[Bug libc/12154] New: Can not resolve chained CNAME with a wildcard among the chained CNAME

[Bug libc/12154] New: Can not resolve chained CNAME with a wildcard among the chained CNAME

[vincent.viallet at gmail dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=12154

           Summary: Can not resolve chained CNAME with a wildcard among
                    the chained CNAME
           Product: glibc
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: libc
        AssignedTo: drepper.fsp@gmail.com
        ReportedBy: vincent.viallet@gmail.com


Apparently linux resolver can not resolve chained CNAME where one of the CNAME
is using a wildcard / *.
Or more precisely when a CNAME links to a * (star) CNAME that then resolv as a
wildcard domain that links to another CNAME... (more clear in the example
below)

This behavior affects all the latest linux version I tested (CentOS 5.5 /
Ubuntu)


Reproduce the error :

run dig to resolve a chained cname record :

> dig @8.8.8.8 messenger.live.com
> ...
> ;; ANSWER SECTION:
> messenger.live.com.	2343	IN	CNAME	get.live.com.
> get.live.com.		3538	IN	CNAME	*.live.com.
> *.live.com.		3538	IN	CNAME	rds.live.com.nsatc.net.
> rds.live.com.nsatc.net.	103	IN	A	65.55.60.123

Can not resolve messenger.live.com :

> ping messenger.live.com
> ping: unknown host messenger.live.com

Resolving get.live.com is not working either.

But using the wildcard domain is working :

> ping random-domain.live.com
> PING rds.live.com.nsatc.net (65.55.60.123) 56(84) bytes of data.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug libc/12154] Can not resolve chained CNAME with a wildcard among the chained CNAME

[vincent.viallet at gmail dot com]

http://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #1 from Vincent Viallet <vincent.viallet at gmail dot com> 2010-10-22 14:51:29 UTC ---
Quick discussion over IRC - with some of the extra tests performed

-----------------------

[10:25pm] grawity: There are two separate rules for host names.
[10:26pm] grawity: One is the DNS protocol: everything is allowed, except for
null byte. * is an ordinary character.
[10:26pm] grawity: (That's how Freenode cloaks could be spoofed; "/" is valid.)
[10:26pm] grawity: The other is "hostnames" - those that point to actual
machines. They are limited to A-Z a-z 0-9 and - _
[10:27pm] grawity: Since the function is called gethostbyname(), there's a
chance it checks for the latter...
[10:28pm] grawity: (Although I doubt it. gethostbyname() shouldn't even check
immediate results, only final one)

[10:28pm] balou_fr: ooh - so getting a * as a reply to a DNS request would be
considered as invalid - since only a-zA-Z0-9_- are awaitend
[10:29pm] grawity: actually, requesting *

[10:29pm] grawity: But that's where I get confused. gethostbyname() does not
request "*.live.com".
[10:29pm] grawity: Microsoft's DNS server does the job of following CNAMEs.
[10:31pm] balou_fr: it only appears to affect linux server - macos do not have
this issue (didnt tested windows - none accessible)
[10:32pm] balou_fr: well - it should request *.live.com -- it d fail but that s
one of the issue of the Cnames

[10:32pm] grawity: dig "*.live.com"
[10:33pm] balou_fr: it does work
[10:33pm] balou_fr: ;; ANSWER SECTION:
[10:33pm] balou_fr: *.live.com.649INCNAMErds.live.com.nsatc.net.
[10:33pm] balou_fr: rds.live.com.nsatc.net.132INA65.55.206.154
[10:33pm] grawity: Notice how both the CNAME and its target are under 'ANSWER'
[10:33pm] balou_fr: but dig is pure DNS protocol
[10:33pm] grawity: libc _shouldn't need_ to follow CNAMES -- it's alrady done
by DNS server.

[10:36pm] grawity: Testing 'dig chat.freenode.net' which is a CNAME:
[10:36pm] grawity:   1.323094    snow.home -> fog.home    DNS Standard query A
irc.freenode.net
[10:36pm] grawity:   1.425244    fog.home -> snow.home    DNS Standard query
response CNAME chat.freenode.net A 216.155.130.130 A 216.165.191.52 A
78.40.125.4 A 82.96.64.4 A 86.65.39.15 A 128.237.157.136 A 130.237.188.200 A
140.211.166.3 A 140.211.166.4 A 174.143.119.91 A 208.71.169.36 A 213.92.8.4 A
213.161.196.11 A 213.179.58.83 A 213.232.93.3

[10:37pm] balou_fr: non it s not - tcpdump show only 1 round trip
[10:38pm] balou_fr: with all the CNAMEs in the reply

[10:38pm] grawity: Testing with what - dig or...?
[10:38pm] balou_fr: tcpdump on a terminal - ping (with failure) on another

[10:40pm] grawity: Now just to make sure, I tested with the problematic domain
[10:40pm] grawity:  88.389299    snow.home -> fog.home    DNS Standard query A
messenger.live.com
[10:40pm] grawity:  88.489966    fog.home -> snow.home    DNS Standard query
response CNAME get.live.com CNAME *.live.com CNAME rds.live.com.nsatc.net A
65.55.60.123

[10:40pm] grawity: And now I really don't know why libc fails on it 
[10:40pm] grawity: Eh, they should react on that report soon.

