Context Navigation

CHANGES @ 21744

Visit:

Revision 21744, 187.8 KB checked in by ghudson, 20 years ago (diff)
This commit was generated by cvs2svn to compensate for changes in r21743, which included commits to RCS files with non-trunk default branches.

Line
1
2	--- 9.3.1 released ---
3
4	1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
5
6	--- 9.3.1rc1 released ---
7
8	1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
9	[RT #13453]
10
11	1808. [bug] zone.c:notify_zone() contained a race condition,
12	zone->db could change underneath it. [RT #13511]
13
14	1806. [bug] The resolver returned the wrong result when a CNAME /
15	DNAME was encountered when fetching glue from a
16	secure namespace. [RT #13501]
17
18	1805. [bug] Pending status was not being cleared when DLV was
19	active. [RT #13501]
20
21	--- 9.3.1beta2 released ---
22
23	1800. [bug] Changes #1719 allowed a INSIST to be triggered.
24	[RT #13428]
25
26	--- 9.3.1beta1 released ---
27
28	1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
29	allow parallel make to succeed.
30
31	1789. [bug] Prerequisite test for tkey and dnssec could fail
32	with "configure --with-libtool".
33
34	1788. [bug] libbind9.la/libbind9.so needs to link against
35	libisccfg.la/libisccfg.so.
36
37	1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
38
39	1786. [port] AIX: libt_api needs to be taught to look for
40	T_testlist in the main executable (--with-libtool).
41	[RT #13239]
42
43	1785. [bug] libbind9.la/libbind9.so needs to link against
44	libisc.la/libisc.so.
45
46	1784. [cleanup] "libtool -allow-undefined" is the default.
47	Leave hooks in configure to allow it to be set
48	if needed in the future.
49
50	1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
51	source tree.
52
53	1782. [port] OSX: --with-libtool + --enable-libbind broke on
54	__evOptMonoTime. [RT #13219]
55
56	1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
57
58	1780. [bug] Update libtool to 1.5.10.
59
60	1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
61
62	1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
63	IN6ADDR_LOOPBACK_INIT macros.
64
65	1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
66	IN6ADDR_LOOPBACK_INIT macros.
67
68	1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
69	IN6ADDR_LOOPBACK_INIT macros.
70
71	1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
72
73	1774. [port] Aix: Silence compiler warnings / build failures.
74	[RT #13154]
75
76	1773. [bug] Fast retry on host / net unreachable. [RT #13153]
77
78	1770. [bug] named-checkconf failed to report missing a missing
79	file clause for rbt{64} master/hint zones. [RT#13009]
80
81	1769. [port] win32: change compiler flags /MTd ==> /MDd,
82	/MT ==> /MD.
83
84	1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
85	rdataset. [RT #12907]
86
87	1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
88	support for (struct in6_pktinfo) failed. [RT #13077]
89
90	1766. [bug] Update the master file timestamp on successful refresh
91	as well as the journal's timestamp. [RT# 13062]
92
93	1765. [bug] configure --with-openssl=auto failed. [RT #12937]
94
95	1764. [bug] dns_zone_replacedb failed to emit a error message
96	if there was no SOA record in the replacment db.
97	[RT #13016]
98
99	1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
100	even when it failed. [RT #12995]
101
102	1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
103	[RT #12971]
104
105	1760. [bug] Host / net unreachable was not penalising rtt
106	estimates. [RT #12970]
107
108	1759. [bug] Named failed to startup if the OS supported IPv6
109	but had no IPv6 interfaces configured. [RT #12942]
110
111	1754. [bug] We wern't always attempting to query the parent
112	server for the DS records at the zone cut.
113	[RT #12774]
114
115	1753. [bug] Don't serve a slave zone which has no NS records.
116	[RT #12894]
117
118	1752. [port] Move isc_app_start() to after ns_os_daemonise()
119	as some fork() implementations unblock the signals
120	that are blocked by isc_app_start(). [RT #12810]
121
122	1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
123
124	1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
125	[RT #12864]
126
127	1749. [bug] 'check-names response ignore;' failed to ignore.
128	[RT #12866]
129
130	1747. [bug] BIND 8 compatability: named/named-checkconf failed
131	to parse "host-statistics-max" in named.conf.
132
133	1745. [bug] Dig/host/nslookup accept replies from link locals
134	regardless of scope if no scope was specified when
135	query was sent. [RT #12745]
136
137	1744. [bug] If tuple2msgname() failed to convert a tuple to
138	a name a REQUIRE could be triggered. [RT #12796]
139
140	1743. [bug] If isc_taskmgr_create() was not able to create the
141	requested number of worker threads then destruction
142	of the manager would trigger an INSIST() failure.
143	[RT #12790]
144
145	1742. [bug] Deleting all records at a node then adding a
146	previously existing record, in a single UPDATE
147	transaction, failed to leave / regenerate the
148	associated RRSIG records. [RT #12788]
149
150	1741. [bug] Deleting all records at a node in a secure zone
151	using a update-policy grant failed. [RT #12787]
152
153	1740. [bug] Replace rbt's hash algorithm as it performed badly
154	with certain zones. [RT #12729]
155
156	NOTE: a hash context now needs to be established
157	via isc_hash_create() if the application was not
158	already doing this.
159
160	1739. [bug] dns_rbt_deletetree() could incorrectly return
161	ISC_R_QUOTA. [RT #12695]
162
163	1738. [bug] Enable overrun checking by default. [RT #12695]
164
165	1737. [bug] named failed if more than 16 masters were specified.
166	[RT #12627]
167
168	1736. [bug] dst_key_fromnamedfile() could fail to read a
169	public key. [RT #12687]
170
171	1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
172	[RE #12688]
173
174	1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
175	[RT #12588]
176
177	1733. [bug] Return non-zero exit status on initial load failure.
178	[RT #12658]
179
180	1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
181	[RT #12467]
182
183	1731. [port] darwin: relax version test in ifconfig.sh.
184	[RT #12581]
185
186	1730. [port] Determine the length type used by the socket API.
187	[RT #12581]
188
189	1728. [doc] Update check-names documentation.
190
191	1727. [bug] named-checkzone: check-names support didn't match
192	documentation.
193
194	1726. [port] aix5: add support for aix5.
195
196	1725. [port] linux: update error message on interaction of threads,
197	capabilities and setuid support (named -u). [RT #12541]
198
199	1724. [bug] Look for DNSKEY records with "dig +sigtrace".
200	[RT #12557]
201
202	1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
203
204	1722. [bug] Don't commit the journal on malformed ixfr streams.
205	[RT #12519]
206
207	1721. [bug] Error message from the journal processing were not
208	always identifing the relevent journal. [RT #12519]
209
210	1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
211	negative response. [RT #12506]
212
213	1719. [bug] named was not correctly caching a RFC 2308 Type 1
214	negative response. [RT #12506]
215
216	1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
217	responses when looking for the zone / master server.
218	[RT #12506]
219
220	1717. [port] solaris: ifconfig.sh did not support Solaris 10.
221	"ifconfig.sh down" didn't work for Solaris 9.
222
223	1716. [doc] named.conf(5) was being installed in the wrong
224	location. [RT# 12441]
225
226	1714. [bug] dig/host/nslookup were only trying the first
227	address when a nameserver was specified by name.
228	[RT #12286]
229
230	1713. [port] linux: extend capset failure message to say:
231	please ensure that the capset kernel module is
232	loaded. see insmod(8)
233
234	1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
235
236	--- 9.3.0 released ---
237
238	1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
239
240	--- 9.3.0rc4 released ---
241
242	1709. [port] solaris: add SMF support.
243
244	1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
245	for conformance to the name space convention. Binary
246	backward compatibility to the old function name is
247	provided. [RT #12376]
248
249	1707. [contrib] sdb/ldap updated to version 1.0-beta.
250
251	1706. [bug] 'rndc stop' failed to cause zones to be flushed
252	sometimes. [RT #12328]
253
254	1704. [port] lwres needed a snprintf() implementation for
255	platforms without snprintf(). Add missing
256	"#include <isc/print.h>". [RT #12321]
257
258	1703. [bug] named would loop sending NOTIFY messages when it
259	failed to receive a response. [RT #12322]
260
261	1702. [bug] also-notify should not be applied to builtin zones.
262	[RT #12323]
263
264	1701. [doc] A minimal named.conf man page.
265
266	1700. [func] nslookup is no longer to be treated as deprecated.
267	Remove "deprecated" warning message. Add man page.
268
269	1699. [bug] dnssec-signzone can generate "not exact" errors
270	when resigning. [RT #12281]
271
272	1698. [doc] Use reserved IPv6 documentation prefix.
273
274	1697. [bug] xxx-source{,-v6} was not effective when it
275	specified one of listening addresses and a
276	different port than the listening port. [RT #12257]
277
278	--- 9.3.0rc3 released ---
279
280	1696. [bug] dnssec-signzone failed to clean out nodes that
281	consisted of only NSEC and RRSIG records.
282	[RT #12154]
283
284	1695. [bug] DS records when forwarding require special handling.
285	[RT #12133]
286
287	1694. [bug] Report if the builtin views of "_default" / "_bind"
288	are defined in named.conf. [RT #12023]
289
290	1693. [bug] max-journal-size was not effective for master zones
291	with ixfr-from-differences set. [RT# 12024]
292
293	1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
294	/usr/lib. [RT #11971]
295
296	1691. [bug] sdb's attachversion was not complete. [RT #11990]
297
298	1690. [bug] Delay detaching view from the client until UPDATE
299	processing completes when shutting down. [RT #11714]
300
301	1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
302	contained gratuitous semicolons. [RT #11707]
303
304	1688. [bug] LDFLAGS was not supported.
305
306	1687. [bug] Race condition in dispatch. [RT #10272]
307
308	1686. [bug] Named sent a extraneous NOTIFY when it received a
309	redundant UPDATE request. [RT #11943]
310
311	--- 9.3.0rc2 released ---
312
313	1685. [bug] Change #1679 loop tests weren't quite right.
314
315	1683. [bug] dig +sigchase could leak memory. [RT #11445]
316
317	1682. [port] Update configure test for (long long) printf format.
318	[RT #5066]
319
320	1681. [bug] Only set SO_REUSEADDR when a port is specified in
321	isc_socket_bind(). [RT #11742]
322
323	1679. [bug] When there was a single nameserver with multiple
324	addresses for a zone not all addresses were tried.
325	[RT #11706]
326
327	1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
328
329	1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
330
331	1675. [bug] named would sometimes add extra NSEC records to
332	the authority section.
333
334	1674. [port] linux: increase buffer size used to scan
335	/proc/net/if_inet6.
336
337	1673. [port] linux: issue a error messages if IPv6 interface
338	scans fails.
339
340	1672. [cleanup] Tests which only function in a threaded build
341	now return R:THREADONLY (rather than R:UNTESTED)
342	in a non-threaded build.
343
344	1671. [contrib] queryperf: add NAPTR to the list of known types.
345
346	1670. [func] Log UPDATE requests to slave zones without an acl as
347	"disabled" at debug level 3. [RT# 11657]
348
349	1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
350
351	1667. [port] linux: not all versions have IF_NAMESIZE.
352
353	1666. [bug] The optional port on hostnames in dual-stack-servers
354	was being ignored.
355
356	1663. [func] Look for OpenSSL by default.
357
358	1661. [bug] Restore dns_name_concatenate() call in
359	adb.c:set_target(). [RT #11582]
360
361	1660. [bug] win32: connection_reset_fix() was being called
362	unconditionally. [RT #11595]
363
364	--- 9.3.0rc1 released ---
365
366	1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
367
368	1662. [bug] Change #1658 failed to change one use of 'type'
369	to 'keytype'.
370
371	1659. [cleanup] Cleanup some messages that were referring to KEY vs
372	DNSKEY, NXT vs NSEC and SIG vs RRSIG.
373
374	1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
375	and DH. Tighten which options apply to KEY and
376	DNSKEY records.
377
378	1657. [doc] ARM: document query log output.
379
380	1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
381	DNSKEY and RRSIG. [RT #11542]
382
383	1655. [bug] Logging multiple versions w/o a size was broken.
384	[RT #11446]
385
386	1654. [bug] isc_result_totext() contained array bounds read
387	error.
388
389	1653. [func] Add key type checking to dst_key_fromfilename(),
390	DST_TYPE_KEY should be used to read TSIG, TKEY and
391	SIG(0) keys.
392
393	1652. [bug] TKEY still uses KEY.
394
395	1651. [bug] dig: process multiple dash options.
396
397	1650. [bug] dig, nslookup: flush standard out after each command.
398
399	1649. [bug] Silence "unexpected non-minimal diff" message.
400	[RT #11206]
401
402	1648. [func] Update dnssec-lookaside named.conf syntax to support
403	multiple dnssec-lookaside namespaces (not yet
404	implemented).
405
406	1647. [bug] It was possible trigger a INSIST when chasing a DS
407	record that required walking back over a empty node.
408	[RT #11445]
409
410	1646. [bug] win32: logging file versions didn't work with
411	non-UNC filenames. [RT#11486]
412
413	1645. [bug] named could trigger a REQUIRE failure if multiple
414	masters with keys are specified.
415
416	1644. [bug] Update the journal modification time after a
417	sucessfull refresh query. [RT #11436]
418
419	1643. [bug] dns_db_closeversion() could leak memory / node
420	references. [RT #11163]
421
422	1642. [port] Support OpenSSL implementations which don't have
423	DSA support. [RT #11360]
424
425	1641. [bug] Update the check-names description in ARM. [RT #11389]
426
427	--- 9.3.0beta4 released ---
428
429	1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
430	incorrectly closing the socket. [RT #11291]
431
432	1639. [func] Initial dlv system test.
433
434	1638. [bug] "ixfr-from-differences" could generate a REQUIRE
435	failure if the journal open failed. [RT #11347]
436
437	1637. [bug] Node reference leak on error in addnoqname().
438
439	1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
440	a error had occured. The database version no longer
441	matched the version of the database that was dumped.
442
443	1635. [bug] Memory leak on error in query_addds().
444
445	1634. [bug] named didn't supply a useful error message when it
446	detected duplicate views. [RT #11208]
447
448	1633. [bug] named should return NOTIMP to update requests to a
449	slaves without a allow-update-forwarding acl specified.
450	[RT #11331]
451
452	1632. [bug] nsupdate failed to send prerequisite only UPDATE
453	messages. [RT #11288]
454
455	1631. [bug] dns_journal_compact() could sometimes corrupt the
456	journal. [RT #11124]
457
458	1630. [contrib] queryperf: add support for IPv6 transport.
459
460	1629. [func] dig now supports IPv6 scoped addresses with the
461	extended format in the local-server part. [RT #8753]
462
463	1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
464
465	1627. [bug] win32: sockets were not being closed when the
466	last external reference was removed. [RT# 11179]
467
468	1626. [bug] --enable-getifaddrs was broken. [RT#11259]
469
470	1625. [bug] named failed to load/transfer RFC2535 signed zones
471	which contained CNAMES. [RT# 11237]
472
473	1606. [bug] DLV insecurity proof was failing.
474
475	1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
476
477	--- 9.3.0beta3 released ---
478
479	1624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
480
481	1623. [bug] A serial number of zero was being displayed in the
482	"sending notifies" log message when also-notify was
483	used. [RT #11177]
484
485	1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
486	available, and suppress wildcard binding if not.
487
488	1621. [bug] match-destinations did not work for IPv6 TCP queries.
489	[RT# 11156]
490
491	1620. [func] When loading a zone report if it is signed. [RT #11149]
492
493	1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
494	[RT# 11118]
495
496	1618. [bug] Fencepost errors in dns_name_ishostname() and
497	dns_name_ismailbox() could trigger a INSIST().
498
499	1617. [port] win32: VC++ 6.0 support.
500
501	1616. [compat] Ensure that named's version is visible in the core
502	dump. [RT #11127]
503
504	1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
505	it is defined.
506
507	1614. [port] win32: silence resource limit messages. [RT# 11101]
508
509	1613. [bug] Builds would fail on machines w/o a if_nametoindex().
510	Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
511	[RT #11119]
512
513	1612. [bug] check-names at the option/view level could trigger
514	an INSIST. [RT# 11116]
515
516	1611. [bug] solaris: IPv6 interface scanning failed to cope with
517	no active IPv6 interfaces.
518
519	1610. [bug] On dual stack machines "dig -b" failed to set the
520	address type to be looked up with "@server".
521	[RT #11069]
522
523	1600. [bug] Duplicate zone pre-load checks were not case
524	insensitive.
525
526	1599. [bug] Fix memory leak on error path when checking named.conf.
527
528	1598. [func] Specify that certain parts of the namespace must
529	be secure (dnssec-must-be-secure).
530
531	--- 9.3.0beta2 released ---
532
533	1609. [func] dig now has support to chase DNSSEC signature chains.
534	Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
535
536	DNSSEC validation code in dig coded by Olivier Courtay
537	(olivier.courtay@irisa.fr) for the IDsA project
538	(http://idsa.irisa.fr).
539
540	1608. [func] dig and host now accept -4/-6 to select IP transport
541	to use when making queries.
542
543	1607. [bug] dig, host and nslookup were still using random()
544	to generate query ids. [RT# 11013]
545
546	1604. [bug] A xfrout_ctx_create() failure would result in
547	xfrout_ctx_destroy() being called with a
548	partially initialized structure.
549
550	1603. [bug] nsupdate: set interactive based on isatty().
551	[RT# 10929]
552
553	1602. [bug] Logging to a file failed unless a size was specified.
554	[RT# 10925]
555
556	1601. [bug] Silence spurious warning 'both "recursion no;" and
557	"allow-recursion" active' warning from view "_bind".
558	[RT# 10920]
559
560	1594. [bug] 'rndc dumpdb' could prevent named from answering
561	queries while the dump was in progress. [RT #10565]
562
563	1593. [bug] rndc should return "unknown command" to unknown
564	commands. [RT# 10642]
565
566	--- 9.3.0beta1 released ---
567
568	1592. [bug] configure_view() could leak a dispatch. [RT #10675]
569
570	1591. [bug] libbind: updated to BIND 8.4.5.
571
572	1590. [port] netbsd: update thread support.
573
574	1589. [func] DNSSEC lookaside validation.
575
576	1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
577
578	1587. [bug] dns_message_settsigkey() failed to clear existing key.
579	[RT #10590]
580
581	1586. [func] "check-names" is now implemented.
582
583	1584. [bug] "make test" failed with a read only source tree.
584	[RT #10461]
585
586	1583. [bug] Records add via UPDATE failed to get the correct trust
587	level. [RT #10452]
588
589	1582. [bug] rrset-order failed to work on RRsets with more
590	than 32 elements. [RT #10381]
591
592	1581. [func] Disable DNSSEC support by default. To enable
593	DNSSEC specify "dnssec-enable yes;" in named.conf.
594
595	1580. [bug] Zone destruction on final detach takes a long time.
596	[RT #3746]
597
598	1579. [bug] Multiple task managers could not be created.
599
600	1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
601	[RT #10346]
602
603	1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
604	workaround code. [RT #10331]
605
606	1576. [bug] Race condition in dns_dispatch_addresponse().
607	[RT# 10272]
608
609	1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
610
611	1574. [bug] Don't attempt to open the controls socket(s) when
612	running tests. [RT #9091]
613
614	1573. [port] linux: update to libtool 1.5.2 so that
615	"make install DESTDIR=/xx" works with
616	"configure --with-libtool". [RT #9941]
617
618	1572. [bug] nsupdate: sign the soa query to find the enclosing
619	zone if the server is specified. [RT #10148]
620
621	1571. [bug] rbt:hash_node() could fail leaving the hash table
622	in an inconsistent state. [RT #10208]
623
624	1570. [bug] nsupdate failed to handle classes other than IN.
625	New keyword 'class' which sets the default class.
626	[RT #10202]
627
628	1569. [func] nsupdate new command 'answer' which displays the
629	complete answer message to the last update.
630
631	1568. [bug] nsupdate now reports that the update failed in
632	interactive mode. [RT# 10236]
633
634	1567. [bug] B.ROOT-SERVERS.NET is now 192.228.79.201.
635
636	1566. [port] Support for the cmsg framework on Solaris and HP/UX.
637	This also solved the problem that match-destinations
638	for IPv6 addresses did not work on these systems.
639	[RT #10221]
640
641	1565. [bug] CD flag should be copied to outgoing queries unless
642	the query is under a secure entry point in which case
643	CD should be set.
644
645	1564. [func] Attempt to provide a fallback entropy source to be
646	used if named is running chrooted and named is unable
647	to open entropy source within the chroot area.
648	[RT #10133]
649
650	1563. [bug] Gracefully fail when unable to obtain neither an IPv4
651	nor an IPv6 dispatch. [RT #10230]
652
653	1562. [bug] isc_socket_create() and isc_socket_accept() could
654	leak memory under error conditions. [RT #10230]
655
656	1561. [bug] It was possible to release the same name twice if
657	named ran out of memory. [RT #10197]
658
659	1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
660	and EAI_NONAME to the same value.
661
662	1559. [port] named should ignore SIGFSZ.
663
664	1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
665	child zones for which we don't have a supported
666	algorithm. Such child zones are treated as unsigned.
667
668	1557. [func] Implement missing DNSSEC tests for
669	* NOQNAME proof with wildcard answers.
670	* NOWILDARD proof with NXDOMAIN.
671	Cache and return NOQNAME with wildcard answers.
672
673	1556. [bug] nsupdate now treats all names as fully qualified.
674	[RT #6427]
675
676	1555. [func] 'rrset-order cyclic' no longer has a random starting
677	point. [RT #7572]
678
679	1554. [bug] dig, host, nslookup failed when no nameservers
680	were specified in /etc/resolv.conf. [RT #8232]
681
682	1553. [bug] The windows socket code could stop accepting
683	connections. [RT#10115]
684
685	1552. [bug] Accept NOTIFY requests from mapped masters if
686	matched-mapped is set. [RT #10049]
687
688	1551. [port] Open "/dev/null" before calling chroot().
689
690	1550. [port] Call tzset(), if available, before calling chroot().
691
692	1549. [func] named-checkzone can now write out the zone contents
693	in a easily parsable format (-D and -o).
694
695	1548. [bug] When parsing APL records it was possible to silently
696	accept out of range ADDRESSFAMILY values. [RT# 9979]
697
698	1547. [bug] Named wasted memory recording duplicate lame zone
699	entries. [RT #9341]
700
701	1546. [bug] We were rejecting valid secure CNAME to negative
702	answers.
703
704	1545. [bug] It was possible to leak memory if named was unable to
705	bind to the specified transfer source and TSIG was
706	being used. [RT #10120]
707
708	1544. [bug] Named would logged a single entry to a file despite it
709	being over the specified size limit.
710
711	1543. [bug] Logging using "versions unlimited" did not work.
712
713	1541. [func] NSEC now uses new bitmap format.
714
715	1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
716	[RT #8934]
717
718	1539. [bug] Open UDP sockets for notify-source and transfer-source
719	that use reserved ports at startup. [RT #9475]
720
721	1537. [func] New option "querylog". If set specify whether query
722	logging is to be enabled or disabled at startup.
723
724	1536. [bug] Windows socket code failed to log a error description
725	when returning ISC_R_UNEXPECTED. [RT #9998]
726
727	1534. [bug] Race condition when priming cache. [RT# 9940]
728
729	1533. [func] Warn if both "recursion no;" and "allow-recursion"
730	are active. [RT# 4389]
731
732	1532. [port] netbsd: the configure test for <sys/sysctl.h>
733	requires <sys/param.h>.
734
735	1531. [port] AIX more libtool fixes.
736
737	1530. [bug] It was possible to trigger a INSIST() failure if a
738	slave master file was removed at just the correct
739	moment. [RT #9462]
740
741	1529. [bug] "notify explicit;" failed to log that NOTIFY messages
742	were being sent for the zone. [RT# 9442]
743
744	1528. [cleanup] Simplify some dns_name_ functions based on the
745	deprecation of bitstring labels.
746
747	1527. [cleanup] Reduce the number of gettimeofday() calls without
748	losing necessary timer granularity.
749
750	1525. [bug] dns_cache_create() could trigger a REQUIRE
751	failure in isc_mem_put() during error cleanup.
752	[RT# 9360]
753
754	1524. [port] AIX needs to be able to resolve all symbols when
755	creating shared libraries (--with-libtool).
756
757	1523. [bug] Fix race condition in rbtdb. [RT# 9189]
758
759	1522. [bug] dns_db_findnode() relax the requirements on 'name'.
760	[RT# 9286]
761
762	1521. [bug] dns_view_createresolver() failed to check the
763	result from isc_mem_create(). [RT# 9294]
764
765	1520. [protocol] Add SSHFP (SSH Finger Print) type.
766
767	1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
768	length of the new bitmap.
769
770	1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
771	contained a off-by-one error when working out the
772	number of octets in the bitmap.
773
774	1517. [port] Support for IPv6 interface scanning on HP/UX and
775	TrueUNIX 5.1.
776
777	1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
778
779	1515. [func] Allow transfer source to be set in a server statement.
780	[RT #6496]
781
782	1514. [bug] named: isc_hash_destroy() was being called too early.
783	[RT #9160]
784
785	1513. [doc] Add "US" to root-delegation-only exclude list.
786
787	1512. [bug] Extend the delegation-only logging to return query
788	type, class and responding nameserver.
789
790	1511. [bug] delegation-only was generating false positives
791	on negative answers from subzones.
792
793	1510. [func] New view option "root-delegation-only". Apply
794	delegation-only check to all TLDs and root.
795	Note there are some TLDs that are NOT delegation
796	only (e.g. DE, LV, US and MUSEUM) these can be excluded
797	from the checks by using exclude.
798
799	root-delegation-only exclude {
800	"DE"; "LV"; "US"; "MUSEUM";
801	};
802
803	1509. [bug] Hint zones should accept delegation-only. Forward
804	zone should not accept delegation-only.
805
806	1508. [bug] Don't apply delegation-only checks to answers from
807	forwarders.
808
809	1507. [bug] Handle BIND 8 style returns to NS queries to parents
810	when making delegation-only checks.
811
812	1506. [bug] Wrong return type for dns_view_isdelegationonly().
813
814	1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
815
816	1504. [func] New zone type "delegation-only".
817
818	1503. [port] win32: install libeay32.dll outside of system32.
