Update c-ares from 0.16.1 to 0.17.2

MAKEAYAMLHAPPY-12345

ref:6a83ac3af883b2fc963128b7993f0a467b0000cb

contrib/libs/c-ares/.yandex_meta/devtools.copyrights.report

@@ -38,7 +38,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares__timeval.c [2:2]
+        src/lib/ares__timeval.c [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 10b55a7cc97df49af59c0048d4bde011
 BELONGS ya.make
@@ -49,7 +49,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        setup_once.h [5:5]
+        src/lib/setup_once.h [5:5]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 11cb9c51a7d25a6cf94b8ab8e8b0ebca
 BELONGS ya.make
@@ -60,7 +60,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_cancel.c [2:2]
+        src/lib/ares_cancel.c [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 169a51bc2a181587c3cadfcf8c1d7365
 BELONGS ya.make
@@ -72,8 +72,8 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        bitncmp.c [3:4]
-        inet_net_pton.c [3:4]
+        src/lib/bitncmp.c [3:4]
+        src/lib/inet_net_pton.c [3:4]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 197bc139b0875c9ed5c9a13d6b10277d
 BELONGS ya.make
@@ -85,7 +85,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_parse_soa_reply.c [2:3]
+        src/lib/ares_parse_soa_reply.c [2:3]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 1df92f5df82e664143819a7cb7c5f4f9
 BELONGS ya.make
@@ -96,8 +96,8 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_strsplit.c [1:1]
-        ares_strsplit.h [4:4]
+        src/lib/ares_strsplit.c [1:1]
+        src/lib/ares_strsplit.h [4:4]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 2137ea611b92d236da2a5d451d33b93c
 BELONGS ya.make
@@ -109,8 +109,8 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares.h [2:3]
-        ares_init.c [2:3]
+        include/ares.h [2:3]
+        src/lib/ares_init.c [2:3]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 262113e46b31087a933d5d22436ca7d9
 BELONGS ya.make
@@ -121,64 +121,64 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_nowarn.c [2:2]
+        src/lib/ares_nowarn.c [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 273212e34b861a3a897a3b3d79010d78
 BELONGS ya.make
     License text:
-        /* Copyright 1998 by the Massachusetts Institute of Technology.
+        Copyright 1998 by the Massachusetts Institute of Technology.
     Scancode info:
         Original SPDX id: COPYRIGHT_SERVICE_LABEL
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
         LICENSE.md [6:6]
-        adig.c [1:1]
-        ahost.c [1:1]
-        ares.h [2:3]
-        ares__close_sockets.c [2:2]
-        ares__read_line.c [2:2]
-        ares_create_query.c [2:2]
-        ares_destroy.c [2:3]
-        ares_expand_string.c [2:2]
-        ares_fds.c [2:2]
-        ares_free_hostent.c [2:2]
-        ares_freeaddrinfo.c [2:3]
-        ares_getenv.c [3:3]
-        ares_getenv.h [5:5]
-        ares_gethostbyaddr.c [2:2]
-        ares_init.c [2:3]
-        ares_iphlpapi.h [4:5]
-        ares_library_init.c [2:3]
-        ares_library_init.h [5:6]
-        ares_llist.c [2:2]
-        ares_llist.h [5:5]
-        ares_mkquery.c [2:2]
-        ares_options.c [2:3]
-        ares_parse_a_reply.c [2:3]
-        ares_parse_aaaa_reply.c [2:4]
-        ares_parse_mx_reply.c [2:3]
-        ares_parse_naptr_reply.c [2:3]
-        ares_parse_ns_reply.c [1:1]
-        ares_parse_ptr_reply.c [2:2]
-        ares_parse_soa_reply.c [2:3]
-        ares_parse_srv_reply.c [2:3]
-        ares_parse_txt_reply.c [2:3]
-        ares_platform.c [3:4]
-        ares_platform.h [5:6]
-        ares_private.h [5:6]
-        ares_process.c [2:3]
-        ares_query.c [2:2]
-        ares_search.c [2:2]
-        ares_send.c [2:2]
-        ares_strcasecmp.c [3:3]
-        ares_strcasecmp.h [5:5]
-        ares_strdup.c [3:3]
-        ares_strdup.h [5:5]
-        ares_strerror.c [2:2]
-        ares_timeout.c [2:2]
-        ares_writev.c [3:3]
-        ares_writev.h [5:5]
+        include/ares.h [2:3]
+        src/lib/ares__close_sockets.c [2:2]
+        src/lib/ares__read_line.c [2:2]
+        src/lib/ares_create_query.c [2:2]
+        src/lib/ares_destroy.c [2:3]
+        src/lib/ares_expand_string.c [2:2]
+        src/lib/ares_fds.c [2:2]
+        src/lib/ares_free_hostent.c [2:2]
+        src/lib/ares_freeaddrinfo.c [2:3]
+        src/lib/ares_getenv.c [3:3]
+        src/lib/ares_getenv.h [5:5]
+        src/lib/ares_gethostbyaddr.c [2:2]
+        src/lib/ares_init.c [2:3]
+        src/lib/ares_iphlpapi.h [4:5]
+        src/lib/ares_library_init.c [2:3]
+        src/lib/ares_library_init.h [5:6]
+        src/lib/ares_llist.c [2:2]
+        src/lib/ares_llist.h [5:5]
+        src/lib/ares_mkquery.c [2:2]
+        src/lib/ares_options.c [2:3]
+        src/lib/ares_parse_a_reply.c [2:3]
+        src/lib/ares_parse_aaaa_reply.c [2:4]
+        src/lib/ares_parse_mx_reply.c [2:3]
+        src/lib/ares_parse_naptr_reply.c [2:3]
+        src/lib/ares_parse_ns_reply.c [1:1]
+        src/lib/ares_parse_ptr_reply.c [2:2]
+        src/lib/ares_parse_soa_reply.c [2:3]
+        src/lib/ares_parse_srv_reply.c [2:3]
+        src/lib/ares_parse_txt_reply.c [2:3]
+        src/lib/ares_platform.c [3:4]
+        src/lib/ares_platform.h [5:6]
+        src/lib/ares_private.h [5:6]
+        src/lib/ares_process.c [2:3]
+        src/lib/ares_query.c [2:2]
+        src/lib/ares_search.c [2:2]
+        src/lib/ares_send.c [2:2]
+        src/lib/ares_strcasecmp.c [3:3]
+        src/lib/ares_strcasecmp.h [5:5]
+        src/lib/ares_strdup.c [3:3]
+        src/lib/ares_strdup.h [5:5]
+        src/lib/ares_strerror.c [2:2]
+        src/lib/ares_timeout.c [2:2]
+        src/lib/ares_writev.c [3:3]
+        src/lib/ares_writev.h [5:5]
+        src/tools/adig.c [1:1]
+        src/tools/ahost.c [1:1]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 3509a10f633c37ef3ea5b58e8e1f63cd
 BELONGS ya.make
@@ -189,19 +189,8 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_android.c [1:1]
-        ares_android.h [1:1]
-
-KEEP     COPYRIGHT_SERVICE_LABEL 36e0c20612ef44672b8c101f54c9621f
-BELONGS ya.make
-    License text:
-        /* Copyright (C) 2009 - 2013 by Daniel Stenberg et al
-    Scancode info:
-        Original SPDX id: COPYRIGHT_SERVICE_LABEL
-        Score           : 100.00
-        Match type      : COPYRIGHT
-    Files with this license:
-        ares_build.h [5:5]
+        src/lib/ares_android.c [1:1]
+        src/lib/ares_android.h [1:1]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 5004d990e89284bd48e9ce9bb40b3a5b
 BELONGS ya.make
@@ -226,7 +215,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_options.c [2:3]
+        src/lib/ares_options.c [2:3]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 53434b80510655ef693d399872a7c5bd
 BELONGS ya.make
@@ -237,7 +226,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_setup.h [5:5]
+        src/lib/ares_setup.h [5:5]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 5f067d54fe1e500a2cb713d2e2287b9b
 BELONGS ya.make
@@ -248,7 +237,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_ipv6.h [2:2]
+        src/lib/ares_ipv6.h [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 5f90192afbbac5ac79d2247d1086821d
 BELONGS ya.make
@@ -259,7 +248,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_getsock.c [2:2]
+        src/lib/ares_getsock.c [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 6cfebc210ef2316327cd15d9ca411fb8
 BELONGS ya.make
@@ -270,7 +259,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_free_string.c [2:2]
+        src/lib/ares_free_string.c [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 6f8dc4ed13eb3fa6c0c49d4470aa3de0
 BELONGS ya.make
@@ -281,8 +270,8 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_data.c [2:2]
-        ares_data.h [3:3]
+        src/lib/ares_data.c [2:2]
+        src/lib/ares_data.h [3:3]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 772d70e950c69b1a32c0a0047f47ee2d
 BELONGS ya.make
@@ -296,7 +285,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares__sortaddrinfo.c [7:10]
+        src/lib/ares__sortaddrinfo.c [7:10]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 78db66be56803e72faf0c0319b5841bb
 BELONGS ya.make
@@ -310,7 +299,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares__sortaddrinfo.c [7:10]
+        src/lib/ares__sortaddrinfo.c [7:10]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 818af009e3d88bab8f05d07b4c25e8cf
 BELONGS ya.make
@@ -321,13 +310,13 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares__parse_into_addrinfo.c [1:1]
-        ares__readaddrinfo.c [1:1]
-        ares__sortaddrinfo.c [7:10]
-        ares_freeaddrinfo.c [2:3]
-        ares_getaddrinfo.c [2:4]
-        ares_parse_a_reply.c [2:3]
-        ares_parse_aaaa_reply.c [2:4]
+        src/lib/ares__parse_into_addrinfo.c [1:1]
+        src/lib/ares__readaddrinfo.c [1:1]
+        src/lib/ares__sortaddrinfo.c [7:10]
+        src/lib/ares_freeaddrinfo.c [2:3]
+        src/lib/ares_getaddrinfo.c [2:4]
+        src/lib/ares_parse_a_reply.c [2:3]
+        src/lib/ares_parse_aaaa_reply.c [2:4]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 858a33312b71a39ee1b37595088bfefd
 BELONGS ya.make
@@ -339,8 +328,19 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_getopt.c [13:14]
-        ares_getopt.h [5:6]
+        src/tools/ares_getopt.c [13:14]
+        src/tools/ares_getopt.h [5:6]
+
+KEEP     COPYRIGHT_SERVICE_LABEL 869b4b829d2af0ddc238ecbd234fa264
+BELONGS ya.make
+    License text:
+        /* Copyright 2020 by <danny.sonnenschein@platynum.ch>
+    Scancode info:
+        Original SPDX id: COPYRIGHT_SERVICE_LABEL
+        Score           : 100.00
+        Match type      : COPYRIGHT
+    Files with this license:
+        src/lib/ares_parse_caa_reply.c [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 8ae1c43ff019af5b271d587918d91bbf
 BELONGS ya.make
@@ -351,7 +351,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_getnameinfo.c [2:2]
+        src/lib/ares_getnameinfo.c [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL 9a9a1a42112fccd2a848bb7f21bef0d9
 BELONGS ya.make
@@ -362,7 +362,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_inet_net_pton.h [4:4]
+        src/lib/ares_inet_net_pton.h [4:4]
 