[10:43pm] balou_fr: also - do u mind if I attach part of this discussion in the
Bug report ?
[10:43pm] balou_fr: (filtered to only the relevant talk of course)
[10:43pm] grawity: Sure.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug libc/12154] Can not resolve chained CNAME with a wildcard among the chained CNAME

[pasky at suse dot cz]

http://sourceware.org/bugzilla/show_bug.cgi?id=12154

Petr Baudis <pasky at suse dot cz> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |pasky at suse dot cz

--- Comment #2 from Petr Baudis <pasky at suse dot cz> 2010-11-20 14:21:31 UTC ---
c.f. http://www.cygwin.com/ml/libc-hacker/2010-10/msg00014.html

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug network/12154] Can not resolve chained CNAME with a wildcard among the chained CNAME

[jsm28 at gcc dot gnu.org]

http://sourceware.org/bugzilla/show_bug.cgi?id=12154

Joseph Myers <jsm28 at gcc dot gnu.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|libc                        |network

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug network/12154] Can not resolve chained CNAME with a wildcard among the chained CNAME

[schwab@linux-m68k.org]

http://sourceware.org/bugzilla/show_bug.cgi?id=12154

Andreas Schwab <schwab@linux-m68k.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|drepper.fsp at gmail dot    |unassigned at sourceware
                   |com                         |dot org

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

[Bug network/12154] Can not resolve chained CNAME with a wildcard among the chained CNAME

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
              Flags|                            |security-

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://bugzilla.redhat.com
                   |                            |/show_bug.cgi?id=1752133

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #14 from Florian Weimer <fweimer at redhat dot com> ---
Patches posted:

[PATCH 00/13] nss_dns: Fix handling of non-host CNAMEs (bug 12154)
https://sourceware.org/pipermail/libc-alpha/2022-August/141338.html

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #15 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by Florian Weimer <fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=d101d836e7e4bd1d4e4972b0e0bd0a55c9b650fa

commit d101d836e7e4bd1d4e4972b0e0bd0a55c9b650fa
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Aug 30 10:02:49 2022 +0200

    nss_dns: Rewrite getanswer_r to match getanswer_ptr (bug 12154, bug 29305)

    Allocate the pointer arrays only at the end, when their sizes
    are known.  This addresses bug 29305.

    Skip over invalid names instead of failing lookups.  This partially
    fixes bug 12154 (for gethostbyname, fixing getaddrinfo requires
    different changes).

    Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #16 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The master branch has been updated by Florian Weimer <fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=32b599ac8c21c4c332cc3900a792a1395bca79c7

commit 32b599ac8c21c4c332cc3900a792a1395bca79c7
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Aug 30 10:02:49 2022 +0200

    nss_dns: In gaih_getanswer_slice, skip strange aliases (bug 12154)

    If the name is not a host name, skip adding it to the result, instead
    of reporting query failure.  This fixes bug 12154 for getaddrinfo.

    This commit still keeps the old parsing code, and only adjusts when
    a host name is copied.

    Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[fweimer at redhat dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

Florian Weimer <fweimer at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
   Target Milestone|---                         |2.37
             Status|ASSIGNED                    |RESOLVED

--- Comment #17 from Florian Weimer <fweimer at redhat dot com> ---
Fixed for glibc 2.37.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[vincent.viallet at gmail dot com]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #18 from Vincent Viallet <vincent.viallet at gmail dot com> ---
:') Thanks guys!

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #19 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The release/2.36/master branch has been updated by Florian Weimer
<fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=78c8ef21fa54e994451d5b42ead6080d99a88a49

commit 78c8ef21fa54e994451d5b42ead6080d99a88a49
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Aug 30 10:02:49 2022 +0200

    nss_dns: Rewrite getanswer_r to match getanswer_ptr (bug 12154, bug 29305)

    Allocate the pointer arrays only at the end, when their sizes
    are known.  This addresses bug 29305.

    Skip over invalid names instead of failing lookups.  This partially
    fixes bug 12154 (for gethostbyname, fixing getaddrinfo requires
    different changes).

    Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
    (cherry picked from commit d101d836e7e4bd1d4e4972b0e0bd0a55c9b650fa)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #20 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The release/2.36/master branch has been updated by Florian Weimer
<fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=7a236dc44a22dc4252e803d1ee1d3b970ec43805

commit 7a236dc44a22dc4252e803d1ee1d3b970ec43805
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Aug 30 10:02:49 2022 +0200

    nss_dns: In gaih_getanswer_slice, skip strange aliases (bug 12154)

    If the name is not a host name, skip adding it to the result, instead
    of reporting query failure.  This fixes bug 12154 for getaddrinfo.

    This commit still keeps the old parsing code, and only adjusts when
    a host name is copied.

    Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
    (cherry picked from commit 32b599ac8c21c4c332cc3900a792a1395bca79c7)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #21 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The release/2.36/master branch has been updated by Florian Weimer
<fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=5d885617cec5713fdde42177398fe98acb66b7a2

commit 5d885617cec5713fdde42177398fe98acb66b7a2
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Sep 13 13:22:27 2022 +0200

    NEWS: Note bug 12154 and bug 29305 as fixed

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #22 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The release/2.35/master branch has been updated by Florian Weimer
<fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=ee74c14325a1d6577dd55cc314832d684ddecf68

commit ee74c14325a1d6577dd55cc314832d684ddecf68
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Aug 30 10:02:49 2022 +0200

    nss_dns: Rewrite getanswer_r to match getanswer_ptr (bug 12154, bug 29305)

    Allocate the pointer arrays only at the end, when their sizes
    are known.  This addresses bug 29305.

    Skip over invalid names instead of failing lookups.  This partially
    fixes bug 12154 (for gethostbyname, fixing getaddrinfo requires
    different changes).

    Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
    (cherry picked from commit d101d836e7e4bd1d4e4972b0e0bd0a55c9b650fa)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #23 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The release/2.35/master branch has been updated by Florian Weimer
<fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=519e1b025113c338852933d71acfc9d163658cfe

commit 519e1b025113c338852933d71acfc9d163658cfe
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Aug 30 10:02:49 2022 +0200

    nss_dns: In gaih_getanswer_slice, skip strange aliases (bug 12154)

    If the name is not a host name, skip adding it to the result, instead
    of reporting query failure.  This fixes bug 12154 for getaddrinfo.

    This commit still keeps the old parsing code, and only adjusts when
    a host name is copied.

    Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
    (cherry picked from commit 32b599ac8c21c4c332cc3900a792a1395bca79c7)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #24 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The release/2.34/master branch has been updated by Florian Weimer
<fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=9abc40d9b514fc51cd1a052d32d092a827c6e21a

commit 9abc40d9b514fc51cd1a052d32d092a827c6e21a
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Aug 30 10:02:49 2022 +0200

    nss_dns: Rewrite getanswer_r to match getanswer_ptr (bug 12154, bug 29305)

    Allocate the pointer arrays only at the end, when their sizes
    are known.  This addresses bug 29305.

    Skip over invalid names instead of failing lookups.  This partially
    fixes bug 12154 (for gethostbyname, fixing getaddrinfo requires
    different changes).

    Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
    (cherry picked from commit d101d836e7e4bd1d4e4972b0e0bd0a55c9b650fa)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[cvs-commit at gcc dot gnu.org]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

--- Comment #25 from cvs-commit at gcc dot gnu.org <cvs-commit at gcc dot gnu.org> ---
The release/2.34/master branch has been updated by Florian Weimer
<fw@sourceware.org>:

https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=c36e7cca3571b0c92b09409c1df86a142596c210

commit c36e7cca3571b0c92b09409c1df86a142596c210
Author: Florian Weimer <fweimer@redhat.com>
Date:   Tue Aug 30 10:02:49 2022 +0200

    nss_dns: In gaih_getanswer_slice, skip strange aliases (bug 12154)

    If the name is not a host name, skip adding it to the result, instead
    of reporting query failure.  This fixes bug 12154 for getaddrinfo.

    This commit still keeps the old parsing code, and only adjusts when
    a host name is copied.

    Reviewed-by: Siddhesh Poyarekar <siddhesh@sourceware.org>
    (cherry picked from commit 32b599ac8c21c4c332cc3900a792a1395bca79c7)

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[fw at deneb dot enyo.de]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

Florian Weimer <fw at deneb dot enyo.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://sourceware.org/bugz
                   |                            |illa/show_bug.cgi?id=31413

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug network/12154] Cannot resolve hosts which have wildcard aliases

[fw at deneb dot enyo.de]

https://sourceware.org/bugzilla/show_bug.cgi?id=12154

Florian Weimer <fw at deneb dot enyo.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|https://sourceware.org/bugz |
                   |illa/show_bug.cgi?id=31413  |
                 CC|                            |manuel at mozilla dot com

--- Comment #26 from Florian Weimer <fw at deneb dot enyo.de> ---
*** Bug 31413 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are on the CC list for the bug.