Update embedded dnsmasq to v2.93rc1#2890

Open

DL6ER wants to merge 102 commits into

developmentfrom

update/dnsmasq

Commits on May 11, 2026

Fix bounds checking in check_ia()

simonkelley
authored and
DL6ER
committed
Update dnsmasq version
DL6ER
committed
Tidy up code in in do_tcp_connection() which filters incoming connections.

simonkelley
authored and
DL6ER
committed
Prepare for next patch
DL6ER
committed
Terminate TCP child processes that arise from UDP truncated replies.

simonkelley
authored and
DL6ER
committed
Reimplement necessary Pi-hole changes
DL6ER
committed
Fix a corner-case in DNSSEC validation with wildcards.

simonkelley
authored and
DL6ER
committed
Support Inotify in FreeBSD.

mandree
authored and
DL6ER
committed
Fix DNSSEC failure with spurious RRSIGs.

simonkelley
authored and
DL6ER
committed
The only_failed argument has been added to the log-queries parameter.

PVBozhko
authored and
DL6ER
committed
Log SERVFAIL from usptream servers.

simonkelley
authored and
DL6ER
committed
Fix DNSSEC fail with CNAME replies to DS queries.

simonkelley
authored and
DL6ER
committed
Update embedded dnsmasq version to 2.93test1
DL6ER
committed
Update expected dnsmasq warnings
DL6ER
committed
Fix memory allocation in blockdata_retrieve()

simonkelley
authored and
DL6ER
committed
Add --log-malloc debugging option.

simonkelley
authored and
DL6ER
committed
Don't log free(NULL) calls.

simonkelley
authored and
DL6ER
committed
Don't start malloc() logging until the log system is configured.

simonkelley
authored and
DL6ER
committed
Rationalise DNS TCP buffer use.

simonkelley
authored and
DL6ER
committed
Optimise TCP send.

simonkelley
authored and
DL6ER
committed
Update embedded dnsmasq to v2.93test2
DL6ER
committed
Prevent macro leakage into system headers: document and guard push/pop of free/strdup
DL6ER
committed
Remove DHCPv6 UseMulticast option code.

simonkelley
authored and
DL6ER
committed
Tidy up check for muticast DHCPv6 requests.

simonkelley
authored and
DL6ER
committed
Tidy up memory allocation in read_event()

simonkelley
authored and
DL6ER
committed
base32_decode: avoid shifting into the sign bit

mandree
authored and
DL6ER
committed
Avoid uninitialized-value warnings from the compiler

mandree
authored and
DL6ER
committed
read_writev: avoid reading past the last iovec elem

mandree
authored and
DL6ER
committed
Fix compiler warning.

simonkelley
authored and
DL6ER
committed
Rewrite blockdata_retrieve() and expand_buf() to use realloc().

simonkelley
authored and
DL6ER
committed
Update embedded dnsmasq version to v2.93test3
DL6ER
committed
Enhance --log-malloc

simonkelley
authored and
DL6ER
committed
Improve memory allocation for /etc/hosts etc.

simonkelley
authored and
DL6ER
committed
treat opt_malloc as a wrapper for logging purposes.

simonkelley
authored and
DL6ER
committed
Fix PXE boot server (PXEBS) responses broken in 2.92

claytono
authored and
DL6ER
committed
Convert hash_init() to use realloc().

simonkelley
authored and
DL6ER
committed
Update embedded dnsmasq to v2.93test4
DL6ER
committed
Log memory allocated by libidn when --log-malloc active.

simonkelley
authored and
DL6ER
committed
Remove duplicate configured trust anchors.

simonkelley
authored and
DL6ER
committed
Fix broken NS responses in certain auth-zone configurations.

erbth
authored and
DL6ER
committed
Fix crash with empty DHCP SNAME option.

simonkelley
authored and
DL6ER
committed
Modify the inotify implementation so that inotify watches are only created after dnsmasq has changed permissions and userid. This means that the permissions used when creating the watches are the s…

simonkelley
authored and
DL6ER
committed
Fix FTBFS with nettle 4.0.

simonkelley
authored and
DL6ER
committed
Fix missed hash->digest calls in 4070a74862c3c956a676d2b931ff186e14f5d9f5

simonkelley
authored and
DL6ER
committed
Update dnsmasq tag
DL6ER
committed
Make FTL nettle v4.0 compatible
DL6ER
committed
Fix TCP replies being broken. THis fixes a regression of 13e120b29b7c664ccc0bc82b4584613e7586dd74
DL6ER
committed
Tweak zone update testing script
DL6ER
committed
Improve zone testing script
DL6ER
committed
Fix regression handling non-QUERY requests over TCP.

simonkelley
authored and
DL6ER
committed
Don't call qsort() with a NULL array when no servers defined.

simonkelley
authored and
DL6ER
committed
Tighten length checking to avoid possible buffer read-overrun in DHCPv6.

