Skip to contentSkip to conversation

c-ares: update 1.11.0 -> 1.12.0

PATCH Superseded André Draszik 2 participants 4 messages Oct 20, 2016 – Oct 21, 2016

lore
Share & tools
lore

André Draszik

author
#0 lore raw

PATCH 1/1 c-ares: update 1.11.0 -> 1.12.0

Highlight:
- fix CVE-2016-5180

Other changes, from https://c-ares.haxx.se/changelog.html

c-ares version 1.12.0 - Sep 29 2016
Changes:
api: add ARES_OPT_NOROTATE optmask value

Bug fixes:
CVE-2016-5180: ares_create_query single byte out of buffer write
configure: acknowledge --disable-tests [1]
man pages: fix typos detected by Lintian
test: add missing #includes for dns-proto.cc
test: avoid in6addr_* constants
test: Build with MinGW on AppVeyor
Makefile.m32: add support for extra flags
Makefile.m32: add support for CROSSPREFIX
configure: check if tests can get built before enabled
ares_library_cleanup: reset ares_realloc too
ahost.c: add cast to fix C++ compile
test: Only pass unused args to GoogleTest
build: commonize MSVC version detection
msvc_ver.inc: support Visual Studio 2015 Update 1, 2, 3
test: for AF_UNSPEC, return CNAME only for AAAA, but valid A record
ares_getnameinfo: explicitly clear struct servent before use
test: Update fuzzing function prototype
init: fix nsort initialization
test: add fuzzing check script to tests
web: http => https
read_tcp_data: remove superfluous NULL check
LICENSE.md: add a stand-alone license file
SECURITY.md: suggested "security process" for the project
ares_init_options: only propagate init failures from options [2]
headers: remove checks for and defines of variable sizes
test: fix gMock to work with gcc >= 6.x [3]

Signed-off-by André Draszik <[email protected]>
---
 .../recipes-support/c-ares/{c-ares_1.11.0.bb => c-ares_1.12.0.bb}     | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-networking/recipes-support/c-ares/{c-ares_1.11.0.bb => c-ares_1.12.0.bb} (76%)
meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb renamed from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb +2 -2
similarity index 76%
rename from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb
rename to meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb
index c98be7d..8b63972 100644
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://ares_init.c;beginline=1;endline=3;md5=53f5ecf4c22c37c
 SRC_URI = "http://c-ares.haxx.se/download/${BP}.tar.gz \
            file://0001-configure.ac-don-t-override-passed-cflags.patch \
 "
-SRC_URI[md5sum] = "d5c6d522cfc54bb6f215a0b7912d46be"
-SRC_URI[sha256sum] = "b3612e6617d9682928a1d50c1040de4db6519f977f0b25d40cf1b632900b3efd"
+SRC_URI[md5sum] = "2ca44be1715cd2c5666a165d35788424"
+SRC_URI[sha256sum] = "8692f9403cdcdf936130e045c84021665118ee9bfea905d1a76f04d4e6f365fb"
 
 inherit autotools pkgconfig
Signature · 1 line
2.9.3
#1 lore raw

meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb LIC_FILES_CHKSUM = "file://ares_init.c;beginline=1;endline=3;md5=53f5ecf4c22c37c

Quoted 51 lines · André Draszik

Highlight:
- fix CVE-2016-5180

Other changes, from https://c-ares.haxx.se/changelog.html

c-ares version 1.12.0 - Sep 29 2016
Changes:
api: add ARES_OPT_NOROTATE optmask value

Bug fixes:
CVE-2016-5180: ares_create_query single byte out of buffer write
configure: acknowledge --disable-tests [1]
man pages: fix typos detected by Lintian
test: add missing #includes for dns-proto.cc
test: avoid in6addr_* constants
test: Build with MinGW on AppVeyor
Makefile.m32: add support for extra flags
Makefile.m32: add support for CROSSPREFIX
configure: check if tests can get built before enabled
ares_library_cleanup: reset ares_realloc too
ahost.c: add cast to fix C++ compile
test: Only pass unused args to GoogleTest
build: commonize MSVC version detection
msvc_ver.inc: support Visual Studio 2015 Update 1, 2, 3
test: for AF_UNSPEC, return CNAME only for AAAA, but valid A record
ares_getnameinfo: explicitly clear struct servent before use
test: Update fuzzing function prototype
init: fix nsort initialization
test: add fuzzing check script to tests
web: http => https
read_tcp_data: remove superfluous NULL check LICENSE.md: add a stand-alone license file
SECURITY.md: suggested "security process" for the project
ares_init_options: only propagate init failures from options [2]
headers: remove checks for and defines of variable sizes
test: fix gMock to work with gcc >= 6.x [3]

