Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/1.2/patches/807090/?format=api
{ "id": 807090, "url": "http://patchwork.ozlabs.org/api/1.2/patches/807090/?format=api", "web_url": "http://patchwork.ozlabs.org/project/lede/patch/1504013358-17336-1-git-send-email-kevin@darbyshire-bryant.me.uk/", "project": { "id": 54, "url": "http://patchwork.ozlabs.org/api/1.2/projects/54/?format=api", "name": "LEDE development", "link_name": "lede", "list_id": "lede-dev.lists.infradead.org", "list_email": "lede-dev@lists.infradead.org", "web_url": "http://lede-project.org/", "scm_url": "", "webscm_url": "http://git.lede-project.org/", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<1504013358-17336-1-git-send-email-kevin@darbyshire-bryant.me.uk>", "list_archive_url": null, "date": "2017-08-29T13:29:18", "name": "[LEDE-DEV] dnsmasq: forward.c: fix CVE-2017-13704", "commit_ref": null, "pull_url": null, "state": "accepted", "archived": false, "hash": "964dc901c975030fbc37e2481e60ba8a3e5d2c03", "submitter": { "id": 66241, "url": "http://patchwork.ozlabs.org/api/1.2/people/66241/?format=api", "name": "Kevin Darbyshire-Bryant", "email": "kevin@darbyshire-bryant.me.uk" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/lede/patch/1504013358-17336-1-git-send-email-kevin@darbyshire-bryant.me.uk/mbox/", "series": [ { "id": 368, "url": "http://patchwork.ozlabs.org/api/1.2/series/368/?format=api", "web_url": "http://patchwork.ozlabs.org/project/lede/list/?series=368", "date": "2017-08-29T13:29:18", "name": "[LEDE-DEV] dnsmasq: forward.c: fix CVE-2017-13704", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/368/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/807090/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/807090/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@bilbo.ozlabs.org", "Authentication-Results": [ "ozlabs.org; spf=none (mailfrom)\n\tsmtp.mailfrom=lists.infradead.org (client-ip=65.50.211.133;\n\thelo=bombadil.infradead.org;\n\tenvelope-from=lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;\n\treceiver=<UNKNOWN>)", "ozlabs.org; dkim=pass (2048-bit key;\n\tunprotected) header.d=lists.infradead.org\n\theader.i=@lists.infradead.org header.b=\"PZamcqH9\"; \n\tdkim=fail reason=\"signature verification failed\" (1024-bit key;\n\tunprotected) header.d=darbyshire-bryant.me.uk\n\theader.i=@darbyshire-bryant.me.uk header.b=\"law8ZCCE\"; \n\tdkim-atps=neutral", "spf=none (sender IP is )\n\tsmtp.mailfrom=kevin@darbyshire-bryant.me.uk; " ], "Received": [ "from bombadil.infradead.org (bombadil.infradead.org\n\t[65.50.211.133])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xhTyt5wTNz9t2v\n\tfor <incoming@patchwork.ozlabs.org>;\n\tTue, 29 Aug 2017 23:30:14 +1000 (AEST)", "from localhost ([127.0.0.1] helo=bombadil.infradead.org)\n\tby bombadil.infradead.org with esmtp (Exim 4.87 #1 (Red Hat Linux))\n\tid 1dmgaY-0006DM-69; Tue, 29 Aug 2017 13:29:54 +0000", "from