danieldg/inspircd — pull request #2 by nenolod (2012-03-20 23:44:26+00:00)
Title: harden DNS resolver (insp20 branch)

these commits harden the DNS resolver to fix the CERT bug.

new changes:

- don't explicitly trust rr.rdlength
- validate lengths on decompression (using same behaviour as charybdis)
- check A/AAAA replies too, as they could be exploited using similar technique