Source-Changes-HG archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

[src/trunk]: src/external/mpl/bind/dist --- 9.14.5 released ---



details:   https://anonhg.NetBSD.org/src/rev/df760e6b4b7e
branches:  trunk
changeset: 459341:df760e6b4b7e
user:      christos <christos%NetBSD.org@localhost>
date:      Thu Sep 05 19:27:31 2019 +0000

description:
--- 9.14.5 released ---

5277.   [bug]           Cache DB statistics could underflow when serve-stale
                        was in use, because of a bug in counter maintenance
                        when RRsets become stale.

                        Functions for dumping statistics have been updated
                        to dump active, stale, and ancient statistic
                        counters.  Ancient RRset counters are prefixed
                        with '~'; stale RRset counters are still prefixed
                        with '#'. [GL #602]

5275.   [bug]           Mark DS records included in referral messages
                        with trust level "pending" so that they can be
                        validated and cached immediately, with no need to
                        re-query. [GL #964]

5274.   [bug]           Address potential use after free race when shutting
                        down rpz. [GL #1175]

5273.   [bug]           Check that bits [64..71] of a dns64 prefix are zero.
                        [GL #1159]

5269.   [port]          cygwin: can return ETIMEDOUT on connect() with a
                        non-blocking socket. [GL #1133]

5268.   [bug]           named could crash during configuration if
                        configured to use "geoip continent" ACLs with
                        legacy GeoIP. [GL #1163]

5266.   [bug]           named-checkconf failed to report dnstap-output
                        missing from named.conf when dnstap was specified.
                        [GL #1136]

5265.   [bug]           DNS64 and RPZ nodata (CNAME *.) rules interacted badly
                        [GL #1106]

5264.   [func]          New DNS Cookie algorithm - siphash24 - has been added
                        to BIND 9. [GL #605]

5236.   [func]          Add SipHash 2-4 implementation in lib/isc/siphash.c
                        and switch isc_hash_function() to use SipHash 2-4.
                        [GL #605]

        --- 9.14.4 released ---

5260.   [bug]           dnstap-read was producing malformed output for large
                        packets. [GL #1093]

5258.   [func]          Added support for the GeoIP2 API from MaxMind,
                        when BIND is compiled using "configure --with-geoip2".
                        The legacy GeoIP API can be enabled by using
                        "configure --with-geoip" instead. These options
                        cannot be used together.

                        Certain geoip ACL settings that were available with
                        legacy GeoIP are not available when using GeoIP2.
                        See the ARM for details. [GL #182]

5257.   [bug]           Some statistics data was not being displayed.
                        Add shading to the zone tables. [GL #1030]

5256.   [bug]           Ensure that glue records are included in root
                        priming responses if "minimal-responses" is not
                        set to "yes". [GL #1092]

5255.   [bug]           Errors encountered while reloading inline-signing
                        zones could be ignored, causing the zone content to
                        be left in an incompletely updated state rather than
                        reverted. [GL #1109]

5254.   [func]          Collect metrics to report to the statistics-channel
                        DNSSEC signing operations (dnssec-sign) and refresh
                        operations (dnssec-refresh) per zone and per keytag.
                        [GL #513]

5253.   [port]          Support platforms that don't define ULLONG_MAX.
                        [GL #1098]

5251.   [bug]           Statistics were broken in x86 Windows builds.
                        [GL #1081]

5249.   [bug]           Fix a possible underflow in recursion clients
                        statistics when hitting recursive clients
                        soft quota. [GL #1067]

        --- 9.14.3 released ---

5244.   [security]      Fixed a race condition in dns_dispatch_getnext()
                        that could cause an assertion failure if a
                        significant number of incoming packets were
                        rejected. (CVE-2019-6471) [GL #942]

5243.   [bug]           Fix a possible race between dispatcher and socket
                        code in a high-load cold-cache resolver scenario.
                        [GL #943]

5242.   [bug]           In relaxed qname minimizatiom mode, fall back to
                        normal resolution when encountering a lame
                        delegation, and use _.domain/A queries rather
                        than domain/NS. [GL #1055]

5241.   [bug]           Fix Ed448 private and public key ASN.1 prefix blobs.
                        [GL #225]

5240.   [bug]           Remove key id calculation for RSAMD5. [GL #996]

5238.   [bug]           Fix a possible deadlock in TCP code. [GL #1046]

5237.   [bug]           Recurse to find the root server list with 'dig +trace'.
                        [GL #1028]

5234.   [port]          arm: just use the compiler's default support for
                        yield. [GL #981]

        --- 9.14.2 released ---

5233.   [bug]           Negative trust anchors did not work with "forward only;"
                        to validating resolvers. [GL #997]

5231.   [protocol]      Add support for displaying CLIENT-TAG and SERVER-TAG.
                        [GL #960]

5229.   [protocol]      Enforce known SSHFP fingerprint lengths. [GL #852]

5228.   [cleanup]       If trusted-keys and managed-keys are configured
                        simultaneously for the same name, the key cannot
                        be rolled automatically. This configuration now
                        logs a warning. [GL #868]

5224.   [bug]           Only test provide-ixfr on TCP streams. [GL #991]

5223.   [bug]           Fixed a race in the filter-aaaa plugin accessing
                        the hash table. [GL #1005]

5222.   [bug]           'delv -t ANY' could leak memory. [GL #983]

5221.   [test]          Enable parallel execution of system tests on
                        Windows. [GL !4101]

5220.   [cleanup]       Refactor the isc_stat structure to take advantage
                        of stdatomic. [GL !1493]

5219.   [bug]           Fixed a race in the filter-aaaa plugin that could
                        trigger a crash when returning an instance object
                        to the memory pool. [GL #982]

5218.   [bug]           Conditionally include <dlfcn.h>. [GL #995]

5217.   [bug]           Restore key id calculation for RSAMD5. [GL #996]

5216.   [bug]           Fetches-per-zone counter wasn't updated correctly
                        when doing qname minimization. [GL #992]

5215.   [bug]           Change #5124 was incomplete; named could still
                        return FORMERR instead of SERVFAIL in some cases.
                        [GL #990]

5214.   [bug]           win32: named now removes its lock file upon shutdown.
                        [GL #979]

5213.   [bug]           win32: Eliminated a race which allowed named.exe running
                        as a service to be killed prematurely during shutdown.
                        [GL #978]

