CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/07/12 17:00:50
Modified files:
usr.sbin/smtpd : dns.c spfwalk.c
Log message:
stop parsing DNS answers once unpack_rr() reports failure
the MX, MX-preference and spf walkers looped on the attacker-controlled
ancount calling unpack_rr() without checking its return, processing stale
or uninitialized rr contents on malformed or truncated replies. break out
of the loop as soon as unpack_rr() fails.
from Andrew Griffiths, ok op@