819
820	1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
821
822	1501. [func] Allow TCP queue length to be specified via
823	named.conf, tcp-listen-queue.
824
825	1500. [bug] host failed to lookup MX records. Also look up
826	AAAA records.
827
828	1475. [port] Probe for old sprintf().
829
830	1474. [port] Provide strtoul() and memmove() for platforms
831	without them.
832
833	1469. [func] Log end of outgoing zone transfer at same level
834	as the start of transfer is logged. [RT #4441]
835
836	1468. [func] Internal zones are no longer counted for
837	'rndc status'. [RT #4706]
838
839	1467. [func] $GENERATES now supports optional class and ttl.
840
841	1458. [cleanup] sprintf() -> snprintf().
842
843	1457. [port] Provide strlcat() and strlcpy() for platforms without
844	them.
845
846	1455. [bug] <netaddr> missing from server grammar in
847	doc/misc/options. [RT #5616]
848
849	1454. [port] Use getifaddrs() if available for interface scanning.
850	--disable-getifaddrs to override. Glibc currently
851	has a getifaddrs() that does not support IPv6.
852	Use --enable-getifaddrs=glibc to force the use of
853	this version under linux machines.
854
855	1446. [func] Implemented undocumented alternate transfer sources
856	from BIND 8. See use-alt-transfer-source,
857	alt-transfer-source and alt-transfer-source-v6.
858
859	SECURITY: use-alt-transfer-source is ENABLED unless
860	you are using views. This may cause a security risk
861	resulting in accidental disclosure of wrong zone
862	content if the master supplying different source
863	content based on IP address. If you are not certain
864	ISC recommends setting use-alt-transfer-source no;
865
866	1444. [func] dns_view_findzonecut2() allows you to specify if the
867	cache should be searched for zone cuts.
868
869	1443. [func] Masters lists can now be specified and referenced
870	in zone masters clauses and other masters lists.
871
872	1442. [func] New functions for manipulating port lists:
873	dns_portlist_create(), dns_portlist_add(),
874	dns_portlist_remove(), dns_portlist_match(),
875	dns_portlist_attach() and dns_portlist_detach().
876
877	1441. [func] It is now possible to tell dig to bind to a specific
878	source port.
879
880	1440. [func] It is now possible to tell named to avoid using
881	certain source ports (avoid-v4-udp-ports,
882	avoid-v6-udp-ports).
883
884	1438. [func] Log TSIG (if any) when logging NOTIFY requests.
885
886	1436. [func] dns_zonemgr_resumexfrs() can be used to restart
887	stalled transfers.
888
889	1433. [bug] named could trigger a REQUIRE failure if it could
890	not get a file descriptor when attempting to write
891	a master file. [RT #4347]
892
893	1432. [func] The advertised EDNS UDP buffer size can now be set
894	via named.conf (edns-udp-size).
895
896	1430. [port] linux: IPv6 interface scanning support.
897
898	1422. [func] Log name/type/class when denying a query. [RT #4663]
899
900	1421. [func] Differentiate updates that don't succeed due to
901	prerequisites (unsuccessful) vs other reasons
902	(failed).
903
904	1417. [func] ID.SERVER/CHAOS is now a built in zone.
905	See "server-id" for how to configure.
906
907	1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
908	from SOA MINIMUM.
909
910	1414. [func] Support for KSK flag.
911
912	1413. [func] Explictly request the (re-)generation of DS records from
913	keysets (dnssec-signzone -g).
914
915	1412. [func] You can now specify servers to be tried if a nameserver
916	has IPv6 address and you only support IPv4 or the
917	reverse. See dual-stack-servers.
918
919	1410. [func] Handle records that live in the parent zone, e.g. DS.
920
921	1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
922
923	1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
924	buffer.
925
926	1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
927	dnssec-signkey now report their version in the
928	usage message.
929
930	1402. [cleanup] A6 has been moved to experimental and is no longer
931	fully supported.
932
933	1400. [bug] Block the addition of wildcard NS records by IXFR
934	or UPDATE. [RT #3502]
935
936	1398. [doc] ARM: notify-also should have been also-notify.
937	[RT #4345]
938
939	1396. [func] dnssec-signzone: adjust the default signing time by
940	1 hour to allow for clock skew.
941
942	1394. [func] It is now possible to check if a particular element is
943	in a acl. Remove duplicate entries from the localnets
944	acl.
945
946	1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
947	is not available in the kernel to prevent accidently
948	listening on IPv4 interfaces.
949
950	1392. [bug] named-checkzone: update usage.
951
952	1391. [func] Add support for IPv6 scoped addresses in named.
953
954	1390. [func] host now supports ixfr.
955
956	1386. [bug] named-checkzone -z stopped on errors in a zone.
957	[RT #3653]
958
959	1383. [func] Track the serial number in a IXFR response and log if
960	a mismatch occurs. This is a more specific error than
961	"not exact". [RT #3445]
962
963	1380. [func] 'rndc recursing' dump recursing queries to
964	'recursing-file = "named.recursing";'.
965
966	1379. [func] 'rndc status' now reports tcp and recursion quota
967	states.
968
969	1378. [func] Improved positive feedback for 'rndc {reload\|refresh}.
970
971	1377. [func] dns_zone_load{new}() now reports if the zone was
972	loaded, queued for loading to up to date.
973
974	1376. [func] New function dns_zone_logc() to log to specified
975	category.
976
977	1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
978	data cache.
979
980	1374. [func] dns_adb_dump() now logs the lame zones associated
981	with each server.
982
983	1371. [bug] notify-source-v6, transfer-source-v6 and
984	query-source-v6 with explicit addresses and using the
985	same ports as named was listening on could interfere
986	with named's ability to answer queries sent to those
987	addresses.
988
989	1368. [func] remove support for bitstring labels.
990
991	1367. [func] Use response times to select forwarders.
992
993	1365. [func] "localhost" and "localnets" acls now include IPv6
994	addresses / prefixes.
995
996	1364. [func] Log file name when unable to open memory statistics
997	and dump database files. [RT# 3437]
998
999	1363. [func] Listen-on-v6 now supports specific addresses.
1000
1001	1362. [bug] remove IFF_RUNNING test when scanning interfaces.
1002
1003	1361. [func] log the reason for rejecting a server when resolving
1004	queries.
1005
1006	1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1007
1008	1344. [func] Log if the serial number on the master has gone
1009	backwards.
1010	If you have multiple machines specified in the masters
1011	clause you may want to set 'multi-master yes;' to
1012	suppress this warning.
1013
1014	1343. [func] Log successful notifies received (info). Adjust log
1015	level for failed notifies to notice.
1016
1017	1342. [func] Log remote address with TCP dispatch failures.
1018
1019	1341. [func] Allow a rate limiter to be stalled.
1020
1021	1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1022	lookups. Bit string lookups are no longer attempted.
1023
1024	1336. [func] Nibble lookups under IP6.ARPA are now supported by
1025	dns_byaddr_create(). dns_byaddr_createptrname() is
1026	deprecated, use dns_byaddr_createptrname2() instead.
1027
1028	1332. [func] Report the current serial with periodic commits when
1029	rolling forward the journal.
1030
1031	1331. [func] Generate DNSSEC wildcard proofs.
1032
1033	1329. [func] named-checkzone will now check if nameservers that
1034	appear to be IP addresses. Available modes "fail",
1035	"warn" (default) and "ignore" the results of the
1036	check.
1037
1038	1328. [bug] The validator could incorrectly verify an invalid
1039	negative proof.
1040
1041	1322. [bug] dnssec-signzone usage message was misleading.
1042
1043	1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
1044	would incorrectly duplicate its output and sign it.
1045
1046	1313. [func] Query log now says if the query was signed (S) or
1047	if EDNS was used (E).
1048
1049	1312. [func] Log TSIG key used w/ outgoing zone transfers.
1050
1051	1309. [func] Log that a zone transfer was covered by a TSIG.
1052
1053	1308. [func] DS (delegation signer) support.
1054
1055	1304. [func] New function: dns_zone_name().
1056
1057	1303. [func] Option 'flush-zones-on-shutdown <boolean>;'.
1058
1059	1302. [func] Extended rndc dumpdb to support dumping of zones and
1060	view selection: 'dumpdb [-all\|-zones\|-cache] [view]'.
1061
1062	1301. [func] New category 'update-security'.
1063
1064	1300. [port] Compaq Trucluster support.
1065
1066	1293. [func] Entropy can now be retrieved from EGDs. [RT #2438]
1067
1068	1292. [func] Enable IPv6 support when using ioctl style interface
1069	scanning and OS supports SIOCGLIFADDR using struct
1070	if_laddrreq.
1071
1072	1291. [func] Enable IPv6 support when using sysctl style interface
1073	scanning.
1074
1075	1290. [func] "dig axfr" now reports the number of messages
1076	as well as the number of records.
1077
1078	1285. [func] lwres: probe the system to see what address families
1079	are currently in use.
1080
1081	1283. [func] Use "dataready" accept filter if available.
1082
1083	1281. [func] Log zone when unable to get private keys to update
1084	zone. Log zone when NXT records are missing from
1085	secure zone.
1086
1087	1278. [func] dig: now supports +[no]cl +[no]ttlid.
1088
1089	1277. [func] You can now create your own customized printing
1090	styles: dns_master_stylecreate() and
1091	dns_master_styledestroy().
1092
1093	1271. [bug] "recursion available: {denied,approved}" was too
1094	confusing.
1095
1096	1267. [func] isc_file_openunique() now creates file using mode
1097	0666 rather than 0600.
1098
1099	1254. [func] preferred-glue option from BIND 8.3.
1100
1101	1250. [func] Nsupdate will report the address the update was
1102	sent to.
1103
1104	1247. [bug] Don't reset the interface index for link/site local
1105	addresses. [RT #2576]
1106
1107	1246. [func] New functions isc_sockaddr_issitelocal(),
1108	isc_sockaddr_islinklocal(), isc_netaddr_issitelocal()
1109	and isc_netaddr_islinklocal().
1110
1111	1243. [bug] It was possible to trigger a REQUIRE() in
1112	dns_message_findtype(). [RT #2659]
1113
1114	1235. [func] Report 'out of memory' errors from openssl.
1115
1116	1234. [bug] contrib/sdb: 'zonetodb' failed to call
1117	dns_result_register(). DNS_R_SEENINCLUDE should not
1118	be fatal.
1119
1120	1233. [bug] The flags field of a KEY record can be expressed in
1121	hex as well as decimal.
1122
1123	1226. [func] Use EDNS for zone refresh queries. [RT #2551]
1124
1125	1225. [func] dns_message_setopt() no longer requires that
1126	dns_message_renderbegin() to have been called.
1127
1128	1224. [bug] 'rrset-order' and 'sortlist' should be additive
1129	not exclusive.
1130
1131	1223. [func] 'rrset-order' partially works 'cyclic' and 'random'
1132	are supported.
1133
1134	1220. [func] Support for APL rdata type.
1135
1136	1219. [func] Named now reports the TSIG extended error code when
1137	signature verification fails. [RT #1651]
1138
1139	1217. [func] Report locations of previous key definition when a
1140	duplicate is detected.
1141
1142	1213. [func] Report view associated with client if it is not a
1143	standard view (_default or _bind).
1144
1145	1203. [func] Report locations of previous acl and zone definitions
1146	when a duplicate is detected.
1147
1148	1202. [func] New functions: cfg_obj_line() and cfg_obj_file().
1149
1150	1192. [bug] The seconds fields in LOC records were restricted
1151	to three decimal places. More decimal places should
1152	be allowed but warned about.
1153
1154	1190. [func] Add the "rndc freeze" and "rndc unfreeze" commands.
1155	[RT #2394]
1156
1157	1187. [bug] named was incorrectly returning DNSSEC records
1158	in negative responses when the DO bit was not set.
1159
1160	1181. [func] Add the "key-directory" configuration statement,
1161	which allows the server to look for online signing
1162	keys in alternate directories.
1163
1164	1180. [func] dnssec-keygen should always generate keys with
1165	protocol 3 (DNSSEC), since it's less confusing
1166	that way.
1167
1168	1179. [func] Add SIG(0) support to nsupdate.
1169
1170	1177. [func] Report view when loading zones if it is not a
1171	standard view (_default or _bind). [RT #2270]
1172
1173	1171. [func] Added function isc_region_compare(), updated files in
1174	lib/dns to use this function instead of local one.
1175
1176	1169. [func] Identify recursive queries in the query log.
1177
1178	1163. [func] isc_time_formattimestamp() now includes the year.
1179
1180	1159. [bug] MD and MF are not permitted to be loaded by RFC1123.
1181
1182	1158. [func] Report the client's address when logging notify
1183	messages.
1184
1185	1157. [func] match-clients and match-destinations now accept
1186	keys. [RT #2045]
1187
1188	1155. [func] Recover from master files being removed from under
1189	us.
1190
1191	1153. [func] 'rndc {stop\|halt} -p' now reports the process id
1192	of the instance of named being shutdown.
1193
1194	1151. [bug] nslookup failed to check that the arguments to
1195	the port, timeout, and retry options were
1196	valid integers and in range. [RT #2099]
1197
1198	1150. [bug] named incorrectly accepted TTL values
1199	containing plus or minus signs, such as
1200	1d+1h-1s.
1201
1202	1149. [func] New function isc_parse_uint32().
1203
1204	1148. [func] 'rndc-confgen -a' now provides positive feedback.
1205
1206	1147. [func] Set IPV6_V6ONLY on IPv6 sockets if supported by
1207	the OS. listen-on-v6 { any; }; should no longer
1208	result in IPv4 queries be accepted. Similarly
1209	control { inet :: ... }; should no longer result
1210	in IPv4 connections being accepted. This can be
1211	overridden at compile time by defining
1212	ISC_ALLOW_MAPPED=1.
1213
1214	1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1215	supported by the OS by a new function
1216	isc_socket_ipv6only().
1217
1218	1145. [func] "host" no longer reports a NOERROR/NODATA response
1219	by printing nothing. [RT #2065]
1220
1221	1143. [bug] When a trusted-keys statement was present and named
1222	was built without crypto support, it would leak memory.
1223
1224	1139. [func] It is now possible to flush a given name from the
1225	cache(s) via 'rndc flushname name [view]'. [RT #2051]
1226
1227	1138. [func] It is now possible to flush a given name from the
1228	cache by calling the new function
1229	dns_cache_flushname().
1230
1231	1137. [func] It is now possible to flush a given name from the
1232	ADB by calling the new function dns_adb_flushname().
1233
1234	1135. [func] You can now override the default syslog() facility for
1235	named/lwresd at compile time. [RT #1982]
1236
1237	1132. [func] Improve UPDATE prerequisite failure diagnostic messages.
1238
1239	1128. [func] sdb drivers can now provide RR data in either text
1240	or wire format, the latter using the new functions
1241	dns_sdb_putrdata() and dns_sdb_putnamedrdata().
1242
1243	1127. [func] rndc: If the server to contact has multiple addresses,
1244	try all of them.
1245
1246	1119. [func] Added support in Win32 for NTFS file/directory ACL's
1247	for access control.
1248
1249	1115. [func] Set maximum values for cleaning-interval,
1250	heartbeat-interval, interface-interval,
1251	max-transfer-idle-in, max-transfer-idle-out,
1252	max-transfer-time-in, max-transfer-time-out,
1253	statistics-interval of 28 days and
1254	sig-validity-interval of 3660 days. [RT #2002]
1255
1256	1110. [bug] dig should only accept valid abbreviations of +options.
1257	[RT #2003]
1258
1259	1105. [port] OpenUNIX 8 enable threads by default. [RT #1970]
1260
1261	1080. [bug] BIND 8 compatibility: accept bare IP prefixes
1262	as the second element of a two-element top level
1263	sort list statement. [RT #1964]
1264
1265	1079. [bug] BIND 8 compatibility: accept bare elements at top
1266	level of sort list treating them as if they were
1267	a single element list. [RT #1963]
1268
1269	1077. [func] Do not accept further recursive clients when
1270	the total number of recursive lookups being
1271	processed exceeds max-recursive-clients, even
1272	if some of the lookups are internally generated.
1273	[RT #1915, #1938]
1274
1275	1073. [bug] The ADB cache cleaning should also be space driven.
1276	[RT #1915, #1938]
1277
1278	1067. [func] Allow quotas to be soft, isc_quota_soft().
1279
1280	1065. [func] Runtime support to select new / old style interface
1281	scanning using ioctls.
1282
1283	1060. [func] Move refresh, stub and notify UDP retry processing
1284	into dns_request.
1285
1286	1059. [func] dns_request now support will now retry UDP queries,
1287	dns_request_createvia2() and dns_request_createraw2().
1288
1289	1058. [func] Limited lifetime ticker timers are now available,
1290	isc_timertype_limited.
1291
1292	1055. [func] Version and hostname queries can now be disabled
1293	using "version none;" and "hostname none;",
1294	respectively.
1295
1296	1049. [func] "pid-file none;" will disable writing a pid file.
1297	[RT #1848]
1298
1299	1037. [bug] Negative responses whose authority section contain
1300	SOA or NS records whose owner names are not equal
1301	equal to or parents of the query name should be
1302	rejected. [RT #1862]
1303
1304	1036. [func] Silently drop requests received via multicast as
1305	long as there is no final multicast DNS standard.
1306
1307	1035. [bug] If we respond to multicast queries (which we
1308	currently do not), respond from a unicast address
1309	as specified in RFC 1123. [RT #137]
1310
1311	1034. [bug] Ignore the RD bit on multicast queries as specified
1312	in RFC 1123. [RT #137]
1313
1314	1032. [func] hostname.bind/txt/chaos now returns the name of
1315	the machine hosting the nameserver. This is useful
1316	in diagnosing problems with anycast servers.
1317
1318	1025. [bug] Don't use multicast addresses to resolve iterative
1319	queries. [RT #101]
1320
1321	1024. [port] Compilation failed on HP-UX 11.11 due to
1322	incompatible use of the SIOCGLIFCONF macro
1323	name. [RT #1831]
1324
1325	1023. [func] Accept hints without TTLs.
1326
1327	1011. [cleanup] Removed isc_dir_current().
1328
1329	1009. [port] OpenUNIX 8 support. [RT #1728]
1330
1331	1008. [port] libtool.m4, ltmain.sh from libtool-1.4.2.
1332
1333	1007. [port] config.guess, config.sub from autoconf-2.52.
1334
1335	1003. [func] Add the +retry option to dig.
1336
1337	999. [func] "rndc retransfer zone [class [view]]" added.
1338	[RT #1752]
1339
1340	998. [func] named-checkzone now has arguments to specify the
1341	chroot directory (-t) and working directory (-w).
1342	[RT #1755]
1343
1344	997. [func] Add support for RSA-SHA1 keys (RFC3110).
1345
1346	996. [func] Issue warning if the configuration filename contains
1347	the chroot path.
1348
1349	994. [func] Treat non-authoritative responses to queries for type
1350	NS as referrals even if the NS records are in the
1351	answer section, because BIND 8 servers incorrectly
1352	send them that way. This is necessary for DNSSEC
1353	validation of the NS records of a secure zone to
1354	succeed when the parent is a BIND 8 server. [RT #1706]
1355
1356	993. [func] dig: -v now reports the version.
1357
1358	991. [func] Lower UDP refresh timeout messages to level
1359	debug 1.
1360
1361	985. [func] Consider network interfaces to be up iff they have
1362	a nonzero IP address rather than based on the
1363	IFF_UP flag. [RT #1160]
1364
1365	983. [func] The server now supports generating IXFR difference
1366	sequences for non-dynamic zones by comparing zone
1367	versions, when enabled using the new config
1368	option "ixfr-from-differences". [RT #1727]
1369
1370	982. [func] If "memstatistics-file" is set in options the memory
1371	statistics will be written to it.
1372
1373	981. [func] The dnssec tools can now take multiple '-r randomfile'
1374	arguments.
1375
1376	979. [func] Incremental master file dumping. dns_master_dumpinc(),
1377	dns_master_dumptostreaminc(), dns_dumpctx_attach(),
1378	dns_dumpctx_detach(), dns_dumpctx_cancel(),
1379	dns_dumpctx_db() and dns_dumpctx_version().
1380
1381	976. [func] named-checkconf can now test load master zones
1382	(named-checkconf -z). [RT #1468]
1383
1384	970. [func] 'max-journal-size' can now be used to set a target
1385	size for a journal.
1386
1387	969. [func] dig now supports the undocumented dig 8 feature
1388	of allowing arbitrary labels, not just dotted
1389	decimal quads, with the -x option. This can be
1390	used to conveniently look up RFC2317 names as in
1391	"dig -x 10.0.0.0-127". [RT #827, #1576, #1598]
1392
1393	--- 9.2.3rc1 released ---
1394
1395	1499. [bug] isc_random need to be seeded better if arc4random()
1396	is not used.
1397
1398	1498. [port] bsdos: 5.x support.
1399
1400	1497. [protocol] dig, nslookup and host now perform nibble lookups
1401	under IP6.ARPA, use -i for IP6.INT (dig and host).
1402	lwres now uses IP6.ARPA.
1403
1404	1496. [port] test for pthread_attr_setstacksize().
1405
1406	1495. [cleanup] Replace hash functions with universal hash.
1407
1408	1494. [security] Turn on RSA BLINDING as a precaution.
1409
1410	1493. [doc] A6 and "bitstring" labels are now experimental.
1411
1412	1492. [cleanup] Preserve rwlock quota context when upgrading /
1413	downgrading. [RT #5599]
1414
1415	1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
1416	lines. [RT #6206]
1417
1418	1490. [bug] Accept reading state as well as working state in
1419	ns_client_next(). [RT #6813]
1420
1421	1489. [compat] Treat 'allow-update' on slave zones as a warning.
1422	[RT #3469]
1423
1424	1488. [bug] Don't override trust levels for glue addresses.
1425	[RT #5764]
1426
1427	1487. [bug] A REQUIRE() failure could be triggered if a zone was
1428	queued for transfer and the zone was then removed.
1429	[RT #6189]
1430
1431	1486. [bug] isc_print_snprintf() '%%' consumed one too many format
1432	characters. [RT# 8230]
1433
1434	1485. [bug] gen failed to handle high type values. [RT #6225]
1435
1436	1484. [bug] The number of records reported after a AXFR was wrong.
1437	[RT #6229]
1438
1439	1483. [bug] dig axfr failed if the message id in the answer failed
1440	to match that in the request. Only the id in the first
1441	message is required to match. [RT #8138]
1442
1443	1482. [bug] named could fail to start if the kernel supports
1444	IPv6 but no interfaces are configured. Similarly
1445	for IPv4. [RT #6229]
1446
1447	1481. [bug] Refresh and stub queries failed to use masters keys
1448	if specified. [RT #7391]
1449
1450	1480. [bug] Provide replay protection for rndc commands. Full
1451	replay protection requires both rndc and named to
1452	be updated. Partial replay protection (limited
1453	exposure after restart) is provided if just named
1454	is updated.
1455
1456	1479. [bug] cfg_create_tuple() failed to handle out of
1457	memory cleanup. parse_list() would leak memory
1458	on syntax errors.
1459
1460	1478. [port] ifconfig.sh didn't account for other virtual
1461	interfaces. It now takes a optional argument
1462	to specify the first interface number. [RT #3907]
1463
1464	1477. [bug] memory leak using stub zones and TSIG.
1465
1466	1476. [port] win32: port unreachables were blocking further i/o
1467	on sockets (Windows 2000 SP2 and later).
1468
1469	1473. [bug] create_map() and create_string() failed to handle out
1470	of memory cleanup. [RT #6813]
1471
1472	1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
1473
1474	1471. [bug] libbind: updated to BIND 8.4.0.
1475
1476	1470. [bug] Incorrect length passed to snprintf. [RT #5966]
1477
1478	1466. [bug] lwresd configuration errors resulted in memory
1479	and lock leaks. [RT #5228]
1480
1481	1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
1482	failed to check that trailing bits were zero allowing
1483	some invalid base64 strings to be accepted. [RT #5397]
1484
1485	1464. [bug] Preserve "out of zone" data for outgoing zone
1486	transfers. [RT #5192]
1487
1488	1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
1489	NXT bit maps. [RT #5577]
1490
1491	1462. [bug] parse_sizeval() failed to check the token type.
1492	[RT #5586]
1493
1494	1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
1495
1496	1460. [bug] inet_pton() failed to reject certain malformed
1497	IPv6 literals.
1498
1499	1459. [bug] win32: we were leaking a bits in the exception
1500	fd_set resulting in "Socket operation on non-socket"
1501	errors from select(). [RT #2966]
1502
1503	1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
1504
1505	1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
1506
1507	1452. [bug] Bad #ifdef, ISC_RFC2335 -> ISC_RFC2535.
1508
1509	1451. [bug] rndc-confgen didn't exit with a error code for all
1510	failures. [RT #5209]
1511
1512	1450. [bug] Fetching expired glue failed under certain
1513	circumstances. [RT #5124]
1514
1515	1449. [bug] query_addbestns() didn't handle running out of memory
1516	gracefully.
1517
1518	1448. [bug] Handle empty wildcards labels.
1519
1520	1447. [bug] We were casting (unsigned int) to and from (void *).
1521	rdataset->private4 is now rdataset->privateuint4
1522	to reflect a type change.
1523
1524	1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
1525	been replaced with DNS_ADBFIND_STARTATZONE which
1526	causes the search to start using the closest zone.
1527
1528	1439. [bug] Named could return NOERROR with certain NOTIFY
1529	failures. Return NOTAUTH if the NOTIFY zone is
1530	not being served.
1531
1532	1435. [bug] zmgr_resume_xfrs() was being called read locked
1533	rather than write locked. zmgr_resume_xfrs()
1534	was not being called if the zone was being
1535	shutdown.
1536
1537	1437. [bug] Leave space for stdio to work in. [RT #5033]
1538
1539	1434. [bug] "rndc reconfig" failed to initiate the initial
1540	zone transfer of new slave zones.
1541
1542	1431. [bug] isc_print_snprintf() "%s" with precision could walk off
1543	end of argument. [RT #5191]
1544
1545	1429. [bug] Prevent the cache getting locked to old servers.
1546
1547	1424. [bug] EDNS version not being correctly printed.
1548
1549	1423. [contrib] queryperf: added A6 and SRV.
1550
1551	1420. [port] solaris: work around gcc optimizer bug.