5211.   [bug]           Allow out-of-zone additional data to be included
                        in authoritative responses if recursion is allowed
                        and "minimal-responses" is disabled.  This behavior
                        was inadvertently removed in change #4605. [GL #817]

5210.   [bug]           When dnstap is enabled and recursion is not
                        available, incoming queries are now logged
                        as "auth". Previously, this depended on whether
                        recursion was requested by the client, not on
                        whether recursion was available. [GL #963]

5209.   [bug]           When update-check-ksk is true, add_sigs was not
                        considering offline keys, leaving record sets signed
                        with the incorrect type key. [GL #763]

5208.   [test]          Run valid rdata wire encodings through totext+fromtext
                        and tofmttext+fromtext methods to check these methods.
                        [GL #899]

5207.   [test]          Check delv and dig TTL values. [GL #965]

5206.   [bug]           Delv could print out bad TTLs. [GL #965]

5205.   [bug]           Enforce that a DS hash exists. [GL #899]

5204.   [test]          Check that dns_rdata_fromtext() produces a record that
                        will be accepted by dns_rdata_fromwire(). [GL #852]

5203.   [bug]           Enforce whether key rdata exists or not in KEY,
                        DNSKEY, CDNSKEY and RKEY. [GL #899]

5202.   [bug]           <dns/ecs.h> was missing ISC_LANG_ENDDECLS. [GL #976]

5190.   [bug]           Ignore trust anchors using disabled algorithms.
                        [GL #806]

diffstat:

