Add CHANGES entry and release note for GL #3439

diff --git a/CHANGES b/CHANGES
index 96d37cabbd57b393147d3e576e09e194bcff796f..49e43f3fa431c045f7dbacc20bfcbb46b1cc9445 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,10 @@
+5925.  [bug]           With a forwarder configured for all queries, resolution
+                       failures encountered during DS chasing could trigger
+                       assertion failures due to a logic bug in
+                       resume_dslookup() that caused it to call
+                       dns_resolver_createfetch() with an invalid name.
+                       [GL #3439]
+
 5924.  [func]          When it's necessary to use AXFR to respond to an
                        IXFR request, a message explaining the reason
                        is now logged at level info. [GL #2683]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index eecc87eb4c2d213e9e4d777c2e17583e7a7c0061..b604010fcc0430f99739564ee1193f1975656300 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -40,6 +40,12 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+- When running as a validating resolver forwarding all queries to
+  another resolver, :iscman:`named` could crash with an assertion
+  failure. These crashes occurred when the configured forwarder sent a
+  broken DS response and :iscman:`named` failed its attempts to find a
+  proper one instead. This has been fixed. :gl:`#3439`
+
 - A DNS compression would be applied on the root zone name if it is repeatedly
   used in the same RRSet. :gl:`#3423`