Drop memory leak patch which has already been included in this new version.
The new version also includes a fix for CVE 2025-62408.
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.6
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Inherit github-releases class to check the correct latest stable
verison.
Before the patch:
$ devtool latest-version c-ares
INFO: Current version: 1.34.5
INFO: Latest version:
After the patch:
$ devtool latest-version c-ares
INFO: Current version: 1.34.5
INFO: Latest version: 1.34.5
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.5
Security:
CVE-2025-31498. A use-after-free bug has been uncovered in read_answers() that was introduced in v1.32.3. Please see GHSA-6hxc-62jh-p29v
Changes:
Restore Windows XP support. PR #958
Bugfixes:
A missing mutex initialization would make busy polling for configuration changes (platforms other than Windows, Linux, MacOS) eat too much CPU PR #974
Pkgconfig may be generated wrong for static builds in relation to -pthread PR #965
Localhost resolution can fail if only one address family is in /etc/hosts PR #947
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.4
Changes:
QNX Port: Port to QNX 8, add primary config reading support, add CI build. PR #934, PR #937, PR #938
Bugfixes:
Empty TXT records were not being preserved. PR #922
docs: update deprecation notices for ares_create_query() and ares_mkquery(). PR #910
license: some files weren't properly updated. PR #920
Fix bind local device regression from 1.34.0. PR #929, PR #931, PR #935
CMake: set policy version to prevent deprecation warnings. PR #932
CMake: shared and static library names should be the same on unix platforms like autotools uses. PR #933
Update to latest autoconf archive macros for enhanced system compatibility. PR #936
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.3
Changes:
Build the release package in an automated way so we can provide provenance as per SLSA3. PR #906
Bugfixes:
Some upstream servers are non-compliant with EDNS options, resend queries without EDNS. Issue #911
Android: <=7 needs sys/system_properties.h a70637c
Android: CMake needs -D_GNU_SOURCE and others. PR #915
TSAN warns on missing lock, but lock isn't actually necessary. PR #915
ares_getaddrinfo() for AF_UNSPEC should retry IPv4 if only IPv6 is received. 765d558
ares_send() shouldn't return ARES_EBADRESP, its ARES_EBADQUERY. 91519e7
Fix typos in man pages. PR #905
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.2
This release contains a fix for downstream packages detecting the c-ares
version based on the contents of the header file rather than the
distributed pkgconf or cmake files.
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.1
This release fixes a packaging issue.
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.34.0
Features:
adig: read arguments from adigrc. PR #856
Add new pending write callback optimization via ares_set_pending_write_cb. PR #857
New function ares_process_fds(). PR #875
Failed servers should be probed rather than redirecting queries which could
cause unexpected latency. PR #877
adig: rework command line arguments to mimic dig from bind. PR #890
Add new method for overriding network functions
ares_set_socket_function_ex() to properly support all new functionality. PR #894
Fix regression with custom socket callbacks due to DNS cookie support. PR #895
ares_socket: set IP_BIND_ADDRESS_NO_PORT on ares_set_local_ip* tcp sockets PR #887
URI parser/writer for ares_set_servers_csv()/ares_get_servers_csv(). PR #882
Changes:
Connection handling modularization. PR #857, PR #876
Expose library/utility functions to tools. PR #860
Remove ares__ prefix, just use ares_ for internal functions. PR #872
Bugfixes:
fix: potential WIN32_LEAN_AND_MEAN redefinition. PR #869
Fix googletest v1.15 compatibility. PR #874
Fix pkgconfig thread dependencies. PR #884
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.33.1
Bugfixes:
Work around systemd-resolved quirk that returns unexpected codes for single
label names. Also adds test cases to validate the work around works and
will continue to work in future releases. PR #863, See Also systemd/systemd#34101
Fix sysconfig ndots default value, also adds containerized test case to
prevent future regressions. PR #862
Fix blank DNS name returning error code rather than valid record for
commands like: adig -t SOA .. Also adds test case to prevent future
regressions. 9e574af
Fix calculation of query times > 1s. 2b2eae7
Fix building on old Linux releases that don't have TCP_FASTOPEN_CONNECT. b7a89b9
Fix minor Android build warnings. PR #848
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update: Still MIT licensed. Just removed a header from the license file.
