[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#931416: marked as done (klibc-utils: ipconfig denial of service when IP nameservers are configured on the kernel command line)



Control: tag -1 upstream patch

On Tue, 08 Oct 2019 18:39:19 +0100 Ben Hutchings <ben@decadent.org.uk> wrote:
> Control: reopen -1
> 
> On Tue, 2019-10-08 at 02:14 +0000, Thorsten Glaser wrote:
> > Debian Bug Tracking System dixit:
> > 
> > >Your message dated Tue, 08 Oct 2019 01:35:33 +0000
> > >with message-id <E1iHePV-000HLu-9u@fasolo.debian.org>
> > >and subject line Bug#931416: fixed in klibc 2.0.7-1
> > 
> > >>     - ipconfig: Implement support -d ...:dns0:dns1 options (Closes: #931416)
> > 
> > >has caused the Debian Bug report #931416,
> > >regarding klibc-utils: ipconfig denial of service when IP nameservers are configured on the kernel command line
> > >to be marked as done.
> > 
> > Not sure about that:
> > 
> > >>        ip=<client-ip>:<server-ip>:<gw-ip>:<netmask>:<hostname>:<device>:<autoconf>:<dns0-ip>:<dns1-ip>:<ntp0-ip>
> > 
> > 1. is <ntp0-ip> also now handled?
> 
> No, but that was not required ("possibly even NTP configuration").
> 
> > 2. are any future colon-separated extensions now ignored
> >    in a way to make it not fail should they be introduced,
> >    i.e. to not repeat this problem?
> 
> Oops, no, that is still an error.
> 
> Ben.
> 
> > Both were requested in the original bugreport.

The handling of additional fields should be fixed by these patches:

https://lists.zytor.com/archives/klibc/2019-December/004266.html
https://lists.zytor.com/archives/klibc/2019-December/004267.html

Let me know if these don't work for you.

Ben.

-- 
Ben Hutchings
The generation of random numbers is too important to be left to chance.
                                                       - Robert Coveyou


Attachment: signature.asc
Description: This is a digitally signed message part


Reply to: