	though it were the directory name. [RT #1189]
1064
1065	814. [bug] Socket objects left over from accept() failures
1066	were incorrectly destroyed, causing corruption
1067	of socket manager data structures.
1068
1069	813. [bug] File descriptors exceeding FD_SETSIZE were handled
1070	badly. [RT #1192]
1071
1072	812. [bug] dig sometimes printed incomplete IXFR responses
1073	due to an uninitialized variable. [RT #1188]
1074
1075	811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]
1076
1077	810. [bug] The signer name in SIG records was not properly
1078	downcased when signing/verifying records. [RT #1186]
1079
1080	809. [bug] Configuring a non-local address as a transfer-source
1081	could cause an assertion failure during load.
1082
1083	808. [func] Add 'rndc flush' to flush the server's cache.
1084
1085	807. [bug] When setting up TCP connections for incoming zone
1086	transfers, the transfer-source port was not
1087	ignored like it should be.
1088
1089	806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up
1090	the calling stack to the zone maintence level, causing
1091	zones to not reload when an included file was touched
1092	but the top-level zone file was not.
1093
1094	805. [bug] When using "forward only", missing root hints should
1095	not cause queries to fail. [RT #1143]
1096
1097	804. [bug] Attempting to obtain entropy could fail in some
1098	situations. This would be most common on systems
1099	with user-space threads. [RT #1131]
1100
1101	803. [bug] Treat all SIG queries as if they have the CD bit set,
1102	otherwise no data will be returned [RT #749]
1103
1104	802. [bug] DNSSEC key tags were computed incorrectly in almost
1105	all cases. [RT #1146]
1106
1107	801. [bug] nsupdate should treat lines beginning with ';' as
1108	comments. [RT #1139]
1109
1110	800. [bug] dnssec-signzone produced incorrect statistics for
1111	large zones. [RT #1133]
1112
1113	799. [bug] The ADB didn't find AAAA glue in a zone unless A6
1114	glue was also present.
1115
1116	798. [bug] nsupdate should be able to reject bad input lines
1117	and continue. [RT #1130]
1118
1119	797. [func] Issue a warning if the 'directory' option contains
1120	a relative path. [RT #269]
1121
1122	796. [func] When a size limit is associated with a log file,
1123	only roll it when the size is reached, not every
1124	time the log file is opened. [RT #1096]
1125
1126	795. [func] Add the +multiline option to dig. [RT #1095]
1127
1128	794. [func] Implement the "port" and "default-port" statements
1129	in rndc.conf.
1130
1131	793. [cleanup] The DNSSEC tools could create filenames that were
1132	illegal or contained shell metacharacters. They
1133	now use a different text encoding of names that
1134	doesn't have these problems. [RT #1101]
1135
1136	792. [cleanup] Replace the OMAPI command channel protocol with a
1137	simpler one.
1138
1139	791. [bug] The command channel now works over IPv6.
1140
1141	790. [bug] Wildcards created using dynamic update or IXFR
1142	could fail to match. [RT #1111]
1143
1144	789. [bug] The "localhost" and "localnets" ACLs did not match
1145	when used as the second element of a two-element
1146	sortlist item.
1147
1148	788. [func] Add the "match-mapped-addresses" option, which
1149	causes IPv6 v4mapped addresses to be treated as
1150	IPv4 addresses for the purpose of acl matching.
1151
1152	787. [bug] The DNSSEC tools failed to downcase domain
1153	names when mapping them into file names.
1154
1155	786. [bug] When DNSSEC signing/verifying data, owner names were
1156	not properly downcased.
1157
1158	785. [bug] A race condition in the resolver could cause
1159	an assertion failure. [RT #673, #872, #1048]
1160
1161	784. [bug] nsupdate and other programs would not quit properly
1162	if some signals were blocked by the caller. [RT #1081]
1163
1164	783. [bug] Following CNAMEs could cause an assertion failure
1165	when either using an sdb database or under very
1166	rare conditions.
1167
1168	782. [func] Implement the "serial-query-rate" option.
1169
1170	781. [func] Avoid error packet loops by dropping duplicate FORMERR
1171	responses. [RT #1006]
1172
1173	780. [bug] Error handling code dealing with out of memory or
1174	other rare errors could lead to assertion failures
1175	by calling functions on unitialized names. [RT #1065]
1176
1177	779. [func] Added the "minimal-responses" option.
1178
1179	778. [bug] When starting cache cleaning, cleaning_timer_action()
1180	returned without first pausing the iterator, which
1181	could cause deadlock. [RT #998]
1182
1183	777. [bug] An empty forwarders list in a zone failed to override
1184	global forwarders. [RT #995]
1185
1186	776. [func] Improved error reporting in denied messages. [RT #252]
1187
1188	775. [placeholder]
1189
1190	774. [func] max-cache-size is implemented.
1191
1192	773. [func] Added isc_rwlock_trylock() to attempt to lock without
1193	blocking.
1194
1195	772. [bug] Owner names could be incorrectly omitted from cache
1196	dumps in the presence of negative caching entries.
1197	[RT #991]
1198
1199	771. [cleanup] TSIG errors related to unsynchronized clocks
1200	are logged better. [RT #919]
1201
1202	770. [func] Add the "edns yes_or_no" statement to the server
1203	clause. [RT #524]
1204
1205	769. [func] Improved error reporting when parsing rdata. [RT #740]
1206
1207	768. [bug] The server did not emit an SOA when a CNAME
1208	or DNAME chain ended in NXDOMAIN in an
1209	authoritative zone.
1210
1211	767. [placeholder]
1212
1213	766. [bug] A few cases in query_find() could leak fname.
1214	This would trigger the mpctx->allocated == 0
1215	assertion when the server exited.
1216	[RT #739, #776, #798, #812, #818, #821, #845,
1217	#892, #935, #966]
1218
1219	765. [func] ACL names are once again case insensitive, like
1220	in BIND 8. [RT #252]
1221
1222	764. [func] Configuration files now allow "include" directives
1223	in more places, such as inside the "view" statement.
1224	[RT #377, #728, #860]
1225
1226	763. [func] Configuration files no longer have reserved words.
1227	[RT #731, #753]
1228
1229	762. [cleanup] The named.conf and rndc.conf file parsers have
1230	been completely rewritten.
1231
1232	761. [bug] _REENTRANT was still defined when building with
1233	--disable-threads.
1234
1235	760. [contrib] Significant enhancements to the pgsql sdb driver.
1236
1237	759. [bug] The resolver didn't turn off "avoid fetches" mode
1238	when restarting, possibly causing resolution
1239	to fail when it should not. This bug only affected
1240	platforms which support both IPv4 and IPv6. [RT #927]
1241
1242	758. [bug] The "avoid fetches" code did not treat negative
1243	cache entries correctly, causing fetches that would
1244	be useful to be avoided. This bug only affected
1245	platforms which support both IPv4 and IPv6. [RT #927]
1246
1247	757. [func] Log zone transfers.
1248
1249	756. [bug] dns_zone_load() could "return" success when no master
1250	file was configured.
1251
1252	755. [bug] Fix incorrectly formatted log messages in zone.c.
1253
1254	754. [bug] Certain failure conditions sending UDP packets
1255	could cause the server to retry the transmission
1256	indefinitely. [RT #902]
1257
1258	753. [bug] dig, host, and nslookup would fail to contact a
1259	remote server if getaddrinfo() returned an IPv6
1260	address on a system that doesn't support IPv6.
1261	[RT #917]
1262
1263	752. [func] Correct bad tv_usec elements returned by
1264	gettimeofday().
1265
1266	751. [func] Log successful zone loads / transfers. [RT #898]
1267
1268	750. [bug] A query should not match a DNAME whose trust level
1269	is pending. [RT #916]
1270
1271	749. [bug] When a query matched a DNAME in a secure zone, the
1272	server did not return the signature of the DNAME.
1273	[RT #915]
1274
1275	748. [doc] List supported RFCs in doc/misc/rfc-compliance.
1276	[RT #781]
1277
1278	747. [bug] The code to determine whether an IXFR was possible
1279	did not properly check for a database that could
1280	not have a journal. [RT #865, #908]
1281
1282	746. [bug] The sdb didn't clone rdatasets properly, causing
1283	a crash when the server followed delegations. [RT #905]
1284
1285	745. [func] Report the owner name of records that fail
1286	semantic checks while loading.
1287
1288	744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the
1289	result of an ANY or SIG query, the resolver failed
1290	to setup the return event's rdatasets, causing an
1291	assertion failure in the query code. [RT #881]
1292
1293	743. [bug] Receiving a large number of certain malformed
1294	answers could cause named to stop responding.
1295	[RT #861]
1296
1297	742. [placeholder]
1298
1299	741. [port] Support openssl-engine. [RT #709]
1300
1301	740. [port] Handle openssl library mismatches slightly better.
1302
1303	739. [port] Look for /dev/random in configure, rather than
1304	assuming it will be there for only a predefined
1305	set of OSes.
1306
1307	738. [bug] If a non-threadsafe sdb driver supported AXFR and
1308	received an AXFR request, it would deadlock or die
1309	with an assertion failure. [RT #852]
1310
1311	737. [port] stdtime.c failed to compile on certain platforms.
1312
1313	736. [func] New functions isc_task_{begin,end}exclusive().
1314
1315	735. [doc] Add BIND 4 migration notes.
1316
1317	734. [bug] An attempt to re-lock the zone lock could occur if
1318	the server was shutdown during a zone tranfer.
1319	[RT #830]
1320
1321	733. [bug] Reference counts of dns_acl_t objects need to be
1322	locked but were not. [RT #801, #821]
1323
1324	732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]
1325
1326	731. [bug] Certain zone errors could cause named-checkzone to
1327	fail ungracefully. [RT #819]
1328
1329	730. [bug] lwres_getaddrinfo() returns the correct result when
1330	it fails to contact a server. [RT #768]
1331
1332	729. [port] pthread_setconcurrency() needs to be called on Solaris.
1333
1334	728. [bug] Fix comment processing on master file directives.
1335	[RT# 757]
1336
1337	727. [port] Work around OS bug where accept() succeeds but
1338	fails to fill in the peer address of the accepted
1339	connection, by treating it as an error rather than
1340	an assertion failure. [RT #809]
1341
1342	726. [func] Implement the "trace" and "notrace" commands in rndc.
1343
1344	725. [bug] Installing man pages could fail.
1345
1346	724. [func] New libisc functions isc_netaddr_any(),
1347	isc_netaddr_any6().
1348
1349	723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver
1350	to return DNS_R_SERVFAIL. [RT #783]
1351
1352	722. [func] Allow incremental loads to be canceled.
1353
1354	721. [cleanup] Load manager and dns_master_loadfilequota() are no
1355	more.
1356
1357	720. [bug] Server could enter infinite loop in
1358	dispatch.c:do_cancel(). [RT #733]
1359
1360	719. [bug] Rapid reloads could trigger an assertion failure.
1361	[RT #743, #763]
1362
1363	718. [cleanup] "internal" is no longer a reserved word in named.conf.
1364	[RT #753, #731]
1365
1366	717. [bug] Certain TKEY processing failure modes could
1367	reference an uninitialized variable, causing the
1368	server to crash. [RT #750]
1369
1370	716. [bug] The first line of a $INCLUDE master file was lost if
1371	an origin was specified. [RT #744]
1372
1373	715. [bug] Resolving some A6 chains could cause an assertion
1374	failure in adb.c. [RT #738]
1375
1376	714. [bug] Preserve interval timers across reloads unless changed.
1377	[RT# 729]
1378
1379	713. [func] named-checkconf takes '-t directory' similar to named.
1380	[RT #726]
1381
1382	712. [bug] Sending a large signed update message caused an
1383	assertion failure. [RT #718]
1384
1385	711. [bug] The libisc and liblwres implementations of
1386	inet_ntop contained an off by one error.
1387
1388	710. [func] The forwarders statement now takes an optional
1389	port. [RT #418]
1390
1391	709. [bug] ANY or SIG queries for data with a TTL of 0
1392	would return SERVFAIL. [RT #620]
1393
1394	708. [bug] When building with --with-openssl, the openssl headers
1395	included with BIND 9 should not be used. [RT #702]
1396
1397	707. [func] The "filename" argument to named-checkzone is no
1398	longer optional, to reduce confusion. [RT #612]
1399
1400	706. [bug] Zones with an explicit "allow-update { none; };"
1401	were considered dynamic and therefore not reloaded
1402	on SIGHUP or "rndc reload".
1403
1404	705. [port] Work out resource limit type for use where rlim_t is
1405	not available. [RT #695]
1406
1407	704. [port] RLIMIT_NOFILE is not available on all platforms.
1408	[RT #695]
1409
1410	703. [port] sys/select.h is needed on older platforms. [RT #695]
1411
1412	702. [func] If the address 0.0.0.0 is seen in resolv.conf,
1413	use 127.0.0.1 instead. [RT #693]
1414
1415	701. [func] Root hints are now fully optional. Class IN
1416	views use compiled-in hints by default, as
1417	before. Non-IN views with no root hints now
1418	provide authoritative service but not recursion.