 external/mpl/bind/dist/CHANGES                                                    |  201 +++
 external/mpl/bind/dist/CONTRIBUTING                                               |    2 +
 external/mpl/bind/dist/HISTORY                                                    |   10 +-
 external/mpl/bind/dist/OPTIONS                                                    |    4 +-
 external/mpl/bind/dist/PLATFORMS                                                  |   27 +-
 external/mpl/bind/dist/PLATFORMS.md                                               |   29 -
 external/mpl/bind/dist/README                                                     |   64 +-
 external/mpl/bind/dist/README.md                                                  |   36 +-
 external/mpl/bind/dist/aclocal.m4                                                 |    2 +
 external/mpl/bind/dist/bin/check/Makefile.in                                      |    2 +-
 external/mpl/bind/dist/bin/confgen/Makefile.in                                    |    2 +-
 external/mpl/bind/dist/bin/delv/Makefile.in                                       |    2 +-
 external/mpl/bind/dist/bin/dig/Makefile.in                                        |    2 +-
 external/mpl/bind/dist/bin/dig/dig.docbook                                        |   45 +-
 external/mpl/bind/dist/bin/dig/dig.html                                           |   45 +-
 external/mpl/bind/dist/bin/dnssec/Makefile.in                                     |    2 +-
 external/mpl/bind/dist/bin/named/Makefile.in                                      |   14 +-
 external/mpl/bind/dist/bin/named/bind9.xsl                                        |  109 +-
 external/mpl/bind/dist/bin/named/named.conf.docbook                               |   26 +-
 external/mpl/bind/dist/bin/named/named.conf.html                                  |   24 +-
 external/mpl/bind/dist/bin/named/win32/named.vcxproj.filters.in                   |   10 +
 external/mpl/bind/dist/bin/named/win32/named.vcxproj.in                           |    6 +
 external/mpl/bind/dist/bin/nsupdate/Makefile.in                                   |    2 +-
 external/mpl/bind/dist/bin/pkcs11/Makefile                                        |  507 ++++++++++
 external/mpl/bind/dist/bin/plugins/Makefile.in                                    |    2 +-
 external/mpl/bind/dist/bin/rndc/Makefile.in                                       |    2 +-
 external/mpl/bind/dist/bin/rndc/rndc.docbook                                      |    2 +-
 external/mpl/bind/dist/bin/rndc/rndc.html                                         |    2 +-
 external/mpl/bind/dist/bin/tests/Makefile.in                                      |    2 +-
 external/mpl/bind/dist/bin/tests/optional/Makefile.in                             |    2 +-
 external/mpl/bind/dist/bin/tests/pkcs11/Makefile                                  |  436 ++++++++
 external/mpl/bind/dist/bin/tests/pkcs11/benchmarks/Makefile                       |  478 +++++++++
 external/mpl/bind/dist/bin/tests/system/Makefile.in                               |   47 +-
 external/mpl/bind/dist/bin/tests/system/additional/ns1/named1.conf.in             |    5 +
 external/mpl/bind/dist/bin/tests/system/additional/ns1/named2.conf.in             |    5 +
 external/mpl/bind/dist/bin/tests/system/additional/ns1/named3.conf.in             |    5 +
 external/mpl/bind/dist/bin/tests/system/additional/ns1/named4.conf.in             |    5 +
 external/mpl/bind/dist/bin/tests/system/additional/ns1/naptr.db                   |    2 +-
 external/mpl/bind/dist/bin/tests/system/additional/ns1/naptr2.db                  |    2 +-
 external/mpl/bind/dist/bin/tests/system/additional/ns1/nid.db                     |    2 +-
 external/mpl/bind/dist/bin/tests/system/additional/ns1/root.db                    |   19 +
 external/mpl/bind/dist/bin/tests/system/additional/ns1/rt.db                      |    3 +-
 external/mpl/bind/dist/bin/tests/system/additional/ns1/rt2.db                     |    2 +-
 external/mpl/bind/dist/bin/tests/system/additional/ns3/ex.db                      |   14 +
 external/mpl/bind/dist/bin/tests/system/additional/ns3/ex2.db                     |   13 +
 external/mpl/bind/dist/bin/tests/system/additional/ns3/named.conf.in              |   11 +
 external/mpl/bind/dist/bin/tests/system/additional/tests.sh                       |   52 +-
 external/mpl/bind/dist/bin/tests/system/allow-query/ns1/root.db                   |    6 +-
 external/mpl/bind/dist/bin/tests/system/autosign/tests.sh                         |   26 +-
 external/mpl/bind/dist/bin/tests/system/cacheclean/clean.sh                       |    1 +
 external/mpl/bind/dist/bin/tests/system/cacheclean/tests.sh                       |   24 +-
 external/mpl/bind/dist/bin/tests/system/cds/setup.sh                              |    6 +-
 external/mpl/bind/dist/bin/tests/system/checkconf/good-dup-managed-key.conf       |   31 +
 external/mpl/bind/dist/bin/tests/system/checkconf/good-dup-trusted-key.conf       |   31 +
 external/mpl/bind/dist/bin/tests/system/checkconf/tests.sh                        |  133 +-
 external/mpl/bind/dist/bin/tests/system/checkconf/warn-duplicate-key.conf         |   34 +
 external/mpl/bind/dist/bin/tests/system/checkconf/warn-duplicate-root-key.conf    |   34 +
 external/mpl/bind/dist/bin/tests/system/checkconf/warn-validation-auto-key.conf   |   24 +
 external/mpl/bind/dist/bin/tests/system/conf.sh.common                            |  209 +++-
 external/mpl/bind/dist/bin/tests/system/conf.sh.in                                |   87 +-
 external/mpl/bind/dist/bin/tests/system/conf.sh.win32                             |  100 +-
 external/mpl/bind/dist/bin/tests/system/cookie/bad-cookie-badaes.conf             |   15 +
 external/mpl/bind/dist/bin/tests/system/cookie/bad-cookie-badsiphash24.conf       |   15 +
 external/mpl/bind/dist/bin/tests/system/cookie/clean.sh                           |    3 +-
 external/mpl/bind/dist/bin/tests/system/cookie/good-cookie-aes.conf               |   15 +
 external/mpl/bind/dist/bin/tests/system/cookie/good-cookie-siphash24.conf         |   15 +
 external/mpl/bind/dist/bin/tests/system/cookie/ns4/named.conf.in                  |    4 +-
 external/mpl/bind/dist/bin/tests/system/cookie/ns5/named.conf.in                  |    6 +-
 external/mpl/bind/dist/bin/tests/system/cookie/ns6/named.conf.in                  |    4 +-
 external/mpl/bind/dist/bin/tests/system/cookie/tests.sh                           |   17 +-
 external/mpl/bind/dist/bin/tests/system/digdelv/ns2/sign.sh                       |    2 +-
 external/mpl/bind/dist/bin/tests/system/digdelv/tests.sh                          |  161 ++-
 external/mpl/bind/dist/bin/tests/system/dlv/clean.sh                              |    8 +-
 external/mpl/bind/dist/bin/tests/system/dlv/ns1/root.db.in                        |    7 +
 external/mpl/bind/dist/bin/tests/system/dlv/ns1/sign.sh                           |    2 +
 external/mpl/bind/dist/bin/tests/system/dlv/ns2/named.conf.in                     |   11 +
 external/mpl/bind/dist/bin/tests/system/dlv/ns2/utld.db                           |   12 +
 external/mpl/bind/dist/bin/tests/system/dlv/ns3/named.conf.in                     |  134 ++-
 external/mpl/bind/dist/bin/tests/system/dlv/ns3/sign.sh                           |  279 +++-
 external/mpl/bind/dist/bin/tests/system/dlv/ns5/named.conf.in                     |    1 +
 external/mpl/bind/dist/bin/tests/system/dlv/ns7/hints                             |   12 +
 external/mpl/bind/dist/bin/tests/system/dlv/ns7/named.conf.in                     |   31 +
 external/mpl/bind/dist/bin/tests/system/dlv/ns8/hints                             |   12 +
 external/mpl/bind/dist/bin/tests/system/dlv/ns8/named.conf.in                     |   32 +
 external/mpl/bind/dist/bin/tests/system/dlv/setup.sh                              |    2 +
 external/mpl/bind/dist/bin/tests/system/dlv/tests.sh                              |   76 +-
 external/mpl/bind/dist/bin/tests/system/dlzexternal/ns1/dlzs.conf                 |   33 +
 external/mpl/bind/dist/bin/tests/system/dns64/clean.sh                            |   11 +-
