Yusuke EndohandClaude Opus 4.8 fccc81a3e6 [ruby/resolv] Bound the number of compression pointers per name ...

Commit 4c2f71b (CVE-2025-24294) capped a decompressed name at 255 octets,
bounding its length but not the work: a chain of compression pointers adds
no label octets, so the cap never fires while the decoder follows every
pointer, and many records sharing one chain make decoding quadratic. Cap
the pointers followed per name at 128.

Reported by: whiteshadow_8500 (https://hackerone.com/whiteshadow_8500)

https://github.com/ruby/resolv/commit/0415f01bcf

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-10-02 05:54:42 +00:00

..

test_addr.rb

[ruby/resolv] Support more characters in link local addresses

2022-01-12 10:49:57 +09:00

test_dns.rb

[ruby/resolv] Bound the number of compression pointers per name

2026-10-02 05:54:42 +00:00

test_mdns.rb

…

test_resource_leak.rb

[ruby/resolv] Shorten the comments added in the previous commit

2026-08-27 01:47:30 +00:00

test_resource.rb

[ruby/resolv] Revert "Do not register on-demand classes for unknown DNS types and SvcParamKeys"

2026-09-16 10:53:55 +00:00

test_svcb_https.rb

[ruby/resolv] Implement dohpath SvcParam

2023-11-24 01:42:08 +00:00

test_win32_config.rb

[ruby/resolv] Prefer the registry over /etc/resolv.conf on native Windows

2026-10-02 00:49:28 +00:00