Lines Matching full:fix
17 - Fix timing sensitivity in ixfr_outsync test.
23 - Merge #316: Fix to reap defunct children by the reload process that
28 - Fix (also from Merge #316) to reap exited children more frequently
34 - Fix compile with memclean for xfrd nsd.db close.
38 to fail. Also fix to make sure to set event_added for the
58 - Fix #313: nsd 4.8 stats with implausible spikes.
69 - Fix #310: NSD stats contain the terms "master" and "slave".
70 - Fix control-reconfig-xfrd test for zonestatus primary that is
76 - Fix #308: Deprecate "multi-master-check" in favour of
80 - Fix to sync the tests script file common.sh.
82 - Fix #306: Missing AC_SUBST(dbdir) breaks installation with 4.8.0.
83 - Fix for #306: Create directory for xfrd.state and zone.list files
92 - Fix unit test kill_from_pidfile function for nonexistent files
94 - Fix rr-test to also convert the contents of the just written output
96 - Fix test set to remove -f nsd.db and rm nsd.db commands.
97 - Fix test set to remove difffile option.
100 - Fix #14: Set timeout to 3s when servicing remaining TCP connections.
101 - Fix: Always instate write handler after reading queries from TCP.
110 function and fix drop_updates, rr-test and xfr_update tests.
119 - Fix processing of consolidated IXFRs.
122 - Fix for interprocess communication to set quit sync command from
135 - Fix autoconf 2.69 warnings in configure.
141 - Fix unused variable warning in unit test of udb.
144 - Fix #284: dnstap_collector.c: SOCK_NONBLOCK is not available on
149 - Fix unused but set variable warning.
150 - Fix #283: Compile failure in remote.c when --disable-bind8-stats
159 - Fix #240: Prefix messages originating from verifier.
160 - Fix #275: Drop unnecessary root server checks.
165 - Fix unused variable warning in unit test, from clang compile.
172 - Fix to remove unused whitespace from acx_nlnetlabs.m4 and config.h.
176 - Fix for build to run flex and bison before compiling code that needs
180 - Fix cirrus script for submit to coverity scan to libtoolize
182 - Fix readme status badge links.
185 - Fix #273: Large TXT record breaks AXFR.
186 - Fix ixfr create from adding too many record types.
189 - Fix include brackets for ssl.h include statements, instead of quotes.
190 - Fix static analyzer warning about nsd_event_method initialization.
196 - Fix dnstap to not check socket path when using IP address.
200 - Fix to compile without ssl with dnstap-tls code.
203 - Fix #271: DNSTAP over TCP, with dnstap-ip: "127.0.0.1@3333".
204 - Fix to clean more memory on exit of dnstap collector.
207 - Fix #270: reserved identifier violation.
213 - Fix #266: Fix build with --without-ssl.
214 - Fix #267: Allow unencrypted local operation of nsd-control.
215 - Fix for #267: neater variable definitions.
218 - Merge #265: Fix C99 compatibility issue.
222 - Fix for #262: More error logging for SSL read failures for zone
226 - Fix #262: Zone(s) not synchronizing properly via TLS.
227 - Fix ixfr_and_restart test to wait for processes to come to a stop.
230 - Fix configure for -Wstrict-prototypes.
234 - Fix #239: -Wincompatible-pointer-types warning in remote.c.
235 - Fix unit tests to succeed with --disable-bind8-stats.
240 - Fix ixfr_gone unit test to not use system default zone list file.
241 - Fix credns tests for vm usage, and not use system default zone
243 - Fix verify tests to use more portable bash location in script.
244 - Fix verify_again test to use ipv4 address for test.
257 - Merge #231 from moritzbuhl: Fix checking if nonblocking sockets work
266 - Fix #212: Change commandline control actions to always log.
269 - Fix static analyzer reports, fix wrong log print when skipping xfr,
270 fix to print error on pipe read fail, and assert an xfr is in
278 - Fix compilation with libev, without event_base_loopbreak.
281 - Fix that the unit test verify_repat cleans up nsd on exit.
282 - Fix to remove ixfrcreate.c asserts about uint16 within limits
286 - Fix compilation without libevent and compilation of nsd-mem.
287 - Fix verify handler add of sigchld event for compilation without
291 - Fix static analyzer reports on ixfrcreate temp file.
324 - Fix spelling error in comment in svcbparam_lookup_key.
327 - Fix code analyzer zero divide warning.
328 - Fix code analyzer large value with assertion.
329 - Fix another code analyzer zero divide warning.
330 - Fix code analyzer warning about uninitialized temp storage in loop.
337 - Fix unit tests for nds-control-setup exit code and the
345 - Fix #206: build with --without-ssl fails.
361 - Fix to document nsd-checkzone -p in the man page for nsd-checkzone.
364 - Fix to change file mode before changing file owner for the
371 - Fix #200: nsd-checkzone succeeds even with incorrect serial in SOA
375 - Fix socket_partitioning unit test for FreeBSD.
376 - Fix SVCB test to work around older dig with drill.
377 - Fix unit test to not syslog setlogin failures.
382 until the SVCB fix on 2 dec 2021, but not the setlogin fix.
384 - Fix unit tests for new answer-cookie default.
387 - Fix to remove git tracking and ci information from release tarballs.
