Harshal Pradhan's use-after-free bug with ares is now known bug #24 to be

fixed after 7.14.1

diff --git a/TODO-RELEASE b/TODO-RELEASE
index 10d99f6..86a70e9 100644 (file)
--- a/TODO-RELEASE
+++ b/TODO-RELEASE
@@ -5,8 +5,6 @@ To get fixed in 7.14.1 (planned release: August 2005)
 
 60 - CONNECT 407 responses that kills the connection
 
-61 - Harshal Pradhan's Use-after-free with libcurl+ares on windows bug
-
 62 - The sending big POST data to HTTPS bug
 
 63 - 

diff --git a/docs/KNOWN_BUGS b/docs/KNOWN_BUGS
index f384896..a8b2989 100644 (file)
--- a/docs/KNOWN_BUGS
+++ b/docs/KNOWN_BUGS
@@ -3,6 +3,12 @@ join in and help us correct one or more of these! Also be sure to check the
 changelog of the current development status, as one or more of these problems
 may have been fixed since this was written!
 
+24. Harshal Pradhan's Use-after-free with libcurl+ares. This probably occurs
+  because there is a pending ares callback that gets called after the
+  connection struct has been freed in libcurl:
+        http://curl.haxx.se/mail/lib-2005-08/0022.html
+  Fixing this properly most likely requires a new c-ares function.
+
 23. We don't support SOCKS for IPv6. We don't support FTPS over a SOCKS proxy.
   We don't have any test cases for SOCKS proxy. We probably have even more
   bugs and lack of features when a SOCKS proxy is used.