Great to see, it still is being maintained.<br>Abhijit<br><br><div class="gmail_quote">On Mon, Dec 27, 2010 at 12:03 PM, Michael Tokarev <span dir="ltr"><<a href="mailto:mjt@tls.msk.ru">mjt@tls.msk.ru</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">The version 0.1. of small dns client (stub) resolver library<br>
has been released, after more than 3 years of inactivity.<br>
<br>
The library is available at the usual location, see the homepage<br>
at <a href="http://www.corpit.ru/mjt/udns.html" target="_blank">http://www.corpit.ru/mjt/udns.html</a> .<br>
<br>
This is the first "alpha" release, numbered 0.1 - first release<br>
with just two numbers in the version. All previous versions<br>
were "preview" releases, with number strings in form 0.0.n.<br>
<br>
There isn't many changes between the latest 0.0.9 version<br>
and the newly announced 0.1 version. Here's the brief of<br>
the changes, also available in the NEWS document:<br>
<br>
0.1 (Dec 2010)<br>
<br>
- bugfix: udns_new(old) - when actually cloning another context -<br>
makes the new context referencing memory from old, which leads<br>
to crashes when old is modified later<br>
<br>
- use random queue IDs (the 16bit qID) in queries instead of sequentional<br>
ones, based on simple pseudo-random RNG by Bob Jenkins (udns_jran.[ch]).<br>
Some people believe that this improves security (CVE-2008-1447). I'm<br>
still not convinced (see comments in udns_resolver.c), but it isn't<br>
difficult to add after all.<br>
<br>
- deprecate dns_random16() function which was declared in udns.h<br>
(not anymore) but never documented. In order to keep ABI compatible<br>
it is still exported.<br>
<br>
- library has a way now to set query flags (DNS_SET_DO; DNS_SET_CD).<br>
<br>
- dnsget now prints non-printable chars in all strings in DNS RRs using<br>
decimal escape sequences (\%03u) instead of hexadecimal (\%02x) when<br>
before - other DNS software does it like this.<br>
<br>
- recognize a few more record types in dnsget, notable some DNSSEC RRs;<br>
add -f option for dnsget to set query flags.<br>
<br>
- udns is not a Debian native package anymore (was a wrong idea)<br>
<br>
<br>
The most important and long-discussed change is the queue ID<br>
randomization. I'm still against this change since it is nothing<br>
more but a false sense of security, but many users asked for this<br>
change, and it wasn't a big deal to implement it, so here we go.<br>
<br>
I mentioned in the past that I want to change API of the library.<br>
After some thinking I can now declare that it is easy to implement<br>
these changes without breaking current API, but by adding the new<br>
API to be available in parallel with the current one. The API<br>
change was my main showstopper for the 0.1 release, so now it's<br>
gone.<br>
<br>
As can be seen from the NEWS section above, there's just one<br>
bugfix change, fixing a very rarely used codepath (cloning an<br>
existing dns_ctx structure). Other than that, there's no known<br>
programming bugs in the library, despite the more-than-3-year<br>
delay between previous 0.0.9 and current 0.1 releases.<br>
<br>
So here goes the 0.1 version.<br>
<br>
Debian packages for it are available from the home page too.<br>
<br>
Enjoy!<br>
<br>
/mjt<br>
_______________________________________________<br>
udns mailing list<br>
<a href="mailto:udns@corpit.ru">udns@corpit.ru</a><br>
<a href="http://www.corpit.ru/mailman/listinfo/udns" target="_blank">http://www.corpit.ru/mailman/listinfo/udns</a><br>
</blockquote></div><br>