390 - Fix #198: nsd-control reconfig core dump.
405 - Fix unit tests for svcb and xot to not touch the default
407 - Fix unit test for xot tertiary config for zonelistfile default.
408 - Fix unit test for dns-cookies for no unshare, and allow-query
410 - Fix unit test allow query to check for IPv6.
413 - Fix #194: Incorrect NSEC3 response for SOA query below delegation
417 - Fix compile failure with openssl 1.0.2.
420 - Fix not reachable annotation in radix_find_prefix_node.
423 - Fix #191: dname_parse_wire() returns fqdn wireformat length.
426 - Fix #190: NSD returns 3 NSEC3 records for NODATA response.
429 - Fix #189: nsd 4.3.7 crash answer_delegation: Assertion
433 - Fix #188: NSD fails to build against openssl 1.1 on CentOS 7.
434 - Fix sed script in ssldir split handling.
442 in the man page. Fix yacc semicolon. Fix unused variable warning.
443 Use strlcpy instead of strncpy. Fix spelling error in error
453 - Fix to compile with OpenSSL 3.0.0beta2.
454 - Fix configure detection of SSL_CTX_set_security_level.
455 - Fix deprecated functions use from openssl 3.0.0beta2.
458 - Fix free on shutdown of XoT SSL context.
465 - Fix typo in xfrd-tcp.c.
469 - Fix compile of cookies on FreeBSD without IPv6.
470 - Fix for loop initial declaration for nonc99 compiler.
473 - Fix truncate test for EDNS COOKIE making one less RR is added.
474 - Attempt to fix gcc11 warning.
488 - Fix #168: Buffer overflow in the dname_to_string() function
494 - Fix #179: log notice and server-count.
504 - Fix #176: please review Loglevel on missing zonefile.
507 - Fix #174: NS Records below delegation are not ignored (nsd-checkzone
511 - Fix SVCB sort call sizeof to be the size of the elements sorted.
517 - Fix for #128: Skip over sendmmsg invalid argument when port is zero.
518 - Fix #171: Invalid negative response (NSEC3) after IXFR.
519 - Fix to make nsec3_chain_find_prev return NULL if one nsec3 left.
523 - Fix for #170: Fix build warnings when IPv6 is disabled.
524 - Fix #170: Disabled IPv6 and DNSTAP enabled triggers a build error.
527 - Fix configure failure for enable systemd because of autoconf.
539 - Update acx_nlnetlabs.m4 to version 38, fix deprecation test.
540 - Fix configure to use header checks with compile.
541 - Fix warning about unused function log_addr.
547 - Fix double config.h include in configlexer.c
548 - Fix to remove configyyrename from makedist.sh and also
552 - Fix #154: TXT with parentheses fails in 4.3.5.
557 - Fix that wildcard is printed as a star instead of escaped, in
559 - Fix unit test for wildcard printout change.
562 - Fix #163: A TSIG noncompliance with RFC 2845.
568 - Fix segfault on high verbosity for TLS channels with dnstap log
572 - Fix #146 with #147: DNSTAP log the local address of the server
579 - Fix AF_LOCAL compile error for Solaris.
580 - Fix ifaddrs compile error for Solaris.
581 - Fix ifaddrs.h compile error for Solaris.
586 - Fix uninitialized access of log_buf in error printout on apply ixfr.
597 - Fix #152: '*' in Rdata causes the return code to be NOERROR instead
600 - Fix #150: TXT record validation difference with BIND.
601 - Fixup TXT record validation fix for escaped quotes.
602 - Fixup TXT record validation fix for escaped backslashes.
606 - Fix #151: DNAME not applied more than once to resolve the query.
607 - Fix dname test for #148.
608 - For #151: fix to not produce loops in output.
611 - Fix configure.ac for autoconf 2.70.
614 - Fix #148: CNAME need not be followed after a synthesized CNAME
618 - Fix that nsd-control has timeout when connection is down.
622 - For #145: Fix that service of remaining TCP and TLS connections
628 - Fix #144: fix better.
631 - Fix #144: Typo fix in nsd.conf.5.in.
634 - Fix #143: xfrd no hysteresis with NOT IMPLEMENTED rcode.
642 - Fix #142: NODATA answers missin SOA in authority section after
644 - Fix for CVE-2020-28935 : Fix that symlink does not interfere
646 - fix writepid for retvalue 0.
649 - Fix #138: NSD returns non-EDNS answer when QUESTION is empty.
650 - Fix to check nscount in previous fix for EDNS in formerr response
657 - Fix to add missing closest encloser NSEC3 for wildcard nodata type
661 - Fix #134: IPV4_MINIMAL_RESPONSE_SIZE vs EDNS_MAX_MESSAGE_LEN.
664 - Fix missing parenthesis on size of fix to init buffer.
667 - Fix #127: two minor `-Wcast-qual` cleanups
668 - Fix #126: minor header hygiene
669 - Fix #125: include config.h in compat/setproctitle.c and fix prototype of `setproctitle`
670 - Fix #133: fix 0-init of local ( stack ) buffer.
675 - Fix #129: ambiguous use of errno, in log message if sendmmsg fails.
676 - Fix #128: Fix that the invalid port number is logged for sendmmsg
699 - Fix #119: fix compile warnings from new gcc.
700 - Fix #119: warn when trying to parse a directory.
