[PATCH COMMITTED] CVE-2015-5180: resolv: Fix crash with internal QTYPE [BZ #18784]

H.J. Lu hjl.tools@gmail.com
Tue Jun 13 21:30:00 GMT 2017


On Sat, Dec 31, 2016 at 11:50 AM, Florian Weimer <fweimer@redhat.com> wrote:
> Also rename T_UNSPEC because an upcoming public header file
> update will use that name.
>
> 2016-12-31  Florian Weimer  <fweimer@redhat.com>
>
>         [BZ #18784]
>         CVE-2015-5180
>         * include/arpa/nameser_compat.h (T_QUERY_A_AND_AAAA): Rename from
>         T_UNSPEC.  Adjust value.
>         * resolv/nss_dns/dns-host.c (_nss_dns_gethostbyname4_r): Use it.
>         * resolv/res_query.c (__libc_res_nquery): Likewise.
>         * resolv/res_mkquery.c (res_nmkquery): Check for out-of-range
>         QTYPEs.
>         * resolv/tst-resolv-qtypes.c: New file.
>         * resolv/Makefile (xtests): Add tst-resolv-qtypes.
>         (tst-resolv-qtypes): Link against libresolv and libpthread.
>

This patch was backported to 2.24 branch, which doesn't have
support/check.h.  I got

tst-resolv-qtypes.c:21:27: fatal error: support/check.h: No such file
or directory
 #include <support/check.h>
                           ^
compilation terminated.



-- 
H.J.



More information about the Libc-alpha mailing list