Update to c-ares version 1.13.0 from June 20 2017
Recipe updates:
* Change SRC_URI to github, because tarball at
https://c-ares.haxx.se/download/c-ares-1.13.0.tar.gz
does not include all required files (cmake related).
* Change build method to cmake. Library now supports cmake
build system and installs *.cmake config files. These files can
be used by several libraries/packages, such as gRPC, curl.
* Add patch to generate and install libcares.pc during cmake build.
* Add -utils package for the utilities installed during cmake build
(acountry, adig, ahost).
Highlights of library changes and bug fixes:
* cmake build system support added
* Add virtual function set for socket IO: ares_set_socket_functions
* CVE-2017-1000381: c-ares NAPTR parser out of bounds access
Full changelog - https://c-ares.haxx.se/changelog.html
Signed-off-by: Alexey Firago <alexey_firago@mentor.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Highlight:
- fix CVE-2016-5180
Other changes, from https://c-ares.haxx.se/changelog.html
c-ares version 1.12.0 - Sep 29 2016
Changes:
api: add ARES_OPT_NOROTATE optmask value
Bug fixes:
CVE-2016-5180: ares_create_query single byte out of buffer write
configure: acknowledge --disable-tests [1]
man pages: fix typos detected by Lintian
test: add missing #includes for dns-proto.cc
test: avoid in6addr_* constants
test: Build with MinGW on AppVeyor
Makefile.m32: add support for extra flags
Makefile.m32: add support for CROSSPREFIX
configure: check if tests can get built before enabled
ares_library_cleanup: reset ares_realloc too
ahost.c: add cast to fix C++ compile
test: Only pass unused args to GoogleTest
build: commonize MSVC version detection
msvc_ver.inc: support Visual Studio 2015 Update 1, 2, 3
test: for AF_UNSPEC, return CNAME only for AAAA, but valid A record
ares_getnameinfo: explicitly clear struct servent before use
test: Update fuzzing function prototype
init: fix nsort initialization
test: add fuzzing check script to tests
web: http => https
read_tcp_data: remove superfluous NULL check
LICENSE.md: add a stand-alone license file
SECURITY.md: suggested "security process" for the project
ares_init_options: only propagate init failures from options [2]
headers: remove checks for and defines of variable sizes
test: fix gMock to work with gcc >= 6.x [3]
fix metadata:
We should set SUMMARY instead of DESCRIPTION.
Signed-off-by: André Draszik <git@andred.net>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
If not requested otherwise as ./configure option, c-ares will strip
any -g from CFLAGS / CPPFLAGS and add -g0 instead, disabling all
debug info.
Similarly, it will try to enable optimisation (but bail out since in
that case it honors an existing -O in CFLAGS / CPPFLAGS)
Since we want to control code generation, patch out the code
mangling -g (and -O for consistency). Alternatively, if we were to
pass --enable-debug to ./configure, c-ares would at the same time
assume that we don't want optimisation anymore.
Signed-off-by: André Draszik <adraszik@tycoint.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
Hiram Lew
Changqing Li
Yi Zhao
Trevor Woerner
Khem Raj
Alexey Firago
André Draszik
André Draszik
Armin Kuster