711 - Fix for unknown EVP_MAC_CTX_free function in openssl 3.0.0 tsig code.
714 - Fix that configure checks for EVP_sha256 to detect openssl, because
725 - Merge #115 from millert: Fix strlcpy() usage. From OpenBSD.
728 - Fix make install with --with-pidfile="".
738 - Fix compile includes for xfr-inspect tool on FreeBSD.
742 - Fix bug034 test for vm test changes.
747 - Fix unit test for different nsd-control-setup -h exit code.
758 - Fix #107: nsd -v shows configure line, openssl version and libevent version.
761 - Fix unlink of pidfile warning if not possible due to permissions,
771 - Fix checkconf test for log-only-syslog option.
777 - Fix #99: Fix copying of socket properties with reuseport enabled.
780 - Fix #97: EDNS unknown version: query not in response.
783 - Fix #96: log-only-syslog: yes sets to only use syslog, fixes
788 - Fix #95: Removed make test check because tpkg not included in
790 - Fix unused parameter compile warnings.
795 - Fix for posix shell syntax for trap in nsd-control-setup.
796 - Fix to omit the listen-on lines from log at startup, unless verbose.
797 - Fix uninitialised values for bindtodevice option at startup with
810 - Merge PR #92 by tonysgi: Fix typo.
816 - Fix for whitespace in minimal responses test for FreeBSD.
821 - For PR #86: Fix that programs loaded after CFLAGS and stuff is
823 special flags from that. Fix that lex only needs to support -i
829 - Fix unterminated ifdef in nsd.h.
830 - Fix unknown u_long in util.c for Issue #80 .
833 - Merge PR #83 from noloader: Fix GNU HURD sched_setaffinity compile.
834 - Fix #82: print error when system does not have setaffinity.
835 - Fix #80: NetBSD and implicit declaration of reallocarray.
836 - Fix for #80: Fix reallocarray test to define before include.
837 - Fix for #80: Define alternatives for IFNAMSIZ if it does not exist.
840 - Fix #76: cpuid typedef for Hurd, DragonflyBSD compile.
841 - Fix #75: configure test for sched_setaffinity, and use
843 - Fix #74: GNU Hurd fix cast from pointer to integer of different size.
844 - Fix for #74, #75: cpuset test for header contents and provide code.
845 - Fix #78: Fix SO_SETFIB error on FreeBSD.
848 - Fix #70: error: 'fd_set' undeclared.
849 - Fix #71: error: 'for' loop initial declaration used outside C99
851 - Fix to move declarations out of for loops in event test too.
852 - Fix to move declarations out of for loops in popen3 test too.
853 - Another fix to move declaration out of for loop for event test.
854 - Fix to move declarations out of for loops in cutest regex display.
863 - Fix that the retry wait does not exceed one day for zone transfers.
866 - Fix warning on FreeBSD about pointer size cast.
869 - Fixup fix of reuseport TCP for server close of sockets not used
874 - Fix event unit test, signal has to be registered with signal_add,
881 - Fix checkconf test for new drop-updates config option.
882 - Fix errors with reuseport and TCP file descriptors, it was
903 - Fix responses for IXFR so that the authority section is not echoed
907 - Fix leak in server bitset setup.
925 - Fix unreachable code in ssl set options code.
926 - Fix bad shift in assertion code analyzer complaint.
929 - Fix #56: Drop sparse TSIG signing support in NSD.
937 - Fix whitespace in nsd.conf.sample.in, patch from Paul Wouters.
942 - Fix to define upper bounds on rr counts read from untrusted packet
950 - Fix to define max number of EDNS records we are willing to
952 - Fix size of string len and capacity type cast in udbradtree.
953 - Fix to protect rrcount in tsig_find_rr from overflow.
955 - Fix to protect rrcount in packet_find_notify_serial from overflow.
956 - Fix to close socket on error in create_tcp_accept_sock.
957 - Fix to log on failure to chmod for socket for remote control.
958 - Fix to remove unneeded if in open of socket for remote control.
959 - Fix to restore input parameter on call failure in create_dirs.
966 - Fix fname null check of fname in namedb_read_zonefile.
967 - Fix implicit cast of size in udb_radnode_array_grow.
968 - Fix ignore of return value of ssl_printf in remote.c.
969 - Fix unused check of fd in parent_handle_reload_command.
970 - Fix to use getrandom() for randomness, if available.
971 - Attempt to fix signedness of nscount lookup in ixfr query_process.
972 - Fix identical branches for ssl_print of errors in remote.c.
973 - Fix type cast bounds, signedness of opt_rdlen in edns_parse_record.
974 - Fix to separate header and data lines in parse_zone_list_file.
977 - Fix #52: do not log transient network full errors unless higher
979 - Fix checkconf test for new error output string.
984 - Fix regressions in configparser.y
987 - Fix #48: Add make distclean that removes config.h made by configure.
1000 - Fix checkconf test with filenames that sort in the same order.
1004 - Fix #44: document that remote-control is a top-level nsd.conf
1006 - Fix compile on OSX.
1007 - Fix for #44: nicer top-level clause documentation.
1026 - Fix #40: Merge small fixes for confine-to-zone by Greg Bock.
