Skip to content

D
Dnsmasq
Switch branch/tag
  1. 28 Jul, 2015 3 commits
  3. 17 Jul, 2015 2 commits
  5. 16 Jul, 2015 2 commits
  7. 13 Jul, 2015 3 commits
  9. 09 Jul, 2015 3 commits
  11. 08 Jul, 2015 1 commit
  13. 07 Jul, 2015 1 commit
  15. 06 Jul, 2015 3 commits
  17. 13 Jun, 2015 1 commit
  19. 11 Jun, 2015 7 commits
  21. 10 Jun, 2015 2 commits
  23. 07 Jun, 2015 1 commit
  25. 05 Jun, 2015 1 commit
  27. 04 Jun, 2015 1 commit
  29. 02 Jun, 2015 2 commits
  31. 27 May, 2015 2 commits
  33. 21 May, 2015 2 commits
  35. 20 May, 2015 1 commit
  37. 16 May, 2015 2 commits
    • Simon Kelley's avatar
      Remove support for DNS Extended Label Types. · 06568c66
      Simon Kelley authored 
      The support was only partial, and the whole concept is
now deprecated in the standards.
      06568c66
    • Simon Kelley's avatar
      Fix buffer overflow introduced in 2.73rc6. · 5d07d77e
      Simon Kelley authored 
      Fix off-by-one in code which checks for over-long domain names
in received DNS packets. This enables buffer overflow attacks
which can certainly crash dnsmasq and may allow for arbitrary
code execution. The problem was introduced in commit b8f16556,
release 2.73rc6, so has not escaped into any stable release.
Note that the off-by-one was in the label length determination,
so the buffer can be overflowed by as many bytes as there are
labels in the name - ie, many.

Thanks to Ron Bowes, who used lcmatuf's afl-fuzz tool to find
the problem.
      5d07d77e