DNS parser, meet Go fuzzer
Aug 6, 2015Filippo Valsorda
Summary
This post details the application of go-fuzz to the miekg/dns library, uncovering and fixing bugs related to DNS packet parsing, pointer handling, and potential Denial of Service vulnerabilities. It also demonstrates how fuzzing can be used to compare the behavior of different parser versions and identify issues with buffer reuse in packing functions.
More from the DNS Infrastructure & Naming Conventions trail
- The keys to the Internet change on October 11, 2026. Are you ready?
- 1.1.1.1 now supports post-quantum DNSSEC, all 2,420 bytes of it
- How we saved 100 terabytes of memory by optimizing 1.1.1.1’s DNS cache
- BGP ORIGIN attribute manipulation and its impact on the Internet
- Cloudflare Internal DNS is now generally available