c85aed0869
described here: http://article.gmane.org/gmane.network.djbdns/13864 Add mutually exclusive options, both by Jeff King, to address the dnscache poisoning weaknesses described in CVE-2008-4392: * "djbdns-qmerge1" (from http://www.your.org/dnscache/) * "djbdns-qmerge2" (from http://article.gmane.org/gmane.network.djbdns/13965) Both options are included because qmerge1 is better tested but has known shortcomings, while qmerge2 is probably more correct but (as yet) less well tested. Bump PKGREVISION.
13 lines
462 B
Text
13 lines
462 B
Text
$NetBSD: patch-ac,v 1.5 2009/04/22 04:48:13 schmonz Exp $
|
|
|
|
--- response.c.orig 2001-02-11 16:11:45.000000000 -0500
|
|
+++ response.c
|
|
@@ -34,7 +34,7 @@ int response_addname(const char *d)
|
|
uint16_pack_big(buf,49152 + name_ptr[i]);
|
|
return response_addbytes(buf,2);
|
|
}
|
|
- if (dlen <= 128)
|
|
+ if ((dlen <= 128) && (response_len < 16384))
|
|
if (name_num < NAMES) {
|
|
byte_copy(name[name_num],dlen,d);
|
|
name_ptr[name_num] = response_len;
|