Chiwopsezo chakutali mu OpenBSD IPv6 stack

Kumbuyo kwa slaacd, yomwe imayang'anira IPv6 adilesi autoconfiguration (IPv6 Stateless Address Autoconfiguration, RFC 4862) mu OpenBSD, chiwopsezo chadziwika chomwe chimatsogolera ku kusefukira kwa buffer mukalandira malonda opangidwa mwapadera a IPv6 router (RA, Router Advertisement) .

Poyambirira, IPv6 adilesi ya autoconfiguration magwiridwe antchito idakhazikitsidwa pamlingo wa kernel, koma kuyambira ndi OpenBSD 6.2 idasunthidwa kunjira ina yopanda mwayi ya slaacd. Izi ndizomwe zimatumiza mauthenga a RS (Router Solicitation) ndikuyika mayankho a RA (Rauta Advertisement) ndi chidziwitso chokhudza rauta ndi magawo olumikizira netiweki.

Mu February, slaacd inakonza cholakwika chomwe chinapangitsa kuti chiwonongeke ngati ma seva a 7 adatchulidwa pamndandanda wa RDNSS (Recursive DNS Servers). Kuyang'anira kumeneku kudakopa chidwi cha ofufuza odziyimira pawokha omwe anayesa kufufuza kachidindo ka slaacd pazolakwa zina zomwe zimachitika pogawa magawo mu mauthenga a RA. Kuwunikaku kunawonetsa kuti pali vuto lina mu code, lomwe limadziwonetsera pokonza gawo la DNSSL (DNS Search List), lomwe limaphatikizapo mndandanda wa mayina a mayina ndi ma templates a DNS.

Dzina lililonse pamndandanda wa DNSSL limasungidwa pogwiritsa ntchito null delimiter ndi ma tag a baiti imodzi omwe amatsimikizira kukula kwa deta yomwe ikutsatira. Chiwopsezochi chimayamba chifukwa chakuti pamndandanda wama code, gawo lomwe lili ndi kukula kwake limakopera kuti lizisinthidwa ndi mtundu wa nambala yosainidwa ("len = data[pos]"). Chifukwa chake, ngati mtengo watchulidwa m'munda ndi seti yofunika kwambiri, mtengowu udzazindikiridwa mwa wogwiritsa ntchitoyo ngati nambala yolakwika ndi cheke cha kukula kovomerezeka (β€œngati ( len> 63 || len + pos + 1 > datalen) {β€œ) sizidzagwira ntchito, zomwe zidzatsogolera ku kuyitana kwa memcpy ndi parameter yomwe kukula kwake kwa deta yojambulidwa kumaposa kukula kwa buffer.

Chiwopsezo chakutali mu OpenBSD IPv6 stack
Chiwopsezo chakutali mu OpenBSD IPv6 stack


Source: opennet.ru

Kuwonjezera ndemanga