Files
heimdal/lib/krb5
Taylor R Campbell e75e549252 Use AI_NUMERICSERV if block_dns, and use local getaddrinfo to audit.
This change has two parts:

1. Provide our own local implementation of numeric-only getaddrinfo
   in auditdns.c used to audit for DNS leaks, rather than deferring
   to dlsym(RTLD_NEXT, "getaddrinfo"), in terms of inet_pton.

   To keep review and implementation simple, this is limited to
   AI_NUMERICHOST _and_ AI_NUMERICSERV -- this requires that we
   arrange to pass AI_NUMERICSERV in callers too.

2. Wherever we implement block_dns, set AI_NUMERICSERV in addition to
   AI_NUMERICHOST as needed by the new auditdns.c getaddrinfo.

   (In principle this might also avoid other network leaks -- POSIX
   guarantees no name resolution service will be invoked, and gives
   NIS+ as an example.)

   One tiny semantic change to avoid tripping over the auditor:
   kadmin(8) now uses the string "749" rather than the string
   "kerberos-adm".  (Currently we don't audit kadmin(8) for DNS leaks
   but let's avoid leaving a rake to step on.)  Every other caller I
   found is already guaranteed to pass a numeric service rather than
   named service to getaddrinfo.

fix https://github.com/heimdal/heimdal/issues/1212
2024-01-09 16:06:32 -06:00
..
2023-11-02 20:19:54 -05:00
2022-01-14 17:10:16 -06:00
2022-11-01 16:10:57 -05:00
2011-05-21 11:57:31 -07:00
2021-09-19 13:25:27 +10:00
2023-11-28 21:34:35 -05:00
2023-11-02 20:19:54 -05:00
2022-09-22 22:13:05 -04:00
2018-09-10 14:42:18 -04:00
2023-11-28 21:37:56 -05:00
2017-04-29 01:05:59 -04:00
2023-11-28 21:34:35 -05:00
2023-11-28 21:34:35 -05:00
2016-04-16 16:58:08 -05:00
2018-10-08 08:46:37 -04:00
2012-01-10 22:54:50 +01:00
2022-01-14 17:10:16 -06:00
2023-01-04 00:43:36 -06:00
2023-01-04 00:43:36 -06:00
2021-03-26 18:47:49 -05:00
2011-07-24 16:02:22 -07:00
2014-04-25 02:42:17 +02:00
2011-05-21 11:57:31 -07:00
2014-04-25 02:42:17 +02:00
2011-05-21 11:57:31 -07:00
2011-05-21 11:57:31 -07:00
2011-05-21 11:57:31 -07:00
2005-10-08 15:39:42 +00:00
2007-07-15 20:49:46 +00:00
2022-01-19 23:38:27 -06:00
2022-01-24 15:38:47 -06:00
2023-11-02 20:19:54 -05:00
2022-09-22 22:13:05 -04:00
2022-01-14 17:10:16 -06:00
2014-03-24 23:07:49 -05:00
2022-01-14 17:10:16 -06:00
2011-05-21 11:57:31 -07:00
2022-09-22 22:13:05 -04:00
2023-11-28 21:34:35 -05:00
2023-06-20 12:19:48 -05:00
2022-11-22 11:34:54 -05:00
2023-11-28 21:34:35 -05:00
2023-06-20 12:19:48 -05:00
2023-05-26 14:10:11 -05:00
2016-11-20 17:43:51 -06:00
2022-01-19 23:38:27 -06:00
2022-11-01 16:10:57 -05:00
2022-11-01 16:10:57 -05:00
2023-01-04 16:17:09 -06:00
2023-01-04 16:17:09 -06:00
2023-01-04 16:17:09 -06:00
2012-05-28 13:14:55 +01:00
2011-05-21 11:57:31 -07:00
2023-11-28 21:34:35 -05:00
2019-01-02 13:56:04 -05:00
2010-09-18 14:45:33 -07:00
2022-01-19 23:38:27 -06:00
2022-01-18 15:40:54 -06:00
2022-02-11 16:02:27 -06:00
2011-05-21 11:57:31 -07:00
2009-05-04 06:17:40 +00:00
2014-04-29 11:04:21 -06:00
2009-05-04 06:17:40 +00:00
2021-11-29 12:50:26 +11:00
2022-01-14 17:10:16 -06:00
2011-05-21 11:57:31 -07:00
2009-05-04 06:17:40 +00:00
2009-05-04 06:17:40 +00:00
2009-05-04 06:17:40 +00:00
2009-05-04 06:17:40 +00:00
2022-01-19 23:38:27 -06:00
2022-01-14 17:59:49 -06:00
2011-05-21 11:57:31 -07:00
2021-08-09 21:46:24 +10:00
2022-01-14 17:10:16 -06:00