Auth: correct replies to NS and SOA in .arpa zones.

[people/ms/dnsmasq.git] / CHANGELOG

diff --git a/CHANGELOG b/CHANGELOG
index 34432ae4807f5e43e6e5fd5b962bddbfc8141a3c..0619788e9cefeb7d609242b88c44c0894ad2e515 100644 (file)
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -68,14 +68,40 @@ version 2.73
            Fix broken DNSSEC validation of ECDSA signatures.
 
            Add --dnssec-timestamp option, which provides an automatic
-           way to detect when the system time becomes valid after boot
-           on systems without an RTC, whilst allowing DNS queries before the
-           clock is valid so that NTP can run. Thanks to
-           Kevin Darbyshire-Bryant for developing this idea.
+           way to detect when the system time becomes valid after 
+           boot on systems without an RTC, whilst allowing DNS 
+           queries before the clock is valid so that NTP can run. 
+           Thanks to Kevin Darbyshire-Bryant for developing this idea.
 
            Add --tftp-no-fail option. Thanks to Stefan Tomanek for
            the patch.
-       
+
+           Fix crash caused by looking up servers.bind, CHAOS text 
+           record, when more than about five --servers= lines are 
+           in the dnsmasq config. This causes memory corruption 
+           which causes a crash later. Thanks to Matt Coddington for 
+           sterling work chasing this down.
+
+           Fix crash on receipt of certain malformed DNS requests.
+           Thanks to Nick Sampanis for spotting the problem.
+
+            Fix crash in authoritative DNS code, if a .arpa zone 
+           is declared as authoritative, and then a PTR query which
+           is not to be treated as authoritative arrived. Normally, 
+           directly declaring .arpa zone as authoritative is not 
+           done, so this crash wouldn't be seen. Instead the 
+           relevant .arpa zone should be specified as a subnet
+           in the auth-zone declaration. Thanks to Johnny S. Lee
+           for the bugreport and initial patch.
+
+           Fix authoritative DNS code to correctly reply to NS 
+           and SOA queries for .arpa zones for which we are 
+           declared authoritative by means of a subnet in auth-zone.
+           Previously we provided correct answers to PTR queries
+           in such zones (including NS and SOA) but not direct
+           NS and SOA queries. Thanks to Johnny S. Lee for 
+           pointing out the problem.
+
        
 version 2.72
             Add ra-advrouter mode, for RFC-3775 mobile IPv6 support.
@@ -120,7 +146,7 @@ version 2.72
             Fix problem with --local-service option on big-endian platforms
            Thanks to Richard Genoud for the patch.
 
-
+       
 version 2.71
             Subtle change to error handling to help DNSSEC validation 
            when servers fail to provide NODATA answers for