mirror/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git synced 2026-02-04 21:03:30 +02:00
Code Issues Packages Projects Releases Wiki Activity

BUG/MEDIUM: resolvers: break an infinite loop in resolv_get_ip_from_response()

Browse Source 
The fix in 3023e98199 ("BUG/MINOR: resolvers: Restore round-robin
selection on records in DNS answers") still contained an issue not
addressed f6dfbbe870 ("BUG/MEDIUM: resolvers: Test for empty tree
when getting a record from DNS answer"). Indeed, if the next element
is the same as the first one, then we can end up with an endless loop
because the test at the end compares the next pointer (possibly null)
with the end one (first).

Let's move the null->first transition at the end. This must be
backported where the patches above were backported (3.2 for now).
This commit is contained in:
Willy Tarreau
2025-10-03 09:00:13 +02:00
committed by Christopher Faulet
parent ad75431b9c
commit ced9784df4
1 changed files with 3 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/resolvers.c
View File

@@ -1651,15 +1651,12 @@ int resolv_get_ip_from_response(struct resolv_response *r_res,
* The result with the biggest score is returned.
*/
eb32 = (!r_res->next) ? eb32_first(&r_res->answer_tree) : r_res->next;
end = r_res->next;
end = eb32;
r_res->next = eb32_next(eb32); /* get node for the next lookup */
do {
void *ip;
unsigned char ip_type;
if (eb32 == NULL)
eb32 = eb32_first(&r_res->answer_tree);
record = eb32_entry(eb32, typeof(*record), link);
if (record->type == DNS_RTYPE_A && (resolv_active_families() & RSLV_ACCEPT_IPV4)) {
ip_type = AF_INET;
@@ -1758,6 +1755,8 @@ int resolv_get_ip_from_response(struct resolv_response *r_res,
}
next:
eb32 = eb32_next(eb32);
if (eb32 == NULL)
eb32 = eb32_first(&r_res->answer_tree);
} while (eb32 != end); /* list for each record entries */
/* No IP found in the response */