This is the mail archive of the glibc-bugs@sourceware.org mailing list for the glibc project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[Bug network/19688] Deprecate RES_STAYOPEN and ignore the flag in libresolv


https://sourceware.org/bugzilla/show_bug.cgi?id=19688

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
           Assignee|unassigned at sourceware dot org   |fweimer at redhat dot com

--- Comment #1 from Florian Weimer <fweimer at redhat dot com> ---
(In reply to Florian Weimer from comment #0)
> RES_STAYOPEN disables source port randomization and is therefore a security
> risk.

This is incorrect.  RES_STAYOPEN is only applied to TCP connections.  But the
flag is still not useful because sending multiple queries over a TCP connection
is tricky, particularly if the TCP connection has been dormant for a long time.

I think it still makes sense to proceed with the deprecation and removal.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]