1552
1553	1419. [port] openbsd: use /dev/arandom. [RT #4950]
1554
1555	1418. [bug] 'rndc reconfig' did not cause new slaves to load.
1556
1557	1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
1558	[RT #4715]
1559
1560	1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
1561
1562	1408. [bug] "make distclean" was not complete. [RT #4700]
1563
1564	1407. [bug] lfsr incorrectly implements the shift register.
1565	[RT #4617]
1566
1567	1406. [bug] dispatch initializes one of the LFSR's with a incorrect
1568	polynomial. [RT #4617]
1569
1570	1405. [func] Use arc4random() if available.
1571
1572	1401. [bug] adb wasn't clearing state when the timer expired.
1573
1574	1399. [bug] Use serial number arithmetic when testing SIG
1575	timestamps. [RT #4268]
1576
1577	1397. [bug] J.ROOT-SERVERS.NET is now 192.58.128.30.
1578
1579	1389. [bug] named could fail to rotate long log files. [RT #3666]
1580
1581	1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
1582	defining HAVE_IFLIST_SYSCTL. [RT #3770]
1583
1584	1387. [bug] named could crash due to an access to invalid memory
1585	space (which caused an assertion failure) in
1586	incremental cleaning. [RT #3588]
1587
1588	1385. [bug] Setting serial-query-rate to 10 would trigger a
1589	REQUIRE failure.
1590
1591	1384. [bug] host was incompatible with BIND 8 in its exit code and
1592	in the output with the -l option. [RT #3536]
1593
1594	1373. [bug] Recovery from expired glue failed under certain
1595	circumstances.
1596
1597	1372. [bug] named crashes with an assertion failure on exit when
1598	sharing the same port for listening and querying, and
1599	changing listening addresses several times. [RT# 3509]
1600
1601	1370. [bug] dig '+[no]recurse' was incorrectly documented.
1602
1603	1369. [bug] Adding an NS record as the lexicographically last
1604	record in a secure zone didn't work.
1605
1606	1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
1607
1608	1348. [port] win32: Rewrote code to use I/O Completion Ports
1609	in socket.c and eliminating a host of socket
1610	errors. Performance is enhanced.
1611
1612	1333. [contrib] queryperf now reports a summary of returned
1613	rcodes (-c), rcodes are printed in mnemonic form (-v).
1614
1615	1299. [bug] Set AI_ADDRCONFIG when looking up addresses
1616	via getaddrinfo() (affects dig, host, nslookup, rndc
1617	and nsupdate).
1618
1619	1199. [doc] ARM reference to RFC 2157 should have been RFC 1918.
1620	[RT #2436]
1621
1622	1122. [tuning] Resolution timeout reduced from 90 to 30 seconds.
1623	[RT #2046]
1624
1625	992. [doc] dig: ~/.digrc is now documented.
1626
1627	--- 9.2.2 released ---
1628
1629	1428. [port] hpux: temporary work around of hpux 11.11 interface
1630	scanning.
1631
1632	1427. [bug] Race condition in adb with threaded build.
1633
1634	1426. [cleanup] Disable RFC2535 style DNSSEC. This is incompatible
1635	with the forthcoming DS style DNSSEC.
1636
1637	1425. [port] linux/libbind: define __USE_MISC when testing *_r()
1638	function prototypes in netdb.h. [RT #4921]
1639
1640	1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
1641	have a working implementation. [RT #4079]
1642
1643	1382. [bug] make install failed with --enable-libbind. [RT #3656]
1644
1645	1381. [bug] named failed to correctly process answers that
1646	contained DNAME records where the resulting CNAME
1647	resulted in a negative answer.
1648
1649	--- 9.2.2rc1 released ---
1650
1651	1360. [bug] --enable-libbind would fail when not built in the
1652	source tree for certain OS's.
1653
1654	1359. [security] Support patches OpenSSL libraries.
1655	http://www.cert.org/advisories/CA-2002-23.html
1656
1657	1358. [bug] It was possible to trigger a INSIST when debugging
1658	large dynamic updates. [RT #3390]
1659
1660	1357. [bug] nsupdate was extremely wasteful of memory.
1661
1662	1356. [tuning] Reduce the number of events / quantum for zone tasks.
1663
1664	1354. [doc] lwres man pages had illegal nroff.
1665
1666	1353. [contrib] sdb/ldap to version 0.9.
1667
1668	1352. [bug] dig, host, nslookup when falling back to TCP use the
1669	current search entry (if any). [RT #3374]
1670
1671	1351. [bug] lwres_getipnodebyname() returned the wrong name
1672	when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
1673	was set.
1674
1675	1350. [bug] dns_name_fromtext() failed to handle too many labels
1676	gracefully.
1677
1678	1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
1679	http://www.cert.org/advisories/CA-2002-23.html
1680
1681	1346. [bug] Win32: select timeout in socket.c was too small
1682	as value given was meant to be milliseconds and
1683	timeval structure requires microseconds. This
1684	caused high CPU loads with a compute bound loop.
1685	[RT #3358]
1686
1687	1345. [port] Use a explicit -Wformat with gcc. Not all versions
1688	include it in -Wall.
1689
1690	1340. [bug] Delay and spread out the startup refresh load.
1691
1692	1335. [bug] When performing a nonexistence proof, the validator
1693	should discard parent NXTs from higher in the DNS.
1694
1695	1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1696	need to be suppressed.
1697
1698	1330. [bug] When processing events (non-threaded) only allow
1699	the task one chance to use to use its quantum.
1700
1701	1327. [bug] The validator would incorrectly mark data as insecure
1702	when seeing a bogus signature before a correct
1703	signature.
1704
1705	1326. [bug] DNAME/CNAME signatures were not being cached when
1706	validation was not being performed. [RT #3284]
1707
1708	1325. [bug] If the tcpquota was exhausted it was possible to
1709	to trigger a INSIST() failure.
1710
1711	1324. [port] darwin: ifconfig.sh now supports darwin.
1712
1713	1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1714
1715	1320. [doc] query-source-v6 was missing from options section.
1716	[RT #3218]
1717
1718	1319. [func] libbind: log attempts to exploit #1318.
1719
1720	1318. [bug] libbind: Remote buffer overrun.
1721
1722	1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
1723	element name.
1724
1725	1316. [bug] libbind: gethostans() could get out of sync parsing
1726	the response if there was a very long CNAME chain.
1727
1728	1315. [bug] Options should apply to the internal _bind view.
1729
1730	1314. [port] Handle ECONNRESET from sendmsg() [unix].
1731
1732	1311. [bug] lwres_getrrsetbyname leaked memory. [RT #3159]
1733
1734	1310. [bug] 'rndc stop' failed to cause zones to be flushed
1735	sometimes. [RT #3157]
1736
1737	1307. [bug] nsupdate: allow white space base64 key data.
1738
1739	1306. [bug] Badly encoded LOC record when the size, horizontal
1740	precision or vertical precision was 0.1m.
1741
1742	1305. [bug] Document that internal zones are included in the
1743	rndc status results.
1744
1745	1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1746	could be left with a trailing "\" after configure
1747	has been run.
1748
1749	1297. [port] linux: make handling EINVAL from socket() no longer
1750	conditional on #ifdef LINUX.
1751
1752	1296. [bug] isc_log_closefilelogs() needed to lock the log
1753	context.
1754
1755	1295. [bug] isc_log_setdebuglevel() needed to lock the log
1756	context.
1757
1758	1294. [func] libbind: no longer attempts bit string labels for
1759	IPv6 reverse resolution. Try IP6.ARPA then IP6.INT
1760	for nibble style resolution.
1761
1762	1289. [port] See if -ldl is required for OpenSSL? [RT #2672]
1763
1764	1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1765	reflect written requirements.
1766
1767	1287. [bug] REQUIRE that DNS_DBADD_MERGE only be set when adding
1768	a rdataset to a zone db in the rbtdb implementation of
1769	addrdataset.
1770
1771	1286. [bug] dns_name_downcase() enforce requirement that
1772	target != NULL or name->buffer != NULL.
1773
1774	1284. [bug] The RTT estimate on unused servers was not aged.
1775	[RT #2569]
1776
1777	1282. [port] libbind: hpux 11.11 interface scanning.
1778
1779	1280. [bug] libbind: escape '(' and ')' when converting to
1780	presentation form.
1781
1782	1279. [port] Darwin uses (unsigned long) for size_t. [RT #2590]
1783
1784	1276. [bug] libbind: const pointer conflicts in res_debug.c.
1785
1786	1275. [port] libbind: hpux: treat all hpux systems as BIG_ENDIAN.
1787
1788	1274. [bug] Memory leak in lwres_gnbarequest_parse().
1789
1790	1273. [port] libbind: solaris: 64 bit binary compatibility.
1791
1792	1272. [contrib] Berkeley DB 4.0 sdb implementation from
1793	Nuno Miguel Rodrigues <nmr@co.sapo.pt>.
1794
1795	1270. [bug] Check that system inet_pton() and inet_ntop() support
1796	AF_INET6.
1797
1798	1269. [port] Openserver: ifconfig.sh support.
1799
1800	1268. [port] Openserver: the value FD_SETSIZE depends on whether
1801	<sys/param.h> is included or not. Be consistent.
1802
1803	1266. [bug] ISC_LINK_INIT, ISC_LINK_UNLINK, ISC_LIST_DEQUEUE,
1804	__ISC_LINK_UNLINKUNSAFE and __ISC_LIST_DEQUEUEUNSAFE
1805	are not C++ compatible, use *_TYPE versions instead.
1806
1807	1265. [bug] libbind: LINK_INIT and UNLINK were not compatible with
1808	C++, use LINK_INIT_TYPE and UNLINK_TYPE instead.
1809
1810	1263. [bug] Reference after free error if dns_dispatchmgr_create()
1811	failed.
1812
1813	1262. [bug] ns_server_destroy() failed to set *serverp to NULL.
1814
1815	1261. [func] libbind: ns_sign2() and ns_sign_tcp() now provide
1816	support for compressed TSIG owner names.
1817
1818	1260. [func] libbind: res_update can now update IPv6 servers,
1819	new function res_findzonecut2().
1820
1821	1259. [bug] libbind: get_salen() IPv6 support was broken for OSs
1822	w/o sa_len.
1823
1824	1258. [bug] libbind: res_nametotype() and res_nametoclass() were
1825	broken.
1826
1827	1257. [bug] Failure to write pid-file should not be fatal on
1828	reload. [RT #2861]
1829
1830	1256. [contrib] 'queryperf' now has EDNS (-e) + DNSSEC DO (-D) support.
1831
1832	1255. [bug] When verifying that an NXT proves nonexistence, check
1833	the rcode of the message and only do the matching NXT
1834	check. That is, for NXDOMAIN responses, check that
1835	the name is in the range between the NXT owner and
1836	next name, and for NOERROR NODATA responses, check
1837	that the type is not present in the NXT bitmap.
1838
1839	1253. [bug] The dnssec system test failed to remove the correct
1840	files.
1841
1842	1252. [bug] Dig, host and nslookup were not checking the address
1843	the answer was coming from against the address it was
1844	sent to. [RT# 2692]
1845
1846	1248. [bug] DESTDIR was not being propagated between makes.
1847
1848	1245. [bug] Treat ENOBUFS, ENOMEM and ENFILE as soft errors for
1849	accept().
1850
1851	1242. [bug] named-checkzone failed if a journal existed. [RT #2657]
1852
1853	1241. [bug] Drop received UDP messages with a zero source port
1854	as these are invariably forged. [RT #2621]
1855
1856	1209. [bug] Dig, host, nslookup were not checking the message ids
1857	on the responses. [RT #2454]
1858
1859	1097. [func] libbind: RES_PRF_TRUNC for dig.
1860
1861	1096. [func] libbind: "DNSSEC OK" (DO) support.
1862
1863	1095. [func] libbind: resolver option: no-tld-query. disables
1864	trying unqualified as a tld. no_tld_query is also
1865	supported for FreeBSD compatibility.
1866
1867	1094. [func] libbind: add support gcc's format string checking.
1868
1869	1089. [func] libbind: inet_{cidr,net}_{pton,ntop}() now have IPv6
1870	support.
1871
1872	--- 9.2.1 released ---
1873
1874	1251. [port] win32: a make file contained absolute version specific
1875	references.
1876
1877	1249. [bug] Missing masters clause was not handled gracefully.
1878	[RT #2703]
1879
1880	1244. [bug] Receiving a TCP message from a blackhole address would
1881	prevent further messages being received over that
1882	interface.
1883
1884	1178. [bug] Follow and cache (if appropriate) A6 and other
1885	data chains to completion in the additional section.
1886
1887	--- 9.2.1rc2 released ---
1888
1889	1240. [bug] It was possible to leak zone references by
1890	specifying an incorrect zone to rndc.
1891
1892	1239. [bug] Under certain circumstances named could continue to
1893	use a name after it had been freed triggering
1894	INSIST() failures. [RT #2614]
1895
1896	1238. [bug] It is possible to lockup the server when shutting down
1897	if notifies were being processed. [RT #2591]
1898
1899	1237. [bug] nslookup: "set q=type" failed.
1900
1901	1236. [bug] dns_rdata{class,type}_fromtext() didn't handle non
1902	NULL terminated text regions. [RT #2588]
1903
1904	1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1905
1906	1231. [port] HPUX 11.11 recvmsg() can return spurious EADDRNOTAVAIL.
1907
1908	1230. [bug] isccc_cc_isreply() and isccc_cc_isack() were broken.
1909
1910	1229. [bug] named would crash if it received a TSIG signed
1911	query as part of an AXFR response. [RT #2570]
1912
1913	1228. [bug] 'make install' did not depend on 'make all'. [RT #2559]
1914
1915	1227. [bug] dns_lex_getmastertoken() now returns ISC_R_BADNUMBER
1916	if a number was expected and some other token was
1917	found. [RT#2532]
1918
1919	1222. [bug] Specifying 'port *' did not always result in a system
1920	selected (non-reserved) port being used. [RT #2537]
1921
1922	1221. [bug] Zone types 'master', 'slave' and 'stub' were not being
1923	compared case insensitively. [RT #2542]
1924
1925	1218. [bug] Named incorrectly returned SERVFAIL rather than
1926	NOTAUTH when there was a TSIG BADTIME error. [RT #2519]
1927
1928	1216. [bug] Multiple server clauses for the same server were not
1929	reported. [RT #2514]
1930
1931	1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
1932
1933	1214. [bug] Win32: isc_file_renameunique() could leave zero length
1934	files behind.
1935
1936	1212. [port] libbind: 64k answer buffers were causing stack space
1937	to be exceeded for certain OS. Use heap space instead.
1938
1939	1211. [bug] dns_name_fromtext() incorrectly handled certain
1940	valid octal bitlabels. [RT #2483]
1941
1942	1210. [bug] libbind: getnameinfo() failed to lookup IPv4 mapped /
1943	compatible addresses. [RT #2461]
1944
1945	1208. [bug] dns_master_load*() failed to log a error message if
1946	an error was detected when parsing the ownername of
1947	a record. [RT #2448]
1948
1949	--- 9.2.1rc1 released ---
1950
1951	1207. [bug] libbind: getaddrinfo() could call freeaddrinfo() with
1952	an invalid pointer.
1953
1954	1206. [bug] SERVFAIL and NOTIMP responses to an EDNS query should
1955	trigger a non-EDNS retry.
1956
1957	1205. [bug] OPT, TSIG and TKEY cannot be used to set the "class"
1958	of the message. [RT #2449]
1959
1960	1204. [bug] libbind: res_nupdate() failed to update the name
1961	server addresses before sending the update.
1962
1963	1201. [bug] Require that if 'callbacks' is passed to
1964	dns_rdata_fromtext(), callbacks->error and
1965	callbacks->warn are initialized.
1966
1967	1200. [bug] Log 'errno' that we are unable to convert to
1968	isc_result_t. [RT #2404]
1969
1970	1198. [bug] OPT printing style was not consistent with the way the
1971	header fields are printed. The DO bit was not reported
1972	if set. Report if any of the MBZ bits are set.
1973
1974	1197. [bug] Attempts to define the same acl multiple times were not
1975	detected.
1976
1977	1196. [contrib] update mdnkit to 2.2.3.
1978
1979	1195. [bug] Attempts to redefine builtin acls should be caught.
1980	[RT #2403]
1981
1982	1194. [bug] Not all duplicate zone definitions were being detected
1983	at the named.conf checking stage. [RT #2431]
1984
1985	1193. [bug] Best effort parsing didn't handle packet truncation.
1986
1987	1191. [bug] A dynamic update removing the last non-apex name in
1988	a secure zone would fail. [RT #2399]
1989
1990	1189. [bug] On some systems, malloc(0) returns NULL, which
1991	could cause the caller to report an out of memory
1992	error. [RT #2398]
1993
1994	1188. [bug] Dynamic updates of a signed zone would fail if
1995	some of the zone private keys were unavailable.
1996
1997	1186. [bug] isc_hex_tobuffer(,,length = 0) failed to unget the
1998	EOL token when reading to end of line.
1999
2000	1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
2001	unless RES_INIT is set when calling res_*init().
2002
2003	1184. [bug] libbind: call res_ndestroy() if RES_INIT is set
2004	when res_*init() is called.
2005
2006	1183. [bug] Handle ENOSR error when writing to the internal
2007	control pipe. [RT #2395]
2008
2009	1182. [bug] The server could throw an assertion failure when
2010	constructing a negative response packet.
2011
2012	1176. [doc] Document that allow-v6-synthesis is only performed
2013	for clients that are supplied recursive service.
2014	[RT #2260]
2015
2016	1175. [bug] named-checkzone failed to call dns_result_register()
2017	at startup which could result in runtime
2018	exceptions when printing "out of memory" errors.
2019	[RT #2335]
2020
2021	1174. [bug] Win32: add WSAECONNRESET to the expected errors
2022	from connect(). [RT #2308]
2023
2024	1173. [bug] Potential memory leaks in isc_log_create() and
2025	isc_log_settag(). [RT #2336]
2026
2027	1172. [doc] Add CERT, GPOS, KX, NAPTR, NSAP, PX and TXT to
2028	table of RR types in ARM.
2029
2030	1170. [bug] Don't attempt to print the token when a I/O error
2031	occurs when parsing named.conf. [RT #2275]
2032
2033	1168. [bug] Empty also-notify clauses were not handled. [RT #2309]
2034
2035	1167. [contrib] nslint-2.1a3 (from author).
2036
2037	1166. [bug] "Not Implemented" should be reported as NOTIMP,
2038	not NOTIMPL. [RT #2281]
2039
2040	1165. [bug] We were rejecting notify-source{-v6} in zone clauses.
2041
2042	1164. [bug] Empty masters clauses in slave / stub zones were not
2043	handled gracefully. [RT #2262]
2044
2045	1162. [bug] The allow-notify option was not accepted in slave
2046	zone statements.
2047
2048	1161. [bug] named-checkzone looped on unbalanced brackets.
2049	[RT #2248]
2050
2051	1160. [bug] Generating Diffie-Hellman keys longer than 1024
2052	bits could fail. [RT #2241]
2053
2054	1156. [port] The configure test for strsep() incorrectly
2055	succeeded on certain patched versions of
2056	AIX 4.3.3. [RT #2190]
2057
2058	1154. [bug] Don't attempt to obtain the netmask of a interface
2059	if there is no address configured. [RT #2176]
2060
2061	1152. [bug] libbind: read buffer overflows.
2062
2063	1144. [bug] rndc-confgen would crash if both the -a and -t
2064	options were specified. [RT #2159]
2065
2066	1142. [bug] dnssec-signzone would fail to delete temporary files
2067	in some failure cases. [RT #2144]
2068
2069	1141. [bug] When named rejected a control message, it would
2070	leak a file descriptor and memory. It would also
2071	fail to respond, causing rndc to hang.
2072	[RT #2139, #2164]
2073
2074	1140. [bug] rndc-confgen did not accept IPv6 addresses as arguments
2075	to the -s option. [RT #2138]
2076
2077	1136. [bug] CNAME records synthesized from DNAMEs did not
2078	have a TTL of zero as required by RFC2672.
2079	[RT #2129]
2080
2081	1125. [bug] rndc: -k option was missing from usage message.
2082	[RT #2057]
2083
2084	1124. [doc] dig: +[no]dnssec, +[no]besteffort and +[no]fail
2085	are now documented. [RT #2052]
2086
2087	1123. [bug] dig +[no]fail did not match description. [RT #2052]
2088
2089	1109. [bug] nsupdate accepted illegal ttl values.
2090
2091	1108. [bug] On Win32, rndc was hanging when named was not running
2092	due to failure to select for exceptional conditions
2093	in select(). [RT #1870]
2094
2095	1081. [bug] Multicast queries were incorrectly identified
2096	based on the source address, not the destination
2097	address.
2098
2099	1072. [bug] The TCP client quota could be exceeded when
2100	recursion occurred. [RT #1937]
2101
2102	1071. [bug] Sockets listening for TCP DNS connections
2103	specified an excessive listen backlog. [RT #1937]
2104
2105	1070. [bug] Copy DNSSEC OK (DO) to response as specified by
2106	draft-ietf-dnsext-dnssec-okbit-03.txt.
2107
2108	1014. [bug] Some queries would cause statistics counters to
2109	increment more than once or not at all. [RT #1321]
2110
2111	1012. [bug] The -p option to named did not behave as documented.
2112
2113	988. [bug] 'additional-from-auth no;' did not work reliably
2114	in the case of queries answered from the cache.
2115	[RT #1436]
2116
2117	995. [bug] dig, host, nslookup: using a raw IPv6 address as a
2118	target address should be fatal on a IPv4 only system.
2119
2120	--- 9.2.0 released ---
2121
2122	1134. [bug] Multi-threaded servers could deadlock in ferror()
2123	when reloading zone files. [RT #1951, #1998]
2124
2125	1133. [bug] IN6_IS_ADDR_LOOPBACK was not portably defined on
2126	platforms without IN6_IS_ADDR_LOOPBACK. [RT #2106]
2127
2128	--- 9.2.0rc10 released ---
2129
2130	1131. [bug] The match-destinations view option did not work with
2131	IPv6 destinations. [RT #2073, #2074]
2132
2133	1130. [bug] Log messages reporting an out-of-range serial number
2134	did not include the out-of-range number but the
2135	following token. [RT #2076]
2136
2137	1129. [bug] Multi-threaded servers could crash under heavy
2138	resolution load due to a race condition. [RT #2018]
2139
2140	1126. [bug] The server could access a freed event if shut
2141	down while a client start event was pending
2142	delivery. [RT #2061]
2143
2144	1121. [bug] The server could attempt to access a NULL zone
2145	table if shut down while resolving.
2146	[RT #1587, #2054]
2147
2148	1120. [bug] Errors in options were not fatal. [RT #2002]
2149
2150	1118. [bug] On multi-threaded servers, a race condition
2151	could cause an assertion failure in resolver.c
2152	during resolver shutdown. [RT #2029]
2153
2154	1117. [port] The configure check for in6addr_loopback incorrectly
2155	succeeded on AIX 4.3 when compiling with -O2
2156	because the test code was optimized away.
2157	[RT #2016]
2158
2159	1116. [bug] Setting transfers in a server clause, transfers-in,
2160	or transfers-per-ns to a value greater than
2161	2147483647 disabled transfers. [RT #2002]
2162
2163	1114. [port] Ignore more accept() errors. [RT #2021]
2164
2165	1113. [bug] The allow-update-forwarding option was ignored
2166	when specified in a view. [RT #2014]
2167
2168	1111. [bug] Multi-threaded servers could deadlock processing
2169	recursive queries due to a locking hierarchy
2170	violation in adb.c. [RT #2017]
2171
2172	--- 9.2.0rc9 released ---
2173
2174	1107. [bug] nsupdate could catch an assertion failure if an
2175	invalid domain name was given as the argument to
2176	the "zone" command.
2177
2178	1106. [bug] After seeing an out of range TTL, nsupdate would
2179	treat all TTLs as out of range. [RT #2001]
2180
2181	1104. [bug] Invalid arguments to the transfer-format option
2182	could cause an assertion failure. [RT #1995]
2183
2184	1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
2185
2186	1102. [doc] Note that query logging is enabled by directing the
2187	queries category to a channel.
2188
2189	1101. [bug] Array bounds read error in lwres_gai_strerror.
2190
2191	1100. [bug] libbind: DNSSEC key ids were computed incorrectly.
2192
2193	1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
2194	compile time errors.
2195
2196	1098. [bug] libbind: HMAC-MD5 key files are now mode 0600.
2197
2198	1093. [doc] libbind: miscellaneous nroff fixes.
2199
2200	1092. [bug] libbind: getby() failed to check if res_init() had
2201	been called.
2202
2203	1091. [bug] libbind: misplaced va_end().
2204
2205	1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
2206	the amount of memory consumed resulting in garbage
2207	address being returned. Alignment calculations were
2208	wasting space. We weren't suppressing duplicate
2209	addresses.
2210
2211	1088. [port] libbind: MPE/iX C.70 (incomplete)
2212
2213	1087. [bug] libbind: struct __res_state too large on 64 bit arch.
2214
2215	1086. [port] libbind: sunos: old sprintf.
2216
2217	1085. [port] libbind: solaris: sys_nerr and sys_errlist do not
2218	exist when compiling in 64 bit mode.
2219
2220	1084. [cleanup] libbind: gai_strerror() rewritten.
2221
2222	1083. [bug] The default control channel listened on the
2223	wildcard address, not the loopback as documented.
2224	[RT #1975]
2225
2226	1082. [bug] The -g option to named incorrectly caused logging
2227	to be sent to syslog in addition to stderr.
2228	[RT #1974]
2229
2230	1078. [bug] We failed to correct bad tv_usec values in one case.
2231	[RT #1966]
2232
2233	1076. [bug] A badly defined global key could trigger an assertion
2234	on load/reload if views were used. [RT #1947]
2235
2236	1075. [bug] Out-of-range network prefix lengths were not
2237	reported. [RT #1954]
2238
2239	1074. [bug] Running out of memory in dump_rdataset() could
2240	cause an assertion failure. [RT #1946]
2241
2242	--- 9.2.0rc8 released ---
2243
2244	1068. [bug] errno could be overwritten by catgets(). [RT #1921]
2245
2246	1066. [bug] Provide a thread safe wrapper for strerror().
