Update bind98 pacakge to 9.8.2.

Security Fixes

  + BIND 9 nameservers performing recursive queries could cache an
    invalid record and subsequent queries for that record could
    crash the resolvers with an assertion failure. [RT #26590]
    [CVE-2011-4313]

Feature Changes

  + RPZ implementation now conforms to version 3 of the specification.
    [RT #27316]

  + It is now possible to explicitly disable DLV in named.conf by
    specifying "dnssec-lookaside no;". This is the default, but the
    ability to configure it makes it clearly visible to administrators.
    [RT #24858]

  + --enable-developer, a new composite argument to the configure
    script, enables a set of build options normally disabled but
    frequently selected in test or development builds, specifically:
    enable_fixed_rrset, with_atf, enable_filter_aaaa, enable_rpz_nsip,
    enable_rpz_nsdname, and with_dlz_filesystem (and on Linux and
    Darwin, also enable_exportlib) [RT #27103]

6 files changed, 31 insertions, 202 deletions

diff --git a/net/bind98/Makefile b/net/bind98/Makefile
index 61145023e36..e61401edd47 100644
--- a/net/bind98/Makefile
+++ b/net/bind98/Makefile
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.7 2012/03/12 15:40:16 taca Exp $
+# $NetBSD: Makefile,v 1.8 2012/04/05 00:39:34 taca Exp $
 
 DISTNAME=	bind-${BIND_VERSION}
 PKGNAME=	${DISTNAME:S/-P/pl/}
@@ -16,7 +16,7 @@ PKG_DESTDIR_SUPPORT=	user-destdir
 
 MAKE_JOBS_SAFE=	no
 
-BIND_VERSION=	9.8.1-P1
+BIND_VERSION=	9.8.2
 
 .include "../../mk/bsd.prefs.mk"
 
@@ -60,6 +60,8 @@ FILES_SUBST+=		BIND_GROUP=${BIND_GROUP:Q} \
 			BIND_USER=${BIND_USER:Q} PAX=${PAX:Q}
 MESSAGE_SUBST+=		BIND_DIR=${BIND_DIR} BIND_USER=${BIND_USER}
 DOCDIR=			${DESTDIR}${PREFIX}/share/doc/bind9
+MISCDOC=		dnssec ipv6 migration migration-4to9 options \
+			rfc-compliance roadmap sdb
 
 # include/isc/ipv6.h is installed on non-ipv6 platforms
 PLIST_VARS+=	inet6
@@ -69,14 +71,12 @@ PLIST.inet6=	yes
 
 RCD_SCRIPTS=		lwresd named9
 
-INSTALLATION_DIRS=	${DOCDIR} share/doc/bind9/arm share/doc/bind9/draft \
-			share/doc/bind9/rfc
+INSTALLATION_DIRS=	${DOCDIR} share/doc/bind9/arm share/doc/bind9/misc
 
 post-install:
 	${INSTALL_DATA} ${WRKSRC}/README ${DOCDIR}
 	${INSTALL_DATA} ${WRKSRC}/doc/arm/*.html ${DOCDIR}/arm
-	${INSTALL_DATA} ${WRKSRC}/doc/draft/draft-*.txt ${DOCDIR}/draft
-	${INSTALL_DATA} ${WRKSRC}/doc/rfc/rfc*.txt ${DOCDIR}/rfc
+	cd ${WRKSRC}/doc/misc && ${INSTALL_DATA} ${MISCDOC} ${DOCDIR}/misc
 
