| { |
| "item_id": "ker-trustdns_ptr", |
| "kernel": "trustdns_ptr", |
| "advisory": "RUSTSEC-2018-0007", |
| "crate": "trust-dns-proto", |
| "pre_version": "0.4.2", |
| "post_version": "0.4.3", |
| "advisory_url": null, |
| "title": "Stack overflow when parsing malicious DNS packet", |
| "source_file": "src/rr/domain/name.rs", |
| "function": "pointer_ok", |
| "signature": "pub fn pointer_ok(location: usize, pointer_location: usize, name_start: usize) -> bool", |
| "spec_doc": "A DNS name-compression pointer is acceptable iff its target lies strictly before the start of the name currently being parsed (so pointer chains cannot loop).", |
| "bug_class": "dos_loop_or_recursion", |
| "fidelity": "verbatim_logic", |
| "extraction_note": "src/rr/domain/name.rs Name::read: pointer compared with current label instead of name start (self-referential name)", |
| "witness_args": "0usize, 2usize, 0usize", |
| "labels": { |
| "buggy": "trust-dns-proto@0.4.2", |
| "reference": "trust-dns-proto@0.4.3" |
| } |
| } |
