File size: 951 Bytes
4951e76 | 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 | {
"item_id": "ker-trustdns_ptr",
"kernel": "trustdns_ptr",
"advisory": "RUSTSEC-2018-0007",
"crate": "trust-dns-proto",
"pre_version": "0.4.2",
"post_version": "0.4.3",
"advisory_url": null,
"title": "Stack overflow when parsing malicious DNS packet",
"source_file": "src/rr/domain/name.rs",
"function": "pointer_ok",
"signature": "pub fn pointer_ok(location: usize, pointer_location: usize, name_start: usize) -> bool",
"spec_doc": "A DNS name-compression pointer is acceptable iff its target lies strictly before the start of the name currently being parsed (so pointer chains cannot loop).",
"bug_class": "dos_loop_or_recursion",
"fidelity": "verbatim_logic",
"extraction_note": "src/rr/domain/name.rs Name::read: pointer compared with current label instead of name start (self-referential name)",
"witness_args": "0usize, 2usize, 0usize",
"labels": {
"buggy": "trust-dns-proto@0.4.2",
"reference": "trust-dns-proto@0.4.3"
}
} |