1032 - Fix #38: log address and failure reason with tls handshake errors,
1046 - Fix #35: excessive logging of ixfr failures, it stops the log when
1060 - Fix error message for out of zone data to have more information.
1064 - Fix #33: Fix segfault in service of remaining streams on exit.
1071 - PR #32: tsig: Fix compilation without HAVE_SSL.
1075 - Fix #29: SSHFP check NULL pointer dereference.
1076 - Fix #30: SSHFP check failure due to missing domain name.
1077 - Fix to timeval_add in minievent for remaining second in microseconds.
1088 - Fix #25: NSD doesn't refresh zones after extended downtime,
1091 - Fix so that expired zones stay expired when server is down a
1095 - Fix that NSD warns for wrong length of the hash in SSHFP records.
1098 - PR #23: Fix typo in nsd.conf man-page.
1103 - Fix #20: CVE-2019-13207 Stack-based Buffer Overflow in the
1107 - Fix #19: Out-of-bounds read caused by improper validation of
1115 - Fix unit test for added options and no dot after zone updated
1117 - Fix compile without accept4.
1121 - Fix output of nsd-checkconf -h.
1132 - Fix #14, tcp connections have 1/10 to be active and have to work
1138 - Fix tls handshake event callback function mistake, reported
1142 - Fix #15: crash in SSL library, initialize variables for TCP access
1146 - Fix to init event not pointer, in reassignment.
1149 - Fix to init event structure for reassignment.
1154 - Fix #13: Stray dot at the end of some log entries, removes dot
1156 - Fix TLS cipher selection, the previous was redundant, prefers
1165 - Fix unit test for outgoing interface to use random port numbers for
1169 - Fix to guard _OPENBSD_SOURCE from redefinition.
1172 - Fix to define _OPENBSD_SOURCE to get reallocarray on NetBSD.
1175 - Fix #10: Fix memory leaks caused by duplicate rr and include
1182 - Fix .gitignore for unit test generated files.
1183 - Fix checkconf unit test for hide-identity and tls.
1186 - Fix makedist.sh for use with git.
1190 - Fix .gitignore for dnstap files and aclocal temp.
1197 - Fix to avoid buffer alloc with global buffer in tls write handler.
1198 - Fix to initialize event structure when accepting TCP connection.
1207 - Fix to share openssl init code, and perform it once.
1214 - Fix #4249: The option hide-identity: yes stops NSD from responding
1221 - Fix spelling in comment and log printout.
1222 - Fix potential uninitialized variable.
1223 - Fix documentation for DNS over TLS, and set default port 853.
1224 - Fix to add missing comment.
1225 - Fix that the TLS handshake routine sets the correct event to
1227 - Fix that TLS renegotiation calls the read and write routines again
1229 - Fix that TCP Fastopen has better error message and supports OSX.
1230 - Fix log for fastopen with verbosity.
1239 - Fix spelling error in release notes.
1240 - Fix to delete unused zparser.default_apex member.
1247 - Fix unit test bug013_truncate for new truncation with EDNS size,
1255 - Fix #6: nsd-control-setup: Change validity time to a shorter
1257 - Fix unused definition in header remote.h.
1258 - Fix #4236: IPV4_MINIMAL_RESPONSE_SIZE=1480 is slightly too big.
1259 - Fix #4235: IP_PMTUDISC_OMIT on IPv4/UDP sockets.
1262 - Fix to remove unused code.
1268 - Fix #4: setusercontext() is in libutil on NetBSD, and also
1270 - Fix #4215: fixup for state update for TSIG information in server
1276 - Fix for tsig assoc_tsig command on acl with nokey elements.
1279 - Fix #4215: on-the-fly change of TSIG keys with patch from Igor, adds
1295 - Fix for FreeBSD port with dnstap enabled.
1298 - Fix to reduce region_log_stats if condition, this removes a
1302 - Fix #4213: disable-ipv6 and dnstap compile error.
1307 - Fix that dnstap logs CQ and CR like BIND does.
1313 - Fix clang analysis warning on null in closest encloser for wildcard
1315 - Fix clang analysis warnings.
1318 - Fix parsezone failure in 4194 fix.
1321 - Fix to not set GLOB_NOSORT so the nsd.conf include: files are
1326 - Fix #3433: document that reconfig does not change per-zone stats.
1329 - Fix #4205: enable-recvmmsg in mixed IPv4/IPv6 environment fails.
1335 - Fix #4202: nsd-control delzone incorrect exit code on error.
1336 - Tab style fix to use tab for 8 spaces, from Xiaobo Liu.
1342 - Fix #4194: Zone file parser derailed by non-FQDN names in RHS of
1344 - Fix some more, neater code and checks for domain length limit.
1367 - Fix #4156: Fix systemd service manager state change notification
1373 - Fix typo in clang analysis test.
1381 - Fix to combine the same error function into one, from Xiaobo Liu.
1382 - Fix initialisation in remote.c.
1383 - please clang analyzer and fix parse of IPSECKEY with bad gateway.
1384 - Fix unit test code for clang analyzer.
1385 - Fix nsd-checkconf fail on bad zone name.
1388 - Fix coding style in nsd.c
1395 - Fix codingstyle in nsd-checkconf.c in patch from Sharp Liu.
1398 - Fix use_systemd typo/leftover in remote.c.
