diff options
| author |   Thomas Deutschmann <whissi@gentoo.org> | 2016-12-02 19:53:41 +0100 |
|---|---|---|
| committer | Thomas Deutschmann <whissi@gentoo.org> | 2016-12-03 21:56:22 +0100 |
| commit | f19fd949c1e9d06252fdb59c0f1fb0142cb7d9c8 (patch) | |
| tree | 056b7c318c933d46e145b59de375c15e7fba88b3 /net-dns/djbdns/files | |
| parent | x11-misc/xosview: Bump to version 1.19 (diff) | |
| download | gentoo-f19fd949c1e9d06252fdb59c0f1fb0142cb7d9c8.tar.gz gentoo-f19fd949c1e9d06252fdb59c0f1fb0142cb7d9c8.tar.bz2 gentoo-f19fd949c1e9d06252fdb59c0f1fb0142cb7d9c8.zip | |
net-dns/djbdns: Sec rev bump to v1.05-r32 (bug #404959)
CVE-2012-1191
Closes: https://github.com/gentoo/gentoo/pull/2988
Package-Manager: portage-2.3.2
Diffstat (limited to 'net-dns/djbdns/files')
| -rw-r--r-- | net-dns/djbdns/files/CVE2012-1191_0001-ghost-domain-attack.patch | 22 |
1 files changed, 22 insertions, 0 deletions
diff --git a/net-dns/djbdns/files/CVE2012-1191_0001-ghost-domain-attack.patch b/net-dns/djbdns/files/CVE2012-1191_0001-ghost-domain-attack.patch new file mode 100644 index 000000000000..8d9b194411f3 --- /dev/null +++ b/net-dns/djbdns/files/CVE2012-1191_0001-ghost-domain-attack.patch @@ -0,0 +1,22 @@ +Fix ghost domain attack vulnerability (CVE-2012-1191) + +Author: Peter Conrad <conrad@tivano.de> +Origin: http://marc.info/?l=djbdns&m=134269902121506&w=2 + +Gentoo-Bug: https://bugs.gentoo.org/404959 + +--- a/query.c ++++ b/query.c +@@ -792,6 +792,12 @@ static int doit(struct query *z,int state) + } + + if (!dns_domain_suffix(t1,control)) { i = j; continue; } ++ ++ if (!flagforwardonly && byte_equal(type,2,DNS_T_NS) && dns_domain_equal(t1,control)) { ++ char dummy[256]; ++ if (!roots(dummy,control)) { i = j; continue; } ++ } ++ + if (!roots_same(t1,control)) { i = j; continue; } + + if (byte_equal(type,2,DNS_T_ANY)) |