SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
0761da386a6cb0ced3721f2dee123fd983c71178
systemd/src/resolve
T
History
Lennart Poettering 1ed4e584f3 resolved: address DVE-2018-0001 
This is an updated version of #8608 with more restrictive logic. To
quite the original bug:

    Some captive portals, lie and do not respond with the captive portal
    IP address, if the query is with EDNS0 enabled and D0 bit set to
    zero. Thus retry "secure" domain name look ups with less secure
    methods, upon NXDOMAIN.

https://github.com/dns-violations/dns-violations/blob/master/2018/DVE-2018-0001.md

Yes, this fix sucks hard, but I guess this is what we need to do to make
sure resolved works IRL.

Heavily based on the original patch from Dimitri John Ledkov, and I
copied the commentary verbatim.

Replaces: #8608
2021-02-17 18:06:13 +01:00
..
dns_type-to-name.awk
tree-wide: add spdx header on all scripts and helpers
2021-01-28 09:55:35 +01:00
dns-type.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
dns-type.h
tree-wide: use -EINVAL for enum invalid values
2021-02-10 14:46:59 +01:00
fuzz-dns-packet.c
fuzzers: move several fuzzers
2021-01-19 07:04:19 +09:00
fuzz-dns-packet.options
fuzzers: move several fuzzers
2021-01-19 07:04:19 +09:00
generate-dns_type-gperf.py
tree-wide: add spdx header on all scripts and helpers
2021-01-28 09:55:35 +01:00
generate-dns_type-list.sed
tree-wide: add spdx header on all scripts and helpers
2021-01-28 09:55:35 +01:00
meson.build
resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard"
2021-02-15 23:14:32 +01:00
org.freedesktop.resolve1.conf
…
org.freedesktop.resolve1.policy
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
org.freedesktop.resolve1.service
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolv.conf
resolved: turn off that a search domain is derived from the host's fqdn
2020-09-30 10:37:59 +02:00
resolvconf-compat.c
tree-wide: Drop custom formatting for print() help messages
2021-01-31 13:14:02 +09:00
resolvconf-compat.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolvectl.c
resolved: propagate source where an RR from back to client
2021-02-16 10:03:43 +01:00
resolvectl.h
tree-wide: use -EINVAL for enum invalid values
2021-02-10 14:46:59 +01:00
resolved-bus.c
resolved: log process info of clients requesting resolution via D-Bus
2021-02-16 13:42:49 +01:00
resolved-bus.h
resolved: log process info of clients requesting resolution via D-Bus
2021-02-16 13:42:49 +01:00
resolved-conf.c
tree-wide: sort specifiers and move common comments to specifier.h
2020-11-25 15:12:27 +09:00
resolved-conf.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-def.h
resolved: propagate source where an RR from back to client
2021-02-16 10:03:43 +01:00
resolved-dns-answer.c
resolved: tweak answer reserve/clone logic a bit
2021-02-14 23:12:22 +01:00
resolved-dns-answer.h
answer: add helper for randomizing RR of answers
2021-02-14 15:42:56 +01:00
resolved-dns-cache.c
Merge pull request #18616 from keszybz/argv-fuzzer-quick-fix
2021-02-16 20:25:37 +01:00
resolved-dns-cache.h
resolved: replace "answer_authenticated" bool by uint64_t query_flags field
2021-02-16 10:03:43 +01:00
resolved-dns-dnssec.c
tree-wide: fix "a the" or "the a"
2020-11-13 16:28:47 +09:00
resolved-dns-dnssec.h
tree-wide: use -EINVAL for enum invalid values
2021-02-10 14:46:59 +01:00
resolved-dns-packet.c
resolved: include NSID support to DNS stub
2021-02-17 09:42:07 +01:00
resolved-dns-packet.h
resolved: include NSID support to DNS stub
2021-02-17 09:42:07 +01:00
resolved-dns-query.c
resolved: propagate source where an RR from back to client
2021-02-16 10:03:43 +01:00
resolved-dns-query.h
resolved: propagate source where an RR from back to client
2021-02-16 10:03:43 +01:00
resolved-dns-question.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dns-question.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dns-rr.c
answer: minor refactor – move link local check into RR code
2021-02-14 15:43:01 +01:00
resolved-dns-rr.h
answer: minor refactor – move link local check into RR code
2021-02-14 15:43:01 +01:00
resolved-dns-scope.c
resolved: let's preferably route reverse lookups for local subnets to matching interfaces
2021-02-16 16:13:42 +01:00
resolved-dns-scope.h
resolved: don't redundantly switch DNS servers because of transaction failures
2021-02-15 21:59:05 +01:00
resolved-dns-search-domain.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dns-search-domain.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dns-server.c
resolved: include NSID support to DNS stub
2021-02-17 09:42:07 +01:00
