Re: BIND is Crying Out for Ada95

["Warren W. Gay VE3WWG" <ve3wwg@home.com>]

Florian Weimer wrote:
> 
> "Warren W. Gay VE3WWG" <ve3wwg@home.com> writes:
> 
> > If someone has the time, here is a perfect chance to put Ada95
> > into the forefront, with a well written Ada95 version of BIND,
> > with fewer weekly exploits. It provides an essential service
> > for just about ALL networked systems today (what an opportunity ;-)
> 
> Ada wouldn't help here. Even if your DNS name server is more reliable,
> DNS will still be subject to all kinds of attacks, because not only
> BIND is insecure, the DNS protocol is inadequate, too.

I disagree. Its not hard find vulnerabilities like this example:

Vulnerability #5: the "maxdname bug"

Improper handling of certain data copied from the network could allow 
a remote intruder to disrupt the normal operation of your name server, possibly
including a crash. 

I'll bet, if we look at the code, its related to such things as exceeding
C array bounds and other C-evils.

I'm not saying Ada is a cure-all -- but I think it has a lot to offer
in this area.

-- 
Warren W. Gay VE3WWG
http://members.home.net/ve3wwg