 KEEP     COPYRIGHT_SERVICE_LABEL a3b944a0c944a5828d7421d9404d38f7
 BELONGS ya.make
@@ -373,7 +373,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_nowarn.h [5:5]
+        src/lib/ares_nowarn.h [5:5]
 
 KEEP     COPYRIGHT_SERVICE_LABEL a568c02a238334a6de16619a72ac7ff7
 BELONGS ya.make
@@ -385,7 +385,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_private.h [5:6]
+        src/lib/ares_private.h [5:6]
 
 KEEP     COPYRIGHT_SERVICE_LABEL afb0570805cf884116abf4b791a0efe7
 BELONGS ya.make
@@ -397,7 +397,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_library_init.c [2:3]
+        src/lib/ares_library_init.c [2:3]
 
 KEEP     COPYRIGHT_SERVICE_LABEL b0401879c04c8b03acc6e1099d200e3f
 BELONGS ya.make
@@ -409,10 +409,10 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_iphlpapi.h [4:5]
-        ares_platform.c [3:4]
-        ares_platform.h [5:6]
-        config-win32.h [4:4]
+        src/lib/ares_iphlpapi.h [4:5]
+        src/lib/ares_platform.c [3:4]
+        src/lib/ares_platform.h [5:6]
+        src/lib/config-win32.h [4:4]
 
 KEEP     COPYRIGHT_SERVICE_LABEL b0ba0e82ac2b1e74adc884bf65ffb51a
 BELONGS ya.make
@@ -424,7 +424,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        inet_ntop.c [2:3]
+        src/lib/inet_ntop.c [2:3]
 
 KEEP     COPYRIGHT_SERVICE_LABEL b6e3440218c70084f1def8f904dffe48
 BELONGS ya.make
@@ -437,7 +437,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_getaddrinfo.c [2:4]
+        src/lib/ares_getaddrinfo.c [2:4]
 
 KEEP     COPYRIGHT_SERVICE_LABEL b9d942504b76ee4af145da2bda5c940a
 BELONGS ya.make
@@ -449,9 +449,9 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_parse_naptr_reply.c [2:3]
-        ares_parse_srv_reply.c [2:3]
-        ares_parse_txt_reply.c [2:3]
+        src/lib/ares_parse_naptr_reply.c [2:3]
+        src/lib/ares_parse_srv_reply.c [2:3]
+        src/lib/ares_parse_txt_reply.c [2:3]
 
 KEEP     COPYRIGHT_SERVICE_LABEL bcc03fa52028dbfcb64258cda21f5729
 BELONGS ya.make
@@ -464,8 +464,8 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_getaddrinfo.c [2:4]
-        ares_gethostbyname.c [2:2]
+        src/lib/ares_getaddrinfo.c [2:4]
+        src/lib/ares_gethostbyname.c [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL c77c02a30f970451b71b72c5c8d97a70
 BELONGS ya.make
@@ -477,9 +477,9 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        bitncmp.c [3:4]
-        inet_net_pton.c [3:4]
-        inet_ntop.c [2:3]
+        src/lib/bitncmp.c [3:4]
+        src/lib/inet_net_pton.c [3:4]
+        src/lib/inet_ntop.c [2:3]
 
 KEEP     COPYRIGHT_SERVICE_LABEL d7e79df2fb60fa6a9086795cf0689476
 BELONGS ya.make
@@ -491,7 +491,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_process.c [2:3]
+        src/lib/ares_process.c [2:3]
 
 KEEP     COPYRIGHT_SERVICE_LABEL dc76a81a0c03b8441f73046ca98ec618
 BELONGS ya.make
@@ -502,9 +502,9 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares__get_hostent.c [2:2]
-        ares_dns.h [4:4]
-        ares_expand_name.c [2:2]
+        include/ares_dns.h [4:4]
+        src/lib/ares__get_hostent.c [2:2]
+        src/lib/ares_expand_name.c [2:2]
 
 KEEP     COPYRIGHT_SERVICE_LABEL e19b1fdec502261b9ee3ba3c783dff6a
 BELONGS ya.make
@@ -515,7 +515,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        bitncmp.h [5:5]
+        src/lib/bitncmp.h [5:5]
 
 KEEP     COPYRIGHT_SERVICE_LABEL e59ec63e75bc26555dd9975fa20bc106
 BELONGS ya.make
@@ -527,8 +527,8 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_destroy.c [2:3]
-        ares_library_init.h [5:6]
+        src/lib/ares_destroy.c [2:3]
+        src/lib/ares_library_init.h [5:6]
 
 KEEP     COPYRIGHT_SERVICE_LABEL f45f5e8d185e83841a63b09b70acd62e
 BELONGS ya.make
@@ -541,7 +541,7 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_parse_aaaa_reply.c [2:4]
+        src/lib/ares_parse_aaaa_reply.c [2:4]
 
 KEEP     COPYRIGHT_SERVICE_LABEL fa370f4b5a3cba203c6d792417971cd0
 BELONGS ya.make
@@ -552,7 +552,8 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_rules.h [5:5]
+        include/ares_build.h [6:6]
+        include/ares_rules.h [5:5]
 
 KEEP     COPYRIGHT_SERVICE_LABEL ff854425f10eb762ddab3947b08deada
 BELONGS ya.make
@@ -564,4 +565,4 @@ BELONGS ya.make
         Score           : 100.00
         Match type      : COPYRIGHT
     Files with this license:
-        ares_parse_mx_reply.c [2:3]
+        src/lib/ares_parse_mx_reply.c [2:3]

contrib/libs/c-ares/.yandex_meta/devtools.licenses.report

@@ -38,9 +38,9 @@ BELONGS ya.make
         Match type      : TEXT
         Links           : http://fedoraproject.org/wiki/Licensing:MIT#Old_Style_with_legal_disclaimer_2, https://spdx.org/licenses/ISC, https://www.isc.org/software/license
     Files with this license:
-        bitncmp.c [6:16]
-        inet_net_pton.c [6:16]
-        inet_ntop.c [5:15]
+        src/lib/bitncmp.c [6:16]
+        src/lib/inet_net_pton.c [6:16]
+        src/lib/inet_ntop.c [5:15]
 
