3 ms·
Sorry, but this is not a standard TCP payload. I think the bug is in the library that made the packet, not with systemd. They should fix their library.
by dogecoinbase 9y ago
Sorry, but this is not a standard TCP payload. I think the bug is in the library that made the packet, not with systemd. They should fix their library.
- gpribeiro 9y ago"A malicious DNS server can exploit this by responding with a specially crafted TCP payload to trick systemd-resolved in to allocating a buffer that's too small, and subsequently write arbitrary data beyond the end of it." When your program doesn't handle a malformed input, and this leads to a buffer overflow, it's your fault. When this program is something as important as systemd, the problem is even worse.
- pjc50 9y agoAnything Internet-facing has to accept any kind of packet without crashing, or at least without failing in an exploitable way. That's the bare minimum you-must-be-this-tall entry requirement of security.
- stepik777 9y agoI believe it was a joke about how Lennart Poettering usually responds to bug reports.
- dogecoinbase 9y agoYou are correct. See, for example, his recent response to the issue where systemd starts processes belonging to users whose usernames begin with a digit with root privileges: https://github.com/systemd/systemd/issues/6237#issuecomment-311900864 https://github.com/systemd/systemd/issues/6237#issuecomment-... My deepest apologies to HN for the overly-dry sense of humor.
- peterwwillis 9y agoTrolling on HN really is like shooting fish in a barrel, isn't it?
- digi_owl 9y agohttps://en.wikipedia.org/wiki/Poe's_law https://en.wikipedia.org/wiki/Poe's_law
- deleted 9y ago[deleted]