1419	A warning is logged if a view has neither root
1420	hints nor authoritative data for the root. [RT #696]
1421
1422	700. [bug] $GENERATE range check was wrong. [RT #688]
1423
1424	699. [bug] The lexer mishandled empty quoted strings. [RT #694]
1425
1426	698. [bug] Aborting nsupdate with ^C would lead to several
1427	race conditions.
1428
1429	697. [bug] nsupdate was not compatible with the undocumented
1430	BIND 8 behavior of ignoring TTLs in "update delete"
1431	commands. [RT #693]
1432
1433	696. [bug] lwresd would die with an assertion failure when passed
1434	a zero-length name. [RT #692]
1435
1436	695. [bug] If the resolver attempted to query a blackholed or
1437	bogus server, the resolution would fail immediately.
1438
1439	694. [bug] $GENERATE did not produce the last entry.
1440	[RT #682, #683]
1441
1442	693. [bug] An empty lwres statement in named.conf caused
1443	the server to crash while loading.
1444
1445	692. [bug] Deal with systems that have getaddrinfo() but not
1446	gai_strerror(). [RT #679]
1447
1448	691. [bug] Configuring per-view forwarders caused an assertion
1449	failure. [RT #675, #734]
1450
1451	690. [func] $GENERATE now supports DNAME. [RT #654]
1452
1453	689. [doc] man pages are now installed. [RT #210]
1454
1455	688. [func] "make tags" now works on systems with the
1456	"Exuberant Ctags" etags.
1457
1458	687. [bug] Only say we have IPv6, with sufficent functionality,
1459	if it has actually been tested. [RT #586]
1460
1461	686. [bug] dig and nslookup can now be properly aborted during
1462	blocking operations. [RT #568]
1463
1464	685. [bug] nslookup should use the search list/domain options
1465	from resolv.conf by default. [RT #405, #630]
1466
1467	684. [bug] Memory leak with view forwarders. [RT #656]
1468
1469	683. [bug] File descriptor leak in isc_lex_openfile().
1470
1471	682. [bug] nslookup displayed SOA records incorrectly. [RT #665]
1472
1473	681. [bug] $GENERATE specifying output format was broken. [RT #653]
1474
1475	680. [bug] dns_rdata_fromstruct() mishandled options bigger
1476	than 255 octets.
1477
1478	679. [bug] $INCLUDE could leak memory and file descriptors on
1479	reload. [RT #639]
1480
1481	678. [bug] "transfer-format one-answer;" could trigger an assertion
1482	failure. [RT #646]
1483
1484	677. [bug] dnssec-signzone would occasionally use the wrong ttl
1485	for database operations and fail. [RT #643]
1486
1487	676. [bug] Log messages about lame servers to category
1488	'lame-servers' rather than 'resolver', so as not
1489	to be gratuitously incompatible with BIND 8.
1490
1491	675. [bug] TKEY queries could cause the server to leak
1492	memory.
1493
1494	674. [func] Allow messages to be TSIG signed / verified using
1495	a offset from the current time.
1496
1497	673. [func] The server can now convert RFC1886-style recursive
1498	lookup requests into RFC2874-style lookups, when
1499	enabled using the new option "allow-v6-synthesis".
1500
1501	672. [bug] The wrong time was in the "time signed" field when
1502	replying with BADTIME error.
1503
1504	671. [bug] The message code was failing to parse a message with
1505	no question section and a TSIG record. [RT #628]
1506
1507	670. [bug] The lwres replacements for getaddrinfo and
1508	getipnodebyname didn't properly check for the
1509	existence of the sockaddr sa_len field.
1510
1511	669. [bug] dnssec-keygen now makes the public key file
1512	non-world-readable for symmetric keys. [RT #403]
1513
1514	668. [func] named-checkzone now reports multiple errors in master
1515	files.
1516
1517	667. [bug] On Linux, running named with the -u option and a
1518	non-world-readable configuration file didn't work.
1519	[RT #626]
1520
1521	666. [bug] If a request sent by dig is longer than 512 bytes,
1522	use TCP.
1523
1524	665. [bug] Signed responses were not sent when the size of the
1525	TSIG + question exceeded the maximum message size.
1526	[RT #628]
1527
1528	664. [bug] The t_tasks and t_timers module tests are now skipped
1529	when building without threads, since they require
1530	threads.
1531
1532	663. [func] Accept a size_spec, not just an integer, in the
1533	(unimplemented and ignored) max-ixfr-log-size option
1534	for compatibility with recent versions of BIND 8.
1535	[RT #613]
1536
1537	662. [bug] dns_rdata_fromtext() failed to log certain errors.
1538
1539	661. [bug] Certain UDP IXFR requests caused an assertion failure
1540	(mpctx->allocated == 0). [RT #355, #394, #623]
1541
1542	660. [port] Detect multiple CPUs on HP-UX and IRIX.
1543
1544	659. [performance] Rewrite the name compression code to be much faster.
1545
1546	658. [cleanup] Remove all vestiges of 16 bit global compression.
1547
1548	657. [bug] When a listen-on statement in an lwres block does not
1549	specify a port, use 921, not 53. Also update the
1550	listen-on documentation. [RT #616]
1551
1552	656. [func] Treat an unescaped newline in a quoted string as
1553	an error. This means that TXT records with missing
1554	close quotes should have meaningful errors printed.
1555
1556	655. [bug] Improve error reporting on unexpected eof when loading
1557	zones. [RT #611]
1558
1559	654. [bug] Origin was being forgotten in TCP retries in dig.
1560	[RT #574]
1561
1562	653. [bug] +defname option in dig was reversed in sense.
1563	[RT #549]
1564
1565	652. [bug] zone_saveunique() did not report the new name.
1566
1567	651. [func] The AD bit in responses now has the meaning
1568	specified in <draft-ietf-dnsext-ad-is-secure>.
1569
1570	650. [bug] SIG(0) records were being generated and verified
1571	incorrectly. [RT #606]
1572
1573	649. [bug] It was possible to join to an already running fctx
1574	after it had "cloned" its events, but before it sent
1575	them. In this case, the event of the newly joined
1576	fetch would not contain the answer, and would
1577	trigger the INSIST() in fctx_sendevents(). In
1578	BIND 9.0, this bug did not trigger an INSIST(), but
1579	caused the fetch to fail with a SERVFAIL result.
1580	[RT #588, #597, #605, #607]
1581
1582	648. [port] Add support for pre-RFC2133 IPv6 implementations.
1583
1584	647. [bug] Resolver queries sent after following multiple
1585	referrals had excessively long retransmission
1586	timeouts due to incorrectly counting the referrals
1587	as "restarts".
1588
1589	646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
1590	didn't _cleanly_ fix the problem it was trying to fix.
1591
1592	645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
1593
1594	644. [bug] #622 needed more work. [RT #562]
1595
1596	643. [bug] xfrin error messages made more verbose, added class
1597	of the zone. [RT# 599]
1598
1599	642. [bug] Break the exit_check() race in the zone module.
1600	[RT #598]
1601
1602	--- 9.1.0b2 released ---
1603
1604	641. [bug] $GENERATE caused a uninitialized link to be used.
1605	[RT #595]
1606
1607	640. [bug] Memory leak in error path could cause
1608	"mpctx->allocated == 0" failure. [RT #584]
1609
1610	639. [bug] Reading entropy from the keyboard would sometimes fail.
1611	[RT #591]
1612
1613	638. [port] lib/isc/random.c needed to explicitly include time.h
1614	to get a prototype for time() when pthreads was not
1615	being used. [RT #592]
1616
1617	637. [port] Use isc_u?int64_t instead of (unsigned) long long in
1618	lib/isc/print.c. Also allow lib/isc/print.c to
1619	be compiled even if the platform does not need it.
1620	[RT #592]
1621
1622	636. [port] Shut up MSVC++ about a possible loss of precision
1623	in the ISC__BUFFER_PUTUINT*() macros. [RT #592]
1624
1625	635. [bug] Reloading a server with a configured blackhole list
1626	would cause an assertion. [RT #590]
1627
1628	634. [bug] A log file will completely stop being written when
1629	it reaches the maximum size in all cases, not just
1630	when versioning is also enabled. [RT #570]
1631
1632	633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
1633
1634	632. [bug] The index array of the journal file was
1635	corrupted as it was written to disk.
1636
1637	631. [port] Build without thread support on systems without
1638	pthreads.
1639
1640	630. [bug] Locking failure in zone code. [RT #582]
1641
1642	629. [bug] 9.1.0b1 dereferenced a null pointer and crashed
1643	when responding to a UDP IXFR request.
1644
1645	628. [bug] If the root hints contained only AAAA addresses,
1646	named would be unable to perform resolution.
1647
1648	627. [bug] The EDNS0 blackhole detection code of change 324
1649	waited for three retransmissions to each server,
1650	which takes much too long when a domain has many
1651	name servers and all of them drop EDNS0 queries.
1652	Now we retry without EDNS0 after three consecutive
1653	timeouts, even if they are all from different
1654	servers. [RT #143]
1655
1656	626. [bug] The lightweight resolver daemon no longer crashes
1657	when asked for a SIG rrset. [RT #558]
1658
1659	625. [func] Zones now inherit their class from the enclosing view.
1660
1661	624. [bug] The zone object could get timer events after it had
1662	been destroyed, causing a server crash. [RT #571]
1663
1664	623. [func] Added "named-checkconf" and "named-checkzone" program
1665	for syntax checking named.conf files and zone files,
1666	respectively.
1667
1668	622. [bug] A canceled request could be destroyed before
1669	dns_request_destroy() was called. [RT #562]
1670
1671	621. [port] Disable IPv6 at runtime if IPv6 sockets are unusable.
1672	This mostly affects Red Hat Linux 7.0, which has
1673	conflicts between libc and the kernel.
1674
1675	620. [bug] dns_master_load*inc() now require 'task' and 'load'
1676	to be non-null. Also 'done' will not be called if
1677	dns_master_load*inc() fails immediately. [RT #565]
1678
1679	618. [bug] Queries to a signed zone could sometimes cause
1680	an assertion failure.
1681
1682	617. [bug] When using dynamic update to add a new RR to an
1683	existing RRset with a different TTL, the journal
1684	entries generated from the update did not include
1685	explicit deletions and re-additions of the existing
1686	RRs to update their TTL to the new value.
1687
1688	616. [func] dnssec-signzone -t output now includes performance
1689	statistics.
1690
1691	615. [bug] dnssec-signzone did not like child keysets signed
1692	by multiple keys.
1693
1694	614. [bug] Checks for uninitialized link fields were prone
1695	to false positives, causing assertion failures.
1696	The checks are now disabled by default and may
1697	be re-enabled by defining ISC_LIST_CHECKINIT.
1698
1699	613. [bug] "rndc reload zone" now reloads primary zones.
1700	It previously only updated slave and stub zones,
1701	if an SOA query indicated an out of date serial.
1702
1703	612. [cleanup] Shutup a ridiculously noisy HP-UX compiler that
1704	complains relentlessly about how its treatment
1705	of 'const' has changed as well as how casting
1706	sometimes tightens alignment constraints.
1707
1708	611. [func] allow-notify can be used to permit processing of
1709	notify messages from hosts other than a slave's
1710	masters.
1711
1712	610. [func] rndc dumpdb is now supported.
1713
1714	609. [bug] getrrsetbyname() would crash lwresd if the server
1715	found more SIGs than answers. [RT #554]
1716
1717	608. [func] dnssec-signzone now adds a comment to the zone
1718	with the time the file was signed.
1719
1720	607. [bug] nsupdate would fail if it encountered a CNAME or
1721	DNAME in a response to an SOA query. [RT #515]
1722
1723	606. [bug] Compiling with --disable-threads failed due
1724	to isc_thread_self() being incorrectly defined
1725	as an integer rather than a function.
1726
1727	605. [func] New function isc_lex_getlasttokentext().
1728
1729	604. [bug] The named.conf parser could print incorrect line
1730	numbers when long comments were present.
1731
1732	603. [bug] Make dig handle multiple types or classes on the same
1733	query more correctly.
1734
1735	602. [func] Cope automatically with UnixWare's broken
1736	IN6_IS_ADDR_* macros. [RT #539]
1737
1738	601. [func] Return a non-zero exit code if an update fails
1739	in nsupdate.
1740
1741	600. [bug] Reverse lookups sometimes failed in dig, etc...
1742
1743	599. [func] Added four new functions to the libisc log API to
1744	support i18n messages. isc_log_iwrite(),
1745	isc_log_ivwrite(), isc_log_iwrite1() and
1746	isc_log_ivwrite1() were added.
1747
1748	598. [bug] An update-policy statement would cause the server
1749	to assert while loading. [RT #536]
1750
1751	597. [func] dnssec-signzone is now multithreaded.
1752
1753	596. [bug] DNS_RDATASLAB_FORCE and DNS_RDATASLAB_EXACT are
1754	not mutually exclusive.
1755
1756	595. [port] On Linux 2.2, socket() returns EINVAL when it
1757	should return EAFNOSUPPORT. Work around this.
1758	[RT #531]
1759
1760	594. [func] sdb drivers are now assumed to not be thread-safe
1761	unless the DNS_SDBFLAG_THREADSAFE flag is supplied.
1762
1763	593. [bug] If a secure zone was missing all its NXTs and
1764	a dynamic update was attempted, the server entered
1765	an infinite loop.
