Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

six fixes to resolved #17521

Merged
merged 6 commits into from Nov 4, 2020
Merged

Conversation

poettering
Copy link
Member

No description provided.

The three answer sections can only carry up to UINT16_MAX entries, hence
put a hard upper limit on how far DnsAnswer can grow. The three count
fields in the DNS packet header are 16 bit only, hence the limit.

If code actually tries to add more than 64K RRs it will get ENOSPC with
this new checking.

And similar to DnsQuestion.
If we encounter an RR that has no matching signature, then we don't know
whether it was expanded from a wildcard or not. We need to accept that
and not make the NSEC test fail, just skip over the RR.
@poettering poettering added this to the v247 milestone Nov 3, 2020
@keszybz
Copy link
Member

keszybz commented Nov 4, 2020

bionic-i386 timed out,
bionic-ppc64el failed in timedated test,
semaphoreci crashed in dwz.

@keszybz
Copy link
Member

keszybz commented Nov 4, 2020

Nice fixes.

@keszybz keszybz merged commit 585d7a8 into systemd:master Nov 4, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Development

Successfully merging this pull request may close these issues.

None yet

2 participants