Project

General

Profile

Actions

Bug #13513

closed

Resolv::DNS::Message.decode hangs after detecting truncation in UDP messages

Added by iamasmith (Andrew Smith) almost 7 years ago. Updated 4 months ago.

Status:
Closed
Target version:
-
[ruby-core:80885]
Tags:

Description

ruby-core:32407 introduced support for a TCP requestor in fetch_resource if Resolv::DNS::Message.decode returned RCode::NoError and a reply tc of 1.

Unfortunately Resolv::DNS::Message.decode proceeds to attempt to unpack all answers based upon the answer count from the message regardless of truncation which causes exception behaviour which is then silently retried as this is seen as the response to the request never being seen (see begin, ensure).

To avoid this issue I add a return to Message.decode once the truncation is detected.

To patch this in a portable fashion I use the attached monkey patch which causes the truncation to propagate correctly back to fetch_resource and allows it to proceed correctly with the TCP based query.


Files

resolv-monkey-tc.rb (757 Bytes) resolv-monkey-tc.rb Monkey patch for issue. See detail of description for actual problem. iamasmith (Andrew Smith), 04/26/2017 04:12 PM

Updated by iamasmith (Andrew Smith) almost 7 years ago

After further consideration I had a look at rfc1035 with regard to the handling of record counts in truncated messages and it discusses ANCOUNT as being the number of answers in the answer section and not necessarily the number of answers that the DNS server knows about.

I'm testing against SkyDNS and this appears to return in my test the 50 records that I added as the number for the ANCOUNT field but does correctly report truncated.

The validity of the change I mention to Ruby perhaps is less correct if SkyDNS is at fault and it is appropriate that it is fixed, however, since Ruby implements the suggested fallback to use TCP the records provided in the UDP response are not available to the caller and therefore the change to handle excessive counts in ANCOUNT on truncated messages seems useful for the growing number of environments using SkyDNS.

I'll compare some others and potentially raise a separate bug if appropriate with the SkyDNS maintainers.

Updated by shyouhei (Shyouhei Urabe) over 6 years ago

  • Status changed from Open to Assigned
  • Assignee set to akr (Akira Tanaka)

Updated by jeremyevans0 (Jeremy Evans) about 3 years ago

I've confirmed this bug is still present in the current resolv library, and have submitted a patch to fix it: https://github.com/ruby/resolv/pull/6

Actions #4

Updated by jeremyevans (Jeremy Evans) 4 months ago

  • Status changed from Assigned to Closed

Applied in changeset git|974d18fd0c13bd19120cad70187f5b646c901dff.


[ruby/resolv] Fix the fallback from UDP to TCP due to message truncation

If truncation is detected, return immediately from decode so that
the UDP connection can be retried with TCP, instead of failing to
decode due to trying to decode a truncated response.

Fixes [Bug #13513]

https://github.com/ruby/resolv/commit/0de996dbca

Actions

Also available in: Atom PDF

Like0
Like0Like0Like0Like0