mail-eopbgr30066.outbound.protection.outlook.com\n\t([40.107.3.66] helo=EUR03-AM5-obe.outbound.protection.outlook.com)\n\tby bombadil.infradead.org with esmtps (Exim 4.87 #1 (Red Hat Linux))\n\tid 1dmgaR-0005y1-0Z\n\tfor lede-dev@lists.infradead.org; Tue, 29 Aug 2017 13:29:53 +0000", "from Animal.darbyshire-bryant.me.uk (2a02:c7f:1220:bf20::fb0e) by\n\tAM2PR07MB1028.eurprd07.prod.outlook.com (2a01:111:e400:8444::25)\n\twith Microsoft SMTP Server (version=TLS1_2,\n\tcipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.13.2;\n\tTue, 29 Aug 2017 13:29:23 +0000" ], "DKIM-Signature": [ "v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;\n\td=lists.infradead.org; s=bombadil.20170209; h=Sender:\n\tContent-Transfer-Encoding:Content-Type:Cc:List-Subscribe:List-Help:List-Post:\n\tList-Archive:List-Unsubscribe:List-Id:Subject:MIME-Version:Message-Id:Date:To\n\t:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From:\n\tResent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:\n\tList-Owner; bh=dCEwryDHXhS95o+Z/gr2qs+nIIIkznnP6LVKV80a/XQ=;\n\tb=PZamcqH9T1kKBD\n\t8Ifl5Aw5FR3IJEB3MA4Xarr+MVOQXJ+XlQl4q1sJf9iV0TNkYOHFrquBc6sks2398rtaOOVeDwaes\n\tA420EBjJ9E04kygghcBvh2QzFqw/Wmi7gKJncBX6xHvnAmuuBBJWVr15XDEjv6QnjnKwz3dl4RBrE\n\tNt8hYiygCbi3FsHV7eETBvLEyvNbPta71p9t4TwZOCKd/RisKT5qH6YqdyfMEu5HtOaBkSuqWyD7r\n\twuBUG2Ek3WoliOKvS2G6vsgx/MD43BKP7ah+D11XedK+leQsH13iQX4pa2aVoIjs4SImAmBniTL8R\n\trrs4AJQqaWx9MxIDCVkg==;", "v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=darbyshire-bryant.me.uk; s=selector1;\n\th=From:Date:Subject:Message-ID:Content-Type:MIME-Version;\n\tbh=Yx8M5aa4RpotsvHcu13ylqsZmZ6SvQJnQS6881vVCXc=;\n\tb=law8ZCCE3IxID1ClM4NNK/m0FTkeTWSgjfJDCU0bG5CSXKFtTENxSQNtPHUIuQ/eO39VPONvhIqQdRyUSMVAfyUszCNZwQJoy9Yk0cxrIGj/B9Es9LkYqnq09H0grMBrQzBNvdm9OXKYCfqK80/bRaXJP1UMOLU8zJdb2o5lmfU=" ], "From": "Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>", "To": "lede-dev@lists.infradead.org", "Date": "Tue, 29 Aug 2017 14:29:18 +0100", "Message-Id": "<1504013358-17336-1-git-send-email-kevin@darbyshire-bryant.me.uk>", "X-Mailer": "git-send-email 2.7.4", "MIME-Version": "1.0", "X-Originating-IP": "[2a02:c7f:1220:bf20::fb0e]", "X-ClientProxiedBy": "VI1PR0902CA0009.eurprd09.prod.outlook.com\n\t(2603:10a6:800:d7::19) To AM2PR07MB1028.eurprd07.prod.outlook.com\n\t(2a01:111:e400:8444::25)", "X-MS-PublicTrafficType": "Email", "X-MS-Office365-Filtering-Correlation-Id": "a45b1860-1185-45f9-7dc3-08d4eee1f6be", "X-Microsoft-Antispam": "UriScan:; BCL:0; PCL:0;\n\tRULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(2017082002075)(300000503095)(300135400095)(201703131423075)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);\n\tSRVR:AM2PR07MB1028; ", "X-Microsoft-Exchange-Diagnostics": [ "1; AM2PR07MB1028;\n\t3:kdOVouL58jVx1P5cdBg5mjoXwgVMH9nNZnkO2U7oCYqWjLuOhXgb6F1WQk7nTB67+bCSX0i9XMSiGKgbkbSi12lvAm0/fuU0FToL4F69VFdyU0sE0iNqujRLG4ol88fLqbyIE9dl+Q6DU5nLCN4EGfeDJUjY5AYKVnJ+naYq1grcSGsfmEISanhWPKRmJ6mzNio1mPywBilWxA3m/E+cfID2h0+f+Zj9YQtshP0aw7ofNilCtzBYIelLAODvOKQg;\n\t25:Jxr0/b0792G5Ri/b7WQXG0aAJ5wspokeNVOwfB+e/GMq2+V02MEqyIWodHDXtldFciS8HzOfQBeUFs6sGYY3MdaIQJsRFHv+WKy3CkrcZoZcZ3S1OgPBtjAOb3FeN8i6rIdi34CS11KBqfZctiDnWrBxjzTrTelxL2/KnutVoPfHpgO9EZjd9ebCwWX39buaOQWSTqDLXyPbcfVNh2Z9H3pbbuY44CBnk14Zq84I2ln6Q6G9dptS2Ly4/eIhP4eC4V3DFRznEK7q7tEkmgsLChwrxfRipGvIgylZnEJ9k0ALfo3E9AIdv7ghSrxS5t0QcTQOsUsjl9KIowsKv23reA==;\n\t31:atlzBHuSi8io+Fda0pW7QsEZVaPzqDfKV57OJ5QwguD7AFBH+YZv5k21VyoLqOabkDQHzfmnMtyXuZ1Onl/tdCzaZjYeMR46fDziHVLS4p2MuVa/aYE1eZahiYalJ0dm+Gcz92pLDkxU0ZQdCl0R4ZqrOMnzct+jwZAg8U2y5RyCMkvoeDeLnGdYNL59cj968SSBp/gi1MZlvC7A0UtCrb2wPdivEzc/ZDKPc8O9X0Q=", "1; AM2PR07MB1028;\n\t4:WEPgxVcCdaxK10pXaZFmvkcEGXtfmUCw6BP11WMejd1HrGLnOzvysC8yIDKARVJMVcI6Ido2jsEkp/nnx3ZPXTWiBCWBjnvUD7lvplakKDV4J46TQAw5xB5YH0JolHraA/6V4rp2HHaMmleUcW+i3sEYrb5y3/INxbsR1cLz5r53GJ5o9bVJ40KlmCiP+Y3XG5hr+ajAbKGjcwsDd+slMoLcUg891NHl/j5w2hZPmEC2sGFIqGQMYsE3Bi3YMDwn", "=?us-ascii?Q?1; AM2PR07MB1028;\n\t23:uZ542ly63obvOz6nUnA2+AyMqJJx6wMvp+cy31k0e?=\n\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", "1; AM2PR07MB1028;\n\t6:A0LYFVDQLORINKZ+RN9vgifbw60zbY61vN+LuBAnAZXcYTd9hvLJHL+eLNBlmVY1dbJkybyNFWWJBmgv2Y8a13El4G2F0gq8z/XaxOe+mP7BEXVb2lcl7DZhpflcKe2q6/qLLVLgplzBE4Y4ED8QsZ0aW9e6CuV9dM0FcVvPgmrVXPDEA8k7wIpz1G+f524hIIoIoTpbo9a2/hJ9OQo49wR4d0VhMDFd4Z8FadpjYZ3hM0EYxsf0TVCVMTSrPdfYKVGXx1BXJFs13N1JmJBpb6HEnZ8bEiy3N0FQFQJ5eP1TmqzmUUJTfuKAGDToQs39+s60O0/Wk8sSzLuEKkJBFw==;\n\t5:MTSHAjsLB0+0eYt3q/qVPDFDdyaBDUDw3jdjHs9XqRRyFV7LjI+axrIqMcuZSGq4XsAj0lhiC/XjTw1a0+MDqomJi62McDaYEubYEAzBbyiEKzHZPtsGPAA2+kpE3srYCMTnJUtJ8LoZ1M5opZIdsA==;\n\t24:TlMBxyQ/zqptG73TFdNJ7joNpPpPzAPLY9TcIc4Px9+KyaggTufgdyD/xjbByEsgXsvnvTnkn4HCSctUK+2rmUuuMBU7QzTobT+JPIC2Pzg=;\n\t7:gGfTGAS2QjqJPb3knQuJKsRC2Jl6wswuaNoVKnQ4vPJKIARjcE+f4Tw8eI0gK0vU9ifvNfmcOqeGn9mqlGPLCUS3cLST2tOXRVPUmQyOa6GY0CjuggyusNVSAo2HVgDtoecEJdcQLVTeLQ5a80NoE2BeY6YCIlBNgpCF9NKN+LmnzeVeTLYqg2yf4YZng00jKS7NreewSR5NFAgdD5eHeEr8a3Ui8sCZSGt3P3k+AeA=" ], "X-MS-TrafficTypeDiagnostic": "AM2PR07MB1028:", "X-Exchange-Antispam-Report-Test": "UriScan:;", "X-Microsoft-Antispam-PRVS": "<AM2PR07MB102840A866623C4ED2A1B8B4A59F0@AM2PR07MB1028.eurprd07.prod.outlook.com>", "X-Exchange-Antispam-Report-CFA-Test": "BCL:0; PCL:0;\n\tRULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(100000703101)(100105400095)(6041248)(20161123560025)(20161123564025)(20161123555025)(20161123562025)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(2016111802025)(6043046)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);\n\tSRVR:AM2PR07MB1028; BCL:0; PCL:0;\n\tRULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);\n\tSRVR:AM2PR07MB1028; ", "X-Forefront-PRVS": "0414DF926F", "X-Forefront-Antispam-Report": "SFV:NSPM;\n\tSFS:(10009020)(4630300001)(7370300001)(6009001)(39830400002)(288314003)(189002)(199003)(7736002)(230783001)(105586002)(6116002)(50986999)(4326008)(2361001)(305945005)(106356001)(110136004)(50226002)(107886003)(