1403 - Fix that nsec3 precompile deletion happens before the RRs of
1405 - Fix printout of accepted remote control connection for unix sockets.
1412 fix NSD time sensitive TSIG compare vulnerability.
1413 - Fix checkconf test for use-systemd option.
1416 - #4133: Fix that when IXFR contains a zone with broken NSEC3PARAM
1427 - Fix that type CAA (and URI) in the zone file can contain
1436 - #4106: Fix that stats printed from nsd-control are recast from
1440 - Fix that first control-interface determines if TLS is used. Warn
1451 - Patch to fix openwrt for mac os build darwin detection in configure.
1458 - Fix to use same condition for nsec3 hash allocation and free.
1465 - Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones.
1468 - Fix memory free in unit test.
1480 - Fix #4093: Release notes not using 2018.
1483 - Fix buffer size warnings from compiler on filename lengths.
1487 - Fix checkconf test for refuse-any option.
1493 - Fix #3562: explain build error when flex missing.
1497 - Fix spelling error in xfr-inspect.
1500 - Fix for clang analysis complaints.
1505 - Fix unused variable warnings from clang analyzer.
1516 - Fix memory leak when rehashing nsec3 after axfr or zonefile read,
1520 - Fix memory leak in zone file read of unknown rr formatted RRs.
1535 - Fix 3392: Fix regression in 4.1.18 for notify lists with ip4
1539 - Fix spelling error in xfr-inspect.
1542 - Fix warnings emitted by clang for --enable-packed. Alignment is not
1552 - Fix crash for DS query when parent and child zones both configured
1560 - Fix #2871: Increase number of sockets for xfrd transfers.
1564 - Fix up debug content from nsec3 collision printout work.
1570 - Fix #1567: Change crit to err log level for gettimeofday failure.
1574 - Fix collision printout of nsec3 to print name, hash and reverse.
1584 - Fix #1446: A corrupted zone file "propagates" to good ones.
1587 - Fix layout in xfrd.c.
1594 - Fix writev compile warning on FreeBSD.
1601 - Fix gcc 7.1.1 warnings.
1616 - Fix text format of deletes for CDS and CDNSKEY, single 0 to represent
1620 - Fix potential null pointer in nsec3 adjustment tree.
1626 - Fix #1272: use writev to put tcp length field with data for outgoing
1638 - minor manpage fix.
1645 - Fix 1243: Option to make NSD emit really minimal responses,
1650 - Fix 1228: OpenSSL include is not guarded with HAVE_SSL
1656 - Fix missing _t to _type conversion for disable-radix-tree option.
1662 - Calculate new udb index after growing the array, fix from
1669 - Fix to rename _t typedefs because POSIX reserves them.
1672 - Fix #1195: Fix so that NSD fails on non-compliant values for Serial.
1679 - Fix nsd-control and ipv6 only.
1686 - Fix restart of zone transfers when new config becomes available.
1690 - Fix #1132 for SERVFAIL zones perform backoff, and remembers the
1697 - Fix axfr fallback for rounds to 1.
1703 - Robust fix against missing master in tcp_open for xfrd.
1704 - More in depth fix for the previous.
1705 - Fix wildcards in include: config statements with chroot enabled.
1710 - Fix null memcpy for radixtree with single link element.
1722 - Fix OPENSSL_INIT_ADD_ALL_DIGESTS compatibility check
1725 - Fix double const in dname_const() function.
1736 - Fix #827: fix compile with openssl 1.1.0 with api=1.1.0.
1739 - Fix multimaster for not tried full zone transfer for a expired zone.
1743 - Fix README spelling error of BSD license (reported by Joerg Jung).
1756 - Fix #817: xfrd update failed loop.
1761 - Fix typo in log output, 'transfered' -> 'transferred'.
1762 - Fix compile warnings about signcompare in minmax retrytime.
1771 - small fixups on patch. And fix spacing and remove configure flag.
1772 - Fix #812: make depend fails after distribution.
1775 - Fix unused result warnings from write and strtol.
1779 - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.
1787 - Fix #790: size-limit-xfr can stop NSD from downloading infinite zone
1793 - Fix #783: Trying to run a root server without having configured it
1802 - Fix build without IPv6, patch from Zdenek Kaspar.
1809 - Fix NSEC3 ent fix to use closest encloser, not wildcard denial.
1812 - Fix for NSEC3 with zone signed without exact match for empty
1821 - Updated fix for nonterminal nsec3 answers.
1824 - Fix empty nonterminal nsec3 cover answers.
1832 - Fix #755: NSD spins after a zone update and a lot of TCP queries.
1838 - Fix #751: NSD fails to occlude names below a DNAME.
1841 - Fix for openssl 1.1.0, HMAC_CTX size not exported from openssl.
1850 - Change the nsd.db file version because of nanosecond precision fix.
1851 - 4.1.9 release with the nsd.db file version fix (but not freebind),
1862 - #744: Fix that NSD replies for configured but unloaded zone
1873 - Fix #736: segfault during zone transfer.
1886 - Fix flto check for OSX clang.
1902 - Fix up defaults in manpage.
1908 - Fix TCP responses when REUSEPORT is in use by turning it off.
1913 - Fix zonec ttl mismatch printout to include more information.
1921 - Fix #721: Fix wrong error code (FORMERR) returned for unknown
1935 - Fix tpkg tests for portability.
