[Bug network/34346] Uninitialized data read in DNS stub resolver during QNAME comparison
fweimer at redhat dot com via Glibc-bugs <[email protected]>
| Newsgroups | gmane.comp.lib.glibc.bugs |
|---|---|
| Message-ID | <[email protected]/bugzilla/> |
https://sourceware.org/bugzilla/show_bug.cgi?id=34346
Florian Weimer <fweimer at redhat dot com> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Target Milestone|--- |2.45
Status|ASSIGNED |RESOLVED
--- Comment #1 from Florian Weimer <fweimer at redhat dot com> ---
Fixed for 2.45 via:
commit ab4b07d2ac1ed7d7b1b2f02fd0a24b8c0bbd4a59
Author: Florian Weimer <[email protected]>
Date: Sat Aug 15 12:03:35 2026 +0200
resolv: Fix __libc_res_queriesmatch buffer size argument in send_dg (bug
34346)
Pass the number of bytes written by recvfrom, not the entire size
of the buffer.
This is not a security vulnerability because it only allows
confirmation of previously existing buffer values. All reads stay
within the specified buffer bounds. The buffer contents may not have
been initialized. Subsequent processing is correctly capped at buffer
bounds, too.
Reviewed-by: Adhemerval Zanella <[email protected]>
--
You are receiving this mail because:
You are on the CC list for the bug.