 .include "../../security/openssl/buildlink3.mk"
 .include "../../mk/bsd.pkg.mk"
diff --git a/net/bind98/PLIST b/net/bind98/PLIST
index 6729b278679..542798120a9 100644
--- a/net/bind98/PLIST
+++ b/net/bind98/PLIST
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.2 2011/09/01 03:44:35 taca Exp $
+@comment $NetBSD: PLIST,v 1.3 2012/04/05 00:39:34 taca Exp $
 bin/dig
 bin/host
 bin/isc-config.sh
@@ -104,6 +104,7 @@ include/isc/hash.h
 include/isc/heap.h
 include/isc/hex.h
 include/isc/hmacmd5.h
+include/isc/hmacsha.h
 include/isc/httpd.h
 include/isc/int.h
 include/isc/interfaceiter.h
@@ -363,159 +364,13 @@ share/doc/bind9/arm/man.nsupdate.html
 share/doc/bind9/arm/man.rndc-confgen.html
 share/doc/bind9/arm/man.rndc.conf.html
 share/doc/bind9/arm/man.rndc.html
-share/doc/bind9/draft/draft-faltstrom-uri-06.txt
-share/doc/bind9/draft/draft-ietf-6man-text-addr-representation-07.txt
-share/doc/bind9/draft/draft-ietf-behave-address-format-07.txt
-share/doc/bind9/draft/draft-ietf-behave-dns64-11.txt
-share/doc/bind9/draft/draft-ietf-dnsext-axfr-clarify-14.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dns-tcp-requirements-03.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dnssec-bis-updates-12.txt
-share/doc/bind9/draft/draft-ietf-dnsext-dnssec-registry-fixes-06.txt
-share/doc/bind9/draft/draft-ietf-dnsext-ecc-key-07.txt
-share/doc/bind9/draft/draft-ietf-dnsext-interop3597-02.txt
-share/doc/bind9/draft/draft-ietf-dnsext-rfc2671bis-edns0-05.txt
-share/doc/bind9/draft/draft-ietf-dnsext-rfc2672bis-dname-19.txt
-share/doc/bind9/draft/draft-ietf-dnsext-rfc3597-bis-02.txt
-share/doc/bind9/draft/draft-ietf-dnsext-tsig-md5-deprecated-03.txt
-share/doc/bind9/draft/draft-ietf-dnsop-bad-dns-res-05.txt
-share/doc/bind9/draft/draft-ietf-dnsop-dnssec-key-timing-02.txt
-share/doc/bind9/draft/draft-ietf-dnsop-dnssec-trust-history-01.txt
-share/doc/bind9/draft/draft-ietf-dnsop-inaddr-required-07.txt
-share/doc/bind9/draft/draft-ietf-dnsop-name-server-management-reqs-02.txt
-share/doc/bind9/draft/draft-ietf-dnsop-respsize-06.txt
-share/doc/bind9/draft/draft-kato-dnsop-local-zones-00.txt
-share/doc/bind9/draft/draft-kerr-ixfr-only-01.txt
-share/doc/bind9/draft/draft-mekking-dnsop-auto-cpsync-00.txt
-share/doc/bind9/draft/draft-yao-dnsext-bname-04.txt
-share/doc/bind9/rfc/rfc1032.txt
-share/doc/bind9/rfc/rfc1033.txt
-share/doc/bind9/rfc/rfc1034.txt
-share/doc/bind9/rfc/rfc1035.txt
-share/doc/bind9/rfc/rfc1101.txt
-share/doc/bind9/rfc/rfc1122.txt
-share/doc/bind9/rfc/rfc1123.txt
-share/doc/bind9/rfc/rfc1183.txt
-share/doc/bind9/rfc/rfc1348.txt
-share/doc/bind9/rfc/rfc1535.txt
-share/doc/bind9/rfc/rfc1536.txt
-share/doc/bind9/rfc/rfc1537.txt
-share/doc/bind9/rfc/rfc1591.txt
-share/doc/bind9/rfc/rfc1611.txt
-share/doc/bind9/rfc/rfc1612.txt
-share/doc/bind9/rfc/rfc1706.txt
-share/doc/bind9/rfc/rfc1712.txt
-share/doc/bind9/rfc/rfc1750.txt
-share/doc/bind9/rfc/rfc1876.txt
-share/doc/bind9/rfc/rfc1886.txt
-share/doc/bind9/rfc/rfc1912.txt
-share/doc/bind9/rfc/rfc1982.txt
-share/doc/bind9/rfc/rfc1995.txt
-share/doc/bind9/rfc/rfc1996.txt
-share/doc/bind9/rfc/rfc2052.txt
-share/doc/bind9/rfc/rfc2104.txt
-share/doc/bind9/rfc/rfc2119.txt
-share/doc/bind9/rfc/rfc2133.txt
-share/doc/bind9/rfc/rfc2136.txt
-share/doc/bind9/rfc/rfc2137.txt
-share/doc/bind9/rfc/rfc2163.txt
-share/doc/bind9/rfc/rfc2168.txt
-share/doc/bind9/rfc/rfc2181.txt
-share/doc/bind9/rfc/rfc2230.txt
-share/doc/bind9/rfc/rfc2308.txt
-share/doc/bind9/rfc/rfc2317.txt
-share/doc/bind9/rfc/rfc2373.txt
-share/doc/bind9/rfc/rfc2374.txt
-share/doc/bind9/rfc/rfc2375.txt
