Ticket #50 (closed defect: fixed)
avahi-browse, avahi-resolve crashes avahi-daemon if hostname/service is malformed
|Reported by:||salahx||Owned by:||lennart|
Either of the following commands cause avahi-daemon to die (thus, a local DoS), unless --enable-check was selected when dbus was built (on Gentoo, this isn't the default, it has to be enabled by USE="debug")
avahi-browse ssh avahi-resolve machinename
avahi-browse _ssh._tcp avahi-resolve machinename.local
Also, if avahi-dnsconfd is passed an invalid long command line argument (like --debug), it will segfault instead of printing "Invalid Command Line Argument: --debug". Even if you pass an invalid single-charecter option, it doesn't do what you'd expect either (it just prints a "?" - maybe an unprintable character). Avahi-daemon has a similar issue too (although it doesn't segfault it doesn't do what'd you expect, either). I didn't test the other utilities for this bug.