summaryrefslogtreecommitdiff
path: root/src/config.h
diff options
context:
space:
mode:
authorSeonah Moon <seonah1.moon@samsung.com>2023-06-22 15:49:05 +0900
committerSeonah Moon <seonah1.moon@samsung.com>2023-06-22 15:49:07 +0900
commitbdca4764397ab00df3f5ce355c7b7d6ad5246a0f (patch)
tree9ca6b385fb217a0024c92616e568c6c313132cf0 /src/config.h
parentc142c491503f3be06012c038d065945228ae4456 (diff)
downloaddnsmasq-tizen_6.0.tar.gz
dnsmasq-tizen_6.0.tar.bz2
dnsmasq-tizen_6.0.zip
Set the default maximum DNS UDP packet size to 1232.accepted/tizen/6.0/unified/20230626.074936tizen_6.0accepted/tizen_6.0_unified
http://www.dnsflagday.net/2020/ refers. Thanks to Xiang Li for the prompt. https://thekelleys.org.uk/gitweb/?p=dnsmasq.git;a=commit;h=eb92fb32b746f2104b0f370b5b295bb8dd4bd5e5 CVE-2023-28450 Change-Id: I7326e1a5f2ce2a69f3a8c166c3d6d79f1f5955dd
Diffstat (limited to 'src/config.h')
-rw-r--r--src/config.h2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/config.h b/src/config.h
index 67a5ac5..c924908 100644
--- a/src/config.h
+++ b/src/config.h
@@ -21,7 +21,7 @@
#define CHILD_LIFETIME 150 /* secs 'till terminated (RFC1035 suggests > 120s) */
#define TCP_MAX_QUERIES 100 /* Maximum number of queries per incoming TCP connection */
#define TCP_BACKLOG 32 /* kernel backlog limit for TCP connections */
-#define EDNS_PKTSZ 4096 /* default max EDNS.0 UDP packet from RFC5625 */
+#define EDNS_PKTSZ 1232 /* default max EDNS.0 UDP packet from from /dnsflagday.net/2020 */
#define SAFE_PKTSZ 1280 /* "go anywhere" UDP packet size */
#define KEYBLOCK_LEN 40 /* choose to minimise fragmentation when storing DNSSEC keys */
#define DNSSEC_WORK 50 /* Max number of queries to validate one question */