Fix remote buffer overflow CERT VU#434904 50/252550/1
authorSeonah Moon <seonah1.moon@samsung.com>
Wed, 27 Jan 2021 08:16:05 +0000 (17:16 +0900)
committerSeonah Moon <seonah1.moon@samsung.com>
Fri, 29 Jan 2021 07:45:21 +0000 (16:45 +0900)
commit185007ba90f4f1c0bf7c6b3988db241a78c34a0f
treef43f9baf48fcdd67cf55dce413cb6517f0dbe366
parentfa9b094891049a0cdb6c6379e8308cb3a07614ef
Fix remote buffer overflow CERT VU#434904

The problem is in the sort_rrset() function and allows a remote
attacker to overwrite memory. Any dnsmasq instance with DNSSEC
enabled is vulnerable.

Backported for
CVE-2020-25681, CVE-2020-25682, CVE-2020-25683, CVE-2020-25687

Change-Id: If6e31a6418c113c7e390166ea32378eb1d9a5470
CHANGELOG
src/dnssec.c