mirror of
https://github.com/isc-projects/bind9.git
synced 2026-05-23 02:28:55 -04:00
f7859247df
When named_os_gethostname() was replaced with raw gethostname(), the success/failure polarity was flipped: the fallback to "localhost" now runs on success and the hostname buffer is left uninitialized on failure. In the failure path, snprintf() then reads the uninitialized stack buffer, disclosing stack contents via the rndc status reply. |
||
|---|---|---|
| .. | ||
| check | ||
| confgen | ||
| delv | ||
| dig | ||
| dnssec | ||
| include | ||
| named | ||
| nsupdate | ||
| plugins | ||
| rndc | ||
| tests | ||
| tools | ||
| meson.build | ||