 external/mpl/bind/dist/bin/tests/system/dns64/conf/bad18.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/conf/bad19.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/conf/warn1.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/conf/warn2.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/conf/warn3.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/conf/warn4.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/conf/warn5.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/conf/warn6.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/conf/warn7.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/conf/warn8.conf                     |    3 +
 external/mpl/bind/dist/bin/tests/system/dns64/tests.sh                            |   13 +
 external/mpl/bind/dist/bin/tests/system/dnssec/README                             |    3 +
 external/mpl/bind/dist/bin/tests/system/dnssec/clean.sh                           |   10 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns1/root.db.in                     |   18 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns1/sign.sh                        |    5 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns2/key.db.in                      |   43 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns2/named.conf.in                  |   31 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns2/sign.sh                        |   66 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns2/template.secure.db.in          |   12 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/key.db.in                      |   24 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/named.conf.in                  |   50 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns3/sign.sh                        |   81 +-
 external/mpl/bind/dist/bin/tests/system/dnssec/ns5/sign.sh                        |    2 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns6/sign.sh                        |    2 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns7/sign.sh                        |    2 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns8/named.conf.in                  |   46 +
 external/mpl/bind/dist/bin/tests/system/dnssec/ns9/named.conf.in                  |   38 +
 external/mpl/bind/dist/bin/tests/system/dnssec/setup.sh                           |    3 +
 external/mpl/bind/dist/bin/tests/system/dnssec/tests.sh                           |  492 +++++++++-
 external/mpl/bind/dist/bin/tests/system/dnstap/README                             |   20 +
 external/mpl/bind/dist/bin/tests/system/dnstap/bad-missing-dnstap-output.conf     |    4 +
 external/mpl/bind/dist/bin/tests/system/dnstap/large-answer.fstrm                 |  Bin 
 external/mpl/bind/dist/bin/tests/system/dnstap/tests.sh                           |   33 +-
 external/mpl/bind/dist/bin/tests/system/dsdigest/ns2/sign.sh                      |    8 +-
 external/mpl/bind/dist/bin/tests/system/eddsa/ns2/Xexample.com.+016+09713.key     |    1 +
 external/mpl/bind/dist/bin/tests/system/eddsa/ns2/Xexample.com.+016+09713.private |    3 +
 external/mpl/bind/dist/bin/tests/system/eddsa/ns2/Xexample.com.+016+38353.key     |    1 +
 external/mpl/bind/dist/bin/tests/system/eddsa/ns2/Xexample.com.+016+38353.private |    3 +
 external/mpl/bind/dist/bin/tests/system/eddsa/ns2/example.com.db                  |    2 +
 external/mpl/bind/dist/bin/tests/system/eddsa/ns2/sign.sh                         |    4 +-
 external/mpl/bind/dist/bin/tests/system/eddsa/tests.sh                            |   22 +-
 external/mpl/bind/dist/bin/tests/system/filter-aaaa/ns2/hints                     |    7 +-
 external/mpl/bind/dist/bin/tests/system/filter-aaaa/ns3/hints                     |    7 +-
 external/mpl/bind/dist/bin/tests/system/filter-aaaa/ns5/hints                     |    7 +-
 external/mpl/bind/dist/bin/tests/system/genzone.sh                                |    5 +-
 external/mpl/bind/dist/bin/tests/system/geoip/clean.sh                            |    2 +-
 external/mpl/bind/dist/bin/tests/system/geoip/ns2/named15.conf.in                 |    2 +-
 external/mpl/bind/dist/bin/tests/system/geoip/ns2/named16.conf.in                 |   49 +
 external/mpl/bind/dist/bin/tests/system/geoip/tests.sh                            |   11 +
 external/mpl/bind/dist/bin/tests/system/geoip2/clean.sh                           |   18 +
 external/mpl/bind/dist/bin/tests/system/geoip2/conf/bad-areacode.conf             |   36 +
 external/mpl/bind/dist/bin/tests/system/geoip2/conf/bad-dbname.conf               |   28 +
 external/mpl/bind/dist/bin/tests/system/geoip2/conf/bad-netspeed.conf             |   35 +
 external/mpl/bind/dist/bin/tests/system/geoip2/conf/bad-regiondb.conf             |   42 +
 external/mpl/bind/dist/bin/tests/system/geoip2/conf/bad-threeletter.conf          |   33 +
 external/mpl/bind/dist/bin/tests/system/geoip2/conf/good-options.conf             |   34 +
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoIP2-City.json              |  506 +++++++++
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoIP2-City.mmdb              |  Bin 
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoIP2-Country.json           |  242 ++++
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoIP2-Country.mmdb           |  Bin 
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoIP2-Domain.json            |   72 +
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoIP2-Domain.mmdb            |  Bin 
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoIP2-ISP.json               |   86 +
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoIP2-ISP.mmdb               |  Bin 
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoLite2-ASN.json             |   86 +
 external/mpl/bind/dist/bin/tests/system/geoip2/data/GeoLite2-ASN.mmdb             |  Bin 
 external/mpl/bind/dist/bin/tests/system/geoip2/data/README.md                     |   12 +
 external/mpl/bind/dist/bin/tests/system/geoip2/data/write-test-data.pl            |  192 +++
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/example.db.in                  |   19 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named1.conf.in                 |  106 ++
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named10.conf.in                |   98 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named11.conf.in                |   98 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named12.conf.in                |   39 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named2.conf.in                 |  106 ++
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named3.conf.in                 |   98 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named4.conf.in                 |   82 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named5.conf.in                 |   90 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named6.conf.in                 |   98 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named7.conf.in                 |   98 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named8.conf.in                 |   98 +
 external/mpl/bind/dist/bin/tests/system/geoip2/ns2/named9.conf.in                 |   98 +
 external/mpl/bind/dist/bin/tests/system/geoip2/prereq.sh                          |   19 +
 external/mpl/bind/dist/bin/tests/system/geoip2/setup.sh                           |   22 +
 external/mpl/bind/dist/bin/tests/system/geoip2/tests.sh                           |  487 +++++++++
 external/mpl/bind/dist/bin/tests/system/idna/tests.sh                             |    7 +-
 external/mpl/bind/dist/bin/tests/system/ifconfig.bat                              |    6 +-
 external/mpl/bind/dist/bin/tests/system/ifconfig.sh                               |   12 +-
 external/mpl/bind/dist/bin/tests/system/inline/ns3/master6.db.in                  |   24 +
 external/mpl/bind/dist/bin/tests/system/inline/ns3/named.conf.in                  |    7 +
 external/mpl/bind/dist/bin/tests/system/inline/ns3/sign.sh                        |    5 +
 external/mpl/bind/dist/bin/tests/system/inline/setup.sh                           |    1 +
 external/mpl/bind/dist/bin/tests/system/inline/tests.sh                           |   30 +
