isc_mem_get question/bug

2014-11-06 Thread Joshua Rogers
ilename == NULL) > fatal("out of memory"); > if (dsdir != NULL) > sprintf(filename, "%s/", dsdir); The last line, "sprintf(filename, "%s/", dsdir);". Since "/" is also added to the buffer, doesn't that mean the buff

Re: Bug/Vulnerability in `Dig' in latest dnsutils/bind9

2014-10-28 Thread Joshua Rogers
gt; however, the nameserver kurscheid asks does, FWIW) From my friend. So, the lack of ipv6 is not the problem, it is in Bind. Thanks On 28/10/14 19:51, Mukund Sivaraman wrote: > Hi Joshua > > On Tue, Oct 28, 2014 at 07:30:45PM +1100, Joshua Rogers wrote: >> Using the +nssearch

Bug/Vulnerability in `Dig' in latest dnsutils/bind9

2014-10-28 Thread Joshua Rogers
lt;0 too, I guess. I can't find the origin of ISC_LIST_NEXT, but it would seem that it does not handle -1 properly. I'm not exactly sure where I need to report this, but I may as well do it in this mailing list. I'm not sure if this is really severe enough for a CVE-ID or not, bu