 KEEP     NTP                  53568816d1ddf46f15453c6991d855a9
 BELONGS ya.make
@@ -51,73 +51,74 @@ BELONGS ya.make
         Match type      : TEXT
         Links           : http://fedoraproject.org/wiki/Licensing:MIT#Old_Style_.28no_advertising_without_permission.29, https://spdx.org/licenses/NTP
     Files with this license:
-        acountry.c [22:32]
-        adig.c [4:14]
-        ahost.c [4:14]
-        ares.h [5:15]
-        ares__close_sockets.c [4:14]
-        ares__get_hostent.c [4:14]
-        ares__parse_into_addrinfo.c [3:13]
-        ares__read_line.c [4:14]
-        ares__readaddrinfo.c [3:13]
-        ares_android.c [3:13]
-        ares_android.h [3:13]
-        ares_create_query.c [4:14]
-        ares_data.c [4:14]
-        ares_data.h [5:15]
-        ares_destroy.c [5:15]
-        ares_dns.h [6:16]
-        ares_expand_name.c [4:14]
-        ares_expand_string.c [4:14]
-        ares_fds.c [4:14]
-        ares_free_hostent.c [4:14]
-        ares_free_string.c [4:14]
-        ares_freeaddrinfo.c [5:15]
-        ares_getaddrinfo.c [6:16]
-        ares_getenv.c [5:15]
-        ares_getenv.h [7:17]
-        ares_gethostbyaddr.c [4:14]
-        ares_gethostbyname.c [4:14]
-        ares_getnameinfo.c [4:14]
-        ares_inet_net_pton.h [6:16]
-        ares_init.c [5:15]
-        ares_iphlpapi.h [7:17]
-        ares_ipv6.h [4:14]
-        ares_library_init.c [5:15]
-        ares_library_init.h [8:18]
-        ares_llist.c [4:14]
-        ares_llist.h [7:17]
-        ares_mkquery.c [4:14]
-        ares_nowarn.c [4:14]
-        ares_nowarn.h [7:17]
-        ares_options.c [5:15]
-        ares_parse_a_reply.c [5:15]
-        ares_parse_aaaa_reply.c [6:16]
-        ares_parse_mx_reply.c [5:15]
-        ares_parse_naptr_reply.c [5:15]
-        ares_parse_ns_reply.c [3:13]
-        ares_parse_ptr_reply.c [4:14]
-        ares_parse_soa_reply.c [5:15]
-        ares_parse_srv_reply.c [5:15]
-        ares_parse_txt_reply.c [5:15]
-        ares_platform.c [6:16]
-        ares_platform.h [8:18]
-        ares_private.h [8:18]
-        ares_process.c [5:15]
-        ares_query.c [4:14]
-        ares_search.c [4:14]
-        ares_send.c [4:14]
-        ares_strcasecmp.c [5:15]
-        ares_strcasecmp.h [7:17]
-        ares_strdup.c [5:15]
-        ares_strdup.h [7:17]
-        ares_strerror.c [4:14]
-        ares_strsplit.c [3:13]
-        ares_strsplit.h [6:16]
-        ares_timeout.c [4:14]
-        ares_writev.c [5:15]
-        ares_writev.h [7:17]
-        bitncmp.h [7:17]
+        include/ares.h [5:15]
+        include/ares_dns.h [6:16]
+        src/lib/ares__close_sockets.c [4:14]
+        src/lib/ares__get_hostent.c [4:14]
+        src/lib/ares__parse_into_addrinfo.c [3:13]
+        src/lib/ares__read_line.c [4:14]
+        src/lib/ares__readaddrinfo.c [3:13]
+        src/lib/ares_android.c [3:13]
+        src/lib/ares_android.h [3:13]
+        src/lib/ares_create_query.c [4:14]
+        src/lib/ares_data.c [4:14]
+        src/lib/ares_data.h [5:15]
+        src/lib/ares_destroy.c [5:15]
+        src/lib/ares_expand_name.c [4:14]
+        src/lib/ares_expand_string.c [4:14]
+        src/lib/ares_fds.c [4:14]
+        src/lib/ares_free_hostent.c [4:14]
+        src/lib/ares_free_string.c [4:14]
+        src/lib/ares_freeaddrinfo.c [5:15]
+        src/lib/ares_getaddrinfo.c [6:16]
+        src/lib/ares_getenv.c [5:15]
+        src/lib/ares_getenv.h [7:17]
+        src/lib/ares_gethostbyaddr.c [4:14]
+        src/lib/ares_gethostbyname.c [4:14]
+        src/lib/ares_getnameinfo.c [4:14]
+        src/lib/ares_inet_net_pton.h [6:16]
+        src/lib/ares_init.c [5:15]
+        src/lib/ares_iphlpapi.h [7:17]
+        src/lib/ares_ipv6.h [4:14]
+        src/lib/ares_library_init.c [5:15]
+        src/lib/ares_library_init.h [8:18]
+        src/lib/ares_llist.c [4:14]
+        src/lib/ares_llist.h [7:17]
+        src/lib/ares_mkquery.c [4:14]
+        src/lib/ares_nowarn.c [4:14]
+        src/lib/ares_nowarn.h [7:17]
+        src/lib/ares_options.c [5:15]
+        src/lib/ares_parse_a_reply.c [5:15]
+        src/lib/ares_parse_aaaa_reply.c [6:16]
+        src/lib/ares_parse_caa_reply.c [4:14]
+        src/lib/ares_parse_mx_reply.c [5:15]
+        src/lib/ares_parse_naptr_reply.c [5:15]
+        src/lib/ares_parse_ns_reply.c [3:13]
+        src/lib/ares_parse_ptr_reply.c [4:14]
+        src/lib/ares_parse_soa_reply.c [5:15]
+        src/lib/ares_parse_srv_reply.c [5:15]
+        src/lib/ares_parse_txt_reply.c [5:15]
+        src/lib/ares_platform.c [6:16]
+        src/lib/ares_platform.h [8:18]
+        src/lib/ares_private.h [8:18]
+        src/lib/ares_process.c [5:15]
+        src/lib/ares_query.c [4:14]
+        src/lib/ares_search.c [4:14]
+        src/lib/ares_send.c [4:14]
+        src/lib/ares_strcasecmp.c [5:15]
+        src/lib/ares_strcasecmp.h [7:17]
+        src/lib/ares_strdup.c [5:15]
+        src/lib/ares_strdup.h [7:17]
+        src/lib/ares_strerror.c [4:14]
+        src/lib/ares_strsplit.c [3:13]
+        src/lib/ares_strsplit.h [6:16]
+        src/lib/ares_timeout.c [4:14]
+        src/lib/ares_writev.c [5:15]
+        src/lib/ares_writev.h [7:17]
+        src/lib/bitncmp.h [7:17]
+        src/tools/acountry.c [22:32]
+        src/tools/adig.c [4:14]
+        src/tools/ahost.c [4:14]
 
 KEEP     BSD-3-Clause         6899d7bb10667745c38e41e3f295c45d
 BELONGS ya.make
@@ -129,21 +130,21 @@ BELONGS ya.make
         Match type      : REFERENCE
         Links           : http://www.opensource.org/licenses/BSD-3-Clause, https://spdx.org/licenses/BSD-3-Clause
     Files with this license:
-        ares_getopt.c [4:4]
+        src/tools/ares_getopt.c [4:4]
     Scancode info:
         Original SPDX id: BSD-3-Clause
         Score           : 99.00
         Match type      : REFERENCE
         Links           : http://www.opensource.org/licenses/BSD-3-Clause, https://spdx.org/licenses/BSD-3-Clause
     Files with this license:
-        ares_getopt.c [4:4]
+        src/tools/ares_getopt.c [4:4]
     Scancode info:
         Original SPDX id: LicenseRef-scancode-unknown
         Score           : 11.00
         Match type      : REFERENCE
         Links           : https://github.com/nexB/scancode-toolkit/tree/develop/src/licensedcode/data/licenses/unknown.LICENSE
     Files with this license:
-        ares_getopt.c [4:4]
+        src/tools/ares_getopt.c [4:4]
 
 KEEP     NTP                  8fab855584c6999b237d25f7252d2d73
 BELONGS ya.make
@@ -154,14 +155,14 @@ BELONGS ya.make
         Match type      : TEXT
         Links           : http://fedoraproject.org/wiki/Licensing:MIT#Old_Style_.28no_advertising_without_permission.29, https://spdx.org/licenses/NTP
     Files with this license:
-        ares__timeval.c [4:12]
-        ares_build.h [7:15]
-        ares_cancel.c [4:12]
-        ares_getsock.c [4:12]
-        ares_rules.h [7:15]
-        ares_setup.h [7:15]
-        config-win32.h [6:14]
-        setup_once.h [7:15]
+        include/ares_build.h [8:16]
+        include/ares_rules.h [7:15]
+        src/lib/ares__timeval.c [4:12]
+        src/lib/ares_cancel.c [4:12]
+        src/lib/ares_getsock.c [4:12]
+        src/lib/ares_setup.h [7:15]
+        src/lib/config-win32.h [6:14]
+        src/lib/setup_once.h [7:15]
 