7350300001)(25786009)(97736004)(81156014)(189998001)(478600001)(5660300001)(101416001)(81166006)(6306002)(2906002)(5003940100001)(36756003)(68736007)(53936002)(69596002)(50466002)(42882006)(48376002)(8676002)(6916009)(33646002)(74482002)(6486002)(53416004)(42186005)(2351001)(6666003)(47776003)(86362001)(575784001);\n\tDIR:OUT; SFP:1101; SCL:1; SRVR:AM2PR07MB1028;\n\tH:Animal.darbyshire-bryant.me.uk; \n\tFPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; ", "Received-SPF": "None (protection.outlook.com: darbyshire-bryant.me.uk does not\n\tdesignate permitted sender hosts)", "SpamDiagnosticOutput": "1:99", "SpamDiagnosticMetadata": "NSPM", "X-OriginatorOrg": "darbyshire-bryant.me.uk", "X-MS-Exchange-CrossTenant-OriginalArrivalTime": "29 Aug 2017 13:29:23.8470\n\t(UTC)", "X-MS-Exchange-CrossTenant-FromEntityHeader": "Hosted", "X-MS-Exchange-Transport-CrossTenantHeadersStamped": "AM2PR07MB1028", "X-CRM114-Version": "20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 ", "X-CRM114-CacheID": "sfid-20170829_062947_428086_8D004132 ", "X-CRM114-Status": "GOOD ( 10.89 )", "X-Spam-Score": "-4.8 (----)", "X-Spam-Report": "SpamAssassin version 3.4.1 on bombadil.infradead.org summary:\n\tContent analysis details: (-4.8 points)\n\tpts rule name description\n\t---- ----------------------\n\t--------------------------------------------------\n\t-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,\n\tno trust [40.107.3.66 listed in list.dnswl.org]\n\t-2.8 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)\n\t[40.107.3.66 listed in wl.mailspike.net]\n\t-0.0 SPF_PASS SPF: sender matches SPF record\n\t-0.0 SPF_HELO_PASS SPF: HELO matches SPF record\n\t-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%\n\t[score: 0.0000]\n\t-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature\n\t0.1 DKIM_SIGNED Message has a DKIM or DK signature,\n\tnot necessarily valid\n\t-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from\n\tauthor's domain", "Subject": "[LEDE-DEV] [PATCH] dnsmasq: forward.c: fix CVE-2017-13704", "X-BeenThere": "lede-dev@lists.infradead.org", "X-Mailman-Version": "2.1.21", "Precedence": "list", "List-Id": "<lede-dev.lists.infradead.org>", "List-Unsubscribe": "<http://lists.infradead.org/mailman/options/lede-dev>,\n\t<mailto:lede-dev-request@lists.infradead.org?subject=unsubscribe>", "List-Archive": "<http://lists.infradead.org/pipermail/lede-dev/>", "List-Post": "<mailto:lede-dev@lists.infradead.org>", "List-Help": "<mailto:lede-dev-request@lists.infradead.org?subject=help>", "List-Subscribe": "<http://lists.infradead.org/mailman/listinfo/lede-dev>,\n\t<mailto:lede-dev-request@lists.infradead.org?subject=subscribe>", "Cc": "Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Sender": "\"Lede-dev\" <lede-dev-bounces@lists.infradead.org>", "Errors-To": "lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org" }, "content": "Fix SIGSEGV in rfc1035.c answer_request() line 1228 where memset()\nis called with header & limit pointing at the same address and thus\ntries to clear memory from before the buffer begins.