c-ares

Commit Graph

Author	SHA1	Message	Date
Daniel Stenberg	2227f6982b	libcares.pc.in: update the URL	3 years ago
bradh352	5c995d50b0	ares_expand_name should allow underscores (_) as SRV records legitimately use them c-ares 1.17.2 introduced response validation to prevent a security issue, however it did not have (_) listed as a valid character for domain name responses which caused issues when a CNAME referenced a SRV record which contained underscores. While RFC2181 section 11 does explicitly state not to do validation, that applies to servers not clients. Fixes: #424 Fix By: Brad House (@bradh352)	3 years ago
Daniel Stenberg	04d2f06011	domain: update to use c-ares.org Closes #423	3 years ago
Daniel Stenberg	509f2a00f1	mailing list: moved to lists.haxx.se	3 years ago
Biswapriyo Nath	db5dabc74a	CMake: Fix build in cygwin (#422 ) As cygwin environment has both socket.h and winsock2.h headers check WIN32 not to include the later one here Fix By: Biswapriyo Nath (@Biswa96)	3 years ago
bradh352	6ce842ff93	make building more verbose	3 years ago
bradh352	62003c990b	add appveyor cmake/mingw static-only build	3 years ago
Sinan Kaya	4418939478	CMake: lower case advapi32 for cross-building with mingw (#420 ) When cross compiling with yocto's meta-mingw layer, getting a dependency error. This is caused by the fact that advapi32 is lower case in mingw builds. Fix By: Sinan Kaya <sinan.kaya@microsoft.com>	3 years ago
bradh352	6299d7be38	autotools: add ax_check_gnu_make.m4	3 years ago
bradh352	8e484b2499	autotools: add ax_require_defined.m4	3 years ago
bradh352	3883d99b05	autotools: dont use newer AC_CHECK_INCLUDES_DEFAULT, don't quote AC_ERROR_MSG	3 years ago
bradh352	8afaa9c1b2	import more files needed by newer ax_code_coverage.m4	3 years ago
bradh352	c54ce6c0b9	import more files needed by newer ax_code_coverage.m4	3 years ago
bradh352	e73fb47266	work around autoreconf -fiv first call returning 'error: too many loops'	3 years ago
bradh352	bd368ad615	restore zz40-xc-ovr.m4	3 years ago
bradh352	bad8bde4d4	autotools: processed configure.ac through autoupdate	3 years ago
bradh352	da6a63bba8	autotools. update ax_code_coverage.m4 to latest. don't use deprecated AC_HELP_STRING	3 years ago
bradh352	5ea4616d2c	pull out some old autotools cruft	3 years ago
Felix Yan	7712fcd178	Provide ares_nameser.h as a public interface (#417 ) NodeJS needs ares_nameser.h as a pubic header. Fixes: #415 Fix By: Felix Yan (@felixonmars)	3 years ago
Felix Yan	9c4c483f06	Fix building when latest ax_code_coverage.m4 is imported (#418 ) ax_code_coverage.m4 dropped the @CODE_COVERAGE_RULES@ macro, so we need to switch to the latest recommendation from the m4 file. This requires updates to Makefile.am. Fix By: Felix Yan (@felixonmars)	3 years ago
bradh352	8eccad160f	bump version to match current release	3 years ago
dhrumilrana	76e7d028a2	z/OS minor update, add missing semicolon in ares_init.c (#414 ) Build fix for z/OS Fix by: Dhrumil Rana (@dhrumilrana)	3 years ago
Daniel Bevenius	de042a65f4	add build to .gitignore (#410 ) This commit adds the build directory to be ignored by git. The motivation for adding this to .gitignore as opposed to .git/info/exclude is that the CMake example in INSTALL.md uses build as the name of the directory to be used by CMake. This will cause git to report build as an untracked file. Fix By: Daniel Bevenius (@danbev)	3 years ago
Martin Holeš	9ac7efc382	Add support for URI(Uniform Resource Identifier) records. (#411 ) Add ares_parse_uri_reply() for parsing URI DNS replies. Fix By: Martin Holeš (@martin-256)	3 years ago
Daniel Stenberg	ccebec8303	ares_getaddrinfo.3: available since 1.16.0	3 years ago
Daniel Stenberg	b039ecc87d	README.md: use https:// links	3 years ago
bradh352	6654436a30	fix typo	3 years ago
bradh352	fe282cf172	prep for 1.17.2 release	3 years ago
jeanpierrecartal	11a2bf8efd	Replace strdup() with ares_strdup() (#408 ) strdup() is used in src/lib/ares_parse_a_reply.c and src/lib/ares_parse_aaaa_reply.c whereas allocated memory is freed using ares_free(). Bug: 407 Fix By: Jean-pierre Cartal (@jeanpierrecartal)	3 years ago
Brad House	c9b6c605b5	Validate hostnames in DNS responses and discard from malicious servers (#406 ) To prevent possible users having XSS issues due to intentionally malformed DNS replies, validate hostnames returned in responses and return EBADRESP if they are not valid. It is not clear what legitimate issues this may cause at this point. Bug Reported By: philipp.jeitner@sit.fraunhofer.de Fix By: Brad House (@bradh352)	3 years ago
