[Bug nss/34033] resolv/ns_print.c: ns_sprintrrf TSIG path bypasses buflen and can overflow caller buffer

[fw at deneb dot enyo.de]

https://sourceware.org/bugzilla/show_bug.cgi?id=34033

--- Comment #3 from Florian Weimer <fw at deneb dot enyo.de> ---
The assert failure does not actually happen because a null byte is written to
the buffer before the inet_ntop call (via addname/addstr), and the current and
old inet_ntop implementations do not modify the buffer on failure.

According to this, libbind is now maintained by NetBSD:

“
The handoff of the maintainership from ISC to NetBSD happened in July 2013.
”

<https://wiki.netbsd.org/individual-software-releases/netresolv/>

I've sent a note to the NetBSD security team.

-- 
You are receiving this mail because:
You are on the CC list for the bug.