Opened 5 years ago
Closed 5 years ago
#2200 closed defect (fixed)
Ignore/discard DNS SRV response with truncated flag set
Reported by: | riza | Owned by: | riza |
---|---|---|---|
Priority: | normal | Milestone: | release-2.9 |
Component: | pjlib-util | Version: | trunk |
Keywords: | Cc: | ||
Backport to 1.x milestone: | Backported: | no |
Description
The standard stated:
DNS resolvers and recursive servers MUST support UDP, and SHOULD support TCP, for sending (non-zone-transfer) queries. Specifically, a DNS resolver or server that is sending a non-zone-transfer query MUST send a UDP query first. If the Answer section of the response is truncated and if the requester supports TCP, it SHOULD try the query again using TCP. ......... Truncated responses MUST NOT be saved (cached) and later used in such a way that the fact that they are truncated is lost.
Instead of following up with a TCP query which is unsupported, currently the library will follow up with DNS A query. Based on the recommendation above, it's better to discard the response and raise error.
Thanks to Daniel Schopf for the report.
Change History (1)
comment:1 Changed 5 years ago by riza
- Owner set to riza
- Resolution set to fixed
- Status changed from new to closed
Note: See
TracTickets for help on using
tickets.
In 6000: