Patch Detail
get:
Show a patch.
patch:
Update a patch.
put:
Update a patch.
GET /api/patches/806638/?format=api
{ "id": 806638, "url": "http://patchwork.ozlabs.org/api/patches/806638/?format=api", "web_url": "http://patchwork.ozlabs.org/project/lede/patch/1503934578-4645-1-git-send-email-kevin@darbyshire-bryant.me.uk/", "project": { "id": 54, "url": "http://patchwork.ozlabs.org/api/projects/54/?format=api", "name": "LEDE development", "link_name": "lede", "list_id": "lede-dev.lists.infradead.org", "list_email": "lede-dev@lists.infradead.org", "web_url": "http://lede-project.org/", "scm_url": "", "webscm_url": "http://git.lede-project.org/", "list_archive_url": "", "list_archive_url_format": "", "commit_url_format": "" }, "msgid": "<1503934578-4645-1-git-send-email-kevin@darbyshire-bryant.me.uk>", "list_archive_url": null, "date": "2017-08-28T15:36:18", "name": "[LEDE-DEV] dnsmasq: mitigate CVE-2017-13704", "commit_ref": null, "pull_url": null, "state": "superseded", "archived": false, "hash": "051a4a52d0684e9932803a9563c5e938beb11cf9", "submitter": { "id": 66241, "url": "http://patchwork.ozlabs.org/api/people/66241/?format=api", "name": "Kevin Darbyshire-Bryant", "email": "kevin@darbyshire-bryant.me.uk" }, "delegate": null, "mbox": "http://patchwork.ozlabs.org/project/lede/patch/1503934578-4645-1-git-send-email-kevin@darbyshire-bryant.me.uk/mbox/", "series": [ { "id": 199, "url": "http://patchwork.ozlabs.org/api/series/199/?format=api", "web_url": "http://patchwork.ozlabs.org/project/lede/list/?series=199", "date": "2017-08-28T15:36:18", "name": "[LEDE-DEV] dnsmasq: mitigate CVE-2017-13704", "version": 1, "mbox": "http://patchwork.ozlabs.org/series/199/mbox/" } ], "comments": "http://patchwork.ozlabs.org/api/patches/806638/comments/", "check": "pending", "checks": "http://patchwork.ozlabs.org/api/patches/806638/checks/", "tags": {}, "related": [], "headers": { "Return-Path": "<lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org>", "X-Original-To": "incoming@patchwork.ozlabs.org", "Delivered-To": "patchwork-incoming@bilbo.ozlabs.org", "Authentication-Results": [ "ozlabs.org; spf=none (mailfrom)\n\tsmtp.mailfrom=lists.infradead.org (client-ip=65.50.211.133;\n\thelo=bombadil.infradead.org;\n\tenvelope-from=lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org;\n\treceiver=<UNKNOWN>)", "ozlabs.org; dkim=pass (2048-bit key;\n\tunprotected) header.d=lists.infradead.org\n\theader.i=@lists.infradead.org header.b=\"RL8gWQTH\"; \n\tdkim=fail reason=\"signature verification failed\" (1024-bit key;\n\tunprotected) header.d=darbyshire-bryant.me.uk\n\theader.i=@darbyshire-bryant.me.uk header.b=\"igtYrQKt\"; \n\tdkim-atps=neutral", "spf=none (sender IP is )\n\tsmtp.mailfrom=kevin@darbyshire-bryant.me.uk; " ], "Received": [ "from bombadil.infradead.org (bombadil.infradead.org\n\t[65.50.211.133])\n\t(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256\n\tbits)) (No client certificate requested)\n\tby ozlabs.org (Postfix) with ESMTPS id 3xgwqm6W0Rz9sNn\n\tfor <incoming@patchwork.ozlabs.org>;\n\tTue, 