 external/mpl/bind/dist/bin/tests/system/ixfr/clean.sh                             |    3 +-
 external/mpl/bind/dist/bin/tests/system/ixfr/ns3/mytest0.db                       |    2 +
 external/mpl/bind/dist/bin/tests/system/ixfr/ns3/mytest1.db                       |    2 +
 external/mpl/bind/dist/bin/tests/system/ixfr/ns3/mytest2.db                       |    2 +
 external/mpl/bind/dist/bin/tests/system/ixfr/ns5/named.conf.in                    |   48 +
 external/mpl/bind/dist/bin/tests/system/ixfr/setup.sh                             |    1 +
 external/mpl/bind/dist/bin/tests/system/ixfr/tests.sh                             |  132 +-
 external/mpl/bind/dist/bin/tests/system/legacy/ns6/edns512.db.in                  |   12 -
 external/mpl/bind/dist/bin/tests/system/legacy/ns7/edns512-notcp.db.in            |   12 -
 external/mpl/bind/dist/bin/tests/system/legacy/tests.sh                           |  108 +-
 external/mpl/bind/dist/bin/tests/system/metadata/tests.sh                         |   16 +-
 external/mpl/bind/dist/bin/tests/system/mkeys/README                              |    4 +
 external/mpl/bind/dist/bin/tests/system/mkeys/ns1/sign.sh                         |    4 +-
 external/mpl/bind/dist/bin/tests/system/mkeys/tests.sh                            |    8 +-
 external/mpl/bind/dist/bin/tests/system/nsupdate/tests.sh                         |   34 +-
 external/mpl/bind/dist/bin/tests/system/parallel.sh                               |   34 +
 external/mpl/bind/dist/bin/tests/system/pipelined/Makefile.in                     |    2 +-
 external/mpl/bind/dist/bin/tests/system/qmin/ans3/ans.py                          |    2 +-
 external/mpl/bind/dist/bin/tests/system/qmin/tests.sh                             |   56 +-
 external/mpl/bind/dist/bin/tests/system/rndc/clean.sh                             |    2 +-
 external/mpl/bind/dist/bin/tests/system/rndc/tests.sh                             |   10 +-
 external/mpl/bind/dist/bin/tests/system/rpz/ns1/root.db                           |    5 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns9/hints                             |   11 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns9/named.conf.in                     |   59 +
 external/mpl/bind/dist/bin/tests/system/rpz/ns9/rpz.db                            |    5 +
 external/mpl/bind/dist/bin/tests/system/rpz/setup.sh                              |    5 +-
 external/mpl/bind/dist/bin/tests/system/rpz/tests.sh                              |   27 +
 external/mpl/bind/dist/bin/tests/system/rsabigexponent/Makefile.in                |    2 +-
 external/mpl/bind/dist/bin/tests/system/run.sh                                    |   35 +-
 external/mpl/bind/dist/bin/tests/system/runall.sh                                 |   33 +-
 external/mpl/bind/dist/bin/tests/system/serve-stale/clean.sh                      |    6 +-
 external/mpl/bind/dist/bin/tests/system/serve-stale/ns1/named1.conf.in            |    1 -
 external/mpl/bind/dist/bin/tests/system/serve-stale/ns1/named2.conf.in            |    3 +-
 external/mpl/bind/dist/bin/tests/system/serve-stale/ns4/named.conf.in             |   38 +
 external/mpl/bind/dist/bin/tests/system/serve-stale/setup.sh                      |    1 +
 external/mpl/bind/dist/bin/tests/system/serve-stale/tests.sh                      |  468 ++++++++-
 external/mpl/bind/dist/bin/tests/system/sfcache/clean.sh                          |    4 +-
 external/mpl/bind/dist/bin/tests/system/sfcache/tests.sh                          |   26 +-
 external/mpl/bind/dist/bin/tests/system/smartsign/tests.sh                        |   32 +-
 external/mpl/bind/dist/bin/tests/system/spf/tests.sh                              |    7 +
 external/mpl/bind/dist/bin/tests/system/staticstub/ns1/root.db                    |   12 +-
 external/mpl/bind/dist/bin/tests/system/statistics/clean.sh                       |    1 +
 external/mpl/bind/dist/bin/tests/system/statistics/ns3/named.conf.in              |    8 +
 external/mpl/bind/dist/bin/tests/system/statistics/tests.sh                       |   52 +
 external/mpl/bind/dist/bin/tests/system/statschannel/clean.sh                     |    8 +-
 external/mpl/bind/dist/bin/tests/system/statschannel/ns2/dnssec.db.in             |   26 +
 external/mpl/bind/dist/bin/tests/system/statschannel/ns2/named.conf.in            |   10 +
 external/mpl/bind/dist/bin/tests/system/statschannel/ns2/sign.sh                  |   28 +
 external/mpl/bind/dist/bin/tests/system/statschannel/setup.sh                     |    9 +-
 external/mpl/bind/dist/bin/tests/system/statschannel/tests.sh                     |  138 ++-
 external/mpl/bind/dist/bin/tests/system/statschannel/zones-json.pl                |   35 +
 external/mpl/bind/dist/bin/tests/system/statschannel/zones-xml.pl                 |   37 +
 external/mpl/bind/dist/bin/tests/system/stop.pl                                   |    2 +
 external/mpl/bind/dist/bin/tests/system/tkey/Makefile.in                          |    2 +-
 external/mpl/bind/dist/bin/tests/system/tkey/ns1/setup.sh                         |    2 +-
 external/mpl/bind/dist/bin/tests/system/verify/zones/genzones.sh                  |    4 +-
 external/mpl/bind/dist/bin/tests/system/wildcard/ns1/sign.sh                      |   16 +-
 external/mpl/bind/dist/bin/tests/system/wildcard/ns2/named.conf.in                |    5 +-
 external/mpl/bind/dist/bin/tests/system/wildcard/ns3/named.conf.in                |    5 +-
 external/mpl/bind/dist/bin/tests/system/wildcard/ns5/named.conf.in                |    5 +-
 external/mpl/bind/dist/bin/tests/system/xfer/dig1.good                            |    3 +-
 external/mpl/bind/dist/bin/tests/system/xfer/dig2.good                            |    3 +-
 external/mpl/bind/dist/bin/tests/system/xfer/prereq.sh                            |    6 +
 external/mpl/bind/dist/bin/tests/system/xfer/tests.sh                             |   12 +-
 external/mpl/bind/dist/bin/tests/virtual-time/Makefile                            |   38 +
 external/mpl/bind/dist/bin/tests/virtual-time/conf.sh                             |   42 +
 external/mpl/bind/dist/bin/tools/Makefile.in                                      |    5 +-
 external/mpl/bind/dist/config.h.win32                                             |   12 +-
 external/mpl/bind/dist/configure.ac                                               |  207 ++-
 external/mpl/bind/dist/contrib/scripts/check-secure-delegation.pl                 |  114 ++
 external/mpl/bind/dist/contrib/scripts/zone-edit.sh                               |  151 ++
 external/mpl/bind/dist/doc/arm/Bv9ARM-book.xml                                    |  202 ++-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch01.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch02.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch03.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch04.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch05.html                                   |  174 ++-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch06.html                                   |   47 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch07.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch08.html                                   |  184 ++-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch09.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch10.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch11.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.ch12.html                                   |    2 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.html                                        |    7 +-
 external/mpl/bind/dist/doc/arm/Bv9ARM.pdf                                         |  Bin 
 external/mpl/bind/dist/doc/arm/man.arpaname.html                                  |    2 +-
 external/mpl/bind/dist/doc/arm/man.ddns-confgen.html                              |    2 +-
 external/mpl/bind/dist/doc/arm/man.delv.html                                      |    2 +-