1766
1767	592. [bug] The sig-validity-interval option now specifies a
1768	number of days, not seconds. This matches the
1769	documentation. [RT #529]
1770
1771	--- 9.1.0b1 released ---
1772
1773	591. [bug] Work around non-reentrancy in openssl by disabling
1774	precomputation in keys.
1775
1776	590. [doc] There are now man pages for the lwres library in
1777	doc/man/lwres.
1778
1779	589. [bug] The server could deadlock if a zone was updated
1780	while being transferred out.
1781
1782	588. [bug] ctx->in_use was not being correctly initalised when
1783	when pushing a file for $INCLUDE. [RT #523]
1784
1785	587. [func] A warning is now printed if the "allow-update"
1786	option allows updates based on the source IP
1787	address, to alert users to the fact that this
1788	is insecure and becoming increasingly so as
1789	servers capable of update forwarding are being
1790	deployed.
1791
1792	586. [bug] multiple views with the same name were fatal. [RT #516]
1793
1794	585. [func] dns_db_addrdataset() and and dns_rdataslab_merge()
1795	now support 'exact' additions in a similar manner to
1796	dns_db_subtractrdataset() and dns_rdataslab_subtract().
1797
1798	584. [func] You can now say 'notify explicit'; to suppress
1799	notification of the servers listed in NS records
1800	and notify only those servers listed in the
1801	'also-notify' option.
1802
1803	583. [func] "rndc querylog" will now toggle logging of
1804	queries, like "ndc querylog" in BIND 8.
1805
1806	582. [bug] dns_zone_idetach() failed to lock the zone.
1807	[RT #199, #463]
1808
1809	581. [bug] log severity was not being correctly processed.
1810	[RT #485]
1811
1812	580. [func] Ignore trailing garbage on incoming DNS packets,
1813	for interoperability with broken server
1814	implementations. [RT #491]
1815
1816	579. [bug] nsupdate did not take a filename to read update from.
1817	[RT #492]
1818
1819	578. [func] New config option "notify-source", to specify the
1820	source address for notify messages.
1821
1822	577. [func] Log illegal RDATA combinations. e.g. multiple
1823	singlton types, cname and other data.
1824
1825	576. [doc] isc_log_create() description did not match reality.
1826
1827	575. [bug] isc_log_create() was not setting internal state
1828	correctly to reflect the default channels created.
1829
1830	574. [bug] TSIG signed queries sent by the resolver would fail to
1831	have their responses validated and would leak memory.
1832
1833	573. [bug] The journal files of IXFRed slave zones were
1834	inadvertantly discarded on server reload, causing
1835	"journal out of sync with zone" errors on subsequent
1836	reloads. [RT #482]
1837
1838	572. [bug] Quoted strings were not accepted as key names in
1839	address match lists.
1840
1841	571. [bug] It was possible to create an rdataset of singleton
1842	type which had more than one rdata. [RT #154]
1843	[RT #279]
1844
1845	570. [bug] rbtdb.c allowed zones containing nodes which had
1846	both a CNAME and "other data". [RT #154]
1847
1848	569. [func] The DNSSEC AD bit will not be set on queries which
1849	have not requested a DNSSEC response.
1850
1851	568. [func] Add sample simple database drivers in contrib/sdb.
1852
1853	567. [bug] Setting the zone transfer timeout to zero caused an
1854	assertion failure. [RT #302]
1855
1856	566. [func] New public function dns_timer_setidle().
1857
1858	565. [func] Log queries more like BIND 8: query logging is now
1859	done to category "queries", level "info". [RT #169]
1860
1861	564. [func] Add sortlist support to lwresd.
1862
1863	563. [func] New public functions dns_rdatatype_format() and
1864	dns_rdataclass_format(), for convenient formatting
1865	of rdata type/class mnemonics in log messages.
1866
1867	562. [cleanup] Moved lib/dns/*conf.c to bin/named where they belong.
1868
1869	561. [func] The 'datasize', 'stacksize', 'coresize' and 'files'
1870	clauses of the options{} statement are now implemented.
1871
1872	560. [bug] dns_name_split did not properly the resulting prefix
1873	when a maximal length bitstring label was split which
1874	was preceded by another bitstring label. [RT #429]
1875
1876	559. [bug] dns_name_split did not properly create the suffix
1877	when splitting within a maximal length bitstring label.
1878
1879	558. [func] New functions, isc_resource_getlimit and
1880	isc_resource_setlimit.
1881
1882	557. [func] Symbolic constants for libisc integral types.
1883
1884	556. [func] The DNSSEC OK bit in the EDNS extended flags
1885	is now implemented. Responses to queries without
1886	this bit set will not contain any DNSSEC records.
1887
1888	555. [bug] A slave server attempting a zone transfer could
1889	crash with an assertion failure on certain
1890	malformed responses from the master. [RT #457]
1891
1892	554. [bug] In some cases, not all of the dnssec tools were
1893	properly installed.
1894
1895	553. [bug] Incoming zone transfers deferred due to quota
1896	were not started when quota was increased but
1897	only when a transfer in progress finished. [RT #456]
1898
1899	552. [bug] We were not correctly detecting the end of all c-style
1900	comments. [RT #455]
1901
1902	551. [func] Implemented the 'sortlist' option.
1903
1904	550. [func] Support unknown rdata types and classes.
1905
1906	549. [bug] "make" did not immediately abort the build when a
1907	subdirectory make failed [RT #450].
1908
1909	548. [func] The lexer now ungets tokens more correctly.
1910
1911	546. [func] Option 'lame-ttl' is now implemented.
1912
1913	545. [func] Name limit and counting options removed from dig;
1914	they didn't work properly, and cannot be correctly
1915	implemented without significant changes.
1916
1917	544. [func] Add statistics option, enable statistics-file option,
1918	add RNDC option "dump-statistics" to write out a
1919	query statistics file.
1920
1921	543. [doc] The 'port' option is now documented.
1922
1923	542. [func] Add support for update forwarding as required for
1924	full compliance with RFC2136. It is turned off
1925	by default and can be enabled using the
1926	'allow-update-forwarding' option.
1927
1928	541. [func] Add bogus server support.
1929
1930	540. [func] Add dialup support.
1931
1932	539. [func] Support the blackhole option.
1933
1934	538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().
1935
1936	536. [func] Use transfer-source{-v6} when sending refresh queries.
1937	Transfer-source{-v6} now take a optional port
1938	parameter for setting the UDP source port. The port
1939	parameter is ignored for TCP.
1940
1941	535. [func] Use transfer-source{-v6} when forwarding update
1942	requests.
1943
1944	534. [func] Ancestors have been removed from RBT chains. Ancestor
1945	information can be discerned via node parent pointers.
1946
1947	533. [func] Incorporated name hashing into the RBT database to
1948	improve search speed.
1949
1950	532. [func] Implement DNS UPDATE pseudo records using
1951	DNS_RDATA_UPDATE flag.
1952
1953	531. [func] Rdata really should be initalized before being assigned
1954	to (dns_rdata_fromwire(), dns_rdata_fromtext(),
1955	dns_rdata_clone(), dns_rdata_fromregion()),
1956	check that it is.
1957
1958	530. [func] New function dns_rdata_invalidate().
1959
1960	529. [bug] 521 contained a bug which caused zones to always
1961	reload. [RT #410]
1962
1963	528. [func] The ISC_LIST_XXXX macros now perform sanity checks
1964	on their arguments. ISC_LIST_XXXXUNSAFE can be use
1965	to skip the checks however use with caution.
1966
1967	527. [func] New function dns_rdata_clone().
1968
1969	526. [bug] nsupdate incorrectly refused to add RRs with a TTL
1970	of 0.
1971
1972	525. [func] New arguments 'options' for dns_db_subtractrdataset(),
1973	and 'flags' for dns_rdataslab_subtract() allowing you
1974	to request that the RR's must exist prior to deletion.
1975	DNS_R_NOTEXACT is returned if the condition is not met.
1976
1977	524. [func] The 'forward' and 'forwarders' statement in
1978	non-forward zones should work now.
1979
1980	523. [doc] The source to the Administrator Reference Manual is
1981	now an XML file using the DocBook DTD, and is included
1982	in the distribution. The plain text version of the
1983	ARM is temporarily unavailable while we figure out
1984	how to generate readable plain text from the XML.
1985
1986	522. [func] The lightweight resolver daemon can now use
1987	a real configuration file, and its functionality
1988	can be provided by a name server. Also, the -p and -P
1989	options to lwresd have been reversed.
1990
1991	521. [bug] Detect master files which contain $INCLUDE and always
1992	reload. [RT #196]
1993
1994	520. [bug] Upgraded libtool to 1.3.5, which makes shared
1995	library builds almost work on AIX (and possibly
1996	others).
1997
1998	519. [bug] dns_name_split() would improperly split some bitstring
1999	labels, zeroing a few of the least signficant bits in
2000	the prefix part. When such an improperly created
2001	prefix was returned to the RBT database, the bogus
2002	label was dutifully stored, corrupting the tree.
2003	[RT #369]
2004
2005	518. [bug] The resolver did not realize that a DNAME which was
2006	"the answer" to the client's query was "the answer",
2007	and such queries would fail. [RT #399]
2008
2009	517. [bug] The resolver's DNAME code would trigger an assertion
2010	if there was more than one DNAME in the chain.
2011	[RT #399]
2012
2013	516. [bug] Cache lookups which had a NULL node pointer, e.g.
2014	those by dns_view_find(), and which would match a
2015	DNAME, would trigger an INSIST(!search.need_cleanup)
2016	assertion. [RT #399]
2017
2018	515. [bug] The ssu table was not being attached / detached
2019	by dns_zone_[sg]etssutable. [RT#397]
2020
2021	514. [func] Retry refresh and notify queries if they timeout.
2022	[RT #388]
2023
2024	513. [func] New functionality added to rdnc and server to allow
2025	individual zones to be refreshed or reloaded.
2026
2027	512. [bug] The zone transfer code could throw an execption with
2028	an invalid IXFR stream.
2029
2030	511. [bug] The message code could throw an assertion on an
2031	out of memory failure. [RT #392]
2032
2033	510. [bug] Remove spurious view notify warning. [RT #376]
2034
2035	509. [func] Add support for write of zone files on shutdown.
2036
2037	508. [func] dns_message_parse() can now do a best-effort
2038	attempt, which should allow dig to print more invalid
2039	messages.
2040
2041	507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()
2042	and dns_view_flushanddetach().
2043
2044	506. [func] Do not fail to start on errors in zone files.
2045
2046	505. [bug] nsupdate was printing "unknown result code". [RT #373]
2047
2048	504. [bug] The zone was not being marked as dirty when updated via
2049	IXFR.
2050
2051	503. [bug] dumptime was not being set along with
2052	DNS_ZONEFLG_NEEDDUMP.
2053
2054	502. [func] On a SERVFAIL reply, DiG will now try the next server
2055	in the list, unless the +fail option is specified.
2056
2057	501. [bug] Incorrect port numbers were being displayed by
2058	nslookup. [RT #352]
2059
2060	500. [func] Nearly useless +details option removed from DiG.
2061
2062	499. [func] In DiG, specifying a class with -c or type with -t
2063	changes command-line parsing so that classes and
2064	types are only recognized if following -c or -t.
2065	This allows hosts with the same name as a class or
2066	type to be looked up.
2067
2068	498. [doc] There is now a man page for "dig"
2069	in doc/man/bin/dig.1.
2070
2071	497. [bug] The error messages printed when an IP match list
2072	contained a network address with a nonzero host
2073	part where not sufficiently detailed. [RT #365]
2074
2075	496. [bug] named didn't sanity check numeric parameters. [RT #361]
2076
2077	495. [bug] nsupdate was unable to handle large records. [RT #368]
2078
2079	494. [func] Do not cache NXDOMAIN responses for SOA queries.
2080
2081	493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses
2082	for SOA queries. This makes it easier to locate
2083	the containing zone without polluting intermediate
2084	caches.
2085
2086	492. [bug] attempting to reload a zone caused the server fail
2087	to shutdown cleanly. [RT #360]
2088
2089	491. [bug] nsupdate would segfault when sending certain
2090	prerequisites with empty RDATA. [RT #356]
2091
2092	490. [func] When a slave/stub zone has not yet successfully
2093	obtained an SOA containing the zone's configured
2094	retry time, perform the SOA query retries using
2095	exponential backoff. [RT #337]
2096
2097	489. [func] The zone manager now has a "i/o" queue.
2098
2099	488. [bug] Locks weren't properly destroyed in some cases.
2100
2101	487. [port] flockfile() is not defined on all systems.
2102
2103	486. [bug] nslookup: "set all" and "server" commands showed
2104	the incorrect port number if a port other than 53
2105	was specified. [RT #352]
2106
2107	485. [func] When dig had more than one server to query, it would
2108	send all of the messages at the same time. Add
2109	rate limiting of the transmitted messages.
2110
2111	484. [bug] When the server was reloaded after removing addresses
2112	from the named.conf "listen-on" statement, sockets
2113	were still listening on the removed addresses due
2114	to reference count loops. [RT #325]
2115
2116	483. [bug] nslookup: "set all" showed a "search" option but it
2117	was not settable.
2118
2119	482. [bug] nslookup: a plain "server" or "lserver" should be
2120	treated as a lookup.