Signed-off-by André Draszik <[email protected]>
---
  .../recipes-support/c-ares/{c-ares_1.11.0.bb => c-ares_1.12.0.bb}     | 4 ++--
  1 file changed, 2 insertions(+), 2 deletions(-)

rename meta-networking/recipes-support/c-ares/{c-ares_1.11.0.bb => c-ares_1.12.0.bb} (76%)

meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb renamed from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb +0 -0
similarity index 76%
rename from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb
rename to meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb
index c98be7d..8b63972 100644
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://ares_init.c;beginline=1;endline=3;md5=53f5ecf4c22c37c

A stand-alone license file is added. It is better to update LIC_FILES_CHKSUM.

--Kai

Quoted 9 lines
meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb renamed from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb +2 -2
  SRC_URI = "http://c-ares.haxx.se/download/${BP}.tar.gz \
             file://0001-configure.ac-don-t-override-passed-cflags.patch \
  "
-SRC_URI[md5sum] = "d5c6d522cfc54bb6f215a0b7912d46be"
-SRC_URI[sha256sum] = "b3612e6617d9682928a1d50c1040de4db6519f977f0b25d40cf1b632900b3efd"
+SRC_URI[md5sum] = "2ca44be1715cd2c5666a165d35788424"
+SRC_URI[sha256sum] = "8692f9403cdcdf936130e045c84021665118ee9bfea905d1a76f04d4e6f365fb"
 
  inherit autotools pkgconfig
Signature · 2 lines
Regards,
Neil | Kai Kang
author
#2 lore raw
Quoted 46 lines · Kang Kai
Quoted 45 lines · André Draszik

Highlight:
- fix CVE-2016-5180

Other changes, from https://c-ares.haxx.se/changelog.html

c-ares version 1.12.0 - Sep 29 2016
Changes:
     api: add ARES_OPT_NOROTATE optmask value

Bug fixes:
     CVE-2016-5180: ares_create_query single byte out of buffer write
     configure: acknowledge --disable-tests [1]
     man pages: fix typos detected by Lintian
     test: add missing #includes for dns-proto.cc
     test: avoid in6addr_* constants
     test: Build with MinGW on AppVeyor
     Makefile.m32: add support for extra flags
     Makefile.m32: add support for CROSSPREFIX
     configure: check if tests can get built before enabled
     ares_library_cleanup: reset ares_realloc too
     ahost.c: add cast to fix C++ compile
     test: Only pass unused args to GoogleTest
     build: commonize MSVC version detection
     msvc_ver.inc: support Visual Studio 2015 Update 1, 2, 3
     test: for AF_UNSPEC, return CNAME only for AAAA, but valid A record
     ares_getnameinfo: explicitly clear struct servent before use
     test: Update fuzzing function prototype
     init: fix nsort initialization
     test: add fuzzing check script to tests
     web: http => https
     read_tcp_data: remove superfluous NULL check LICENSE.md: add a stand-alone license file
     SECURITY.md: suggested "security process" for the project
     ares_init_options: only propagate init failures from options [2]
     headers: remove checks for and defines of variable sizes
     test: fix gMock to work with gcc >= 6.x [3]

Signed-off-by André Draszik <[email protected]>

---
  .../recipes-support/c-ares/{c-ares_1.11.0.bb => c- ares_1.12.0.bb}     | 4 ++--

  1 file changed, 2 insertions(+), 2 deletions(-)

  rename meta-networking/recipes-support/c-ares/{c-ares_1.11.0.bb => c- ares_1.12.0.bb} (76%)

Quoted 13 lines
Quoted 10 lines
meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb renamed from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb +0 -0
similarity index 76%
rename from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb
rename to meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb
index c98be7d..8b63972 100644
@@ -9,7 +9,7 @@ LIC_FILES_CHKSUM = "file://ares_init.c;beginline=1;endli

ne=3;md5=53f5ecf4c22c37c

A stand-alone license file is added. It is better to update LIC_FILES_CHKSUM.