 KEEP     MIT                  94890220f883df92236a2e64421f8224
 BELONGS ya.make
@@ -173,7 +174,7 @@ BELONGS ya.make
         Match type      : REFERENCE
         Links           : http://opensource.org/licenses/mit-license.php, https://spdx.org/licenses/MIT
     Files with this license:
-        CHANGES [1622:1622]
+        CHANGES [2148:2148]
 
 KEEP     BSD-3-Clause         9d018aaf6e89baa34c9bc9407e762114
 BELONGS ya.make
@@ -185,7 +186,7 @@ BELONGS ya.make
         Match type      : REFERENCE
         Links           : http://www.opensource.org/licenses/BSD-3-Clause, https://spdx.org/licenses/BSD-3-Clause
     Files with this license:
-        ares__sortaddrinfo.c [3:3]
+        src/lib/ares__sortaddrinfo.c [3:3]
 
 KEEP     BSD-3-Clause         9f9f74951499b982d601e33ab0c03bed
 BELONGS ya.make
@@ -196,7 +197,7 @@ BELONGS ya.make
         Match type      : TEXT
         Links           : http://www.opensource.org/licenses/BSD-3-Clause, https://spdx.org/licenses/BSD-3-Clause
     Files with this license:
-        ares__sortaddrinfo.c [12:34]
+        src/lib/ares__sortaddrinfo.c [12:34]
 
 KEEP     BSD-3-Clause         cd98e0ba1ce0a730d60166f40b0e63b5
 BELONGS ya.make
@@ -207,8 +208,8 @@ BELONGS ya.make
         Match type      : TEXT
         Links           : http://www.opensource.org/licenses/BSD-3-Clause, https://spdx.org/licenses/BSD-3-Clause
     Files with this license:
-        ares_getopt.c [16:38]
-        ares_getopt.h [8:30]
+        src/tools/ares_getopt.c [16:38]
+        src/tools/ares_getopt.h [8:30]
 
 KEEP     MIT                  e8dcd3bdf4ebf29fb653dc583ef61bee
 BELONGS ya.make

contrib/libs/c-ares/.yandex_meta/licenses.list.txt

@@ -112,10 +112,6 @@
 /* Copyright (C) 2008 by Daniel Stenberg et al
 
 
-====================COPYRIGHT====================
-/* Copyright (C) 2009 - 2013 by Daniel Stenberg et al
-
-
 ====================COPYRIGHT====================
 /* Copyright (C) 2009 by Daniel Stenberg et al
 
@@ -144,10 +140,6 @@
 /* Copyright (C) 2019 by Andrew Selivanov
 
 
-====================COPYRIGHT====================
-/* Copyright 1998 by the Massachusetts Institute of Technology.
-
-
 ====================COPYRIGHT====================
 /* Copyright 1998 by the Massachusetts Institute of Technology.
  * Copyright (C) 2004 - 2011 by Daniel Stenberg et al
@@ -222,11 +214,19 @@
 /* Copyright 2005 by Dominick Meglio
 
 
+====================COPYRIGHT====================
+/* Copyright 2020 by <danny.sonnenschein@platynum.ch>
+
+
 ====================COPYRIGHT====================
 Copyright (c) 2007 - 2018, Daniel Stenberg with many contributors, see AUTHORS
 file.
 
 
+====================COPYRIGHT====================
+Copyright 1998 by the Massachusetts Institute of Technology.
+
+
 ====================File: AUTHORS====================
 c-ares is based on ares, and these are the people that have worked on it since
 the fork was made:

contrib/libs/c-ares/CHANGES

@@ -1,5 +1,531 @@
    Changelog for the c-ares project. Generated with git2changes.pl
 