2121
2122	481. [bug] nslookup:get_next_command() stack size could exceed
2123	per thread limit.
2124
2125	480. [bug] strtok() is not thread safe. [RT #349]
2126
2127	479. [func] The test suite can now be run by typing "make check"
2128	or "make test" at the top level.
2129
2130	478. [bug] "make install" failed if the directory specified with
2131	--prefix did not already exist.
2132
2133	477. [bug] The the isc-config.sh script could be installed before
2134	its directory was created. [RT #324]
2135
2136	476. [bug] A zone could expire while a zone transfer was in
2137	progress triggering a INSIST failure. [RT #329]
2138
2139	475. [bug] query_getzonedb() sometimes returned a non-null version
2140	on failure. This caused assertion failures when
2141	generating query responses where names subject to
2142	additional section processing pointed to a zone
2143	to which access had been denied by means of the
2144	allow-query option. [RT #336]
2145
2146	474. [bug] The mnemonic of the CHAOS class is CH according to
2147	RFC1035, but it was printed and read only as CHAOS.
2148	We now accept both forms as input, and print it
2149	as CH. [RT #305]
2150
2151	473. [bug] nsupdate overran the end of the list of name servers
2152	when no servers could be reached, typically causing
2153	it to print the error message "dns_request_create:
2154	not implemented".
2155
2156	472. [bug] Off-by-one error caused isc_time_add() to sometimes
2157	produce invalid time values.
2158
2159	471. [bug] nsupdate didn't compile on HP/UX 10.20
2160
2161	470. [func] $GENERATE is now supported. See also
2162	doc/misc/migration.
2163
2164	469. [bug] "query-source address * port 53;" now works.
2165
2166	468. [bug] dns_master_load*() failed to report file and line
2167	number in certain error conditions.
2168
2169	467. [bug] dns_master_load*() failed to log an error if
2170	pushfile() failed.
2171
2172	466. [bug] dns_master_load*() could return success when it failed.
2173
2174	465. [cleanup] Allow 0 to be set as an omapi_value_t value by
2175	omapi_value_storeint().
2176
2177	464. [cleanup] Build with openssl's RSA code instead of dnssafe.
2178
2179	463. [bug] nsupdate sent malformed SOA queries to the second
2180	and subsequent name servers in resolv.conf if the
2181	query sent to the first one failed.
2182
2183	462. [bug] --disable-ipv6 should work now.
2184
2185	461. [bug] Specifying an unknown key in the "keys" clause of the
2186	"controls" statement caused a NULL pointer dereference.
2187	[RT #316]
2188
2189	460. [bug] Much of the DNSSEC code only worked with class IN.
2190
2191	459. [bug] Nslookup processed the "set" command incorrectly.
2192
2193	458. [bug] Nslookup didn't properly check class and type values.
2194	[RT #305]
2195
2196	457. [bug] Dig/host/hslookup didn't properly handle connect
2197	timeouts in certain situations, causing an
2198	unnecessary warning message to be printed.
2199
2200	456. [bug] Stub zones were not resetting the refresh and expire
2201	counters, loadtime or clearing the DNS_ZONE_REFRESH
2202	(refresh in progress) flag upon successful update.
2203	This disabled further refreshing of the stub zone,
2204	causing it to eventually expire. [RT #300]
2205
2206	455. [doc] Document IPv4 prefix notation does not require a
2207	dotted decimal quad but may be just dotted decimal.
2208
2209	454. [bug] Enforce dotted decimal and dotted decimal quad where
2210	documented as such in named.conf. [RT #304, RT #311]
2211
2212	453. [bug] Warn if the obsolete option "maintain-ixfr-base"
2213	is specified in named.conf. [RT #306]
2214
2215	452. [bug] Warn if the unimplemented option "statistics-file"
2216	is specified in named.conf. [RT #301]
2217
2218	451. [func] Update forwarding implememted.
2219
2220	450. [func] New function ns_client_sendraw().
2221
2222	449. [bug] isc_bitstring_copy() only works correctly if the
2223	two bitstrings have the same lsb0 value, but this
2224	requirement was not documented, nor was there a
2225	REQUIRE for it.
2226
2227	448. [bug] Host output formatting change, to match v8. [RT #255]
2228
2229	447. [bug] Dig didn't properly retry in TCP mode after
2230	a truncated reply. [RT #277]
2231
2232	446. [bug] Confusing notify log message. [RT #298]
2233
2234	445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0
2235	bitstring triggered a REQUIRE statement. The REQUIRE
2236	statement was incorrect. [RT #297]
2237
2238	444. [func] "recursion denied" messages are always logged at
2239	debug level 1, now, rather than sometimes at ERROR.
2240	This silences these warnings in the usual case, where
2241	some clients set the RD bit in all queries.
2242
2243	443. [bug] When loading a master file failed because of an
2244	unrecognized RR type name, the error message
2245	did not include the file name and line number.
2246	[RT #285]
2247
2248	442. [bug] TSIG signed messages that did not match any view
2249	crashed the server. [RT #290]
2250
2251	441. [bug] Nodes obscured by a DNAME were inaccessible even
2252	when DNS_DBFIND_GLUEOK was set.
2253
2254	440. [func] New function dns_zone_forwardupdate().
2255
2256	439. [func] New function dns_request_createraw().
2257
2258	438. [func] New function dns_message_getrawmessage().
2259
2260	437. [func] Log NOTIFY activity to the notify channel.
2261
2262	436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,
2263	which sometimes happens on Linux, named would enter
2264	a busy loop. Also, unexpected socket errors were
2265	not logged at a high enough logging level to be
2266	useful in diagnosing this situation. [RT #275]
2267
2268	435. [bug] dns_zone_dump() overwrote existing zone files
2269	rather than writing to a temporary file and
2270	renaming. This could lead to empty or partial
2271	zone files being left around in certain error
2272	conditions involving the initial transfer of a
2273	slave zone, interfering with subsequent server
2274	startup. [RT #282]
2275
2276	434. [func] New function isc_file_isabsolute().
2277
2278	433. [func] isc_base64_decodestring() now accepts newlines
2279	within the base64 data. This makes it possible
2280	to break up the key data in a "trusted-keys"
2281	statement into multiple lines. [RT #284]
2282
2283	432. [func] Added refresh/retry jitter. The actual refresh/
2284	retry time is now a random value between 75% and
2285	100% of the configured value.
2286
2287	431. [func] Log at ISC_LOG_INFO when a zone is successfully
2288	loaded.
2289
2290	430. [bug] Rewrote the lightweight resolver client management
2291	code to handle shutdown correctly and general
2292	cleanup.
2293
2294	429. [bug] The space reserved for a TSIG record in a response
2295	was 2 bytes too short, leading to message
2296	generation failures.
2297
2298	428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
2299	DNS_R_BADDB for nodes which had neither NXT nor SIG NXT
2300	(e.g. glue). This could cause SERVFAILs when
2301	generating negative responses in a secure zone.
2302
2303	427. [bug] Avoid going into an infinite loop when the validator
2304	gets a negative response to a key query where the
2305	records are signed by the missing key.
2306
2307	426. [bug] Attempting to generate an oversized RSA key could
2308	cause dnssec-keygen to dump core.
2309
2310	425. [bug] Warn about the auth-nxdomain default value change
2311	if there is no auth-nxdomain statement in the
2312	config file. [RT #287]
2313
2314	424. [bug] notify_createmessage() could trigger an assertion
2315	failure when creating the notify message failed,
2316	e.g. due to corrupt zones with multiple SOA records.
2317	[RT #279]
2318
2319	423. [bug] When responding to a recusive query, errors that occur
2320	after following a CNAME should cause the query to fail.
2321	[RT #274]
2322
2323	422. [func] get rid of isc_random_t, and make isc_random_get()
2324	and isc_random_jitter() use rand() internally
2325	instead of local state. Note that isc_random_*()
2326	functions are only for weak, non-critical "randomness"
2327	such as timing jitter and such.
2328
2329	421. [bug] nslookup would exit when given a blank line as input.
2330
2331	420. [bug] nslookup failed to implement the "exit" command.
2332
2333	419. [bug] The certificate type PKIX was misspelled as SKIX.
2334
2335	418. [bug] At debug levels >= 10, getting an unexpected
2336	socket receive error would crash the server
2337	while trying to log the error message.
2338
2339	417. [func] Add isc_app_block() and isc_app_unblock(), which
2340	allow an application to handle signals while
2341	blocking.
2342
2343	416. [bug] Slave zones with no master file tried to use a
2344	NULL pointer for a journal file name when they
2345	received an IXFR. [RT #273]
2346
2347	415. [bug] The logging code leaked file descriptors.
2348
2349	414. [bug] Server did not shut down until all incoming zone
2350	transfers were finished.
2351
2352	413. [bug] Notify could attempt to use the zone database after
2353	it had been unloaded. [RT#267]
2354
2355	412. [bug] named -v didn't print the version.
2356
2357	411. [bug] A typo in the HS A code caused an assertion failure.
2358
2359	410. [bug] lwres_gethostbyname() and company set lwres_h_errno
2360	to a random value on success.
2361
2362	409. [bug] If named was shut down early in the startup
2363	process, ns_omapi_shutdown() would attempt to lock
2364	an unintialized mutex. [RT #262]
2365
2366	408. [bug] stub zones could leak memory and reference counts if
2367	all the masters were unreachable.
2368
2369	407. [bug] isc_rwlock_lock() would needlessly block
2370	readers when it reached the read quota even
2371	if no writers were waiting.
2372
2373	406. [bug] Log messages were occasionally lost or corrupted
2374	due to a race condition in isc_log_doit().
2375
2376	405. [func] Add support for selective forwarding (forward zones)
2377
2378	404. [bug] The request library didn't completely work with IPv6.
2379
2380	403. [bug] "host" did not use the search list.
2381
2382	402. [bug] Treat undefined acls as errors, rather than
2383	warning and then later throwing an assertion.
2384	[RT #252]
2385
2386	401. [func] Added simple database API.
2387
2388	400. [bug] SIG(0) signing and verifying was done incorrectly.
2389	[RT #249]
2390
2391	399. [bug] When reloading the server with a config file
2392	containing a syntax error, it could catch an
2393	assertion failure trying to perform zone
2394	maintenance on, or sending notifies from,
2395	tentatively created zones whose views were
2396	never fully configured and lacked an address
2397	database and request manager.
2398
2399	398. [bug] "dig" sometimes caught an assertion failure when
2400	using TSIG, depending on the key length.
2401
2402	397. [func] Added utility functions dns_view_gettsig() and
2403	dns_view_getpeertsig().
2404
2405	396. [doc] There is now a man page for "nsupdate"
2406	in doc/man/bin/nsupdate.8.
2407
2408	395. [bug] nslookup printed incorrect RR type mnemonics
2409	for RRs of type >= 21 [RT #237].
2410
2411	394. [bug] Current name was not propagated via $INCLUDE.
2412
2413	393. [func] Initial answer while loading (awl) support.
2414	Entry points: dns_master_loadfileinc(),
2415	dns_master_loadstreaminc(), dns_master_loadbufferinc().
2416	Note: calls to dns_master_load*inc() should be rate
2417	be rate limited so as to not use up all file
2418	descriptors.
2419
2420	392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does
2421	not support the given address family requested.
2422
2423	391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.
2424
2425	390. [func] The function dns_zone_setdbtype() now takes
2426	an argc/argv style vector of words and sets
2427	both the zone database type and its arguments,
2428	making the functions dns_zone_adddbarg()
2429	and dns_zone_cleardbargs() unnecessary.
2430
2431	389. [bug] Attempting to send a reqeust over IPv6 using
2432	dns_request_create() on a system without IPv6
2433	support caused an assertion failure [RT #235].
2434
2435	388. [func] dig and host can now do reverse ipv6 lookups.
2436
2437	387. [func] Add dns_byaddr_createptrname(), which converts
2438	an address into the name used by a PTR query.
2439
2440	386. [bug] Missing strdup() of ACL name caused random
2441	ACL matching failures [RT #228].
2442
2443	385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),
2444	and dns_zt_print().
2445
2446	384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead
2447	of 2147483647.
2448
2449	383. [func] When writing a master file, print the SOA and NS
2450	records (and their SIGs) before other records.
2451
2452	382. [bug] named -u failed on many Linux systems where the
2453	libc provided kernel headers do not match
2454	the current kernel.
2455
2456	381. [bug] Check for IPV6_RECVPKTINFO and use it instead of
2457	IPV6_PKTINFO if found. [RT #229]
2458
2459	380. [bug] nsupdate didn't work with IPv6.
2460
2461	379. [func] New library function isc_sockaddr_anyofpf().
2462
2463	378. [func] named and lwresd will log the command line arguments
2464	they were started with in the "starting ..." message.
2465
2466	377. [bug] When additional data lookups were refused due to
2467	"allow-query", the databases were still being
2468	attached causing reference leaks.
2469
2470	376. [bug] The server should always use good entropy when
2471	performing cryptographic functions needing entropy.
2472
2473	375. [bug] Per-zone "allow-query" did not properly override the
2474	view/global one for CNAME targets and additional
2475	data [RT #220].
2476
2477	374. [bug] SOA in authoritative negative responses had wrong TTL.
2478
2479	373. [func] nslookup is now installed by "make install".
