[Bug network/19791] res_query.c:262 asserts when dns contains unreachable entries

fweimer at redhat dot com sourceware-bugzilla@sourceware.org
Thu Mar 10 15:26:00 GMT 2016


https://sourceware.org/bugzilla/show_bug.cgi?id=19791

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |fweimer at redhat dot com
              Flags|                            |security?

--- Comment #1 from Florian Weimer <fweimer at redhat dot com> ---
(In reply to priyesh from comment #0)

> res_query.c:262: __libc_res_nquery: Assertion `(hp != ((void *)0)) && (hp2
> != ((void *)0))' failed.

What's the exact glibc version you tested?  Current master would print a
different assertion due to commit 8ba14398e629c1f63b9c91a59a47a713b3cce8bc.

> This can be triggered by disabling ipv6, then adding an ipv6 dns and using
> the proof of concept here:
> https://github.com/fjserna/CVE-2015-7547/blob/master/CVE-2015-7547-client.c

How did you disable IPv6?  There multiple ways to do this (at least partially).

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the Glibc-bugs mailing list