[PATCH COMMITTED] CVE-2015-5180: resolv: Fix crash with internal QTYPE [BZ #18784]
H.J. Lu
hjl.tools@gmail.com
Tue Jun 13 21:30:00 GMT 2017
On Sat, Dec 31, 2016 at 11:50 AM, Florian Weimer <fweimer@redhat.com> wrote:
> Also rename T_UNSPEC because an upcoming public header file
> update will use that name.
>
> 2016-12-31 Florian Weimer <fweimer@redhat.com>
>
> [BZ #18784]
> CVE-2015-5180
> * include/arpa/nameser_compat.h (T_QUERY_A_AND_AAAA): Rename from
> T_UNSPEC. Adjust value.
> * resolv/nss_dns/dns-host.c (_nss_dns_gethostbyname4_r): Use it.
> * resolv/res_query.c (__libc_res_nquery): Likewise.
> * resolv/res_mkquery.c (res_nmkquery): Check for out-of-range
> QTYPEs.
> * resolv/tst-resolv-qtypes.c: New file.
> * resolv/Makefile (xtests): Add tst-resolv-qtypes.
> (tst-resolv-qtypes): Link against libresolv and libpthread.
>
This patch was backported to 2.24 branch, which doesn't have
support/check.h. I got
tst-resolv-qtypes.c:21:27: fatal error: support/check.h: No such file
or directory
#include <support/check.h>
^
compilation terminated.
--
H.J.
More information about the Libc-alpha
mailing list