2480
2481	372. [bug] Deal with Microsoft DNS servers appending two bytes of
2482	garbage to zone transfer requests.
2483
2484	371. [bug] At high debug levels, doing an outgoing zone transfer
2485	of a very large RRset could cause an assertion failure
2486	during logging.
2487
2488	370. [bug] The error messages for rollforward failures were
2489	overly terse.
2490
2491	369. [func] Support new named.conf options, view and zone
2492	statements:
2493
2494	max-retry-time, min-retry-time,
2495	max-refresh-time, min-refresh-time.
2496
2497	368. [func] Restructure the internal ".bind" view so that more
2498	zones can be added to it.
2499
2500	367. [bug] Allow proper selection of server on nslookup command
2501	line.
2502
2503	366. [func] Allow use of '-' batch file in dig for stdin.
2504
2505	365. [bug] nsupdate -k leaked memory.
2506
2507	364. [func] Added additional-from-{cache,auth}
2508
2509	362. [bug] rndc no longer aborts if the configuration file is
2510	missing an options statement. [RT #209]
2511
2512	361. [func] When the RBT find or chain functions set the name and
2513	origin for a node that stores the root label
2514	the name is now set to an empty name, instead of ".",
2515	to simplify later use of the name and origin by
2516	dns_name_concatenate(), dns_name_totext() or
2517	dns_name_format().
2518
2519	360. [func] dns_name_totext() and dns_name_format() now allow
2520	an empty name to be passed, which is formatted as "@".
2521
2522	359. [bug] dnssec-signzone occasionally signed glue records.
2523
2524	358. [cleanup] Rename the intermediate files used by the dnssec
2525	programs.
2526
2527	357. [bug] The zone file parser crashed if the argument
2528	to $INCLUDE was a quoted string.
2529
2530	356. [cleanup] isc_task_send no longer requires event->sender to
2531	be non-null.
2532
2533	355. [func] Added isc_dir_createunique(), similar to mkdtemp().
2534
2535	354. [doc] Man pages for the dnssec tools are now included in
2536	the distribution, in doc/man/dnssec.
2537
2538	353. [bug] double increment in lwres/gethost.c:copytobuf().
2539	[RT# 187]
2540
2541	352. [bug] Race condition in dns_client_t startup could cause
2542	an assertion failure.
2543
2544	351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
2545	signed query could crash the server.
2546
2547	350. [bug] Also-notify lists specified in the global options
2548	block were not correctly reference counted, causing
2549	a memory leak.
2550
2551	349. [bug] Processing a query with the CD bit set now works
2552	as expected.
2553
2554	348. [func] New boolean named.conf options 'additional-from-auth'
2555	and 'additional-from-cache' now supported in view and
2556	global options statement.
2557
2558	347. [bug] Don't crash if an argument is left off options in dig.
2559
2560	346. [func] Add support for .digrc config file, in the
2561	user's current directory
2562
2563	345. [bug] Large-scale changes/cleanups to dig:
2564	* Significantly improve structure handling
2565	* Don't pre-load entire batch files
2566	* Add name/rr counting/limiting
2567	* Fix SIGINT handling
2568	* Shorten timeouts to match v8's behavior
2569
2570	344. [bug] When shutting down, lwresd sometimes tried
2571	to shut down its client tasks twice,
2572	triggering an assertion.
2573
2574	343. [bug] Although zone maintenance SOA queries and
2575	notify requests were signed with TSIG keys
2576	when configured for the server in case,
2577	the TSIG was not verified on the response.
2578
2579	342. [bug] The wrong name was being passed to
2580	dns_name_dup() when generating a TSIG
2581	key using TKEY.
2582
2583	341. [func] Support 'key' clause in named.conf zone masters
2584	statement to allow authentication via TSIG keys:
2585
2586	masters {
2587	10.0.0.1 port 5353 key "foo";
2588	10.0.0.2 ;
2589	};
2590
2591	340. [bug] The top-level COPYRIGHT file was missing from
2592	the distribution.
2593
2594	339. [bug] DNSSEC validation of the response to an ANY
2595	query at a name with a CNAME RR in a secure
2596	zone triggered an assertion failure.
2597
2598	338. [bug] lwresd logged to syslog as named, not lwresd.
2599
2600	337. [bug] "dig" did not recognize "nsap-ptr" as an RR type
2601	on the command line.
2602
2603	336. [bug] "dig -f" used 64 k of memory for each line in
2604	the file. It now uses much less, though still
2605	proportionally to the file size.
2606
2607	335. [bug] named would occasionally attempt recursion when
2608	it was disallowed or undesired.
2609
2610	334. [func] Added hmac-md5 to libisc.
2611
2612	333. [bug] The resolver incorrectly accepted referrals to
2613	domains that were not parents of the query name,
2614	causing assertion failures.
2615
2616	332. [func] New function dns_name_reset().
2617
2618	331. [bug] Only log "recursion denied" if RD is set. [RT #178]
2619
2620	330. [bug] Many debugging messages were partially formatted
2621	even when debugging was turned off, causing a
2622	significant decrease in query performance.
2623
2624	329. [func] omapi_auth_register() now takes a size_t argument for
2625	the length of a key's secret data. Previously
2626	OMAPI only stored secrets up to the first NUL byte.
2627
2628	328. [func] Added isc_base64_decodestring().
2629
2630	327. [bug] rndc.conf parser wasn't correctly recognising an IP
2631	address where a host specification was required.
2632
2633	326. [func] 'keys' in an 'inet' control statement is now
2634	required and must have at least one item in it.
2635	A "not supported" warning is now issued if a 'unix'
2636	control channel is defined.
2637
2638	325. [bug] isc_lex_gettoken was processing octal strings when
2639	ISC_LEXOPT_CNUMBER was not set.
2640
2641	324. [func] In the resolver, turn EDNS0 off if there is no
2642	response after a number of retransmissions.
2643	This is to allow queries some chance of succeeding
2644	even if all the authoritative servers of a zone
2645	silently discard EDNS0 requests instead of
2646	sending an error response like they ought to.
2647
2648	323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.
2649	Because of this, servers authoritative for a parent
2650	and grandchild zone but not authoritative for the
2651	intervening child zone did not correctly issue
2652	referrals to the servers of the child zone.
2653
2654	322. [bug] Queries for KEY RRs are now sent to the parent
2655	server before the authoritative one, making
2656	DNSSEC insecurity proofs work in many cases
2657	where they previously didn't.
2658
2659	321. [bug] When synthesizing a CNAME RR for a DNAME
2660	response, query_addcname() failed to intitialize
2661	the type and class of the CNAME dns_rdata_t,
2662	causing random failures.
2663
2664	320. [func] Multiple rndc changes: parses an rndc.conf file,
2665	uses authentication to talk to named, command
2666	line syntax changed. This will all be described
2667	in the ARM.
2668
2669	319. [func] The named.conf "controls" statement is now used
2670	to configure the OMAPI command channel.
2671
2672	318. [func] dns_c_ndcctx_destroy() could never return anything
2673	except ISC_R_SUCCESS; made it have void return instead.
2674
2675	317. [func] Use callbacks from libomapi to determine if a
2676	new connection is valid, and if a key requested
2677	to be used with that connection is valid.
2678
2679	316. [bug] Generate a warning if we detect an unexpected <eof>
2680	but treat as <eol><eof>.
2681
2682	315. [bug] Handle non-empty blanks lines. [RT #163]
2683
2684	314. [func] The named.conf controls statement can now have
2685	more than one key specified for the inet clause.
2686
2687	313. [bug] When parsing resolv.conf, don't terminate on an
2688	error. Instead, parse as much as possible, but
2689	still return an error if one was found.
2690
2691	312. [bug] Increase the number of allowed elements in the
2692	resolv.conf search path from 6 to 8. If there
2693	are more than this, ignore the remainder rather
2694	than returning a failure in lwres_conf_parse.
2695
2696	311. [bug] lwres_conf_parse failed when the first line of
2697	resolv.conf was empty or a comment.
2698
2699	310. [func] Changes to named.conf "controls" statement (inet
2700	subtype only)
2701
2702	- support "keys" clause
2703
2704	controls {
2705	inet * port 1024
2706	allow { any; } keys { "foo"; }
2707	}
2708
2709	- allow "port xxx" to be left out of statement,
2710	in which case it defaults to omapi's default port
2711	of 953.
2712
2713	309. [bug] When sending a referral, the server did not look
2714	for name server addresses as glue in the zone
2715	holding the NS RRset in the case where this zone
2716	was not the same as the one where it looked for
2717	name server addresses as authoritative data.
2718
2719	308. [bug] Treat a SOA record not at top of zone as an error
2720	when loading a zone. [RT #154]
2721
2722	307. [bug] When canceling a query, the resolver didn't check for
2723	isc_socket_sendto() calls that did not yet have their
2724	completion events posted, so it could (rarely) end up
2725	destroying the query context and then want to use
2726	it again when the send event posted, triggering an
2727	assertion as it tried to cancel an already-canceled
2728	query. [RT #77]
2729
2730	306. [bug] Reading HMAC-MD5 private key files didn't work.
2731
2732	305. [bug] When reloading the server with a config file
2733	containing a syntax error, it could catch an
2734	assertion failure trying to perform zone
2735	maintenance on tentatively created zones whose
2736	views were never fully configured and lacked
2737	an address database.
2738
2739	304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
2740	are listed in resolv.conf, silently ignore them
2741	instead of returning failure.
2742
2743	303. [bug] Add additional sanity checks to differentiate a AXFR
2744	response vs a IXFR response. [RT #157]
2745
2746	302. [bug] In dig, host, and nslookup, MXNAME should be large
2747	enough to hold any legal domain name in presentation
2748	format + terminating NULL.
2749
2750	301. [bug] Uninitalised pointer in host:printmessage(). [RT #159]
2751
2752	300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work
2753	on platforms lacking IPv6 because each included their
2754	own ipv6 header file for the missing definitions. Now
2755	each library's ipv6.h defines the wrapper symbol of
2756	the other (ISC_IPV6_H and LWRES_IPV6_H).
2757
2758	299. [cleanup] Get the user and group information before changing the
2759	root directory, so the administrator does not need to
2760	keep a copy of the user and group databases in the
2761	chroot'ed environment. Suggested by Hakan Olsson.
2762
2763	298. [bug] A mutex deadlock occurred during shutdown of the
2764	interface manager under certain conditions.
2765	Digital Unix systems were the most affected.
2766
2767	297. [bug] Specifying a key name that wasn't fully qualified
2768	in certain parts of the config file could cause
2769	an assertion failure.
2770
2771	296. [bug] "make install" from a separate build directory
2772	failed unless configure had been run in the source
2773	directory, too.
2774
2775	295. [bug] When invoked with type==CNAME and a message
2776	not constructed by dns_message_parse(),
2777	dns_message_findname() failed to find anything
2778	due to checking for attribute bits that are set
2779	only in dns_message_parse(). This caused an
2780	infinite loop when constructing the response to
2781	an ANY query at a CNAME in a secure zone.
2782
2783	294. [bug] If we run out of space in while processing glue
2784	when reading a master file and commit "current name"
2785	reverts to "name_current" instead of staying as
2786	"name_glue".
2787
2788	293. [port] Add support for FreeBSD 4.0 system tests.
2789
2790	292. [bug] Due to problems with the way some operating systems
2791	handle simultaneous listening on IPv4 and IPv6
2792	addresses, the server no longer listens on IPv6
2793	addresses by default. To revert to the previous
2794	behavior, specify "listen-on-v6 { any; };" in
2795	the config file.
2796
2797	291. [func] Caching servers no longer send outgoing queries
2798	over TCP just because the incoming recursive query
2799	was a TCP one.
2800
2801	290. [cleanup] +twiddle option to dig (for testing only) removed.
2802
2803	289. [cleanup] dig is now installed in $bindir instead of $sbindir.
2804	host is now installed in $bindir. (Be sure to remove
2805	any $sbindir/dig from a previous release.)
2806
2807	288. [func] rndc is now installed by "make install" into $sbindir.
2808
2809	287. [bug] rndc now works again as "rndc 127.1 reload" (for
2810	only that task). Parsing its configuration file and
2811	using digital signatures for authentication has been
2812	disabled until named supports the "controls" statement,
2813	post-9.0.0.
2814
2815	286. [bug] On Solaris 2, when named inherited a signal state
2816	where SIGHUP had the SIG_IGN action, SIGHUP would
2817	be ignored rather than causing the server to reload
2818	its configuration.
2819
2820	285. [bug] A change made to the dst API for beta4 inadvertently
2821	broke OMAPI's creation of a dst key from an incoming
2822	message, causing an assertion to be triggered. Fixed.
2823
2824	284. [func] The DNSSEC key generation and signing tools now
2825	generate randomness from keyboard input on systems
2826	that lack /dev/random.
2827
2828	283. [cleanup] The 'lwresd' program is now a link to 'named'.
2829
2830	282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is
2831	too big for an unsigned long.
2832
2833	281. [bug] Fixed list of recognized config file category names.
2834
2835	280. [func] Add isc-config.sh, which can be used to more
2836	easily build applications that link with
2837	our libraries.
2838
2839	279. [bug] Private omapi function symbols shared between
2840	two or more files in libomapi.a were not namespace
2841	protected using the ISC convention of starting with
2842	the library name and two underscores ("omapi__"...)