 external/mpl/bind/dist/doc/arm/man.dig.html                                       |   47 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-cds.html                                |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-checkds.html                            |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-coverage.html                           |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-dsfromkey.html                          |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-importkey.html                          |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-keyfromlabel.html                       |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-keygen.html                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-keymgr.html                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-revoke.html                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-settime.html                            |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-signzone.html                           |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnssec-verify.html                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.dnstap-read.html                               |    2 +-
 external/mpl/bind/dist/doc/arm/man.filter-aaaa.html                               |    2 +-
 external/mpl/bind/dist/doc/arm/man.host.html                                      |    2 +-
 external/mpl/bind/dist/doc/arm/man.mdig.html                                      |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-checkconf.html                           |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-checkzone.html                           |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-journalprint.html                        |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-nzd2nzf.html                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.named-rrchecker.html                           |    2 +-
 external/mpl/bind/dist/doc/arm/man.named.conf.html                                |   26 +-
 external/mpl/bind/dist/doc/arm/man.named.html                                     |    2 +-
 external/mpl/bind/dist/doc/arm/man.nsec3hash.html                                 |    2 +-
 external/mpl/bind/dist/doc/arm/man.nslookup.html                                  |    2 +-
 external/mpl/bind/dist/doc/arm/man.nsupdate.html                                  |    2 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-destroy.html                            |    2 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-keygen.html                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-list.html                               |    2 +-
 external/mpl/bind/dist/doc/arm/man.pkcs11-tokens.html                             |    2 +-
 external/mpl/bind/dist/doc/arm/man.rndc-confgen.html                              |    2 +-
 external/mpl/bind/dist/doc/arm/man.rndc.conf.html                                 |    2 +-
 external/mpl/bind/dist/doc/arm/man.rndc.html                                      |    4 +-
 external/mpl/bind/dist/doc/arm/notes.html                                         |  179 ++-
 external/mpl/bind/dist/doc/arm/notes.pdf                                          |  Bin 
 external/mpl/bind/dist/doc/arm/notes.txt                                          |   98 +-
 external/mpl/bind/dist/doc/arm/notes.xml                                          |  155 ++-
 external/mpl/bind/dist/doc/arm/options.grammar.xml                                |   13 +-
 external/mpl/bind/dist/doc/misc/options                                           |    2 +-
 external/mpl/bind/dist/doc/misc/rfc-compliance                                    |   32 +-
 external/mpl/bind/dist/doc/tex/notestyle.sty                                      |    4 +
 external/mpl/bind/dist/fuzz/Makefile.in                                           |   11 +-
 external/mpl/bind/dist/fuzz/dns_rdata_fromwire_text.c                             |  197 +++
 external/mpl/bind/dist/fuzz/dns_rdata_fromwire_text.in/cdnskey                    |  Bin 
 external/mpl/bind/dist/fuzz/dns_rdata_fromwire_text.in/smimea                     |    1 +
 external/mpl/bind/dist/fuzz/dns_rdata_fromwire_text.in/sshfp                      |    1 +
 external/mpl/bind/dist/lib/bind9/Makefile.in                                      |    2 +-
 external/mpl/bind/dist/lib/bind9/api                                              |    2 +-
 external/mpl/bind/dist/lib/dns/Makefile.in                                        |   16 +-
 external/mpl/bind/dist/lib/dns/api                                                |    2 +-
 external/mpl/bind/dist/lib/dns/geoip2.c                                           |  499 +++++++++
 external/mpl/bind/dist/lib/dns/tests/Makefile.in                                  |   10 +-
 external/mpl/bind/dist/lib/dns/tests/testdata/master/master8.data                 |    4 +-
 external/mpl/bind/dist/lib/dns/win32/libdns.def.in                                |    7 +
 external/mpl/bind/dist/lib/dns/win32/libdns.vcxproj.filters.in                    |   12 +-
 external/mpl/bind/dist/lib/dns/win32/libdns.vcxproj.in                            |    8 +-
 external/mpl/bind/dist/lib/irs/tests/Makefile.in                                  |    2 +-
 external/mpl/bind/dist/lib/isc/Makefile.in                                        |    4 +-
 external/mpl/bind/dist/lib/isc/api                                                |    4 +-
 external/mpl/bind/dist/lib/isc/include/isc/Makefile.in                            |    4 +-
 external/mpl/bind/dist/lib/isc/include/isc/endian.h                               |  189 +++
 external/mpl/bind/dist/lib/isc/include/isc/siphash.h                              |   33 +
 external/mpl/bind/dist/lib/isc/siphash.c                                          |  139 ++
 external/mpl/bind/dist/lib/isc/tests/Makefile.in                                  |    9 +-
 external/mpl/bind/dist/lib/isc/tests/siphash_test.c                               |  132 ++
 external/mpl/bind/dist/lib/isc/win32/libisc.def.in                                |    2 +-
 external/mpl/bind/dist/lib/isc/win32/libisc.vcxproj.filters.in                    |    6 +
 external/mpl/bind/dist/lib/isc/win32/libisc.vcxproj.in                            |   10 +-
 external/mpl/bind/dist/lib/isccfg/Makefile.in                                     |    2 +-
 external/mpl/bind/dist/lib/isccfg/api                                             |    2 +-
 external/mpl/bind/dist/lib/isccfg/tests/Makefile.in                               |    2 +-
 external/mpl/bind/dist/lib/ns/Makefile.in                                         |    6 +-
 external/mpl/bind/dist/lib/ns/api                                                 |    2 +-
 external/mpl/bind/dist/lib/ns/tests/Makefile.in                                   |    2 +-
 external/mpl/bind/dist/lib/ns/tests/plugin_test.c                                 |   13 +-
 external/mpl/bind/dist/lib/samples/Makefile-postinstall                           |  437 ++++++++
 external/mpl/bind/dist/lib/samples/Makefile.in                                    |    2 +-
 external/mpl/bind/dist/m4/ax_check_openssl.m4                                     |    2 +-
 external/mpl/bind/dist/m4/ax_restore_flags.m4                                     |   52 +
 external/mpl/bind/dist/m4/ax_save_flags.m4                                        |   71 +
 external/mpl/bind/dist/m4/compat.m4                                               |   24 +
 external/mpl/bind/dist/make/rules.in                                              |    9 +-
 external/mpl/bind/dist/o                                                          |  161 +++
 external/mpl/bind/dist/srcid                                                      |    2 +-
 external/mpl/bind/dist/unit/unittest.sh                                           |   27 +
 external/mpl/bind/dist/version                                                    |    2 +-
 external/mpl/bind/dist/win32utils/Configure                                       |   93 +-
 external/mpl/bind/dist/win32utils/build.txt                                       |    4 -
 external/mpl/bind/dist/win32utils/readme1st.txt                                   |    4 -
 359 files changed, 12479 insertions(+), 1550 deletions(-)

