Pi-Hole/dnsmasq
1
0
Fork 0
mirror of https://github.com/pi-hole/dnsmasq.git synced 2025-12-19 02:08:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

Replace query hashing in TCP code path.

Browse Source
This commit is contained in:
Simon Kelley
2024-11-02 20:48:17 +00:00
parent ed6d29a784
commit 959d991d10
1 changed files with 16 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
src/forward.c
View File

@@ -1954,16 +1954,19 @@ static ssize_t tcp_talk(int first, int last, int start, unsigned char *packet,
unsigned char *payload = &packet[2];
struct dns_header *header = (struct dns_header *)payload;
unsigned char c1, c2;
unsigned char hash[HASH_SIZE], *hashp;
unsigned int rsize;
int class, rclass, type, rtype;
unsigned char *p;
(void)mark;
(void)have_mark;
if (!(hashp = hash_questions(header, (unsigned int)qsize, daemon->namebuff)))
/* Save the query to make sure we get the answer we expect. */
p = (unsigned char *)(header+1);
if (!extract_name(header, qsize, &p, daemon->namebuff, 1, 4))
return 0;
memcpy(hash, hashp, HASH_SIZE);
GETSHORT(type, p);
GETSHORT(class, p);
while (1)
{
@@ -2052,11 +2055,17 @@ static ssize_t tcp_talk(int first, int last, int start, unsigned char *packet,
continue;
}
/* If the hash of the question section doesn't match the crc we sent, then
/* If the question section of the reply doesn't match the crc we sent, then
someone might be attempting to insert bogus values into the cache by
sending replies containing questions and bogus answers.
Try another server, or give up */
if (!(hashp = hash_questions(header, rsize, daemon->namebuff)) || memcmp(hash, hashp, HASH_SIZE) != 0)
p = (unsigned char *)(header+1);
if (extract_name(header, rsize, &p, daemon->namebuff, 0, 4) != 1)
continue;
GETSHORT(rtype, p);
GETSHORT(rclass, p);
if (type != rtype || class != rclass)
continue;
serv->flags |= SERV_GOT_TCP;