2843
2844	278. [bug] bin/named/logconf.c:category_fromconf() didn't take
2845	note of when isc_log_categorybyname() wasn't able
2846	to find the category name and would then apply the
2847	channel list of the unknown category to all categories.
2848
2849	277. [bug] isc_log_categorybyname() and isc_log_modulebyname()
2850	would fail to find the first member of any category
2851	or module array apart from the internal defaults.
2852	Thus, for example, the "notify" category was improperly
2853	configured by named.
2854
2855	276. [bug] dig now supports maximum sized TCP messages.
2856
2857	275. [bug] The definition of lwres_gai_strerror() was missing
2858	the lwres_ prefix.
2859
2860	274. [bug] TSIG AXFR verify failed when talking to a BIND 8
2861	server.
2862
2863	273. [func] The default for the 'transfer-format' option is
2864	now 'many-answers'. This will break zone transfers
2865	to BIND 4.9.5 and older unless there is an explicit
2866	'one-answer' configuration.
2867
2868	272. [bug] The sending of large TCP responses was canceled
2869	in mid-transmission due to a race condition
2870	caused by the failure to set the client object's
2871	"newstate" variable correctly when transitioning
2872	to the "working" state.
2873
2874	271. [func] Attempt to probe the number of cpus in named
2875	if unspecified rather than defaulting to 1.
2876
2877	270. [func] Allow maximum sized TCP answers.
2878
2879	269. [bug] Failed DNSSEC validations could cause an assertion
2880	failure by causing clone_results() to be called with
2881	with hevent->node == NULL.
2882
2883	268. [doc] A plain text version of the Administrator
2884	Reference Manual is now included in the distribution,
2885	as doc/arm/Bv9ARM.txt.
2886
2887	267. [func] Nsupdate is now provided in the distribution.
2888
2889	266. [bug] zone.c:save_nsrrset() node was not initalized.
2890
2891	265. [bug] dns_request_create() now works for TCP.
2892
2893	264. [func] Dispatch can not take TCP sockets in connecting
2894	state. Set DNS_DISPATCHATTR_CONNECTED when calling
2895	dns_dispatch_createtcp() for connected TCP sockets
2896	or call dns_dispatch_starttcp() when the socket is
2897	connected.
2898
2899	263. [func] New logging channel type 'stderr'
2900
2901	channel some-name {
2902	stderr;
2903	severity error;
2904	}
2905
2906	262. [bug] 'master' was not initalized in zone.c:stub_callback().
2907
2908	261. [func] Add dns_zone_markdirty().
2909
2910	260. [bug] Running named as a non-root user failed on Linux
2911	kernels new enough to support retaining capabilities
2912	after setuid().
2913
2914	259. [func] New random-device and random-seed-file statements
2915	for global options block of named.conf. Both accept
2916	a single string argument.
2917
2918	258. [bug] Fixed printing of lwres_addr_t.address field.
2919
2920	257. [bug] The server detached the last zone manager reference
2921	too early, while it could still be in use by queries.
2922	This manifested itself as assertion failures during the
2923	shutdown process for busy name servers [RT #133].
2924
2925	256. [func] isc_ratelimiter_t now has attach/detach semantics, and
2926	isc_ratelimiter_shutdown guarantees that the rate
2927	limiter is detached from its task.
2928
2929	255. [func] New function dns_zonemgr_attach().
2930
2931	254. [bug] Suppress "query denied" messages on additional data
2932	lookups.
2933
2934	--- 9.0.0b4 released ---
2935
2936	253. [func] resolv.conf parser now recognises ';' and '#' as
2937	comments (anywhere in line, not just as the beginning).
2938
2939	252. [bug] resolv.conf parser mishandled masks on sortlists.
2940	It also aborted when an unrecognized keyword was seen,
2941	now it silently ignores the entire line.
2942
2943	251. [bug] lwresd caught an assertion failure on startup.
2944
2945	250. [bug] fixed handling of size+unit when value would be too
2946	large for internal representation.
2947
2948	249. [cleanup] max-cache-size config option now takes a size-spec
2949	like 'datasize', except 'default' is not allowed.
2950
2951	248. [bug] global lame-ttl option was not being printed when
2952	config structures were written out.
2953
2954	247. [cleanup] Rename cache-size config option to max-cache-size.
2955
2956	246. [func] Rename global option cachesize to cache-size and
2957	add corresponding option to view statement.
2958
2959	245. [bug] If an uncompressed name will take more than 255
2960	bytes and the buffer is sufficiently long,
2961	dns_name_fromwire should return DNS_R_FORMERR,
2962	not ISC_R_NOSPACE. This bug caused cause the
2963	server to catch an assertion failure when it
2964	received a query for a name longer than 255
2965	bytes.
2966
2967	244. [bug] empty named.conf file and empty options statement are
2968	now parsed properly.
2969
2970	243. [func] new cachesize option for named.conf
2971
2972	242. [cleanup] fixed incorrect warning about auth-nxdomain usage.
2973
2974	241. [cleanup] nscount and soacount have been removed from the
2975	dns_master_*() argument lists.
2976
2977	240. [func] databases now come in three flavours: zone, cache
2978	and stub.
2979
2980	239. [func] If ISC_MEM_DEBUG is enabled, the variable
2981	isc_mem_debugging controls whether messages
2982	are printed or not.
2983
2984	238. [cleanup] A few more compilation warnings have been quieted:
2985	+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
2986	+ PTHREAD_ONCE_INIT unbraced initializer warnings on
2987	Solaris 2.8.
2988	+ IN6ADDR_ANY_INIT unbraced initializer warnings on
2989	BSD/OS 4.*, Linux and Solaris 2.8.
2990
2991	237. [bug] If connect() returned ENOBUFS when the resolver was
2992	initiating a TCP query, the socket didn't get
2993	destroyed, and the server did not shut down cleanly.
2994
2995	236. [func] Added new listen-on-v6 config file statement.
2996
2997	235. [func] Consider it a config file error if a listen-on
2998	statement has an IPv6 address in it, or a
2999	listen-on-v6 statement has an IPv4 address in it.
3000
3001	234. [bug] Allow a trusted-key's first field (domain-name) be
3002	either a quoted or an unquoted string, instead of
3003	requiring a quoted string.
3004
3005	233. [cleanup] Convert all config structure integer values to unsigned
3006	integer (isc_uint32_t) to match grammer.
3007
3008	232. [bug] Allow slave zones to not have a file.
3009
3010	231. [func] Support new 'port' clause in config file options
3011	section. Causes 'listen-on', 'masters' and
3012	'also-notify' statements to use its value instead of
3013	default (53).
3014
3015	230. [func] Replace the dst sign/verify API with a cleaner one.
3016
3017	229. [func] Support config file sig-validity-interval statement
3018	in options, views and zone statements (master
3019	zones only).
3020
3021	228. [cleanup] Logging messages in config module stripped of
3022	trailing period.
3023
3024	227. [cleanup] The enumerated identifiers dns_rdataclass_*,
3025	dns_rcode_, dns_opcode_, and dns_trust_* are
3026	also now cast to their appropriate types, as with
3027	dns_rdatatype_* in item number 225 below.
3028
3029	226. [func] dns_name_totext() now always prints the root name as
3030	'.', even when omit_final_dot is true.
3031
3032	225. [cleanup] The enumerated dns_rdatatype_* identifiers are now
3033	cast to dns_rdatatype_t via macros of their same name
3034	so that they are of the proper integral type wherever
3035	a dns_rdatatype_t is needed.
3036
3037	224. [cleanup] The entire project builds cleanly with gcc's
3038	-Wcast-qual and -Wwrite-strings warnings enabled,
3039	which is now the default when using gcc. (Warnings
3040	from confparser.c, because of yacc's code, are
3041	unfortunately to be expected.)
3042
3043	223. [func] Several functions were reprototyped to qualify one
3044	or more of their arguments with "const". Similarly,
3045	several functions that return pointers now have
3046	those pointers qualified with const.
3047
3048	222. [bug] The global 'also-notify' option was ignored.
3049
3050	221. [bug] An uninitialized variable was sometimes passed to
3051	dns_rdata_freestruct() when loading a zone, causing
3052	an assertion failure.
3053
3054	220. [cleanup] Set the default outgoing port in the view, and
3055	set it in sockaddrs returned from the ADB.
3056	[31-May-2000 explorer]
3057
3058	219. [bug] Signed truncated messages more correctly follow
3059	the respective specs.
3060
3061	218. [func] When an rdataset is signed, its ttl is normalized
3062	based on the signature validity period.
3063
3064	217. [func] Also-notify and trusted-keys can now be used in
3065	the 'view' statement.
3066
3067	216. [func] The 'max-cache-ttl' and 'max-ncache-ttl' options
3068	now work.
3069
3070	215. [bug] Failures at certain points in request processing
3071	could cause the assertion INSIST(client->lockview
3072	== NULL) to be triggered.
3073
3074	214. [func] New public function isc_netaddr_format(), for
3075	formatting network addresses in log messages.
3076
3077	213. [bug] Don't leak memory when reloading the zone if
3078	an update-policy clause was present in the old zone.
3079
3080	212. [func] Added dns_message_get/settsigkey, to make TSIG
3081	key management reasonable.
3082
3083	211. [func] The 'key' and 'server' statements can now occur
3084	inside 'view' statements.
3085
3086	210. [bug] The 'allow-transfer' option was ignored for slave
3087	zones, and the 'transfers-per-ns' option was
3088	was ignored for all zones.
3089
3090	209. [cleanup] Upgraded openssl files to new version 0.9.5a
3091
3092	208. [func] Added ISC_OFFSET_MAXIMUM for the maximum value
3093	of an isc_offset_t.
3094
3095	207. [func] The dnssec tools properly use the logging subsystem.
3096
3097	206. [cleanup] dst now stores the key name as a dns_name_t, not
3098	a char *.
3099
3100	205. [cleanup] On IRIX, turn off the mostly harmless warnings 1692
3101	("prototyped function redeclared without prototype")
3102	and 1552 ("variable ... set but not used") when
3103	compiling in the lib/dns/sec/{dnssafe,openssl}
3104	directories, which contain code imported from outside
3105	sources.
3106
3107	204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
3108	to quiet the warnings that "The linked output may not
3109	run on a PA 1.x system."
3110
3111	203. [func] notify and zone soa queries are now tsig signed when
3112	appropriate.
3113
3114	202. [func] isc_lex_getsourceline() changed from returning int
3115	to returning unsigned long, the type of its underlying
3116	counter.
3117
3118	201. [cleanup] Removed the test/sdig program, it has been
3119	replaced by bin/dig/dig.
3120
3121
3122	--- 9.0.0b3 released ---
3123
3124	200. [bug] Failures in sending query responses to clients
3125	(e.g., running out of network buffers) were
3126	not logged.
3127
3128	199. [bug] isc_heap_delete() sometimes violated the heap
3129	invariant, causing timer events not to be posted
3130	when due.
3131
3132	198. [func] Dispatch managers hold memory pools which
3133	any managed dispatcher may use. This allows
3134	us to avoid dipping into the memory context for
3135	most allocations. [19-May-2000 explorer]
3136
3137	197. [bug] When an incoming AXFR or IXFR completes, the
3138	zone's internal state is refreshed from the
3139	SOA data. [19-May-2000 explorer]
3140
3141	196. [func] Dispatchers can be shared easily between views
3142	and/or interfaces. [19-May-2000 explorer]
3143
3144	195. [bug] Including the NXT record of the root domain
3145	in a negative response caused an assertion
3146	failure.
3147
3148	194. [doc] The PDF version of the Administrator's Reference
3149	Manual is no longer included in the ISC BIND9
3150	distribution.
3151
3152	193. [func] changed dst_key_free() prototype.
3153
3154	192. [bug] Zone configuration validation is now done at end
3155	of config file parsing, and before loading
3156	callbacks.
3157
3158	191. [func] Patched to compile on UnixWare 7.x. This platform
3159	is not directly supported by the ISC.
3160
3161	190. [cleanup] The DNSSEC tools have been moved to a separate
3162	directory dnssec/ and given the following new,
3163	more descriptive names:
3164
3165	dnssec-keygen
3166	dnssec-signzone
3167	dnssec-signkey
3168	dnssec-makekeyset
3169
3170	Their command line arguments have also been changed to
3171	be more consistent. dnssec-keygen now prints the
3172	name of the generated key files (sans extension)
3173	on standard output to simplify its use in automated
3174	scripts.
3175
3176	189. [func] isc_time_secondsastimet(), a new function, will ensure
3177	that the number of seconds in an isc_time_t does not
3178	exceed the range of a time_t, or return ISC_R_RANGE.
3179	Similarly, isc_time_now(), isc_time_nowplusinterval(),
3180	isc_time_add() and isc_time_subtract() now check the
3181	range for overflow/underflow. In the case of
3182	isc_time_subtract, this changed a calling requirement
3183	(ie, something that could generate an assertion)
3184	into merely a condition that returns an error result.
3185	isc_time_add() and isc_time_subtract() were void-
3186	valued before but now return isc_result_t.
3187
3188	188. [func] Log a warning message when an incoming zone transfer
3189	contains out-of-zone data.