diffs (truncated from 19932 to 300 lines):

diff -r 1ca76fdefaa2 -r df760e6b4b7e external/mpl/bind/dist/CHANGES
--- a/external/mpl/bind/dist/CHANGES    Thu Sep 05 17:25:23 2019 +0000
+++ b/external/mpl/bind/dist/CHANGES    Thu Sep 05 19:27:31 2019 +0000
@@ -1,3 +1,204 @@
+       --- 9.14.5 released ---
+
+5277.  [bug]           Cache DB statistics could underflow when serve-stale
+                       was in use, because of a bug in counter maintenance
+                       when RRsets become stale.
+
+                       Functions for dumping statistics have been updated
+                       to dump active, stale, and ancient statistic
+                       counters.  Ancient RRset counters are prefixed
+                       with '~'; stale RRset counters are still prefixed
+                       with '#'. [GL #602]
+
+5275.  [bug]           Mark DS records included in referral messages
+                       with trust level "pending" so that they can be
+                       validated and cached immediately, with no need to
+                       re-query. [GL #964]
+
+5274.  [bug]           Address potential use after free race when shutting
+                       down rpz. [GL #1175]
+
+5273.  [bug]           Check that bits [64..71] of a dns64 prefix are zero.
+                       [GL #1159]
+
+5269.  [port]          cygwin: can return ETIMEDOUT on connect() with a
+                       non-blocking socket. [GL #1133]
+
+5268.  [bug]           named could crash during configuration if
+                       configured to use "geoip continent" ACLs with
+                       legacy GeoIP. [GL #1163]
+
+5266.  [bug]           named-checkconf failed to report dnstap-output
+                       missing from named.conf when dnstap was specified.
+                       [GL #1136]
+
+5265.  [bug]           DNS64 and RPZ nodata (CNAME *.) rules interacted badly
+                       [GL #1106]
+
+5264.  [func]          New DNS Cookie algorithm - siphash24 - has been added
+                       to BIND 9. [GL #605]
+
+5236.  [func]          Add SipHash 2-4 implementation in lib/isc/siphash.c
+                       and switch isc_hash_function() to use SipHash 2-4.
+                       [GL #605]
+
+       --- 9.14.4 released ---
+
+5260.  [bug]           dnstap-read was producing malformed output for large
+                       packets. [GL #1093]
+
+5258.  [func]          Added support for the GeoIP2 API from MaxMind,
+                       when BIND is compiled using "configure --with-geoip2".
+                       The legacy GeoIP API can be enabled by using
+                       "configure --with-geoip" instead. These options
+                       cannot be used together.
+
+                       Certain geoip ACL settings that were available with
+                       legacy GeoIP are not available when using GeoIP2.
+                       See the ARM for details. [GL #182]
+
+5257.  [bug]           Some statistics data was not being displayed.
+                       Add shading to the zone tables. [GL #1030]
+
+5256.  [bug]           Ensure that glue records are included in root
+                       priming responses if "minimal-responses" is not
+                       set to "yes". [GL #1092]
+
+5255.  [bug]           Errors encountered while reloading inline-signing
+                       zones could be ignored, causing the zone content to
+                       be left in an incompletely updated state rather than
+                       reverted. [GL #1109]
+
+5254.  [func]          Collect metrics to report to the statistics-channel
+                       DNSSEC signing operations (dnssec-sign) and refresh
+                       operations (dnssec-refresh) per zone and per keytag.
+                       [GL #513]
+
+5253.  [port]          Support platforms that don't define ULLONG_MAX.
+                       [GL #1098]
+
+5251.  [bug]           Statistics were broken in x86 Windows builds.
+                       [GL #1081]
+
+5249.  [bug]           Fix a possible underflow in recursion clients
+                       statistics when hitting recursive clients
+                       soft quota. [GL #1067]
+
+       --- 9.14.3 released ---
+
+5244.  [security]      Fixed a race condition in dns_dispatch_getnext()
+                       that could cause an assertion failure if a
+                       significant number of incoming packets were
+                       rejected. (CVE-2019-6471) [GL #942]
+
+5243.  [bug]           Fix a possible race between dispatcher and socket
+                       code in a high-load cold-cache resolver scenario.
+                       [GL #943]
+
+5242.  [bug]           In relaxed qname minimizatiom mode, fall back to
+                       normal resolution when encountering a lame
+                       delegation, and use _.domain/A queries rather
+                       than domain/NS. [GL #1055]
+
+5241.  [bug]           Fix Ed448 private and public key ASN.1 prefix blobs.
+                       [GL #225]
+
+5240.  [bug]           Remove key id calculation for RSAMD5. [GL #996]
+
+5238.  [bug]           Fix a possible deadlock in TCP code. [GL #1046]
+
+5237.  [bug]           Recurse to find the root server list with 'dig +trace'.
+                       [GL #1028]
+
+5234.  [port]          arm: just use the compiler's default support for
+                       yield. [GL #981]
+
+       --- 9.14.2 released ---
+
+5233.  [bug]           Negative trust anchors did not work with "forward only;"
+                       to validating resolvers. [GL #997]
+
+5231.  [protocol]      Add support for displaying CLIENT-TAG and SERVER-TAG.
+                       [GL #960]
+
+5229.  [protocol]      Enforce known SSHFP fingerprint lengths. [GL #852]
+
+5228.  [cleanup]       If trusted-keys and managed-keys are configured
+                       simultaneously for the same name, the key cannot
+                       be rolled automatically. This configuration now
+                       logs a warning. [GL #868]
+
+5224.  [bug]           Only test provide-ixfr on TCP streams. [GL #991]
+
+5223.  [bug]           Fixed a race in the filter-aaaa plugin accessing
+                       the hash table. [GL #1005]
+
+5222.  [bug]           'delv -t ANY' could leak memory. [GL #983]
+
+5221.  [test]          Enable parallel execution of system tests on
+                       Windows. [GL !4101]
+
+5220.  [cleanup]       Refactor the isc_stat structure to take advantage
+                       of stdatomic. [GL !1493]
+
+5219.  [bug]           Fixed a race in the filter-aaaa plugin that could
+                       trigger a crash when returning an instance object
+                       to the memory pool. [GL #982]
+
+5218.  [bug]           Conditionally include <dlfcn.h>. [GL #995]
+
+5217.  [bug]           Restore key id calculation for RSAMD5. [GL #996]
+
+5216.  [bug]           Fetches-per-zone counter wasn't updated correctly
+                       when doing qname minimization. [GL #992]
+
+5215.  [bug]           Change #5124 was incomplete; named could still
+                       return FORMERR instead of SERVFAIL in some cases.
+                       [GL #990]
+
+5214.  [bug]           win32: named now removes its lock file upon shutdown.
+                       [GL #979]
+
+5213.  [bug]           win32: Eliminated a race which allowed named.exe running
+                       as a service to be killed prematurely during shutdown.
+                       [GL #978]
+
+5211.  [bug]           Allow out-of-zone additional data to be included
+                       in authoritative responses if recursion is allowed
+                       and "minimal-responses" is disabled.  This behavior
+                       was inadvertently removed in change #4605. [GL #817]
+
+5210.  [bug]           When dnstap is enabled and recursion is not
+                       available, incoming queries are now logged
+                       as "auth". Previously, this depended on whether
+                       recursion was requested by the client, not on
+                       whether recursion was available. [GL #963]
+
+5209.  [bug]           When update-check-ksk is true, add_sigs was not
+                       considering offline keys, leaving record sets signed
+                       with the incorrect type key. [GL #763]
+
+5208.  [test]          Run valid rdata wire encodings through totext+fromtext
+                       and tofmttext+fromtext methods to check these methods.
+                       [GL #899]
+
+5207.  [test]          Check delv and dig TTL values. [GL #965]
+
+5206.  [bug]           Delv could print out bad TTLs. [GL #965]
+
+5205.  [bug]           Enforce that a DS hash exists. [GL #899]
+
+5204.  [test]          Check that dns_rdata_fromtext() produces a record that
+                       will be accepted by dns_rdata_fromwire(). [GL #852]
+
+5203.  [bug]           Enforce whether key rdata exists or not in KEY,
+                       DNSKEY, CDNSKEY and RKEY. [GL #899]
+
+5202.  [bug]           <dns/ecs.h> was missing ISC_LANG_ENDDECLS. [GL #976]
+
+5190.  [bug]           Ignore trust anchors using disabled algorithms.
+                       [GL #806]
+
        --- 9.14.1 released ---
 