+Version 1.17.2 (24 Jul 2021)
+
+bradh352 (24 Jul 2021)
+- fix typo
+
+- prep for 1.17.2 release
+
+GitHub (30 Jun 2021)
+- [jeanpierrecartal brought this change]
+
+  Replace strdup() with ares_strdup() (#408)
+  
+  strdup() is used in src/lib/ares_parse_a_reply.c and src/lib/ares_parse_aaaa_reply.c whereas allocated memory is freed using ares_free().
+  
+  Bug: 407
+  Fix By: Jean-pierre Cartal (@jeanpierrecartal)
+
+- [Brad House brought this change]
+
+  Validate hostnames in DNS responses and discard from malicious servers (#406)
+  
+  To prevent possible users having XSS issues due to intentionally malformed DNS replies, validate hostnames returned in responses and return EBADRESP if they are not valid.
+  
+  It is not clear what legitimate issues this may cause at this point.
+  
+  Bug Reported By: philipp.jeitner@sit.fraunhofer.de
+  Fix By: Brad House (@bradh352)
+
+bradh352 (11 Jun 2021)
+- ares_expand_name(): fix formatting and handling of root name response
+  
+  Fixes issue introduced in prior commit with formatting and handling
+  of parsing a root name response which should not be escaped.
+  
+  Fix By: Brad House
+
+- ares_expand_name() should escape more characters
+  
+  RFC1035 5.1 specifies some reserved characters and escaping sequences
+  that are allowed to be specified.  Expand the list of reserved characters
+  and also escape non-printable characters using the \DDD format as
+  specified in the RFC.
+  
+  Bug Reported By: philipp.jeitner@sit.fraunhofer.de
+  Fix By: Brad House (@bradh352)
+
+GitHub (15 Apr 2021)
+- [HALX99 brought this change]
+
+  Fix can't get dns server on macos and ios (#401)
+  
+  If DNS configuration didn't include search domains on MacOS (or iOS) it would throw an error instead of ignoring.
+  
+  Fix By: @halx99
+
+- [catalinh-bd brought this change]
+
+  Bugfix/crash in ares  sortaddrinfo (#400)
+  
+  The bug was generated because there was no check for the number
+  of items in the list and invalid memory was accesed when the list
+  was empty. There is a check for null after calling malloc but on
+  some systems it always returns a valid address for size equals 0.
+  Relates To: #392, 0903dcecabca283d0fa771632892dc7592b7a66d
+  
+  Fix By: @catalinh-bd
+
+bradh352 (2 Mar 2021)
+- Null deref if ares_getaddrinfo() is terminated with ares_destroy()
+  
+  ares_freeaddrinfo() was not checking for a Null ptr during cleanup of
+  an aborted query.
+  
+  Once that was resolved it uncovered another possible issue with
+  multiple simultaneous underlying queries being outstanding and
+  possibly prematurely cleaning up the handle.
+  
+  Reported By: Michael Kourlas
+  Fix By: Brad House (@bradh352)
+
+GitHub (18 Feb 2021)
+- [Brad House brought this change]
+
+  CMake: RANDOM_FILE not defined #397
+  
+  RANDOM_FILE was never defined by cmake, causing RC4 key generation to use the less secure rand() method.
+  
+  Also, due to clashes with chain-building from other projects (e.g. curl) that may define RANDOM_FILE, this was renamed to CARES_RANDOM_FILE.
+  
+  This is the proposed change for #396
+  
+  Fix By: Brad House (@bradh352)
+
+- [Anton Danielsson brought this change]
+
+  CMake: fix Make install for iOS/MacOS (#395)
+  
+  INSTALL TARGETS were missing the BUNDLE DESTINATION
+  
+  Fix By: Anton Danielsson (@anton-danielsson)
+
+- [František Dvořák brought this change]
+
+  Fix build with autotools out of source tree (#394)
+  
+  Add missing include directory, which fixes the build with autotools in separated build directory.
+  
+  Fix By: František Dvořák (@valtri)
+
+bradh352 (15 Jan 2021)
+- fuzzing: HAVE_CONFIG_H may not be defined so cannot include ares_setup.h.  Its not needed even though we include ares_nameser.h
+
+- remove redundant header checks
+
+- properly detect netinet/tcp.h on openbsd
+
+- more portability updates
+
+- renamed nameser.h to ares_nameser.h requires Makefile.inc update for distributed files
+
+- more portability updates
+
+- remove bad files
+
+- portability updates for test cases
+
+- Portability Updates for arpa/nameser.h (#388)
+  
+  There is too much inconsistency between platforms for arpa/nameser.h and arpa/nameser_compat.h for the way the current files are structured.  Still load the respective system files but make our private nameser.h more forgiving.
+  
+  Fixes: #388
+  Fix By: Brad House (@bradh352)
+
+- ares_parse_ptr_reply() handle NULL for addr/addr_len. Fixes #392
+  
+  NodeJS passes NULL for addr and 0 for addrlen parameters to ares_parse_ptr_reply().  On systems where malloc(0) returned NULL, this would cause the function to return ARES_ENOMEM, but the cleanup wasn't handled properly and would crash.
+  
+  This patche fixes that bug, and also hardens ares_free_hostent() to not leak memory during cleanup.
+  
+  Fixes: #392
+  Fix By: Brad House (@bradh352)
+
+- Define behavior of malloc(0)
+  
+  Some systems may return either NULL or a valid pointer on malloc(0).  c-ares should never call malloc(0) so lets return NULL so we're more likely to find an issue if it were to occur.
+
+GitHub (24 Dec 2020)
+- [dhrumilrana brought this change]
+
+  z/OS: port (#390)
+  
+  Port c-ares to z/OS.
+  
+  Fix By: Dhrumil Rana (@dhrumilrana)
+
+- [vburdo brought this change]
+
+  Use unbuffered stdio for /dev/urandom to read only requested data (#391)
+  
+  Buffered fread() reads 4096 bytes which is completely unnecessary and potentially may cause problems.
+  I discovered this on private linux configuration where custom /dev/urandom implementation has poor performance.
+  
+  Fix By: @vburdo
+
+- [Jay Freeman (saurik) brought this change]
+
+  This relative header #include needs to use quotes. (#386)
+  
+  Fix By: Jay Freeman (@saurik)
+
+bradh352 (23 Nov 2020)
+- Win32: Fix tools build with autotools static library
+  When c-ares is being built as static on Win32, CARES_STATICLIB must
+  be defined, but it wasn't being pulled in for the tools.
+  
+  Fixes: #384
+  Fix By: Brad House (@bradh352)
+
+- Loosen requirements for static c-ares library when building tests
+  
+  It appears that when building tests, it would hardcode enabling building
+  of the c-ares static library.  This was probably due to Windows limitations
+  in symbol visibility.
+  
+  This change will use the static library if it exists for tests, always.
+  Otherwise, it will only forcibly enable static libraries for tests on
+  Windows.
+  
+  Fixes: #380
+  Fix By: Brad House (@bradh352)
+
+- Remove legacy comment about ahost/acountry/adig targets
+
+- Distribute fuzzinput/fuzznames for fuzz tests
+  
+  The fuzz test files were not being distributed.  This doesn't appear to be
+  a regression, it looks like they have never been distributed.
+  
+  Fixes: #379
+  Fix By: Brad House (@bradh352)
+
+Version 1.17.1 (19 Nov 2020)
+
+GitHub (19 Nov 2020)
+- [Brad House brought this change]
+
+  Travis: add iOS target built with CMake (#378)
+  
+  Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
+  
+  Fix By: Brad House (@bradh352)
+
+bradh352 (18 Nov 2020)
+- fix build
+
+GitHub (18 Nov 2020)
+- [Fabrice Fontaine brought this change]
+
+  External projects were using non-public header ares_dns.h, make public again (#376)
+  
+  It appears some outside projects were relying on macros in ares_dns.h, even though it doesn't appear that header was ever meant to be public.  That said, we don't want to break external integrators so we should distribute this header again.
+  
+  Fix By: Fabrice Fontaine (@ffontaine)
+
+bradh352 (17 Nov 2020)
+- note that so versioning has moved to configure.ac
+
+- note about 1.17.1
+
+- fix sed gone wrong
+
+GitHub (17 Nov 2020)
+- [Daniel Stenberg brought this change]
+
+  autotools cleanup (#372)
+  
+  * remove: install-sh mkinstalldirs
+  
+  They're generated when needed, no need to store in it.
+  
+  * buildconf: remove custom logic with autoreconf
+  
+  Fix By: Daniel Stenberg (@bagder)
+
+bradh352 (17 Nov 2020)
+- attempt to fix 1.17.0 release distribution issues
+
+Version 1.17.0 (16 Nov 2020)
+
+bradh352 (16 Nov 2020)
+- 1.17.0 release prep
+
+- ares_getaddrinfo(): duplicate hints ai_socktype and ai_protocol into output
+  
+  ai_socktype and ai_protocol were ignored from the hints input.  They are now
+  duplicated into the output as expected.  Currently no sanity checks on
+  proper values are taking place.
+  
+  Fixes: #317
+  Fix By: Brad House (@bradh352)
+
+- ares_parse_{a,aaaa}_reply could return larger *naddrttls than passed in
+  
+  If there are more ttls returned than the maximum provided by the requestor, then
+  the *naddrttls response would be larger than the actual number of elements in
+  the addrttls array.
+  
+  This bug could lead to invalid memory accesses in applications using c-ares.