29 Aug 2017 01:37:08 +1000 (AEST)", "from localhost ([127.0.0.1] helo=bombadil.infradead.org)\n\tby bombadil.infradead.org with esmtp (Exim 4.87 #1 (Red Hat Linux))\n\tid 1dmM5v-0001Or-W6; Mon, 28 Aug 2017 15:36:56 +0000", "from mail-he1eur01on0075.outbound.protection.outlook.com\n\t([104.47.0.75] helo=EUR01-HE1-obe.outbound.protection.outlook.com)\n\tby bombadil.infradead.org with esmtps (Exim 4.87 #1 (Red Hat Linux))\n\tid 1dmM5r-0001IP-Ay\n\tfor lede-dev@lists.infradead.org; Mon, 28 Aug 2017 15:36:54 +0000", "from Animal.darbyshire-bryant.me.uk (2a02:c7f:1220:bf20::fb0e) by\n\tAM2PR07MB1025.eurprd07.prod.outlook.com (2a01:111:e400:8444::22)\n\twith Microsoft SMTP Server (version=TLS1_2,\n\tcipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.20.13.2;\n\tMon, 28 Aug 2017 15:36:21 +0000" ], "DKIM-Signature": [ "v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;\n\td=lists.infradead.org; s=bombadil.20170209; h=Sender:\n\tContent-Transfer-Encoding:Content-Type:Cc:List-Subscribe:List-Help:List-Post:\n\tList-Archive:List-Unsubscribe:List-Id:Subject:MIME-Version:Message-Id:Date:To\n\t:From:Reply-To:Content-ID:Content-Description:Resent-Date:Resent-From:\n\tResent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:\n\tList-Owner; bh=DBnplIhMNlP5fiNKvh5SynFkm8yX+svYIsDPUGr5x+8=;\n\tb=RL8gWQTH4cgvGk\n\tXlNLdGU1qYHsQmc+sKjCgVB5nabeIq7eGlYwAR0qKdKWf/nKRYL2ULbWLuEi97uCFgyLPshu1I6Cx\n\tMsRZG9ivppvoPMaaKmVQ158cZlD5W1XEKg0gYYLxTTJo2UfXr5W0wkIDjS1cykM8hoq6htuicFn/u\n\tlZa7Q+oj3m5rtmMneTqXk3KhGy7tp3IBn5ZDxn1TBlSqnQirLZuCSpeT/B6r1fg4N3o1hFmN1Fjbr\n\tNCQwyAnfIhAXllPBN/2RamcKSZjqb0fGep4Fy/2+HSJrv/phsUjg26tmscylUPLQxC5ypbWOTwzQL\n\tPL0yPEGSGHBQXjYVgYcw==;", "v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=darbyshire-bryant.me.uk; s=selector1;\n\th=From:Date:Subject:Message-ID:Content-Type:MIME-Version;\n\tbh=AfxcebVKP+TOtkDwzJeVa3BsOy/lpKf6m5ronBKBBEI=;\n\tb=igtYrQKtaL7xrcG3D//gbLCqv/O7MxgueO+xrtKDaTSOW/jQdETe9o9GA7lHxs0wLyGd+np3e4VxZI6xWk0Pm2NKC2Am6fR8r56/bTUKOYcSudRr3ue0UXiw6c7r0n8l+5hOOIs/YXqlZqIVHUVEdA3fT30srKbk/IkMNwGIDrU=" ], "From": "Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>", "To": "lede-dev@lists.infradead.org", "Date": "Mon, 28 Aug 2017 16:36:18 +0100", "Message-Id": "<1503934578-4645-1-git-send-email-kevin@darbyshire-bryant.me.uk>", "X-Mailer": "git-send-email 2.7.4", "MIME-Version": "1.0", "X-Originating-IP": "[2a02:c7f:1220:bf20::fb0e]", "X-ClientProxiedBy": "DB6PR1001CA0046.EURPRD10.PROD.OUTLOOK.COM\n\t(2603:10a6:4:55::32) To AM2PR07MB1025.eurprd07.prod.outlook.com\n\t(2a01:111:e400:8444::22)", "X-MS-Office365-Filtering-Correlation-Id": "5cdd6dca-20e5-44f7-99b6-08d4ee2a88f1", "X-Microsoft-Antispam": "UriScan:; BCL:0; PCL:0;\n\tRULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(2017082002075)(300000503095)(300135400095)(201703131423075)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095);\n\tSRVR:AM2PR07MB1025; ", "X-Microsoft-Exchange-Diagnostics": [ "1; AM2PR07MB1025;\n\t3:EqqYzYJR2+x24EPX0GAgYuFXSgaMJLBDpDnT6aojUuyalIgZK1yZmV+DRAUk1F+HhSu2HGVHqoWTEc0ExfH/MYX4qY31bCoot53nOzCd12Iv9mAxfWR9VIRLGKgaU38YSjZI89GEOcnlDwCaak/XpQzLiIBXVH0BXY/xNfphwFdnCQq9IXWgLxEUZ/ic/sTV0vZ98rTAff9WYHmdZklv1IuvHn2VlX6Jj5TBN9MkcB+vAgoq2pBWiJkRslfUuEE2;\n\t25:cBD1gNs/RdhfiYoC8staVE45SZldU8jVgs96x2PhP86cxO3lcEpLZEcgUZ8Hat2kGoceExWtZH0jbKWm4XcJV65kdX1lKFbVeOdKvuh2YbbBx1fAjdfTrlZeb2hlyCp8gZa7zxSG8/gi4BTcze6ciNuHGqkmWhfmx+F0L7hViKHSm6pm/Orrb2HaCnxecMXyoIrw1FgrlzJrJGMnjuluPDSjRlkE8GP6TKgsbaHM2F7dSnYzmxK3PQ93V6TIGTr3rhq/j9i7OZ0n/pn7VgGmtEuVWcolPUrREXQ5jVGcEZZ7UiVkGbygrRFNCPrBQZMvVpLbpd/lWIE15N716Y7TXg==;\n\t31:QSOvunZRT3IQhOvaefF7h3NJRWvoT4RUhYO4NNaUczE3vMcP7LQfHZgIB0KldPqH1knAPI25XwUkR5RIxWq4hgbXf5hj206luqXirHiiBy1zyLgGyY0K4FfjSzKAKQ74wz1v7+pzr/1Amlg66Irs/hHRvSVj7bVgyZ/sycSMYeraotdTjSTcimBTRlgKD5u0CjUeBREQHh693HuG8kXFh55sDvBqz0+XSwSBDIiq8D8=", "1; AM2PR07MB1025;\n\t4:WM8qxiyQaT3/NcRUpo2haXazwirW+93jNKNnk+b5IibxZP0qpVtQVrCo2wTT/AnkMcF3EoAvdhdmiokLwTvy5uJzLfE9j2rxirKXzS685FEgXWtTo7YfG2+lmNw+fbvvnwCiXjKcCfoCW2yq9iubeqQvwhpOsoheXskkuXJmeDwhKNk99LcVFS9nr+tSX4vIjjMJ80yNz8EMxLZUs7c5/t7jQwmYwiyM+U4Fl2I+k/a2mP3uc5g4KlcEHOdSS92i", "=?us-ascii?Q?1; AM2PR07MB1025;\n\t23:5TVstcB9G4vVMJ8DlIdGtANlEllu54OzLmx+WfEpT?=\n\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", "1; AM2PR07MB1025;\n\t6:Mlz2C8Uf/19obgJe8o75AFf0JSxrYLVR9jJTLRbC3L9wlG0kw4DTw82ccyY4ABHjx8Xt3ACZall8Rm2lya8efBTf/QAUSUANJI3zNWWGHghT4xe4Bh0uNn8mFviQS/YNlrz+0fZl475V02k7gYbwHBWVgI54dlEjWlX4sQxkMGXuz0AsDd0a9q8/PYb+4asD0ujFGXZNZGZTYtspg5bQ5S2xCjmWFHekUjqtLVTssDymWiNbCPh9APa7En7pMnmV9vxctCtmzUlb/d9qGMHjF7rM83a0BqGzhR3WjSZkdzP5WTKoMqOqnPZE/td/YOcDaXXWjxftgU6TnY1qDkg9ag==;\n\t5:ciyLv0LATlrskdmV/TFiArDHiWWXS66hxOWsk9N4Rxnhafh7j6ZhnP9+IcUr4EjUYwZ1h9n1ZvHdwSNLLyXSaEXgNb74MrXp8K2ccpHWUJU1cFkeKYPjnGICwidy/12Kz04dgo0NP/0cj92yNTjdRQ==;\n\t24:B4wpO6WQy/3px245ga20aAa+lE+LL8r64iDrE5wpcvqqMQqtppQqZm3YaOLFYOnJJDEDZYH2JQakpc9WLnHiMFwxzIA76Toejmfwe1fmL3Y=;\n\t7:7xy5pIr6Wxo1j70H1GYsKo/l1P1hDXOhj0og6V3txZQgcdA64vMUAbbBCWGzHf76g90VR5igRX+0qO+qZkq47p/uqbw4msPiplFB28/Pt8ZbNPmjVW64N8ToyWHY2ioRxYxzgxd9nID8MhZjZn8mQujZl8fGCPxX31zscXCcAOAFkh6khyM1Re2AK6z7qloiw9iBy0ALSdRjr98z1tAzL+rDN7YHH5w4GIRVGFh3NMQ=" ], "X-MS-PublicTrafficType": "Email", "X-MS-TrafficTypeDiagnostic": "AM2PR07MB1025:", "X-Exchange-Antispam-Report-Test": "UriScan:;", "X-Microsoft-Antispam-PRVS": "<AM2PR07MB10254125605ECC09E3D954C8A59E0@AM2PR07MB1025.eurprd07.prod.outlook.com>", "X-Exchange-Antispam-Report-CFA-Test": "BCL:0; PCL:0;\n\tRULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(601004)(2401047)(8121501046)(5005006)(93006095)(93001095)(100000703101)(100105400095)(10201501046)(3002001)(6041248)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(20161123560025)(20161123555025)(20161123558100)(2016111802025)(20161123564025)(20161123562025)(6043046)(6072148)(201708071742011)(100000704101)(100105200095)(100000705101)(100105500095);\n\tSRVR:AM2PR07MB1025; BCL:0; PCL:0;\n\tRULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095);\n\tSRVR:AM2PR07MB1025; ", "X-Forefront-PRVS": "0413C9F1ED", "X-Forefront-Antispam-Report": "SFV:NSPM;\n\tSFS:(10009020)(7370300001