2247	[RT #1689]
2248
2249	1064. [bug] Do not shut down active network interfaces if we
2250	are unable to scan the interface list. [RT #1921]
2251
2252	1063. [bug] libbind: "make install" was failing on IRIX.
2253	[RT #1919]
2254
2255	1062. [bug] If the control channel listener socket was shut
2256	down before server exit, the listener object could
2257	be freed twice. [RT #1916]
2258
2259	1061. [bug] If periodic cache cleaning happened to start
2260	while cleaning due to reaching the configured
2261	maximum cache size was in progress, the server
2262	could catch an assertion failure. [RT #1912]
2263
2264	1057. [bug] Reloading the server after adding a "file" clause
2265	to a zone statement could cause the server to
2266	crash due to a typo in change 1016.
2267
2268	1056. [bug] Rndc could catch an assertion failure on SIGINT due
2269	to an uninitialized variable. [RT #1908]
2270
2271	--- 9.2.0rc7 released ---
2272
2273	1054. [bug] On Win32, cfg_categories and cfg_modules need to be
2274	exported from the libisccfg DLL.
2275
2276	1053. [bug] Dig did not increase its timeout when receiving
2277	AXFRs unless the +time option was used. [RT #1904]
2278
2279	1052. [bug] Journals were not being created in binary mode
2280	resulting in "journal format not recognized" error
2281	under Win32. [RT #1889]
2282
2283	1051. [bug] Do not ignore a network interface completely just
2284	because it has a noncontiguous netmask. Instead,
2285	omit it from the localnets ACL and issue a warning.
2286	[RT #1891]
2287
2288	1050. [bug] Log messages reporting malformed IP addresses in
2289	address lists such as that of the forwarders option
2290	failed to include the correct error code, file
2291	name, and line number. [RT #1890]
2292
2293	1048. [bug] Servers built with -DISC_MEM_USE_INTERNAL_MALLOC=1
2294	didn't work.
2295
2296	1047. [bug] named was incorrectly refusing all requests signed
2297	with a TSIG key derived from an unsigned TKEY
2298	negotiation with a NOERROR response. [RT #1886]
2299
2300	1046. [bug] The help message for the --with-openssl configure
2301	option was inaccurate. [RT #1880]
2302
2303	1045. [bug] It was possible to skip saving glue for a nameserver
2304	for a stub zone.
2305
2306	1044. [bug] Specifying allow-transfer, notify-source, or
2307	notify-source-v6 in a stub zone was not treated
2308	as an error.
2309
2310	1043. [bug] Specifying a transfer-source or transfer-source-v6
2311	option in the zone statement for a master zone was
2312	not treated as an error. [RT #1876]
2313
2314	1042. [bug] The "config" logging category did not work properly.
2315	[RT #1873]
2316
2317	1041. [bug] Dig/host/nslookup could catch an assertion failure
2318	on SIGINT due to an uninitialized variable. [RT #1867]
2319
2320	1040. [bug] Multiple listen-on-v6 options with different ports
2321	were not accepted. [RT #1875]
2322
2323	1039. [bug] Negative responses with CNAMEs in the answer section
2324	were cached incorrectly. [RT #1862]
2325
2326	1038. [bug] In servers configured with a tkey-domain option,
2327	TKEY queries with an owner name other than the root
2328	could cause an assertion failure. [RT #1866, #1869]
2329
2330	1033. [bug] Always respond to requests with an unsupported opcode
2331	with NOTIMP, even if we don't have a matching view
2332	or cannot determine the class.
2333
2334	--- 9.2.0rc6 released ---
2335
2336	1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
2337	[RT #1858]
2338
2339	1030. [bug] On systems with no resolv.conf file, nsupdate
2340	exited with an error rather than defaulting
2341	to using the loopback address. [RT #1836]
2342
2343	1029. [bug] Some named.conf errors did not cause the loading
2344	of the configuration file to return a failure
2345	status even though they were logged. [RT #1847]
2346
2347	1028. [bug] On Win32, dig/host/nslookup looked for resolv.conf
2348	in the wrong directory. [RT #1833]
2349
2350	1027. [bug] RRs having the reserved type 0 should be rejected.
2351	[RT #1471]
2352
2353	1026. [port] Recognize OpenUNIX 8 in config.guess. [RT #1830]
2354
2355	1022. [bug] Don't report empty root hints as "extra data".
2356	[RT #1802]
2357
2358	--- 9.2.0rc5 released ---
2359
2360	1021. [bug] On Win32, log message timestamps were one month
2361	later than they should have been, and the server
2362	would exhibit unspecified behavior in December.
2363
2364	1020. [bug] IXFR log messages did not distinguish between
2365	true IXFRs, AXFR-style IXFRs, and mere version
2366	polls. [RT #1811]
2367
2368	1019. [bug] The value of the lame-ttl option was limited to 18000
2369	seconds, not 1800 seconds as documented. [RT #1803]
2370
2371	1018. [bug] The default log channel was not always initialized
2372	correctly. [RT #1813]
2373
2374	1017. [bug] When specifying TSIG keys to dig and nsupdate using
2375	the -k option, they must be HMAC-MD5 keys. [RT #1810]
2376
2377	1016. [bug] Slave zones with no backup file were re-transferred
2378	on every server reload.
2379
2380	1015. [bug] Log channels that had a "versions" option but no
2381	"size" option failed to create numbered log
2382	files. [RT #1783]
2383
2384	--- 9.2.0rc4 released ---
2385
2386	1013. [bug] It was possible to cancel a query twice when marking
2387	a server as bogus or by having a blackhole acl.
2388	[RT #1776]
2389
2390	1010. [bug] The server could attempt to execute a command channel
2391	command after initiating server shutdown, causing
2392	an assertion failure. [RT #1766]
2393
2394	1006. [bug] If a KEY RR was found missing during DNSSEC validation,
2395	an assertion failure could subsequently be triggered
2396	in the resolver. [RT #1763]
2397
2398	1005. [bug] Don't copy nonzero RCODEs from request to response.
2399	[RT #1765]
2400
2401	1004. [port] Deal with recvfrom() returning EHOSTDOWN. [RT #1770]
2402
2403	1002. [bug] When reporting an unknown class name in named.conf,
2404	including the file name and line number. [RT #1759]
2405
2406	1001. [bug] win32 socket code doio_recv was not catching a
2407	WSACONNRESET error when a client was timing out
2408	the request and closing its socket. [RT #1745]
2409
2410	1000. [bug] BIND 8 compatibility: accept "HESIOD" as an alias
2411	for class "HS". [RT #1759]
2412
2413	--- 9.2.0rc3 released ---
2414
2415	990. [bug] The rndc-confgen man page was not installed.
2416
2417	989. [bug] Report filename if $INCLUDE fails for file related
2418	errors. [RT #1736]
2419
2420	987. [bug] "dig -help" didn't show "+[no]stats".
2421
2422	986. [bug] "dig +noall" failed to clear stats and command
2423	printing.
2424
2425	984. [bug] Multi-threading should be enabled by default on
2426	Solaris 2.7 and newer, but it wasn't.
2427
2428	--- 9.2.0rc2 released ---
2429
2430	980. [bug] Incoming zone transfers restarting after an error
2431	could trigger an assertion failure. [RT #1692]
2432
2433	978. [bug] dns_db_attachversion() had an invalid REQUIRE()
2434	condition.
2435
2436	977. [bug] Improve "not at top of zone" error message.
2437
2438	975. [bug] "max-cache-size default;" as a view option
2439	caused an assertion failure.
2440
2441	974. [bug] "max-cache-size unlimited;" as a global option
2442	was not accepted.
2443
2444	973. [bug] Failed to log the question name when logging:
2445	"bad zone transfer request: non-authoritative zone
2446	(NOTAUTH)".
2447
2448	972. [bug] The file modification time code in zone.c was using the
2449	wrong epoch. [RT #1667]
2450
2451	968. [bug] On win32, the isc_time_now() function was unnecessarily
2452	calling strtime(). [RT #1671]
2453
2454	967. [bug] On win32, the link for bindevt was not including the
2455	required resource file to enable the event viewer
2456	to interpret the error messages in the event log,
2457	[RT #1668]
2458
2459	966. [placeholder]
2460
2461	965. [bug] Including data other than root server NS and A
2462	records in the root hint file could cause a rbtdb
2463	node reference leak. [RT #1581, #1618]
2464
2465	964. [func] Warn if data other than root server NS and A records
2466	are found in the root hint file. [RT #1581, #1618]
2467
2468	963. [bug] Bad ISC_LANG_ENDDECLS. [RT #1645]
2469
2470	962. [bug] libbind: bad "#undef", don't attempt to install
2471	non-existant nlist.h. [RT #1640]
2472
2473	961. [bug] Tried to use a IPV6 feature when ISC_PLATFORM_HAVEIPV6
2474	was not defined. [RT #1482]
2475
2476	960. [port] liblwres failed to build on systems with support for
2477	getrrsetbyname() in the OS. [RT #1592]
2478
2479	959. [port] On FreeBSD, determine the number of CPUs by calling
2480	sysctlbyname(). [RT #1584]
2481
2482	958. [port] ssize_t is not available on all platforms. [RT #1607]
2483
2484	957. [bug] sys/select.h inclusion was broken on older platforms.
2485	[RT #1607]
2486
2487	956. [bug] ns_g_autorndcfile changed to ns_g_keyfile
2488	in named/win32/os.c due to code changes in
2489	change #953. win32 .make file for rndc-confgen
2490	updated to add include path for os.h header.
2491
2492	--- 9.2.0rc1 released ---
2493
2494	955. [bug] When using views, the zone's class was not being
2495	inherited from the view's class. [RT #1583]
2496
2497	954. [bug] When requesting AXFRs or IXFRs using dig, host, or
2498	nslookup, the RD bit should not be set as zone
2499	transfers are inherently nonrecursive. [RT #1575]
2500
2501	953. [func] The /var/run/named.key file from change #843
2502	has been replaced by /etc/rndc.key. Both
2503	named and rndc will look for this file and use
2504	it to configure a default control channel key
2505	if not already configured using a different
2506	method (rndc.conf / controls). Unlike
2507	named.key, rndc.key is not created automatically;
2508	it must be created by manually running
2509	"rndc-confgen -a".
2510
2511	952. [bug] The server required manual intervention to serve the
2512	affected zones if it died between creating a journal
2513	and committing the first change to it.
2514
2515	951. [bug] CFLAGS was not passed to the linker when
2516	linking some of the test programs under
2517	bin/tests. [RT #1555].
2518
2519	950. [bug] Explicit TTLs did not properly override $TTL
2520	due to a bug in change 834. [RT #1558]
2521
2522	949. [bug] host was unable to print records larger than 512
2523	bytes. [RT #1557]
2524
2525	--- 9.2.0b2 released ---
2526
2527	948. [port] Integrated support for building on Windows NT /
2528	Windows 2000.
2529
2530	947. [bug] dns_rdata_soa_t had a badly named element "mname" which
2531	was really the RNAME field from RFC1035. To avoid
2532	confusion and silent errors that would occur it the
2533	"origin" and "mname" elements were given their correct
2534	names "mname" and "rname" respectively, the "mname"
2535	element is renamed to "contact".
2536
2537	946. [cleanup] doc/misc/options is now machine-generated from the
2538	configuration parser syntax tables, and therefore
2539	more likely to be correct.
2540
2541	945. [func] Add the new view-specific options
2542	"match-destinations" and "match-recursive-only".
2543
2544	944. [func] Check for expired signatures on load.
2545
2546	943. [bug] The server could crash when receiving a command
2547	via rndc if the configuration file listed only
2548	nonexistent keys in the controls statement. [RT #1530]
2549
2550	942. [port] libbind: GETNETBYADDR_ADDR_T was not correctly
2551	defined on some platforms.
2552
2553	941. [bug] The configuration checker crashed if a slave
2554	zone didn't contain a masters statement. [RT #1514]
2555
2556	940. [bug] Double zone locking failure on error path. [RT #1510]
2557
2558	--- 9.2.0b1 released ---
2559
2560	939. [port] Add the --disable-linux-caps option to configure for
2561	systems that manage capabilities outside of named.
2562	[RT #1503]
2563
2564	938. [placeholder]
2565
2566	937. [bug] A race when shutting down a zone could trigger a
2567	INSIST() failure. [RT #1034]
2568
2569	936. [func] Warn about IPv4 addresses that are not complete
2570	dotted quads. [RT #1084]
2571
2572	935. [bug] inet_pton failed to reject leading zeros.
2573
2574	934. [port] Deal with systems where accept() spuriously returns
2575	ECONNRESET.
2576
2577	933. [bug] configure failed doing libbind on platforms not
2578	supported by BIND 8. [RT #1496]
2579
2580	--- 9.2.0a3 released ---
2581
2582	932. [bug] Use INSTALL_SCRIPT, not INSTALL_PROGRAM,
2583	when installing isc-config.sh.
2584	[RT #198, #1466]
2585
2586	931. [bug] The controls statement only attempted to verify
2587	messages using the first key in the key list.
2588	(9.2.0a1/a2 only).
2589
2590	930. [func] Query performance testing tool added as
2591	contrib/queryperf.
2592
2593	929. [placeholder]
2594
2595	928. [bug] nsupdate would send empty update packets if the
2596	send (or empty line) command was run after
2597	another send but before any new updates or
2598	prerequisites were specified. It should simply
2599	ignore this command.
2600
2601	927. [bug] Don't hold the zone lock for the entire dump to disk.
2602	[RT #1423]
2603
2604	926. [bug] The resolver could deadlock with the ADB when
2605	shutting down (multi-threaded builds only).
2606	[RT #1324]
2607
2608	925. [cleanup] Remove openssl from the distribution; require that
2609	--with-openssl be specified if DNSSEC is needed.
2610
2611	924. [port] Extend support for pre-RFC2133 IPv6 implementation.
2612	[RT #987]
2613
2614	923. [bug] Multiline TSIG secrets (and other multiline strings)
2615	were not accepted in named.conf. [RT #1469]
2616
2617	922. [func] Added two new lwres_getrrsetbyname() result codes,
2618	ERR_NONAME and ERR_NODATA.
2619
2620	921. [bug] lwres returned an incorrect error code if it received
2621	a truncated message.
2622
2623	920. [func] Increase the lwres receive buffer size to 16K.
2624	[RT #1451]
2625
2626	919. [placeholder]
2627
2628	918. [func] In nsupdate, TSIG errors are no longer treated as
2629	fatal errors.
2630
2631	917. [func] New nsupdate command 'key', allowing TSIG keys to
2632	be specified in the nsupdate command stream rather
2633	than the command line.
2634
2635	916. [bug] Specifying type ixfr to dig without specifying
2636	a serial number failed in unexpected ways.
2637
2638	915. [func] The named-checkconf and named-checkzone programs
2639	now have a '-v' option for printing their version.
2640	[RT #1151]
2641
2642	914. [bug] Global 'server' statements were rejected when
2643	using views, even though they were accepted
2644	in 9.1. [RT #1368]
2645
2646	913. [bug] Cache cleaning was not sufficiently aggressive.
2647	[RT #1441, #1444]
2648
2649	912. [bug] Attempts to set the 'additional-from-cache' or
2650	'additional-from-auth' option to 'no' in a
2651	server with recursion enabled will now
2652	be ignored and cause a warning message.
2653	[RT #1145]
2654
2655	911. [placeholder]
2656
2657	910. [port] Some pre-RFC2133 IPv6 implementations do not define
2658	IN6ADDR_ANY_INIT. [RT #1416]
2659
2660	908. [func] New program, rndc-confgen, to simplify setting up rndc.
2661
2662	907. [func] The ability to get entropy from either the
2663	random device, a user-provided file or from
2664	the keyboard was migrated from the DNSSEC tools
2665	to libisc as isc_entropy_usebestsource().
2666
2667	906. [port] Separated the system independent portion of
2668	lib/isc/unix/entropy.c into lib/isc/entropy.c
2669	and added lib/isc/win32/entropy.c.
2670
2671	905. [bug] Configuring a forward "zone" for the root domain
2672	did not work. [RT #1418]
2673
2674	904. [bug] The server would leak memory if attempting to use
2675	an expired TSIG key. [RT #1406]
2676
2677	903. [bug] dig should not crash when receiving a TCP packet
2678	of length 0.
2679
2680	902. [bug] The -d option was ignored if both -t and -g were also
2681	specified.
2682
2683	901. [placeholder]
2684
2685	900. [bug] A config.guess update changed the system identification
2686	string of FreeBSD systems; configure and
2687	bin/tests/system/ifconfig.sh now recognize the new
2688	string.
2689
2690	--- 9.2.0a2 released ---
2691
2692	899. [bug] lib/dns/soa.c failed to compile on many platforms
2693	due to inappropriate use of a void value.
2694	[RT #1372, #1373, #1386, #1387, #1395]
2695
2696	898. [bug] "dig" failed to set a nonzero exit status
2697	on UDP query timeout. [RT #1323]
2698
2699	897. [bug] A config.guess update changed the system identification
2700	string of UnixWare systems; configure now recognizes
2701	the new string.
2702
2703	896. [bug] If a configuration file is set on named's command line
2704	and it has a relative pathname, the current directory
2705	(after any possible jailing resulting from named -t)
2706	will be prepended to it so that reloading works
2707	properly even when a directory option is present.
2708
2709	895. [func] New function, isc_dir_current(), akin to POSIX's
2710	getcwd().
2711
2712	894. [bug] When using the DNSSEC tools, a message intended to warn
2713	when the keyboard was being used because of the lack
2714	of a suitable random device was not being printed.
2715
2716	893. [func] Removed isc_file_test() and added isc_file_exists()
2717	for the basic functionality that was being added
2718	with isc_file_test().
2719
2720	892. [placeholder]
2721
2722	891. [bug] Return an error when a SIG(0) signed response to
2723	an unsigned query is seen. This should actually
2724	do the verification, but it's not currently
2725	possible. [RT #1391]
2726
2727	890. [cleanup] The man pages no longer require the mandoc macros
2728	and should now format cleanly using most versions of
2729	nroff, and HTML versions of the man pages have been
2730	added. Both are generated from DocBook source.
2731
2732	889. [port] Eliminated blank lines before .TH in nroff man
2733	pages since they cause problems with some versions
2734	of nroff. [RT #1390]
2735
2736	888. [bug] Don't die when using TKEY to delete a nonexistent
2737	TSIG key. [RT #1392]
2738
2739	887. [port] Detect broken compilers that can't call static
2740	functions from inline functions. [RT #1212]
2741
2742	866. [func] Close debug only file channels when debug is set to
2743	zero. [RT #1246]
2744
2745	865. [bug] The new configuration parser did not allow
2746	the optional debug level in a "severity debug"
2747	clause of a logging channel to be omitted.
2748	This is now allowed and treated as "severity
2749	debug 1;" like it does in BIND 8.2.4, not as
2750	"severity debug 0;" like it did in BIND 9.1.
2751	[RT #1367]
2752
2753	864. [cleanup] Multi-threading is now enabled by default on
2754	OSF1, Solaris 2.7 and newer, AIX, IRIX, and HP-UX.
2755
2756	863. [bug] If an error occurred while an outgoing zone transfer
2757	was starting up, the server could access a domain
2758	name that had already been freed when logging a
2759	message saying that the transfer was starting.
2760	[RT #1383]
2761
2762	862. [bug] Use after realloc(), non portable pointer arithmetic in
2763	grmerge().
2764
2765	861. [port] Add support for Mac OS X, by making it equivalent
2766	to Darwin. This was derived from the config.guess
2767	file shipped with Mac OS X. [RT #1355]
2768
2769	860. [func] Drop cross class glue in zone transfers.
2770
2771	859. [bug] Cache cleaning now won't swamp the CPU if there
2772	is a persistent overlimit condition.
2773
2774	858. [func] isc_mem_setwater() no longer requires that when the
2775	callback function is non-NULL then its hi_water
2776	argument must be greater than its lo_water argument
2777	(they can now be equal) or that they be non-zero.
2778
2779	857. [cleanup] Use ISC_MAGIC() to define all magic numbers for
2780	structs, for our friends in EBCDIC-land.
2781
2782	856. [func] Allow partial rdatasets to be returned in answer and
2783	authority sections to help non-TCP capable clients
2784	recover from truncation. [RT #1301]
2785
2786	855. [bug] Stop spurious "using RFC 1035 TTL semantics" warnings.
2787
2788	854. [bug] The config parser didn't properly handle config
2789	options that were specified in units of time other
2790	than seconds. [RT #1372]
2791
2792	853. [bug] configure_view_acl() failed to detach existing acls.
2793	[RT #1374]
2794
2795	852. [bug] Handle responses from servers which do not know
2796	about IXFR.
2797
2798	851. [cleanup] The obsolete support-ixfr option was not properly
2799	ignored.
2800
2801	--- 9.2.0a1 released ---
2802
2803	850. [bug] dns_rbt_findnode() would not find nodes that were
2804	split on a bitstring label somewhere other than in
2805	the last label of the node. [RT #1351]
2806
2807	849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
2808
2809	848. [func] A minimum max-cache-size of two megabytes is enforced
2810	by the cache cleaner.
2811
2812	847. [func] Added isc_file_test(), which currently only has
2813	some very basic functionality to test for the
2814	existence of a file, whether a pathname is absolute,
2815	or whether a pathname is the fundamental representation
2816	of the current directory. It is intended that this
2817	function can be expanded to test other things a
2818	programmer might want to know about a file.
2819
2820	846. [func] A non-zero 'param' to dst_key_generate() when making an
2821	hmac-md5 key means that good entropy is not required.
2822
2823	845. [bug] The access rights on the public file of a symmetric
2824	key are now restricted as soon as the file is opened,
2825	rather than after it has been written and closed.
2826
2827	844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
2828	just as <lwres/net.h> does.
2829
2830	843. [func] If no controls statement is present in named.conf,
2831	or if any inet phrase of a controls statement is
2832	lacking a keys clause, then a key will be automatically
2833	generated by named and an rndc.conf-style file
2834	named named.key will be written that uses it. rndc
2835	will use this file only if its normal configuration
2836	file, or one provided on the command line, does not
2837	exist.
2838
2839	842. [func] 'rndc flush' now takes an optional view.
2840
2841	841. [bug] When sdb modules were not declared threadsafe, their
2842	create and destroy functions were not serialized.
2843
2844	840. [bug] The config file parser could print the wrong file
2845	name if an error was detected after an included file
2846	was parsed. [RT #1353]
2847
2848	839. [func] Dump packets for which there was no view or that the
2849	class could not be determined to category "unmatched".
2850
2851	838. [port] UnixWare 7.x.x is now suported by
2852	bin/tests/system/ifconfig.sh.
2853
2854	837. [cleanup] Multi-threading is now enabled by default only on
2855	OSF1, Solaris 2.7 and newer, and AIX.
2856
2857	836. [func] Upgraded libtool to 1.4.
2858
2859	835. [bug] The dispatcher could enter a busy loop if
2860	it got an I/O error receiving on a UDP socket.
2861	[RT #1293]
2862
2863	834. [func] Accept (but warn about) master files beginning with
2864	an SOA record without an explicit TTL field and
2865	lacking a $TTL directive, by using the SOA MINTTL
2866	as a default TTL. This is for backwards compatibility
2867	with old versions of BIND 8, which accepted such
2868	files without warning although they are illegal
2869	according to RFC1035.
2870
2871	833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
2872	<dns/soa.h>, and extended them to support
2873	all the integer-valued fields of the SOA RR.
2874
2875	832. [bug] The default location for named.conf in named-checkconf
2876	should depend on --sysconfdir like it does in named.
2877	[RT #1258]
2878
2879	831. [placeholder]
2880
2881	830. [func] Implement 'rndc status'.
2882
2883	829. [bug] The DNS_R_ZONECUT result code should only be returned
2884	when an ANY query is made with DNS_DBFIND_GLUEOK set.
2885	In all other ANY query cases, returning the delegation
2886	is better.
2887
2888	828. [bug] The errno value from recvfrom() could be overwritten
2889	by logging code. [RT #1293]
2890
2891	827. [bug] When an IXFR protocol error occurs, the slave
2892	should retry with AXFR.
2893
2894	826. [bug] Some IXFR protocol errors were not detected.
2895
2896	825. [bug] zone.c:ns_query() detached from the wrong zone
2897	reference. [RT #1264]
2898
2899	824. [bug] Correct line numbers reported by dns_master_load().
2900	[RT #1263]
2901
2902	823. [func] The output of "dig -h" now goes to stdout so that it
2903	can easily be piped through "more". [RT #1254]
2904
2905	822. [bug] Sending nxrrset prerequisites would crash nsupdate.
2906	[RT #1248]
2907
2908	821. [bug] The program name used when logging to syslog should
2909	be stripped of leading path components.
2910	[RT #1178, #1232]
2911
2912	820. [bug] Name server address lookups failed to follow
2913	A6 chains into the glue of local authoritative
2914	zones.
2915
2916	819. [bug] In certain cases, the resolver's attempts to
2917	restart an address lookup at the root could cause
2918	the fetch to deadlock (with itself) instead of
2919	restarting. [RT #1225]
2920
2921	818. [bug] Certain pathological responses to ANY queries could
2922	cause an assertion failure. [RT #1218]
2923
2924	817. [func] Adjust timeouts for dialup zone queries.
2925
2926	816. [bug] Report potential problems with log file accessibility
2927	at configuration time, since such problems can't
2928	reliably be reported at the time they actually occur.
2929
2930	815. [bug] If a log file was specified with a path separator
2931	character (i.e. "/") in its name and the directory
2932	did not exist, the log file's name was treated as
2933	though it were the directory name. [RT #1189]
2934
2935	814. [bug] Socket objects left over from accept() failures
2936	were incorrectly destroyed, causing corruption
2937	of socket manager data structures.
2938
2939	813. [bug] File descriptors exceeding FD_SETSIZE were handled
2940	badly. [RT #1192]
2941
2942	812. [bug] dig sometimes printed incomplete IXFR responses
2943	due to an uninitialized variable. [RT #1188]
2944
2945	811. [bug] Parentheses were not quoted in zone dumps. [RT #1194]
2946
2947	810. [bug] The signer name in SIG records was not properly
2948	downcased when signing/verifying records. [RT #1186]
2949
2950	809. [bug] Configuring a non-local address as a transfer-source
2951	could cause an assertion failure during load.
2952
2953	808. [func] Add 'rndc flush' to flush the server's cache.