You're right. Thanks. Sent v2

Cheers,
Andre'

Quoted 17 lines

--Kai

Quoted 12 lines

  SRC_URI = "http://c-ares.haxx.se/download/${BP}.tar.gz \
             file://0001-configure.ac-don-t-override-passed-cflags.patch \
  "

meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb renamed from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb +0 -2
-SRC_URI[md5sum] = "d5c6d522cfc54bb6f215a0b7912d46be"
-SRC_URI[sha256sum] =

"b3612e6617d9682928a1d50c1040de4db6519f977f0b25d40cf1b632900b3efd"

meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb renamed from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb +2 -0
+SRC_URI[md5sum] = "2ca44be1715cd2c5666a165d35788424"
+SRC_URI[sha256sum] =

"8692f9403cdcdf936130e045c84021665118ee9bfea905d1a76f04d4e6f365fb"
  inherit autotools pkgconfig

author
#3 lore raw

PATCH v2 1/1 c-ares: update 1.11.0 -> 1.12.0

In reply to André Draszik

Highlight:
- fix CVE-2016-5180

Other changes, from https://c-ares.haxx.se/changelog.html

c-ares version 1.12.0 - Sep 29 2016
Changes:
api: add ARES_OPT_NOROTATE optmask value

Bug fixes:
CVE-2016-5180: ares_create_query single byte out of buffer write
configure: acknowledge --disable-tests [1]
man pages: fix typos detected by Lintian
test: add missing #includes for dns-proto.cc
test: avoid in6addr_* constants
test: Build with MinGW on AppVeyor
Makefile.m32: add support for extra flags
Makefile.m32: add support for CROSSPREFIX
configure: check if tests can get built before enabled
ares_library_cleanup: reset ares_realloc too
ahost.c: add cast to fix C++ compile
test: Only pass unused args to GoogleTest
build: commonize MSVC version detection
msvc_ver.inc: support Visual Studio 2015 Update 1, 2, 3
test: for AF_UNSPEC, return CNAME only for AAAA, but valid A record
ares_getnameinfo: explicitly clear struct servent before use
test: Update fuzzing function prototype
init: fix nsort initialization
test: add fuzzing check script to tests
web: http => https
read_tcp_data: remove superfluous NULL check
LICENSE.md: add a stand-alone license file
SECURITY.md: suggested "security process" for the project
ares_init_options: only propagate init failures from options [2]
headers: remove checks for and defines of variable sizes
test: fix gMock to work with gcc >= 6.x [3]

Signed-off-by André Draszik <[email protected]>
---
 .../recipes-support/c-ares/{c-ares_1.11.0.bb => c-ares_1.12.0.bb}   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
 rename meta-networking/recipes-support/c-ares/{c-ares_1.11.0.bb => c-ares_1.12.0.bb} (60%)
meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb renamed from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb +3 -3
similarity index 60%
rename from meta-networking/recipes-support/c-ares/c-ares_1.11.0.bb
rename to meta-networking/recipes-support/c-ares/c-ares_1.12.0.bb
index c98be7d..da8e096 100644
@@ -4,12 +4,12 @@ DESCRIPTION = "c-ares is a C library that resolves names asynchronously."
 HOMEPAGE = "http://daniel.haxx.se/projects/c-ares/"
 SECTION = "libs"
 LICENSE = "MIT"
-LIC_FILES_CHKSUM = "file://ares_init.c;beginline=1;endline=3;md5=53f5ecf4c22c37cf1ddd1ef8f8eccce0"
+LIC_FILES_CHKSUM = "file://LICENSE.md;md5=f4b026880834eb01c035c5e5cb47ccac"
 
 SRC_URI = "http://c-ares.haxx.se/download/${BP}.tar.gz \
            file://0001-configure.ac-don-t-override-passed-cflags.patch \
 "
-SRC_URI[md5sum] = "d5c6d522cfc54bb6f215a0b7912d46be"
-SRC_URI[sha256sum] = "b3612e6617d9682928a1d50c1040de4db6519f977f0b25d40cf1b632900b3efd"
+SRC_URI[md5sum] = "2ca44be1715cd2c5666a165d35788424"
+SRC_URI[sha256sum] = "8692f9403cdcdf936130e045c84021665118ee9bfea905d1a76f04d4e6f365fb"
 
 inherit autotools pkgconfig
Signature · 1 line
2.9.3