curl/ares/RELEASE-NOTES

This is what's new and changed in the c-ares 1.5.3 release:

 o fix adig sample application compilation failure on some systems
 o fix pkg-config reporting of private libraries needed for static linking
 o fallback to gettimeofday when monotonic clock is unavailable at run-time
 o ares_gethostbyname() fallback from AAA to A records with CNAME present
 o allow --enable-largefile and --disable-largefile configurations
 o configure process no longer needs nor checks size of curl_off_t
 o library will now be built with _REENTRANT symbol defined if needed
 o Improved configure detection of number of arguments for getservbyport_r
 o Improved query-ID randomness
 o Validate that DNS response address matches the request address

Thanks go to these friendly people for their efforts and contributions:

 Brad House, Yang Tse, Phil Blundell, Tofu Linden
 and obviously Daniel Stenberg

Have fun!
Brad House fixed a missing header file inclusion in adig sample program 2008-05-30 11:26:42 -04:00			`This is what's new and changed in the c-ares 1.5.3 release:`
1.4.0 preps 2007-06-08 04:46:28 -04:00
fix pkg-config reporting of private libraries needed for static linking 2008-06-08 21:06:48 -04:00			`o fix adig sample application compilation failure on some systems`
			`o fix pkg-config reporting of private libraries needed for static linking`
fallback to gettimeofday when monotonic clock is unavailable at run-time 2008-07-01 23:04:56 -04:00			`o fallback to gettimeofday when monotonic clock is unavailable at run-time`
ares_gethostbyname() fallback from AAA to A records with CNAME present 2008-07-03 07:34:34 -04:00			`o ares_gethostbyname() fallback from AAA to A records with CNAME present`
Allow --enable-largefile and --disable-largefile configurations. Configure process no longer needs nor checks size of curl_off_t. Library will now be built with _REENTRANT symbol defined. 2008-07-15 12:43:39 -04:00			`o allow --enable-largefile and --disable-largefile configurations`
			`o configure process no longer needs nor checks size of curl_off_t`
Sync up with reality 2008-07-31 23:10:54 -04:00			`o library will now be built with _REENTRANT symbol defined if needed`
Improved configure detection of number of arguments for getservbyport_r 2008-07-16 08:26:09 -04:00			`o Improved configure detection of number of arguments for getservbyport_r`
- Fix by Tofu Linden: The symptom: * Users (usually, but not always) on 2-Wire routers and the Comcast service and a wired connection to their router would find that the second and subsequent DNS lookups from fresh processes using c-ares to resolve the same address would cause the process to never see a reply (it keeps polling for around 1m15s before giving up). The repro: * On such a machine (and yeah, it took us a lot of QA to find the systems that reproduce such a specific problem!), do 'ahost www.secondlife.com', then do it again. The first process's lookup will work, subsequent lookups will time-out and fail. The cause: * init_id_key() was calling randomize_key() before it initialized key->state, meaning that the randomness generated by randomize_key() is immediately overwritten with deterministic values. (/dev/urandom was also being read incorrectly in the c-ares version we were using, but this was fixed in a later version.) * This makes the stream of generated query-IDs from any new c-ares process be an identical and predictable sequence of IDs. * This makes the 2-Wire's default built-in DNS server detect these queries as probable-duplicates and (erroneously) not respond at all. 2008-08-04 16:23:12 -04:00			`o Improved query-ID randomness`
Brad House's validation that DNS response address matches the request address 2008-08-24 23:34:50 -04:00			`o Validate that DNS response address matches the request address`
1.4.0 preps 2007-06-08 04:46:28 -04:00
			`Thanks go to these friendly people for their efforts and contributions:`

- Fix by Tofu Linden: The symptom: * Users (usually, but not always) on 2-Wire routers and the Comcast service and a wired connection to their router would find that the second and subsequent DNS lookups from fresh processes using c-ares to resolve the same address would cause the process to never see a reply (it keeps polling for around 1m15s before giving up). The repro: * On such a machine (and yeah, it took us a lot of QA to find the systems that reproduce such a specific problem!), do 'ahost www.secondlife.com', then do it again. The first process's lookup will work, subsequent lookups will time-out and fail. The cause: * init_id_key() was calling randomize_key() before it initialized key->state, meaning that the randomness generated by randomize_key() is immediately overwritten with deterministic values. (/dev/urandom was also being read incorrectly in the c-ares version we were using, but this was fixed in a later version.) * This makes the stream of generated query-IDs from any new c-ares process be an identical and predictable sequence of IDs. * This makes the 2-Wire's default built-in DNS server detect these queries as probable-duplicates and (erroneously) not respond at all. 2008-08-04 16:23:12 -04:00			`Brad House, Yang Tse, Phil Blundell, Tofu Linden`
sync with reality 2008-05-15 06:04:15 -04:00			`and obviously Daniel Stenberg`
1.4.0 preps 2007-06-08 04:46:28 -04:00
			`Have fun!`