1950 - Fix many interfaces and zones updates from nsd parent event loop.
1960 - Fix compile of zonec error message on FreeBSD.
1967 - Fix start failure when many file descriptors are in use.
1973 - Fix #711: Document that debug-mode yes is used for staying
1981 - Fix typo in zonec.c inside error message.
1984 - Fix #701: Fix that AD=1 set in a BADVERS response.
1987 - Fix #706: default port 53 not opened on ip4 because of getaddrinfo
2000 - Fix #698 formatting errors and typos in nsd.8.in.
2014 - Fix that notify from nsd-control contains soa serial.
2024 - Fix #618: documented need to list ip-addresses separately in
2029 - Fix that for expired zones NSD performs an AXFR and accepts newer
2035 - Fix NSID response for short edns sizes.
2046 - Fix redefined macro lex warning for freebsd flex.
2049 - Fix that formerrors are ratelimited.
2062 - Fix crash in zone parser for relative dname after error in origin.
2067 - Fix task and zonestat files to be stored in a subdirectory in tmp
2072 - Fix #665: when removing subdomain, nsd does not reparse parent zone.
2090 - Fix #654: Fix contradiction in notify logging verbosity level.
2092 - Fix #655: Fix contradiction in verbosity for zone transfers.
2097 - Fix allocation integer overflow checks.
2100 - Fix buffer overflow in config parse of domain name,
2107 - Fix use after free after zonefile syntax error followed by ttl
2109 - Fix syntax error followed by too many TXT elements parse crash
2113 - Fix origin directive from unused old value and subdomain parser
2117 - Fix b64pton out of bounds error on invalid zonefile input
2121 - Fix segfault on double origin in zone reader (thanks John Van de
2126 - Fix segfault in zone reader on invalid input
2130 - Fix #642: Change 'zone read with no errors' to '.. with success'.
2137 - Fix tcp waiting list for zone transfers where the bind and connect
2141 - Fix zonesdir chroot error message.
2154 - Fix casts for ctype functions (from Todd Miller).
2158 - Fix bug#637: fix that nsd.db grows limitlessly, an off by one
2161 - Fix udb-inspect for one megabyte chunks, counts and statistics.
2164 - Fix spinning NSD with lots of failing transfers, due to pointer
2174 - Fix that failure to add tcp to tcp base does not leak the socket.
2181 - Test for wildcard fix (from 3.2).
2187 - Fix that queries for noname CH TXT are REFUSED instead of nodata.
2194 - Fix #616: retry xfer for zones with no content after command.
2195 - Fix char used as array index warnings on NetBSD.
2198 - Fix "xfrd_handle_ipc: bad mode" log errors when compiled
2202 - Fix that expired zones stay expired after a server restart.
2210 - fix manpage for nsd-checkzone to have version and date.
2213 - Fix install of the nsd-checkconf man page.
2226 - Fix for process swap of main and reload, reload failure from the
2233 - Fix #600: document that provide-xfr provides AXFR and not IXFR.
2234 - remove program group fix, because it is not needed.
2235 - Fix rising-load-average or memory-leaks in OSes (Linux since 2.6),
2237 for them. Fix makes it so there is no very deep string of
2248 - Fix endian.h include for OpenBSD.
2251 - Fix -O3 compile flag to -O2 to avoid miscompilations.
2255 - fix strptime implicit declaration error on OpenBSD.
2270 - Fix #590: rrl log does not print wildcard as a star but escaped.
2271 - Fix #591: rrl log messages at verbosity level 1.
2278 - Fix #587: Default value for statistics is 0.
2279 - Remove the shift-reduce conflicts from the bug#553 fix.
2282 - Fix roundrobin cornercase for truncated packets.
2286 - Fix #585: yylex_destroy missing, cannot compile on RHEL 5.x.
2287 - Fix #583: Round-robin for records in the Answer section.
2290 - Fix zonefile parse with no whitespace before semicolon comments.
2296 - Fix #564: nsd-checkzone tool to check zonefile correctness.
2299 - Fix #577: makefile incorrectly installed manpages from srcdir.
2302 - Fix that xfrd reaps all children on every eventloop, because some
2307 - Fix progress printout for very large zones (numeric overflow).
2310 - Fix write_socket return value check in server.c (Thanks Brad Smith,
2317 - Fix #571: unused variable and incompatible pointer warnings when
2321 - Fix delete or rename of a lot of zones and make it take a
2334 - Fix print filename of encompassing config file on read failure.
2337 - Fix bug in nodatabase mode with ixfrs that change nsec3param
2352 - Fix manpage to put colon after zonefiles check and write.
2360 - (from 3.2), fix for #553 and for other TXT string syntax.
2378 - Fix nsd.db unclean close check. Previous databases are considered
2383 - fix to not delete tmpdir too early in shutdown process.
2395 - Fix that NSD will delete and recreate not-clean-closed databases.
2398 - Fix from 3.2: make SOA RDATA comparisons in XFR more lenient (only
2402 - Fix leak of zone name after zonefile read.
2403 - Fix malloc too large that would be leaked in the radix tree.
2409 - Fix #552: zonefile loads on nsd-control reconfig when the name
2413 - Fix #551: change Regent to Copyright holder in the LICENSE,
2424 - Fix expired zones to give SERVFAIL, also when parent zone loaded.
