Files
heimdal/lib/roken
Taylor R Campbell e75e549252 Use AI_NUMERICSERV if block_dns, and use local getaddrinfo to audit.
This change has two parts:

1. Provide our own local implementation of numeric-only getaddrinfo
   in auditdns.c used to audit for DNS leaks, rather than deferring
   to dlsym(RTLD_NEXT, "getaddrinfo"), in terms of inet_pton.

   To keep review and implementation simple, this is limited to
   AI_NUMERICHOST _and_ AI_NUMERICSERV -- this requires that we
   arrange to pass AI_NUMERICSERV in callers too.

2. Wherever we implement block_dns, set AI_NUMERICSERV in addition to
   AI_NUMERICHOST as needed by the new auditdns.c getaddrinfo.

   (In principle this might also avoid other network leaks -- POSIX
   guarantees no name resolution service will be invoked, and gives
   NIS+ as an example.)

   One tiny semantic change to avoid tripping over the auditor:
   kadmin(8) now uses the string "749" rather than the string
   "kerberos-adm".  (Currently we don't audit kadmin(8) for DNS leaks
   but let's avoid leaving a rake to step on.)  Every other caller I
   found is already guaranteed to pass a numeric service rather than
   named service to getaddrinfo.

fix https://github.com/heimdal/heimdal/issues/1212
2024-01-09 16:06:32 -06:00
..
2022-01-14 12:01:33 -06:00
2020-03-02 17:48:04 -06:00
2022-01-14 12:01:33 -06:00
2023-01-04 00:43:35 -06:00
2014-08-22 20:57:24 -07:00
2016-02-16 20:49:33 -06:00
2008-09-13 08:53:55 +00:00
2009-11-24 21:42:02 -08:00
2013-08-19 10:21:23 -04:00
2021-12-22 14:45:35 +11:00
2011-05-21 11:57:31 -07:00
2016-02-16 20:49:29 -06:00
2009-11-24 21:42:02 -08:00
2009-08-18 13:06:05 +02:00
2011-05-21 11:57:31 -07:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2022-01-14 12:01:33 -06:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2019-01-21 22:04:06 -05:00
2019-01-21 22:04:06 -05:00
2019-01-02 10:23:39 -06:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-26 01:57:11 -05:00
2017-05-26 23:24:30 -04:00
2017-05-26 23:24:30 -04:00
2009-11-24 21:42:02 -08:00
2011-05-21 11:57:31 -07:00
2014-04-25 02:42:17 +02:00
2010-08-20 13:04:06 -04:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2011-05-21 11:57:31 -07:00
2010-11-24 09:43:04 +00:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-01-25 00:30:37 +00:00
2022-01-14 12:01:33 -06:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2010-08-20 13:03:40 -04:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2023-01-07 12:08:30 +11:00
2019-10-03 13:09:18 -05:00
2009-11-24 21:42:02 -08:00
2015-03-05 17:06:20 +00:00
2020-04-12 13:25:09 -05:00
2008-09-13 08:53:55 +00:00
2018-12-25 22:11:19 -06:00
2019-10-03 13:09:18 -05:00
2009-11-24 21:42:02 -08:00
2022-01-03 18:09:08 +11:00
2009-11-24 21:42:02 -08:00
2009-01-25 00:30:37 +00:00
2013-11-17 12:48:41 +01:00
2021-12-18 11:34:12 +11:00
2021-12-21 08:19:31 +11:00
2009-11-24 21:42:02 -08:00
2019-12-05 20:20:28 -05:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2011-05-21 11:57:31 -07:00
2010-06-01 10:46:57 -07:00
2021-11-30 11:42:00 -05:00
2023-01-09 14:09:13 -05:00
2023-01-09 14:09:13 -05:00
2023-05-26 14:10:11 -05:00
2017-03-13 18:39:41 -04:00
2017-04-17 18:02:30 -04:00
2017-04-17 18:02:30 -04:00
2011-05-21 11:57:31 -07:00
2009-11-24 21:42:02 -08:00
2010-05-30 12:41:06 -07:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2011-05-21 11:57:31 -07:00
2008-09-13 09:21:03 +00:00
2011-05-21 11:57:31 -07:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2010-06-01 10:25:01 -07:00
2023-11-28 21:37:56 -05:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2021-01-14 18:24:43 -06:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2022-01-05 12:58:48 -06:00
2022-01-05 12:58:48 -06:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2022-01-14 12:01:33 -06:00
2009-11-24 21:42:02 -08:00
2009-01-25 00:30:37 +00:00
2009-01-25 00:30:37 +00:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2011-05-21 11:57:31 -07:00
2019-01-21 22:04:06 -05:00
2019-01-02 10:23:39 -06:00
2022-01-17 17:49:29 -06:00
2010-05-30 12:41:06 -07:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2019-01-21 22:04:06 -05:00
2009-11-24 21:42:02 -08:00
2009-11-24 21:42:02 -08:00
2012-07-20 09:40:22 -04:00
2009-11-24 21:42:02 -08:00
2008-09-13 09:21:03 +00:00
2009-11-24 21:42:02 -08:00