6be5219c41
- NodeJS passes NULL for addr and 0 for addrlen to ares_parse_ptr_reply() on systems where malloc(0) returns NULL. This would cause a crash. - If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause a crash - Crash in sortaddrinfo() if the list size equals 0 due to an unexpected DNS response - Expand number of escaped characters in DNS replies as per RFC1035 5.1 to prevent spoofing follow-up - Perform validation on hostnames to prevent possible XSS due to applications not performing valiation themselves https://c-ares.haxx.se/changelog.html#1_17_2 Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
6 lines
255 B
Plaintext
6 lines
255 B
Plaintext
# Locally calculated after checking pgp signature
|
|
sha256 4803c844ce20ce510ef0eb83f8ea41fa24ecaae9d280c468c582d2bb25b3913d c-ares-1.17.2.tar.gz
|
|
|
|
# Hash for license file
|
|
sha256 db4eb63fe09daebdf57d3f79b091bb5ee5070c0d761040e83264e648d307af4c LICENSE.md
|