595cf21334
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.33.0
Features:
Add DNS cookie support (RFC7873 + RFC9018) to help prevent off-path cache poisoning attacks. PR #833
Implement TCP FastOpen (TFO) RFC7413, which will make TCP reconnects 0-RTT on supported systems. PR #840
Changes:
Reorganize source tree. PR #822
Refactoring of connection handling to prevent code duplication. PR #839
New dynamic array data structure to prevent simple logic flaws in array handling in various code paths. PR #841
Bugfixes:
ares_destroy() race condition during shutdown due to missing lock. PR #831
Android: Preserve thread name after attaching it to JVM. PR #838
Windows UWP (Store) support fix. PR #845
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.32.0
Features:
Add support for DNS 0x20 to help prevent cache poisoning attacks, enabled
by specifying ARES_FLAG_DNS0x20. Disabled by default. PR #800
Rework query timeout logic to automatically adjust timeouts based on network
conditions. The timeout specified now is only used as a hint until there
is enough history to calculate a more valid timeout. PR #794
Changes:
DNS RR TXT strings should not be automatically concatenated as there are use
cases outside of RFC 7208. In order to maintain ABI compliance, the ability
to retrieve TXT strings concatenated is retained as well as a new API to
retrieve the individual strings. This restores behavior from c-ares 1.20.0.
PR #801
Clean up header inclusion logic to make hacking on code easier. PR #797
GCC/Clang: Enable even more strict warnings to catch more coding flaws. 253bdee
MSVC: Enable /W4 warning level. PR #792
Bugfixes:
Tests: Fix thread race condition in test cases for EventThread. PR #803
Windows: Fix building with UNICODE. PR #802
Thread Saftey: ares_timeout() was missing lock. 74a64e4
Fix building with DJGPP (32bit protected mode DOS). PR #789
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.31.0
Changes:
Enable Query Cache by default. PR #786
Bugfixes:
Enhance Windows DNS configuration change detection to also detect manual DNS
configuration changes. PR #785
Various legacy MacOS Build fixes. Issue #782
Ndots value of zero in resolv.conf was not being honored. 852a60a
Watt-32 build support had been broken for some time. PR #781
Distribute ares_dns_rec_type_tostr manpage. PR #778
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update: Whitespace changes.
Changelog: https://github.com/c-ares/c-ares/releases/tag/v1.30.0
Features:
Basic support for SIG RR record (RFC 2931 / RFC 2535) PR #773
Changes:
Validation that DNS strings can only consist of printable ascii characters
otherwise will trigger a parse failure. 75de16c and 40fb125
Windows: use GetTickCount64() for a monotonic timer that does not wrap. 1dff8f6
Bugfixes:
QueryCache: Fix issue where purging on server changes wasn't working. a6c8fe6
Windows: Fix Y2K38 issue by creating our own ares_timeval_t datatype. PR #772
Fix packaging issue affecting MacOS due to a missing header. 55afad6
MacOS: Fix UBSAN warnings that are likely meaningless due to alignment issues
in new MacOS config reader.
Android: arm 32bit build failure due to missing symbol. d1722e6
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog : https://github.com/c-ares/c-ares/releases/tag/cares-1_29_0
Features:
When using ARES_OPT_EVENT_THREAD, automatically reload system configuration
when network conditions change. PR #759
Apple: reimplement DNS configuration reading to more accurately pull DNS
settings. PR #750
Add observability into DNS server health via a server state callback, invoked
whenever a query finishes. PR #744
Add server failover retry behavior, where failed servers are retried with
small probability after a minimum delay. PR #731
Changes:
Mark ares_channel_t * as const in more places in the public API. PR #758
Bugfixes:
Due to a logic flaw dns name compression writing was not properly implemented
which would result in the name prefix not being written for a partial match.
