]> git.ipfire.org Git - thirdparty/pdns.git/commit
Don't read potentially uninitalized memory if gethostname() failed 9117/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 27 Apr 2020 14:48:16 +0000 (16:48 +0200)
committerOtto Moerbeek <otto.moerbeek@open-xchange.com>
Wed, 13 May 2020 09:07:46 +0000 (11:07 +0200)
commitea4d4ef8c9b8d90e9d221de10b414fcb6ea3782e
treeb15e5b34b2a652b2a9ed726a7c6e1c8c04cead9e
parent3c5a78c1c7389cb1e835a4c68ad7d706485b58ec
Don't read potentially uninitalized memory if gethostname() failed

If the buffer is smaller than `HOST_NAME_MAX` (64 on Linux but up to
255 bytes in POSIX, which FreeBSD, MacOS etc honor) gethostname()
might return -1 without null-terminating the buffer, causing an
out-of-bounds read.
As we look for the first '.' using `strchr()`, replacing it with a
null byte, we also have a one-byte out-of-bounds write which might
result in a crash or, albeit very unlikely, arbitrary code execution.

(cherry picked from commit aac6348d56f6f3fdba9dd2455ef06081da507c14)
(cherry picked from commit be93bc7da4caddc5a6c84fa7b42e82592e9add49)
pdns/rec-carbon.cc