 5201.  [bug]           Fix a possible deadlock in RPZ update code. [GL #973]
diff -r 1ca76fdefaa2 -r df760e6b4b7e external/mpl/bind/dist/CONTRIBUTING
--- a/external/mpl/bind/dist/CONTRIBUTING       Thu Sep 05 17:25:23 2019 +0000
+++ b/external/mpl/bind/dist/CONTRIBUTING       Thu Sep 05 19:27:31 2019 +0000
@@ -1,3 +1,5 @@
+CONTRIBUTING
+
 BIND Source Access and Contributor Guidelines
 
 Feb 22, 2018
diff -r 1ca76fdefaa2 -r df760e6b4b7e external/mpl/bind/dist/HISTORY
--- a/external/mpl/bind/dist/HISTORY    Thu Sep 05 17:25:23 2019 +0000
+++ b/external/mpl/bind/dist/HISTORY    Thu Sep 05 19:27:31 2019 +0000
@@ -1,3 +1,5 @@
+HISTORY
+
 Functional enhancements from prior major releases of BIND 9
 
 BIND 9.11
@@ -431,11 +433,11 @@
   * Detect duplicates of UDP queries we are recursing on and drop them.
     New stats category "duplicates".
   * "USE INTERNAL MALLOC" is now runtime selectable.
-  * The lame cache is now done on a basis as some servers only appear to
-    be lame for certain query types.
+  * The lame cache is now done on a <qname,qclass,qtype> basis as some
+    servers only appear to be lame for certain query types.
   * Limit the number of recursive clients that can be waiting for a single
-    query () to resolve. New options clients-per-query and
-    max-clients-per-query.
+    query (<qname,qtype,qclass>) to resolve. New options clients-per-query
+    and max-clients-per-query.
   * dig: report the number of extra bytes still left in the packet after
     processing all the records.
   * Support for IPSECKEY rdata type.
diff -r 1ca76fdefaa2 -r df760e6b4b7e external/mpl/bind/dist/OPTIONS
--- a/external/mpl/bind/dist/OPTIONS    Thu Sep 05 17:25:23 2019 +0000
+++ b/external/mpl/bind/dist/OPTIONS    Thu Sep 05 19:27:31 2019 +0000
@@ -1,10 +1,12 @@
+OPTIONS
+
 Setting the STD_CDEFINES environment variable before running configure can
 be used to enable certain compile-time options that are not explicitly
 defined in configure.
 
 Some of these settings are:
 
-Setting                   Description
+         Setting                            Description
                           Overwrite memory with tag values when allocating
 -DISC_MEM_DEFAULTFILL=1   or freeing it; this impairs performance but
                           makes debugging of memory problems easier.
diff -r 1ca76fdefaa2 -r df760e6b4b7e external/mpl/bind/dist/PLATFORMS
--- a/external/mpl/bind/dist/PLATFORMS  Thu Sep 05 17:25:23 2019 +0000
+++ b/external/mpl/bind/dist/PLATFORMS  Thu Sep 05 19:27:31 2019 +0000
@@ -1,3 +1,5 @@
+PLATFORMS
+
 Supported platforms
 
 In general, this version of BIND will build and run on any POSIX-compliant
@@ -64,31 +66,6 @@
 
 Platform quirks
 
-ARM
-
-If the compilation ends with following error:
-
-Error: selected processor does not support `yield' in ARM mode
-
-You will need to set -march compiler option to native, so the compiler
-recognizes yield assembler instruction. The proper way to set -march=
-native would be to put it into CFLAGS, e.g. run ./configure like this:
-CFLAGS="-march=native -Os -g" ./configure plus your usual options.
-
-If that doesn't work, you can enforce the minimum CPU and FPU (taken from
-Debian armhf documentation):
-
-  * The lowest worthwhile CPU implementation is Armv7-A, therefore the
-    recommended build option is -march=armv7-a.
-
-  * FPU should be set at VFPv3-D16 as they represent the minimum
-    specification of the processors to support here, therefore the
-    recommended build option is -mfpu=vfpv3-d16.
-
-The configure command should look like this:
-
-CFLAGS="-march=armv7-a -mfpu=vfpv3-d16 -Os -g" ./configure
-
 NetBSD 6 i386
 
 The i386 build of NetBSD requires the libatomic library, available from



Home | Main Index | Thread Index | Old Index