2437 - Fix #546: output format errors in nsd_munin_ (Thanks Tom Hendrikx).
2440 - Fix type CAA.
2441 - Fix type EUI48.
2443 - Fix printout of high-chars in TXT on NetBSD.
2455 - Fix that chroot is removed from zonefile names (for absolute names).
2458 - Fix that bad IXFR updates do not result in double SOA records,
2466 - Fix xfrd when zone transfer TCP contains zero length packets.
2467 - Fix for NSEC3 zones where parent zone is co-hosted, also NSEC3,
2477 - Fix segfaults after read of zones with rr type WKS from zonefile.
2481 - (same as in 3.2.16): fix wildcard cname to nxdomain repeated rrset.
2484 - Fix bug#534: IXFR query loop over UDP for zones that are unchanged.
2513 - Fix for zone transfer that has different-cased RRSIG signer names
2523 - Fix mini_event ev_once flag to be prettier (review comments Yuri).
2527 - Fix bug where if you do not have flex, and then install flex, it
2547 - Fix time at 2038, uint32s changed to time_t, support 64bit time_t.
2550 - Fix use of 32bit time, for 2038, thanks to Theo de Raadt for patch.
2557 - Fix that xfrd, and nsd-control, does not stop responding when reload
2559 - Fix that EOF in quoted string error does not cause reload to exit.
2567 - Fix segfault with no logfile and chroot (Thanks Patrik Lundin).
2600 - Fix warning in labellength 0 code.
2632 - Fix memory leak in zone parser for txt record (since the large
2633 number of txt subsections fix).
2634 - Fix zone parser allocations to be in db region.
2638 - Fix segfault on repeated reconfigs, double free of zone apex name.
2644 - Fix nsd-mem for printout of values above 4G.
2652 - Fix race on exit of nsd, for restarts, so that the pidfile-pid
2654 - update acx_nlnetlabs.m4 to v23, sleep w32 fix.
2670 - own snprintf, fix use of snprintf return value (in debug print).
2673 - fix bug #491: pick program name (0th argument) as syslog identity.
2677 - Fix B64_NTOP replacement definitions in configure.ac.
2697 - Fix memory statistics in nsd_munin_.
2713 - Fix compile on bigendian netbsd alpha.
2717 - Fix outgoing-interface: Don't fail if family is IPv6 but
2721 - fix tcp zonetransfer pipeline lookup function.
2730 - Fix that old zonefile does not override newer AXFR for slave zones.
2735 - Fix AXFR of NSEC3 slave zone.
2741 - Fix that nsec3 zones are precompiled when read from udb. This
2743 - Fix is_apex flag for zones read from udb.
2754 - fix gcc warning, do not use uninit value for rng init.
2755 - fix zonefiles-check: entry in nsd.conf
2763 - Fix time calculation of zone transfer.
2768 - Fix segv if xfrdir does not exit.
2777 - Fix configure for gentoo gcc and headers.
2780 - Fix spurious assertion failure for some rrl blocks.
2807 * Fix some fd leaks.
2809 * Fix RCODE when xNAME loop final answer not exist to NXDOMAIN.
2812 - Fix make outside of source directory.
2833 - Fix for use with libev (no use of event.ev_flags).
2842 - fix libevent=no signals on Solaris.
2843 - Fix handle of activated zones from timeout event.
2871 - Fix to make nsd.udb portable between 32bit and 64bit machines.
2872 - Fix to make udb mmap work for FreeBSD8 when it grows significantly.
2875 - Fix compiler warnings and fix blocking pipes.
2883 - Fix bug 480: libevent use when tcp-count is hit caused hang (in NSD4).
2889 - Fix AXFR. Loop through the zone to transfer only.
2892 - Fix bug 478: declaration after statement (for gcc 2.95).
2895 - Fix default settings for RRL.
2905 - Fix alignment problem in zone transfer pipeline code.
2906 - Fix random generator generating negative.
2907 - Fix udb radtree strspace creation bug.
2910 - Fix activated zone does not interrupt transfer.
2914 - Fix invalid time argument in nsd control (for OpenBSD).
2917 - Fix build on OpenBSD (Thanks Oliver Peter).
2935 - fix bug with event loop in zone transfer pipeline.
2943 - fix xfrd tcp skip.
2960 - Fix bug#464: Conditionally define MAXHOSTNAMELEN
2963 - Fix hang on exit in xfrd.
2967 - Fix xfrd libevent events.
2977 - Fix for VU#624931 CVE-2012-2978: NSD denial of service
2983 - Fix bug#460: man page correction - identity.
2989 - fix bug in apply_xfr that must use an udb_ptr because it shifts
2998 - fix checkconf unit test and add test for backwards compatibility
3006 - Fix tpkg test cutest_qroot and rr-test for printout of algorithms
3008 - pick up fd fix from 3_2 branch: Some more fd >= 0 to fd != -1 fixes
3014 - Fix for qtype ANY for a wildcard domain in NSEC signed zone.
3023 - Fix bug #430: segfault when MAX_INTERFACES set to more than 65K.
3024 - Fix configure for OpenIndiana sunos 5.11, acx_nlnetlabs.m4 update.
3027 - Fix bug #421: truncate pidfile on shutdown, before unlink.