2954
2955	807. [bug] When setting up TCP connections for incoming zone
2956	transfers, the transfer-source port was not
2957	ignored like it should be.
2958
2959	806. [bug] DNS_R_SEENINCLUDE was failing to propagate back up
2960	the calling stack to the zone maintence level, causing
2961	zones to not reload when an included file was touched
2962	but the top-level zone file was not.
2963
2964	805. [bug] When using "forward only", missing root hints should
2965	not cause queries to fail. [RT #1143]
2966
2967	804. [bug] Attempting to obtain entropy could fail in some
2968	situations. This would be most common on systems
2969	with user-space threads. [RT #1131]
2970
2971	803. [bug] Treat all SIG queries as if they have the CD bit set,
2972	otherwise no data will be returned [RT #749]
2973
2974	802. [bug] DNSSEC key tags were computed incorrectly in almost
2975	all cases. [RT #1146]
2976
2977	801. [bug] nsupdate should treat lines beginning with ';' as
2978	comments. [RT #1139]
2979
2980	800. [bug] dnssec-signzone produced incorrect statistics for
2981	large zones. [RT #1133]
2982
2983	799. [bug] The ADB didn't find AAAA glue in a zone unless A6
2984	glue was also present.
2985
2986	798. [bug] nsupdate should be able to reject bad input lines
2987	and continue. [RT #1130]
2988
2989	797. [func] Issue a warning if the 'directory' option contains
2990	a relative path. [RT #269]
2991
2992	796. [func] When a size limit is associated with a log file,
2993	only roll it when the size is reached, not every
2994	time the log file is opened. [RT #1096]
2995
2996	795. [func] Add the +multiline option to dig. [RT #1095]
2997
2998	794. [func] Implement the "port" and "default-port" statements
2999	in rndc.conf.
3000
3001	793. [cleanup] The DNSSEC tools could create filenames that were
3002	illegal or contained shell metacharacters. They
3003	now use a different text encoding of names that
3004	doesn't have these problems. [RT #1101]
3005
3006	792. [cleanup] Replace the OMAPI command channel protocol with a
3007	simpler one.
3008
3009	791. [bug] The command channel now works over IPv6.
3010
3011	790. [bug] Wildcards created using dynamic update or IXFR
3012	could fail to match. [RT #1111]
3013
3014	789. [bug] The "localhost" and "localnets" ACLs did not match
3015	when used as the second element of a two-element
3016	sortlist item.
3017
3018	788. [func] Add the "match-mapped-addresses" option, which
3019	causes IPv6 v4mapped addresses to be treated as
3020	IPv4 addresses for the purpose of acl matching.
3021
3022	787. [bug] The DNSSEC tools failed to downcase domain
3023	names when mapping them into file names.
3024
3025	786. [bug] When DNSSEC signing/verifying data, owner names were
3026	not properly downcased.
3027
3028	785. [bug] A race condition in the resolver could cause
3029	an assertion failure. [RT #673, #872, #1048]
3030
3031	784. [bug] nsupdate and other programs would not quit properly
3032	if some signals were blocked by the caller. [RT #1081]
3033
3034	783. [bug] Following CNAMEs could cause an assertion failure
3035	when either using an sdb database or under very
3036	rare conditions.
3037
3038	782. [func] Implement the "serial-query-rate" option.
3039
3040	781. [func] Avoid error packet loops by dropping duplicate FORMERR
3041	responses. [RT #1006]
3042
3043	780. [bug] Error handling code dealing with out of memory or
3044	other rare errors could lead to assertion failures
3045	by calling functions on unitialized names. [RT #1065]
3046
3047	779. [func] Added the "minimal-responses" option.
3048
3049	778. [bug] When starting cache cleaning, cleaning_timer_action()
3050	returned without first pausing the iterator, which
3051	could cause deadlock. [RT #998]
3052
3053	777. [bug] An empty forwarders list in a zone failed to override
3054	global forwarders. [RT #995]
3055
3056	776. [func] Improved error reporting in denied messages. [RT #252]
3057
3058	775. [placeholder]
3059
3060	774. [func] max-cache-size is implemented.
3061
3062	773. [func] Added isc_rwlock_trylock() to attempt to lock without
3063	blocking.
3064
3065	772. [bug] Owner names could be incorrectly omitted from cache
3066	dumps in the presence of negative caching entries.
3067	[RT #991]
3068
3069	771. [cleanup] TSIG errors related to unsynchronized clocks
3070	are logged better. [RT #919]
3071
3072	770. [func] Add the "edns yes_or_no" statement to the server
3073	clause. [RT #524]
3074
3075	769. [func] Improved error reporting when parsing rdata. [RT #740]
3076
3077	768. [bug] The server did not emit an SOA when a CNAME
3078	or DNAME chain ended in NXDOMAIN in an
3079	authoritative zone.
3080
3081	767. [placeholder]
3082
3083	766. [bug] A few cases in query_find() could leak fname.
3084	This would trigger the mpctx->allocated == 0
3085	assertion when the server exited.
3086	[RT #739, #776, #798, #812, #818, #821, #845,
3087	#892, #935, #966]
3088
3089	765. [func] ACL names are once again case insensitive, like
3090	in BIND 8. [RT #252]
3091
3092	764. [func] Configuration files now allow "include" directives
3093	in more places, such as inside the "view" statement.
3094	[RT #377, #728, #860]
3095
3096	763. [func] Configuration files no longer have reserved words.
3097	[RT #731, #753]
3098
3099	762. [cleanup] The named.conf and rndc.conf file parsers have
3100	been completely rewritten.
3101
3102	761. [bug] _REENTRANT was still defined when building with
3103	--disable-threads.
3104
3105	760. [contrib] Significant enhancements to the pgsql sdb driver.
3106
3107	759. [bug] The resolver didn't turn off "avoid fetches" mode
3108	when restarting, possibly causing resolution
3109	to fail when it should not. This bug only affected
3110	platforms which support both IPv4 and IPv6. [RT #927]
3111
3112	758. [bug] The "avoid fetches" code did not treat negative
3113	cache entries correctly, causing fetches that would
3114	be useful to be avoided. This bug only affected
3115	platforms which support both IPv4 and IPv6. [RT #927]
3116
3117	757. [func] Log zone transfers.
3118
3119	756. [bug] dns_zone_load() could "return" success when no master
3120	file was configured.
3121
3122	755. [bug] Fix incorrectly formatted log messages in zone.c.
3123
3124	754. [bug] Certain failure conditions sending UDP packets
3125	could cause the server to retry the transmission
3126	indefinitely. [RT #902]
3127
3128	753. [bug] dig, host, and nslookup would fail to contact a
3129	remote server if getaddrinfo() returned an IPv6
3130	address on a system that doesn't support IPv6.
3131	[RT #917]
3132
3133	752. [func] Correct bad tv_usec elements returned by
3134	gettimeofday().
3135
3136	751. [func] Log successful zone loads / transfers. [RT #898]
3137
3138	750. [bug] A query should not match a DNAME whose trust level
3139	is pending. [RT #916]
3140
3141	749. [bug] When a query matched a DNAME in a secure zone, the
3142	server did not return the signature of the DNAME.
3143	[RT #915]
3144
3145	748. [doc] List supported RFCs in doc/misc/rfc-compliance.
3146	[RT #781]
3147
3148	747. [bug] The code to determine whether an IXFR was possible
3149	did not properly check for a database that could
3150	not have a journal. [RT #865, #908]
3151
3152	746. [bug] The sdb didn't clone rdatasets properly, causing
3153	a crash when the server followed delegations. [RT #905]
3154
3155	745. [func] Report the owner name of records that fail
3156	semantic checks while loading.
3157
3158	744. [bug] When returning DNS_R_CNAME or DNS_R_DNAME as the
3159	result of an ANY or SIG query, the resolver failed
3160	to setup the return event's rdatasets, causing an
3161	assertion failure in the query code. [RT #881]
3162
3163	743. [bug] Receiving a large number of certain malformed
3164	answers could cause named to stop responding.
3165	[RT #861]
3166
3167	742. [placeholder]
3168
3169	741. [port] Support openssl-engine. [RT #709]
3170
3171	740. [port] Handle openssl library mismatches slightly better.
3172
3173	739. [port] Look for /dev/random in configure, rather than
3174	assuming it will be there for only a predefined
3175	set of OSes.
3176
3177	738. [bug] If a non-threadsafe sdb driver supported AXFR and
3178	received an AXFR request, it would deadlock or die
3179	with an assertion failure. [RT #852]
3180
3181	737. [port] stdtime.c failed to compile on certain platforms.
3182
3183	736. [func] New functions isc_task_{begin,end}exclusive().
3184
3185	735. [doc] Add BIND 4 migration notes.
3186
3187	734. [bug] An attempt to re-lock the zone lock could occur if
3188	the server was shutdown during a zone tranfer.
3189	[RT #830]
3190
3191	733. [bug] Reference counts of dns_acl_t objects need to be
3192	locked but were not. [RT #801, #821]
3193
3194	732. [bug] Glue with 0 TTL could also cause SERVFAIL. [RT #828]
3195
3196	731. [bug] Certain zone errors could cause named-checkzone to
3197	fail ungracefully. [RT #819]
3198
3199	730. [bug] lwres_getaddrinfo() returns the correct result when
3200	it fails to contact a server. [RT #768]
3201
3202	729. [port] pthread_setconcurrency() needs to be called on Solaris.
3203
3204	728. [bug] Fix comment processing on master file directives.
3205	[RT# 757]
3206
3207	727. [port] Work around OS bug where accept() succeeds but
3208	fails to fill in the peer address of the accepted
3209	connection, by treating it as an error rather than
3210	an assertion failure. [RT #809]
3211
3212	726. [func] Implement the "trace" and "notrace" commands in rndc.
3213
3214	725. [bug] Installing man pages could fail.
3215
3216	724. [func] New libisc functions isc_netaddr_any(),
3217	isc_netaddr_any6().
3218
3219	723. [bug] Referrals whose NS RRs had a 0 TTL caused the resolver
3220	to return DNS_R_SERVFAIL. [RT #783]
3221
3222	722. [func] Allow incremental loads to be canceled.
3223
3224	721. [cleanup] Load manager and dns_master_loadfilequota() are no
3225	more.
3226
3227	720. [bug] Server could enter infinite loop in
3228	dispatch.c:do_cancel(). [RT #733]
3229
3230	719. [bug] Rapid reloads could trigger an assertion failure.
3231	[RT #743, #763]
3232
3233	718. [cleanup] "internal" is no longer a reserved word in named.conf.
3234	[RT #753, #731]
3235
3236	717. [bug] Certain TKEY processing failure modes could
3237	reference an uninitialized variable, causing the
3238	server to crash. [RT #750]
3239
3240	716. [bug] The first line of a $INCLUDE master file was lost if
3241	an origin was specified. [RT #744]
3242
3243	715. [bug] Resolving some A6 chains could cause an assertion
3244	failure in adb.c. [RT #738]
3245
3246	714. [bug] Preserve interval timers across reloads unless changed.
3247	[RT# 729]
3248
3249	713. [func] named-checkconf takes '-t directory' similar to named.
3250	[RT #726]
3251
3252	712. [bug] Sending a large signed update message caused an
3253	assertion failure. [RT #718]
3254
3255	711. [bug] The libisc and liblwres implementations of
3256	inet_ntop contained an off by one error.
3257
3258	710. [func] The forwarders statement now takes an optional
3259	port. [RT #418]
3260
3261	709. [bug] ANY or SIG queries for data with a TTL of 0
3262	would return SERVFAIL. [RT #620]
3263
3264	708. [bug] When building with --with-openssl, the openssl headers
3265	included with BIND 9 should not be used. [RT #702]
3266
3267	707. [func] The "filename" argument to named-checkzone is no
3268	longer optional, to reduce confusion. [RT #612]
3269
3270	706. [bug] Zones with an explicit "allow-update { none; };"
3271	were considered dynamic and therefore not reloaded
3272	on SIGHUP or "rndc reload".
3273
3274	705. [port] Work out resource limit type for use where rlim_t is
3275	not available. [RT #695]
3276
3277	704. [port] RLIMIT_NOFILE is not available on all platforms.
3278	[RT #695]
3279
3280	703. [port] sys/select.h is needed on older platforms. [RT #695]
3281
3282	702. [func] If the address 0.0.0.0 is seen in resolv.conf,
3283	use 127.0.0.1 instead. [RT #693]
3284
3285	701. [func] Root hints are now fully optional. Class IN
3286	views use compiled-in hints by default, as
3287	before. Non-IN views with no root hints now
3288	provide authoritative service but not recursion.
3289	A warning is logged if a view has neither root
3290	hints nor authoritative data for the root. [RT #696]
3291
3292	700. [bug] $GENERATE range check was wrong. [RT #688]
3293
3294	699. [bug] The lexer mishandled empty quoted strings. [RT #694]
3295
3296	698. [bug] Aborting nsupdate with ^C would lead to several
3297	race conditions.
3298
3299	697. [bug] nsupdate was not compatible with the undocumented
3300	BIND 8 behavior of ignoring TTLs in "update delete"
3301	commands. [RT #693]
3302
3303	696. [bug] lwresd would die with an assertion failure when passed
3304	a zero-length name. [RT #692]
3305
3306	695. [bug] If the resolver attempted to query a blackholed or
3307	bogus server, the resolution would fail immediately.
3308
3309	694. [bug] $GENERATE did not produce the last entry.
3310	[RT #682, #683]
3311
3312	693. [bug] An empty lwres statement in named.conf caused
3313	the server to crash while loading.
3314
3315	692. [bug] Deal with systems that have getaddrinfo() but not
3316	gai_strerror(). [RT #679]
3317
3318	691. [bug] Configuring per-view forwarders caused an assertion
3319	failure. [RT #675, #734]
3320
3321	690. [func] $GENERATE now supports DNAME. [RT #654]
3322
3323	689. [doc] man pages are now installed. [RT #210]
3324
3325	688. [func] "make tags" now works on systems with the
3326	"Exuberant Ctags" etags.
3327
3328	687. [bug] Only say we have IPv6, with sufficent functionality,
3329	if it has actually been tested. [RT #586]
3330
3331	686. [bug] dig and nslookup can now be properly aborted during
3332	blocking operations. [RT #568]
3333
3334	685. [bug] nslookup should use the search list/domain options
3335	from resolv.conf by default. [RT #405, #630]
3336
3337	684. [bug] Memory leak with view forwarders. [RT #656]
3338
3339	683. [bug] File descriptor leak in isc_lex_openfile().
3340
3341	682. [bug] nslookup displayed SOA records incorrectly. [RT #665]
3342
3343	681. [bug] $GENERATE specifying output format was broken. [RT #653]
3344
3345	680. [bug] dns_rdata_fromstruct() mishandled options bigger
3346	than 255 octets.
3347
3348	679. [bug] $INCLUDE could leak memory and file descriptors on
3349	reload. [RT #639]
3350
3351	678. [bug] "transfer-format one-answer;" could trigger an assertion
3352	failure. [RT #646]
3353
3354	677. [bug] dnssec-signzone would occasionally use the wrong ttl
3355	for database operations and fail. [RT #643]
3356
3357	676. [bug] Log messages about lame servers to category
3358	'lame-servers' rather than 'resolver', so as not
3359	to be gratuitously incompatible with BIND 8.
3360
3361	675. [bug] TKEY queries could cause the server to leak
3362	memory.
3363
3364	674. [func] Allow messages to be TSIG signed / verified using
3365	a offset from the current time.
3366
3367	673. [func] The server can now convert RFC1886-style recursive
3368	lookup requests into RFC2874-style lookups, when
3369	enabled using the new option "allow-v6-synthesis".
3370
3371	672. [bug] The wrong time was in the "time signed" field when
3372	replying with BADTIME error.
3373
3374	671. [bug] The message code was failing to parse a message with
3375	no question section and a TSIG record. [RT #628]
3376
3377	670. [bug] The lwres replacements for getaddrinfo and
3378	getipnodebyname didn't properly check for the
3379	existence of the sockaddr sa_len field.
3380
3381	669. [bug] dnssec-keygen now makes the public key file
3382	non-world-readable for symmetric keys. [RT #403]
3383
3384	668. [func] named-checkzone now reports multiple errors in master
3385	files.
3386
3387	667. [bug] On Linux, running named with the -u option and a
3388	non-world-readable configuration file didn't work.
3389	[RT #626]
3390
3391	666. [bug] If a request sent by dig is longer than 512 bytes,
3392	use TCP.
3393
3394	665. [bug] Signed responses were not sent when the size of the
3395	TSIG + question exceeded the maximum message size.
3396	[RT #628]
3397
3398	664. [bug] The t_tasks and t_timers module tests are now skipped
3399	when building without threads, since they require
3400	threads.
3401
3402	663. [func] Accept a size_spec, not just an integer, in the
3403	(unimplemented and ignored) max-ixfr-log-size option
3404	for compatibility with recent versions of BIND 8.
3405	[RT #613]
3406
3407	662. [bug] dns_rdata_fromtext() failed to log certain errors.
3408
3409	661. [bug] Certain UDP IXFR requests caused an assertion failure
3410	(mpctx->allocated == 0). [RT #355, #394, #623]
3411
3412	660. [port] Detect multiple CPUs on HP-UX and IRIX.
3413
3414	659. [performance] Rewrite the name compression code to be much faster.
3415
3416	658. [cleanup] Remove all vestiges of 16 bit global compression.
3417
3418	657. [bug] When a listen-on statement in an lwres block does not
3419	specify a port, use 921, not 53. Also update the
3420	listen-on documentation. [RT #616]
3421
3422	656. [func] Treat an unescaped newline in a quoted string as
3423	an error. This means that TXT records with missing
3424	close quotes should have meaningful errors printed.
3425
3426	655. [bug] Improve error reporting on unexpected eof when loading
3427	zones. [RT #611]
3428
3429	654. [bug] Origin was being forgotten in TCP retries in dig.
3430	[RT #574]
3431
3432	653. [bug] +defname option in dig was reversed in sense.
3433	[RT #549]
3434
3435	652. [bug] zone_saveunique() did not report the new name.
3436
3437	651. [func] The AD bit in responses now has the meaning
3438	specified in <draft-ietf-dnsext-ad-is-secure>.
3439
3440	650. [bug] SIG(0) records were being generated and verified
3441	incorrectly. [RT #606]
3442
3443	649. [bug] It was possible to join to an already running fctx
3444	after it had "cloned" its events, but before it sent
3445	them. In this case, the event of the newly joined
3446	fetch would not contain the answer, and would
3447	trigger the INSIST() in fctx_sendevents(). In
3448	BIND 9.0, this bug did not trigger an INSIST(), but
3449	caused the fetch to fail with a SERVFAIL result.
3450	[RT #588, #597, #605, #607]
3451
3452	648. [port] Add support for pre-RFC2133 IPv6 implementations.
3453
3454	647. [bug] Resolver queries sent after following multiple
3455	referrals had excessively long retransmission
3456	timeouts due to incorrectly counting the referrals
3457	as "restarts".
3458
3459	646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
3460	didn't _cleanly_ fix the problem it was trying to fix.
3461
3462	645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
3463
3464	644. [bug] #622 needed more work. [RT #562]
3465
3466	643. [bug] xfrin error messages made more verbose, added class
3467	of the zone. [RT# 599]
3468
3469	642. [bug] Break the exit_check() race in the zone module.
3470	[RT #598]
3471
3472	--- 9.1.0b2 released ---
3473
3474	641. [bug] $GENERATE caused a uninitialized link to be used.
3475	[RT #595]
3476
3477	640. [bug] Memory leak in error path could cause
3478	"mpctx->allocated == 0" failure. [RT #584]
3479
3480	639. [bug] Reading entropy from the keyboard would sometimes fail.
3481	[RT #591]
3482
3483	638. [port] lib/isc/random.c needed to explicitly include time.h
3484	to get a prototype for time() when pthreads was not
3485	being used. [RT #592]
3486
3487	637. [port] Use isc_u?int64_t instead of (unsigned) long long in
3488	lib/isc/print.c. Also allow lib/isc/print.c to
3489	be compiled even if the platform does not need it.
3490	[RT #592]
3491
3492	636. [port] Shut up MSVC++ about a possible loss of precision
3493	in the ISC__BUFFER_PUTUINT*() macros. [RT #592]
3494
3495	635. [bug] Reloading a server with a configured blackhole list
3496	would cause an assertion. [RT #590]
3497
3498	634. [bug] A log file will completely stop being written when
3499	it reaches the maximum size in all cases, not just
3500	when versioning is also enabled. [RT #570]
3501
3502	633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
3503
3504	632. [bug] The index array of the journal file was
3505	corrupted as it was written to disk.
3506
3507	631. [port] Build without thread support on systems without
3508	pthreads.
3509
3510	630. [bug] Locking failure in zone code. [RT #582]
3511
3512	629. [bug] 9.1.0b1 dereferenced a null pointer and crashed
3513	when responding to a UDP IXFR request.
3514
3515	628. [bug] If the root hints contained only AAAA addresses,
3516	named would be unable to perform resolution.
3517
3518	627. [bug] The EDNS0 blackhole detection code of change 324
3519	waited for three retransmissions to each server,
3520	which takes much too long when a domain has many
3521	name servers and all of them drop EDNS0 queries.
3522	Now we retry without EDNS0 after three consecutive
3523	timeouts, even if they are all from different
3524	servers. [RT #143]
3525
3526	626. [bug] The lightweight resolver daemon no longer crashes
3527	when asked for a SIG rrset. [RT #558]
3528
3529	625. [func] Zones now inherit their class from the enclosing view.
3530
3531	624. [bug] The zone object could get timer events after it had
3532	been destroyed, causing a server crash. [RT #571]
3533
3534	623. [func] Added "named-checkconf" and "named-checkzone" program
3535	for syntax checking named.conf files and zone files,
3536	respectively.
3537
3538	622. [bug] A canceled request could be destroyed before
3539	dns_request_destroy() was called. [RT #562]
3540
3541	621. [port] Disable IPv6 at runtime if IPv6 sockets are unusable.
3542	This mostly affects Red Hat Linux 7.0, which has
3543	conflicts between libc and the kernel.
3544
3545	620. [bug] dns_master_load*inc() now require 'task' and 'load'
3546	to be non-null. Also 'done' will not be called if
3547	dns_master_load*inc() fails immediately. [RT #565]
3548
3549	618. [bug] Queries to a signed zone could sometimes cause
3550	an assertion failure.
3551
3552	617. [bug] When using dynamic update to add a new RR to an
3553	existing RRset with a different TTL, the journal
3554	entries generated from the update did not include
3555	explicit deletions and re-additions of the existing
3556	RRs to update their TTL to the new value.
3557
3558	616. [func] dnssec-signzone -t output now includes performance
3559	statistics.
3560
3561	615. [bug] dnssec-signzone did not like child keysets signed
3562	by multiple keys.
3563
3564	614. [bug] Checks for uninitialized link fields were prone
3565	to false positives, causing assertion failures.
3566	The checks are now disabled by default and may
3567	be re-enabled by defining ISC_LIST_CHECKINIT.
3568
3569	613. [bug] "rndc reload zone" now reloads primary zones.
3570	It previously only updated slave and stub zones,
3571	if an SOA query indicated an out of date serial.
3572
3573	612. [cleanup] Shutup a ridiculously noisy HP-UX compiler that
3574	complains relentlessly about how its treatment
3575	of 'const' has changed as well as how casting
3576	sometimes tightens alignment constraints.
3577
3578	611. [func] allow-notify can be used to permit processing of
3579	notify messages from hosts other than a slave's
3580	masters.
3581
3582	610. [func] rndc dumpdb is now supported.
3583
3584	609. [bug] getrrsetbyname() would crash lwresd if the server
3585	found more SIGs than answers. [RT #554]
3586
3587	608. [func] dnssec-signzone now adds a comment to the zone
3588	with the time the file was signed.
3589
3590	607. [bug] nsupdate would fail if it encountered a CNAME or
3591	DNAME in a response to an SOA query. [RT #515]
3592
3593	606. [bug] Compiling with --disable-threads failed due
3594	to isc_thread_self() being incorrectly defined
3595	as an integer rather than a function.
3596
3597	605. [func] New function isc_lex_getlasttokentext().
3598
3599	604. [bug] The named.conf parser could print incorrect line
3600	numbers when long comments were present.
3601
3602	603. [bug] Make dig handle multiple types or classes on the same
3603	query more correctly.
3604
3605	602. [func] Cope automatically with UnixWare's broken
3606	IN6_IS_ADDR_* macros. [RT #539]
3607
3608	601. [func] Return a non-zero exit code if an update fails
3609	in nsupdate.
3610
3611	600. [bug] Reverse lookups sometimes failed in dig, etc...
3612
3613	599. [func] Added four new functions to the libisc log API to
3614	support i18n messages. isc_log_iwrite(),
3615	isc_log_ivwrite(), isc_log_iwrite1() and
3616	isc_log_ivwrite1() were added.
3617
3618	598. [bug] An update-policy statement would cause the server
3619	to assert while loading. [RT #536]
3620
3621	597. [func] dnssec-signzone is now multi-threaded.
3622
3623	596. [bug] DNS_RDATASLAB_FORCE and DNS_RDATASLAB_EXACT are
3624	not mutually exclusive.
3625
3626	595. [port] On Linux 2.2, socket() returns EINVAL when it
3627	should return EAFNOSUPPORT. Work around this.
3628	[RT #531]
3629
3630	594. [func] sdb drivers are now assumed to not be thread-safe
3631	unless the DNS_SDBFLAG_THREADSAFE flag is supplied.
3632
3633	593. [bug] If a secure zone was missing all its NXTs and
3634	a dynamic update was attempted, the server entered
3635	an infinite loop.
3636
3637	592. [bug] The sig-validity-interval option now specifies a
3638	number of days, not seconds. This matches the
3639	documentation. [RT #529]
3640
3641	--- 9.1.0b1 released ---
3642
3643	591. [bug] Work around non-reentrancy in openssl by disabling
3644	precomputation in keys.
3645
3646	590. [doc] There are now man pages for the lwres library in
3647	doc/man/lwres.
3648
3649	589. [bug] The server could deadlock if a zone was updated
3650	while being transferred out.