)(4630300001)(6009001)(39830400002)(189002)(288314003)(199003)(42186005)(69596002)(50986999)(53416004)(5660300001)(5003940100001)(101416001)(33646002)(86362001)(230783001)(4326008)(106356001)(189998001)(47776003)(105586002)(2361001)(42882006)(6916009)(2351001)(6666003)(6116002)(68736007)(107886003)(110136004)(48376002)(6306002)(25786009)(53936002)(305945005)(2906002)(478600001)(7736002)(74482002)(97736004)(7350300001)(50226002)(81156014)(81166006)(8676002)(6486002)(36756003)(50466002);\n\tDIR:OUT; SFP:1101; SCL:1; SRVR:AM2PR07MB1025;\n\tH:Animal.darbyshire-bryant.me.uk; \n\tFPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; ", "Received-SPF": "None (protection.outlook.com: darbyshire-bryant.me.uk does not\n\tdesignate permitted sender hosts)", "SpamDiagnosticOutput": "1:99", "SpamDiagnosticMetadata": "NSPM", "X-OriginatorOrg": "darbyshire-bryant.me.uk", "X-MS-Exchange-CrossTenant-OriginalArrivalTime": "28 Aug 2017 15:36:21.7779\n\t(UTC)", "X-MS-Exchange-CrossTenant-FromEntityHeader": "Hosted", "X-MS-Exchange-Transport-CrossTenantHeadersStamped": "AM2PR07MB1025", "X-CRM114-Version": "20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 ", "X-CRM114-CacheID": "sfid-20170828_083651_918841_B4E9128E ", "X-CRM114-Status": "GOOD ( 12.02 )", "X-Spam-Score": "-3.0 (---)", "X-Spam-Report": "SpamAssassin version 3.4.1 on bombadil.infradead.org summary:\n\tContent analysis details: (-3.0 points)\n\tpts rule name description\n\t---- ----------------------\n\t--------------------------------------------------\n\t-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,\n\tno trust [104.47.0.75 listed in list.dnswl.org]\n\t-1.0 RCVD_IN_MSPIKE_H5 RBL: Excellent reputation (+5)\n\t[104.47.0.75 listed in wl.mailspike.net]\n\t-0.0 SPF_PASS SPF: sender matches SPF record\n\t-0.0 SPF_HELO_PASS SPF: HELO matches SPF record\n\t-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%\n\t[score: 0.0000]\n\t-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature\n\t0.1 DKIM_SIGNED Message has a DKIM or DK signature,\n\tnot necessarily valid\n\t-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from\n\tauthor's\n\tdomain -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders", "Subject": "[LEDE-DEV] [PATCH] dnsmasq: mitigate CVE-2017-13704", "X-BeenThere": "lede-dev@lists.infradead.org", "X-Mailman-Version": "2.1.21", "Precedence": "list", "List-Id": "<lede-dev.lists.infradead.org>", "List-Unsubscribe": "<http://lists.infradead.org/mailman/options/lede-dev>,\n\t<mailto:lede-dev-request@lists.infradead.org?subject=unsubscribe>", "List-Archive": "<http://lists.infradead.org/pipermail/lede-dev/>", "List-Post": "<mailto:lede-dev@lists.infradead.org>", "List-Help": "<mailto:lede-dev-request@lists.infradead.org?subject=help>", "List-Subscribe": "<http://lists.infradead.org/mailman/listinfo/lede-dev>,\n\t<mailto:lede-dev-request@lists.infradead.org?subject=subscribe>", "Cc": "Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>", "Content-Type": "text/plain; charset=\"us-ascii\"", "Content-Transfer-Encoding": "7bit", "Sender": "\"Lede-dev\" <lede-dev-bounces@lists.infradead.org>", "Errors-To": "lede-dev-bounces+incoming=patchwork.ozlabs.org@lists.infradead.org" }, "content": "Work around a problem where answer_request() attempts to clear from the\nend of a request to end of request buffer but the end of the buffer is\nat the same place as the start.