Hi all, I'm investigating this issue with upstream. > squid: rfc1035.c:410: rfc1035RRUnpack: Assertion `(*off) <= sz' failed. > Aborted This is the error. Incorrect parsing of DNS replies. > Since RFC 1035 deals with DNS and the Squid patch ist meant to > specifically fix a DNS issue, I suspect there's a bug in the patch. Not > knowing what better to do, I'm sending this message to the security team > per CC. Thanks, I tried to reproduce the bug with reported url > http://62.26.121.2/dat/bgf/trpix.gif but didn't succeed. Can somebody please provide some more informations like - configuration file - type of DNS used (BIND, dnscache, etc) - a core file (if found) I'm preparing a debug-enabled version to help extract more details, I'll send to whom may be interested in helping with debug. Regards, -- Luigi Gangitano -- <luigi@debian.org> -- <gangitano@lugroma3.org> GPG: 1024D/924C0C26: 12F8 9C03 89D3 DB4A 9972 C24A F19B A618 924C 0C26
Attachment:
signature.asc
Description: This is a digitally signed message part