-share/doc/bind9/rfc/rfc2418.txt
-share/doc/bind9/rfc/rfc2535.txt
-share/doc/bind9/rfc/rfc2536.txt
-share/doc/bind9/rfc/rfc2537.txt
-share/doc/bind9/rfc/rfc2538.txt
-share/doc/bind9/rfc/rfc2539.txt
-share/doc/bind9/rfc/rfc2540.txt
-share/doc/bind9/rfc/rfc2541.txt
-share/doc/bind9/rfc/rfc2553.txt
-share/doc/bind9/rfc/rfc2671.txt
-share/doc/bind9/rfc/rfc2672.txt
-share/doc/bind9/rfc/rfc2673.txt
-share/doc/bind9/rfc/rfc2782.txt
-share/doc/bind9/rfc/rfc2825.txt
-share/doc/bind9/rfc/rfc2826.txt
-share/doc/bind9/rfc/rfc2845.txt
-share/doc/bind9/rfc/rfc2874.txt
-share/doc/bind9/rfc/rfc2915.txt
-share/doc/bind9/rfc/rfc2929.txt
-share/doc/bind9/rfc/rfc2930.txt
-share/doc/bind9/rfc/rfc2931.txt
-share/doc/bind9/rfc/rfc3007.txt
-share/doc/bind9/rfc/rfc3008.txt
-share/doc/bind9/rfc/rfc3071.txt
-share/doc/bind9/rfc/rfc3090.txt
-share/doc/bind9/rfc/rfc3110.txt
-share/doc/bind9/rfc/rfc3123.txt
-share/doc/bind9/rfc/rfc3152.txt
-share/doc/bind9/rfc/rfc3197.txt
-share/doc/bind9/rfc/rfc3225.txt
-share/doc/bind9/rfc/rfc3226.txt
-share/doc/bind9/rfc/rfc3258.txt
-share/doc/bind9/rfc/rfc3363.txt
-share/doc/bind9/rfc/rfc3364.txt
-share/doc/bind9/rfc/rfc3425.txt
-share/doc/bind9/rfc/rfc3445.txt
-share/doc/bind9/rfc/rfc3467.txt
-share/doc/bind9/rfc/rfc3490.txt
-share/doc/bind9/rfc/rfc3491.txt
-share/doc/bind9/rfc/rfc3492.txt
-share/doc/bind9/rfc/rfc3493.txt
-share/doc/bind9/rfc/rfc3513.txt
-share/doc/bind9/rfc/rfc3596.txt
-share/doc/bind9/rfc/rfc3597.txt
-share/doc/bind9/rfc/rfc3645.txt
-share/doc/bind9/rfc/rfc3655.txt
-share/doc/bind9/rfc/rfc3658.txt
-share/doc/bind9/rfc/rfc3755.txt
-share/doc/bind9/rfc/rfc3757.txt
-share/doc/bind9/rfc/rfc3833.txt
-share/doc/bind9/rfc/rfc3845.txt
-share/doc/bind9/rfc/rfc3901.txt
-share/doc/bind9/rfc/rfc4025.txt
-share/doc/bind9/rfc/rfc4033.txt
-share/doc/bind9/rfc/rfc4034.txt
-share/doc/bind9/rfc/rfc4035.txt
-share/doc/bind9/rfc/rfc4074.txt
-share/doc/bind9/rfc/rfc4159.txt
-share/doc/bind9/rfc/rfc4193.txt
-share/doc/bind9/rfc/rfc4255.txt
-share/doc/bind9/rfc/rfc4294.txt
-share/doc/bind9/rfc/rfc4339.txt
-share/doc/bind9/rfc/rfc4343.txt
-share/doc/bind9/rfc/rfc4367.txt
-share/doc/bind9/rfc/rfc4398.txt
-share/doc/bind9/rfc/rfc4408.txt
-share/doc/bind9/rfc/rfc4431.txt
-share/doc/bind9/rfc/rfc4470.txt
-share/doc/bind9/rfc/rfc4471.txt
-share/doc/bind9/rfc/rfc4472.txt
-share/doc/bind9/rfc/rfc4509.txt
-share/doc/bind9/rfc/rfc4634.txt
-share/doc/bind9/rfc/rfc4635.txt
-share/doc/bind9/rfc/rfc4641.txt
-share/doc/bind9/rfc/rfc4648.txt
-share/doc/bind9/rfc/rfc4697.txt
-share/doc/bind9/rfc/rfc4701.txt
-share/doc/bind9/rfc/rfc4892.txt
-share/doc/bind9/rfc/rfc4955.txt
-share/doc/bind9/rfc/rfc4956.txt
-share/doc/bind9/rfc/rfc5001.txt
-share/doc/bind9/rfc/rfc5011.txt
-share/doc/bind9/rfc/rfc5155.txt
-share/doc/bind9/rfc/rfc5205.txt
-share/doc/bind9/rfc/rfc5452.txt
-share/doc/bind9/rfc/rfc5507.txt
-share/doc/bind9/rfc/rfc5625.txt
-share/doc/bind9/rfc/rfc5702.txt
-share/doc/bind9/rfc/rfc5933.txt
-share/doc/bind9/rfc/rfc6303.txt
-share/doc/bind9/rfc/rfc952.txt
+share/doc/bind9/misc/dnssec
+share/doc/bind9/misc/ipv6
+share/doc/bind9/misc/migration
+share/doc/bind9/misc/migration-4to9
+share/doc/bind9/misc/options
+share/doc/bind9/misc/rfc-compliance
+share/doc/bind9/misc/roadmap
+share/doc/bind9/misc/sdb
 share/examples/rc.d/lwresd
 share/examples/rc.d/named9
diff --git a/net/bind98/distinfo b/net/bind98/distinfo
index 0390b60d51b..b160b0733fa 100644
--- a/net/bind98/distinfo
+++ b/net/bind98/distinfo
@@ -1,12 +1,11 @@
-$NetBSD: distinfo,v 1.7 2011/11/17 00:48:09 taca Exp $
+$NetBSD: distinfo,v 1.8 2012/04/05 00:39:34 taca Exp $
 