+  
+  This behavior appeared to break with PR #257
+  
+  Fixes: #371
+  Reported By: Momtchil Momtchev (@mmomtchev)
+  Fix By: Brad House (@bradh352)
+
+GitHub (5 Nov 2020)
+- [Dustin Lundquist brought this change]
+
+  docs: ares_set_local_ip4() uses host byte order (#368)
+  
+  Properly document brain-dead behavior of ares_set_local_ip4() using host byte order instead of expected network byte order.
+  
+  Fix By: Dustin Lundquist <d.lundquist@tempered.io>
+
+- [Łukasz Marszał brought this change]
+
+  empty hquery->name could lead to invalid memory access (#367)
+  
+  If hquery->name is empty (=="\0"), &hquery->name[strlen(hquery->name)-1] would point to "random" place in memory. This is causing some of my address sanitizer tests to fail.
+  
+  Fix By: Łukasz Marszał (@lmarszal)
+
+bradh352 (28 Sep 2020)
+- Fix OSSFuzz reported issue in CAA reply parsing
+  
+  OSS-Fuzz is reporting a use-of-uninitialized-value:
+  https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26012
+  
+  Reported By: David Drysdale (@daviddrysdale)
+
+GitHub (26 Sep 2020)
+- [David Hotham brought this change]
+
+  fuzz CAA parsing (#363)
+  
+  Add fuzz support for CAA parsing
+  
+  Fix By: David Hotham (@dimbleby)
+
+- [Daniela Sonnenschein brought this change]
+
+  Allow parsing of CAA Resource Record (#360)
+  
+  CAA (Certification Authority Authorization) was introduced in RFC 6844.
+  This has been obsoleted by RFC 8659. This commit added the possibility
+  to query CAA resource records with adig and adds a parser for CAA
+  records, that can be used in conjunction with ares_query(3).
+  
+  Closes Bug: #292
+  Fix By: Daniela Sonnenschein (@lxdicted)
+
+Daniel Stenberg (17 Sep 2020)
+- docs: remove the html and pdf make targets
+  
+  They're rarely used in our daily work flow and mostly just add friction,
+  
+  Closes #362
+
+bradh352 (14 Sep 2020)
+- ares_process needs to always include nameser.h as it has compat
+
+- Define T_OPT if system doesn't provide it
+
+GitHub (12 Sep 2020)
+- [Gisle Vanem brought this change]
+
+  Change the mailman links (#358)
+  
+  Links when wrapping become misleading.  Insert newline to prevent wrapping.
+  
+  Fix By: Gisle Vanem (@gvanem)
+
+- [Gisle Vanem brought this change]
+
+  [adig] Update man-page for the '-x' option (#357)
+  
+  Fix By: Gisle Vanem (@gvanem)
+
+- [Gisle Vanem brought this change]
+
+  [adig] add '-x' option. (#356)
+  
+  Added a 'dig-style' '-x' option. Also support '-xx' for a
+  IPv6 bit-string PTR query.
+  
+  Fix By: Gisle Vanem (@gvanem)
+
+bradh352 (12 Sep 2020)
+- fix indentation
+
+- ns_t_opt -> T_OPT
+
+GitHub (12 Sep 2020)
+- [Gisle Vanem brought this change]
+
+  Fixes for Watt-32 on djgpp + Windows (#355)
+  
+  No longer any relation to libcurl since '<libcurl-root>/packages/DOS/common.dj' is dropped.
+  This Makefile.dj has been tested on Win-10 only (using the Windows hosted djgpp cross compiler).
+  
+  Fix By: Gisle Vanem (@gvanem)
+
+- [Gisle Vanem brought this change]
+
+  Fixes for Watt-32 on Windows and MSDOS (#354)
+  
+  Move the prototype to 'ares_private.h'.
+  
+  Fix By: Gisle Vanem (@gvanem)
+
+bradh352 (11 Sep 2020)
+- update path for include
+
+- remove stale information
+
+- remove stale information
+
+Brad House (9 Sep 2020)
+- silence compiler warnings
+
+- Remove stale msvc files from makefile
+
+GitHub (9 Sep 2020)
+- [Brad House brought this change]
+
+  Reorganize source tree (#349)
+  
+  Originally started by Daniel Stenberg (@bagder) with #123, this patch reorganizes the c-ares source tree to have a more modern layout.  It also fixes out of tree builds for autotools, and automatically builds the tests if tests are enabled.  All tests are passing which tests each of the supported build systems (autotools, cmake, nmake, mingw gmake).  There may be some edge cases that will have to be caught later on for things I'm not aware of.
+  
+  Fix By: Brad House (@bradh352)
+
+Brad House (1 Sep 2020)
+- remove CURLDEBUG as per #82
+
+GitHub (1 Sep 2020)
+- [Erik Lax brought this change]
+
+  Detect remote DNS server does not support EDNS as per RFC 6891 (#244)
+  
+  EDNS retry should be based on FORMERR returned without an OPT RR record as per https://tools.ietf.org/html/rfc6891#section-7 rather than just treating any unexpected error condition as a reason to disable EDNS on the channel.
+  
+  Fix By: Erik Lax (@eriklax)
+
+Brad House (27 Aug 2020)
+- Fix for #345, don't use 'true' use 1
+
+GitHub (27 Aug 2020)
+- [Seraphime Kirkovski brought this change]
+
+  ares_gethostbyname: Fix AF_UNSPEC support when using an ip address (#204)
+  
+  fake_hostent() was not supporting AF_UNSPEC, so when an ip address was specified when using AF_UNSPEC it would attempt to do a DNS lookup rather than returning a fake hostent using the ip address.
+  
+  Fix By: Seraphime Kirkovski (@Seraphime)
+
+- [apenn-msft brought this change]
+
+  Tests should use dynamic system-assigned ports rather than static port (#346)
+  
+  The c-ares test suite was hardcoded to use port 5300 (and possibly 5301, 5302) for the test suite.  Especially in containers, there may be no guarantee these ports are available and cause tests to fail when they could otherwise succeed.  Instead, request the system to assign a port to use dynamically.  This is now the default.  To override, the test suite still takes the "-p <port>" option as it always has and will honor that.
+  
+  Fix By: Anthony Penniston (@apenn-msft)
+
+Brad House (25 Aug 2020)
+- Unset members of the addr struct contain garbage values (#343)
+  
+  When generating the ares_sockaddr data by getaddrinfo() it was only filling
+  in certain members while leaving others uninitialized.  This left garbage
+  data if a user tried to use the unset values.  memset() the ares_sockaddr
+  to 0 prior to filling in the values to prevent this.
+  
+  Reported By: @SmorkalovG
+  Fix By: Brad House (@bradh352)
+
+GitHub (24 Aug 2020)
+- [Jonathan Maye-Hobbs brought this change]
+
+  FQDN with trailing period should be queried first with larger ndot value (#345)
+  
+  If a query is performed for dynamodb.us-east-1.amazonaws.com. with ndots=5, it was attempting to search the search domains rather than just attempting the FQDN that was passed it.  This patch now at least attempts the FQDN first.
+  
+  We may need to determine if we should abort any further searching, however as is probably intended.
+  
+  Fix by: Jonathan Maye-Hobbs (@wheelpharoah)
+
+- [Gisle Vanem brought this change]
+
+  Update acountry.c country code list (#341)
+  
+  Updated country_list[]:
+   * 2-letter ISO-3166 country-codes.
+   * Add, rename some names + codes in accordance with latest table at https://en.wikipedia.org/wiki/ISO_3166-1.
+  
+  Fix By: Gisle Vanem (@gvanem)
+
+- [Bulat Gaifullin brought this change]
+
+  Test case should honor flag HAVE_WRITEV rather than WIN32 (#344)
+  
+  Test cases where not honoring the HAVE_WRITEV flag but instead using WIN32 to determine if WRITEV was available or not.  This patch fixes that.
+  
+  Fix By: Bulat Gaifullin (@bgaifullin)
+
+Brad House (18 Jul 2020)
+- Ensure c89 support
+  
+  A couple of for loops in Mac-specific code were using integer declarations
+  inside a for loop.  Move the declaration to the top of the preceding
+  code block to retain c89 compliance.
+  
+  Reported By: Jeffrey Walton
+
+GitHub (2 Jul 2020)
+- [Fionn Fitzmaurice brought this change]
+
+  Avoid buffer overflow in RC4 loop comparison (#336)
+  
+  The rc4 function iterates over a buffer of size buffer_len who's maximum
+  value is INT_MAX with a counter of type short that is not guaranteed to
+  have maximum size INT_MAX.
+  
+  In circumstances where short is narrower than int and where buffer_len
+  is larger than the maximum value of a short, it may be possible to loop
+  infinitely as counter will overflow and never be greater than or equal
+  to buffer_len.
+  
+  The solution is to make the comparison be between types of equal width.
+  This commit defines counter as an int.
+  
+  Fix By: Fionn Fitzmaurice (@fionn)
+
+- [anonymoushelpishere brought this change]
+
+  Updated help information for adig, acountry, and ahost. (#334)
+  
+  Provide more descriptive help information for various utilities.
+  
+  Fix By: @anonymoushelpishere
+
+- [lutianxiong brought this change]
+
+  avoid read-heap-buffer-overflow (#332)
+  
+  Fix invalid read in ares_parse_soa_reply.c found during fuzzing
+  
+  Fixes Bug: #333
+  Fix By: lutianxiong (@ltx2018)
+
+- [Ivan Baidakou brought this change]
+
+  Fix: sizeof(sizeof(addr.saX)) -> sizeof(addr.saX) in readaddrinfo (#331)
+  
+  Looks like a sed-gone-wrong, a sizeof inside of a sizeof.
+  
+  Fix By: Ivan Baidakou (@basiliscos)
+
 Version 1.16.1 (11 May 2020)
 