bradh352	44c009b8e6	ares_expand_name(): fix formatting and handling of root name response Fixes issue introduced in prior commit with formatting and handling of parsing a root name response which should not be escaped. Fix By: Brad House	4 years ago
bradh352	362f91d807	ares_expand_name() should escape more characters RFC1035 5.1 specifies some reserved characters and escaping sequences that are allowed to be specified. Expand the list of reserved characters and also escape non-printable characters using the \DDD format as specified in the RFC. Bug Reported By: philipp.jeitner@sit.fraunhofer.de Fix By: Brad House (@bradh352)	4 years ago
HALX99	809d5e84f3	Fix can't get dns server on macos and ios (#401 ) If DNS configuration didn't include search domains on MacOS (or iOS) it would throw an error instead of ignoring. Fix By: @halx99	4 years ago
catalinh-bd	fd890e9246	Bugfix/crash in ares sortaddrinfo (#400 ) The bug was generated because there was no check for the number of items in the list and invalid memory was accesed when the list was empty. There is a check for null after calling malloc but on some systems it always returns a valid address for size equals 0. Relates To: #392, `0903dcecab` Fix By: @catalinh-bd	4 years ago
bradh352	df947034d9	Null deref if ares_getaddrinfo() is terminated with ares_destroy() ares_freeaddrinfo() was not checking for a Null ptr during cleanup of an aborted query. Once that was resolved it uncovered another possible issue with multiple simultaneous underlying queries being outstanding and possibly prematurely cleaning up the handle. Reported By: Michael Kourlas Fix By: Brad House (@bradh352)	4 years ago
Brad House	fa903fd7bb	CMake: RANDOM_FILE not defined #397 RANDOM_FILE was never defined by cmake, causing RC4 key generation to use the less secure rand() method. Also, due to clashes with chain-building from other projects (e.g. curl) that may define RANDOM_FILE, this was renamed to CARES_RANDOM_FILE. This is the proposed change for #396 Fix By: Brad House (@bradh352)	4 years ago
Anton Danielsson	ca34b35388	CMake: fix Make install for iOS/MacOS (#395 ) INSTALL TARGETS were missing the BUNDLE DESTINATION Fix By: Anton Danielsson (@anton-danielsson)	4 years ago
František Dvořák	db8905a666	Fix build with autotools out of source tree (#394 ) Add missing include directory, which fixes the build with autotools in separated build directory. Fix By: František Dvořák (@valtri)	4 years ago
bradh352	a7231d707e	fuzzing: HAVE_CONFIG_H may not be defined so cannot include ares_setup.h. Its not needed even though we include ares_nameser.h	4 years ago
bradh352	796e4d6575	remove redundant header checks	4 years ago
bradh352	4e9f3ea6fb	properly detect netinet/tcp.h on openbsd	4 years ago
bradh352	f4c079d9d0	more portability updates	4 years ago
bradh352	d5146a6a4d	renamed nameser.h to ares_nameser.h requires Makefile.inc update for distributed files	4 years ago
bradh352	86dd24909e	more portability updates	4 years ago
bradh352	3f7065235f	remove bad files	4 years ago
bradh352	498ce747d3	portability updates for test cases	4 years ago
bradh352	c2f32353e3	Portability Updates for arpa/nameser.h (#388 ) There is too much inconsistency between platforms for arpa/nameser.h and arpa/nameser_compat.h for the way the current files are structured. Still load the respective system files but make our private nameser.h more forgiving. Fixes: #388 Fix By: Brad House (@bradh352)	4 years ago
bradh352	0903dcecab	ares_parse_ptr_reply() handle NULL for addr/addr_len. Fixes #392 NodeJS passes NULL for addr and 0 for addrlen parameters to ares_parse_ptr_reply(). On systems where malloc(0) returned NULL, this would cause the function to return ARES_ENOMEM, but the cleanup wasn't handled properly and would crash. This patche fixes that bug, and also hardens ares_free_hostent() to not leak memory during cleanup. Fixes: #392 Fix By: Brad House (@bradh352)	4 years ago
bradh352	485fb660dc	Define behavior of malloc(0) Some systems may return either NULL or a valid pointer on malloc(0). c-ares should never call malloc(0) so lets return NULL so we're more likely to find an issue if it were to occur.	4 years ago
dhrumilrana	3c0bc079b4	z/OS: port (#390 ) Port c-ares to z/OS. Fix By: Dhrumil Rana (@dhrumilrana)	4 years ago

... 12 13 14 15 16

799 Commits (063379049f9d43fc08bc74a7fe8639add88730ef) All Branches Search

799 Commits (063379049f9d43fc08bc74a7fe8639add88730ef)

All Branches