resolved-dns-server.h
resolved: never go below DNSSEC feature level in DNSSEC strict mode
2021-02-16 18:44:01 +01:00
resolved-dns-stream.c
resolved: always take a timestamp when first seeing a packet
2020-12-16 14:20:49 +01:00
resolved-dns-stream.h
tree-wide: use -EINVAL for enum invalid values
2021-02-10 14:46:59 +01:00
resolved-dns-stub.c
resolved: include NSID support to DNS stub
2021-02-17 09:42:07 +01:00
resolved-dns-stub.h
resolved: filter repeated stub queries
2021-02-15 16:27:40 +01:00
resolved-dns-synthesize.c
resolved: add RRSIG field to DnsAnswerItem
2021-02-09 17:52:59 +01:00
resolved-dns-synthesize.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dns-transaction.c
resolved: address DVE-2018-0001
2021-02-17 18:06:13 +01:00
resolved-dns-transaction.h
resolved: address DVE-2018-0001
2021-02-17 18:06:13 +01:00
resolved-dns-trust-anchor.c
resolved: add RRSIG field to DnsAnswerItem
2021-02-09 17:52:59 +01:00
resolved-dns-trust-anchor.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dns-zone.c
tree-wide: return NULL from freeing functions
2021-02-16 17:15:10 +01:00
resolved-dns-zone.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dnssd-bus.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dnssd-bus.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dnssd-gperf.gperf
tree-wide: add spdx header on all scripts and helpers
2021-01-28 09:55:35 +01:00
resolved-dnssd.c
resolved-dnssd: Use TAKE_PTR
2021-01-17 14:25:10 +01:00
resolved-dnssd.h
Revert "resolve: check DNSSD service name template before assigning it"
2020-11-18 03:16:57 +09:00
resolved-dnstls-gnutls.c
tree-wide: reset the cleaned-up variable in cleanup functions
2021-02-16 17:15:11 +01:00
resolved-dnstls-gnutls.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dnstls-openssl.c
resolve: Fix build for cleanup function (SSL_free + BIO_free)
2021-02-16 23:57:29 +01:00
resolved-dnstls-openssl.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-dnstls.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-etc-hosts.c
resolved: add RRSIG field to DnsAnswerItem
2021-02-09 17:52:59 +01:00
resolved-etc-hosts.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-gperf.gperf
tree-wide: add spdx header on all scripts and helpers
2021-01-28 09:55:35 +01:00
resolved-link-bus.c
resolved: log process info of clients requesting resolution via D-Bus
2021-02-16 13:42:49 +01:00
resolved-link-bus.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-link.c
resolved: let's preferably route reverse lookups for local subnets to matching interfaces
2021-02-16 16:13:42 +01:00
resolved-link.h
resolved: let's preferably route reverse lookups for local subnets to matching interfaces
2021-02-16 16:13:42 +01:00
resolved-llmnr.c
resolved: add "confidential" flag for replies passed to clients
2021-02-16 10:03:43 +01:00
resolved-llmnr.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-manager.c
resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard"
2021-02-15 23:14:32 +01:00
resolved-manager.h
resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard"
2021-02-15 23:14:32 +01:00
resolved-mdns.c
resolved: add "confidential" flag for replies passed to clients
2021-02-16 10:03:43 +01:00
resolved-mdns.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved-resolv-conf.c
fs-util: rename conservative_rename() -> conservative_renameat()
2021-01-22 12:55:54 +09:00
resolved-resolv-conf.h
tree-wide: use -EINVAL for enum invalid values
2021-02-10 14:46:59 +01:00
resolved-socket-graveyard.c
resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard"
2021-02-15 23:14:32 +01:00
resolved-socket-graveyard.h
resolved: instead of closing DNS UDP transaction fds right-away, add them to a socket "graveyard"
2021-02-15 23:14:32 +01:00
resolved-varlink.c
resolved: propagate source where an RR from back to client
2021-02-16 10:03:43 +01:00
resolved-varlink.h
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
resolved.c
tree-wide: enable colorized logging for daemons when run in console
2021-02-01 01:13:44 +09:00
resolved.conf.in
resolved: allow cache responses from local DNS servers
2020-11-27 09:03:42 +09:00
RFCs
…
test-dns-packet.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
test-dnssec-complex.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
test-dnssec.c
resolved: add RRSIG field to DnsAnswerItem
2021-02-09 17:52:59 +01:00
test-resolve-tables.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
test-resolved-etc-hosts.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00
test-resolved-packet.c
license: LGPL-2.1+ -> LGPL-2.1-or-later
2020-11-09 13:23:58 +09:00