Kevin Darbyshire-Bryant a006b48c04 dnsmasq: forward.c: fix CVE-2017-13704 ... Fix SIGSEGV in rfc1035.c answer_request() line 1228 where memset() is called with header & limit pointing at the same address and thus tries to clear memory from before the buffer begins. answer_request() is called with an invalid edns packet size provided by the client. Ensure the udp_size provided by the client is bounded by 512 and configured maximum as per RFC 6891 6.2.3 "Values lower than 512 MUST be treated as equal to 512" The client that exposed the problem provided a payload udp size of 0. Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk> Acked-by: Hans Dedecker <dedeckeh@gmail.com>		2017-08-30 21:12:49 +02:00
..
010-Tweak-ICMP-ping-check-logic-for-DHCPv4.patch	dnsmasq: backport tweak ICMP ping logic for DHCPv4	2017-07-01 13:53:53 +02:00
011-Remove-ping-check-of-configured-DHCP-address.patch	dnsmasq: backport remove ping check of configured dhcp address	2017-08-08 14:44:36 +02:00
020-Try-other-servers-if-first-returns-REFUSED-when-stri.patch	dnsmasq: backport patch fixing DNS failover (FS#841)	2017-07-12 22:06:48 +02:00
025-fix-CVE-2017-13704.patch	dnsmasq: forward.c: fix CVE-2017-13704	2017-08-30 21:12:49 +02:00
110-ipset-remove-old-kernel-support.patch	dnsmasq: bump to 2.77	2017-06-02 00:25:08 +02:00
210-dnssec-improve-timestamp-heuristic.patch	dnsmasq: bump to 2.77	2017-06-02 00:25:08 +02:00
230-fix-poll-h-include-warning-on-musl.patch	dnsmasq: update to dnsmasq v2.76	2016-05-24 13:30:58 +02:00