roll in a distribution patch which fixes:

CVE-2007-3116 Memory leak allows remote attackers to cause a denial of service
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3116

ok sturm@
This commit is contained in:
rui 2007-06-09 11:15:48 +00:00
parent e50b3a2e89
commit 653c55f325
2 changed files with 14 additions and 1 deletions

View File

@ -1,8 +1,9 @@
# $OpenBSD: Makefile,v 1.6 2007/06/06 23:29:55 rui Exp $
# $OpenBSD: Makefile,v 1.7 2007/06/09 11:15:48 rui Exp $
VERSION= 1.2.12.06
COMMENT= "simple and performant DNS server"
DISTNAME= maradns-${VERSION}
PKGNAME= ${DISTNAME}p0
CATEGORIES= net
HOMEPAGE= http://www.maradns.org/

View File

@ -0,0 +1,12 @@
$OpenBSD: patch-server_MaraDNS_c,v 1.1 2007/06/09 11:15:48 rui Exp $
--- server/MaraDNS.c.orig Sat Jun 9 00:01:15 2007
+++ server/MaraDNS.c Sat Jun 9 00:02:32 2007
@@ -2999,6 +2999,8 @@ int star_collision(js_string *lookfor, mhash *bighash)
spot_data.datatype == MARA_DNS_LIST) {
/* There is a RR phohibiting the star record. Return
* name error */
+ be_anal->string--;
+ js_destroy(be_anal);
return 1;
}
be_anal->string--;