diff options
| author | Stefan Metzmacher <metze@samba.org> | 2018-11-28 15:21:56 +0100 |
|---|---|---|
| committer | Karolin Seeger <kseeger@samba.org> | 2018-12-07 10:28:30 +0100 |
| commit | c81921da2e5b2c42c9db25cdbb443891656a4df7 (patch) | |
| tree | 82280ab827cb0de5a80b816867171ecca0b28e86 /selftest | |
| parent | 9d58994621f37e3d1be1eb1ddf68d0675d188cd2 (diff) | |
| download | samba-c81921da2e5b2c42c9db25cdbb443891656a4df7.tar.gz | |
CVE-2018-14629 dns: fix CNAME loop prevention using counter regression
The loop prevention should only be done for CNAME records!
Otherwise we truncate the answer records for A, AAAA or
SRV queries, which is a bad idea if you have more than 20 DCs.
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13600
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Dec 4 08:52:29 CET 2018 on sn-devel-144
(cherry picked from commit 34f4491d79b47b2fe2457b8882f11644cf773bc4)
Diffstat (limited to 'selftest')
| -rw-r--r-- | selftest/knownfail.d/dns | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/selftest/knownfail.d/dns b/selftest/knownfail.d/dns index bd12d439c11..c26a31aeb4e 100644 --- a/selftest/knownfail.d/dns +++ b/selftest/knownfail.d/dns @@ -61,9 +61,3 @@ samba.tests.dns.__main__.TestSimpleQueries.test_one_SOA_query\(rodc:local\) ^samba.tests.dns.__main__.TestComplexQueries.test_cname_limit\(rodc:local\) ^samba.tests.dns.__main__.TestComplexQueries.test_cname_any_query\(vampire_dc:local\) ^samba.tests.dns.__main__.TestComplexQueries.test_cname_any_query\(rodc:local\) - -# These all fail until the next patch -^samba.tests.dns.__main__.TestComplexQueries.test_cname_limit -^samba.tests.dns.__main__.TestComplexQueries.test_record_limit_SRV -^samba.tests.dns.__main__.TestComplexQueries.test_record_limit_AAAA -^samba.tests.dns.__main__.TestComplexQueries.test_record_limit_A |