-SHA1 (bind-9.8.1-P1.tar.gz) = 1cff6594aa185d84942edd2f3cc06dff9cebb04b
-RMD160 (bind-9.8.1-P1.tar.gz) = 3183167d73a5da81e7e286a6eb123fc8684f4421
-Size (bind-9.8.1-P1.tar.gz) = 8451969 bytes
+SHA1 (bind-9.8.2.tar.gz) = 09f0b18bde0438186d6639f08c17db3b98e81c17
+RMD160 (bind-9.8.2.tar.gz) = 59f6502cc4dd315da4c31adc183f0eb88e6856b4
+Size (bind-9.8.2.tar.gz) = 7054574 bytes
 SHA1 (patch-bin_dig_dighost.c) = 3f37033cc64e1153268ab437fab533d2920bb18c
-SHA1 (patch-config.threads.in) = 3d8ee03230fdb6aca545a67759ba7aacda52bb61
-SHA1 (patch-configure) = 81a83d750f5c6d21abb30a743a4aa09e7d91711e
-SHA1 (patch-contrib_dlz_drivers_sdlz__helper.c) = d6e9a7145449874ad00a0b28b1582df5a2516965
+SHA1 (patch-config.threads.in) = 045531d8378a88c654ab98ba6ea65786c8cf4e2b
+SHA1 (patch-configure) = 08f878fd3a5d3d17e0cf55d01344ddc84991967f
 SHA1 (patch-lib_dns_rbt.c) = 29fb5c24ff3558f1621e93ea16419e32dbc695b7
 SHA1 (patch-lib_lwres_getaddrinfo.c) = 9585a26a376d32f80ac8266eb7967c00b433f14d
 SHA1 (patch-lib_lwres_getnameinfo.c) = c26dcff4637b7beb16b66c32b304d0f187390eed
diff --git a/net/bind98/patches/patch-config.threads.in b/net/bind98/patches/patch-config.threads.in
index 789b7445e39..353760b3ac5 100644
--- a/net/bind98/patches/patch-config.threads.in
+++ b/net/bind98/patches/patch-config.threads.in
@@ -1,13 +1,13 @@
-$NetBSD: patch-config.threads.in,v 1.1.1.1 2011/03/04 03:52:15 taca Exp $
+$NetBSD: patch-config.threads.in,v 1.2 2012/04/05 00:39:34 taca Exp $
 
---- config.threads.in.orig	2010-12-21 04:20:23.000000000 +0000
+--- config.threads.in.orig	2012-03-22 19:20:00.000000000 +0000
 +++ config.threads.in
-@@ -44,6 +44,8 @@ case $host in
+@@ -45,6 +45,8 @@ case $host in
  	use_threads=false ;;
  *-freebsd*)
  	use_threads=false ;;
 +*-dragonfly*)
 +	use_threads=false ;;
- *-bsdi[234]*)
+ [*-bsdi[234]*])
  	# Thread signals do not work reliably on some versions of BSD/OS.
  	use_threads=false ;;
diff --git a/net/bind98/patches/patch-configure b/net/bind98/patches/patch-configure
index df8a1625cd0..82baaa21a32 100644
--- a/net/bind98/patches/patch-configure
+++ b/net/bind98/patches/patch-configure
@@ -1,29 +1,17 @@
-$NetBSD: patch-configure,v 1.2 2011/09/01 03:44:35 taca Exp $
+$NetBSD: patch-configure,v 1.3 2012/04/05 00:39:34 taca Exp $
 
---- configure.orig	2011-07-26 22:11:37.000000000 +0000
+--- configure.orig	2012-03-22 19:20:00.000000000 +0000
 +++ configure
-@@ -22134,6 +22134,8 @@ case $host in
+@@ -22159,6 +22159,8 @@ case $host in
  	use_threads=false ;;
  *-freebsd*)
  	use_threads=false ;;
 +*-dragonfly*)
 +	use_threads=false ;;
- *-bsdi234*)
+ *-bsdi[234]*)
  	# Thread signals do not work reliably on some versions of BSD/OS.
  	use_threads=false ;;
-@@ -23450,9 +23452,9 @@ case $use_libtool in
- 		O=lo
- 		A=la
- 		LIBTOOL_MKDEP_SED='s;\.o;\.lo;'
--		LIBTOOL_MODE_COMPILE='--mode=compile'
-+		LIBTOOL_MODE_COMPILE='--mode=compile --tag=CC'
- 		LIBTOOL_MODE_INSTALL='--mode=install'
--		LIBTOOL_MODE_LINK='--mode=link'
-+		LIBTOOL_MODE_LINK='--mode=link --tag=CC'
- 		case "$host" in
- 		*) LIBTOOL_ALLOW_UNDEFINED= ;;
- 		esac
-@@ -27074,7 +27076,7 @@ $as_echo "no" >&6; }
+@@ -27099,7 +27101,7 @@ $as_echo "no" >&6; }
  	fi
  	if test -n "-L$use_dlz_postgres_lib -lpq"
  	then
diff --git a/net/bind98/patches/patch-contrib_dlz_drivers_sdlz__helper.c b/net/bind98/patches/patch-contrib_dlz_drivers_sdlz__helper.c
deleted file mode 100644
index 386295650dc..00000000000
--- a/net/bind98/patches/patch-contrib_dlz_drivers_sdlz__helper.c
+++ /dev/null
@@ -1,13 +0,0 @@
-$NetBSD: patch-contrib_dlz_drivers_sdlz__helper.c,v 1.1 2011/09/01 03:44:35 taca Exp $
-
---- contrib/dlz/drivers/sdlz_helper.c.orig	2010-05-14 06:29:37.000000000 +0000
-+++ contrib/dlz/drivers/sdlz_helper.c
-@@ -50,7 +50,7 @@
-  * WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-  */
- 
--#ifdef DLZ
-+#ifdef CONTRIB_DLZ
- 
- #include <config.h>
-