\n\nanswer_request() is called with an invalid edns packet size provided by\nthe client. Ensure the udp_size provided by the client is bounded by\n512 and configured maximum as per RFC 6891 6.2.3 \"Values lower than 512\nMUST be treated as equal to 512\"\n\nThe client that exposed the problem provided a payload udp size of 0.\n\nSigned-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>\n---\n package/network/services/dnsmasq/Makefile | 2 +-\n .../dnsmasq/patches/020-fix-CVE-2017-13704.patch | 37 ++++++++++++++++++++++\n 2 files changed, 38 insertions(+), 1 deletion(-)\n create mode 100644 package/network/services/dnsmasq/patches/020-fix-CVE-2017-13704.patch", "diff": "diff --git a/package/network/services/dnsmasq/Makefile b/package/network/services/dnsmasq/Makefile\nindex d7f14f9..bd7f610 100644\n--- a/package/network/services/dnsmasq/Makefile\n+++ b/package/network/services/dnsmasq/Makefile\n@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk\n \n PKG_NAME:=dnsmasq\n PKG_VERSION:=2.77\n-PKG_RELEASE:=9\n+PKG_RELEASE:=10\n \n PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz\n PKG_SOURCE_URL:=http://thekelleys.org.uk/dnsmasq/\ndiff --git a/package/network/services/dnsmasq/patches/025-fix-CVE-2017-13704.patch b/package/network/services/dnsmasq/patches/025-fix-CVE-2017-13704.patch\nnew file mode 100644\nindex 0000000..8848131\n--- /dev/null\n+++ b/package/network/services/dnsmasq/patches/025-fix-CVE-2017-13704.patch\n@@ -0,0 +1,37 @@\n+From 38af9b1ac3242a4128e88069c495024caa565f0e Mon Sep 17 00:00:00 2001\n+From: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>\n+Date: Tue, 29 Aug 2017 12:35:40 +0100\n+Subject: [PATCH] forward.c: fix CVE-2017-13704\n+\n+Fix SIGSEGV in rfc1035.c answer_request() line 1228 where memset()\n+is called with header & limit pointing at the same address and thus\n+tries to clear memory from before the buffer begins.\n+\n+answer_request() is called with an invalid edns packet size provided by\n+the client. Ensure the udp_size provided by the client is bounded by\n+512 and configured maximum as per RFC 6891 6.2.3 \"Values lower than 512\n+MUST be treated as equal to 512\"\n+\n+The client that exposed the problem provided a payload udp size of 0.\n+\n+Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>\n+---\n+ src/forward.c | 2 ++\n+ 1 file changed, 2 insertions(+)\n+\n+diff --git a/src/forward.c b/src/forward.c\n+index f22556a..62c5a5a 100644\n+--- a/src/forward.c\n++++ b/src/forward.c\n+@@ -1408,6 +1408,8 @@ void receive_query(struct listener *listen, time_t now)\n+ \t defaults to 512 */\n+ if (udp_size > daemon->edns_pktsz)\n+ \tudp_size = daemon->edns_pktsz;\n++ if (udp_size < 512)\n++\tudp_size = 512; /* RFC 6891 6.2.3 */\n+ }\n+ \n+ #ifdef HAVE_AUTH\n+-- \n+2.7.4\n+\n", "prefixes": [ "LEDE-DEV" ] }