3039 - Fix -flto detection for llvm compiler on Lion.
3054 - Fix segfault if no logfile is used.
3057 - Fix make from repeating action already taken.
3058 - Fix compile without openssl.
3062 - fix makedist.sh for removal of patch, notify, xfer. new nsd-control.
3068 - fix compile on Ubuntu 11.04 systems, detects cc system header issue.
3071 - fix checkconf test for remote control options.
3072 - fix warning on Ubuntu 10.04, fix autoconf 2.68 warning on NetBSD.
3086 - fix for xfrd restart if crashed. xfrd knows if a reload is
3104 - fix for bug in write and reload zone option.
3113 - Fix xfrd activation of zones to not break running zone transfers.
3116 - fix that signal causes stats to be printed to log.
3117 - fix stats without remotecontrol.
3123 - fix link to ssl with FreeBSD make.
3126 - fix optimize compile to link with ssl.
3151 - Fix to have no authority NS set processing for CNAMEs.
3154 - fix bug that relptrs have to be initialized with rel_ptr_init() when
3171 - fix unit tests for mmap with TODO and removal of -f in nsd-patch.
3187 - Fix Makefile for U in environment, since wrong U is more common than
3204 - from NSD_3_2 branch the fix: bug if the zonefile is changed for a
3215 - Fix bug #381 - Binary escaped and transfers.
3218 - Unit test nsec3 salt change and fix for sanity check of nsec3 chain.
3223 - unit test for salt change, rehash in udb fix, remove last NSEC3
3244 - Fix is_existing flag for ENT when domain that has a shared ENT
3261 - fix memory leak by zonec; the region_cleanup triggers too late.
3267 - Fix uninitialised value in xfrd nsd_soa, the rdata_count.
3269 - Fix array bounds check in radtree-search function.
3272 - removed zonec from tests. fix unknown_rr test, enable ipseckey test.
3291 - Fix bug #365, you can set NSDC_ZONEC_VERBOSE and NSDC_PATCH_STYLE
3293 - Fix bug #375, typos in nsd.conf.5.
3295 - Fix bug #302, nsd accepts XFR but refuses to re-read the slave zone.
3311 - undo fix bug#325: messes up dname compression
3343 - fix #bug352: fix hardcoded paths in manpages.
3346 - fix #bug354: make realclean cleans too much
3348 - Fix hardcoded paths in nsd.conf.sample and nsd.conf.5
3351 - fix #bug350: refused notifies should log client ip.
3354 - Fix AXFR service with radix tree.
3365 - fix #bug350: refused notifies should log client ip.
3367 - fix bug#362: outgoing-interface and v4 vs. v6 leads to spurious
3369 - fix bug#363: nsd-checkconf -v does not print outgoing-interface ok.
3370 - fix that nsd-checkconf -o outgoing-interface omits NOKEY.
3372 - fix for bug#357, make xfrd quit with many zones.
3386 - Fix leak of compressiontable when the domain table increases in size.
3392 - Fix on shutdown, then getaddrinfo acquired data uses freeaddrinfo.
3396 - Fix nsdc update and nsdc notify
3400 - Fix nsdc so it can use hmac-sha* tsigs
3405 - fix race condition when nsd is stopped while a reload is in
3409 - fix bug#306: applied documentation patch
3410 - fix bug#253: now also for QTYPE=DS.
3412 - Fix compilation on SunOS4.
3418 - fix bug#325: remove stale files from cvs from repo.
3434 - Fix nsdc update and nsdc notify
3438 - Fix nsdc so it can use hmac-sha* tsigs
3446 - fix bug#314, NSEC next field now correctly escapes spaces.
3479 - fix bug#303: misspelled error message.
3574 - Small fix in SO_REUSEADDR warning log message.
3595 - Fix file rotation when no logfile but chroot.
3600 - strptime compat fix
3629 - Fix typo in zonec manpage
3660 - Fix bug where hmac-sha256 was in algorithm table, but could not be
3794 - small fix in descriptive text in sample config for debug-mode.
3870 - Fix empty line printed with warning on 'force zone transfer'.
3946 - Fix for reply to notify messages with ANCOUNT wrong. The ack
4039 - signed/unsigned warning fix for FD_SETSIZE comparison.
4136 - Fix for bug #145. The skip file position in the diff file was used
4159 Added to test and backported fix to 2.3.6.
4213 - Fix for tsig size still set when data is null ptr.
4214 - Fix configure for NetBSD (1.6 - 2.0) to find struct timespec.
4253 - Fix bug 141 port from 2.3.6, copies behaviour from bind 9.3.2.
4394 - Fix for empty nonterminals and IXFR deletes.
4405 - fix for serial rollover (old_serial + 2**31), now works, is seen
4640 xfrd is not informed, since it cannot fix that.
4733 - Fix for finding bad zone when populating SOA info on start.
4881 - port fix base10 in zonec conv short from 2_2 branch to trunk.
4988 - ported over fix to 2_2 on missing rr types by removing the
4991 - xfrd state file format fix.
5019 - forward port of fix to 2_2 branch:
5056 - memleak fix in difffile in case of error.
5079 - Typo fix in sample config file.
5170 - Small fix (typo in example) to config manual page.
5202 * Miek: fix syntax in rbtree.c put functions on multiple lines.