 Brad House (11 May 2020)
@@ -4524,200 +5050,3 @@ Yang Tse (21 Jun 2009)
 
 - Refactor how libraries are checked for connect() function,
   and check for connect() as it is done for other functions.
-
-Gisle Vanem (20 Jun 2009)
-- Remove unneeded defines.
-
-- Use select_s() and not select().
-
-Yang Tse (19 Jun 2009)
-- sclose() function-like macro definition used to close a socket,
-  now solely based on HAVE_CLOSESOCKET and HAVE_CLOSESOCKET_CAMEL
-  config file preprocessor definitions.
-
-- add CloseSocket camel case function check
-
-- check for socket() and closesocket() as it is done for other functions
-
-- Remove HAVE_CONFIG_H definition from here,
-  CFLAGS from common.dj already defines it.
-
-- initial step towards decoupling c-ares from libcurl for DOS
-
-- don't ignore these subdirs, they must be removed first
-
-- Remove DEBUGBUILD symbol definition, is not required for programs using the library.
-
-- DEBUGBUILD symbol definition for debug builds
-
-- ignore some subdirs
-
-- fix comment
-
-- Try to make more clear that --enable-curldebug has nothing to do with --enable-debug for this library.
-
-- Revert last change, it is inappropriate.
-
-Gisle Vanem (12 Jun 2009)
-- Replace CURLDEBUG with DEBUGBUILD.
-
-Yang Tse (11 Jun 2009)
-- when running automake copy missing files instead of symlinking them
-
-- Adjusted to take in account that...
-  
-  With the curl memory tracking feature decoupled from the debug build feature,
-  CURLDEBUG and DEBUGBUILD preprocessor symbol definitions are used as follows:
-  
-  CURLDEBUG used for curl debug memory tracking specific code (--enable-curldebug)
-  
-  DEBUGBUILD used for debug enabled specific code (--enable-debug)
-
-- c-ares' --enable-debug --enable-curldebug decoupling follow-up
-
-- mention last changes
-
-- Remove buildconf.bat from release and daily snapshot archives.
-  
-  buildconf.bat is only for CVS tree builds.
-
-- Ensure that buildconf.bat does nothing unless it is used with a CVS checkout.
-
-- CVS-INFO file only present in CVS tree, never in release nor daily snapshot
-  archives. Used as a sentinel file in buildconf.bat to differentiate CVS builds.
-
-Gisle Vanem (8 Jun 2009)
-- Update comment about "ML". Removed "-D_USE_32BIT_TIME_T" (not a requirement).
-
-Yang Tse (8 Jun 2009)
-- just comment it out
-
-- For debugging purposes...
-  
-  Disable the '-export-symbols-regex' to discard this as the origin
-  of link failures related with shared libraries and non-GNU linkers.
-
-- c-ares Makefile.am back to using $(top_builddir) for *_LDADD
-
-- c-ares' -no-undefined and --enable-curldebug adjustments
-
-- Use relative path to built c-ares tree libtool library
-
-- John E. Malmberg noticed that the configure script was failing to detect the
-  timeval struct on VMS when building with _XOPEN_SOURCE_EXTENDED undefined due
-  to definition taking place in socket.h instead of time.h
-
-- Fix compiler warning: out of bound access
-
-- fix compilation on AIX
-
-- c-ares' --enable-curldebug adjustments
-
-- Remove temporarily introduced memory leak.
-
-- Temporarily introduce a memory leak to verify curl debug memory tracking works.
-
-- Allow curl debug memory tracking when building a shared library on
-  systems which support external, undefined, symbols in shared libraries.
-
-Daniel Stenberg (26 May 2009)
-- language fix
-
-Yang Tse (26 May 2009)
-- Make ares_init(), ares_dup() and ares_init_options() return ARES_ENOTINITIALIZED
-  if library initialization has not been performed calling ares_library_init().
-
-- c-ares's --enable-curldebug configure option decoupled from c-ares's --enable-debug
-
-- Prevent copying 'sourced' manpages for build targets that don't use them.
-
-Daniel Stenberg (23 May 2009)
-- minor edits
-
-Yang Tse (21 May 2009)
-- Include .pdf versions of c-ares man pages in distribution tarball.
-
-- Allow generation of .html and .pdf versions of c-ares man pages.
-
-Gisle Vanem (21 May 2009)
-- $(OBJ_DIR)/ares_getopt.o must be cleaned explicitly.
-
-Yang Tse (20 May 2009)
-- Mention last changes
-
-- Initial ares_library_cleanup(3) man page
-
-- Update man page
-
-- Update man page
-
-- Initial ares_library_init(3) man page attempt
-
-- Force revision update, to force CVS to update the $Id date string format
-
-- Add same copyright notice as other c-ares files
-
-- Fix case
-
-- Remove run-time requirement for advapi32.dll since
-  c-ares can work even with no advapi32.dll at all.
-
-- Intentionally avoid checking if the address of SystemFunction036, a.k.a.
-  RtlGenRandom, has been located or not. This function is only available on
-  WinXP and later. When unavailable c-ares uses portable rand() function.
-
-- - Provide in external interface preprocessor symbol definitions for
-    CARES_HAVE_ARES_LIBRARY_INIT and CARES_HAVE_ARES_LIBRARY_CLEANUP
-    to ease the use of new capabilities.
-  
-  - Move ares_version() prototype to ares.h
-
-- Introduction of ares_library_init() and ares_library_cleanup()
-
-- Introduction of ares_library_init() and ares_library_cleanup()
-
-- remove outdated comment
-
-- Fix preprocessor conditional expression
-
-- fiX *__SOCKLEN_T definitions for remaining targets
-
-- *__SOCKLEN_T definitions for OS400 already fixed
-
-- fIX *__SOCKLEN_T definitions for SYMBIAN32 and VMS targets
-
-Daniel Stenberg (11 May 2009)
-- - Gregor Jasny made c-ares link with libtool 's -export-symbols-regex option to
-    only expose functions starting with ares_.
-
-Yang Tse (11 May 2009)
-- Remove experimental check. Currently there's no need for it.
-
-- Fix an m4 overquoting triggering a spurious 'AS_TR_CPP' symbol definition
-  attempt in generated config.h
-
-- Proper naming for the experimental compiler test and moved to *-compilers.m4
-
-- Moved *_CHECK_COMPILER_HALT_ON_ERROR and *_CHECK_COMPILER_ARRAY_SIZE_NEGATIVE to *-compilers.m4 along with other *_CHECK_COMPILER_*
-
-- fIX *__SOCKLEN_T definitions for OS400 and generic GCC targets
-
-- fIX *__SOCKLEN_T definitions for MVS and 370 targets
-
-- fIX *__SOCKLEN_T definitions for several Windows target tool-chains
-
-- HP-UX's X/Open network library requirement check follow-up
-
-- HP-UX's X/Open network library requirement check follow-up
-
-- Use build-time configured ares_socklen_t instead of socklen_t
-
-- David McCreedy's "TPF-platform specific changes to various files" patch follow-up
-
-Daniel Stenberg (1 May 2009)
-- s/libcurl/c-ares
-
-- version number typo fix
-
-Yang Tse (1 May 2009)
-- David McCreedy's "TPF-platform specific changes to various files" patch

contrib/libs/c-ares/CONTRIBUTING.md

@@ -0,0 +1,15 @@
+Contributing to c-ares
+======================
+
+To contribute patches to c-ares, please generate a GitHub pull request
+and follow these guidelines:
+
+ - Check that the Travis builds are green for your pull request.
+ - Please update the test suite to add a test case for any new functionality.
+ - Build the library with `./configure --enable-debug --enable-maintainer-mode` and
+   ensure there are no new warnings.
+
+To improve the chances of the c-ares maintainers responding to your request:
+
+ - Also send an email to the mailing list at `c-ares@cool.haxx.se` describing your change.
+ - To follow any associated discussion, please subscribe to the [mailing list](http://cool.haxx.se/mailman/listinfo/c-ares).

contrib/libs/c-ares/INSTALL.md

@@ -39,7 +39,6 @@ unpacked the source archive):
 
     ./configure
     make
-    make ahost adig acountry (optional)
     make install
 
 You probably need to be root when doing the last command.
@@ -334,11 +333,6 @@ provided that you installed Visual C/C++ 6 in the default directory.
 Further details in [README.msvc](README.msvc)
 
 
-### MSVC IDEs
-
-Details in [README.msvc](README.msvc)
-
-
 ### Important static c-ares usage note
 
 When building an application that uses the static c-ares library, you must

contrib/libs/c-ares/README.msvc

@@ -1,6 +1,6 @@
 
 
-                          ___       __ _ _ __ ___  ___ 
+                          ___       __ _ _ __ ___  ___
                          / __| ___ / _` | '__/ _ \/ __|
                         | (_  |___| (_| | | |  __/\__ \
                          \___|     \__,_|_|  \___||___/
@@ -64,46 +64,6 @@
   to c-ares source folder where Makefile.msvc file is located.
 
 
-  How to build using Visual Studio 6 IDE
-  --------------------------------------
-
-  A VC++ 6.0 reference workspace (vc6aws.dsw) is available within the 'vc'
-  folder to allow proper building of the library and sample programs.
-
-  1) Open the vc6aws.dsw workspace with MSVC6's IDE.
-  2) Select 'Build' from top menu.
-  3) Select 'Batch Build' from dropdown menu.
-  4) Make sure that the sixteen project configurations are 'checked'.
-  5) Click on the 'Build' button.
-  6) Once the sixteen project configurations are built you are done.
-
-  Dynamic and static c-ares libraries are built in debug and release flavours,
-  and can be located each one in its own subdirectory, dll-debug, dll-release,
-  lib-debug and lib-release, all of them below the 'vc\cares' subdirectory.
-
-  In the same way four executable versions of each sample program are built,
-  each using its respective library. The resulting sample executables are
-  located in its own subdirectory, dll-debug, dll-release, lib-debug and
-  lib-release, below the 'vc\acountry', 'vc\adig' and 'vc\ahost'folders.
-
-  These reference VC++ 6.0 configurations are generated using the dynamic CRT.
-
-
-  How to build using Visual Studio 2003 or newer IDE
-  --------------------------------------------------
-
-  First you have to convert the VC++ 6.0 reference workspace and project files
-  to the Visual Studio IDE version you are using, following next steps:
-
-  1) Open vc\vc6aws.dsw with VS20XX.
-  2) Allow VS20XX to update all projects and workspaces.
-  3) Save ALL and close VS20XX.
-  4) Open vc\vc6aws.sln with VS20XX.
-  5) Select batch build, check 'all' projects and click 'build' button.
-
-  Same comments relative to generated files and folders as done above for
-  Visual Studio 6 IDE apply here.
-
 
   Relationship between c-ares library file names and versions
   -----------------------------------------------------------
@@ -139,4 +99,4 @@
 
 
 Have Fun!
- 
+

contrib/libs/c-ares/RELEASE-NOTES

@@ -1,30 +1,83 @@
-c-ares version 1.16.1
+c-ares version 1.17.2
+
+This is a security and bugfix release.  It addresses a few security related
+issues along with various bugfixes mostly related to portability.
 
