~vcs-imports/dnsmasq/master : changes

~vcs-imports/dnsmasq/master » Changes from revision 1127

From Revision 1127 to 1108

Rev	Summary	Authors	Tags	Date
1127	Fix logic on EDNS0 headers. Fix logic on EDNS0 headers. The logic to determine is an EDNS0 header was added was wrong. It compared the packet length before and after the operations on the EDNS0 header, but these can include adding options to an existing EDNS0 header. So a query may have an existing EDNS0 header, which is extended, and logic thinks that it had a header added de-novo. Replace this with a simpler system. Check if the packet has an EDSN0 header, do the updates/additions, and then check again. If it didn't have one initially, but it has one laterly, that's the correct condition to strip the header from a reply, and to assume that the client cannot handle packets larger than 512 bytes.	Simon Kelley		6 years ago
1126	Use IP[V6]_UNICAST_IF socket option instead of SO_BINDTODEVI... Use IP[V6]_UNICAST_IF socket option instead of SO_BINDTODEVICE for DNS. dnsmasq allows to specify a interface for each name server passed with the -S option or pushed through D-Bus; when an interface is set, queries to the server will be forced via that interface. Currently dnsmasq uses SO_BINDTODEVICE to enforce that traffic goes through the given interface; SO_BINDTODEVICE also guarantees that any response coming from other interfaces is ignored. This can cause problems in some scenarios: consider the case where eth0 and eth1 are in the same subnet and eth0 has a name server ns0 associated. There is no guarantee that the response to a query sent via eth0 to ns0 will be received on eth0 because the local router may have in the ARP table the MAC address of eth1 for the IP of eth0. This can happen because Linux sends ARP responses for all the IPs of the machine through all interfaces. The response packet on the wrong interface will be dropped because of SO_BINDTODEVICE and the resolution will fail. To avoid this situation, dnsmasq should only restrict queries, but not responses, to the given interface. A way to do this on Linux is with the IP_UNICAST_IF and IPV6_UNICAST_IF socket options which were added in kernel 3.4 and, respectively, glibc versions 2.16 and 2.26. Reported-by: Hector Martin <marcan@marcan.st> Signed-off-by: Beniamino Galvani <bgalvani@redhat.com>	Simon Kelley		6 years ago
1125	Fix search_servers() segfault with DNSSEC. Fix search_servers() segfault with DNSSEC. --address=/example.com/<IP> would segfault if query on example.com was generated as part of DNSSEC validation.	Simon Kelley		6 years ago
1124	Spaces in CNAME options break parsing. Spaces in CNAME options break parsing. cname = wibble,wobble works, but cname = wibble, wobble fails. Bug introduced in 2.77. commit a1d973f987e392870ba42a7e9d4d3cd166879ea0	Simon Kelley		6 years ago
1123	Merge i18n messages. Merge i18n messages.	Simon Kelley	v2.78	6 years ago
1122	Debian changlelog update. Debian changlelog update.	Simon Kelley		6 years ago
1121	Security fix, CVE-2017-14491, DNS heap buffer overflow. Security fix, CVE-2017-14491, DNS heap buffer overflow. Further fix to 0549c73b7ea6b22a3c49beb4d432f185a81efcbc Handles case when RR name is not a pointer to the question, only occurs for some auth-mode replies, therefore not detected by fuzzing (?)	Simon Kelley		6 years ago
1120	Update credits for Google security team. Update credits for Google security team.	Simon Kelley		6 years ago
1119	Misc code cleanups arising from Google analysis. Misc code cleanups arising from Google analysis. No security impleications or CVEs.	Simon Kelley		6 years ago
1118	Security fix, CVE-2017-14495, OOM in DNS response creation. Security fix, CVE-2017-14495, OOM in DNS response creation. Fix out-of-memory Dos vulnerability. An attacker which can send malicious DNS queries to dnsmasq can trigger memory allocations in the add_pseudoheader function The allocated memory is never freed which leads to a DoS through memory exhaustion. dnsmasq is vulnerable only if one of the following option is specified: --add-mac, --add-cpe-id or --add-subnet.	Simon Kelley		6 years ago
1117	Security fix, CVE-2017-14496, Integer underflow in DNS respo... Security fix, CVE-2017-14496, Integer underflow in DNS response creation. Fix DoS in DNS. Invalid boundary checks in the add_pseudoheader function allows a memcpy call with negative size An attacker which can send malicious DNS queries to dnsmasq can trigger a DoS remotely. dnsmasq is vulnerable only if one of the following option is specified: --add-mac, --add-cpe-id or --add-subnet.	Simon Kelley		6 years ago
1116	Security fix, CVE-2017-14494, Infoleak handling DHCPv6 forwa... Security fix, CVE-2017-14494, Infoleak handling DHCPv6 forwarded requests. Fix information leak in DHCPv6. A crafted DHCPv6 packet can cause dnsmasq to forward memory from outside the packet buffer to a DHCPv6 server when acting as a relay.	Simon Kelley		6 years ago
1115	Security fix, CVE-2017-14493, DHCPv6 - Stack buffer overflow... Security fix, CVE-2017-14493, DHCPv6 - Stack buffer overflow. Fix stack overflow in DHCPv6 code. An attacker who can send a DHCPv6 request to dnsmasq can overflow the stack frame and crash or control dnsmasq.	Simon Kelley		6 years ago
1114	Security fix, CVE-2017-14492, DHCPv6 RA heap overflow. Security fix, CVE-2017-14492, DHCPv6 RA heap overflow. Fix heap overflow in IPv6 router advertisement code. This is a potentially serious security hole, as a crafted RA request can overflow a buffer and crash or control dnsmasq. Attacker must be on the local network.	Simon Kelley		6 years ago
1113	Security fix, CVE-2017-14491 DNS heap buffer overflow. Security fix, CVE-2017-14491 DNS heap buffer overflow. Fix heap overflow in DNS code. This is a potentially serious security hole. It allows an attacker who can make DNS requests to dnsmasq, and who controls the contents of a domain, which is thereby queried, to overflow (by 2 bytes) a heap buffer and either crash, or even take control of, dnsmasq.	Simon Kelley		6 years ago
1112	Do not include stdio.h before dnsmasq.h Do not include stdio.h before dnsmasq.h We define some constants in dnsmasq.h, which have an influence on stdio.h. So do not include stdio.h before dnsmasq.h.	Christian Hesse		6 years ago
1111	Update contrib/try-all-ns. Update contrib/try-all-ns.	Rasmus Ahlberg		6 years ago
1110	Fix broken translations after commit 730c6745 Fix broken translations after commit 730c6745	Chris Novakovic		6 years ago
1109	Disable libIDN2 underscore workaround with libIDN or fixed l... Disable libIDN2 underscore workaround with libIDN or fixed libIDN2.	Simon Kelley		6 years ago
1108	Don't return arcount=1 if EDNS0 RR won't fit in the packet. Don't return arcount=1 if EDNS0 RR won't fit in the packet. Omitting the EDNS0 RR but setting arcount gives a malformed packet. Also, don't accept UDP packet size less than 512 in recieved EDNS0.	Simon Kelley		6 years ago

Older »