mirror of
https://github.com/pi-hole/dnsmasq.git
synced 2025-12-19 10:18:25 +00:00
Fix problem with arbitrary RR caching.
Caching an answer which has more that one RR, with at least one answer being <=13 bytes and at least one being >13 bytes can screw up the F_KEYTAG flag bit, resulting in the wrong type of the address union being used and either a bad value return or a crash in the block code. Thanks to Dominik Derigs and the Pi-hole project for finding and characterising this.
This commit is contained in:
@@ -812,6 +812,7 @@ int extract_addresses(struct dns_header *header, size_t qlen, char *name, time_t
|
||||
{
|
||||
addr.rrdata.rrtype = aqtype;
|
||||
addr.rrdata.datalen = (char)ardlen;
|
||||
flags &= ~F_KEYTAG; /* in case of >1 answer, not all the same. */
|
||||
if (ardlen != 0)
|
||||
memcpy(addr.rrdata.data, p1, ardlen);
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user