Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 19 Jul 2021 16:47:23 -0300
From: Érico Nogueira <ericonr@...root.org>
To: <musl@...ts.openwall.com>, "Florian Weimer" <fweimer@...hat.com>
Subject: Re: getaddrinfo() fails for domains with no AAAA records
 (regression?)

On Mon Jul 19, 2021 at 3:51 PM -03, Yuri Kanivetsky wrote:
> So you're saying that that is the registrar's fault (which also
> provides the name servers)? Can you possibly tell how this can be
> fixed? Other than by giving up on wildcard dns records?
>
> A couple more points. First, apparently there was some change between
> musl-1.2.2-r0 and musl-1.1.24-r10, getaddrinfo() stops working since

fd7ec068efd590c0393a612599a4fab9bb0a8633 and
5cf1ac2443ad0dba263559a3fe043d929e0e5c4c have happened between those.
It's possible 5cf1ac applies to your case, since it changes the error
handling to take NXDOMAIN into account from any of the queries.

> Alpine Linux 3.13. Which comes down to the fact that ping and ssh
> can't resolve such hostnames. Although host, getent and dig can.

AFAIK dig/drill will look at /etc/resolv.conf for nameservers, but use
their own resolver, not libc's. getent, on the other hand, uses the libc
resolver, so comparing how ssh/ping and getent perform the query might
be worthwhile, since they are all using the same resolvers.

> Second, it works on Arch Linux, Debians 8, 9, 10, and CentOS 7. The
> way it looks, it works on libc, and doesn't work on musl.

*glibc

>
> Additionally I've attached the relevant part of the registrars' web
> interface.
>
> Regards,
> Yuri
>
> On Mon, Jul 19, 2021 at 4:22 PM Florian Weimer <fweimer@...hat.com>
> wrote:
> >
> > * Yuri Kanivetsky:
> >
> > > $ docker run --rm -itv $PWD:/app alpine:3.14 ./app/a.sh
> > > ...
> > > + ./a.out p2.x-yuri.site set_ai_family
> > > AF_INET: 3.67.126.242
> > > + ./a.out p2.x-yuri.site
> > > getaddrinfo: Name does not resolve
> >
> > p2.x-yuri.site/IN/AAAA queries result in Name Error/NXDOMAIN, so the
> > domain is misconfigured.  This error is independent of the record type.
> >
> > Thanks,
> > Florian
> >

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.