3651
3652	588. [bug] ctx->in_use was not being correctly initialized when
3653	when pushing a file for $INCLUDE. [RT #523]
3654
3655	587. [func] A warning is now printed if the "allow-update"
3656	option allows updates based on the source IP
3657	address, to alert users to the fact that this
3658	is insecure and becoming increasingly so as
3659	servers capable of update forwarding are being
3660	deployed.
3661
3662	586. [bug] multiple views with the same name were fatal. [RT #516]
3663
3664	585. [func] dns_db_addrdataset() and and dns_rdataslab_merge()
3665	now support 'exact' additions in a similar manner to
3666	dns_db_subtractrdataset() and dns_rdataslab_subtract().
3667
3668	584. [func] You can now say 'notify explicit'; to suppress
3669	notification of the servers listed in NS records
3670	and notify only those servers listed in the
3671	'also-notify' option.
3672
3673	583. [func] "rndc querylog" will now toggle logging of
3674	queries, like "ndc querylog" in BIND 8.
3675
3676	582. [bug] dns_zone_idetach() failed to lock the zone.
3677	[RT #199, #463]
3678
3679	581. [bug] log severity was not being correctly processed.
3680	[RT #485]
3681
3682	580. [func] Ignore trailing garbage on incoming DNS packets,
3683	for interoperability with broken server
3684	implementations. [RT #491]
3685
3686	579. [bug] nsupdate did not take a filename to read update from.
3687	[RT #492]
3688
3689	578. [func] New config option "notify-source", to specify the
3690	source address for notify messages.
3691
3692	577. [func] Log illegal RDATA combinations. e.g. multiple
3693	singlton types, cname and other data.
3694
3695	576. [doc] isc_log_create() description did not match reality.
3696
3697	575. [bug] isc_log_create() was not setting internal state
3698	correctly to reflect the default channels created.
3699
3700	574. [bug] TSIG signed queries sent by the resolver would fail to
3701	have their responses validated and would leak memory.
3702
3703	573. [bug] The journal files of IXFRed slave zones were
3704	inadvertantly discarded on server reload, causing
3705	"journal out of sync with zone" errors on subsequent
3706	reloads. [RT #482]
3707
3708	572. [bug] Quoted strings were not accepted as key names in
3709	address match lists.
3710
3711	571. [bug] It was possible to create an rdataset of singleton
3712	type which had more than one rdata. [RT #154]
3713	[RT #279]
3714
3715	570. [bug] rbtdb.c allowed zones containing nodes which had
3716	both a CNAME and "other data". [RT #154]
3717
3718	569. [func] The DNSSEC AD bit will not be set on queries which
3719	have not requested a DNSSEC response.
3720
3721	568. [func] Add sample simple database drivers in contrib/sdb.
3722
3723	567. [bug] Setting the zone transfer timeout to zero caused an
3724	assertion failure. [RT #302]
3725
3726	566. [func] New public function dns_timer_setidle().
3727
3728	565. [func] Log queries more like BIND 8: query logging is now
3729	done to category "queries", level "info". [RT #169]
3730
3731	564. [func] Add sortlist support to lwresd.
3732
3733	563. [func] New public functions dns_rdatatype_format() and
3734	dns_rdataclass_format(), for convenient formatting
3735	of rdata type/class mnemonics in log messages.
3736
3737	562. [cleanup] Moved lib/dns/*conf.c to bin/named where they belong.
3738
3739	561. [func] The 'datasize', 'stacksize', 'coresize' and 'files'
3740	clauses of the options{} statement are now implemented.
3741
3742	560. [bug] dns_name_split did not properly the resulting prefix
3743	when a maximal length bitstring label was split which
3744	was preceded by another bitstring label. [RT #429]
3745
3746	559. [bug] dns_name_split did not properly create the suffix
3747	when splitting within a maximal length bitstring label.
3748
3749	558. [func] New functions, isc_resource_getlimit and
3750	isc_resource_setlimit.
3751
3752	557. [func] Symbolic constants for libisc integral types.
3753
3754	556. [func] The DNSSEC OK bit in the EDNS extended flags
3755	is now implemented. Responses to queries without
3756	this bit set will not contain any DNSSEC records.
3757
3758	555. [bug] A slave server attempting a zone transfer could
3759	crash with an assertion failure on certain
3760	malformed responses from the master. [RT #457]
3761
3762	554. [bug] In some cases, not all of the dnssec tools were
3763	properly installed.
3764
3765	553. [bug] Incoming zone transfers deferred due to quota
3766	were not started when quota was increased but
3767	only when a transfer in progress finished. [RT #456]
3768
3769	552. [bug] We were not correctly detecting the end of all c-style
3770	comments. [RT #455]
3771
3772	551. [func] Implemented the 'sortlist' option.
3773
3774	550. [func] Support unknown rdata types and classes.
3775
3776	549. [bug] "make" did not immediately abort the build when a
3777	subdirectory make failed [RT #450].
3778
3779	548. [func] The lexer now ungets tokens more correctly.
3780
3781	546. [func] Option 'lame-ttl' is now implemented.
3782
3783	545. [func] Name limit and counting options removed from dig;
3784	they didn't work properly, and cannot be correctly
3785	implemented without significant changes.
3786
3787	544. [func] Add statistics option, enable statistics-file option,
3788	add RNDC option "dump-statistics" to write out a
3789	query statistics file.
3790
3791	543. [doc] The 'port' option is now documented.
3792
3793	542. [func] Add support for update forwarding as required for
3794	full compliance with RFC2136. It is turned off
3795	by default and can be enabled using the
3796	'allow-update-forwarding' option.
3797
3798	541. [func] Add bogus server support.
3799
3800	540. [func] Add dialup support.
3801
3802	539. [func] Support the blackhole option.
3803
3804	538. [bug] fix buffer overruns by 1 in lwres_getnameinfo().
3805
3806	536. [func] Use transfer-source{-v6} when sending refresh queries.
3807	Transfer-source{-v6} now take a optional port
3808	parameter for setting the UDP source port. The port
3809	parameter is ignored for TCP.
3810
3811	535. [func] Use transfer-source{-v6} when forwarding update
3812	requests.
3813
3814	534. [func] Ancestors have been removed from RBT chains. Ancestor
3815	information can be discerned via node parent pointers.
3816
3817	533. [func] Incorporated name hashing into the RBT database to
3818	improve search speed.
3819
3820	532. [func] Implement DNS UPDATE pseudo records using
3821	DNS_RDATA_UPDATE flag.
3822
3823	531. [func] Rdata really should be initialized before being assigned
3824	to (dns_rdata_fromwire(), dns_rdata_fromtext(),
3825	dns_rdata_clone(), dns_rdata_fromregion()),
3826	check that it is.
3827
3828	530. [func] New function dns_rdata_invalidate().
3829
3830	529. [bug] 521 contained a bug which caused zones to always
3831	reload. [RT #410]
3832
3833	528. [func] The ISC_LIST_XXXX macros now perform sanity checks
3834	on their arguments. ISC_LIST_XXXXUNSAFE can be use
3835	to skip the checks however use with caution.
3836
3837	527. [func] New function dns_rdata_clone().
3838
3839	526. [bug] nsupdate incorrectly refused to add RRs with a TTL
3840	of 0.
3841
3842	525. [func] New arguments 'options' for dns_db_subtractrdataset(),
3843	and 'flags' for dns_rdataslab_subtract() allowing you
3844	to request that the RR's must exist prior to deletion.
3845	DNS_R_NOTEXACT is returned if the condition is not met.
3846
3847	524. [func] The 'forward' and 'forwarders' statement in
3848	non-forward zones should work now.
3849
3850	523. [doc] The source to the Administrator Reference Manual is
3851	now an XML file using the DocBook DTD, and is included
3852	in the distribution. The plain text version of the
3853	ARM is temporarily unavailable while we figure out
3854	how to generate readable plain text from the XML.
3855
3856	522. [func] The lightweight resolver daemon can now use
3857	a real configuration file, and its functionality
3858	can be provided by a name server. Also, the -p and -P
3859	options to lwresd have been reversed.
3860
3861	521. [bug] Detect master files which contain $INCLUDE and always
3862	reload. [RT #196]
3863
3864	520. [bug] Upgraded libtool to 1.3.5, which makes shared
3865	library builds almost work on AIX (and possibly
3866	others).
3867
3868	519. [bug] dns_name_split() would improperly split some bitstring
3869	labels, zeroing a few of the least signficant bits in
3870	the prefix part. When such an improperly created
3871	prefix was returned to the RBT database, the bogus
3872	label was dutifully stored, corrupting the tree.
3873	[RT #369]
3874
3875	518. [bug] The resolver did not realize that a DNAME which was
3876	"the answer" to the client's query was "the answer",
3877	and such queries would fail. [RT #399]
3878
3879	517. [bug] The resolver's DNAME code would trigger an assertion
3880	if there was more than one DNAME in the chain.
3881	[RT #399]
3882
3883	516. [bug] Cache lookups which had a NULL node pointer, e.g.
3884	those by dns_view_find(), and which would match a
3885	DNAME, would trigger an INSIST(!search.need_cleanup)
3886	assertion. [RT #399]
3887
3888	515. [bug] The ssu table was not being attached / detached
3889	by dns_zone_[sg]etssutable. [RT#397]
3890
3891	514. [func] Retry refresh and notify queries if they timeout.
3892	[RT #388]
3893
3894	513. [func] New functionality added to rdnc and server to allow
3895	individual zones to be refreshed or reloaded.
3896
3897	512. [bug] The zone transfer code could throw an execption with
3898	an invalid IXFR stream.
3899
3900	511. [bug] The message code could throw an assertion on an
3901	out of memory failure. [RT #392]
3902
3903	510. [bug] Remove spurious view notify warning. [RT #376]
3904
3905	509. [func] Add support for write of zone files on shutdown.
3906
3907	508. [func] dns_message_parse() can now do a best-effort
3908	attempt, which should allow dig to print more invalid
3909	messages.
3910
3911	507. [func] New functions dns_zone_flush(), dns_zt_flushanddetach()
3912	and dns_view_flushanddetach().
3913
3914	506. [func] Do not fail to start on errors in zone files.
3915
3916	505. [bug] nsupdate was printing "unknown result code". [RT #373]
3917
3918	504. [bug] The zone was not being marked as dirty when updated via
3919	IXFR.
3920
3921	503. [bug] dumptime was not being set along with
3922	DNS_ZONEFLG_NEEDDUMP.
3923
3924	502. [func] On a SERVFAIL reply, DiG will now try the next server
3925	in the list, unless the +fail option is specified.
3926
3927	501. [bug] Incorrect port numbers were being displayed by
3928	nslookup. [RT #352]
3929
3930	500. [func] Nearly useless +details option removed from DiG.
3931
3932	499. [func] In DiG, specifying a class with -c or type with -t
3933	changes command-line parsing so that classes and
3934	types are only recognized if following -c or -t.
3935	This allows hosts with the same name as a class or
3936	type to be looked up.
3937
3938	498. [doc] There is now a man page for "dig"
3939	in doc/man/bin/dig.1.
3940
3941	497. [bug] The error messages printed when an IP match list
3942	contained a network address with a nonzero host
3943	part where not sufficiently detailed. [RT #365]
3944
3945	496. [bug] named didn't sanity check numeric parameters. [RT #361]
3946
3947	495. [bug] nsupdate was unable to handle large records. [RT #368]
3948
3949	494. [func] Do not cache NXDOMAIN responses for SOA queries.
3950
3951	493. [func] Return non-cachable (ttl = 0) NXDOMAIN responses
3952	for SOA queries. This makes it easier to locate
3953	the containing zone without polluting intermediate
3954	caches.
3955
3956	492. [bug] attempting to reload a zone caused the server fail
3957	to shutdown cleanly. [RT #360]
3958
3959	491. [bug] nsupdate would segfault when sending certain
3960	prerequisites with empty RDATA. [RT #356]
3961
3962	490. [func] When a slave/stub zone has not yet successfully
3963	obtained an SOA containing the zone's configured
3964	retry time, perform the SOA query retries using
3965	exponential backoff. [RT #337]
3966
3967	489. [func] The zone manager now has a "i/o" queue.
3968
3969	488. [bug] Locks weren't properly destroyed in some cases.
3970
3971	487. [port] flockfile() is not defined on all systems.
3972
3973	486. [bug] nslookup: "set all" and "server" commands showed
3974	the incorrect port number if a port other than 53
3975	was specified. [RT #352]
3976
3977	485. [func] When dig had more than one server to query, it would
3978	send all of the messages at the same time. Add
3979	rate limiting of the transmitted messages.
3980
3981	484. [bug] When the server was reloaded after removing addresses
3982	from the named.conf "listen-on" statement, sockets
3983	were still listening on the removed addresses due
3984	to reference count loops. [RT #325]
3985
3986	483. [bug] nslookup: "set all" showed a "search" option but it
3987	was not settable.
3988
3989	482. [bug] nslookup: a plain "server" or "lserver" should be
3990	treated as a lookup.
3991
3992	481. [bug] nslookup:get_next_command() stack size could exceed
3993	per thread limit.
3994
3995	480. [bug] strtok() is not thread safe. [RT #349]
3996
3997	479. [func] The test suite can now be run by typing "make check"
3998	or "make test" at the top level.
3999
4000	478. [bug] "make install" failed if the directory specified with
4001	--prefix did not already exist.
4002
4003	477. [bug] The the isc-config.sh script could be installed before
4004	its directory was created. [RT #324]
4005
4006	476. [bug] A zone could expire while a zone transfer was in
4007	progress triggering a INSIST failure. [RT #329]
4008
4009	475. [bug] query_getzonedb() sometimes returned a non-null version
4010	on failure. This caused assertion failures when
4011	generating query responses where names subject to
4012	additional section processing pointed to a zone
4013	to which access had been denied by means of the
4014	allow-query option. [RT #336]
4015
4016	474. [bug] The mnemonic of the CHAOS class is CH according to
4017	RFC1035, but it was printed and read only as CHAOS.
4018	We now accept both forms as input, and print it
4019	as CH. [RT #305]
4020
4021	473. [bug] nsupdate overran the end of the list of name servers
4022	when no servers could be reached, typically causing
4023	it to print the error message "dns_request_create:
4024	not implemented".
4025
4026	472. [bug] Off-by-one error caused isc_time_add() to sometimes
4027	produce invalid time values.
4028
4029	471. [bug] nsupdate didn't compile on HP/UX 10.20
4030
4031	470. [func] $GENERATE is now supported. See also
4032	doc/misc/migration.
4033
4034	469. [bug] "query-source address * port 53;" now works.
4035
4036	468. [bug] dns_master_load*() failed to report file and line
4037	number in certain error conditions.
4038
4039	467. [bug] dns_master_load*() failed to log an error if
4040	pushfile() failed.
4041
4042	466. [bug] dns_master_load*() could return success when it failed.
4043
4044	465. [cleanup] Allow 0 to be set as an omapi_value_t value by
4045	omapi_value_storeint().
4046
4047	464. [cleanup] Build with openssl's RSA code instead of dnssafe.
4048
4049	463. [bug] nsupdate sent malformed SOA queries to the second
4050	and subsequent name servers in resolv.conf if the
4051	query sent to the first one failed.
4052
4053	462. [bug] --disable-ipv6 should work now.
4054
4055	461. [bug] Specifying an unknown key in the "keys" clause of the
4056	"controls" statement caused a NULL pointer dereference.
4057	[RT #316]
4058
4059	460. [bug] Much of the DNSSEC code only worked with class IN.
4060
4061	459. [bug] Nslookup processed the "set" command incorrectly.
4062
4063	458. [bug] Nslookup didn't properly check class and type values.
4064	[RT #305]
4065
4066	457. [bug] Dig/host/hslookup didn't properly handle connect
4067	timeouts in certain situations, causing an
4068	unnecessary warning message to be printed.
4069
4070	456. [bug] Stub zones were not resetting the refresh and expire
4071	counters, loadtime or clearing the DNS_ZONE_REFRESH
4072	(refresh in progress) flag upon successful update.
4073	This disabled further refreshing of the stub zone,
4074	causing it to eventually expire. [RT #300]
4075
4076	455. [doc] Document IPv4 prefix notation does not require a
4077	dotted decimal quad but may be just dotted decimal.
4078
4079	454. [bug] Enforce dotted decimal and dotted decimal quad where
4080	documented as such in named.conf. [RT #304, RT #311]
4081
4082	453. [bug] Warn if the obsolete option "maintain-ixfr-base"
4083	is specified in named.conf. [RT #306]
4084
4085	452. [bug] Warn if the unimplemented option "statistics-file"
4086	is specified in named.conf. [RT #301]
4087
4088	451. [func] Update forwarding implememted.
4089
4090	450. [func] New function ns_client_sendraw().
4091
4092	449. [bug] isc_bitstring_copy() only works correctly if the
4093	two bitstrings have the same lsb0 value, but this
4094	requirement was not documented, nor was there a
4095	REQUIRE for it.
4096
4097	448. [bug] Host output formatting change, to match v8. [RT #255]
4098
4099	447. [bug] Dig didn't properly retry in TCP mode after
4100	a truncated reply. [RT #277]
4101
4102	446. [bug] Confusing notify log message. [RT #298]
4103
4104	445. [bug] Doing a 0 bit isc_bitstring_copy() of an lsb0
4105	bitstring triggered a REQUIRE statement. The REQUIRE
4106	statement was incorrect. [RT #297]
4107
4108	444. [func] "recursion denied" messages are always logged at
4109	debug level 1, now, rather than sometimes at ERROR.
4110	This silences these warnings in the usual case, where
4111	some clients set the RD bit in all queries.
4112
4113	443. [bug] When loading a master file failed because of an
4114	unrecognized RR type name, the error message
4115	did not include the file name and line number.
4116	[RT #285]
4117
4118	442. [bug] TSIG signed messages that did not match any view
4119	crashed the server. [RT #290]
4120
4121	441. [bug] Nodes obscured by a DNAME were inaccessible even
4122	when DNS_DBFIND_GLUEOK was set.
4123
4124	440. [func] New function dns_zone_forwardupdate().
4125
4126	439. [func] New function dns_request_createraw().
4127
4128	438. [func] New function dns_message_getrawmessage().
4129
4130	437. [func] Log NOTIFY activity to the notify channel.
4131
4132	436. [bug] If recvmsg() returned EHOSTUNREACH or ENETUNREACH,
4133	which sometimes happens on Linux, named would enter
4134	a busy loop. Also, unexpected socket errors were
4135	not logged at a high enough logging level to be
4136	useful in diagnosing this situation. [RT #275]
4137
4138	435. [bug] dns_zone_dump() overwrote existing zone files
4139	rather than writing to a temporary file and
4140	renaming. This could lead to empty or partial
4141	zone files being left around in certain error
4142	conditions involving the initial transfer of a
4143	slave zone, interfering with subsequent server
4144	startup. [RT #282]
4145
4146	434. [func] New function isc_file_isabsolute().
4147
4148	433. [func] isc_base64_decodestring() now accepts newlines
4149	within the base64 data. This makes it possible
4150	to break up the key data in a "trusted-keys"
4151	statement into multiple lines. [RT #284]
4152
4153	432. [func] Added refresh/retry jitter. The actual refresh/
4154	retry time is now a random value between 75% and
4155	100% of the configured value.
4156
4157	431. [func] Log at ISC_LOG_INFO when a zone is successfully
4158	loaded.
4159
4160	430. [bug] Rewrote the lightweight resolver client management
4161	code to handle shutdown correctly and general
4162	cleanup.
4163
4164	429. [bug] The space reserved for a TSIG record in a response
4165	was 2 bytes too short, leading to message
4166	generation failures.
4167
4168	428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
4169	DNS_R_BADDB for nodes which had neither NXT nor SIG NXT
4170	(e.g. glue). This could cause SERVFAILs when
4171	generating negative responses in a secure zone.
4172
4173	427. [bug] Avoid going into an infinite loop when the validator
4174	gets a negative response to a key query where the
4175	records are signed by the missing key.
4176
4177	426. [bug] Attempting to generate an oversized RSA key could
4178	cause dnssec-keygen to dump core.
4179
4180	425. [bug] Warn about the auth-nxdomain default value change
4181	if there is no auth-nxdomain statement in the
4182	config file. [RT #287]
4183
4184	424. [bug] notify_createmessage() could trigger an assertion
4185	failure when creating the notify message failed,
4186	e.g. due to corrupt zones with multiple SOA records.
4187	[RT #279]
4188
4189	423. [bug] When responding to a recusive query, errors that occur
4190	after following a CNAME should cause the query to fail.
4191	[RT #274]
4192
4193	422. [func] get rid of isc_random_t, and make isc_random_get()
4194	and isc_random_jitter() use rand() internally
4195	instead of local state. Note that isc_random_*()
4196	functions are only for weak, non-critical "randomness"
4197	such as timing jitter and such.
4198
4199	421. [bug] nslookup would exit when given a blank line as input.
4200
4201	420. [bug] nslookup failed to implement the "exit" command.
4202
4203	419. [bug] The certificate type PKIX was misspelled as SKIX.
4204
4205	418. [bug] At debug levels >= 10, getting an unexpected
4206	socket receive error would crash the server
4207	while trying to log the error message.
4208
4209	417. [func] Add isc_app_block() and isc_app_unblock(), which
4210	allow an application to handle signals while
4211	blocking.
4212
4213	416. [bug] Slave zones with no master file tried to use a
4214	NULL pointer for a journal file name when they
4215	received an IXFR. [RT #273]
4216
4217	415. [bug] The logging code leaked file descriptors.
4218
4219	414. [bug] Server did not shut down until all incoming zone
4220	transfers were finished.
4221
4222	413. [bug] Notify could attempt to use the zone database after
4223	it had been unloaded. [RT#267]
4224
4225	412. [bug] named -v didn't print the version.
4226
4227	411. [bug] A typo in the HS A code caused an assertion failure.
4228
4229	410. [bug] lwres_gethostbyname() and company set lwres_h_errno
4230	to a random value on success.
4231
4232	409. [bug] If named was shut down early in the startup
4233	process, ns_omapi_shutdown() would attempt to lock
4234	an unintialized mutex. [RT #262]
4235
4236	408. [bug] stub zones could leak memory and reference counts if
4237	all the masters were unreachable.
4238
4239	407. [bug] isc_rwlock_lock() would needlessly block
4240	readers when it reached the read quota even
4241	if no writers were waiting.
4242
4243	406. [bug] Log messages were occasionally lost or corrupted
4244	due to a race condition in isc_log_doit().
4245
4246	405. [func] Add support for selective forwarding (forward zones)
4247
4248	404. [bug] The request library didn't completely work with IPv6.
4249
4250	403. [bug] "host" did not use the search list.
4251
4252	402. [bug] Treat undefined acls as errors, rather than
4253	warning and then later throwing an assertion.
4254	[RT #252]
4255
4256	401. [func] Added simple database API.
4257
4258	400. [bug] SIG(0) signing and verifying was done incorrectly.
4259	[RT #249]
4260
4261	399. [bug] When reloading the server with a config file
4262	containing a syntax error, it could catch an
4263	assertion failure trying to perform zone
4264	maintenance on, or sending notifies from,
4265	tentatively created zones whose views were
4266	never fully configured and lacked an address
4267	database and request manager.
4268
4269	398. [bug] "dig" sometimes caught an assertion failure when
4270	using TSIG, depending on the key length.
4271
4272	397. [func] Added utility functions dns_view_gettsig() and
4273	dns_view_getpeertsig().
4274
4275	396. [doc] There is now a man page for "nsupdate"
4276	in doc/man/bin/nsupdate.8.
4277
4278	395. [bug] nslookup printed incorrect RR type mnemonics
4279	for RRs of type >= 21 [RT #237].
4280
4281	394. [bug] Current name was not propagated via $INCLUDE.
4282
4283	393. [func] Initial answer while loading (awl) support.
4284	Entry points: dns_master_loadfileinc(),
4285	dns_master_loadstreaminc(), dns_master_loadbufferinc().
4286	Note: calls to dns_master_load*inc() should be rate
4287	be rate limited so as to not use up all file
4288	descriptors.
4289
4290	392. [func] Add ISC_R_FAMILYNOSUPPORT. Returned when OS does
4291	not support the given address family requested.
4292
4293	391. [clarity] ISC_R_FAMILY -> ISC_R_FAMILYMISMATCH.
4294
4295	390. [func] The function dns_zone_setdbtype() now takes
4296	an argc/argv style vector of words and sets
4297	both the zone database type and its arguments,
4298	making the functions dns_zone_adddbarg()
4299	and dns_zone_cleardbargs() unnecessary.
4300
4301	389. [bug] Attempting to send a reqeust over IPv6 using
4302	dns_request_create() on a system without IPv6
4303	support caused an assertion failure [RT #235].
4304
4305	388. [func] dig and host can now do reverse ipv6 lookups.
4306
4307	387. [func] Add dns_byaddr_createptrname(), which converts
4308	an address into the name used by a PTR query.
4309
4310	386. [bug] Missing strdup() of ACL name caused random
4311	ACL matching failures [RT #228].
4312
4313	385. [cleanup] Removed functions dns_zone_equal(), dns_zone_print(),
4314	and dns_zt_print().
4315
4316	384. [bug] nsupdate was incorrectly limiting TTLs to 65535 instead
4317	of 2147483647.
4318
4319	383. [func] When writing a master file, print the SOA and NS
4320	records (and their SIGs) before other records.
4321
4322	382. [bug] named -u failed on many Linux systems where the
4323	libc provided kernel headers do not match
4324	the current kernel.
4325
4326	381. [bug] Check for IPV6_RECVPKTINFO and use it instead of
4327	IPV6_PKTINFO if found. [RT #229]
4328
4329	380. [bug] nsupdate didn't work with IPv6.
4330
4331	379. [func] New library function isc_sockaddr_anyofpf().
4332
4333	378. [func] named and lwresd will log the command line arguments
4334	they were started with in the "starting ..." message.
4335
4336	377. [bug] When additional data lookups were refused due to
4337	"allow-query", the databases were still being
4338	attached causing reference leaks.
4339
4340	376. [bug] The server should always use good entropy when
4341	performing cryptographic functions needing entropy.
4342
4343	375. [bug] Per-zone "allow-query" did not properly override the
4344	view/global one for CNAME targets and additional
4345	data [RT #220].
4346
4347	374. [bug] SOA in authoritative negative responses had wrong TTL.
4348
4349	373. [func] nslookup is now installed by "make install".
4350
4351	372. [bug] Deal with Microsoft DNS servers appending two bytes of
4352	garbage to zone transfer requests.
