dnsmasq

wt/dnsmasq

0 Fork 0

mirror of http://thekelleys.org.uk/git/dnsmasq.git synced 2026-10-24 12:04:38 +00:00

T

Simon Kelley d823d8e9cd Fix OOB-read crash in get_rdata().

get_rdata() contains another instance of a crash caused by
a false value of RDLEN in a resource-record.

An RR containing name which is longer than the rdlen of the RR can
get get_rdata into a state where it calculates the length of the data
following the name as a negative number which is then promoted
to a very large positive number, and causing SIGSEGV.

This can be triggered by crafted packets from malicous DNS servers,
but only when DNSSEC validation is enabled. The attack packets do not
have to be correctly DNSSEC signed.

Thanks to Tristan G. for spotting this problem.

Also fix error handling for RRs with a fixed size fields in the specification
where the rrsize indicates that there are zero bytes in that position.

2026-06-04 12:47:18 +01:00

bld

Remove hash-questions.c - no longer required.

2024-11-02 21:29:47 +00:00

contrib

Fix OOB writes in contrib/leasequesry/leasequery.c

2026-05-30 15:58:52 +01:00

dbus

Allow configuring filter-A/AAAA via dbus.

2023-03-08 15:35:05 +00:00

logo

tweak favicon