This could cause issues in various record types such as MX records when using
the deprecated API. Regression introduced in 1.28.0. Issue #757
Revert OpenBSD SOCK_DNS flag, it doesn't do what the docs say it does and
causes c-ares to become non-functional. PR #754
ares_getnameinfo(): loosen validation on salen parameter. Issue #752
cmake: Android requires C99. PR #748
ares_queue_wait_empty() does not honor timeout_ms >= 0. Issue #742
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog 1.28.1 :
This release contains a fix for a single significant regression introduced
in c-ares 1.28.0.
- ares_search() and ares_getaddrinfo() resolution fails if no search domains
are specified. Issue #737
Changelog 1.28.0 :
Features:
- Emit warnings when deprecated c-ares functions are used. This can be
disabled by passing a compiler definition of CARES_NO_DEPRECATED. PR #732
- Add function ares_search_dnsrec() to search for records using the new DNS
record data structures. PR #719
- Rework internals to pass around ares_dns_record_t instead of binary data,
this introduces new public functions of ares_query_dnsrec() and
ares_send_dnsrec(). PR #730
Changes:
- tests: when performing simulated queries, reduce timeouts to make tests run
faster
- Replace configuration file parsers with memory-safe parser. PR #725
- Remove acountry completely, the manpage might still get installed otherwise. Issue #718
Bugfixes:
- CMake: don't overwrite global required libraries/definitions/includes which
could cause build errors for projects chain building c-ares. Issue #729
- On some platforms, netinet6/in6.h is not included by netinet/in.h
and needs to be included separately. PR #728
- Fix a potential memory leak in ares_init(). Issue #724
- Some platforms don't have the isascii() function. Implement as a macro. PR #721
- CMake: Fix Chain building if CMAKE runtime paths not set
- NDots configuration should allow a value of zero. PR #735
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Replace references of WORKDIR with UNPACKDIR where it makes sense to do
so in preparation for changing the default value of UNPACKDIR.
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changes 1.26.0:
Brad House (14):
update release notes format
update format slightly
RELEASE-NOTES -> RELEASE-NOTES.md
test: fix outdated license headers
no reason to include sys/random.h all the time (#684)
Do not sanity check RR Name vs Question (#685)
autotools: fix building for 32bit windows due to stdcall symbol mangling (#689)
man ares_fds(3): mark as deprecated and add explanation (#691)
fix doxygen typo
Autotools allow make to override CFLAGS/CPPFLAGS/CXXFLAGS (#695)
Event Subsystem: No longer require integrators to have their own (#696)
adig: Differentiate between internal and server error
Release prep for c-ares 1.26.0 (#698)
clusterfuzz: enforce maximum DNS packet size due to long parser time
Erik Lax (1):
Added flags to are_dns_parse to force RAW packet parsing (#693)
Gregor Jasny (1):
cmake: improve some include related code (#680)
Changes 1.25.0:
Brad House (22):
fix test building with symbol hiding
ci: add test case for building with hidden symbol visibility
ci: disable static for symbol hiding tests
getrandom() may require sys/random.h on some systems
fix support with older google test versions
CI: Add Alpine Linux and old Ubuntu (#667)
Fix bad stub for ares__iface_ips_enumerate()
ahost should use ares_getaddrinfo() these days (#669)
Connection failure should increment server failure count first
sonarcloud: const
clang-format
ares_strsplit() rewrite as wrapper around ares__buf_split()
clang-format
Autotools warning fixes (#671)
Old MacOS SDKs require you include sys/socket.h before net/if.h (#673)
docs: host -> ip
Autotools: rework to simplify and fix recent issues (#674)
set winver consistently across build systems
autotools: update logic for building tests to provide more feedback
OSSFuzz: it assumes autotools builds a static library by default, which means the old autotools must have done that even though there were comments saying it wasn't. Disable static by default on Windows however since it can't build both simultaneously.
tests: replace google DNS with CloudFlare for reverse lookups as google's servers stopped responding properly
1.25.0 release prep (#676)
Gregor Jasny (1):
Fix minor warnings and documentation typos (#666)
Martin Chang (1):
Use SOCK_DNS extension on socket on OpenBSD (#659)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Inside a default `runqemu` there's no resolv.conf, so the "Live" tests
fail, exclude them by default.
