http://bugs.winehq.org/show_bug.cgi?id=33144
--- Comment #11 from Hans Leidekker hans@meelstraat.net 2013-03-08 10:43:12 CST --- (In reply to comment #10)
Yes, I did and this works in Windows just fine. The DNS responses in Wireshark are roughly the same in Windows and OS X. Could this be addressed by checking the return value of res_query against NS_PACKETSZ and then dynamically reallocating the buffer if necessary?
I suspect these large packets have a maximum size too. If it's EDNS it appears to be 4096 bytes. I don't know what else might be needed to parse them correctly.