3190
3191	187. [func] isc_ratelimter_enqueue() has an additional argument
3192	'task'.
3193
3194	186. [func] dns_request_getresponse() has an additional argument
3195	'preserve_order'.
3196
3197	185. [bug] Fixed up handling of ISC_MEMCLUSTER_LEGACY. Several
3198	public functions did not have an isc__ prefix, and
3199	referred to functions that had previously been
3200	renamed.
3201
3202	184. [cleanup] Variables/functions which began with two leading
3203	underscores were made to conform to the ANSI/ISO
3204	standard, which says that such names are reserved.
3205
3206	183. [func] ISC_LOG_PRINTTAG option for log channels. Useful
3207	for logging the program name or other identifier.
3208
3209	182. [cleanup] New commandline parameters for dnssec tools
3210
3211	181. [func] Added dst_key_buildfilename and dst_key_parsefilename
3212
3213	180. [func] New isc_result_t ISC_R_RANGE. Supersedes DNS_R_RANGE.
3214
3215	179. [func] options named.conf statement must now come
3216	before any zone or view statements.
3217
3218	178. [func] Post-load of named.conf check verifies a slave zone
3219	has non-empty list of masters defined.
3220
3221	177. [func] New per-zone boolean:
3222
3223	enable-zone yes \| no ;
3224
3225	intended to let a zone be disabled without having
3226	to comment out the entire zone statement.
3227
3228	176. [func] New global and per-view option:
3229
3230	max-cache-ttl number
3231
3232	175. [func] New global and per-view option:
3233
3234	additional-data internal \| minimal \| maximal;
3235
3236	174. [func] New public function isc_sockaddr_format(), for
3237	formatting socket addresses in log messages.
3238
3239	173. [func] Keep a queue of zones waiting for zone transfer
3240	quota so that a new transfer can be dispatched
3241	immediately whenever quota becomes available.
3242
3243	172. [bug] $TTL directive was sometimes missing from dumped
3244	master files because totext_ctx_init() failed to
3245	initialize ctx->current_ttl_valid.
3246
3247	171. [cleanup] On NetBSD systems, the mit-pthreads or
3248	unproven-pthreads library is now always used
3249	unless --with-ptl2 is explicitly specified on
3250	the configure command line. The
3251	--with-mit-pthreads option is no longer needed
3252	and has been removed.
3253
3254	170. [cleanup] Remove inter server consistancy checks from zone,
3255	these should return as a seperate module in 9.1.
3256	dns_zone_checkservers(), dns_zone_checkparents(),
3257	dns_zone_checkchildren(), dns_zone_checkglue().
3258
3259	Remove dns_zone_setadb(), dns_zone_setresolver(),
3260	dns_zone_setrequestmgr() these should now be found
3261	via the view.
3262
3263	169. [func] ratelimiter can now process N events per interval.
3264
3265	168. [bug] include statements in named.conf caused syntax errors
3266	due to not consuming the semicolon ending the include
3267	statement before switching input streams.
3268
3269	167. [bug] Make lack of masters for a slave zone a soft error.
3270
3271	166. [bug] Keygen was overwriting existing keys if key_id
3272	conflicted, now it will retry, and non-null keys
3273	with key_id == 0 are not generated anymore. Key
3274	was not able to generate NOAUTHCONF DSA key,
3275	increased RSA key size to 2048 bits.
3276
3277	165. [cleanup] Silence "end-of-loop condition not reached" warnings
3278	from Solaris compiler.
3279
3280	164. [func] Added functions isc_stdio_open(), isc_stdio_close(),
3281	isc_stdio_seek(), isc_stdio_read(), isc_stdio_write(),
3282	isc_stdio_flush(), isc_stdio_sync(), isc_file_remove()
3283	to encapsulate nonportable usage of errno and sync.
3284
3285	163. [func] Added result codes ISC_R_FILENOTFOUND and
3286	ISC_R_FILEEXISTS.
3287
3288	162. [bug] Ensure proper range for arguments to ctype.h functions.
3289
3290	161. [cleanup] error in yyparse prototype that only HPUX caught.
3291
3292	160. [cleanup] getnet*() are not going to be implemented at this
3293	stage.
3294
3295	159. [func] Redefinition of config file elements is now an
3296	error (instead of a warning).
3297
3298	158. [bug] Log channel and category list copy routines
3299	weren't assigning properly to output parameter.
3300
3301	157. [port] Fix missing prototype for getopt().
3302
3303	156. [func] Support new 'database' statement in zone.
3304
3305	database "quoted-string";
3306
3307	155. [bug] ns_notify_start() was not detaching the found zone.
3308
3309	154. [func] The signer now logs libdns warnings to stderr even when
3310	not verbose, and in a nicer format.
3311
3312	153. [func] dns_rdata_tostruct() 'mctx' is now optional. If 'mctx'
3313	is NULL then you need to preserve the 'rdata' until
3314	you have finished using the structure as there may be
3315	references to the associated memory. If 'mctx' is
3316	non-NULL it is guaranteed that there are no references
3317	to memory associated with 'rdata'.
3318
3319	dns_rdata_freestruct() must be called if 'mctx' was
3320	non-NULL and may safely be called if 'mctx' was NULL.
3321
3322	152. [bug] keygen dumped core if domain name argument was omitted
3323	from command line.
3324
3325	151. [func] Support 'disabled' statement in zone config (causes
3326	zone to be parsed and then ignored). Currently must
3327	come after the 'type' clause.
3328
3329	150. [func] Support optional ports in masters and also-notify
3330	statements:
3331
3332	masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
3333
3334	149. [cleanup] Removed usused argument 'olist' from
3335	dns_c_view_unsetordering().
3336
3337	148. [cleanup] Stop issuing some warnings about some configuration
3338	file statements that were not implemented, but now are.
3339
3340	147. [bug] Changed yacc union size to be smaller for yaccs that
3341	put yacc-stack on the real stack.
3342
3343	146. [cleanup] More general redundant header file cleanup. Rather
3344	than continuing to itemize every header which changed,
3345	this changelog entry just notes that if a header file
3346	did not need another header file that it was including
3347	in order to provide its advertized functionality, the
3348	inclusion of the other header file was removed. See
3349	util/check-includes for how this was tested.
3350
3351	145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
3352	ISC_LANG_ENDDECLS to header files that had function
3353	prototypes, and removed it from those that did not.
3354
3355	144. [cleanup] libdns header files too numerous to name were made
3356	to conform to the same style for multiple inclusion
3357	protection.
3358
3359	143. [func] Added function dns_rdatatype_isknown().
3360
3361	142. [cleanup] <isc/stdtime.h> does not need <time.h> or
3362	<isc/result.h>.
3363
3364	141. [bug] Corrupt requests with multiple questions could
3365	cause an assertion failure.
3366
3367	140. [cleanup] <isc/time.h> does not need <time.h> or <isc/result.h>.
3368
3369	139. [cleanup] <isc/net.h> now includes <isc/types.h> instead of
3370	<isc/int.h> and <isc/result.h>.
3371
3372	138. [cleanup] isc_strtouq moved from str.[ch] to string.[ch] and
3373	renamed isc_string_touint64. isc_strsep moved from
3374	strsep.c to string.c and renamed isc_string_separate.
3375
3376	137. [cleanup] <isc/commandline.h>, <isc/mem.h>, <isc/print.h>
3377	<isc/serial.h>, <isc/string.h> and <isc/offset.h>
3378	made to conform to the same style for multiple
3379	inclusion protection.
3380
3381	136. [cleanup] <isc/commandline.h>, <isc/interfaceiter.h>,
3382	<isc/net.h> and Win32's <isc/thread.h> needed
3383	ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS.
3384
3385	135. [cleanup] Win32's <isc/condition.h> did not need <isc/result.h>
3386	or <isc/boolean.h>, now uses <isc/types.h> in place
3387	of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
3388	and ISC_LANG_ENDDECLS.
3389
3390	134. [cleanup] <isc/dir.h> does not need <limits.h>.
3391
3392	133. [cleanup] <isc/ipv6.h> needs <isc/platform.h>.
3393
3394	132. [cleanup] <isc/app.h> does not need <isc/task.h>, but does
3395	need <isc/eventclass.h>.
3396
3397	131. [cleanup] <isc/mutex.h> and <isc/util.h> need <isc/result.h>
3398	for ISC_R_* codes used in macros.
3399
3400	130. [cleanup] <isc/condition.h> does not need <pthread.h> or
3401	<isc/boolean.h>, and now includes <isc/types.h>
3402	instead of <isc/time.h>.
3403
3404	129. [bug] The 'default_debug' log channel was not set up when
3405	'category default' was present in the config file
3406
3407	128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
3408	ISC_LANG_ENDDECLS at end of header.
3409
3410	127. [cleanup] The contracts for the comparision routines
3411	dns_name_fullcompare(), dns_name_compare(),
3412	dns_name_rdatacompare(), and dns_rdata_compare() now
3413	specify that the order value returned is < 0, 0, or > 0
3414	instead of -1, 0, or 1.
3415
3416	126. [cleanup] <isc/quota.h> and <isc/taskpool.h> need <isc/lang.h>.
3417
3418	125. [cleanup] <isc/eventclass.h>, <isc/ipv6.h>, <isc/magic.h>,
3419	<isc/mutex.h>, <isc/once.h>, <isc/region.h>, and
3420	<isc/resultclass.h> do not need <isc/lang.h>.
3421
3422	124. [func] signer now imports parent's zone key signature
3423	and creates null keys/sets zone status bit for
3424	children when necessary
3425
3426	123. [cleanup] <isc/event.h> does not need <stddef.h>.
3427
3428	122. [cleanup] <isc/task.h> does not need <isc/mem.h> or
3429	<isc/result.h>.
3430
3431	121. [cleanup] <isc/symtab.h> does not need <isc/mem.h> or
3432	<isc/result.h>. Multiple inclusion protection
3433	symbol fixed from ISC_SYMBOL_H to ISC_SYMTAB_H.
3434	isc_symtab_t moved to <isc/types.h>.
3435
3436	120. [cleanup] <isc/socket.h> does not need <isc/boolean.h>,
3437	<isc/bufferlist.h>, <isc/task.h>, <isc/mem.h> or
3438	<isc/net.h>.
3439
3440	119. [cleanup] structure definitions for generic rdata stuctures do
3441	not have _generic_ in their names.
3442
3443	118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
3444	YACC crust (yyparse, etc) [2000-apr-27 explorer]
3445
3446	117. [cleanup] libdns.a changes:
3447	dns_zone_clearnotify() and dns_zone_addnotify()
3448	are replaced by dns_zone_setnotifyalso().
3449	dns_zone_clearmasters() and dns_zone_addmaster()
3450	are replaced by dns_zone_setmasters().
3451
3452	116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
3453	on Unix systems).
3454
3455	115. [port] Shut up the -Wmissing-declarations warning about
3456	<stdio.h>'s __sputaux on BSD/OS pre-4.1.
3457
3458	114. [cleanup] <isc/sockaddr.h> does not need <isc/buffer.h> or
3459	<isc/list.h>.
3460
3461	113. [func] Utility programs dig and host added.
3462
3463	112. [cleanup] <isc/serial.h> does not need <isc/boolean.h>.
3464
3465	111. [cleanup] <isc/rwlock.h> does not need <isc/result.h> or
3466	<isc/mutex.h>.
3467
3468	110. [cleanup] <isc/result.h> does not need <isc/boolean.h> or
3469	<isc/list.h>.
3470
3471	109. [bug] "make depend" did nothing for
3472	bin/tests/{db,mem,sockaddr,tasks,timers}/.
3473
3474	108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
3475	<dns/types.h> to <dns/bit.h> and renamed to
3476	DNS_BIT_SET/DNS_BIT_GET/DNS_BIT_CLEAR.
3477
3478	107. [func] Add keysigner and keysettool.
3479
3480	106. [func] Allow dnssec verifications to ignore the validity
3481	period. Used by several of the dnssec tools.
3482
3483	105. [doc] doc/dev/coding.html expanded with other
3484	implicit conventions the developers have used.
3485
3486	104. [bug] Made compress_add and compress_find static to
3487	lib/dns/compress.c.
3488
3489	103. [func] libisc buffer API changes for <isc/buffer.h>:
3490	Added:
3491	isc_buffer_base(b) (pointer)
3492	isc_buffer_current(b) (pointer)
3493	isc_buffer_active(b) (pointer)
3494	isc_buffer_used(b) (pointer)
3495	isc_buffer_length(b) (int)
3496	isc_buffer_usedlength(b) (int)
3497	isc_buffer_consumedlength(b) (int)
3498	isc_buffer_remaininglength(b) (int)
3499	isc_buffer_activelength(b) (int)
3500	isc_buffer_availablelength(b) (int)
3501	Removed:
3502	ISC_BUFFER_USEDCOUNT(b)
3503	ISC_BUFFER_AVAILABLECOUNT(b)
3504	isc_buffer_type(b)
3505	Changed names:
3506	isc_buffer_used(b, r) ->
3507	isc_buffer_usedregion(b, r)
3508	isc_buffer_available(b, r) ->
3509	isc_buffer_available_region(b, r)
3510	isc_buffer_consumed(b, r) ->
3511	isc_buffer_consumedregion(b, r)
3512	isc_buffer_active(b, r) ->
3513	isc_buffer_activeregion(b, r)
3514	isc_buffer_remaining(b, r) ->
3515	isc_buffer_remainingregion(b, r)
3516
3517	Buffer types were removed, so the ISC_BUFFERTYPE_*
3518	macros are no more, and the type argument to
3519	isc_buffer_init and isc_buffer_allocate were removed.