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Use PACKAGE_BEFORE_PN which is designed to introduce packages before the
final greedy ${PN}.
Changes 1.24.0:
Brad House (28):
Nameserver parsing: replace another hand-written parser (#643)
clang-format
SonarCloud: silence bogus reported error
ares_init_options() with invalid options values should unset the option
Enable system extensions
try to move AC_USE_SYSTEM_EXTENSIONS
ares__round_up_pow2() work around bogus warning
silence openwatcom warning due to qcache_max_ttl being unsigned
Support ipv6 link-local servers and %iface syntax (#646)
Windows UBSAN tests (#649)
increment failures on timeout (#651)
SonarCloud: make const
enhance timeout test case
enhance timeout test case to make sure it will re-use a previously downed server
Rewrite sortlist hand parser for memory safety and bugs (#653)
Clean up some Windows-only warnings (#654)
clang-format and fix one warning
remove redundant cast
use IF_NAMESIZE instead of IFNAMSIZ to avoid warning
Use external GoogleTest instead of bundling it (#655)
remove dead code: bitncmp
remove dead code: ares_iphlpapi.h
Coverity: fix allocation size as reported in new code
tag some functions as deprecated in docs
reference alternative to ares_getsock() in docs
1.24.0 release prep (#657)
rand: allow fallback from OS (#661)
ares_cancel() could trigger callback with wrong response code (#663)
Changes 1.23.0:
Brad House (21):
Query Cache support (#625)
ares_set_servers_*() should allow an empty server list
Fix Windows UWP (Store) building and add to CI/CD (#627)
clang-format
cleanup some Windows warnings in test
fix additional windows test warnings
CMake: CXXFLAGS environment wasn't being read because C++ compiler was enabled after settings warnings.
now that warnings are enabled on test cases, clear a bunch of warnings
fix test case regression due to missing parens
SonarCloud: fix minor codesmells
more precise timeout calculation (#633)
environment is meant as an override for sysconfig
Fix MacOS version test
Basic Thread Safety (#636)
fix ares_threadsafety() prototype
ares_init_options with ARES_OPT_UDP_PORT wrong byte order
fix doc typo
remove a simply
clang-format
add missing manpage to distribution list
1.23.0 release prep (#641)
Christian Clauss (2):
INSTALL.md: Fix typo (#630)
Fix typos discovered by codespell (#634)
Daniel Stenberg (1):
CI: codespell
Ignat (1):
Support attempts and timeout options from resolv.conf (#632)
petrvh (1):
ares_getaddrinfo(): do not use search domains if ARES_FLAG_NOSEARCH is set (#638)
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
-Fix /etc/hosts processing performance with all entries using same IPaddress.
-Fix typos in manpages
-Fix OpenWatcom building
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
============
-ares_reinit() is now implemented to re-read any system configuration and
immediately apply to an existing ares channel
-The adig command line program has been rewritten and its format now more
closely matches that of BIND's dig utility
-The new DNS message parser and writer functions have now been made public
-RFC9460 HTTPS and SVCB records are now supported
-RFC6698 TLSA records are now supported
-The server list is now internally dynamic and can be changed without impacting
existing queries
-Hosts file processing is now cached until the file is detected to be changed
to speed up repetitive lookups of large hosts files
-Internally all DNS messages are now written using the new DNS writing functions
-EDNS is now enabled by default
-Internal cleanups in function prototypes
-Randomize retry penalties to prevent thundering herd issues when dns servers
throttle requests
-Fix Windows build error for missing if_indextoname()
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
License-Update:Update from 1989 MIT license text to modern MIT license text
Changelog:
===========
-Resolve use-after-free issue when TCP connection is terminated before a response is returned
-Reduce number of queries for a load test case to prevent overloading some build systems
-Fix fuzz test build target
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
==========
Security
---------
- CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service [12]
- CVE-2023-31147. Moderate. Insufficient randomness in generation of DNS
query IDs [13]
- CVE-2023-31130. Moderate. Buffer Underwrite in ares_inet_net_pton() [14]
- CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE during cross
compilation [15]
Bug fixes
----------
- Fix uninitialized memory warning in test [1]
- Turn off IPV6_V6ONLY on Windows to allow IPv4-mapped IPv6 addresses [2]
- ares_getaddrinfo() should allow a port of 0 [3]
- Fix memory leak in ares_send() on error [4]
- Fix comment style in ares_data.h [5]
- Remove unneeded ifdef for Windows [6]
- Fix typo in ares_init_options.3 [7]
- Re-add support for Watcom compiler [8]
- Sync ax_pthread.m4 with upstream [9]
- Windows: Invalid stack variable used out of scope for HOSTS path [10]
- Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support [11]
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Changelog:
=========
Security:
----------
Low. Stack overflow in ares_set_sortlist() which is used during c-ares initialization and typically provided by an administrator and not an end user.
