summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorNatanael Copa <ncopa@alpinelinux.org>2009-03-06 07:57:19 +0000
committerNatanael Copa <ncopa@alpinelinux.org>2009-03-06 07:57:19 +0000
commit9388cf013f9a2303cd839c87f2199861a145cac5 (patch)
treee71ded54af9dc0afe6d489e44f74aaaa075d7f46
parent0f04c6a8f2fddd18a75cb7198ce9c8ac25ceb0ea (diff)
downloadaports-9388cf013f9a2303cd839c87f2199861a145cac5.tar.bz2
aports-9388cf013f9a2303cd839c87f2199861a145cac5.tar.xz
extra/djbdns: security fix
http://securityandthe.net/2009/03/05/security-issue-in-djbdns-confirmed/
-rw-r--r--extra/djbdns/1.05-response.patch11
-rw-r--r--extra/djbdns/APKBUILD4
2 files changed, 14 insertions, 1 deletions
diff --git a/extra/djbdns/1.05-response.patch b/extra/djbdns/1.05-response.patch
new file mode 100644
index 000000000..eb6ae5904
--- /dev/null
+++ b/extra/djbdns/1.05-response.patch
@@ -0,0 +1,11 @@
+--- a/response.c.orig 2009-02-24 21:04:06.000000000 -0800
++++ b/response.c 2009-02-24 21:04:25.000000000 -0800
+@@ -34,7 +34,7 @@
+ uint16_pack_big(buf,49152 + name_ptr[i]);
+ return response_addbytes(buf,2);
+ }
+- if (dlen <= 128)
++ if ((dlen <= 128) && (response_len < 16384))
+ if (name_num < NAMES) {
+ byte_copy(name[name_num],dlen,d);
+ name_ptr[name_num] = response_len;
diff --git a/extra/djbdns/APKBUILD b/extra/djbdns/APKBUILD
index 4449d1d0a..f05c45608 100644
--- a/extra/djbdns/APKBUILD
+++ b/extra/djbdns/APKBUILD
@@ -1,7 +1,7 @@
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=djbdns
pkgver=1.05
-pkgrel=22
+pkgrel=23
pkgdesc="Excellent high-performance DNS services"
url="http://cr.yp.to/djbdns.html"
license="public-domain"
@@ -12,6 +12,7 @@ source="http://cr.yp.to/djbdns/$pkgname-$pkgver.tar.gz
dnsroots.patch
dnstracesort.patch
$pkgver-errno.patch
+ $pkgver-response.patch
tinydns.install
tinydns.initd
tinydns.confd
@@ -76,6 +77,7 @@ md5sums="3147c5cd56832aa3b41955c7a51cbeb2 djbdns-1.05.tar.gz
dfd675b2775efcbb604413a84db8bf1a dnsroots.patch
6fe7f473233f1c86b76261afd8345bf0 dnstracesort.patch
c7be73fe2fb4ae02d5096fa2c1f55a68 1.05-errno.patch
+1292500c04baba3995d9753fe40fdc94 1.05-response.patch
2e1cd0923248120f8d066967781538be tinydns.install
d7be449f5f90457ba785aebb1cadbf88 tinydns.initd
7dcf6674c07d46c736b3c25d9c92384a tinydns.confd