Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 30 Mar 2018 09:21:25 -0400
From: Rich Felker <>
Subject: Re: [PATCH] resolv.conf parser: concatenate multiple search
 domain lines

On Fri, Mar 30, 2018 at 02:27:42PM +0200, Quentin Rameau wrote:
> Hi William,
> > Programs such as Docker and Kubernetes write multiple domain search
> > lines, such as
> > 
> > search
> > search
> > search
> > 
> > instead of
> > 
> > search
> >
> > 
> > Accordingly, we concatenate the namelist together so that the search
> > path is not truncated.
> I think this patch should be sent to Docker and Kubernetes instead of
> pushing a mitigation for their bug in the libc.
> According to documentation, “The domain and search keywords are
> mutually exclusive.  If more than one instance of these keywords is
> present, the last instance wins.”
> This patch would break existing applications relying on documented
> behaviour.

I wrote the current behavior based on that documentation. Apparently
the current glibc behavior does not match the documentation, but I'd
really rather not go against the documentation unless there's
agreement from glibc/others that the documentation is wrong and their
current behavior is desired. Either way I think Docker/Kubernetes
should fix this, since it's ambiguous what the "right" thing to do is
and there very well could end up being inconsistent behaviors between
libcs/versions into the future.


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.