Changes:
----------
Windows: Drop support for XP and derivatives which greatly cleans up initialization code.
Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for specifying a custom hosts file location.
Add vcpkg installation instructions
Bug fixes:
------------
Fix cross-compilation from Windows to Linux due to CPACK logic.
Fix memory leak in reading /etc/hosts when using localhost fallback.
Fix chain building c-ares when libresolv is already included by another project
File lookup should not immediately abort as there may be other tries due to search criteria.
Asterisks should be allowed in host validation as CNAMEs may reference wildcard domains
AutoTools build system referenced bad STDC_HEADERS macro
Even if one address class returns a failure for ares_getaddrinfo() we should still return the results we have
CMake Windows: DLLs did not include resource file to include versions
CMake: Guard target creation in exported config
Fix ares_getaddrinfo() numerical address resolution with AF_UNSPEC
Apple: fix libresolv configured query times.
Fix tools and help information
Various documentation fixes and cleanups
Add include guards to ares_data.h
c-ares could try to exceed maximum number of iovec entries supported by system
CMake package config generation allow for absolute install paths
Intel compiler fixes
ares_strsplit bugs
The RFC6761 6.3 states localhost subdomains must be offline too.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
c-ares version 1.18.1 - Oct 27 2021
Bug fixes:
ares_getaddrinfo() would return ai_addrlen of 16 for ipv6 adddresses
rather than the sizeof(struct sockaddr_in6)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Current patch is breaking the library dependencies added by cmake
especially when you are static linking.
Applications need the ws2_32 library to be linked for mingw32
and with the existing patch this is not getting passed to the users.
Current patch seems to address this issue:
https://github.com/c-ares/c-ares/issues/373
Both issues are resolved in 1.17.2:
1.17.2-r0/git $ find . | grep c-ares-config.cmake.in
./c-ares-config.cmake.in
1.17.2-r0/git $ find . | grep libcares.pc.cmake
./libcares.pc.cmake
Signed-off-by: Sinan Kaya <okaya@kernel.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This is the result of automated script (0.9.1) conversion:
oe-core/scripts/contrib/convert-overrides.py .
converting the metadata to use ":" as the override character instead of "_".
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Forward port cmake-install-libcares.pc.patch, drop the need to install
pkgconfig files as its already being done by main Makefile
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs from meta-oe depends on this since:
commit 76dd3dac1f1e67a5c44ad732b8e827cc36ded641
Author: André Draszik <git@andred.net>
Date: Tue Oct 29 16:42:24 2019 +0000
nodejs: allow use of system c-ares (and make default)
Use system c-ares via PACKAGECONFIG by default. So far,
nodejs had been built using its embedded copy of c-ares,
which we generally try to avoid, for the known reasons
(independent updates, cve & license checks, etc).
Notes:
* otherwise nodejs uses its bundled version of c-ares
* the PACKAGECONFIG variable is 'ares' so as to be in
line with other uses of this (wget & curl recipes in
OE core)
Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
