]> git.ipfire.org Git - thirdparty/squid.git/commit
Protect against buffer overrun in DNS query generation
authorNathan Hoad <nathan@getoffmalawn.com>
Wed, 10 Jul 2013 12:44:19 +0000 (06:44 -0600)
committerAmos Jeffries <squid3@treenet.co.nz>
Wed, 10 Jul 2013 12:44:19 +0000 (06:44 -0600)
commita611ba57c85ce7d83bb911631aea4f83a18df0f9
treea816e3a21fd83f2b145a5c1e509c6564845ea5d9
parenta87b82a98b8410390e95880b2d67f744d7d049ef
Protect against buffer overrun in DNS query generation

see SQUID-2013:2.

This bug has been present as long as the internal DNS component however
most code reaching this point is passing through URL validation first.
With Squid-3.2 Host header verification using DNS directly we may have
problems.
src/dns_internal.cc