4353
4354	371. [bug] At high debug levels, doing an outgoing zone transfer
4355	of a very large RRset could cause an assertion failure
4356	during logging.
4357
4358	370. [bug] The error messages for rollforward failures were
4359	overly terse.
4360
4361	369. [func] Support new named.conf options, view and zone
4362	statements:
4363
4364	max-retry-time, min-retry-time,
4365	max-refresh-time, min-refresh-time.
4366
4367	368. [func] Restructure the internal ".bind" view so that more
4368	zones can be added to it.
4369
4370	367. [bug] Allow proper selection of server on nslookup command
4371	line.
4372
4373	366. [func] Allow use of '-' batch file in dig for stdin.
4374
4375	365. [bug] nsupdate -k leaked memory.
4376
4377	364. [func] Added additional-from-{cache,auth}
4378
4379	362. [bug] rndc no longer aborts if the configuration file is
4380	missing an options statement. [RT #209]
4381
4382	361. [func] When the RBT find or chain functions set the name and
4383	origin for a node that stores the root label
4384	the name is now set to an empty name, instead of ".",
4385	to simplify later use of the name and origin by
4386	dns_name_concatenate(), dns_name_totext() or
4387	dns_name_format().
4388
4389	360. [func] dns_name_totext() and dns_name_format() now allow
4390	an empty name to be passed, which is formatted as "@".
4391
4392	359. [bug] dnssec-signzone occasionally signed glue records.
4393
4394	358. [cleanup] Rename the intermediate files used by the dnssec
4395	programs.
4396
4397	357. [bug] The zone file parser crashed if the argument
4398	to $INCLUDE was a quoted string.
4399
4400	356. [cleanup] isc_task_send no longer requires event->sender to
4401	be non-null.
4402
4403	355. [func] Added isc_dir_createunique(), similar to mkdtemp().
4404
4405	354. [doc] Man pages for the dnssec tools are now included in
4406	the distribution, in doc/man/dnssec.
4407
4408	353. [bug] double increment in lwres/gethost.c:copytobuf().
4409	[RT# 187]
4410
4411	352. [bug] Race condition in dns_client_t startup could cause
4412	an assertion failure.
4413
4414	351. [bug] Constructing a response with rcode SERVFAIL to a TSIG
4415	signed query could crash the server.
4416
4417	350. [bug] Also-notify lists specified in the global options
4418	block were not correctly reference counted, causing
4419	a memory leak.
4420
4421	349. [bug] Processing a query with the CD bit set now works
4422	as expected.
4423
4424	348. [func] New boolean named.conf options 'additional-from-auth'
4425	and 'additional-from-cache' now supported in view and
4426	global options statement.
4427
4428	347. [bug] Don't crash if an argument is left off options in dig.
4429
4430	346. [func] Add support for .digrc config file, in the
4431	user's current directory.
4432
4433	345. [bug] Large-scale changes/cleanups to dig:
4434	* Significantly improve structure handling
4435	* Don't pre-load entire batch files
4436	* Add name/rr counting/limiting
4437	* Fix SIGINT handling
4438	* Shorten timeouts to match v8's behavior
4439
4440	344. [bug] When shutting down, lwresd sometimes tried
4441	to shut down its client tasks twice,
4442	triggering an assertion.
4443
4444	343. [bug] Although zone maintenance SOA queries and
4445	notify requests were signed with TSIG keys
4446	when configured for the server in case,
4447	the TSIG was not verified on the response.
4448
4449	342. [bug] The wrong name was being passed to
4450	dns_name_dup() when generating a TSIG
4451	key using TKEY.
4452
4453	341. [func] Support 'key' clause in named.conf zone masters
4454	statement to allow authentication via TSIG keys:
4455
4456	masters {
4457	10.0.0.1 port 5353 key "foo";
4458	10.0.0.2 ;
4459	};
4460
4461	340. [bug] The top-level COPYRIGHT file was missing from
4462	the distribution.
4463
4464	339. [bug] DNSSEC validation of the response to an ANY
4465	query at a name with a CNAME RR in a secure
4466	zone triggered an assertion failure.
4467
4468	338. [bug] lwresd logged to syslog as named, not lwresd.
4469
4470	337. [bug] "dig" did not recognize "nsap-ptr" as an RR type
4471	on the command line.
4472
4473	336. [bug] "dig -f" used 64 k of memory for each line in
4474	the file. It now uses much less, though still
4475	proportionally to the file size.
4476
4477	335. [bug] named would occasionally attempt recursion when
4478	it was disallowed or undesired.
4479
4480	334. [func] Added hmac-md5 to libisc.
4481
4482	333. [bug] The resolver incorrectly accepted referrals to
4483	domains that were not parents of the query name,
4484	causing assertion failures.
4485
4486	332. [func] New function dns_name_reset().
4487
4488	331. [bug] Only log "recursion denied" if RD is set. [RT #178]
4489
4490	330. [bug] Many debugging messages were partially formatted
4491	even when debugging was turned off, causing a
4492	significant decrease in query performance.
4493
4494	329. [func] omapi_auth_register() now takes a size_t argument for
4495	the length of a key's secret data. Previously
4496	OMAPI only stored secrets up to the first NUL byte.
4497
4498	328. [func] Added isc_base64_decodestring().
4499
4500	327. [bug] rndc.conf parser wasn't correctly recognising an IP
4501	address where a host specification was required.
4502
4503	326. [func] 'keys' in an 'inet' control statement is now
4504	required and must have at least one item in it.
4505	A "not supported" warning is now issued if a 'unix'
4506	control channel is defined.
4507
4508	325. [bug] isc_lex_gettoken was processing octal strings when
4509	ISC_LEXOPT_CNUMBER was not set.
4510
4511	324. [func] In the resolver, turn EDNS0 off if there is no
4512	response after a number of retransmissions.
4513	This is to allow queries some chance of succeeding
4514	even if all the authoritative servers of a zone
4515	silently discard EDNS0 requests instead of
4516	sending an error response like they ought to.
4517
4518	323. [bug] dns_rbt_findname() did not ignore empty rbt nodes.
4519	Because of this, servers authoritative for a parent
4520	and grandchild zone but not authoritative for the
4521	intervening child zone did not correctly issue
4522	referrals to the servers of the child zone.
4523
4524	322. [bug] Queries for KEY RRs are now sent to the parent
4525	server before the authoritative one, making
4526	DNSSEC insecurity proofs work in many cases
4527	where they previously didn't.
4528
4529	321. [bug] When synthesizing a CNAME RR for a DNAME
4530	response, query_addcname() failed to intitialize
4531	the type and class of the CNAME dns_rdata_t,
4532	causing random failures.
4533
4534	320. [func] Multiple rndc changes: parses an rndc.conf file,
4535	uses authentication to talk to named, command
4536	line syntax changed. This will all be described
4537	in the ARM.
4538
4539	319. [func] The named.conf "controls" statement is now used
4540	to configure the OMAPI command channel.
4541
4542	318. [func] dns_c_ndcctx_destroy() could never return anything
4543	except ISC_R_SUCCESS; made it have void return instead.
4544
4545	317. [func] Use callbacks from libomapi to determine if a
4546	new connection is valid, and if a key requested
4547	to be used with that connection is valid.
4548
4549	316. [bug] Generate a warning if we detect an unexpected <eof>
4550	but treat as <eol><eof>.
4551
4552	315. [bug] Handle non-empty blanks lines. [RT #163]
4553
4554	314. [func] The named.conf controls statement can now have
4555	more than one key specified for the inet clause.
4556
4557	313. [bug] When parsing resolv.conf, don't terminate on an
4558	error. Instead, parse as much as possible, but
4559	still return an error if one was found.
4560
4561	312. [bug] Increase the number of allowed elements in the
4562	resolv.conf search path from 6 to 8. If there
4563	are more than this, ignore the remainder rather
4564	than returning a failure in lwres_conf_parse.
4565
4566	311. [bug] lwres_conf_parse failed when the first line of
4567	resolv.conf was empty or a comment.
4568
4569	310. [func] Changes to named.conf "controls" statement (inet
4570	subtype only)
4571
4572	- support "keys" clause
4573
4574	controls {
4575	inet * port 1024
4576	allow { any; } keys { "foo"; }
4577	}
4578
4579	- allow "port xxx" to be left out of statement,
4580	in which case it defaults to omapi's default port
4581	of 953.
4582
4583	309. [bug] When sending a referral, the server did not look
4584	for name server addresses as glue in the zone
4585	holding the NS RRset in the case where this zone
4586	was not the same as the one where it looked for
4587	name server addresses as authoritative data.
4588
4589	308. [bug] Treat a SOA record not at top of zone as an error
4590	when loading a zone. [RT #154]
4591
4592	307. [bug] When canceling a query, the resolver didn't check for
4593	isc_socket_sendto() calls that did not yet have their
4594	completion events posted, so it could (rarely) end up
4595	destroying the query context and then want to use
4596	it again when the send event posted, triggering an
4597	assertion as it tried to cancel an already-canceled
4598	query. [RT #77]
4599
4600	306. [bug] Reading HMAC-MD5 private key files didn't work.
4601
4602	305. [bug] When reloading the server with a config file
4603	containing a syntax error, it could catch an
4604	assertion failure trying to perform zone
4605	maintenance on tentatively created zones whose
4606	views were never fully configured and lacked
4607	an address database.
4608
4609	304. [bug] If more than LWRES_CONFMAXNAMESERVERS servers
4610	are listed in resolv.conf, silently ignore them
4611	instead of returning failure.
4612
4613	303. [bug] Add additional sanity checks to differentiate a AXFR
4614	response vs a IXFR response. [RT #157]
4615
4616	302. [bug] In dig, host, and nslookup, MXNAME should be large
4617	enough to hold any legal domain name in presentation
4618	format + terminating NULL.
4619
4620	301. [bug] Uninitialized pointer in host:printmessage(). [RT #159]
4621
4622	300. [bug] Using both <isc/net.h> and <lwres/net.h> didn't work
4623	on platforms lacking IPv6 because each included their
4624	own ipv6 header file for the missing definitions. Now
4625	each library's ipv6.h defines the wrapper symbol of
4626	the other (ISC_IPV6_H and LWRES_IPV6_H).
4627
4628	299. [cleanup] Get the user and group information before changing the
4629	root directory, so the administrator does not need to
4630	keep a copy of the user and group databases in the
4631	chroot'ed environment. Suggested by Hakan Olsson.
4632
4633	298. [bug] A mutex deadlock occurred during shutdown of the
4634	interface manager under certain conditions.
4635	Digital Unix systems were the most affected.
4636
4637	297. [bug] Specifying a key name that wasn't fully qualified
4638	in certain parts of the config file could cause
4639	an assertion failure.
4640
4641	296. [bug] "make install" from a separate build directory
4642	failed unless configure had been run in the source
4643	directory, too.
4644
4645	295. [bug] When invoked with type==CNAME and a message
4646	not constructed by dns_message_parse(),
4647	dns_message_findname() failed to find anything
4648	due to checking for attribute bits that are set
4649	only in dns_message_parse(). This caused an
4650	infinite loop when constructing the response to
4651	an ANY query at a CNAME in a secure zone.
4652
4653	294. [bug] If we run out of space in while processing glue
4654	when reading a master file and commit "current name"
4655	reverts to "name_current" instead of staying as
4656	"name_glue".
4657
4658	293. [port] Add support for FreeBSD 4.0 system tests.
4659
4660	292. [bug] Due to problems with the way some operating systems
4661	handle simultaneous listening on IPv4 and IPv6
4662	addresses, the server no longer listens on IPv6
4663	addresses by default. To revert to the previous
4664	behavior, specify "listen-on-v6 { any; };" in
4665	the config file.
4666
4667	291. [func] Caching servers no longer send outgoing queries
4668	over TCP just because the incoming recursive query
4669	was a TCP one.
4670
4671	290. [cleanup] +twiddle option to dig (for testing only) removed.
4672
4673	289. [cleanup] dig is now installed in $bindir instead of $sbindir.
4674	host is now installed in $bindir. (Be sure to remove
4675	any $sbindir/dig from a previous release.)
4676
4677	288. [func] rndc is now installed by "make install" into $sbindir.
4678
4679	287. [bug] rndc now works again as "rndc 127.1 reload" (for
4680	only that task). Parsing its configuration file and
4681	using digital signatures for authentication has been
4682	disabled until named supports the "controls" statement,
4683	post-9.0.0.
4684
4685	286. [bug] On Solaris 2, when named inherited a signal state
4686	where SIGHUP had the SIG_IGN action, SIGHUP would
4687	be ignored rather than causing the server to reload
4688	its configuration.
4689
4690	285. [bug] A change made to the dst API for beta4 inadvertently
4691	broke OMAPI's creation of a dst key from an incoming
4692	message, causing an assertion to be triggered. Fixed.
4693
4694	284. [func] The DNSSEC key generation and signing tools now
4695	generate randomness from keyboard input on systems
4696	that lack /dev/random.
4697
4698	283. [cleanup] The 'lwresd' program is now a link to 'named'.
4699
4700	282. [bug] The lexer now returns ISC_R_RANGE if parsed integer is
4701	too big for an unsigned long.
4702
4703	281. [bug] Fixed list of recognized config file category names.
4704
4705	280. [func] Add isc-config.sh, which can be used to more
4706	easily build applications that link with
4707	our libraries.
4708
4709	279. [bug] Private omapi function symbols shared between
4710	two or more files in libomapi.a were not namespace
4711	protected using the ISC convention of starting with
4712	the library name and two underscores ("omapi__"...)
4713
4714	278. [bug] bin/named/logconf.c:category_fromconf() didn't take
4715	note of when isc_log_categorybyname() wasn't able
4716	to find the category name and would then apply the
4717	channel list of the unknown category to all categories.
4718
4719	277. [bug] isc_log_categorybyname() and isc_log_modulebyname()
4720	would fail to find the first member of any category
4721	or module array apart from the internal defaults.
4722	Thus, for example, the "notify" category was improperly
4723	configured by named.
4724
4725	276. [bug] dig now supports maximum sized TCP messages.
4726
4727	275. [bug] The definition of lwres_gai_strerror() was missing
4728	the lwres_ prefix.
4729
4730	274. [bug] TSIG AXFR verify failed when talking to a BIND 8
4731	server.
4732
4733	273. [func] The default for the 'transfer-format' option is
4734	now 'many-answers'. This will break zone transfers
4735	to BIND 4.9.5 and older unless there is an explicit
4736	'one-answer' configuration.
4737
4738	272. [bug] The sending of large TCP responses was canceled
4739	in mid-transmission due to a race condition
4740	caused by the failure to set the client object's
4741	"newstate" variable correctly when transitioning
4742	to the "working" state.
4743
4744	271. [func] Attempt to probe the number of cpus in named
4745	if unspecified rather than defaulting to 1.
4746
4747	270. [func] Allow maximum sized TCP answers.
4748
4749	269. [bug] Failed DNSSEC validations could cause an assertion
4750	failure by causing clone_results() to be called with
4751	with hevent->node == NULL.
4752
4753	268. [doc] A plain text version of the Administrator
4754	Reference Manual is now included in the distribution,
4755	as doc/arm/Bv9ARM.txt.
4756
4757	267. [func] Nsupdate is now provided in the distribution.
4758
4759	266. [bug] zone.c:save_nsrrset() node was not initialized.
4760
4761	265. [bug] dns_request_create() now works for TCP.
4762
4763	264. [func] Dispatch can not take TCP sockets in connecting
4764	state. Set DNS_DISPATCHATTR_CONNECTED when calling
4765	dns_dispatch_createtcp() for connected TCP sockets
4766	or call dns_dispatch_starttcp() when the socket is
4767	connected.
4768
4769	263. [func] New logging channel type 'stderr'
4770
4771	channel some-name {
4772	stderr;
4773	severity error;
4774	}
4775
4776	262. [bug] 'master' was not initialized in zone.c:stub_callback().
4777
4778	261. [func] Add dns_zone_markdirty().
4779
4780	260. [bug] Running named as a non-root user failed on Linux
4781	kernels new enough to support retaining capabilities
4782	after setuid().
4783
4784	259. [func] New random-device and random-seed-file statements
4785	for global options block of named.conf. Both accept
4786	a single string argument.
4787
4788	258. [bug] Fixed printing of lwres_addr_t.address field.
4789
4790	257. [bug] The server detached the last zone manager reference
4791	too early, while it could still be in use by queries.
4792	This manifested itself as assertion failures during the
4793	shutdown process for busy name servers. [RT #133]
4794
4795	256. [func] isc_ratelimiter_t now has attach/detach semantics, and
4796	isc_ratelimiter_shutdown guarantees that the rate
4797	limiter is detached from its task.
4798
4799	255. [func] New function dns_zonemgr_attach().
4800
4801	254. [bug] Suppress "query denied" messages on additional data
4802	lookups.
4803
4804	--- 9.0.0b4 released ---
4805
4806	253. [func] resolv.conf parser now recognises ';' and '#' as
4807	comments (anywhere in line, not just as the beginning).
4808
4809	252. [bug] resolv.conf parser mishandled masks on sortlists.
4810	It also aborted when an unrecognized keyword was seen,
4811	now it silently ignores the entire line.
4812
4813	251. [bug] lwresd caught an assertion failure on startup.
4814
4815	250. [bug] fixed handling of size+unit when value would be too
4816	large for internal representation.
4817
4818	249. [cleanup] max-cache-size config option now takes a size-spec
4819	like 'datasize', except 'default' is not allowed.
4820
4821	248. [bug] global lame-ttl option was not being printed when
4822	config structures were written out.
4823
4824	247. [cleanup] Rename cache-size config option to max-cache-size.
4825
4826	246. [func] Rename global option cachesize to cache-size and
4827	add corresponding option to view statement.
4828
4829	245. [bug] If an uncompressed name will take more than 255
4830	bytes and the buffer is sufficiently long,
4831	dns_name_fromwire should return DNS_R_FORMERR,
4832	not ISC_R_NOSPACE. This bug caused cause the
4833	server to catch an assertion failure when it
4834	received a query for a name longer than 255
4835	bytes.
4836
4837	244. [bug] empty named.conf file and empty options statement are
4838	now parsed properly.
4839
4840	243. [func] new cachesize option for named.conf
4841
4842	242. [cleanup] fixed incorrect warning about auth-nxdomain usage.
4843
4844	241. [cleanup] nscount and soacount have been removed from the
4845	dns_master_*() argument lists.
4846
4847	240. [func] databases now come in three flavours: zone, cache
4848	and stub.
4849
4850	239. [func] If ISC_MEM_DEBUG is enabled, the variable
4851	isc_mem_debugging controls whether messages
4852	are printed or not.
4853
4854	238. [cleanup] A few more compilation warnings have been quieted:
4855	+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
4856	+ PTHREAD_ONCE_INIT unbraced initializer warnings on
4857	Solaris 2.8.
4858	+ IN6ADDR_ANY_INIT unbraced initializer warnings on
4859	BSD/OS 4.*, Linux and Solaris 2.8.
4860
4861	237. [bug] If connect() returned ENOBUFS when the resolver was
4862	initiating a TCP query, the socket didn't get
4863	destroyed, and the server did not shut down cleanly.
4864
4865	236. [func] Added new listen-on-v6 config file statement.
4866
4867	235. [func] Consider it a config file error if a listen-on
4868	statement has an IPv6 address in it, or a
4869	listen-on-v6 statement has an IPv4 address in it.
4870
4871	234. [bug] Allow a trusted-key's first field (domain-name) be
4872	either a quoted or an unquoted string, instead of
4873	requiring a quoted string.
4874
4875	233. [cleanup] Convert all config structure integer values to unsigned
4876	integer (isc_uint32_t) to match grammer.
4877
4878	232. [bug] Allow slave zones to not have a file.
4879
4880	231. [func] Support new 'port' clause in config file options
4881	section. Causes 'listen-on', 'masters' and
4882	'also-notify' statements to use its value instead of
4883	default (53).
4884
4885	230. [func] Replace the dst sign/verify API with a cleaner one.
4886
4887	229. [func] Support config file sig-validity-interval statement
4888	in options, views and zone statements (master
4889	zones only).
4890
4891	228. [cleanup] Logging messages in config module stripped of
4892	trailing period.
4893
4894	227. [cleanup] The enumerated identifiers dns_rdataclass_*,
4895	dns_rcode_, dns_opcode_, and dns_trust_* are
4896	also now cast to their appropriate types, as with
4897	dns_rdatatype_* in item number 225 below.
4898
4899	226. [func] dns_name_totext() now always prints the root name as
4900	'.', even when omit_final_dot is true.
4901
4902	225. [cleanup] The enumerated dns_rdatatype_* identifiers are now
4903	cast to dns_rdatatype_t via macros of their same name
4904	so that they are of the proper integral type wherever
4905	a dns_rdatatype_t is needed.
4906
4907	224. [cleanup] The entire project builds cleanly with gcc's
4908	-Wcast-qual and -Wwrite-strings warnings enabled,
4909	which is now the default when using gcc. (Warnings
4910	from confparser.c, because of yacc's code, are
4911	unfortunately to be expected.)
4912
4913	223. [func] Several functions were reprototyped to qualify one
4914	or more of their arguments with "const". Similarly,
4915	several functions that return pointers now have
4916	those pointers qualified with const.
4917
4918	222. [bug] The global 'also-notify' option was ignored.
4919
4920	221. [bug] An uninitialized variable was sometimes passed to
4921	dns_rdata_freestruct() when loading a zone, causing
4922	an assertion failure.
4923
4924	220. [cleanup] Set the default outgoing port in the view, and
4925	set it in sockaddrs returned from the ADB.
4926	[31-May-2000 explorer]
4927
4928	219. [bug] Signed truncated messages more correctly follow
4929	the respective specs.
4930
4931	218. [func] When an rdataset is signed, its ttl is normalized
4932	based on the signature validity period.
4933
4934	217. [func] Also-notify and trusted-keys can now be used in
4935	the 'view' statement.
4936
4937	216. [func] The 'max-cache-ttl' and 'max-ncache-ttl' options
4938	now work.
4939
4940	215. [bug] Failures at certain points in request processing
4941	could cause the assertion INSIST(client->lockview
4942	== NULL) to be triggered.
4943
4944	214. [func] New public function isc_netaddr_format(), for
4945	formatting network addresses in log messages.
4946
4947	213. [bug] Don't leak memory when reloading the zone if
4948	an update-policy clause was present in the old zone.
4949
4950	212. [func] Added dns_message_get/settsigkey, to make TSIG
4951	key management reasonable.
4952
4953	211. [func] The 'key' and 'server' statements can now occur
4954	inside 'view' statements.
4955
4956	210. [bug] The 'allow-transfer' option was ignored for slave
4957	zones, and the 'transfers-per-ns' option was
4958	was ignored for all zones.
4959
4960	209. [cleanup] Upgraded openssl files to new version 0.9.5a
4961
4962	208. [func] Added ISC_OFFSET_MAXIMUM for the maximum value
4963	of an isc_offset_t.
4964
4965	207. [func] The dnssec tools properly use the logging subsystem.
4966
4967	206. [cleanup] dst now stores the key name as a dns_name_t, not
4968	a char *.
4969
4970	205. [cleanup] On IRIX, turn off the mostly harmless warnings 1692
4971	("prototyped function redeclared without prototype")
4972	and 1552 ("variable ... set but not used") when
4973	compiling in the lib/dns/sec/{dnssafe,openssl}
4974	directories, which contain code imported from outside
4975	sources.
4976
4977	204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
4978	to quiet the warnings that "The linked output may not
4979	run on a PA 1.x system."
4980
4981	203. [func] notify and zone soa queries are now tsig signed when
4982	appropriate.
4983
4984	202. [func] isc_lex_getsourceline() changed from returning int
4985	to returning unsigned long, the type of its underlying
4986	counter.
4987
4988	201. [cleanup] Removed the test/sdig program, it has been
4989	replaced by bin/dig/dig.
4990
4991
4992	--- 9.0.0b3 released ---
4993
4994	200. [bug] Failures in sending query responses to clients
4995	(e.g., running out of network buffers) were
4996	not logged.
4997
4998	199. [bug] isc_heap_delete() sometimes violated the heap
4999	invariant, causing timer events not to be posted
5000	when due.
5001
5002	198. [func] Dispatch managers hold memory pools which
5003	any managed dispatcher may use. This allows
5004	us to avoid dipping into the memory context for
5005	most allocations. [19-May-2000 explorer]
5006
5007	197. [bug] When an incoming AXFR or IXFR completes, the
5008	zone's internal state is refreshed from the
5009	SOA data. [19-May-2000 explorer]
5010
5011	196. [func] Dispatchers can be shared easily between views
5012	and/or interfaces. [19-May-2000 explorer]
5013
5014	195. [bug] Including the NXT record of the root domain
5015	in a negative response caused an assertion
5016	failure.
5017
5018	194. [doc] The PDF version of the Administrator's Reference
5019	Manual is no longer included in the ISC BIND9
5020	distribution.
5021
5022	193. [func] changed dst_key_free() prototype.
5023
5024	192. [bug] Zone configuration validation is now done at end
5025	of config file parsing, and before loading
5026	callbacks.
5027
5028	191. [func] Patched to compile on UnixWare 7.x. This platform
5029	is not directly supported by the ISC.
5030
5031	190. [cleanup] The DNSSEC tools have been moved to a separate
5032	directory dnssec/ and given the following new,
5033	more descriptive names:
5034
5035	dnssec-keygen
5036	dnssec-signzone
5037	dnssec-signkey
5038	dnssec-makekeyset
5039
5040	Their command line arguments have also been changed to
5041	be more consistent. dnssec-keygen now prints the
5042	name of the generated key files (sans extension)
5043	on standard output to simplify its use in automated
5044	scripts.
5045
5046	189. [func] isc_time_secondsastimet(), a new function, will ensure
5047	that the number of seconds in an isc_time_t does not
5048	exceed the range of a time_t, or return ISC_R_RANGE.
5049	Similarly, isc_time_now(), isc_time_nowplusinterval(),
5050	isc_time_add() and isc_time_subtract() now check the
5051	range for overflow/underflow. In the case of
5052	isc_time_subtract, this changed a calling requirement
5053	(ie, something that could generate an assertion)
5054	into merely a condition that returns an error result.
5055	isc_time_add() and isc_time_subtract() were void-
5056	valued before but now return isc_result_t.