 Security:
- o Prevent possible use-after-free and double-free in ares_getaddrinfo() if
-   ares_destroy() is called prior to ares_getaddrinfo() completing.  Reported
-   by Jann Horn at Google Project Zero.
+ o NodeJS passes NULL for addr and 0 for addrlen to ares_parse_ptr_reply() on
+   systems where malloc(0) returns NULL.  This would cause a crash. [8]
+ o When building c-ares with CMake, the RANDOM_FILE would not be set and
+   therefore downgrade to the less secure random number generator [12]
+ o If ares_getaddrinfo() was terminated by an ares_destroy(), it would cause
+   a crash [13]
+ o Crash in sortaddrinfo() if the list size equals 0 due to an unexpected
+   DNS response [14]
+ o Expand number of escaped characters in DNS replies as per RFC1035 5.1 to
+   prevent spoofing [16], [17]
+ o Perform validation on hostnames to prevent possible XSS due to applications
+   not performing valiation themselves [18]
 
 Changes:
- o Allow TXT records on CHAOS qclass.  Used for retriving things like
-   version.bind, version.server, authoris.bind, hostname.bind, and id.server.
-   [3]
+ o Use non-blocking /dev/urandom for random data to prevent early startup
+   performance issues [5]
+ o z/OS port [6]
+ o ares_malloc(0) is now defined behavior (returns NULL) rather than
+   system-specific to catch edge cases [7]
 
 Bug fixes:
- o Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
- o Silence false cast-align compiler warnings due to valid casts of
-   struct sockaddr to struct sockaddr_in and struct sockaddr_in6.
- o MacOS should use libresolv for retrieving DNS servers, like iOS
- o CMake build system should populate the INCLUDE_DIRECTORIES property of 
-   installed targets [2]
- o Correct macros in use for the ares_getaddrinfo.3 man page
+ o Fuzz testing files were not distributed with official archives [1]
+ o Building tests should not force building of static libraries except on
+   Windows [2]
+ o Windows builds of the tools would fail if built as static due to a missing
+   CARES_STATICLIB definition [3]
+ o Relative headers must use double quotes to prevent pulling in a system
+   library [4]
+ o Fix OpenBSD building by implementing portability updates for including
+   arpa/nameser.h [9]
+ o Fix building out-of-tree for autotools [10]
+ o Make install on MacOS/iOS with CMake was missing the bundle destination so
+   libraries weren't actually installed [11]
+ o Fix retrieving DNS server configuration on MacOS and iOS if the configuration
+   did not include search domains [15]
+ o ares_parse_a_reply and ares_parse_aaa_reply were erroneously using strdup()
+   instead of ares_strdup() [19]
+
 
 Thanks go to these friendly people for their efforts and contributions:
- Brad House (@bradh352), Daniel Stenberg (@bagder), Dmitry Igrishin (@dmitigr),
- Jann Horn, Shelly Vohr, Teemu R (@rytilahti)
- (6 contributors)
+  Anton Danielsson (@anton-danielsson)
+  Brad House (@bradh352)
+  Daniel Stenberg (@bagder)
+  Dhrumil Rana (@dhrumilrana)
+  František Dvořák (@valtri)
+  @halx99
+  Jay Freeman (@saurik)
+  Jean-pierre Cartal (@jeanpierrecartal)
+  Michael Kourlas
+  Philipp Jeitner
+  @vburdo
+(11 contributors)
 
 References to bug reports and discussions on issues:
- [1] = https://github.com/c-ares/c-ares/pull/328
- [2] = https://github.com/c-ares/c-ares/pull/323
- [3] = https://github.com/c-ares/c-ares/pull/321
+ [1] = https://github.com/c-ares/c-ares/issues/379
+ [2] = https://github.com/c-ares/c-ares/issues/380
+ [3] = https://github.com/c-ares/c-ares/issues/384
+ [4] = https://github.com/c-ares/c-ares/pull/386
+ [5] = https://github.com/c-ares/c-ares/pull/391
+ [6] = https://github.com/c-ares/c-ares/pull/390
+ [7] = https://github.com/c-ares/c-ares/commit/485fb66
+ [8] = https://github.com/c-ares/c-ares/issues/392
+ [9] = https://github.com/c-ares/c-ares/issues/388
+ [10] = https://github.com/c-ares/c-ares/pull/394
+ [11] = https://github.com/c-ares/c-ares/pull/395
+ [12] = https://github.com/c-ares/c-ares/pull/397
+ [13] = https://github.com/c-ares/c-ares/commit/df94703
+ [14] = https://github.com/c-ares/c-ares/pull/400
+ [15] = https://github.com/c-ares/c-ares/pull/401
+ [16] = https://github.com/c-ares/c-ares/commit/362f91d
+ [17] = https://github.com/c-ares/c-ares/commit/44c009b
+ [18] = https://github.com/c-ares/c-ares/commit/c9b6c60
+ [19] = https://github.com/c-ares/c-ares/pull/408
+
+
+
+

contrib/libs/c-ares/RELEASE-PROCEDURE.md

@@ -1,53 +0,0 @@
-c-ares release procedure - how to do a release
-==============================================
-
-in the source code repo
------------------------
-
-- edit `RELEASE-NOTES` to be accurate
-
-- edit `Makefile.am`'s `CARES_VERSION_INFO`, and `CMakeLists.txt`'s
-  `CARES_LIB_VERSIONINFO` set to the same value to denote the current shared
-  object versioning.
-
-- make sure all relevant changes are committed on the master branch
-
-- tag the git repo in this style: `git tag -a cares-1_14_0` -a annotates the
-  tag and we use underscores instead of dots in the version number.
-
-- run "./maketgz 1.14.0" to build the release tarball. It is important that
-  you run this on a machine with the correct set of autotools etc installed
-  as this is what then will be shipped and used by most users on *nix like
-  systems.
-
-- push the git commits and the new tag
-
-- gpg sign the tarball
-
-- upload the resulting files to https://c-ares.haxx.se/download/
-
-- update `ares_version.h` for the next version
-
-in the c-ares-www repo
-----------------------
-
-- edit `index.t` (version number and date),
-
-- edit `changelog.t` (add the new release in there)
-
-- commit all local changes
-
-- tag the repo with the same tag as used for the source repo
-
-- push the git commits and the new tag
-
-inform
-------
-
-- send an email to the c-ares mailing list. Insert the RELEASE-NOTES into the
-  mail.
-
-celebrate
----------
-
-- suitable beverage intake is encouraged for the festivities

contrib/libs/c-ares/SECURITY.md

@@ -0,0 +1,100 @@
+c-ares security
+===============
+
+This document is intended to provide guidance on how security vulnerabilities
+should be handled in the c-ares project.
+
+Publishing Information
+----------------------
+
+All known and public c-ares vulnerabilities will be listed on [the c-ares web
+site](https://c-ares.haxx.se/vulns.html).
+
+Security vulnerabilities should not be entered in the project's public bug
+tracker unless the necessary configuration is in place to limit access to the
+issue to only the reporter and the project's security team.
+
+Vulnerability Handling
+----------------------
+
+The typical process for handling a new security vulnerability is as follows.
+
+No information should be made public about a vulnerability until it is
+formally announced at the end of this process. That means, for example that a
+bug tracker entry must NOT be created to track the issue since that will make
+the issue public and it should not be discussed on the project's public
+mailing list. Also messages associated with any commits should not make any
+reference to the security nature of the commit if done prior to the public
+announcement.
+
+- The person discovering the issue, the reporter, reports the vulnerability
+  privately to `c-ares-security@haxx.se`. That's an email alias that reaches a
+  handful of selected and trusted people.
+
+- Messages that do not relate to the reporting or managing of an undisclosed
+  security vulnerability in c-ares are ignored and no further action is
+  required.
+
+- A person in the security team sends an e-mail to the original reporter to
+  acknowledge the report.
+
+- The security team investigates the report and either rejects it or accepts
+  it.
+
+- If the report is rejected, the team writes to the reporter to explain why.
+
+- If the report is accepted, the team writes to the reporter to let him/her
+  know it is accepted and that they are working on a fix.
+
+- The security team discusses the problem, works out a fix, considers the
+  impact of the problem and suggests a release schedule. This discussion
+  should involve the reporter as much as possible.
+
+- The release of the information should be "as soon as possible" and is most
+  often synced with an upcoming release that contains the fix. If the
+  reporter, or anyone else, thinks the next planned release is too far away
+  then a separate earlier release for security reasons should be considered.
+
+- Write a security advisory draft about the problem that explains what the
+  problem is, its impact, which versions it affects, solutions or
+  workarounds, when the release is out and make sure to credit all
+  contributors properly.
+
+- Request a CVE number from
+  [distros@openwall](http://oss-security.openwall.org/wiki/mailing-lists/distros)
+  when also informing and preparing them for the upcoming public security
+  vulnerability announcement - attach the advisory draft for information. Note
+  that 'distros' won't accept an embargo longer than 19 days.
+
+- Update the "security advisory" with the CVE number.
+
+- The security team commits the fix in a private branch. The commit message
+  should ideally contain the CVE number. This fix is usually also distributed
+  to the 'distros' mailing list to allow them to use the fix prior to the
+  public announcement.
+
+- At the day of the next release, the private branch is merged into the master
+  branch and pushed. Once pushed, the information is accessible to the public
+  and the actual release should follow suit immediately afterwards.
+
+- The project team creates a release that includes the fix.
+
+- The project team announces the release and the vulnerability to the world in
+  the same manner we always announce releases. It gets sent to the c-ares
+  mailing list and the oss-security mailing list.
+
+- The security web page on the web site should get the new vulnerability
+  mentioned.
+
+C-ARES-SECURITY (at haxx dot se)
+--------------------------------
+
+Who is on this list? There are a couple of criteria you must meet, and then we
+might ask you to join the list or you can ask to join it. It really isn't very
+formal. We basically only require that you have a long-term presence in the
+c-ares project and you have shown an understanding for the project and its way
+of working. You must've been around for a good while and you should have no
+plans in vanishing in the near future.
+
+We do not make the list of partipants public mostly because it tends to vary
+somewhat over time and a list somewhere will only risk getting outdated.