← Back to branch summary

~ubuntu-branches/ubuntu/trusty/maradns/trusty-proposed

« back to all changes in this revision

Viewing changes to deadwood-3.2.05/update/3.2.02/deadwood-3.2.01-harden.patch

  • Committer: Package Import Robot
  • Author(s): Dariusz Dwornikowski
  • Date: 2014-02-16 19:36:04 UTC
  • mfrom: (1.2.11) (21.1.11 experimental)
  • Revision ID: package-import@ubuntu.com-20140216193604-xtmcopn9pilzszae
Tags: 2.0.09-1
http://bugs.debian.org/739084
http://bugs.debian.org/739755
http://bugs.debian.org/710903
http://bugs.debian.org/709826
http://bugs.debian.org/701657
* New maintainer (Closes: #739084)
* New upstream release to unstable
* Several security bugs (Closes: #739755)
   - security bugfix for CVE-2011-5055, CVE-2011-5056, CVE-2012-0024,
   CVE-2012-1570
   - security bugfix agains blind spoofing attack (no CVE number)
   - security bugfix for packet of death attack (no CVE number)
* Bump standards to 3.9.5
* Updated d/postinst to no longer modify conffiles (Closes: #710903)
* Init script fixed (Closes: #709826)
* --reinstall no longer kills the process (Closes: #701657)
* Updated old d/changelog entries, added information when the CVEs were
  fixed: 2.0.06-1, 2.0.04-1, 1.4.11-1, 1.2.12.06-1, 1.2.12.05-1, 1.0.28-1

Show diffs side-by-side

added added

removed removed

Lines of Context:
deadwood-3.2.05/update/3.2.02/deadwood-3.2.01-harden.patch
 
1
--- deadwood-3.2.01/src/DwUdpSocket.c   2012-02-11 14:15:43.000000000 -0600
 
2
+++ deadwood-3.2.02/src/DwUdpSocket.c   2012-02-12 11:25:57.000000000 -0600
 
3
@@ -813,6 +813,9 @@
 
4
         } else {
 
5
                 answer = dw_packet_to_cache(packet,count,is_nxdomain);
 
6
                 decomp = dwc_decompress(question,answer);
 
7
+               if(decomp == 0) {
 
8
+                        goto catch_cache_dns_reply;
 
9
+                }
 
10
                 if(dwc_has_bad_ip(decomp,blacklist_dict)) {
 
11
                         ret = -2; /* Tell caller we need synth "not there" */
 
12
                         goto catch_cache_dns_reply;