So far following patches have been applied and the work is under progress for others. These patches were not created for the current source tree. I've manually made changes to the same effect. If you find any bug, please do report it to me.
- dnscache.c: Read longer buffer over TCP connections Original author: Frank Denis
- cache.c: dnscache siphash patch Original author: Frank Denis
- tdlookup.c: merged one second patch Original author: Lennert Buytenhek
- dns_transmit.c: patch to use TCP sockets for ANY queries. Original author: Scott Brynen
- server.c: make it listen on multiple IP addresses. Originated from: Gentoo distribution
- query.c: patched to fix the ghost domain vulnerability. Original author: Peter Conrad
- ndjbdns.spec: patched to install systemd unit files for latest fedora and Sys-V init scripts for RHEL distributions. Original author: Simone Caronni
- dnscache.c: patched to merge identical outgoing requests. Original author: Jeff King
- query.c: patched to cache SOA records. Original author: Jeff King
- response.c: Patched with the latest 'response_len < 16384' patch from Matthew Dempsky. Original author: Matthew Dempsky
- dns_transmit.c: Patched with the 'd->pos = 0' and 'char udpbuf[4097]' patch from Matthew Dempsky. Original author: Matthew Dempsky
- dnscache.c: Patched with the SIGPIPE patch Original author: Mark Delany
- error.h: Patched to #include
on Linux Machines.
Original author: P J P
http://download.pureftpd.org/misc/dnscache-dos.c
http://www.openwall.com/lists/oss-security/2014/02/17/3
https://00f.net/2012/06/26/dnscache-poisoning-and-siphash/
http://www.openwall.com/lists/oss-security/2014/02/10/4
http://tinydns.org/one-second.patch
http://marc.info/?l=djbdns&m=135734230220249&w=2
https://github.com/pjps/ndjbdns/commit/cec3b4ddd08ba800ae7aa1e292d7b6335243dcb9
https://github.com/pjps/ndjbdns/commit/c90dbbbac5622e2744733f39e037263e63b51266
https://github.com/pjps/ndjbdns/commit/bf2fa309e2be7e49304c5dd010a94a613ec2905f
http://marc.info/?l=djbdns&m=123859517723684&w=3#2
http://www.your.org/dnscache/0002-dnscache-cache-soa-records.patch
http://marc.info/?l=djbdns&m=123613000920446&w=2
http://marc.info/?l=djbdns&m=119983010611174&w=3
http://marc.info/?l=djbdns&m=122368590802063&w=2
http://marc.info/?l=djbdns&m=104804013229536&w=2
#if defined (linux) || defined (__linux) #include <errno.h> #endif