View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0006001GNUnetGNSpublic2019-12-20 09:342020-01-08 08:52
ReporterChristian Grothoff Assigned ToChristian Grothoff Due Date
PrioritynormalSeveritycrashReproducibilityhave not tried
Status closedResolutionno change required 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product VersionGit master 
Target Version0.12.2Fixed in Version0.12.1 
Summary0006001: GNS recursion may go forever under very particular circumstances
DescriptionGNS (as per LSD0001) may delegate to the *system resolver* (GNUNET_RESOLVER_get_ip()) when encountering a CNAME. The system resolver may in turn call on GNS *if* the respective TLD is configured to be in GNS (for the user running gnunet-service-gns). In this case, the recursion limit is not obeyed.
Steps To ReproduceSetup GNS with NSS integration. Create CNAME record in GNS to point to itself (i.e. value rec.bar in zone bar under label rec). Ensure 'rec' is recognized by NSS.
TagsNo tags attached.

Activities

Christian Grothoff

2020-01-08 08:52

manager   ~0015247

Actually not, because libgnunetresolver does never trigger NSS in the current implementation, as it does its own asynchronous recursive DNS resolution. Hence it violates a 'SHOULD' clause in lsd0001, which at the same time makes it easy to satisfy the bounded recursion property.

Issue History

Date ModifiedUsernameFieldChange
2019-12-20 09:34Christian GrothoffNew Issue
2019-12-20 09:34Christian GrothoffAssigned To => Christian Grothoff
2019-12-20 09:34Christian GrothoffStatusnew => assigned
2019-12-25 11:26Christian GrothoffTarget Version0.12.1 => 0.12.2
2020-01-08 08:52Christian GrothoffStatusassigned => closed
2020-01-08 08:52Christian GrothoffResolutionopen => no change required
2020-01-08 08:52Christian GrothoffFixed in Version => 0.12.1
2020-01-08 08:52Christian GrothoffNote Added: 0015247