Changeset 2722 for pjproject

Timestamp:

May 22, 2009 4:13:37 PM (16 years ago)

Author:

bennylp

Message:

Added TODO comment to randomize DNS query sequence number/id for security purposes

File:

• pjproject/branches/projects/sipit24/pjlib-util/src/pjlib-util/resolver.c (modified) (2 diffs)

pjproject/branches/projects/sipit24/pjlib-util/src/pjlib-util/resolver.c

@@ -29 +29 @@
 #include <pj/pool.h>
 #include <pj/pool_buf.h>
+#include <pj/rand.h>
 #include <pj/string.h>
 #include <pj/sock.h>
@@ -784 +785 @@
 
     /* Save the ID and key */
+    /* TODO: dnsext-forgery-resilient: randomize id for security */
     q->id = resolver->last_id++;
     if (resolver->last_id == 0)