\n\nOriginally this meant that memset() tried to clear data before the\nbuffer leading to segmentation violation. Instead only clear to end of\nbuffer it is bigger than the request length.\n\nSigned-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>\n---\n package/network/services/dnsmasq/Makefile | 2 +-\n .../020-rfc1035-mitigate-CVE-2017-13704.patch | 35 ++++++++++++++++++++++\n 2 files changed, 36 insertions(+), 1 deletion(-)\n create mode 100644 package/network/services/dnsmasq/patches/020-rfc1035-mitigate-CVE-2017-13704.patch", "diff": "diff --git a/package/network/services/dnsmasq/Makefile b/package/network/services/dnsmasq/Makefile\nindex d7f14f9..bd7f610 100644\n--- a/package/network/services/dnsmasq/Makefile\n+++ b/package/network/services/dnsmasq/Makefile\n@@ -9,7 +9,7 @@ include $(TOPDIR)/rules.mk\n \n PKG_NAME:=dnsmasq\n PKG_VERSION:=2.77\n-PKG_RELEASE:=9\n+PKG_RELEASE:=10\n \n PKG_SOURCE:=$(PKG_NAME)-$(PKG_VERSION).tar.xz\n PKG_SOURCE_URL:=http://thekelleys.org.uk/dnsmasq/\ndiff --git a/package/network/services/dnsmasq/patches/020-rfc1035-mitigate-CVE-2017-13704.patch b/package/network/services/dnsmasq/patches/020-rfc1035-mitigate-CVE-2017-13704.patch\nnew file mode 100644\nindex 0000000..29b8464\n--- /dev/null\n+++ b/package/network/services/dnsmasq/patches/020-rfc1035-mitigate-CVE-2017-13704.patch\n@@ -0,0 +1,35 @@\n+From 340a26f915d8c3bb54c44f58d432cc7240631a74 Mon Sep 17 00:00:00 2001\n+From: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>\n+Date: Mon, 28 Aug 2017 14:52:10 +0100\n+Subject: [PATCH] dnsmasq: rfc1035: mitigate CVE-2017-13704\n+\n+Work around a problem where answer_request() attempts to clear from the\n+end of a request to end of request buffer but the end of the buffer is\n+at the same place as the start.\n+\n+Originally this meant that memset() tried to clear data before the\n+buffer leading to segmentation violation. Instead only clear to end of\n+buffer it is bigger than the request length.\n+\n+Signed-off-by: Kevin Darbyshire-Bryant <kevin@darbyshire-bryant.me.uk>\n+---\n+ src/rfc1035.c | 3 ++-\n+ 1 file changed, 2 insertions(+), 1 deletion(-)\n+\n+diff --git a/src/rfc1035.c b/src/rfc1035.c\n+index 26f5301..91a9641 100644\n+--- a/src/rfc1035.c\n++++ b/src/rfc1035.c\n+@@ -1225,7 +1225,8 @@ size_t answer_request(struct dns_header *header, char *limit, size_t qlen,\n+ \n+ /* Clear buffer beyond request to avoid risk of\n+ information disclosure. */\n+- memset(((char *)header) + qlen, 0, \n++ if ( (limit - ((char *)header)) > qlen )\n++ memset(((char *)header) + qlen, 0,\n+ \t (limit - ((char *)header)) - qlen);\n+ \n+ if (ntohs(header->ancount) != 0 ||\n+-- \n+2.7.4\n+\n", "prefixes": [ "LEDE-DEV" ] }