5057
5058	188. [func] Log a warning message when an incoming zone transfer
5059	contains out-of-zone data.
5060
5061	187. [func] isc_ratelimter_enqueue() has an additional argument
5062	'task'.
5063
5064	186. [func] dns_request_getresponse() has an additional argument
5065	'preserve_order'.
5066
5067	185. [bug] Fixed up handling of ISC_MEMCLUSTER_LEGACY. Several
5068	public functions did not have an isc__ prefix, and
5069	referred to functions that had previously been
5070	renamed.
5071
5072	184. [cleanup] Variables/functions which began with two leading
5073	underscores were made to conform to the ANSI/ISO
5074	standard, which says that such names are reserved.
5075
5076	183. [func] ISC_LOG_PRINTTAG option for log channels. Useful
5077	for logging the program name or other identifier.
5078
5079	182. [cleanup] New commandline parameters for dnssec tools
5080
5081	181. [func] Added dst_key_buildfilename and dst_key_parsefilename
5082
5083	180. [func] New isc_result_t ISC_R_RANGE. Supersedes DNS_R_RANGE.
5084
5085	179. [func] options named.conf statement must now come
5086	before any zone or view statements.
5087
5088	178. [func] Post-load of named.conf check verifies a slave zone
5089	has non-empty list of masters defined.
5090
5091	177. [func] New per-zone boolean:
5092
5093	enable-zone yes \| no ;
5094
5095	intended to let a zone be disabled without having
5096	to comment out the entire zone statement.
5097
5098	176. [func] New global and per-view option:
5099
5100	max-cache-ttl number
5101
5102	175. [func] New global and per-view option:
5103
5104	additional-data internal \| minimal \| maximal;
5105
5106	174. [func] New public function isc_sockaddr_format(), for
5107	formatting socket addresses in log messages.
5108
5109	173. [func] Keep a queue of zones waiting for zone transfer
5110	quota so that a new transfer can be dispatched
5111	immediately whenever quota becomes available.
5112
5113	172. [bug] $TTL directive was sometimes missing from dumped
5114	master files because totext_ctx_init() failed to
5115	initialize ctx->current_ttl_valid.
5116
5117	171. [cleanup] On NetBSD systems, the mit-pthreads or
5118	unproven-pthreads library is now always used
5119	unless --with-ptl2 is explicitly specified on
5120	the configure command line. The
5121	--with-mit-pthreads option is no longer needed
5122	and has been removed.
5123
5124	170. [cleanup] Remove inter server consistancy checks from zone,
5125	these should return as a seperate module in 9.1.
5126	dns_zone_checkservers(), dns_zone_checkparents(),
5127	dns_zone_checkchildren(), dns_zone_checkglue().
5128
5129	Remove dns_zone_setadb(), dns_zone_setresolver(),
5130	dns_zone_setrequestmgr() these should now be found
5131	via the view.
5132
5133	169. [func] ratelimiter can now process N events per interval.
5134
5135	168. [bug] include statements in named.conf caused syntax errors
5136	due to not consuming the semicolon ending the include
5137	statement before switching input streams.
5138
5139	167. [bug] Make lack of masters for a slave zone a soft error.
5140
5141	166. [bug] Keygen was overwriting existing keys if key_id
5142	conflicted, now it will retry, and non-null keys
5143	with key_id == 0 are not generated anymore. Key
5144	was not able to generate NOAUTHCONF DSA key,
5145	increased RSA key size to 2048 bits.
5146
5147	165. [cleanup] Silence "end-of-loop condition not reached" warnings
5148	from Solaris compiler.
5149
5150	164. [func] Added functions isc_stdio_open(), isc_stdio_close(),
5151	isc_stdio_seek(), isc_stdio_read(), isc_stdio_write(),
5152	isc_stdio_flush(), isc_stdio_sync(), isc_file_remove()
5153	to encapsulate nonportable usage of errno and sync.
5154
5155	163. [func] Added result codes ISC_R_FILENOTFOUND and
5156	ISC_R_FILEEXISTS.
5157
5158	162. [bug] Ensure proper range for arguments to ctype.h functions.
5159
5160	161. [cleanup] error in yyparse prototype that only HPUX caught.
5161
5162	160. [cleanup] getnet*() are not going to be implemented at this
5163	stage.
5164
5165	159. [func] Redefinition of config file elements is now an
5166	error (instead of a warning).
5167
5168	158. [bug] Log channel and category list copy routines
5169	weren't assigning properly to output parameter.
5170
5171	157. [port] Fix missing prototype for getopt().
5172
5173	156. [func] Support new 'database' statement in zone.
5174
5175	database "quoted-string";
5176
5177	155. [bug] ns_notify_start() was not detaching the found zone.
5178
5179	154. [func] The signer now logs libdns warnings to stderr even when
5180	not verbose, and in a nicer format.
5181
5182	153. [func] dns_rdata_tostruct() 'mctx' is now optional. If 'mctx'
5183	is NULL then you need to preserve the 'rdata' until
5184	you have finished using the structure as there may be
5185	references to the associated memory. If 'mctx' is
5186	non-NULL it is guaranteed that there are no references
5187	to memory associated with 'rdata'.
5188
5189	dns_rdata_freestruct() must be called if 'mctx' was
5190	non-NULL and may safely be called if 'mctx' was NULL.
5191
5192	152. [bug] keygen dumped core if domain name argument was omitted
5193	from command line.
5194
5195	151. [func] Support 'disabled' statement in zone config (causes
5196	zone to be parsed and then ignored). Currently must
5197	come after the 'type' clause.
5198
5199	150. [func] Support optional ports in masters and also-notify
5200	statements:
5201
5202	masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
5203
5204	149. [cleanup] Removed usused argument 'olist' from
5205	dns_c_view_unsetordering().
5206
5207	148. [cleanup] Stop issuing some warnings about some configuration
5208	file statements that were not implemented, but now are.
5209
5210	147. [bug] Changed yacc union size to be smaller for yaccs that
5211	put yacc-stack on the real stack.
5212
5213	146. [cleanup] More general redundant header file cleanup. Rather
5214	than continuing to itemize every header which changed,
5215	this changelog entry just notes that if a header file
5216	did not need another header file that it was including
5217	in order to provide its advertized functionality, the
5218	inclusion of the other header file was removed. See
5219	util/check-includes for how this was tested.
5220
5221	145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
5222	ISC_LANG_ENDDECLS to header files that had function
5223	prototypes, and removed it from those that did not.
5224
5225	144. [cleanup] libdns header files too numerous to name were made
5226	to conform to the same style for multiple inclusion
5227	protection.
5228
5229	143. [func] Added function dns_rdatatype_isknown().
5230
5231	142. [cleanup] <isc/stdtime.h> does not need <time.h> or
5232	<isc/result.h>.
5233
5234	141. [bug] Corrupt requests with multiple questions could
5235	cause an assertion failure.
5236
5237	140. [cleanup] <isc/time.h> does not need <time.h> or <isc/result.h>.
5238
5239	139. [cleanup] <isc/net.h> now includes <isc/types.h> instead of
5240	<isc/int.h> and <isc/result.h>.
5241
5242	138. [cleanup] isc_strtouq moved from str.[ch] to string.[ch] and
5243	renamed isc_string_touint64. isc_strsep moved from
5244	strsep.c to string.c and renamed isc_string_separate.
5245
5246	137. [cleanup] <isc/commandline.h>, <isc/mem.h>, <isc/print.h>
5247	<isc/serial.h>, <isc/string.h> and <isc/offset.h>
5248	made to conform to the same style for multiple
5249	inclusion protection.
5250
5251	136. [cleanup] <isc/commandline.h>, <isc/interfaceiter.h>,
5252	<isc/net.h> and Win32's <isc/thread.h> needed
5253	ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS.
5254
5255	135. [cleanup] Win32's <isc/condition.h> did not need <isc/result.h>
5256	or <isc/boolean.h>, now uses <isc/types.h> in place
5257	of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
5258	and ISC_LANG_ENDDECLS.
5259
5260	134. [cleanup] <isc/dir.h> does not need <limits.h>.
5261
5262	133. [cleanup] <isc/ipv6.h> needs <isc/platform.h>.
5263
5264	132. [cleanup] <isc/app.h> does not need <isc/task.h>, but does
5265	need <isc/eventclass.h>.
5266
5267	131. [cleanup] <isc/mutex.h> and <isc/util.h> need <isc/result.h>
5268	for ISC_R_* codes used in macros.
5269
5270	130. [cleanup] <isc/condition.h> does not need <pthread.h> or
5271	<isc/boolean.h>, and now includes <isc/types.h>
5272	instead of <isc/time.h>.
5273
5274	129. [bug] The 'default_debug' log channel was not set up when
5275	'category default' was present in the config file
5276
5277	128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
5278	ISC_LANG_ENDDECLS at end of header.
5279
5280	127. [cleanup] The contracts for the comparision routines
5281	dns_name_fullcompare(), dns_name_compare(),
5282	dns_name_rdatacompare(), and dns_rdata_compare() now
5283	specify that the order value returned is < 0, 0, or > 0
5284	instead of -1, 0, or 1.
5285
5286	126. [cleanup] <isc/quota.h> and <isc/taskpool.h> need <isc/lang.h>.
5287
5288	125. [cleanup] <isc/eventclass.h>, <isc/ipv6.h>, <isc/magic.h>,
5289	<isc/mutex.h>, <isc/once.h>, <isc/region.h>, and
5290	<isc/resultclass.h> do not need <isc/lang.h>.
5291
5292	124. [func] signer now imports parent's zone key signature
5293	and creates null keys/sets zone status bit for
5294	children when necessary
5295
5296	123. [cleanup] <isc/event.h> does not need <stddef.h>.
5297
5298	122. [cleanup] <isc/task.h> does not need <isc/mem.h> or
5299	<isc/result.h>.
5300
5301	121. [cleanup] <isc/symtab.h> does not need <isc/mem.h> or
5302	<isc/result.h>. Multiple inclusion protection
5303	symbol fixed from ISC_SYMBOL_H to ISC_SYMTAB_H.
5304	isc_symtab_t moved to <isc/types.h>.
5305
5306	120. [cleanup] <isc/socket.h> does not need <isc/boolean.h>,
5307	<isc/bufferlist.h>, <isc/task.h>, <isc/mem.h> or
5308	<isc/net.h>.
5309
5310	119. [cleanup] structure definitions for generic rdata stuctures do
5311	not have _generic_ in their names.
5312
5313	118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
5314	YACC crust (yyparse, etc) [2000-apr-27 explorer]
5315
5316	117. [cleanup] libdns.a changes:
5317	dns_zone_clearnotify() and dns_zone_addnotify()
5318	are replaced by dns_zone_setnotifyalso().
5319	dns_zone_clearmasters() and dns_zone_addmaster()
5320	are replaced by dns_zone_setmasters().
5321
5322	116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
5323	on Unix systems).
5324
5325	115. [port] Shut up the -Wmissing-declarations warning about
5326	<stdio.h>'s __sputaux on BSD/OS pre-4.1.
5327
5328	114. [cleanup] <isc/sockaddr.h> does not need <isc/buffer.h> or
5329	<isc/list.h>.
5330
5331	113. [func] Utility programs dig and host added.
5332
5333	112. [cleanup] <isc/serial.h> does not need <isc/boolean.h>.
5334
5335	111. [cleanup] <isc/rwlock.h> does not need <isc/result.h> or
5336	<isc/mutex.h>.
5337
5338	110. [cleanup] <isc/result.h> does not need <isc/boolean.h> or
5339	<isc/list.h>.
5340
5341	109. [bug] "make depend" did nothing for
5342	bin/tests/{db,mem,sockaddr,tasks,timers}/.
5343
5344	108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
5345	<dns/types.h> to <dns/bit.h> and renamed to
5346	DNS_BIT_SET/DNS_BIT_GET/DNS_BIT_CLEAR.
5347
5348	107. [func] Add keysigner and keysettool.
5349
5350	106. [func] Allow dnssec verifications to ignore the validity
5351	period. Used by several of the dnssec tools.
5352
5353	105. [doc] doc/dev/coding.html expanded with other
5354	implicit conventions the developers have used.
5355
5356	104. [bug] Made compress_add and compress_find static to
5357	lib/dns/compress.c.
5358
5359	103. [func] libisc buffer API changes for <isc/buffer.h>:
5360	Added:
5361	isc_buffer_base(b) (pointer)
5362	isc_buffer_current(b) (pointer)
5363	isc_buffer_active(b) (pointer)
5364	isc_buffer_used(b) (pointer)
5365	isc_buffer_length(b) (int)
5366	isc_buffer_usedlength(b) (int)
5367	isc_buffer_consumedlength(b) (int)
5368	isc_buffer_remaininglength(b) (int)
5369	isc_buffer_activelength(b) (int)
5370	isc_buffer_availablelength(b) (int)
5371	Removed:
5372	ISC_BUFFER_USEDCOUNT(b)
5373	ISC_BUFFER_AVAILABLECOUNT(b)
5374	isc_buffer_type(b)
5375	Changed names:
5376	isc_buffer_used(b, r) ->
5377	isc_buffer_usedregion(b, r)
5378	isc_buffer_available(b, r) ->
5379	isc_buffer_available_region(b, r)
5380	isc_buffer_consumed(b, r) ->
5381	isc_buffer_consumedregion(b, r)
5382	isc_buffer_active(b, r) ->
5383	isc_buffer_activeregion(b, r)
5384	isc_buffer_remaining(b, r) ->
5385	isc_buffer_remainingregion(b, r)
5386
5387	Buffer types were removed, so the ISC_BUFFERTYPE_*
5388	macros are no more, and the type argument to
5389	isc_buffer_init and isc_buffer_allocate were removed.
5390	isc_buffer_putstr is now void (instead of isc_result_t)
5391	and requires that the caller ensure that there
5392	is enough available buffer space for the string.
5393
5394	102. [port] Correctly detect inet_aton, inet_pton and inet_ptop
5395	on BSD/OS 4.1.
5396
5397	101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
5398
5399	100. [cleanup] <isc/random.h> does not need <isc/int.h> or
5400	<isc/mutex.h>. isc_random_t moved to <isc/types.h>.
5401
5402	99. [cleanup] Rate limiter now has separate shutdown() and
5403	destroy() functions, and it guarantees that all
5404	queued events are delivered even in the shutdown case.
5405
5406	98. [cleanup] <isc/print.h> does not need <stdarg.h> or <stddef.h>
5407	unless ISC_PLATFORM_NEEDVSNPRINTF is defined.
5408
5409	97. [cleanup] <isc/ondestroy.h> does not need <stddef.h> or
5410	<isc/event.h>.
5411
5412	96. [cleanup] <isc/mutex.h> does not need <isc/result.h>.
5413
5414	95. [cleanup] <isc/mutexblock.h> does not need <isc/result.h>.
5415
5416	94. [cleanup] Some installed header files did not compile as C++.
5417
5418	93. [cleanup] <isc/msgcat.h> does not need <isc/result.h>.
5419
5420	92. [cleanup] <isc/mem.h> does not need <stddef.h>, <isc/boolean.h>,
5421	or <isc/result.h>.
5422
5423	91. [cleanup] <isc/log.h> does not need <sys/types.h> or
5424	<isc/result.h>.
5425
5426	90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
5427	from <named/listenlist.h>.
5428
5429	89. [cleanup] <isc/lex.h> does not need <stddef.h>.
5430
5431	88. [cleanup] <isc/interfaceiter.h> does not need <isc/result.h> or
5432	<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
5433	moved to <isc/types.h>.
5434
5435	87. [cleanup] <isc/heap.h> does not need <isc/boolean.h>,
5436	<isc/mem.h> or <isc/result.h>.
5437
5438	86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
5439	<isc/types.h>.
5440
5441	85. [cleanup] <isc/bufferlist.h> does not need <isc/buffer.h>,
5442	<isc/list.h>, <isc/mem.h>, <isc/region.h> or
5443	<isc/int.h>.
5444
5445	84. [func] allow-query ACL checks now apply to all data
5446	added to a response.
5447
5448	83. [func] If the server is authoritative for both a
5449	delegating zone and its (nonsecure) delegatee, and
5450	a query is made for a KEY RR at the top of the
5451	delegatee, then the server will look for a KEY
5452	in the delegator if it is not found in the delegatee.
5453
5454	82. [cleanup] <isc/buffer.h> does not need <isc/list.h>.
5455
5456	81. [cleanup] <isc/int.h> and <isc/boolean.h> do not need
5457	<isc/lang.h>.
5458
5459	80. [cleanup] <isc/print.h> does not need <stdio.h> or <stdlib.h>.
5460
5461	79. [cleanup] <dns/callbacks.h> does not need <stdio.h>.
5462
5463	78. [cleanup] lwres_conftest renamed to lwresconf_test for
5464	consistency with other *_test programs.
5465
5466	77. [cleanup] typedef of isc_time_t and isc_interval_t moved from
5467	<isc/time.h> to <isc/types.h>.
5468
5469	76. [cleanup] Rewrote keygen.
5470
5471	75. [func] Don't load a zone if its database file is older
5472	than the last time the zone was loaded.
5473
5474	74. [cleanup] Removed mktemplate.o and ufile.o from libisc.a,
5475	subsumed by file.o.
5476
5477	73. [func] New "file" API in libisc, including new function
5478	isc_file_getmodtime, isc_mktemplate renamed to
5479	isc_file_mktemplate and isc_ufile renamed to
5480	isc_file_openunique. By no means an exhaustive API,
5481	it is just what's needed for now.
5482
5483	72. [func] DNS_RBTFIND_NOPREDECESSOR and DNS_RBTFIND_NOOPTIONS
5484	added for dns_rbt_findnode, the former to disable the
5485	setting of the chain to the predecessor, and the
5486	latter to make clear when no options are set.
5487
5488	71. [cleanup] Made explicit the implicit REQUIREs of
5489	isc_time_seconds, isc_time_nanoseconds, and
5490	isc_time_subtract.
5491
5492	70. [func] isc_time_set() added.
5493
5494	69. [bug] The zone object's master and also-notify lists grew
5495	longer with each server reload.
5496
5497	68. [func] Partial support for SIG(0) on incoming messages.
5498
5499	67. [performance] Allow use of alternate (compile-time supplied)
5500	OpenSSL libraries/headers.
5501
5502	66. [func] Data in authoritative zones should have a trust level
5503	beyond secure.
5504
5505	65. [cleanup] Removed obsolete typedef of dns_zone_callbackarg_t
5506	from <dns/types.h>.
5507
5508	64. [func] The RBT, DB, and zone table APIs now allow the
5509	caller find the most-enclosing superdomain of
5510	a name.
5511
5512	63. [func] Generate NOTIFY messages.
5513
5514	62. [func] Add UDP refresh support.
5515
5516	61. [cleanup] Use single quotes consistently in log messages.
5517
5518	60. [func] Catch and disallow singleton types on message
5519	parse.
5520
5521	59. [bug] Cause net/host unreachable to be a hard error
5522	when sending and receiving.
5523
5524	58. [bug] bin/named/query.c could sometimes trigger the
5525	(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
5526	== 0 assertion in query_newname().
5527
5528	57. [func] Added dns_nxt_typepresent()
5529
5530	56. [bug] SIG records were not properly returned in cached
5531	negative answers.
5532
5533	55. [bug] Responses containing multiple names in the authority
5534	section were not negatively cached.
5535
5536	54. [bug] If a fetch with sigrdataset==NULL joined one with
5537	sigrdataset!=NULL or vice versa, the resolver
5538	could catch an assertion or lose signature data,
5539	respectively.
5540
5541	53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
5542	<sys/param.h>.
5543
5544	52. [bug] rndc: taskmgr and socketmgr were not initialized
5545	to NULL.
5546
5547	51. [cleanup] dns/compress.h and dns/zt.h did not need to include
5548	dns/rbt.h; it was needed only by compress.c and zt.c.
5549
5550	50. [func] RBT deletion no longer requires a valid chain to work,
5551	and dns_rbt_deletenode was added.
5552
5553	49. [func] Each cache now has its own mctx.
5554
5555	48. [func] isc_task_create() no longer takes an mctx.
5556	isc_task_mem() has been eliminated.
5557
5558	47. [func] A number of modules now use memory context reference
5559	counting.
5560
5561	46. [func] Memory contexts are now reference counted.
5562	Added isc_mem_inuse() and isc_mem_preallocate().
5563	Renamed isc_mem_destroy_check() to
5564	isc_mem_setdestroycheck().
5565
5566	45. [bug] The trusted-key statement incorrectly loaded keys.
5567
5568	44. [bug] Don't include authority data if it would force us
5569	to unset the AD bit in the message.
5570
5571	43. [bug] DNSSEC verification of cached rdatasets was failing.
5572
5573	42. [cleanup] Simplified logging of messages with embedded domain
5574	names by introducing a new convenience function
5575	dns_name_format().
5576
5577	41. [func] Use PR_SET_KEEPCAPS on Linux 2.3.99-pre3 and later
5578	to allow 'named' to run as a non-root user while
5579	retaining the ability to bind() to privileged
5580	ports.
5581
5582	40. [func] Introduced new logging category "dnssec" and
5583	logging module "dns/validator".
5584
5585	39. [cleanup] Moved the typedefs for isc_region_t, isc_textregion_t,
5586	and isc_lex_t to <isc/types.h>.
5587
5588	38. [bug] TSIG signed incoming zone transfers work now.
5589
5590	37. [bug] If the first RR in an incoming zone transfer was
5591	not an SOA, the server died with an assertion failure
5592	instead of just reporting an error.
5593
5594	36. [cleanup] Change DNS_R_SUCCESS (and others) to ISC_R_SUCCESS
5595
5596	35. [performance] Log messages which are of a level too high to be
5597	logged by any channel in the logging configuration
5598	will not cause the log mutex to be locked.
5599
5600	34. [bug] Recursion was allowed even with 'recursion no'.
5601
5602	33. [func] The RBT now maintains a parent pointer at each node.
5603
5604	32. [cleanup] bin/lwresd/client.c needs <string.h> for memset()
5605	prototype.
5606
5607	31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
5608
5609	30. [func] config file grammer change to support optional
5610	class type for a view.
5611
5612	29. [func] support new config file view options:
5613
5614	auth-nxdomain recursion query-source
5615	query-source-v6 transfer-source
5616	transfer-source-v6 max-transfer-time-out
5617	max-transfer-idle-out transfer-format
5618	request-ixfr provide-ixfr cleaning-interval
5619	fetch-glue notify rfc2308-type1 lame-ttl
5620	max-ncache-ttl min-roots
5621
5622	28. [func] support lame-ttl, min-roots and serial-queries
5623	config global options.
5624
5625	27. [bug] Only include <netinet6/in6.h> on BSD/OS 4.[01]*.
5626	Including it on other platforms (eg, NetBSD) can
5627	cause a forced #error from the C preprocessor.
5628
5629	26. [func] new match-clients statement in config file view.
5630
5631	25. [bug] make install failed to install <isc/log.h> and
5632	<isc/ondestroy.h>.
5633
5634	24. [cleanup] Eliminate some unnecessary #includes of header
5635	files from header files.
5636
5637	23. [cleanup] Provide more context in log messages about client
5638	requests, using a new function ns_client_log().
5639
5640	22. [bug] SIGs weren't returned in the answer section when
5641	the query resulted in a fetch.
5642
5643	21. [port] Look at STD_CINCLUDES after CINCLUDES during
5644	compilation, so additional system include directories
5645	can be searched but header files in the bind9 source
5646	tree with conflicting names take precedence. This
5647	avoids issues with installed versions of dnssafe and
5648	openssl.
5649
5650	20. [func] Configuration file post-load validation of zones
5651	failed if there were no zones.
5652
5653	19. [bug] dns_zone_notifyreceive() failed to unlock the zone
5654	lock in certain error cases.
5655
5656	18. [bug] Use AC_TRY_LINK rather than AC_TRY_COMPILE in
5657	configure.in to check for presence of in6addr_any.
5658
5659	17. [func] Do configuration file post-load validation of zones.
5660
5661	16. [bug] put quotes around key names on config file
5662	output to avoid possible keyword clashes.
5663
5664	15. [func] Add dns_name_dupwithoffsets(). This function is
5665	improves comparison performance for duped names.
5666
5667	14. [bug] free_rbtdb() could have 'put' unallocated memory in
5668	an unlikely error path.
5669
5670	13. [bug] lib/dns/master.c and lib/dns/xfrin.c didn't ignore
5671	out-of-zone data.
5672
5673	12. [bug] Fixed possible unitialized variable error.
5674
5675	11. [bug] axfr_rrstream_first() didn't check the result code of
5676	db_rr_iterator_first(), possibly causing an assertion
5677	to be triggered later.
5678
5679	10. [bug] A bug in the code which makes EDNS0 OPT records in
5680	bin/named/client.c and lib/dns/resolver.c could
5681	trigger an assertion.
5682
5683	9. [cleanup] replaced bit-setting code in confctx.c and replaced
5684	repeated code with macro calls.
5685
5686	8. [bug] Shutdown of incoming zone transfer accessed
5687	freed memory.
5688
5689	7. [cleanup] removed 'listen-on' from view statement.
5690
5691	6. [bug] quote RR names when generating config file to
5692	prevent possible clash with config file keywords
5693	(such as 'key').
5694
5695	5. [func] syntax change to named.conf file: new ssu grant/deny
5696	statements must now be enclosed by an 'update-policy'
5697	block.
5698
5699	4. [port] bin/named/unix/os.c didn't compile on systems with
5700	linux 2.3 kernel includes due to conflicts between
5701	C library includes and the kernel includes. We now
5702	get only what we need from <linux/capability.h>, and
5703	avoid pulling in other linux kernel .h files.
5704
5705	3. [bug] TKEYs go in the answer section of responses, not
5706	the additional section.
5707
5708	2. [bug] Generating cryptographic randomness failed on
5709	systems without /dev/random.
5710
5711	1. [bug] The installdirs rule in
5712	lib/isc/unix/include/isc/Makefile.in had a typo which
5713	prevented the isc directory from being created if it
5714	didn't exist.
5715
5716	--- 9.0.0b2 released ---
5717
5718	# This tells Emacs to use hard tabs in this file.
5719	# Local Variables:
5720	# indent-tabs-mode: t
5721	# End:

Note: See TracBrowser for help on using the repository browser.

Download in other formats:

Original Format