3520	isc_buffer_putstr is now void (instead of isc_result_t)
3521	and requires that the caller ensure that there
3522	is enough available buffer space for the string.
3523
3524	102. [port] Correctly detect inet_aton, inet_pton and inet_ptop
3525	on BSD/OS 4.1.
3526
3527	101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
3528
3529	100. [cleanup] <isc/random.h> does not need <isc/int.h> or
3530	<isc/mutex.h>. isc_random_t moved to <isc/types.h>.
3531
3532	99. [cleanup] Rate limiter now has separate shutdown() and
3533	destroy() functions, and it guarantees that all
3534	queued events are delivered even in the shutdown case.
3535
3536	98. [cleanup] <isc/print.h> does not need <stdarg.h> or <stddef.h>
3537	unless ISC_PLATFORM_NEEDVSNPRINTF is defined.
3538
3539	97. [cleanup] <isc/ondestroy.h> does not need <stddef.h> or
3540	<isc/event.h>.
3541
3542	96. [cleanup] <isc/mutex.h> does not need <isc/result.h>.
3543
3544	95. [cleanup] <isc/mutexblock.h> does not need <isc/result.h>.
3545
3546	94. [cleanup] Some installed header files did not compile as C++.
3547
3548	93. [cleanup] <isc/msgcat.h> does not need <isc/result.h>.
3549
3550	92. [cleanup] <isc/mem.h> does not need <stddef.h>, <isc/boolean.h>,
3551	or <isc/result.h>.
3552
3553	91. [cleanup] <isc/log.h> does not need <sys/types.h> or
3554	<isc/result.h>.
3555
3556	90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
3557	from <named/listenlist.h>.
3558
3559	89. [cleanup] <isc/lex.h> does not need <stddef.h>.
3560
3561	88. [cleanup] <isc/interfaceiter.h> does not need <isc/result.h> or
3562	<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
3563	moved to <isc/types.h>.
3564
3565	87. [cleanup] <isc/heap.h> does not need <isc/boolean.h>,
3566	<isc/mem.h> or <isc/result.h>.
3567
3568	86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
3569	<isc/types.h>.
3570
3571	85. [cleanup] <isc/bufferlist.h> does not need <isc/buffer.h>,
3572	<isc/list.h>, <isc/mem.h>, <isc/region.h> or
3573	<isc/int.h>.
3574
3575	84. [func] allow-query ACL checks now apply to all data
3576	added to a response.
3577
3578	83. [func] If the server is authoritative for both a
3579	delegating zone and its (nonsecure) delegatee, and
3580	a query is made for a KEY RR at the top of the
3581	delegatee, then the server will look for a KEY
3582	in the delegator if it is not found in the delegatee.
3583
3584	82. [cleanup] <isc/buffer.h> does not need <isc/list.h>.
3585
3586	81. [cleanup] <isc/int.h> and <isc/boolean.h> do not need
3587	<isc/lang.h>.
3588
3589	80. [cleanup] <isc/print.h> does not need <stdio.h> or <stdlib.h>.
3590
3591	79. [cleanup] <dns/callbacks.h> does not need <stdio.h>.
3592
3593	78. [cleanup] lwres_conftest renamed to lwresconf_test for
3594	consistency with other *_test programs.
3595
3596	77. [cleanup] typedef of isc_time_t and isc_interval_t moved from
3597	<isc/time.h> to <isc/types.h>.
3598
3599	76. [cleanup] Rewrote keygen.
3600
3601	75. [func] Don't load a zone if its database file is older
3602	than the last time the zone was loaded.
3603
3604	74. [cleanup] Removed mktemplate.o and ufile.o from libisc.a,
3605	subsumed by file.o.
3606
3607	73. [func] New "file" API in libisc, including new function
3608	isc_file_getmodtime, isc_mktemplate renamed to
3609	isc_file_mktemplate and isc_ufile renamed to
3610	isc_file_openunique. By no means an exhaustive API,
3611	it is just what's needed for now.
3612
3613	72. [func] DNS_RBTFIND_NOPREDECESSOR and DNS_RBTFIND_NOOPTIONS
3614	added for dns_rbt_findnode, the former to disable the
3615	setting of the chain to the predecessor, and the
3616	latter to make clear when no options are set.
3617
3618	71. [cleanup] Made explicit the implicit REQUIREs of
3619	isc_time_seconds, isc_time_nanoseconds, and
3620	isc_time_subtract.
3621
3622	70. [func] isc_time_set() added.
3623
3624	69. [bug] The zone object's master and also-notify lists grew
3625	longer with each server reload.
3626
3627	68. [func] Partial support for SIG(0) on incoming messages.
3628
3629	67. [performance] Allow use of alternate (compile-time supplied)
3630	OpenSSL libraries/headers.
3631
3632	66. [func] Data in authoritative zones should have a trust level
3633	beyond secure.
3634
3635	65. [cleanup] Removed obsolete typedef of dns_zone_callbackarg_t
3636	from <dns/types.h>.
3637
3638	64. [func] The RBT, DB, and zone table APIs now allow the
3639	caller find the most-enclosing superdomain of
3640	a name.
3641
3642	63 [func] Generate NOTIFY messages.
3643
3644	62. [func] Add UDP refresh support.
3645
3646	61. [cleanup] Use single quotes consistently in log messages.
3647
3648	60. [func] Catch and disallow singleton types on message
3649	parse.
3650
3651	59. [bug] Cause net/host unreachable to be a hard error
3652	when sending and receiving.
3653
3654	58. [bug] bin/named/query.c could sometimes trigger the
3655	(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
3656	== 0 assertion in query_newname().
3657
3658	57. [func] Added dns_nxt_typepresent()
3659
3660	56. [bug] SIG records were not properly returned in cached
3661	negative answers.
3662
3663	55. [bug] Responses containing multiple names in the authority
3664	section were not negatively cached.
3665
3666	54. [bug] If a fetch with sigrdataset==NULL joined one with
3667	sigrdataset!=NULL or vice versa, the resolver
3668	could catch an assertion or lose signature data,
3669	respectively.
3670
3671	53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
3672	<sys/param.h>.
3673
3674	52. [bug] rndc: taskmgr and socketmgr were not initialized
3675	to NULL.
3676
3677	51. [cleanup] dns/compress.h and dns/zt.h did not need to include
3678	dns/rbt.h; it was needed only by compress.c and zt.c.
3679
3680	50. [func] RBT deletion no longer requires a valid chain to work,
3681	and dns_rbt_deletenode was added.
3682
3683	49. [func] Each cache now has its own mctx.
3684
3685	48. [func] isc_task_create() no longer takes an mctx.
3686	isc_task_mem() has been eliminated.
3687
3688	47. [func] A number of modules now use memory context reference
3689	counting.
3690
3691	46. [func] Memory contexts are now reference counted.
3692	Added isc_mem_inuse() and isc_mem_preallocate().
3693	Renamed isc_mem_destroy_check() to
3694	isc_mem_setdestroycheck().
3695
3696	45. [bug] The trusted-key statement incorrectly loaded keys.
3697
3698	44. [bug] Don't include authority data if it would force us
3699	to unset the AD bit in the message.
3700
3701	43. [bug] DNSSEC verification of cached rdatasets was failing.
3702
3703	42. [cleanup] Simplified logging of messages with embedded domain
3704	names by introducing a new convenience function
3705	dns_name_format().
3706
3707	41. [func] Use PR_SET_KEEPCAPS on Linux 2.3.99-pre3 and later
3708	to allow 'named' to run as a non-root user while
3709	retaining the ability to bind() to privileged
3710	ports.
3711
3712	40. [func] Introduced new logging category "dnssec" and
3713	logging module "dns/validator".
3714
3715	39. [cleanup] Moved the typedefs for isc_region_t, isc_textregion_t,
3716	and isc_lex_t to <isc/types.h>.
3717
3718	38. [bug] TSIG signed incoming zone transfers work now.
3719
3720	37. [bug] If the first RR in an incoming zone transfer was
3721	not an SOA, the server died with an assertion failure
3722	instead of just reporting an error.
3723
3724	36. [cleanup] Change DNS_R_SUCCESS (and others) to ISC_R_SUCCESS
3725
3726	35. [performance] Log messages which are of a level too high to be
3727	logged by any channel in the logging configuration
3728	will not cause the log mutex to be locked.
3729
3730	34. [bug] Recursion was allowed even with 'recursion no'.
3731
3732	33. [func] The RBT now maintains a parent pointer at each node.
3733
3734	32. [cleanup] bin/lwresd/client.c needs <string.h> for memset()
3735	prototype.
3736
3737	31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
3738
3739	30. [func] config file grammer change to support optional
3740	class type for a view.
3741
3742	29. [func] support new config file view options:
3743
3744	auth-nxdomain recursion query-source
3745	query-source-v6 transfer-source
3746	transfer-source-v6 max-transfer-time-out
3747	max-transfer-idle-out transfer-format
3748	request-ixfr provide-ixfr cleaning-interval
3749	fetch-glue notify rfc2308-type1 lame-ttl
3750	max-ncache-ttl min-roots
3751
3752	28. [func] support lame-ttl, min-roots and serial-queries
3753	config global options.
3754
3755	27. [bug] Only include <netinet6/in6.h> on BSD/OS 4.[01]*.
3756	Including it on other platforms (eg, NetBSD) can
3757	cause a forced #error from the C preprocessor.
3758
3759	26. [func] new match-clients statement in config file view.
3760
3761	25. [bug] make install failed to install <isc/log.h> and
3762	<isc/ondestroy.h>.
3763
3764	24. [cleanup] Eliminate some unnecessary #includes of header
3765	files from header files.
3766
3767	23. [cleanup] Provide more context in log messages about client
3768	requests, using a new function ns_client_log().
3769
3770	22. [bug] SIGs weren't returned in the answer section when
3771	the query resulted in a fetch.
3772
3773	21. [port] Look at STD_CINCLUDES after CINCLUDES during
3774	compilation, so additional system include directories
3775	can be searched but header files in the bind9 source
3776	tree with conflicting names take precedence. This
3777	avoids issues with installed versions of dnssafe and
3778	openssl.
3779
3780	20. [func] Configuration file post-load validation of zones
3781	failed if there were no zones.
3782
3783	19. [bug] dns_zone_notifyreceive() failed to unlock the zone
3784	lock in certain error cases.
3785
3786	18. [bug] Use AC_TRY_LINK rather than AC_TRY_COMPILE in
3787	configure.in to check for presence of in6addr_any.
3788
3789	17. [func] Do configuration file post-load validation of zones.
3790
3791	16. [bug] put quotes around key names on config file
3792	output to avoid possible keyword clashes.
3793
3794	15. [func] Add dns_name_dupwithoffsets(). This function is
3795	improves comparison performance for duped names.
3796
3797	14. [bug] free_rbtdb() could have 'put' unallocated memory in
3798	an unlikely error path.
3799
3800	13. [bug] lib/dns/master.c and lib/dns/xfrin.c didn't ignore
3801	out-of-zone data.
3802
3803	12. [bug] Fixed possible unitialized variable error.
3804
3805	11. [bug] axfr_rrstream_first() didn't check the result code of
3806	db_rr_iterator_first(), possibly causing an assertion
3807	to be triggered later.
3808
3809	10. [bug] A bug in the code which makes EDNS0 OPT records in
3810	bin/named/client.c and lib/dns/resolver.c could
3811	trigger an assertion.
3812
3813	9. [cleanup] replaced bit-setting code in confctx.c and replaced
3814	repeated code with macro calls.
3815
3816	8. [bug] Shutdown of incoming zone transfer accessed
3817	freed memory.
3818
3819	7. [cleanup] removed 'listen-on' from view statement.
3820
3821	6. [bug] quote RR names when generating config file to
3822	prevent possible clash with config file keywords
3823	(such as 'key').
3824
3825	5. [func] syntax change to named.conf file: new ssu grant/deny
3826	statements must now be enclosed by an 'update-policy'
3827	block.
3828
3829	4. [port] bin/named/unix/os.c didn't compile on systems with
3830	linux 2.3 kernel includes due to conflicts between
3831	C library includes and the kernel includes. We now
3832	get only what we need from <linux/capability.h>, and
3833	avoid pulling in other linux kernel .h files.
3834
3835	3. [bug] TKEYs go in the answer section of responses, not
3836	the additional section.
3837
3838	2. [bug] Generating cryptographic randomness failed on
3839	systems without /dev/random.
3840
3841	1. [bug] The installdirs rule in
3842	lib/isc/unix/include/isc/Makefile.in had a typo which
3843	prevented the isc directory from being created if it
3844	didn't exist.
3845
3846	--- 9.0.0b2 released ---
3847
3848	# This tells Emacs to use hard tabs in this file.
3849	# Local Variables:
3850	# indent-tabs-mode: t
3851	# End:

Note: See TracBrowser for help on using the repository browser.

Download in other formats:

Original Format