simonkelley
authored and
DL6ER
committed
Complete 32a54fc8a5b7fee715b963f6e5b28f41289e6a4f

simonkelley
authored and
DL6ER
committed
Update embedded dnsmasq version
DL6ER
committed
Update zone update test script
DL6ER
committed
Fix broken DHCPv6 vendorclass data in DHCP script.

simonkelley
authored and
DL6ER
committed
Accept DHCPv6 vendorclasses with any enterprise number in --dhcp-vendorclass if not enterprise number is specified. Also accept and match on enterprise number only.

simonkelley
authored and
DL6ER
committed
Fix broken DHCPv6 userclass data in DHCP script.

simonkelley
authored and
DL6ER
committed
New heuristic for disabling DNSSEC for domain-specific nameservers.

simonkelley
authored and
DL6ER
committed
Further tidying of DHCPv6 packet dissection code.

simonkelley
authored and
DL6ER
committed
Update dnsmasq tag fo 2.93test8
DL6ER
committed
Move logging on TCP timeout from child process to main process.

simonkelley
authored and
DL6ER
committed
Tighten check on TFTP pathnames to avoid directory escape.

simonkelley
authored and
DL6ER
committed
OOB buffer check with DNS bitstring labels.

simonkelley
authored and
DL6ER
committed
Sanity checking on DNS replies via TCP.

simonkelley
authored and
DL6ER
committed
Check DNS query via TCP doesn't have QR bit set.

simonkelley
authored and
DL6ER
committed
Fix 1-byte buffer overflow in relay_reply4()

simonkelley
authored and
DL6ER
committed
Update dnsmasq version to v2.93test9
DL6ER
committed
Bump copyrights to 2026.

simonkelley
authored and
DL6ER
committed
Tweak DHCPv6 replay decapsulation.

simonkelley
authored and
DL6ER
committed
Fix crash with mal-formed config option.

Toliak
authored and
DL6ER
committed
Fix buffer overlow in log_query()

simonkelley
authored and
DL6ER
committed
Preserve existing log file permissions when adding group-write bit.

authored and
DL6ER
committed
Fix memory leak reading ARP cache on *BSD.

simonkelley
authored and
DL6ER
committed
Add support for IPV6 when reading ARP/ND table on *BSD.

sagie-d
authored and
DL6ER
committed
Fix OOB read when parsing DHCPv6 userclass or vendorclass options.

simonkelley
authored and
DL6ER
committed
Fix OOB read/write of rr_status.

simonkelley
authored and
DL6ER
committed
fix: zero correct byte count in expand_workspace_real()
DL6ER
committed
fix: move fd-match guard out of loop in reply_query()
DL6ER
committed
fix: rand64() must share global outleft with rand16()/rand32()
DL6ER
committed
fix: NUL-terminate buf in prettyprint_time() when t == 0
DL6ER
committed
helper: fix OOB read in grab_extradata_lua bounds check
DL6ER
committed
rfc2131: fix off-by-one in BOOTP filename netid NUL termination
DL6ER
committed
dhcp-common: bounds-check label index before reading in OT_RFC1035_NAME decoder
DL6ER
committed
dhcp-common: fix OOB reads in DHCPv6 option_string() decoders
DL6ER
committed
rfc3315: fix integer underflow and heap overflow in log6_opts STATUS_CODE
DL6ER
committed
edns0: bounds-check option length before memcmp in check_source()
DL6ER
committed
lease: check parse_hex() return value before use as length

DL6ER
and
claude
committed
domain: fix strncat buffer-size argument in is_rev_synth()
DL6ER
committed
dump: check lseek() return in pcap record-counting loop
DL6ER
committed
Rework storage allocation for domain names. CVE-2026-2291

simonkelley
authored and
DL6ER
committed
Fix NSEC bitmap parsing infinite loop. CVE-2026-4890

simonkelley
authored and
DL6ER
committed
Verify rdlen field in RRSIG packets. CVE-2026-4891

simonkelley
authored and
DL6ER
committed
Fix buffer overflow in helper.c with large CLIDs. CVE-2026-4892

simonkelley
authored and
DL6ER
committed
Fix broken client subnet validation. CVE-2026-4893

simonkelley
authored and
DL6ER
committed
Updates to a345b075b3b8696a18631b46e53ab654354ed961 following review.

simonkelley
authored and
DL6ER
committed
Fix buffer overflow vulnerability in extract_addresses() CVE-2026-5172

simonkelley
authored and
DL6ER
committed
Sync 3ea905b98b8756f0652a9626a98384e96bab3a97 with 7cd050075ea73cd7707fce5b70f0fec25f722f67

simonkelley
authored and
DL6ER
committed
Fix problen in from_wire() when names contain escape chars.

simonkelley
authored and
DL6ER
committed
Fix buffer OOB read in find_soa()

dolitli
authored and
DL6ER
committed
Update ftl-build container and dnsmasq tag
DL6ER
committed
Merge branch 'development' into update/dnsmasq
DL6ER
committed

Uh oh!

Commits

Commits on May 11, 2026