glibc/nss
Florian Weimer 2373941bd7 CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ #20018]
The IPv4 address parser in the getaddrinfo function is changed so that
it does not ignore trailing whitespace and all characters after it.
For backwards compatibility, the getaddrinfo function still recognizes
legacy name syntax, such as 192.000.002.010 interpreted as 192.0.2.8
(octal).

This commit does not change the behavior of inet_addr and inet_aton.
gethostbyname already had additional sanity checks (but is switched
over to the new __inet_aton_exact function for completeness as well).

To avoid sending the problematic query names over DNS, commit
6ca53a2453 ("resolv: Do not send queries
for non-host-names in nss_dns [BZ #24112]") is needed.

(cherry picked from commit 108bc4049f)
2019-02-04 21:36:37 +01:00
..
nss_compat getgrent_next_nss (compat-initgroups): Remove alloca fallback [BZ #18023] 2018-06-25 18:58:49 +02:00
nss_db Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
nss_files nss_files: Fix file stream leak in aliases lookup [BZ #23521] 2018-08-14 10:57:48 +02:00
alias-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
bug17079.c nss: Adjust tests to use nss_files only 2018-01-30 14:26:31 +01:00
bug-erange.c
compat-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
databases.def Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
db-Makefile Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
Depend
digits_dots.c CVE-2016-10739: getaddrinfo: Fully parse IPv4 address strings [BZ #20018] 2019-02-04 21:36:37 +01:00
ethers-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
function.def Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
getent.c getent: Use dynarray in initgroups_keys [BZ #18023] 2018-06-25 19:47:59 +02:00
getnssent_r.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
getnssent.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
getXXbyYY_r.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
getXXbyYY.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
getXXent_r.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
getXXent.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
grp-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
hosts-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
key-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
makedb.c Update copyright dates not handled by scripts/update-copyrights. 2018-01-01 00:41:16 +00:00
Makefile nss_files: Fix file stream leak in aliases lookup [BZ #23521] 2018-08-14 10:57:48 +02:00
netgrp-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
network-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
nss_hash.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
nss_test1.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
nss_test2.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
nss_test.h Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
nss_test.ver Extend NSS test suite 2017-07-17 15:52:44 -04:00
nss.h Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
nsswitch.c [BZ #20271] Add newlines in __libc_fatal calls. 2018-11-09 10:17:07 -05:00
nsswitch.conf More configurability for secondary group lookup 2011-05-10 00:36:29 -04:00
nsswitch.h Fix multiple definitions of __nss_*_database (bug 22918) 2018-03-03 17:44:24 +01:00
proto-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
pwd-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
rewrite_field.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
rpc-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
service-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
sgrp-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
spwd-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
test-digits-dots.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
test-netdb.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
tst-cancel-getpwuid_r.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
tst-field.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
tst-nss-files-alias-leak.c nss_files: Fix file stream leak in aliases lookup [BZ #23521] 2018-08-14 10:57:48 +02:00
tst-nss-files-hosts-erange.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
tst-nss-files-hosts-getent.c Fix copyright years in recent commits 2018-07-10 11:03:08 +02:00
tst-nss-files-hosts-multi.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
tst-nss-getpwent.c nss: Adjust tests to use nss_files only 2018-01-30 14:26:31 +01:00
tst-nss-static.c Update nss tests to new skeleton 2017-08-17 18:00:51 -04:00
tst-nss-test1.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
tst-nss-test2.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
tst-nss-test3.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
tst-nss-test4.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
tst-nss-test5.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
valid_field.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
valid_list_field.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00
Versions nss: Export nscd hash function as __nss_hash [BZ #22459] 2017-11-23 14:08:11 +01:00
XXX-lookup.c Update copyright dates with scripts/update-copyrights. 2018-01-01 00:32:25 +00:00