Harshal Pradhan's use-after-free bug with ares is now known bug #24 to be

fixed after 7.14.1

diff --git a/TODO-RELEASE b/TODO-RELEASE
index 10d99f6117f10860ca8e3b14b90d46132de7e295..86a70e929eccafc2f721418c711485c30d91af5a 100644 (file)
--- a/TODO-RELEASE
+++ b/TODO-RELEASE
@@ -5,8 +5,6 @@ To get fixed in 7.14.1 (planned release: August 2005)
 
 60 - CONNECT 407 responses that kills the connection
 
-61 - Harshal Pradhan's Use-after-free with libcurl+ares on windows bug
-
 62 - The sending big POST data to HTTPS bug
 
 63 - 

diff --git a/docs/KNOWN_BUGS b/docs/KNOWN_BUGS
index f384896af93ce6d06c9ed1fcf70464d684a8e5e3..a8b29896dcd77df170616853a9c98dcbba02f747 100644 (file)
--- a/docs/KNOWN_BUGS
+++ b/docs/KNOWN_BUGS
@@ -3,6 +3,12 @@ join in and help us correct one or more of these! Also be sure to check the
 changelog of the current development status, as one or more of these problems
 may have been fixed since this was written!
 
+24. Harshal Pradhan's Use-after-free with libcurl+ares. This probably occurs
+  because there is a pending ares callback that gets called after the
+  connection struct has been freed in libcurl:
+        http://curl.haxx.se/mail/lib-2005-08/0022.html
+  Fixing this properly most likely requires a new c-ares function.
+
 23. We don't support SOCKS for IPv6. We don't support FTPS over a SOCKS proxy.
   We don't have any test cases for SOCKS proxy. We probably have even more
   bugs and lack of features when a SOCKS proxy is used.