Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
openSUSE:Leap:16.0:FactoryCandidates
opendkim
rev-ares-deletion.patch
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File rev-ares-deletion.patch of Package opendkim
Description: Delete Authentication-Results headers in reverse (CVE-2022-48521) Author: David Bürgin <dbuergin@gluet.ch> Bug: https://github.com/trusteddomainproject/OpenDKIM/pull/189 --- a/opendkim/opendkim.c +++ b/opendkim/opendkim.c @@ -13651,9 +13651,16 @@ return SMFIS_TEMPFAIL; } - c = 0; + c = 1; + for (hdr = dfc->mctx_hqhead; hdr != NULL; hdr = hdr->hdr_next) { + if (strcasecmp(hdr->hdr_hdr, AUTHRESULTSHDR) == 0) + c++; + } + + for (hdr = dfc->mctx_hqtail; hdr != NULL; hdr = hdr->hdr_prev) + { memset(ares, '\0', sizeof(struct authres)); if (strcasecmp(hdr->hdr_hdr, AUTHRESULTSHDR) == 0) @@ -13664,7 +13671,7 @@ char *slash; /* remember index */ - c++; + c--; /* parse the header */ arstat = ares_parse((u_char *) hdr->hdr_val,
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor
