CVS: cvs.openbsd.org: src

Gilles Chehade <[email protected]>
Newsgroups gmane.os.openbsd.cvs
Message-ID <[email protected]> 
CVSROOT:	/cvs
Module name:	src
Changes by:	[email protected]	2026/07/12 17:00:50

Modified files:
	usr.sbin/smtpd : dns.c spfwalk.c 

Log message:
stop parsing DNS answers once unpack_rr() reports failure

the MX, MX-preference and spf walkers looped on the attacker-controlled
ancount calling unpack_rr() without checking its return, processing stale
or uninitialized rr contents on malformed or truncated replies.  break out
of the loop as soon as unpack_rr() fails.

from Andrew Griffiths, ok op@
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.