Skip to content

deps: upgrade to c-ares v1.14.0

Rodrigo Muino Tomonari requested to merge github/fork/rvagg/rvagg/cares-1.14.0 into master

Changelog over 1.13.0 which we're currently bundling:

  • Fix patch for CVE-2017-1000381 to not be overly aggressive.
  • win32: Preserve DNS server order returned by Windows when sorting and exclude DNS servers in legacy subnets.
  • win32: Support most recent Visual Studio 2017
  • gethostbyaddr should fail with ECANCELLED not ENOTFOUND when ares_cancel is called.
  • win32: Exclude legacy ipv6 subnets
  • android: Applications compiled for Oreo can no longer use __system_property_get and must use Java calls to retrieve DNS servers.
  • win32: Force use of ANSI functions
  • CMake minimum version is now 3.1
  • ares_gethostbyname.3: fix callback status values
  • docs: Document WSAStartup requirement
  • Fix a typo in init_by_resolv_conf
  • Android JNI code leaks local references in some cases
  • Force using the ANSI versions of WinAPI functions

The most important changes have already been included via

  • 50e580df deps: cherry-pick 0ef4a0c64b6 from c-ares upstream (gethostbyaddr should fail with ECANCELLED)
  • 9a0631df deps: cherry-pick 18ea996 from c-ares upstream (patch for CVE-2017-1000381)

Not much else of significance in here but there is improved Android support so the Android Node builders should be happy about that.

Merge request reports