CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2015/11/05 15:44:37
Modified files:
lib/libc/asr : res_init.c
Log message:
When filling the __res_state compatibiliy struct, a long list of
nameservers could overflow the dns search pointers. Restrict the
number, size and address family of nameservers in res_init(3). This
fixes a crash in sendmail. Only programs that use the bind resolver
internals directly are affected.
OK deraadt@ millert@
